last executing test programs: 4.277159102s ago: executing program 2 (id=8979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r2, 0x8000002, {0x0, 0x0, 0x4}, 0xfd}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r5, 0x3, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="0a6501d3a4f74bd627e7e993e55da8fd2f66421ed1213b599ca5801d079f4b9699a8367b0b9e12f1553495c15307c34659743c6d315373a60171ffb543316d383df1dd837bf8", 0x46}], 0x1}}], 0x1, 0x48010) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 4.179301477s ago: executing program 2 (id=8985): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x6b1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x68001, 0x3f00) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}, {&(0x7f0000000500)}, {0x0}, {&(0x7f0000000380)="829cb36417dc5bbabc6dea1984059147036d59bef62160fb089910b373a882fe35127de2b47bf625ab6b2c6c6828bea3d3b726181a884de0c3f21f21a356", 0x3e}, {&(0x7f00000006c0)="eada7de60683c49ea4776e23be2dc57e7917725af1f997d806a6a9e3e3e2645554248a198d9058edba05ca19bbdfaeb5289328e6d3f094018923399dbdfe93a36a02b69ee5134e1101a0c2b73692d61f65", 0x51}, {&(0x7f0000000740)="aa5d2b47e655c80aab0264aa20b2f9987faa288f9177f0527f62956bfb77ae4b976fb275d0fd2c524ac08874687199c1a7d4413427fcd34b251f", 0x3a}], 0x6}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) close(0x3) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x28, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.141526289s ago: executing program 2 (id=8987): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000b40)="2f67bf2c04274510de3bab064e8dd5589cbf59bfe393a7b8733dfe36ba6d39c63b8dacc58b21ddd4fe0b6dc1707ee2843a395b79586db3257d9f98fda1c450b4063fefb942", 0x45}], 0x1}, 0x894) 3.964661439s ago: executing program 2 (id=8992): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x4, 0x10, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) 3.94761147s ago: executing program 2 (id=8993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1.333213879s ago: executing program 1 (id=9046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xbc42, 0x7, 0x8000, 0x5, 0xfd, 0x4a0e, 0x7ff, 0x7809, 0x7, 0x1, 0x0, 0x13, 0x1, 0x7, 0x17, 0x6, 0x5a2d4cd1, 0xa000000, 0x748e, 0x9, 0x3, 0x80, 0x4, 0x0, 0x1ff, 0xffff, 0x0, 0x9, 0x1, 0x4, 0x101, 0x80000000, 0x8fc, 0x9, 0x7ff, 0x3, 0xfff, 0x3, 0x9, 0x401, 0x7, 0x5, 0x7, 0x6, 0xd4e, 0x1, 0xfff, 0x0, 0x5e87, 0x1, 0x5, 0x4, 0x5, 0xb, 0x81, 0x9, 0x3, 0xc7bb, 0xd1, 0x7, 0x2, 0x5, 0x1, 0x8, 0x7, 0x8, 0x6, 0x1, 0x1, 0x6, 0x3695, 0xb, 0x9, 0x4, 0x2e6d, 0x80000001, 0x4, 0x6, 0x401, 0x6, 0x6, 0x9, 0xb, 0x100, 0x0, 0x10000, 0x1, 0x7, 0x101, 0x1000, 0xfffffff7, 0x9, 0x25, 0x4, 0x80000000, 0x7ff, 0x85, 0x6, 0xfffffff8, 0xc8000000, 0xaab, 0xa5, 0x1, 0x5, 0x3, 0x2, 0xd48d0000, 0x5, 0x0, 0x4ce, 0x6, 0x2, 0x5, 0xbdd, 0xffff, 0x7fff, 0x9, 0x40, 0x7, 0x80e, 0x9, 0x8, 0x8, 0x0, 0xfff, 0x10000, 0x1, 0x2, 0xa, 0x9, 0x6, 0x10, 0x6, 0x100, 0x6, 0xfffffff7, 0x0, 0x70, 0x7f, 0x3, 0x6, 0x32d, 0x9d43, 0x80, 0x9, 0x9, 0x432, 0x6, 0x1, 0x6, 0x0, 0x9, 0x2, 0x6, 0x2, 0x7fab, 0x200, 0xd90000, 0x238b2750, 0x101, 0x6, 0x3, 0x0, 0x9, 0x0, 0x2, 0x0, 0x4, 0x8c, 0xff, 0x3, 0xe, 0x0, 0x4, 0x400, 0x0, 0x3, 0xe771, 0x7ff, 0x7fff, 0x4, 0x7fffffff, 0x81, 0x7fff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xfa3b, 0x9, 0x7, 0x3, 0x6, 0x3, 0x6, 0xb, 0x5, 0x5, 0x80000000, 0x3, 0x8000, 0x1, 0x5, 0x7, 0x3, 0xfffffff8, 0x8, 0x5, 0x7fff, 0x8, 0x6, 0x0, 0x7, 0x8, 0xe84e, 0x265, 0x7f, 0xa, 0x3a9b8000, 0x9, 0x2, 0xd, 0x4, 0x8, 0x5, 0x100, 0x53, 0x100, 0xdb15, 0x0, 0x5b, 0x3755, 0xfffff000, 0x0, 0x5, 0x7, 0x4, 0x401, 0x9, 0x4, 0x140, 0xb, 0x6, 0x80, 0x7, 0x2, 0x7, 0x0, 0x4, 0x88, 0x2, 0x4, 0xd37, 0x80000001, 0x10000]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x1, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x26, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x400, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x4, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.259464863s ago: executing program 1 (id=9047): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000b40)="2f67bf2c04274510de3bab064e8dd5589cbf59bfe393a7b8733dfe36ba6d39c63b8dacc58b21ddd4fe0b6dc1707ee2843a395b79586db3257d9f98fda1c450b4063fefb942", 0x45}], 0x1}, 0x894) 1.151194499s ago: executing program 1 (id=9048): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x7f800000, 0xf7, 0x13eac0, 0xd, 0x7}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x4e, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x4, 0x2, 0xc}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x88c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x5, 0x7fffffff, 0x6, 0x4, 0x7fffffff, 0x6752, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4) 1.063420234s ago: executing program 1 (id=9051): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xf, 0x5}}, @TCA_FLOW_EMATCHES={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4091}, 0x24040084) 1.002315107s ago: executing program 1 (id=9055): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r2, 0x8000002, {0x0, 0x0, 0x4}, 0xfd}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r5, 0x3, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="0a6501d3a4f74bd627e7e993e55da8fd2f6642", 0x13}], 0x1}}], 0x1, 0x48010) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 894.482853ms ago: executing program 1 (id=9057): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r3 = io_uring_setup(0x7ba4, &(0x7f0000000140)={0x0, 0x12f9, 0x1, 0x2001, 0x36a}) io_uring_enter(r3, 0x6972, 0xefd7, 0x2, &(0x7f0000000080)={[0x669e]}, 0x8) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x24, @loopback}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000480)="9e1bff8ead93d0a6f887248ccade03b344f223362a30dffb4b236d9fb910bab39a957c91c36ed402930bd21d9b4a5ba5742c7f", 0x33}], 0x1) 831.536726ms ago: executing program 0 (id=9061): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, 0x0, 0x80) 750.637621ms ago: executing program 0 (id=9062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900"], 0x58}}, 0x2) 749.982541ms ago: executing program 0 (id=9063): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 699.832213ms ago: executing program 0 (id=9064): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000000)=0x3) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1400000000000000000000000700007ddafd129cb0000702"], 0x18}}], 0x2, 0x8000004) socket$isdn(0x22, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000480)={0xddc, 0x19, 0x200, 0x70bd25, 0x25dfdbfd, {0x1e}, [@generic="f09ad610ce6bf4d6c4b9cfc53f93f8c368980f0faa65f17d9ffa9e85373169e9228ff03bc16c631899180180b467a86aa06a958901cf9de909a05bdc088bdb3c8331b54ed243832dece5f9c247957f671cc0d35dca1bbe039d6ef2cf867a89176e81cb21ffeb05990cfb7f5f7c508fc0fa05cbc8bb15b8c707f090504c56b7fc3b112e550f5c9602705663ff4f7571ea9c41ed915f8443f7530b95869814b0ef971b027248dd1b472adf63459422163de65808af3e4c10066211564907ee3c51eb4c2d15a2dac736c4443054213d6ece832c1e53d651b1b829e18909070816453e8ab7678901b675c74bb14426823de0e21437487c21f45c8ba1185d24d638127d6ce3b09d6e0bfb586fc4ab42e68e451b9b3e4c1bb28f245ec65c8a0628b4d9d78a842ed7dfba08d9294cc45364fc86fb612ace8ef11e7d6fada6a5eed782e2dc7d4757de674613cf052ba906d32a78fe21dbf34189bcf5da81bb2137d970b0d70d8c8e7bda23480c2dde92b12357377e86fbb4b9f7479ebecb31d689538cba8143b867b7c14c6b656fc07b5976d6e724ab4acc668ced8eb0c8cc45c3d90ec5489b8e7a581adca44947e4ab5e026818f31ac5a0f9816f1812def37d58ca5c777d0d1205a22af613adbf824583acc2655d4bd00b241286a6c1574efb2684f661d58fc5141c2a75e034a9288c1231b5b2fc43cc1bdae2e8f1555946964e8f2ee5e54d001b4d6654aa2eb5d94a3c546c7bec52f782a50e503adff8efc37b93f249cfde22866c5e93d62a3a2d9c6ca6606a46369c46ee736a0f54d4989e47d425b371c2f25592bb2686348c8a3b42f92bd4f157fdbc48373c5f4edcd80ac5dac21b13d532aa5f356081afa947fab42f9cd849e71c37f36d57c243abb315c31b0d7ac66ec2bc211d10e0b6c04ce63d32bd2d2417cdb93754ab560bc04bc80634b25918daf91d10eab9d973a98b13db42402b861cf95996171e7a123c166a25e81ad799bf3bc48bff1a7b13923d6fcde78a567c48d6ce1b5bf2fd033d10ce9c3ba8fd768ca0df68bb14f6fd25579e70986f92a3c22124995f22c9ecca30c1a0c2214cceffb614f8f62912d0b89edbb864cd143eeefc3f685d6cb6bc84ffe13979a657c71968995c6d45147e104d1000e9627576ee32f9d81d17bcb7b34335a582eb9ff5fd9e2647a4e8315a0619bf2185b408c7a90a6e768618b1284ceaaf127b0ca941d5089a2a543394ce13881bf1531fddb751214d5cee59bf480b344d2269087463cd16f316ad7531eb8f6f077ac0a109dbf03d50ae409a808d5d663abdc01599ab6b6eab217d687a5b366a529b31adb17bf4ce3ba7cde0935b2fcbc2ec4bf3183813aa7433b9602ba8f1cec78e7d1f985d9473f5bcd39dd9474569c7c25aa10c9935af8d9067c6576cc3b969457222cda9c158076b5649c5bec96b1b777e5db82e323c7a3f75036c10d0758ec409da1566939fb095670e3cf0c336f6a514db4a2151f39f6a5e711a763eca838efbde03a398258dace313066ccd0b7495f74b37053b024e234dfe4b66e03f55665a35e8e3c119790830953e8aa19c674f4f6a9a55c8c557d5ca314667019626047ef6f8fc3857ada97a8e128dbdd603aee39defbcdad88dacefc483f975a8a1f483d44eaa0013046780bdca05842db7dba07413cbce45cf0bd4c6ce0c1899a834e99507f0a827b7e35dddb65734402f2d5e4cc086ad9e2d70074e8f3da22a7ff189243dff554a9de18b7ca3d65b0692e39bf7e5071f519412cdb3539a942ba6fa8088c52366efe6e23bbed118b88bbf9df7cb3ba7a3df68f22530bd6f49dd465db7a9e4d4278bd2915def16a8263b9b76dee074d4a2582aafb0e322cf2e3303dd306b5893f81f0ffb5c5c7558860d66be37f9559044778e48c0d9112cc36b7b0c0489eff9265f9bae4517eb1696a1e01888a603e799d6116f324365f7297c55cc1c64a88852072db54281edca67e3cf9faad6be1264d2b41aee8f0c23daced7ed115813ddeed3b1aac3ac7b373caa4d23e022c94c49265ba850b217d01e444e3c90a83cbdd63dbc562486ee1af6c8ab244092d6dcf843520b17f1abcadf4f31834d3c0311a7fbfa1bcac6969b72ef4de9fafe880a1549604b57bd67324662805384a4d3d64470ffd4ad4d41b100cfe9660f193331911210644ab61a08830b27f04aa8472f75de8635d2b88bed3a0cca9151d0e2f77e9cbf8cf188980777eeca1896773e09489714fd4c8a2a6838f5f65d7e3c058d4386af77c1b4c83811ef52d8e104a216e84ce3e5928698db97dee2fa6abdb72136a09f11b1b227bb8c2565e9f39e0d97874a6c797e6e34292d1f226aa86786fa7cf2728c265df72b95eb72cb7dae795638f27e982ef5fbd92e4e63ce39485d4ee03cf7ffa80f135c769111a859c8068b66c22e8c3d8e3db96d86939ea72afe04822d1287876aeef0b11dcc2a1b398f0f34a6edcd99297e69a0e3fe15213cf8deea35a7eadf4ebf0c4413e4d0bd49a9881e19b1e10921c2ec60fd3e21c79870a11c147cd49b7b5a5a4aa903d2fc160adc5948f66d41010d4e48b238863d0a2ff4cda34e8d8462f62e17bafd53b58ecf38411c7d4b08945ff30e09d2660f7c7e5d5addaae2b1a024bf93dfef76e6445f6c7c2a68ea3593cd81c4d18c49a41cac45f5513e09154ff5e2b8dd3c9aa44e91dfad0932fc01c85a4ef7279b44ca6772afefb1f91d5ca03e625c30fd52d600fa7e198bedcfe89cb57e38fbaaa9c4d33ebecec63a3f724021bf45aa5b6857284284ae7bea3d169325a9fd57aa9a4f5cb09f62783260cfa3866635c352b00250b2510cb0e35508743555d481bc7700d94bf4e2e9c1dc5ca64d593777d1106d341ae6b19bdf6b975b85fbb79137c4f38696f2ae7ac2019420f2e130ae3acec9045546ded96aa05a8a965022f6cd4465d3f30320ab540d5fedcbed9e7a3685c2411cd6efc8be18541afe681e64a3f8523e99e581a268d50870c7a5568f5d560be253c3ce5ab2572ff352248e7d46ff901975f17f8d8eb3a04f9b508cecc2d7f2eb4b22247c8711c2a13d2fef826e8e6a86460f7b6d95248599d0d13dc23f32bb0870bb4704af46a787087658528e7b8edb8e3d04c902af83b1d5c66d8ad48cae66e9270ab2abccc50a1bb89d27a4c5250f4a78254d8d9cef3d4fb1ce63419d385cf338eacef1b0cf04ccb386572efa17884a2e437f3c0ab200a0ca41464c3a257a2f83e66081f0d157807ba89a460a58cb83fa23a89a887aaab7fb8dc83a908df912fcb4dd06ff90d1d95f67c44de2f8c808d774f160f20b497b486eef20e87df4e227a90d78ed37de566cd19d8f58c2ba1f060c97b29e661426427b02356041fbc6b7fe328471f7cb5c27a394b024ef7b846fd84a2e4ed3894e9cce914f42159af5cf3a75fad0b5ae9ee403c573ffe122e019c572090b73b8cf54eaedd6241c3abf882cf9b89eb8e58ddedb0f284fae3a66cb98f1e661e6cc469c5648c974c0ee470b676db3374251329998fad479a85aacdf7848bbc11cbbedd496dac24914b6eff782584a8e64498c47d96aa80b05ab0ce3eae3eb4e510d6629e483a904fb110763b9314e24a6677ed8c6ebf0100d6338fe4a20a0f330f316c52603039d329b5032760de6b01ca053b553376389ec3e997474e73ed6a316380f23b9744f32ab19158857466966409e50ca2b6620c1c8e9c5116ae9d59484378ee4a2adfd8cdca1d1a2eb0249faec0fddd4b2c628e7d7ed7532c0341892e9ac8dd6de627a2844c1624943ea89d86ada71939bd5b515099d157a8e8359bd809c3c5e3a4a3541fdf9d0e1838b5e257120edb98de52962b51f402b94cfc10e808ae36d3866333201fd34264b49155538f1d4199c47598e36e0c698f6205487dda2be865ad1c765f47dd05b00597d6259ebdc5705682dd05bc66b65177cd027351bc909199c6313766654e8992a93d65a84bf7c73ff38e0894f0b2dbce0d2d57b2eec639b789e77f78b42b0f5ed66fe4cacb4edcbc928ad7c13768003aad5ee6c52221994d59be6e076834266970dda6fc9bf6751b48bd87cda5d94c462f869070be09716658c9bf14ccf25925aba2d1400df292aac05c910d7c47a3c747df4b1e89da60e435422fad3a25238c0c4ea6b49135123c05b42311c3654a935f6d254b34860b38452aaf8304622f37cbb3714ed6dd9ee920df0610405689422f2724cb39cefeeee2624296d1e73af06c68c6aa72e771e5d55aeb671d57e54991d9fa3d5bf6669de5df383051a3c92c7d50325c1a583fa5ab2e9460e4243650bcc3531aed5ca2e2985688fe3f2651eb535b5b413f6d832694b9d7942ff45cefb105f1df7da0845e8c0272794b779e1f323230815c6e6371420f923d7048b6cb60a21ec20428faf14dddf9c7495ceca910f1f7ab42b8cc1a0db47f2c460672eb5e91b4198ae431156af9de0e0948ee2e90860e8dfd1cc872773efd3f096f0c5868bae44d926e32cc8dea019424dd260ed901e47673bd50a973092bc6e4889900f63da237b6ccdc573f3075b47a48e9a129c3671a47d73c7d4461b93bd42b10cc9103f6fa2d10f87ec1fea9132a6f06bde1cde822a874eb617d6fe129ea0dea8c898af38f77d0dda98869a7019ba1969de72887914685a3c1ef466919980a8bfec84569f6220e0ce2f9bb0e216efc6cfc3313e561f6763af578c3b87d00e8734dfc3b54098812f3e659b4d9bae684a8fe4504950f211764f9f76f607ee2dae99357a00c5c69c20b8fe7a1576f43204e4e919640cc97747f8dde438a508d9ad4a9ab9443a43bd452924b352ad46acfa91c28b43a001152143493639edec0d506fb4bf848fd5426d44259e6b7b16a18cdd2b85d75af9c7f1ac55755bb490c2517d35dbfd706a80cfaba67d100840b1ae219ee9d3a4e2e2bd82504c6fe2b8dc69f0937ca341523b94d9536f386862e3d50cc7f625404fcbfcbc8cb530c156ace365e8d2cec61f"]}, 0xddc}, 0x1, 0x0, 0x0, 0x4000}, 0x40049) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x9, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 699.368343ms ago: executing program 4 (id=9065): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 657.443246ms ago: executing program 4 (id=9066): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/240, 0xf0}, {0x0}], 0x2}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) 410.781239ms ago: executing program 3 (id=9067): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x4, 0x10, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) 409.958829ms ago: executing program 0 (id=9068): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44080}, 0x4004014) 375.70964ms ago: executing program 0 (id=9069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8400, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x7, {{0x42, 0x3}, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="4260ee85e8d05b33d3a13587", 0xc}, {0x0}, {&(0x7f00000002c0)}], 0x3, &(0x7f00000003c0), 0x0, 0x805}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000001080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 375.19378ms ago: executing program 3 (id=9070): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac86fa3e823bff705acd"], 0x3c}}, 0x8000) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) 293.280565ms ago: executing program 4 (id=9071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1}}}}}}, 0x0) 278.580365ms ago: executing program 3 (id=9072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 251.479517ms ago: executing program 4 (id=9073): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="469dc2d34ae2b700000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 250.918997ms ago: executing program 3 (id=9074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 156.540902ms ago: executing program 3 (id=9075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xbc42, 0x7, 0x8000, 0x5, 0xfd, 0x4a0e, 0x7ff, 0x7809, 0x7, 0x1, 0x0, 0x13, 0x1, 0x7, 0x17, 0x6, 0x5a2d4cd1, 0xa000000, 0x748e, 0x9, 0x3, 0x80, 0x4, 0x0, 0x1ff, 0xffff, 0x0, 0x9, 0x1, 0x4, 0x101, 0x80000000, 0x8fc, 0x9, 0x7ff, 0x3, 0xfff, 0x3, 0x9, 0x401, 0x7, 0x5, 0x7, 0x6, 0xd4e, 0x1, 0xfff, 0x0, 0x5e87, 0x1, 0x5, 0x4, 0x5, 0xb, 0x81, 0x9, 0x3, 0xc7bb, 0xd1, 0x7, 0x2, 0x5, 0x1, 0x8, 0x7, 0x8, 0x6, 0x1, 0x1, 0x6, 0x3695, 0xb, 0x9, 0x4, 0x2e6d, 0x80000001, 0x4, 0x6, 0x401, 0x6, 0x6, 0x9, 0xb, 0x100, 0x0, 0x10000, 0x1, 0x7, 0x101, 0x1000, 0xfffffff7, 0x9, 0x25, 0x4, 0x80000000, 0x7ff, 0x85, 0x6, 0xfffffff8, 0xc8000000, 0xaab, 0xa5, 0x1, 0x5, 0x3, 0x2, 0xd48d0000, 0x5, 0x0, 0x4ce, 0x6, 0x2, 0x5, 0xbdd, 0xffff, 0x7fff, 0x9, 0x40, 0x7, 0x80e, 0x9, 0x8, 0x8, 0x0, 0xfff, 0x10000, 0x1, 0x2, 0xa, 0x9, 0x6, 0x10, 0x6, 0x100, 0x6, 0xfffffff7, 0x0, 0x70, 0x7f, 0x3, 0x6, 0x32d, 0x9d43, 0x80, 0x9, 0x9, 0x432, 0x6, 0x1, 0x6, 0x0, 0x9, 0x2, 0x6, 0x2, 0x7fab, 0x200, 0xd90000, 0x238b2750, 0x101, 0x6, 0x3, 0x0, 0x9, 0x0, 0x2, 0x0, 0x4, 0x8c, 0xff, 0x3, 0xe, 0x0, 0x4, 0x400, 0x0, 0x3, 0xe771, 0x7ff, 0x7fff, 0x4, 0x7fffffff, 0x81, 0x7fff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xfa3b, 0x9, 0x7, 0x3, 0x6, 0x3, 0x6, 0xb, 0x5, 0x5, 0x80000000, 0x3, 0x8000, 0x1, 0x5, 0x7, 0x3, 0xfffffff8, 0x8, 0x5, 0x7fff, 0x8, 0x6, 0x0, 0x7, 0x8, 0xe84e, 0x265, 0x7f, 0xa, 0x3a9b8000, 0x9, 0x2, 0xd, 0x4, 0x8, 0x5, 0x100, 0x53, 0x100, 0xdb15, 0x0, 0x5b, 0x3755, 0xfffff000, 0x0, 0x5, 0x7, 0x4, 0x401, 0x9, 0x4, 0x140, 0xb, 0x6, 0x80, 0x7, 0x2, 0x7, 0x0, 0x4, 0x88, 0x2, 0x4, 0xd37, 0x80000001, 0x10000]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x1, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x26, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x400, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x4, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 156.012052ms ago: executing program 4 (id=9076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r2, 0x8000002, {0x0, 0x0, 0x4}, 0xfd}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r5, 