last executing test programs: 3.955302339s ago: executing program 2 (id=3262): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0xfce, &(0x7f0000000880)={@multicast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "0bc947", 0xf98, 0x21, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x29, 0x1d3, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @generic={0xf0, 0xe88, "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"}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x1}]}], {{0x4e21, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x5, "c8f4dd", 0x8, "4d0d87"}, "e0dffb72d951d438ded131739717f9e574b8e28b7435524d4965bb78fb59d6b24c089b6d05dcc1fcb5ea3248324f34fa9a7b27f66c33081dcc53ae04e2f67ffc95907b524c4b01c73238ff3f38fb26551abc8be0dba2a454fe8800654440b260539fee4d3411af9e2f6ddeafdae045c314fde3c7e11d6565741f749ab34a86f5df45cf73e980a33db935351ae1e1d09d6ed8e02818cb41afaeaea4c3eaa0fc2c17d0cb1c064a123ed1d6947539e187432b31cdbfbc5743012b0b5bcc53a3492ead078b67a1793328407512247213750d2257cb338a0a02c4ecfd4941175beb23"}}}}}}, 0x0) 3.917845581s ago: executing program 2 (id=3263): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0x1, 0x485, &(0x7f0000001040)="$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") syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)='I', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 3.325410506s ago: executing program 0 (id=3268): socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000a00000004000180180002801400018008000100b04c94a708000a00ac03cdaa1400198008000100"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) 3.211593883s ago: executing program 0 (id=3272): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1}}, 0x9) 3.149004117s ago: executing program 1 (id=3273): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394", 0xf}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 2.21942486s ago: executing program 0 (id=3283): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x54, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x3, 0x0, 0x0, 0x0, 0x100, 0xc2398, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getgroups(0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0109481f8200fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) writev(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r9, &(0x7f0000000040)={0x30000008}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) bpf$PROG_LOAD(0x5, 0x0, 0x54de29c07aa20010) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYRESHEX=r5], 0x48}}, 0x0) 2.096372638s ago: executing program 1 (id=3284): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x123, 0x234}, 0x14}}, 0x0) read$nci(r0, 0x0, 0x0) 1.812578785s ago: executing program 4 (id=3286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x40, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000013800"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c00"], 0x78}}, 0x0) 1.638375175s ago: executing program 4 (id=3287): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x41) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 1.373174641s ago: executing program 3 (id=3289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x5}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x100, 0x64) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x0, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x446bc, 0x3, 0x60, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 1.252702887s ago: executing program 1 (id=3290): socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000a00000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) 1.220134999s ago: executing program 1 (id=3291): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 952.237555ms ago: executing program 0 (id=3292): semop(0x0, &(0x7f0000000080)=[{0x0, 0xff, 0x800}, {0x0, 0xc3a7, 0x1000}], 0x2) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0xfff9}, {0x2, 0x401, 0x800}], 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 918.348647ms ago: executing program 0 (id=3293): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1}}, 0x9) 876.81568ms ago: executing program 2 (id=3294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 778.910475ms ago: executing program 2 (id=3295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x1c, r2, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) 734.859707ms ago: executing program 3 (id=3296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) 668.008862ms ago: executing program 3 (id=3297): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendto$packet(r7, &(0x7f0000000300)="103df4fb66b88900eff01530adc1", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0xf6, r9, 0x1, 0x5b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 644.565773ms ago: executing program 4 (id=3298): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @private1, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r3}}, 0x120) close_range(r0, 0xffffffffffffffff, 0x0) 599.032876ms ago: executing program 3 (id=3299): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf4, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb86, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x3, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa9, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x203, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x8, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0xa, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2000002, 0x1000, 0x7ffffffd, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x14, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffb, 0x4, 0x9, 0xd61b, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x8, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x8, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x6, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20040098}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 