0x3, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="0a6501d3a4f74bd627e7e993e55da8fd2f66421ed1213b599ca5801d", 0x1c}], 0x1}}], 0x1, 0x48010) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 92.106825ms ago: executing program 3 (id=9077): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x7f800000, 0xf7, 0x13eac0, 0xd, 0x7}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x4e, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x4, 0x2, 0xc}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x88c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffe0, 0xb}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x5, 0x7fffffff, 0x6, 0x4, 0x7fffffff, 0x6752, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4) 24.981419ms ago: executing program 4 (id=9078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 0s ago: executing program 2 (id=8994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0xffffe000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x341000, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x5]}, {0x4, 0x2, 0xff}}, 0x101, 0x0, &(0x7f0000000180)=0x1d}, {[0x68f7, 0x4, 0x7, 0x9]}, 0x57, 0x32, &(0x7f00000001c0)=""/50}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) kernel console output (not intermixed with test programs): tlink: 16 bytes leftover after parsing attributes in process `syz.0.7064'. [ 450.817515][T21638] netlink: 'syz.2.7068': attribute type 10 has an invalid length. [ 450.825499][T21638] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.7068'. [ 451.017830][T21658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7076'. [ 451.109633][T21662] netlink: 'syz.3.7078': attribute type 29 has an invalid length. [ 451.263111][T21684] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7088'. [ 451.442010][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7091'. [ 451.697772][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7096'. [ 451.721355][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7096'. [ 451.748144][T21713] syzkaller0: entered promiscuous mode [ 451.758159][T21713] syzkaller0: entered allmulticast mode [ 452.619584][T21746] syzkaller0: entered promiscuous mode [ 452.625263][T21746] syzkaller0: entered allmulticast mode [ 453.343297][T21800] syzkaller0: entered promiscuous mode [ 453.359080][T21800] syzkaller0: entered allmulticast mode [ 453.464476][ T6523] bridge_slave_1: left allmulticast mode [ 453.475029][ T6523] bridge_slave_1: left promiscuous mode [ 453.482081][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.490310][ T6523] bridge_slave_0: left allmulticast mode [ 453.496148][ T6523] bridge_slave_0: left promiscuous mode [ 453.501899][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.511360][ T6523] veth0_to_bridge: left allmulticast mode [ 453.525279][ T6523] veth0_to_bridge: left promiscuous mode [ 453.531563][ T6523] bridge0: port 3(veth0_to_bridge) entered disabled state [ 453.541563][ T6523] bridge_slave_1: left allmulticast mode [ 453.552572][ T6523] bridge_slave_1: left promiscuous mode [ 453.563981][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.577298][ T6523] bridge_slave_0: left allmulticast mode [ 453.585865][ T6523] bridge_slave_0: left promiscuous mode [ 453.593250][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.738595][ T6523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.750359][ T6523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.760687][ T6523] bond0 (unregistering): Released all slaves [ 453.769167][ T6523] bond1 (unregistering): (slave dummy0): Releasing active interface [ 453.778835][ T6523] bond1 (unregistering): Released all slaves [ 453.862480][ T6523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.875131][ T6523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.888427][ T6523] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 453.898383][ T6523] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 453.907880][ T6523] bond0 (unregistering): Released all slaves [ 453.970074][T21825] syzkaller0: entered promiscuous mode [ 453.975971][T21825] syzkaller0: entered allmulticast mode [ 453.990906][ T6523] hsr_slave_0: left promiscuous mode [ 454.007141][ T6523] hsr_slave_1: left promiscuous mode [ 454.030755][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.044494][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.068516][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.080116][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.116127][ T6523] hsr_slave_0: left promiscuous mode [ 454.146149][ T6523] hsr_slave_1: left promiscuous mode [ 454.167999][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.182033][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.200308][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.232427][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.253740][ T6523] veth1_macvtap: left promiscuous mode [ 454.266723][ T6523] veth0_macvtap: left promiscuous mode [ 454.276612][ T6523] veth1_vlan: left allmulticast mode [ 454.297392][ T6523] veth1_vlan: left promiscuous mode [ 454.308523][ T6523] veth0_vlan: left promiscuous mode [ 454.322895][ T6523] veth1_macvtap: left promiscuous mode [ 454.339555][ T6523] veth0_macvtap: left promiscuous mode [ 454.349476][ T6523] veth1_vlan: left promiscuous mode [ 454.361895][ T6523] veth0_vlan: left promiscuous mode [ 454.514266][ T6523] team0 (unregistering): Port device macvlan1 removed [ 454.570590][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 454.581992][ T6523] team0 (unregistering): Port device team_slave_0 removed [ 454.701573][ T6523] team_slave_1 (unregistering): left promiscuous mode [ 454.715891][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 454.732041][ T6523] team_slave_0 (unregistering): left promiscuous mode [ 454.739396][ T6523] team0 (unregistering): Port device team_slave_0 removed [ 454.931163][T21889] __nla_validate_parse: 13 callbacks suppressed [ 454.931180][T21889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7160'. [ 454.947468][T21889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7160'. [ 455.153153][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7164'. [ 455.176651][ T28] audit: type=1400 audit(1776802822.192:497): avc: denied { create } for pid=21909 comm="syz.3.7169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 455.202833][T21908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7164'. [ 455.222558][ T28] audit: type=1400 audit(1776802822.229:498): avc: denied { create } for pid=21911 comm="syz.2.7170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 455.368051][T21922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.585192][T21939] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7181'. [ 455.734094][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7182'. [ 455.747886][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7182'. [ 455.815572][ T28] audit: type=1400 audit(1776802822.791:499): avc: denied { name_connect } for pid=21972 comm="syz.4.7193" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 455.968124][T21988] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7198'. [ 455.992180][T21988] syzkaller0: entered promiscuous mode [ 455.997887][T21988] syzkaller0: entered allmulticast mode [ 456.613633][T22017] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7211'. [ 456.761543][T22025] validate_nla: 3 callbacks suppressed [ 456.761572][T22025] netlink: 'syz.3.7215': attribute type 10 has an invalid length. [ 456.785634][T22025] team0: Port device macvlan1 added [ 456.837438][T22036] syzkaller0: entered promiscuous mode [ 456.892849][T22046] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7222'. [ 457.296677][T22085] netlink: 'syz.2.7241': attribute type 6 has an invalid length. [ 457.310497][T22081] syzkaller0: entered promiscuous mode [ 457.316124][T22081] syzkaller0: entered allmulticast mode [ 458.795547][T22159] netlink: 'syz.2.7273': attribute type 29 has an invalid length. [ 458.804111][T22159] netlink: 'syz.2.7273': attribute type 29 has an invalid length. [ 459.491640][T22197] netlink: 'syz.4.7289': attribute type 29 has an invalid length. [ 459.501181][T22197] netlink: 'syz.4.7289': attribute type 29 has an invalid length. [ 460.395091][T22232] __nla_validate_parse: 5 callbacks suppressed [ 460.395123][T22232] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7305'. [ 460.449054][ T28] audit: type=1400 audit(1776802827.131:500): avc: denied { setopt } for pid=22225 comm="syz.1.7302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.613477][T22242] netlink: 'syz.0.7309': attribute type 2 has an invalid length. [ 460.642345][T22242] netlink: 'syz.0.7309': attribute type 8 has an invalid length. [ 460.664552][T22242] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7309'. [ 460.686004][T22247] netlink: 'syz.0.7309': attribute type 2 has an invalid length. [ 460.703322][T22247] netlink: 'syz.0.7309': attribute type 8 has an invalid length. [ 460.723921][T22247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7309'. [ 460.968197][T22257] blkio.reset_stats is deprecated [ 461.399543][T22267] netlink: 88 bytes leftover after parsing attributes in process `syz.3.7318'. [ 462.285201][T22317] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7337'. [ 462.305080][ T28] audit: type=1400 audit(1776802828.861:501): avc: denied { read } for pid=22310 comm="syz.3.7334" lport=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 462.832038][ T28] audit: type=1400 audit(1776802829.367:502): avc: denied { read } for pid=22361 comm="syz.0.7355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 464.533787][T22425] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.7377'. [ 465.220035][T22466] netlink: 61963 bytes leftover after parsing attributes in process `syz.4.7395'. [ 465.607620][T22504] validate_nla: 2 callbacks suppressed [ 465.607637][T22504] netlink: 'syz.4.7407': attribute type 29 has an invalid length. [ 465.622389][T22504] netlink: 'syz.4.7407': attribute type 29 has an invalid length. [ 465.723487][T22507] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.7410'. [ 465.808349][ T28] audit: type=1400 audit(1776802832.145:503): avc: denied { read } for pid=22513 comm="syz.0.7412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 465.978746][T22535] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.7422'. [ 466.112807][T22547] syzkaller0: entered promiscuous mode [ 466.119891][T22547] syzkaller0: entered allmulticast mode [ 466.127397][T22549] netlink: 'syz.0.7427': attribute type 29 has an invalid length. [ 466.137074][T22549] netlink: 'syz.0.7427': attribute type 29 has an invalid length. [ 466.155467][T22549] netlink: 'syz.0.7427': attribute type 29 has an invalid length. [ 466.269310][T22559] netlink: 'syz.1.7432': attribute type 10 has an invalid length. [ 466.506137][T22575] syzkaller0: entered promiscuous mode [ 466.511830][T22575] syzkaller0: entered allmulticast mode [ 466.574746][T22581] syzkaller0: entered promiscuous mode [ 466.580339][T22581] syzkaller0: entered allmulticast mode [ 466.587654][T22584] netlink: 'syz.0.7444': attribute type 29 has an invalid length. [ 466.599685][T22584] netlink: 'syz.0.7444': attribute type 29 has an invalid length. [ 466.654176][T22592] netlink: 'syz.3.7448': attribute type 10 has an invalid length. [ 466.787112][T22609] netlink: 'syz.0.7456': attribute type 10 has an invalid length. [ 466.795652][T22609] hsr0: entered promiscuous mode [ 466.810052][T22609] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 466.835281][T22609] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 466.854202][T22609] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 466.954073][T22626] syzkaller0: entered promiscuous mode [ 466.959801][T22626] syzkaller0: entered allmulticast mode [ 467.224248][T22653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7474'. [ 467.234255][T22655] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7475'. [ 467.266027][T22658] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7476'. [ 467.281207][T22658] syzkaller0: entered promiscuous mode [ 467.287085][T22658] syzkaller0: entered allmulticast mode [ 467.330610][T22664] syzkaller0: entered promiscuous mode [ 467.336212][ T28] audit: type=1400 audit(1776802833.576:504): avc: denied { read } for pid=22661 comm="syz.3.7478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 467.356085][T22664] syzkaller0: entered allmulticast mode [ 467.410645][T22668] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.7481'. [ 467.640166][T22675] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7484'. [ 467.687968][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7488'. [ 467.770372][T22690] openvswitch: netlink: Message has 6 unknown bytes. [ 467.782373][T22695] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.7493'. [ 468.014348][T22712] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7501'. [ 468.026217][T22712] syzkaller0: entered promiscuous mode [ 468.031741][T22712] syzkaller0: entered allmulticast mode [ 468.058953][T22714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.066587][T22714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.075766][T22714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.094338][T22714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.212167][T22732] lo: entered promiscuous mode [ 468.229022][T22729] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.7506'. [ 468.660299][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.684308][T22762] team0: Port device netdevsim0 added [ 468.753595][T22768] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.763972][T22768] bond0: (slave team0): Enslaving as an active interface with an up link [ 469.197342][T22783] syzkaller0: entered promiscuous mode [ 469.211116][T22783] syzkaller0: entered allmulticast mode [ 471.037612][T22871] syzkaller0: entered promiscuous mode [ 471.050049][T22871] syzkaller0: entered allmulticast mode [ 471.332689][T22898] validate_nla: 13 callbacks suppressed [ 471.332707][T22898] netlink: 'syz.2.7570': attribute type 10 has an invalid length. [ 471.587616][T22898] hsr0: entered promiscuous mode [ 471.595803][T22898] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 471.606308][T22898] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 471.619049][T22898] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 472.312080][T22914] syzkaller0: entered promiscuous mode [ 472.318528][T22914] syzkaller0: entered allmulticast mode [ 472.513431][T22937] netlink: 'syz.3.7585': attribute type 10 has an invalid length. [ 472.540650][T22937] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.560329][T22937] bond0: (slave team0): Enslaving as an active interface with an up link [ 473.745711][T22982] __nla_validate_parse: 4 callbacks suppressed [ 473.745746][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7602'. [ 473.835474][T22992] netlink: 'syz.2.7606': attribute type 10 has an invalid length. [ 473.856738][T22992] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.866623][T22992] bond0: (slave team0): Enslaving as an active interface with an up link [ 476.039132][T23044] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7627'. [ 476.049675][T23044] syzkaller0: entered promiscuous mode [ 476.055258][T23044] syzkaller0: entered allmulticast mode [ 477.321832][T23069] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7637'. [ 477.366519][T23075] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7639'. [ 477.645283][T23099] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7646'. [ 477.949205][T23113] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.7652'. [ 477.959405][T23119] bridge_slave_1: left allmulticast mode [ 477.969807][T23119] bridge_slave_1: left promiscuous mode [ 477.975879][T23119] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.985633][T23119] bridge_slave_0: left allmulticast mode [ 477.992216][T23119] bridge_slave_0: left promiscuous mode [ 477.998684][T23119] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.119382][T23129] netlink: 'syz.0.7659': attribute type 10 has an invalid length. [ 478.127631][T23129] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 478.140291][T23129] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 478.159565][T23129] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 478.246105][T23139] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7663'. [ 478.394859][T23153] netlink: 'syz.0.7671': attribute type 10 has an invalid length. [ 481.742645][T23170] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7677'. [ 481.933845][T23190] loop4: detected capacity change from 0 to 1024 [ 481.946122][T23190] EXT4-fs: Ignoring removed bh option [ 481.967433][T23190] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 481.999483][T23190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.031679][ T28] audit: type=1400 audit(1776802847.326:505): avc: denied { add_name } for pid=23189 comm="syz.4.7686" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.040091][T23190] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 482.074195][ T28] audit: type=1400 audit(1776802847.326:506): avc: denied { read write } for pid=23189 comm="syz.4.7686" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 482.126789][ T28] audit: type=1400 audit(1776802847.326:507): avc: denied { open } for pid=23189 comm="syz.4.7686" path="/320/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 482.151472][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.185137][T23198] loop4: detected capacity change from 0 to 136 [ 482.193003][T23198] Attempt to read inode for relocated directory [ 482.285513][T23204] loop1: detected capacity change from 0 to 512 [ 482.292446][T23204] EXT4-fs: inline encryption not supported [ 482.301818][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7690'. [ 482.308588][T23206] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7692'. [ 482.322466][T23204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 482.331791][T23204] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 482.353277][T23204] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 1 [ 482.367462][T23204] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 482.377638][T23204] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.7689: Failed to acquire dquot type 1 [ 482.389244][T23204] loop1: lost filesystem error report for type 5 error -5 [ 482.389399][T23204] EXT4-fs (loop1): Remounting filesystem read-only [ 482.396661][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 482.396680][ C0] EXT4-fs (loop1): initial error at time 1776802847: ext4_acquire_dquot:7034 [ 482.396700][ C0] EXT4-fs (loop1): last error at time 1776802847: ext4_acquire_dquot:7034 [ 482.428481][T23204] EXT4-fs (loop1): 1 truncate cleaned up [ 482.434988][T23204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.466387][T19580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.539915][T23221] loop1: detected capacity change from 0 to 512 [ 482.548444][T23221] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 482.563542][T23221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 482.581102][T23221] EXT4-fs (loop1): 1 truncate cleaned up [ 482.587455][T23221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.603929][ T28] audit: type=1400 audit(1776802847.850:508): avc: denied { create } for pid=23220 comm="syz.1.7698" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 482.635812][T19580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.914376][ T28] audit: type=1400 audit(1776802848.140:509): avc: denied { read } for pid=23240 comm="syz.1.7706" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 482.959956][ T28] audit: type=1400 audit(1776802848.140:510): avc: denied { open } for pid=23240 comm="syz.1.7706" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 482.984368][ T28] audit: type=1400 audit(1776802848.140:511): avc: denied { ioctl } for pid=23240 comm="syz.1.7706" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 482.993004][T23244] syzkaller0: entered promiscuous mode [ 483.124829][T23257] netlink: 'syz.3.7714': attribute type 10 has an invalid length. [ 483.178352][T23263] loop2: detected capacity change from 0 to 512 [ 483.190413][T23263] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7715: bg 0: block 393: padding at end of block bitmap is not set [ 483.206322][T23263] loop2: lost filesystem error report for type 5 error -117 [ 483.208516][T23263] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 483.215910][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 483.215942][ C1] EXT4-fs (loop2): initial error at time 1776802848: ext4_validate_block_bitmap:441 [ 483.215998][ C1] EXT4-fs (loop2): last error at time 1776802848: ext4_validate_block_bitmap:441 [ 483.249861][T23263] loop2: lost filesystem error report for type 5 error -117 [ 483.255529][T23263] EXT4-fs (loop2): 2 truncates cleaned up [ 483.272021][T23263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.286658][ T28] audit: type=1400 audit(1776802848.495:512): avc: denied { append } for pid=23261 comm="syz.2.7715" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 483.320911][T19059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.359954][T23269] loop2: detected capacity change from 0 to 512 [ 483.392102][T23269] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 483.406465][T23269] EXT4-fs (loop2): orphan cleanup on readonly fs [ 483.427994][T23269] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.7718: Failed to acquire dquot type 1 [ 483.460597][T23269] loop2: lost filesystem error report for type 5 error -5 [ 483.460743][T23269] EXT4-fs (loop2): Remounting filesystem read-only [ 483.468089][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 483.468137][ C1] EXT4-fs (loop2): initial error at time 1776802848: ext4_acquire_dquot:7034 [ 483.468165][ C1] EXT4-fs (loop2): last error at time 1776802848: ext4_acquire_dquot:7034 [ 483.542087][T23269] EXT4-fs (loop2): 1 truncate cleaned up [ 483.580852][T23269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 483.636758][T19059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.685072][T23285] loop2: detected capacity change from 0 to 164 [ 483.706664][T23285] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 483.722806][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7725'. [ 483.794482][T23291] syzkaller0: entered promiscuous mode [ 483.836160][T23295] loop4: detected capacity change from 0 to 128 [ 483.933908][T23303] loop4: detected capacity change from 0 to 1024 [ 483.941127][T23303] EXT4-fs: Ignoring removed bh option [ 483.968395][T23303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 484.027664][T23308] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7733'. [ 484.041845][T23308] syzkaller0: entered promiscuous mode [ 484.047547][T23308] syzkaller0: entered allmulticast mode [ 484.058638][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 484.068133][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7731'. [ 484.089309][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7731'. [ 484.135057][T23313] netlink: 64519 bytes leftover after parsing attributes in process `syz.0.7737'. [ 484.173902][T23319] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.7736'. [ 484.202183][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7739'. [ 484.286967][T23328] netlink: 'syz.0.7742': attribute type 10 has an invalid length. [ 484.443224][T23328] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 484.454259][T23328] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 484.468042][T23328] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 484.521567][T23334] syzkaller0: entered promiscuous mode [ 484.561673][T23344] loop4: detected capacity change from 0 to 512 [ 484.580296][T23344] EXT4-fs: Ignoring removed i_version option [ 484.592077][T23344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 484.619697][T23344] EXT4-fs (loop4): 1 truncate cleaned up [ 484.630287][T23344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.648892][T23344] EXT4-fs (loop4): shut down requested (1) [ 484.666844][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.822553][T23361] EXT4-fs: inline encryption not supported [ 484.828843][T23361] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 484.842284][T23361] EXT4-fs (loop3): orphan cleanup on readonly fs [ 484.848834][T23361] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7753: inode #15: comm syz.3.7753: iget: illegal inode # [ 484.861919][T23361] loop3: lost filesystem error report for type 5 error -117 [ 484.862168][T23361] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7753: couldn't read orphan inode 15 (err -117) [ 484.862215][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 484.887832][ C0] EXT4-fs (loop3): initial error at time 1776802849: ext4_orphan_get:1397 [ 484.896389][ C0] EXT4-fs (loop3): last error at time 1776802849: ext4_orphan_get:1397 [ 484.918147][T23361] loop3: lost filesystem error report for type 5 error -117 [ 484.920655][T23361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 484.964478][T23361] EXT4-fs (loop3): shut down requested (1) [ 484.984677][T23367] netlink: 'syz.2.7755': attribute type 10 has an invalid length. [ 485.009097][T23367] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 485.021418][T18698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.033000][T23367] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 485.052919][T23367] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 485.083375][T23375] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 485.115845][T23375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0102] [ 485.124065][T23375] System zones: 1-12 [ 485.133041][T23375] EXT4-fs (loop3): orphan cleanup on readonly fs [ 485.139731][T23375] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7758: invalid indirect mapped block 2 (level 2) [ 485.153204][T23375] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 485.155596][T23375] EXT4-fs (loop3): Remounting filesystem read-only [ 485.164795][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 485.164822][ C1] EXT4-fs (loop3): initial error at time 1776802850: ext4_free_branches:1023: inode 11 [ 485.164857][ C1] EXT4-fs (loop3): last error at time 1776802850: ext4_free_branches:1023: inode 11 [ 485.197469][T23375] EXT4-fs (loop3): 1 truncate cleaned up [ 485.203790][T23375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 485.296699][T18698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 485.357534][T23393] FAT-fs (loop2): codepage cp874 not found [ 485.394791][T23400] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 485.407617][T23400] EXT4-fs (loop4): orphan cleanup on readonly fs [ 485.423838][T23400] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.7768: Failed to acquire dquot type 1 [ 485.437144][T23400] loop4: lost filesystem error report for type 5 error -5 [ 485.439554][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 485.453204][ C1] EXT4-fs (loop4): initial error at time 1776802850: ext4_acquire_dquot:7034 [ 485.462115][ C1] EXT4-fs (loop4): last error at time 1776802850: ext4_acquire_dquot:7034 [ 485.476087][T23400] EXT4-fs (loop4): Remounting filesystem read-only [ 485.489557][T23400] EXT4-fs (loop4): 1 truncate cleaned up [ 485.503998][T23400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.577697][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.597032][T23412] syzkaller0: entered promiscuous mode [ 485.602889][T23412] syzkaller0: entered allmulticast mode [ 485.619360][T23417] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.7775: iget: bad i_size value: 38620345925642 [ 485.634211][T23417] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 485.634433][T23417] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.7775: couldn't read orphan inode 15 (err -117) [ 485.643643][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 485.643668][ C1] EXT4-fs (loop4): initial error at time 1776802850: ext4_orphan_get:1397: inode 15 [ 485.643713][ C1] EXT4-fs (loop4): last error at time 1776802850: ext4_orphan_get:1397: inode 15 [ 485.680759][T23417] loop4: lost filesystem error report for type 5 error -117 [ 485.685810][T23417] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.734790][T23417] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.7775: bg 0: block 5: invalid block bitmap [ 485.748950][T23417] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 8 with error 28 [ 485.761547][T23417] EXT4-fs (loop4): This should not happen!! Data will be lost [ 485.761547][T23417] [ 485.771256][T23417] EXT4-fs (loop4): Total free blocks count 0 [ 485.777412][T23417] EXT4-fs (loop4): Free/Dirty block details [ 485.783388][T23417] EXT4-fs (loop4): free_blocks=0 [ 485.790382][T23417] EXT4-fs (loop4): dirty_blocks=8 [ 485.795521][T23417] EXT4-fs (loop4): Block reservation details [ 485.802166][T23417] EXT4-fs (loop4): i_reserved_data_blocks=8 [ 485.843457][T19243] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 485.860645][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 486.089764][T23451] netlink: 'syz.1.7790': attribute type 10 has an invalid length. [ 486.208419][T23455] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 486.225425][ T6523] bridge_slave_1: left allmulticast mode [ 486.239235][T23455] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 486.242114][ T6523] bridge_slave_1: left promiscuous mode [ 486.259689][T23455] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.7792: Directory block failed checksum [ 486.272724][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.291848][ T6523] bridge_slave_0: left allmulticast mode [ 486.298341][T19243] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.318828][ T6523] bridge_slave_0: left promiscuous mode [ 486.324682][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.356991][T23462] FAT-fs (loop3): IO charset cp737 not found [ 486.373183][T23464] EXT4-fs: inline encryption not supported [ 486.400974][T23464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 486.441791][T23464] EXT4-fs (loop4): orphan cleanup on readonly fs [ 486.475772][T23464] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7794: inode #15: comm syz.4.7794: iget: illegal inode # [ 486.499811][T23464] loop4: lost filesystem error report for type 5 error -117 [ 486.500063][T23464] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.7794: couldn't read orphan inode 15 (err -117) [ 486.519317][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 486.519344][ C1] EXT4-fs (loop4): initial error at time 1776802851: ext4_orphan_get:1397 [ 486.519375][ C1] EXT4-fs (loop4): last error at time 1776802851: ext4_orphan_get:1397 [ 486.543438][T23464] loop4: lost filesystem error report for type 5 error -117 [ 486.544066][T23464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 486.567267][ T6523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.578149][T23464] EXT4-fs (loop4): shut down requested (1) [ 486.585507][ T6523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.595334][ T6523] bond0 (unregistering): Released all slaves [ 486.615094][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.644994][ T6523] hsr_slave_0: left promiscuous mode [ 486.657902][ T6523] hsr_slave_1: left promiscuous mode [ 486.669437][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.683041][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.694274][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.701795][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.717002][ T6523] veth1_macvtap: left promiscuous mode [ 486.733452][ T6523] veth0_macvtap: left promiscuous mode [ 486.749120][ T6523] veth1_vlan: left promiscuous mode [ 486.765766][ T6523] veth0_vlan: left promiscuous mode [ 486.877399][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 486.897505][ T6523] team0 (unregistering): Port device C removed [ 486.973340][T23499] EXT4-fs: inline encryption not supported [ 486.988594][T23499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 487.010047][T23499] EXT4-fs (loop1): orphan cleanup on readonly fs [ 487.030269][T23499] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7808: inode #15: comm syz.1.7808: iget: illegal inode # [ 487.044878][T23499] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7808: couldn't read orphan inode 15 (err -117) [ 487.056883][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 487.056905][ C1] EXT4-fs (loop1): initial error at time 1776802852: ext4_orphan_get:1397 [ 487.056947][ C1] EXT4-fs (loop1): last error at time 1776802852: ext4_orphan_get:1397 [ 487.084720][T23504] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.7810: corrupted inode contents [ 487.091500][T23499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 487.111146][T23499] EXT4-fs (loop1): shut down requested (1) [ 487.124353][T23504] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 487.124591][T23504] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.7810: mark_inode_dirty error [ 487.133832][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 487.133869][ C1] EXT4-fs (loop2): initial error at time 1776802852: ext4_do_update_inode:5690: inode 16 [ 487.133903][ C1] EXT4-fs (loop2): last error at time 1776802852: ext4_do_update_inode:5690: inode 16 [ 487.172628][T23504] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 487.174670][T19580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.194159][T23504] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.7810: corrupted inode contents [ 487.238590][T23504] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 487.238743][T23504] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.7810: mark_inode_dirty error [ 487.267976][T23504] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 487.268191][T23504] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.7810: corrupted inode contents [ 487.289893][T23504] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 487.290106][T23504] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 487.309998][T23504] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.7810: corrupted inode contents [ 487.325635][T23504] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 487.326599][T23504] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.7810: mark_inode_dirty error [ 487.357134][T23504] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 487.364248][T23504] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 487.411134][T23524] set_capacity_and_notify: 11 callbacks suppressed [ 487.411153][T23524] loop3: detected capacity change from 0 to 512 [ 487.421351][T23525] loop4: detected capacity change from 0 to 512 [ 487.426756][T23504] EXT4-fs (loop2): 1 truncate cleaned up [ 487.437269][T23504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.443611][T23525] EXT4-fs: Ignoring removed nobh option [ 487.453602][T11320] __quota_error: 9 callbacks suppressed [ 487.453645][T11320] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 487.472519][T11320] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 1 [ 487.484363][T23524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 487.494995][T23504] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.505774][T23524] EXT4-fs (loop3): 1 truncate cleaned up [ 487.514101][T23524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.526574][T23504] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 487.555839][T23525] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #3: comm syz.4.7819: corrupted inode contents [ 487.571927][T23525] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 487.572124][T23525] EXT4-fs (loop4): Remounting filesystem read-only [ 487.581384][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 487.581403][ C1] EXT4-fs (loop4): initial error at time 1776802852: ext4_do_update_inode:5690: inode 3 [ 487.581435][ C1] EXT4-fs (loop4): last error at time 1776802852: ext4_do_update_inode:5690: inode 3 [ 487.612149][T18698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.623342][T23525] Quota error (device loop4): write_blk: dquota write failed [ 487.625528][T19059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.632497][T23525] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 487.650141][T23525] EXT4-fs (loop4): 1 truncate cleaned up [ 487.673312][T23525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.700329][T23525] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.713336][T23525] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.728637][T23536] loop2: detected capacity change from 0 to 512 [ 487.750505][T23536] EXT4-fs: inline encryption not supported [ 487.775095][T23536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 487.793858][T23536] EXT4-fs (loop2): orphan cleanup on readonly fs [ 487.809290][T23541] loop1: detected capacity change from 0 to 512 [ 487.815911][T23536] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.7822: inode #15: comm syz.2.7822: iget: illegal inode # [ 487.829056][T23536] fserror_report: 4 callbacks suppressed [ 487.829068][T23536] loop2: lost filesystem error report for type 5 error -117 [ 487.830525][T23545] loop4: detected capacity change from 0 to 512 [ 487.849303][T23536] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.7822: couldn't read orphan inode 15 (err -117) [ 487.861200][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 487.861222][ C0] EXT4-fs (loop2): initial error at time 1776802852: ext4_orphan_get:1397 [ 487.861249][ C0] EXT4-fs (loop2): last error at time 1776802852: ext4_orphan_get:1397 [ 487.862098][T23545] EXT4-fs: inline encryption not supported [ 487.908225][T23536] loop2: lost filesystem error report for type 5 error -117 [ 487.911931][T23536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 487.939967][T23541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.956855][T23545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.965701][T23545] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 487.978594][T23541] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.990864][ T28] audit: type=1400 audit(1776802852.892:518): avc: denied { create } for pid=23539 comm="syz.1.7824" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 487.993053][T23545] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 1 [ 488.023246][T23541] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.7824: corrupted inode contents [ 488.023654][T23536] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.7822: bg 0: block 4: invalid block bitmap [ 488.049719][T23545] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 488.051100][T23541] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #2: comm syz.1.7824: mark_inode_dirty error [ 488.070235][T23545] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.7826: Failed to acquire dquot type 1 [ 488.083283][T23545] loop4: lost filesystem error report for type 5 error -5 [ 488.083475][T23545] EXT4-fs (loop4): Remounting filesystem read-only [ 488.084797][T23541] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.7824: corrupted inode contents [ 488.100061][T23545] EXT4-fs (loop4): 1 truncate cleaned up [ 488.109056][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 488.109074][ C1] EXT4-fs (loop4): initial error at time 1776802852: ext4_acquire_dquot:7034 [ 488.109098][ C1] EXT4-fs (loop4): last error at time 1776802852: ext4_acquire_dquot:7034 [ 488.142093][T23541] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.7824: mark_inode_dirty error [ 488.143119][T23545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.169207][T23554] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.7824: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 488.169207][T23554] [ 488.198224][T19059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.207909][T23554] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.7824: corrupted inode contents [ 488.220171][T23554] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.7824: mark_inode_dirty error [ 488.235940][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.242191][T23561] loop2: detected capacity change from 0 to 128 [ 488.247763][T23554] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem [ 488.261672][ T6523] hsr_slave_0: left promiscuous mode [ 488.267766][T23557] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz.1.7824: corrupted inode contents [ 488.288928][ T6523] hsr_slave_1: left promiscuous mode [ 488.299738][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.302040][T23557] EXT4-fs error (device loop1): add_dirent_to_buf:2151: inode #2: comm syz.1.7824: mark_inode_dirty error [ 488.332482][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.347482][T23566] loop3: detected capacity change from 0 to 512 [ 488.363066][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.381268][T23566] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 488.394633][ T6523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.429055][T19580] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #2: comm syz-executor: corrupted inode contents [ 488.429997][ T6523] veth1_macvtap: left promiscuous mode [ 488.446620][T19580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.448846][T23566] EXT4-fs (loop3): 1 truncate cleaned up [ 488.456244][ T6523] veth0_macvtap: left promiscuous mode [ 488.468094][T23566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.481843][T23575] __nla_validate_parse: 1 callbacks suppressed [ 488.481857][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7833'. [ 488.531452][T18698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.606422][T23587] loop3: detected capacity change from 0 to 1024 [ 488.620549][ T6523] team0 (unregistering): Port device team_slave_1 removed [ 488.628247][T23587] EXT4-fs: Ignoring removed bh option [ 488.635730][T23587] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 488.645843][ T6523] team0 (unregistering): Port device team_slave_0 removed [ 488.670939][T23587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.719417][T18698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.742429][T23573] bridge_slave_1: left allmulticast mode [ 488.748879][T23573] bridge_slave_1: left promiscuous mode [ 488.759750][T23573] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.781896][T23573] bridge_slave_0: left allmulticast mode [ 488.792938][T23599] loop3: detected capacity change from 0 to 512 [ 488.799932][T23573] bridge_slave_0: left promiscuous mode [ 488.814052][T23573] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.828659][T23599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 488.836702][T23599] System zones: 1-12 [ 488.840887][T23599] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.7841: Directory hole found for htree index block 0 [ 488.853630][T23599] EXT4-fs (loop3): Remounting filesystem read-only [ 488.860191][T23599] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 488.868455][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 488.868477][ C0] EXT4-fs (loop3): initial error at time 1776802853: dx_probe:791: inode 2 [ 488.868506][ C0] EXT4-fs (loop3): last error at time 1776802853: dx_probe:791: inode 2 [ 488.892617][T23599] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 488.901317][T23599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.919909][ T28] audit: type=1400 audit(1776802853.762:519): avc: denied { setattr } for pid=23598 comm="syz.3.7841" path="/332/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.947511][T18698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.994281][T23583] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7836'. [ 489.016854][T23596] syzkaller0: entered promiscuous mode [ 489.022585][T23596] syzkaller0: entered allmulticast mode [ 489.105853][T23616] loop4: detected capacity change from 0 to 1024 [ 489.116292][T23616] EXT4-fs: Ignoring removed bh option [ 489.145205][T23620] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.163798][T23616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 489.174725][T23620] ext4 filesystem being mounted at /336/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 489.216450][T23620] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 20: comm syz.2.7846: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 489.243888][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 489.253515][T23620] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem [ 489.267683][T23620] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 20: comm syz.2.7846: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 489.317333][T23619] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 489.327654][T23619] FAT-fs (loop1): Filesystem has been set read-only [ 489.348232][T19059] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.365022][T23627] netlink: 'syz.0.7849': attribute type 10 has an invalid length. [ 489.373496][T23627] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 489.384975][T23627] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 489.400988][T23627] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 489.474595][T23639] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.7852'. [ 489.475661][T23635] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.500224][T23635] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 489.558022][T19580] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.606303][T23647] EXT4-fs: Ignoring removed bh option [ 489.641618][T23647] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 489.656446][T23649] EXT4-fs (loop2): 1 orphan inode deleted [ 489.665322][T23647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.670832][T23649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.681807][ T310] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 489.691750][T23649] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.707759][ T28] audit: type=1400 audit(1776802854.501:520): avc: denied { create } for pid=23652 comm="syz.0.7858" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 489.711931][ T310] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 489.764694][ T28] audit: type=1400 audit(1776802854.557:521): avc: denied { unlink } for pid=17382 comm="syz-executor" name="bus" dev="tmpfs" ino=2551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 489.788483][T19059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.798767][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.940848][T23668] FAT-fs (loop2): codepage cp865 not found [ 490.035029][T23683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.053570][T23681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.062820][T23683] ext4 filesystem being mounted at /335/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.107138][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.131422][T23683] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.7871: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 490.175300][T18698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.222882][T23700] syzkaller0: entered promiscuous mode [ 490.360135][T23711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.394081][T23711] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.7883: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 490.446306][T23716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.463431][T18698] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.510576][T19243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.663360][T23745] syzkaller0: entered promiscuous mode [ 490.701826][T23751] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7899'. [ 490.719102][T23751] syzkaller0: entered promiscuous mode [ 490.724900][T23751] syzkaller0: entered allmulticast mode [ 490.799203][T23757] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 490.908481][T23767] EXT4-fs (loop3): 1 orphan inode deleted [ 490.924689][ T6523] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 490.942116][T23767] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.017007][ T6523] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 491.032690][T23781] ext4 filesystem being mounted at /376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 491.067042][ T6523] loop3: lost filesystem error report for type 5 error -117 [ 491.210031][T23798] bridge_slave_1: left allmulticast mode [ 491.227465][T23798] bridge_slave_1: left promiscuous mode [ 491.233679][T23798] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.247989][T23798] bridge_slave_0: left allmulticast mode [ 491.264858][T23798] bridge_slave_0: left promiscuous mode [ 491.277095][T23798] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.464937][T23826] EXT4-fs: Ignoring removed nobh option [ 491.479356][T23828] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.7934: iget: bad i_size value: 38620345925642 [ 491.508005][T23826] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #3: comm syz.2.7933: corrupted inode contents [ 491.517510][T23828] fserror_report: 1 callbacks suppressed [ 491.517546][T23828] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.525928][T23826] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 491.535165][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 491.535218][ C1] EXT4-fs (loop4): initial error at time 1776802856: ext4_orphan_get:1397: inode 15 [ 491.535251][ C1] EXT4-fs (loop4): last error at time 1776802856: ext4_orphan_get:1397: inode 15 [ 491.571296][T23828] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.7934: couldn't read orphan inode 15 (err -117) [ 491.600819][T23828] loop4: lost filesystem error report for type 5 error -117 [ 491.629731][T23826] EXT4-fs (loop2): Remounting filesystem read-only [ 491.643765][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 491.643800][ C0] EXT4-fs (loop2): initial error at time 1776802856: ext4_do_update_inode:5690: inode 3 [ 491.643828][ C0] EXT4-fs (loop2): last error at time 1776802856: ext4_do_update_inode:5690: inode 3 [ 491.680979][T23826] EXT4-fs (loop2): 1 truncate cleaned up [ 491.687596][T23826] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.701116][T23840] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.7939'. [ 491.817967][T23855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.850237][T23860] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.7948: iget: bad i_size value: 38620345925642 [ 491.863248][T23860] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.863442][T23860] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.7948: couldn't read orphan inode 15 (err -117) [ 491.872712][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 491.872736][ C0] EXT4-fs (loop4): initial error at time 1776802856: ext4_orphan_get:1397: inode 15 [ 491.872774][ C0] EXT4-fs (loop4): last error at time 1776802856: ext4_orphan_get:1397: inode 15 [ 491.911029][T23860] loop4: lost filesystem error report for type 5 error -117 [ 491.922482][T23857] bridge_slave_1: left allmulticast mode [ 491.963883][T23855] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 491.978516][T23857] bridge_slave_1: left promiscuous mode [ 491.984798][T23857] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.998415][T23857] bridge_slave_0: left allmulticast mode [ 492.004460][T23857] bridge_slave_0: left promiscuous mode [ 492.010845][T23857] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.023184][T23855] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.7945: corrupted xattr block 33: invalid ea_ino [ 492.046651][T23855] EXT4-fs (loop3): Remounting filesystem read-only [ 492.053314][T23855] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 492.147111][T23873] syzkaller0: entered promiscuous mode [ 492.152811][T23873] syzkaller0: entered allmulticast mode [ 492.211994][T23884] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 492.284821][T23889] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.7959'. [ 492.353928][T23895] batadv_slave_0: entered promiscuous mode [ 492.371072][T23898] syzkaller0: entered promiscuous mode [ 492.432332][T23895] batadv_slave_0: left promiscuous mode [ 492.490350][T23904] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.7965: iget: bad i_size value: 38620345925642 [ 492.529938][T23904] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 492.533852][T23904] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7965: couldn't read orphan inode 15 (err -117) [ 492.543073][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 492.543097][ C1] EXT4-fs (loop3): initial error at time 1776802857: ext4_orphan_get:1397: inode 15 [ 492.543150][ C1] EXT4-fs (loop3): last error at time 1776802857: ext4_orphan_get:1397: inode 15 [ 492.580661][T23907] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 492.591585][T23904] loop3: lost filesystem error report for type 5 error -117 [ 492.615698][T23909] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7967'. [ 492.634849][T23909] syzkaller0: entered promiscuous mode [ 492.644692][T23909] syzkaller0: entered allmulticast mode [ 492.676453][T23907] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 492.722373][T23913] EXT4-fs: Ignoring removed mblk_io_submit option [ 492.758799][T23913] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.7968: corrupted in-inode xattr: e_value size too large [ 492.782079][T23915] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7971'. [ 492.790686][T23913] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 492.791590][T23913] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7968: couldn't read orphan inode 15 (err -117) [ 492.800852][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 492.800873][ C0] EXT4-fs (loop3): initial error at time 1776802857: ext4_iget_extra_inode:5128: inode 15 [ 492.800924][ C0] EXT4-fs (loop3): last error at time 1776802857: ext4_iget_extra_inode:5128: inode 15 [ 492.839153][T23913] loop3: lost filesystem error report for type 5 error -117 [ 492.875986][T23922] set_capacity_and_notify: 22 callbacks suppressed [ 492.876008][T23922] loop3: detected capacity change from 0 to 512 [ 492.921947][T23922] ext4 filesystem being mounted at /359/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.045578][T23936] netlink: 'syz.1.7978': attribute type 1 has an invalid length. [ 493.069771][T23936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7978'. [ 493.098546][T23945] loop3: detected capacity change from 0 to 512 [ 493.145092][T23945] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 493.208175][T23953] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7986'. [ 493.221997][T23945] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 493.236089][T23950] netlink: 'syz.4.7985': attribute type 4 has an invalid length. [ 493.328246][T23957] netlink: 'syz.1.7987': attribute type 10 has an invalid length. [ 493.337066][T23959] loop4: detected capacity change from 0 to 512 [ 493.343976][T23957] hsr0: entered promiscuous mode [ 493.364377][T23959] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.7989: iget: bad i_size value: 38620345925642 [ 493.386073][T23957] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 493.422774][T23957] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 493.437807][T23957] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 493.444807][T23959] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.447234][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 493.459240][T23959] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.7989: couldn't read orphan inode 15 (err -117) [ 493.464691][ C1] EXT4-fs (loop4): initial error at time 1776802857: ext4_orphan_get:1397: inode 15 [ 493.486450][ C1] EXT4-fs (loop4): last error at time 1776802857: ext4_orphan_get:1397: inode 15 [ 493.500823][T23959] loop4: lost filesystem error report for type 5 error -117 [ 493.687660][T23987] loop3: detected capacity change from 0 to 512 [ 493.730305][T23987] EXT4-fs: inline encryption not supported [ 493.748169][T23987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 493.767932][T23987] EXT4-fs (loop3): orphan cleanup on readonly fs [ 493.780133][T23987] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7999: inode #15: comm syz.3.7999: iget: illegal inode # [ 493.796036][T23987] loop3: lost filesystem error report for type 5 error -117 [ 493.799551][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 493.807686][T23987] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7999: couldn't read orphan inode 15 (err -117) [ 493.813373][ C0] EXT4-fs (loop3): initial error at time 1776802858: ext4_orphan_get:1397 [ 493.833802][ C0] EXT4-fs (loop3): last error at time 1776802858: ext4_orphan_get:1397 [ 493.847015][T23987] loop3: lost filesystem error report for type 5 error -117 [ 493.867096][T23987] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7999: bg 0: block 4: invalid block bitmap [ 493.956880][T24007] __nla_validate_parse: 1 callbacks suppressed [ 493.956900][T24007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8003'. [ 493.986069][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 493.986085][ T28] audit: type=1400 audit(1776802858.504:528): avc: denied { create } for pid=24006 comm="syz.2.8003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 494.068943][T24014] loop2: detected capacity change from 0 to 512 [ 494.086572][T24017] bridge_slave_1: left allmulticast mode [ 494.095621][T24014] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8006: iget: bad i_size value: 38620345925642 [ 494.118332][T24017] bridge_slave_1: left promiscuous mode [ 494.124916][T24014] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 494.130822][T24014] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.8006: couldn't read orphan inode 15 (err -117) [ 494.141691][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 494.158498][T24017] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.158815][ C1] EXT4-fs (loop2): initial error at time 1776802858: ext4_orphan_get:1397: inode 15 [ 494.175378][ C1] EXT4-fs (loop2): last error at time 1776802858: ext4_orphan_get:1397: inode 15 [ 494.181866][T24014] loop2: lost filesystem error report for type 5 error -117 [ 494.193326][T24017] bridge_slave_0: left allmulticast mode [ 494.213103][T24017] bridge_slave_0: left promiscuous mode [ 494.226415][T24017] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.317621][T24034] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8013'. [ 494.327942][T24034] syzkaller0: entered promiscuous mode [ 494.333477][T24034] syzkaller0: entered allmulticast mode [ 494.354512][T24023] syzkaller0: entered promiscuous mode [ 494.360129][T24023] syzkaller0: entered allmulticast mode [ 494.556420][T24052] loop1: detected capacity change from 0 to 1024 [ 494.566874][T24052] EXT4-fs: Ignoring removed bh option [ 494.577667][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8022'. [ 494.684037][T24068] loop2: detected capacity change from 0 to 512 [ 494.693977][T24063] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8025'. [ 494.703193][T24068] EXT4-fs: inline encryption not supported [ 494.711830][T24063] syzkaller0: entered promiscuous mode [ 494.717416][T24063] syzkaller0: entered allmulticast mode [ 494.732086][T24068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 494.755632][T24068] EXT4-fs (loop2): orphan cleanup on readonly fs [ 494.769745][T24068] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8028: inode #15: comm syz.2.8028: iget: illegal inode # [ 494.798842][T24068] loop2: lost filesystem error report for type 5 error -117 [ 494.799039][T24068] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.8028: couldn't read orphan inode 15 (err -117) [ 494.806578][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 494.806601][ C0] EXT4-fs (loop2): initial error at time 1776802859: ext4_orphan_get:1397 [ 494.806645][ C0] EXT4-fs (loop2): last error at time 1776802859: ext4_orphan_get:1397 [ 494.843233][T24068] loop2: lost filesystem error report for type 5 error -117 [ 494.863804][T24068] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.8028: bg 0: block 4: invalid block bitmap [ 494.904383][T24087] loop3: detected capacity change from 0 to 512 [ 494.971029][T24087] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.8035: iget: bad i_size value: 38620345925642 [ 494.991675][T24087] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 494.996895][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 495.004350][T24087] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.8035: couldn't read orphan inode 15 (err -117) [ 495.006332][ C1] EXT4-fs (loop3): initial error at time 1776802859: ext4_orphan_get:1397: inode 15 [ 495.033929][ C1] EXT4-fs (loop3): last error at time 1776802859: ext4_orphan_get:1397: inode 15 [ 495.036315][T24087] loop3: lost filesystem error report for type 5 error -117 [ 495.058886][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8039'. [ 495.139937][T24110] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.8045'. [ 495.183463][T24114] loop2: detected capacity change from 0 to 512 [ 495.206437][T24114] EXT4-fs: inline encryption not supported [ 495.229776][T24114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 495.248033][T24114] EXT4-fs (loop2): orphan cleanup on readonly fs [ 495.255120][T24114] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8047: inode #15: comm syz.2.8047: iget: illegal inode # [ 495.268227][T24114] loop2: lost filesystem error report for type 5 error -117 [ 495.268392][T24114] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.8047: couldn't read orphan inode 15 (err -117) [ 495.275765][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 495.275781][ C0] EXT4-fs (loop2): initial error at time 1776802859: ext4_orphan_get:1397 [ 495.275812][ C0] EXT4-fs (loop2): last error at time 1776802859: ext4_orphan_get:1397 [ 495.311948][T24114] loop2: lost filesystem error report for type 5 error -117 [ 495.314410][T24114] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.8047: bg 0: block 4: invalid block bitmap [ 495.366465][T24130] loop2: detected capacity change from 0 to 512 [ 495.374100][T24130] EXT4-fs: Ignoring removed i_version option [ 495.384974][T24130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 495.404398][T24130] EXT4-fs (loop2): 1 truncate cleaned up [ 495.412221][T24130] EXT4-fs (loop2): shut down requested (1) [ 495.501815][T24141] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.8057'. [ 495.514484][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8058'. [ 495.546841][T24145] netlink: 'syz.3.8059': attribute type 4 has an invalid length. [ 495.601680][ T28] audit: type=1400 audit(1776802860.010:529): avc: denied { ioctl } for pid=24146 comm="syz.4.8061" path="socket:[81582]" dev="sockfs" ino=81582 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 495.644528][T24153] netlink: 'syz.1.8062': attribute type 10 has an invalid length. [ 495.656680][T24153] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 495.681841][T24153] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 495.699952][T24153] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 495.752213][T24164] netlink: 'syz.3.8066': attribute type 1 has an invalid length. [ 495.771062][T24164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.789802][T24164] bond1: (slave veth3): Enslaving as an active interface with a down link [ 495.803195][T24164] bond1: (slave dummy0): making interface the new active one [ 495.812099][T24164] dummy0: entered promiscuous mode [ 495.817494][T24164] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 495.835065][T24174] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.8070'. [ 495.851648][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8067'. [ 495.887150][T24164] bond1: (slave dummy0): Releasing active interface [ 495.894296][T24164] dummy0 (unregistering): left promiscuous mode [ 496.016147][T24194] netlink: 'syz.1.8077': attribute type 10 has an invalid length. [ 496.024657][T24194] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 496.036108][T24194] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 496.049120][T24194] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 496.504988][T24197] syzkaller0: entered promiscuous mode [ 496.510604][T24197] syzkaller0: entered allmulticast mode [ 496.914561][T24203] netlink: 'syz.3.8082': attribute type 1 has an invalid length. [ 496.970612][T24203] vlan2: entered promiscuous mode [ 496.976142][T24203] bond2: entered promiscuous mode [ 496.983919][T24203] vlan2: entered allmulticast mode [ 496.989604][T24203] bond2: entered allmulticast mode [ 497.032963][T24218] bond2: (slave bridge0): making interface the new active one [ 497.040816][T24218] bridge0: entered promiscuous mode [ 497.046239][T24218] bridge0: entered allmulticast mode [ 497.052401][T24218] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 497.365551][ T28] audit: type=1400 audit(1776802861.666:530): avc: denied { read } for pid=24256 comm="syz.3.8102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 497.576104][T24271] netlink: 'syz.0.8108': attribute type 10 has an invalid length. [ 497.769516][T24283] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.8113: iget: bad i_size value: 38620345925642 [ 497.805468][T24283] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 497.805733][T24283] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.8113: couldn't read orphan inode 15 (err -117) [ 497.814962][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 497.814998][ C0] EXT4-fs (loop4): initial error at time 1776802862: ext4_orphan_get:1397: inode 15 [ 497.815052][ C0] EXT4-fs (loop4): last error at time 1776802862: ext4_orphan_get:1397: inode 15 [ 497.855001][T24283] loop4: lost filesystem error report for type 5 error -117 [ 498.341013][T24329] syzkaller0: entered promiscuous mode [ 498.708895][T24352] syzkaller0: entered promiscuous mode [ 498.714699][T24352] syzkaller0: entered allmulticast mode [ 498.840490][T24356] syzkaller0: entered promiscuous mode [ 498.962500][T24372] set_capacity_and_notify: 1 callbacks suppressed [ 498.962514][T24372] loop3: detected capacity change from 0 to 512 [ 498.976016][T24372] EXT4-fs: inline encryption not supported [ 498.994569][T24372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 499.012485][T24372] EXT4-fs (loop3): orphan cleanup on readonly fs [ 499.020608][T24374] syzkaller0: entered promiscuous mode [ 499.026158][T24374] syzkaller0: entered allmulticast mode [ 499.026818][T24372] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8151: inode #15: comm syz.3.8151: iget: illegal inode # [ 499.044654][T24372] loop3: lost filesystem error report for type 5 error -117 [ 499.044832][T24372] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.8151: couldn't read orphan inode 15 (err -117) [ 499.052237][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 499.052256][ C1] EXT4-fs (loop3): initial error at time 1776802863: ext4_orphan_get:1397 [ 499.052281][ C1] EXT4-fs (loop3): last error at time 1776802863: ext4_orphan_get:1397 [ 499.087686][T24372] loop3: lost filesystem error report for type 5 error -117 [ 499.096199][T24372] EXT4-fs (loop3): shut down requested (1) [ 499.217168][T24391] loop4: detected capacity change from 0 to 512 [ 499.232303][T24391] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.8160: iget: bad i_size value: 38620345925642 [ 499.271374][T24391] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 499.272234][T24391] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.8160: couldn't read orphan inode 15 (err -117) [ 499.281474][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 499.281502][ C1] EXT4-fs (loop4): initial error at time 1776802863: ext4_orphan_get:1397: inode 15 [ 499.281526][ C1] EXT4-fs (loop4): last error at time 1776802863: ext4_orphan_get:1397: inode 15 [ 499.318729][T24391] loop4: lost filesystem error report for type 5 error -117 [ 499.491925][T24408] syzkaller0: entered promiscuous mode [ 499.540857][T24417] loop4: detected capacity change from 0 to 512 [ 499.547727][T24417] EXT4-fs: inline encryption not supported [ 499.558244][T24417] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 499.587660][T24417] EXT4-fs (loop4): orphan cleanup on readonly fs [ 499.601907][T24417] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.8166: inode #15: comm syz.4.8166: iget: illegal inode # [ 499.615642][T24417] loop4: lost filesystem error report for type 5 error -117 [ 499.615809][T24417] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.8166: couldn't read orphan inode 15 (err -117) [ 499.635009][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 499.635022][ C0] EXT4-fs (loop4): initial error at time 1776802863: ext4_orphan_get:1397 [ 499.635062][ C0] EXT4-fs (loop4): last error at time 1776802863: ext4_orphan_get:1397 [ 499.668765][T24417] loop4: lost filesystem error report for type 5 error -117 [ 499.674511][T24417] EXT4-fs (loop4): shut down requested (1) [ 499.727793][T24426] syzkaller0: entered promiscuous mode [ 499.733747][T24426] syzkaller0: entered allmulticast mode [ 499.825266][T24440] __nla_validate_parse: 15 callbacks suppressed [ 499.825284][T24440] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8175'. [ 499.841643][T24442] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8176'. [ 499.934468][T24449] loop1: detected capacity change from 0 to 512 [ 499.944797][T24449] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.8179: iget: bad i_size value: 38620345925642 [ 499.969299][T24449] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 499.971316][T24449] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.8179: couldn't read orphan inode 15 (err -117) [ 499.978790][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 499.984048][T24449] loop1: lost filesystem error report for type 5 error -117 [ 499.992460][ C1] EXT4-fs (loop1): initial error at time 1776802864: ext4_orphan_get:1397: inode 15 [ 500.015655][ C1] EXT4-fs (loop1): last error at time 1776802864: ext4_orphan_get:1402 [ 500.179463][T24462] syzkaller0: entered promiscuous mode [ 500.185331][T24462] syzkaller0: entered allmulticast mode [ 500.222373][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8186'. [ 500.253418][T24466] loop2: detected capacity change from 0 to 512 [ 500.268783][T24466] EXT4-fs: Ignoring removed mblk_io_submit option [ 500.282557][T24466] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.8187: corrupted in-inode xattr: e_value size too large [ 500.304742][T24466] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 500.304973][T24466] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.8187: couldn't read orphan inode 15 (err -117) [ 500.314173][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 500.314200][ C0] EXT4-fs (loop2): initial error at time 1776802864: ext4_iget_extra_inode:5128: inode 15 [ 500.314266][ C0] EXT4-fs (loop2): last error at time 1776802864: ext4_iget_extra_inode:5128: inode 15 [ 500.357267][T24466] loop2: lost filesystem error report for type 5 error -117 [ 500.541125][T24489] loop2: detected capacity change from 0 to 512 [ 500.557413][T24489] EXT4-fs: inline encryption not supported [ 500.570974][T24489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 500.601046][T24489] EXT4-fs (loop2): orphan cleanup on readonly fs [ 500.610732][T24489] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8198: inode #15: comm syz.2.8198: iget: illegal inode # [ 500.623619][T24489] loop2: lost filesystem error report for type 5 error -117 [ 500.623831][T24489] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.8198: couldn't read orphan inode 15 (err -117) [ 500.631225][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 500.631246][ C0] EXT4-fs (loop2): initial error at time 1776802864: ext4_orphan_get:1397 [ 500.631266][ C0] EXT4-fs (loop2): last error at time 1776802864: ext4_orphan_get:1397 [ 500.667371][T24489] loop2: lost filesystem error report for type 5 error -117 [ 500.667826][T24493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8199'. [ 500.693261][T24489] EXT4-fs (loop2): shut down requested (1) [ 500.772729][T24498] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.780751][T24498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.787962][T24498] IPv6: NLM_F_CREATE should be set when creating new route [ 500.795224][T24498] IPv6: NLM_F_CREATE should be set when creating new route [ 500.802546][T24498] IPv6: NLM_F_CREATE should be set when creating new route [ 500.812113][ T28] audit: type=1400 audit(1776802864.884:531): avc: denied { create } for pid=24496 comm="syz.2.8201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 500.831830][ T28] audit: type=1400 audit(1776802864.884:532): avc: denied { connect } for pid=24496 comm="syz.2.8201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 501.404716][ T28] audit: type=1400 audit(1776802865.445:533): avc: denied { open } for pid=24499 comm="syz.1.8202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 501.424218][ T28] audit: type=1400 audit(1776802865.445:534): avc: denied { kernel } for pid=24499 comm="syz.1.8202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 501.444055][ T28] audit: type=1400 audit(1776802865.464:535): avc: denied { write } for pid=24499 comm="syz.1.8202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 502.994095][T24434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.003341][T24495] netlink: 'syz.4.8200': attribute type 1 has an invalid length. [ 503.011900][T24497] netlink: 'syz.2.8201': attribute type 1 has an invalid length. [ 503.068942][T24519] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8211'. [ 503.216718][T24536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8219'. [ 503.246949][ T28] audit: type=1400 audit(1776802867.166:536): avc: denied { create } for pid=24537 comm="syz.0.8220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 503.256241][T24538] netlink: 'syz.0.8220': attribute type 1 has an invalid length. [ 503.281321][T24538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.302706][T24538] bond1: (slave veth3): Enslaving as an active interface with a down link [ 503.315238][T24538] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8220'. [ 503.383681][T24543] netlink: 'syz.0.8222': attribute type 1 has an invalid length. [ 503.557311][T24555] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.8228'. [ 503.609359][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8230'. [ 503.677144][T24563] netlink: 'syz.1.8232': attribute type 1 has an invalid length. [ 503.691807][T24563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.711247][T24563] bond1: (slave veth3): Enslaving as an active interface with a down link [ 503.733206][T24563] bond1: (slave dummy0): making interface the new active one [ 503.757146][T24563] dummy0: entered promiscuous mode [ 503.762696][T24563] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 503.778482][T24563] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8232'. [ 503.781493][T24566] syzkaller0: entered promiscuous mode [ 503.796375][T24563] bond1: (slave dummy0): Releasing active interface [ 503.803171][T24563] dummy0 (unregistering): left promiscuous mode [ 504.003025][T24580] tipc: Started in network mode [ 504.028968][T24580] tipc: Node identity 3658d55711dd, cluster identity 4711 [ 504.048635][T24580] tipc: Enabled bearer , priority 0 [ 504.064841][T24590] syzkaller0: entered promiscuous mode [ 504.070602][T24590] syzkaller0: entered allmulticast mode [ 504.094959][T24580] tipc: Resetting bearer [ 504.105414][T24593] syzkaller0: entered promiscuous mode [ 504.127122][T24580] tipc: Resetting bearer [ 504.142952][ T28] audit: type=1400 audit(1776802867.999:537): avc: denied { tracepoint } for pid=24589 comm="syz.1.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 504.171507][T24580] tipc: Disabling bearer [ 504.181814][T24597] netlink: 'syz.3.8247': attribute type 10 has an invalid length. [ 504.194068][T24597] hsr0: entered promiscuous mode [ 504.199556][T24597] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 504.210147][T24597] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 504.223017][T24597] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 504.297243][T24603] syzkaller0: entered promiscuous mode [ 504.305113][T24603] syzkaller0: entered allmulticast mode [ 504.390278][T24612] loop3: detected capacity change from 0 to 512 [ 504.405137][T24612] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.8254: iget: bad i_size value: 38620345925642 [ 504.418958][T24612] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 504.420080][T24612] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.8254: couldn't read orphan inode 15 (err -117) [ 504.429361][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 504.429383][ C1] EXT4-fs (loop3): initial error at time 1776802868: ext4_orphan_get:1397: inode 15 [ 504.429417][ C1] EXT4-fs (loop3): last error at time 1776802868: ext4_orphan_get:1397: inode 15 [ 504.469413][T24612] loop3: lost filesystem error report for type 5 error -117 [ 504.481016][ T310] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 504.502102][ T310] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 8 with error 28 [ 504.514429][ T310] EXT4-fs (loop3): This should not happen!! Data will be lost [ 504.514429][ T310] [ 504.524476][ T310] EXT4-fs (loop3): Total free blocks count 0 [ 504.530571][ T310] EXT4-fs (loop3): Free/Dirty block details [ 504.536823][ T310] EXT4-fs (loop3): free_blocks=0 [ 504.541879][ T310] EXT4-fs (loop3): dirty_blocks=8 [ 504.547088][ T310] EXT4-fs (loop3): Block reservation details [ 504.553122][ T310] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 504.559934][T18698] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 504.643371][ T28] audit: type=1400 audit(1776802868.476:538): avc: denied { setopt } for pid=24623 comm="syz.2.8259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 504.666890][T24622] syzkaller0: entered promiscuous mode [ 504.772507][T24630] syzkaller0: entered promiscuous mode [ 504.778084][T24630] syzkaller0: entered allmulticast mode [ 504.897519][ T28] audit: type=1400 audit(1776802868.700:539): avc: denied { sys_module } for pid=24638 comm="syz.3.8266" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 505.206041][T24665] netlink: 'syz.3.8275': attribute type 4 has an invalid length. [ 505.301494][T24678] syzkaller0: entered promiscuous mode [ 505.836720][T24720] netlink: 'syz.1.8295': attribute type 10 has an invalid length. [ 505.924929][T24736] netlink: 'syz.1.8304': attribute type 4 has an invalid length. [ 505.942259][ T28] audit: type=1400 audit(1776802869.682:540): avc: denied { connect } for pid=24735 comm="syz.1.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 506.013440][T24726] chnl_net:caif_netlink_parms(): no params data found [ 506.023669][T24736] netlink: 'syz.1.8304': attribute type 4 has an invalid length. [ 506.069309][T24726] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.076711][T24726] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.084612][T24726] bridge_slave_0: entered allmulticast mode [ 506.092491][T24726] bridge_slave_0: entered promiscuous mode [ 506.101856][T24726] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.109508][T24726] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.117024][T24726] bridge_slave_1: entered allmulticast mode [ 506.123807][T24726] bridge_slave_1: entered promiscuous mode [ 506.143101][T24726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.154068][T24726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.177492][T24726] team0: Port device team_slave_0 added [ 506.184415][T24726] team0: Port device team_slave_1 added [ 506.201861][T24726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.209027][T24726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.235331][T24726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.246851][T24726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.253946][T24726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.280302][T24726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.310104][T24726] hsr_slave_0: entered promiscuous mode [ 506.316401][T24726] hsr_slave_1: entered promiscuous mode [ 506.322505][T24726] debugfs: 'hsr0' already exists in 'hsr' [ 506.334065][T24726] Cannot create hsr debugfs directory [ 506.400870][T24726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.451284][T24726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.515439][T24726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.543976][T24764] sctp: [Deprecated]: syz.1.8309 (pid 24764) Use of int in max_burst socket option. [ 506.543976][T24764] Use struct sctp_assoc_value instead [ 506.570290][T24726] team0: Port device netdevsim0 removed [ 506.578857][T24726] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.714977][T24726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 506.727254][T24726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.734967][T24726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 506.756608][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 506.756624][ T28] audit: type=1400 audit(1776802870.440:544): avc: denied { ioctl } for pid=24773 comm="syz.3.8314" path="socket:[83859]" dev="sockfs" ino=83859 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 506.796280][T24726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.811667][ T28] audit: type=1400 audit(1776802870.496:545): avc: denied { getopt } for pid=24775 comm="syz.4.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 506.834048][T24726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 506.853126][T24726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.861057][T24726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 506.878477][T24726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.990144][T24726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.012288][T24726] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.030655][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.037795][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.063426][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.070549][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.201861][T24801] syzkaller0: entered promiscuous mode [ 507.211910][T24801] syzkaller0: entered allmulticast mode [ 507.229874][T24726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.419931][T24726] veth0_vlan: entered promiscuous mode [ 507.437910][T24726] veth1_vlan: entered promiscuous mode [ 507.460143][T24726] veth0_macvtap: entered promiscuous mode [ 507.478638][T24726] veth1_macvtap: entered promiscuous mode [ 507.514273][T24726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.531380][T24726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.543239][ T199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.559439][ T199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.573528][ T199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.587643][ T199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.820861][T24850] __nla_validate_parse: 3 callbacks suppressed [ 507.820880][T24850] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.8337'. [ 507.841204][T24852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8338'. [ 508.581147][T24900] validate_nla: 1 callbacks suppressed [ 508.581172][T24900] netlink: 'syz.4.8359': attribute type 10 has an invalid length. [ 508.595764][T24900] hsr0: entered promiscuous mode [ 508.609394][T24900] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 508.620158][T24900] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 508.632751][T24900] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 508.664916][T24903] syzkaller0: entered promiscuous mode [ 508.866023][T24915] batman_adv: batadv0: Adding interface: macvtap1 [ 508.872555][T24915] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.898498][T24915] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 508.952724][T24919] syzkaller0: entered promiscuous mode [ 508.959984][T24919] syzkaller0: entered allmulticast mode [ 509.008529][T24926] syzkaller0: entered promiscuous mode [ 509.169125][T24930] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.8373'. [ 509.727179][ T28] audit: type=1400 audit(1776802873.218:546): avc: denied { shutdown } for pid=24946 comm="syz.4.8380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 509.857735][T24962] syzkaller0: entered promiscuous mode [ 510.406160][T25002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8402'. [ 510.482596][T25008] syzkaller0: entered promiscuous mode [ 510.488972][T25008] syzkaller0: entered allmulticast mode [ 510.695663][T25042] syzkaller0: entered promiscuous mode [ 510.767331][T25046] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.8418'. [ 511.547268][T25061] syzkaller0: entered promiscuous mode [ 511.552862][T25061] syzkaller0: entered allmulticast mode [ 513.234245][T25075] syzkaller0: entered promiscuous mode [ 513.848501][T25031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.096249][T25117] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8446'. [ 514.169376][T25121] syzkaller0: entered promiscuous mode [ 514.180052][T25121] syzkaller0: entered allmulticast mode [ 514.404087][T25143] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.8456'. [ 514.422927][T25142] netlink: 'syz.1.8457': attribute type 1 has an invalid length. [ 514.451558][T25147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8460'. [ 514.472904][T25142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.509000][T25153] bond2: (slave veth5): Enslaving as an active interface with a down link [ 514.526432][T25142] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8457'. [ 514.561262][ T28] audit: type=1400 audit(1776802877.755:547): avc: denied { setopt } for pid=25155 comm="syz.0.8463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 514.621806][T25165] syzkaller0: entered promiscuous mode [ 514.629536][T25165] syzkaller0: entered allmulticast mode [ 514.683047][T25169] syzkaller0: entered promiscuous mode [ 514.812525][T25179] netlink: 'syz.4.8472': attribute type 1 has an invalid length. [ 514.838566][T25182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8473'. [ 515.128113][T25203] syzkaller0: entered promiscuous mode [ 515.133688][T25203] syzkaller0: entered allmulticast mode [ 515.404909][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8489'. [ 515.428193][T25230] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8493'. [ 515.718396][T25245] netlink: 'syz.1.8500': attribute type 1 has an invalid length. [ 515.727058][T25240] vlan2: entered promiscuous mode [ 515.732180][T25240] dummy0: entered promiscuous mode [ 515.754216][T25245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.771953][T25245] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8500'. [ 515.806216][T25254] netlink: 'syz.1.8504': attribute type 10 has an invalid length. [ 515.825511][T25256] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8505'. [ 516.293625][T25281] syzkaller0: entered promiscuous mode [ 516.299290][T25281] syzkaller0: entered allmulticast mode [ 516.346235][T25292] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8518'. [ 516.651983][T25333] syzkaller0: entered promiscuous mode [ 516.657735][T25333] syzkaller0: entered allmulticast mode [ 516.762163][T25341] syzkaller0: entered promiscuous mode [ 516.768055][T25341] syzkaller0: entered allmulticast mode [ 516.844154][T25347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25347 comm=syz.1.8544 [ 516.978728][T25364] netlink: 'syz.4.8551': attribute type 10 has an invalid length. [ 517.001327][T25364] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.025801][T25364] bond0: (slave team0): Enslaving as an active interface with an up link [ 517.048564][T25366] syzkaller0: entered promiscuous mode [ 517.054393][T25366] syzkaller0: entered allmulticast mode [ 517.060967][T25368] syzkaller0: entered promiscuous mode [ 517.066654][T25368] syzkaller0: entered allmulticast mode [ 517.074144][T25366] 0: reclassify loop, rule prio 0, protocol 700 [ 517.626707][ T28] audit: type=1400 audit(1776802880.608:548): avc: denied { ioctl } for pid=25409 comm="syz.0.8573" path="socket:[86851]" dev="sockfs" ino=86851 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 517.718172][T25423] netlink: 'syz.2.8578': attribute type 10 has an invalid length. [ 517.728838][T25423] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 517.742645][T25423] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 517.756954][T25423] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 517.799757][T25425] netlink: 'syz.0.8579': attribute type 10 has an invalid length. [ 517.825437][T25425] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.845229][T25425] bond0: (slave team0): Enslaving as an active interface with an up link [ 517.970021][T25446] tipc: Started in network mode [ 517.975080][T25446] tipc: Node identity 8e05d515b43c, cluster identity 4711 [ 517.982360][T25446] tipc: Enabled bearer , priority 0 [ 517.995163][T25446] syzkaller0: entered promiscuous mode [ 518.002346][T25446] syzkaller0: entered allmulticast mode [ 518.015050][T25448] netlink: 'syz.1.8589': attribute type 1 has an invalid length. [ 518.030155][T25446] tipc: Resetting bearer [ 518.047871][T25448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.055953][T25445] tipc: Resetting bearer [ 518.063050][T25445] tipc: Disabling bearer [ 518.081120][T25448] bond4: (slave veth7): Enslaving as an active interface with a down link [ 518.389543][T25494] netlink: 'syz.2.8610': attribute type 10 has an invalid length. [ 518.397685][T25494] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 518.409605][T25494] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 518.422553][T25494] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 518.600400][T25512] netlink: 'syz.2.8617': attribute type 10 has an invalid length. [ 518.729386][T25524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.746277][T25524] bond1: (slave veth3): Enslaving as an active interface with a down link [ 518.759249][T25524] bond1: (slave dummy0): making interface the new active one [ 518.768334][T25524] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 518.794404][T25524] bond1: (slave dummy0): Releasing active interface [ 518.843510][ T3501] IPVS: starting estimator thread 0... [ 518.965428][T25532] IPVS: using max 2064 ests per chain, 103200 per kthread [ 519.246418][ T28] audit: type=1400 audit(1776802882.132:549): avc: denied { bind } for pid=25569 comm="syz.2.8644" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 519.268673][ T28] audit: type=1400 audit(1776802882.132:550): avc: denied { node_bind } for pid=25569 comm="syz.2.8644" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 519.913440][T25594] x_tables: duplicate underflow at hook 4 [ 520.090972][T25606] syzkaller0: entered promiscuous mode [ 520.096516][T25606] syzkaller0: entered allmulticast mode [ 520.193392][T25612] validate_nla: 2 callbacks suppressed [ 520.193421][T25612] netlink: 'syz.1.8661': attribute type 1 has an invalid length. [ 520.212132][T25612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 520.229657][T25612] bond5: (slave veth9): Enslaving as an active interface with a down link [ 520.240377][T25612] __nla_validate_parse: 14 callbacks suppressed [ 520.240390][T25612] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8661'. [ 520.394521][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8669'. [ 520.545680][T25649] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.8675'. [ 520.885465][T25673] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.8686'. [ 521.017689][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8691'. [ 521.332004][T25701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8698'. [ 521.352613][T25703] dummy0: entered promiscuous mode [ 521.358128][T25703] vlan2: entered promiscuous mode [ 521.446223][T25710] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8700'. [ 521.534802][T25718] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8705'. [ 521.545790][T25718] syzkaller0: entered promiscuous mode [ 521.551350][T25718] syzkaller0: entered allmulticast mode [ 521.700751][T25729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8710'. [ 522.125394][T25743] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.8716'. [ 522.155143][T25745] syzkaller0: entered promiscuous mode [ 522.160688][T25745] syzkaller0: entered allmulticast mode [ 522.393108][T25759] netlink: 'syz.2.8724': attribute type 1 has an invalid length. [ 522.406574][T25759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.532479][T25765] syzkaller0: entered promiscuous mode [ 522.695678][T25773] : renamed from veth0_to_bond (while UP) [ 524.258164][T25686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.313302][T25792] netlink: 'syz.2.8735': attribute type 1 has an invalid length. [ 524.355952][T25792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 524.417097][T25807] syzkaller0: entered promiscuous mode [ 524.424577][T25807] syzkaller0: entered allmulticast mode [ 525.007904][T25839] syzkaller0: entered promiscuous mode [ 525.013489][T25839] syzkaller0: entered allmulticast mode [ 525.084918][T25849] tipc: Started in network mode [ 525.089983][T25849] tipc: Node identity de411d09b704, cluster identity 4711 [ 525.098040][T25849] tipc: Enabled bearer , priority 0 [ 525.105217][T25849] syzkaller0: entered promiscuous mode [ 525.110774][T25849] syzkaller0: entered allmulticast mode [ 525.123601][T25849] tipc: Resetting bearer [ 525.136372][T25848] tipc: Resetting bearer [ 525.143632][T25848] tipc: Disabling bearer [ 525.249693][T25864] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 525.274216][T25866] syzkaller0: entered promiscuous mode [ 525.279817][T25866] syzkaller0: entered allmulticast mode [ 525.504395][T25888] tipc: Enabled bearer , priority 0 [ 525.518694][T25888] syzkaller0: entered promiscuous mode [ 525.524390][T25888] syzkaller0: entered allmulticast mode [ 525.535200][T25888] tipc: Resetting bearer [ 525.549076][T25887] tipc: Resetting bearer [ 525.566675][T25887] tipc: Disabling bearer [ 525.587064][T25891] tipc: Started in network mode [ 525.592180][T25891] tipc: Node identity be15b923551c, cluster identity 4711 [ 525.599698][T25891] tipc: Enabled bearer , priority 0 [ 525.606857][T25891] syzkaller0: entered promiscuous mode [ 525.612469][T25891] syzkaller0: entered allmulticast mode [ 525.626689][T25891] __nla_validate_parse: 10 callbacks suppressed [ 525.626706][T25891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8777'. [ 525.661756][T25891] tipc: Resetting bearer [ 525.673345][T25890] tipc: Resetting bearer [ 525.685301][T25890] tipc: Disabling bearer [ 525.751696][T25897] syzkaller0: entered promiscuous mode [ 525.760541][T25899] netlink: 'syz.3.8781': attribute type 10 has an invalid length. [ 525.763044][T25897] syzkaller0: entered allmulticast mode [ 525.820157][T25903] syzkaller0: entered promiscuous mode [ 525.825710][T25903] syzkaller0: entered allmulticast mode [ 525.858635][T25905] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.8784'. [ 525.909707][T25910] syzkaller0: entered promiscuous mode [ 525.918764][T25910] syzkaller0: entered allmulticast mode [ 526.002467][T25916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8786'. [ 526.022101][T25916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8786'. [ 526.044622][T25918] netlink: 'syz.4.8790': attribute type 1 has an invalid length. [ 526.119118][T25918] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8790'. [ 526.274579][T25937] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.8796'. [ 526.341336][T25939] netlink: 'syz.0.8798': attribute type 29 has an invalid length. [ 526.365834][T25939] netlink: 'syz.0.8798': attribute type 29 has an invalid length. [ 526.551869][T25960] syzkaller0: entered promiscuous mode [ 526.557703][T25960] syzkaller0: entered allmulticast mode [ 526.589294][T25961] syzkaller0: entered promiscuous mode [ 526.595297][T25961] syzkaller0: entered allmulticast mode [ 526.685329][T25963] netlink: 'syz.4.8807': attribute type 10 has an invalid length. [ 526.978244][T25990] syzkaller0: entered promiscuous mode [ 526.983987][T25990] syzkaller0: entered allmulticast mode [ 527.084704][T25927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.212059][T26011] syzkaller0: entered promiscuous mode [ 527.262399][T26019] tipc: Enabled bearer , priority 0 [ 527.269545][T26019] syzkaller0: entered promiscuous mode [ 527.275204][T26019] syzkaller0: entered allmulticast mode [ 527.281986][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8828'. [ 527.293349][T26019] tipc: Resetting bearer [ 527.309333][T26018] tipc: Resetting bearer [ 527.320437][T26018] tipc: Disabling bearer [ 527.462067][T26033] tipc: Enabled bearer , priority 0 [ 527.469025][T26033] syzkaller0: entered promiscuous mode [ 527.474649][T26033] syzkaller0: entered allmulticast mode [ 527.484294][T26033] tipc: Resetting bearer [ 527.502316][T26032] tipc: Resetting bearer [ 527.519063][T26032] tipc: Disabling bearer [ 527.725068][ T28] audit: type=1400 audit(1776802890.065:551): avc: denied { map } for pid=26057 comm="syz.1.8845" path="socket:[89450]" dev="sockfs" ino=89450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 527.784588][T26064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8847'. [ 527.989910][T26089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8855'. [ 528.014860][T26098] netlink: 'syz.3.8857': attribute type 10 has an invalid length. [ 528.107531][T26108] tipc: Enabled bearer , priority 0 [ 528.114689][T26108] syzkaller0: entered promiscuous mode [ 528.120511][T26108] syzkaller0: entered allmulticast mode [ 528.133813][T26108] tipc: Resetting bearer [ 528.148710][T26107] tipc: Resetting bearer [ 528.162357][T26107] tipc: Disabling bearer [ 528.347520][T26138] netlink: 'syz.4.8869': attribute type 1 has an invalid length. [ 528.366717][T26138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.394816][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8868'. [ 528.404056][T26138] bond1: (slave veth3): Enslaving as an active interface with a down link [ 528.472360][T26148] netlink: 'syz.4.8871': attribute type 10 has an invalid length. [ 528.699875][T26176] netlink: 'syz.4.8881': attribute type 1 has an invalid length. [ 528.720420][T26176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.739929][T26176] bond2: (slave veth5): Enslaving as an active interface with a down link [ 528.895932][T26204] syzkaller0: entered promiscuous mode [ 528.904520][T26204] syzkaller0: entered allmulticast mode [ 529.193166][T26234] syzkaller0: entered promiscuous mode [ 529.208645][T26234] syzkaller0: entered allmulticast mode [ 529.293068][T26250] netlink: 'syz.2.8905': attribute type 39 has an invalid length. [ 529.422762][T26250] xt_connbytes: Forcing CT accounting to be enabled [ 529.699853][T26290] syzkaller0: entered promiscuous mode [ 529.705589][T26290] syzkaller0: entered allmulticast mode [ 529.959750][T26312] tipc: Started in network mode [ 529.964734][T26312] tipc: Node identity ae6fc3b73706, cluster identity 4711 [ 529.972405][T26312] tipc: Enabled bearer , priority 0 [ 529.983055][T26312] syzkaller0: entered promiscuous mode [ 529.990260][T26312] syzkaller0: entered allmulticast mode [ 529.998728][T26312] tipc: Resetting bearer [ 530.005297][T26311] tipc: Resetting bearer [ 530.015025][T26311] tipc: Disabling bearer [ 530.373749][T26336] syzkaller0: entered promiscuous mode [ 530.379390][T26336] syzkaller0: entered allmulticast mode [ 530.673111][T26351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.695393][T26356] veth1_to_team: entered promiscuous mode [ 530.701867][T26356] veth1: entered promiscuous mode [ 530.708072][T26356] veth1_to_team: left promiscuous mode [ 530.713988][T26356] veth1: left promiscuous mode [ 530.723934][T26351] vlan2: entered allmulticast mode [ 530.729271][T26351] bond6: entered allmulticast mode [ 530.742983][T26351] bond6: (slave geneve2): making interface the new active one [ 530.751005][T26351] geneve2: entered allmulticast mode [ 530.758272][T26351] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 530.894555][T26370] syzkaller0: entered promiscuous mode [ 530.902812][T26370] syzkaller0: entered allmulticast mode [ 531.283793][T26395] __nla_validate_parse: 11 callbacks suppressed [ 531.283810][T26395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8968'. [ 531.317951][T26402] validate_nla: 4 callbacks suppressed [ 531.318034][T26402] netlink: 'syz.2.8969': attribute type 1 has an invalid length. [ 531.337714][T26402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.354581][T26402] bond4: (slave veth9): Enslaving as an active interface with a down link [ 531.364605][T26402] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8969'. [ 531.426099][T26409] bond0: (slave team0): Releasing backup interface [ 531.434109][T26409] bond0: (slave bond_slave_0): Releasing backup interface [ 531.442280][T26409] bond0: (slave bond_slave_1): Releasing backup interface [ 531.451190][T26409] team0: Port device team_slave_0 removed [ 531.458187][T26409] team0: Port device team_slave_1 removed [ 531.464532][T26409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.472128][T26409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.480964][T26409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.497190][T26410] team0: Mode changed to "broadcast" [ 531.537883][T26412] tipc: Enabled bearer , priority 0 [ 531.545446][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8973'. [ 531.555721][T26412] tipc: Resetting bearer [ 531.563340][T26411] tipc: Disabling bearer [ 531.744644][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8979'. [ 531.789609][T26439] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.8985'. [ 531.840245][T26444] syzkaller0: entered promiscuous mode [ 531.845819][T26444] syzkaller0: entered allmulticast mode [ 531.857282][T26447] netlink: 'syz.4.8988': attribute type 8 has an invalid length. [ 531.865353][T26447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8988'. [ 532.122742][T26463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8996'. [ 532.184920][T26472] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8998'. [ 532.199883][T26472] syzkaller0: entered promiscuous mode [ 532.206017][T26472] syzkaller0: entered allmulticast mode [ 532.341163][T26485] syzkaller0: entered promiscuous mode [ 532.346848][T26485] syzkaller0: entered allmulticast mode [ 532.367154][T26464] chnl_net:caif_netlink_parms(): no params data found [ 532.414453][T26464] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.422514][T26464] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.429963][T26464] bridge_slave_0: entered allmulticast mode [ 532.437035][T26464] bridge_slave_0: entered promiscuous mode [ 532.447579][T26464] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.454818][T26464] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.462749][T26464] bridge_slave_1: entered allmulticast mode [ 532.469911][T26464] bridge_slave_1: entered promiscuous mode [ 532.548976][ T900] bond0 (unregistering): Released all slaves [ 532.558956][ T900] bond1 (unregistering): (slave veth3): Releasing active interface [ 532.571486][ T900] bond1 (unregistering): Released all slaves [ 532.580605][ T900] bond2 (unregistering): Released all slaves [ 532.589683][ T900] bond3 (unregistering): Released all slaves [ 532.599274][ T900] bond4 (unregistering): (slave veth9): Releasing active interface [ 532.615758][ T900] bond4 (unregistering): Released all slaves [ 532.646667][ T900] tipc: Left network mode [ 532.654314][T26464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.665666][T26464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.681983][ T900] hsr_slave_0: left promiscuous mode [ 532.696584][ T900] hsr_slave_1: left promiscuous mode [ 532.702330][T26512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9007'. [ 532.852865][ T3047] 8021q: adding VLAN 0 to HW filter on device eth1 [ 532.862525][T26523] tipc: Enabling of bearer rejected, failed to enable media [ 532.879181][T26526] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9009'. [ 532.895955][T26464] team0: Port device team_slave_0 added [ 532.905624][T26464] team0: Port device team_slave_1 added [ 532.931672][T26525] syzkaller0: entered promiscuous mode [ 532.937294][T26525] syzkaller0: entered allmulticast mode [ 532.943848][T26537] netlink: 'syz.4.9014': attribute type 8 has an invalid length. [ 532.970972][T26519] syzkaller0: entered promiscuous mode [ 532.976492][T26519] syzkaller0: entered allmulticast mode [ 532.988752][T26464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.995772][T26464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.022503][T26464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.087495][T26464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.105618][T26464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.151561][T26464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.178008][T26548] netlink: 'syz.3.9018': attribute type 10 has an invalid length. [ 533.199768][T26464] hsr_slave_0: entered promiscuous mode [ 533.212756][T26464] hsr_slave_1: entered promiscuous mode [ 533.233693][T26464] debugfs: 'hsr0' already exists in 'hsr' [ 533.246677][T26464] Cannot create hsr debugfs directory [ 533.388258][T26573] tipc: Enabling of bearer rejected, failed to enable media [ 533.621152][ T3047] 8021q: adding VLAN 0 to HW filter on device eth2 [ 533.743151][T26601] netlink: 'syz.0.9029': attribute type 1 has an invalid length. [ 533.801074][T26601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.864631][T26611] bond1: (slave veth3): Enslaving as an active interface with a down link [ 533.918847][T26601] bond1: (slave dummy0): making interface the new active one [ 533.968329][T26601] dummy0: entered promiscuous mode [ 533.978390][T26601] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 534.066553][T26631] syzkaller0: entered promiscuous mode [ 534.077865][T26631] syzkaller0: entered allmulticast mode [ 534.490452][T26709] netlink: 'syz.1.9044': attribute type 1 has an invalid length. [ 534.506448][T26709] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.525178][T26709] bond7: (slave veth11): Enslaving as an active interface with a down link [ 534.556346][T26713] netlink: 'syz.1.9045': attribute type 10 has an invalid length. [ 534.827869][T26620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.841200][T26464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 534.867437][T26464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.879661][T26464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 534.897754][T26464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.913278][T26464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 534.928536][T26464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.955250][T26464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 534.971257][T26745] netlink: 'syz.3.9054': attribute type 1 has an invalid length. [ 534.972311][T26464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 534.990261][T26743] syzkaller0: entered promiscuous mode [ 534.996497][T26743] syzkaller0: entered allmulticast mode [ 535.014447][T26745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.044120][T26745] bond3: (slave veth5): Enslaving as an active interface with a down link [ 535.135985][T26464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.160031][T26464] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.186346][ T900] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.193611][ T900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.224625][ T900] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.231755][ T900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.312396][T26786] bond0: (slave team0): Releasing backup interface [ 535.322262][T26786] bond1: (slave dummy0): Releasing active interface [ 535.328939][T26786] dummy0: left promiscuous mode [ 535.343143][T26786] bridge_slave_0: left allmulticast mode [ 535.349082][T26786] bridge_slave_0: left promiscuous mode [ 535.354879][T26786] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.363934][T26786] bridge_slave_1: left allmulticast mode [ 535.369833][T26786] bridge_slave_1: left promiscuous mode [ 535.375603][T26786] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.385185][T26786] bond0: (slave bond_slave_0): Releasing backup interface [ 535.395252][T26786] bond0: (slave bond_slave_1): Releasing backup interface [ 535.407358][T26786] team0: Failed to send options change via netlink (err -105) [ 535.415582][T26786] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 535.425154][T26786] team0: Port device team_slave_0 removed [ 535.433849][T26786] team0: Failed to send options change via netlink (err -105) [ 535.442391][T26786] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 535.451970][T26786] team0: Port device team_slave_1 removed [ 535.458517][T26786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.466033][T26786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.474618][T26786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.482035][T26786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.492091][T26786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 535.524785][T26793] team0: Mode changed to "broadcast" [ 535.552171][T26464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.597119][T26804] netlink: 'syz.3.9070': attribute type 1 has an invalid length. [ 535.612331][T26804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 535.630375][T26804] bond4: (slave veth7): Enslaving as an active interface with a down link [ 535.722811][T26464] veth0_vlan: entered promiscuous mode [ 535.739773][T26464] veth1_vlan: entered promiscuous mode [ 535.775432][T26464] veth0_macvtap: entered promiscuous mode [ 535.784731][T26464] veth1_macvtap: entered promiscuous mode [ 535.796391][T26464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.806463][T26464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.832859][ T900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.849819][ T900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.881885][ T900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.910421][ T900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.007190][T11320] ================================================================== [ 536.015330][T11320] BUG: KCSAN: data-race in copy_process / free_pid [ 536.021878][T11320] [ 536.024225][T11320] read-write to 0xffffffff86e5c3a8 of 4 bytes by task 19580 on cpu 0: [ 536.032390][T11320] free_pid+0xb3/0x1b0 [ 536.036482][T11320] free_pids+0x54/0xb0 [ 536.040571][T11320] release_task+0x9a7/0xb60 [ 536.045107][T11320] wait_consider_task+0x1160/0x1670 [ 536.050341][T11320] __do_wait+0xf9/0x510 [ 536.054532][T11320] do_wait+0xb6/0x230 [ 536.058545][T11320] kernel_wait4+0x19f/0x210 [ 536.063079][T11320] __x64_sys_wait4+0x91/0x120 [ 536.067788][T11320] x64_sys_call+0x2aee/0x3020 [ 536.072497][T11320] do_syscall_64+0x12c/0x3b0 [ 536.077114][T11320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.083026][T11320] [ 536.085373][T11320] read to 0xffffffff86e5c3a8 of 4 bytes by task 11320 on cpu 1: [ 536.093029][T11320] copy_process+0x1b1d/0x23a0 [ 536.097751][T11320] kernel_clone+0x1a5/0x5e0 [ 536.102280][T11320] user_mode_thread+0x9c/0xd0 [ 536.106999][T11320] call_usermodehelper_exec_work+0x7a/0x160 [ 536.112948][T11320] process_scheduled_works+0x4f0/0x9c0 [ 536.118458][T11320] worker_thread+0x58a/0x780 [ 536.123090][T11320] kthread+0x22a/0x280 [ 536.127213][T11320] ret_from_fork+0x146/0x330 [ 536.131825][T11320] ret_from_fork_asm+0x1a/0x30 [ 536.136626][T11320] [ 536.138985][T11320] value changed: 0x8000010e -> 0x8000010d [ 536.144803][T11320] [ 536.147144][T11320] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 536.153326][T11320] CPU: 1 UID: 0 PID: 11320 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 536.162988][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 536.173071][T11320] Workqueue: events_unbound call_usermodehelper_exec_work [ 536.180240][T11320] ================================================================== [ 536.335828][T26844] syzkaller0: entered promiscuous mode [ 536.342572][T26844] syzkaller0: entered allmulticast mode [ 536.512676][T26848] chnl_net:caif_netlink_parms(): no params data found [ 536.551608][T26848] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.558739][T26848] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.566122][T26848] bridge_slave_0: entered allmulticast mode [ 536.572817][T26848] bridge_slave_0: entered promiscuous mode [ 536.579646][T26848] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.586938][T26848] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.594551][T26848] bridge_slave_1: entered allmulticast mode [ 536.601125][T26848] bridge_slave_1: entered promiscuous mode [ 536.639589][T26848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.651924][T26848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.675115][T26848] team0: Port device team_slave_0 added [ 536.682468][T26848] team0: Port device team_slave_1 added [ 536.700092][T26848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.707207][T26848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.733484][T26848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.747110][T26848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.754125][T26848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.780511][T26848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.814801][T26848] hsr_slave_0: entered promiscuous mode [ 536.821054][T26848] hsr_slave_1: entered promiscuous mode [ 536.826951][T26848] debugfs: 'hsr0' already exists in 'hsr' [ 536.832764][T26848] Cannot create hsr debugfs directory [ 536.893881][T26848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.966749][T26848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.020826][ T9611] bond2 (unregistering): (slave bridge0): Releasing active interface [ 537.029328][ T9611] bridge0 (unregistering): left promiscuous mode [ 537.035921][ T9611] bridge0 (unregistering): left allmulticast mode [ 537.066373][ T9611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.075659][ T9611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.085375][ T9611] bond0 (unregistering): (slave team0): Releasing backup interface [ 537.093964][ T9611] bond0 (unregistering): Released all slaves [ 537.101901][ T9611] bond1 (unregistering): (slave veth3): Releasing active interface [ 537.110916][ T9611] bond1 (unregistering): Released all slaves [ 537.119366][ T9611] bond2 (unregistering): Released all slaves [ 537.128321][ T9611] bond3 (unregistering): (slave veth5): Releasing active interface [ 537.137070][ T9611] bond3 (unregistering): Released all slaves [ 537.146365][ T9611] bond4 (unregistering): (slave veth7): Releasing active interface [ 537.155341][ T9611] bond4 (unregistering): Released all slaves [ 537.174043][T26848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.195816][ T9611] tipc: Left network mode [ 537.202682][ T9611] hsr_slave_0: left promiscuous mode [ 537.208466][ T9611] hsr_slave_1: left promiscuous mode [ 537.214418][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.222034][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.248183][ T9611] team0 (unregistering): Port device macvlan1 removed [ 537.281778][ T9611] team0 (unregistering): Port device team_slave_1 removed [ 537.292236][ T9611] team0 (unregistering): Port device team_slave_0 removed [ 537.341855][T26848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.355986][ T3047] 8021q: adding VLAN 0 to HW filter on device eth1 [ 537.437457][T26848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 537.446696][T26848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.459631][T26848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 537.468667][T26848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 537.476655][T26848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 537.485658][T26848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 537.498626][T26848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 537.508164][T26848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 537.516217][ T3047] 8021q: adding VLAN 0 to HW filter on device eth2 [ 537.557069][T26848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.572325][T26848] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.582497][T11320] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.589628][T11320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.617767][T26848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 537.639522][T26848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.655887][T11320] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.662993][T11320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.697887][ T3047] 8021q: adding VLAN 0 to HW filter on device eth3 [ 537.722054][ T9611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.745295][T26848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.773438][ T9611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.858955][ T3047] 8021q: adding VLAN 0 to HW filter on device eth4 [ 537.870537][ T9611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.908866][T26848] veth0_vlan: entered promiscuous mode [ 537.916911][T26848] veth1_vlan: entered promiscuous mode [ 537.933136][T26848] veth0_macvtap: entered promiscuous mode [ 537.940735][T26848] veth1_macvtap: entered promiscuous mode [ 537.953519][T26848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.967898][ T9611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.980703][T26848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.992448][ T900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.001626][ T900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.013178][ T900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.022254][ T900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.119836][ T9611] batman_adv: batadv0: Removing interface: macvtap1 [ 538.188926][ T9611] bond0 (unregistering): Released all slaves [ 538.197229][ T9611] bond1 (unregistering): (slave veth3): Releasing active interface [ 538.206470][ T9611] bond1 (unregistering): Released all slaves [ 538.215405][ T3047] 8021q: adding VLAN 0 to HW filter on device eth5 [ 538.274649][ T9611] tipc: Left network mode [ 538.281701][ T9611] hsr_slave_0: left promiscuous mode [ 538.287506][ T9611] hsr_slave_1: left promiscuous mode [ 538.294944][ T9611] veth1_macvtap: left promiscuous mode [ 538.300534][ T9611] veth0_macvtap: left promiscuous mode [ 538.306138][ T9611] veth1_vlan: left promiscuous mode [ 538.311469][ T9611] veth0_vlan: left promiscuous mode [ 538.418418][ T3047] 8021q: adding VLAN 0 to HW filter on device eth6 [ 538.527827][ T3047] 8021q: adding VLAN 0 to HW filter on device eth7 [ 538.633446][ T3047] 8021q: adding VLAN 0 to HW filter on device eth8 [ 538.724871][ T9611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.687044][ T9611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.739804][ T9611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.793673][ T9611] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.854573][ T9611] bridge_slave_1: left allmulticast mode [ 539.860448][ T9611] bridge_slave_1: left promiscuous mode [ 539.866311][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.874170][ T9611] bridge_slave_0: left allmulticast mode [ 539.880027][ T9611] bridge_slave_0: left promiscuous mode [ 539.885760][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.965211][ T9611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.975220][ T9611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.985034][ T9611] bond0 (unregistering): Released all slaves [ 540.026844][ T9611] hsr_slave_0: left promiscuous mode [ 540.036476][ T9611] hsr_slave_1: left promiscuous mode [ 540.047625][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.055070][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.064749][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.080297][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.105129][ T9611] veth1_macvtap: left promiscuous mode [ 540.111433][ T9611] veth0_macvtap: left promiscuous mode [ 540.122475][ T9611] veth1_vlan: left promiscuous mode [ 540.134684][ T9611] veth0_vlan: left promiscuous mode [ 540.228620][ T9611] team0 (unregistering): Port device team_slave_1 removed [ 540.238869][ T9611] team0 (unregistering): Port device team_slave_0 removed [ 540.276860][ T3047] 8021q: adding VLAN 0 to HW filter on device eth9 [ 540.390523][ T3047] 8021q: adding VLAN 0 to HW filter on device eth10 [ 540.499985][ T3047] 8021q: adding VLAN 0 to HW filter on device eth11 [ 540.552980][ T9611] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.612505][ T3047] 8021q: adding VLAN 0 to HW filter on device eth12 [ 541.557606][ T9611] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.621970][ T9611] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.674912][ T9611] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.745074][ T9611] bridge_slave_1: left allmulticast mode [ 541.750858][ T9611] bridge_slave_1: left promiscuous mode [ 541.756570][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.764440][ T9611] bridge_slave_0: left allmulticast mode [ 541.770197][ T9611] bridge_slave_0: left promiscuous mode [ 541.775953][ T9611] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.837217][ T9611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.847425][ T9611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.857661][ T9611] bond0 (unregistering): Released all slaves [ 541.890524][ T9611] hsr_slave_0: left promiscuous mode [ 541.896340][ T9611] hsr_slave_1: left promiscuous mode [ 541.902932][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.910653][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.918444][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.925939][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.937447][ T9611] veth1_macvtap: left promiscuous mode [ 541.943041][ T9611] veth0_macvtap: left promiscuous mode [ 541.948580][ T9611] veth1_vlan: left promiscuous mode [ 541.953900][ T9611] veth0_vlan: left promiscuous mode [ 542.033813][ T9611] team0 (unregistering): Port device team_slave_1 removed [ 542.045816][ T9611] team0 (unregistering): Port device team_slave_0 removed [ 542.082473][ T3047] 8021q: adding VLAN 0 to HW filter on device eth13 [ 542.189193][ T3047] 8021q: adding VLAN 0 to HW filter on device eth14 [ 542.295678][ T3047] 8021q: adding VLAN 0 to HW filter on device eth15 [ 542.404288][ T3047] 8021q: adding VLAN 0 to HW filter on device eth16