491.887682ms ago: executing program 3 (id=3300): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socket$qrtr(0x2a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4002, 0xa}, 0x0, 0x0, 0x0, 0x7, 0x7fff, 0x7fffffff, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x5}, 0x2000, 0x2, 0x100, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 430.731786ms ago: executing program 4 (id=3301): socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000a00000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) 429.976536ms ago: executing program 3 (id=3302): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x54, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x3, 0x0, 0x0, 0x0, 0x100, 0xc2398, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getgroups(0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0109481f8200fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) writev(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r9, &(0x7f0000000040)={0x30000008}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) bpf$PROG_LOAD(0x5, 0x0, 0x54de29c07aa20010) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYRESHEX=r5], 0x48}}, 0x0) 429.306396ms ago: executing program 4 (id=3303): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) io_setup(0x2278, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r2}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="7f", 0x1, 0x0, 0x0, 0x2}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r6, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 352.24001ms ago: executing program 4 (id=3304): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)='I', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 350.16014ms ago: executing program 1 (id=3305): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) pipe2(0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32], 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 344.49009ms ago: executing program 2 (id=3306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 252.583116ms ago: executing program 2 (id=3307): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394", 0xf}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 171.933141ms ago: executing program 1 (id=3308): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x41) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 0s ago: executing program 0 (id=3309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendto$packet(r7, &(0x7f0000000300)="103df4fb66b88900eff01530adc1", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0xf6, r9, 0x1, 0x5b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) kernel console output (not intermixed with test programs): n dev loop0, logical block 71, async page read [ 183.310901][ T8296] syz.0.1601: attempt to access beyond end of device [ 183.310901][ T8296] loop0: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 183.324716][ T8296] Buffer I/O error on dev loop0, logical block 72, async page read [ 183.380883][ T8296] syz.0.1601: attempt to access beyond end of device [ 183.380883][ T8296] loop0: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 183.394628][ T8296] Buffer I/O error on dev loop0, logical block 69, async page read [ 183.421121][ T8307] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 183.434726][ T8296] syz.0.1601: attempt to access beyond end of device [ 183.434726][ T8296] loop0: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 183.448930][ T8296] Buffer I/O error on dev loop0, logical block 70, async page read [ 183.457225][ T8296] syz.0.1601: attempt to access beyond end of device [ 183.457225][ T8296] loop0: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 183.471342][ T8296] Buffer I/O error on dev loop0, logical block 71, async page read [ 183.479618][ T8296] Buffer I/O error on dev loop0, logical block 72, async page read [ 183.487646][ T8296] Buffer I/O error on dev loop0, logical block 69, async page read [ 183.489696][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 183.505684][ T8296] Buffer I/O error on dev loop0, logical block 70, async page read [ 183.520125][ T8307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.531012][ T8311] macvlan4: entered promiscuous mode [ 183.536491][ T8311] macvlan4: entered allmulticast mode [ 183.725237][ T8334] lo speed is unknown, defaulting to 1000 [ 183.790711][ T8334] lo speed is unknown, defaulting to 1000 [ 183.828276][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1612'. [ 184.253818][ T8357] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 184.308176][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'. [ 184.482738][ T8357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.494057][ T8358] macvlan5: entered promiscuous mode [ 184.499487][ T8358] macvlan5: entered allmulticast mode [ 184.651814][ T8371] loop2: detected capacity change from 0 to 128 [ 184.870240][ T8390] lo speed is unknown, defaulting to 1000 [ 184.886650][ T8394] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 184.916380][ T8394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.955225][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'. [ 184.980109][ T8394] macvlan2: entered promiscuous mode [ 184.985564][ T8394] macvlan2: entered allmulticast mode [ 184.998931][ T8398] lo speed is unknown, defaulting to 1000 [ 185.004918][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1627'. [ 185.868881][ T8438] loop3: detected capacity change from 0 to 128 [ 185.995922][ T8446] netlink: 'syz.2.1644': attribute type 1 has an invalid length. [ 186.015270][ T8446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.072295][ T8462] loop1: detected capacity change from 0 to 128 [ 186.106554][ T8464] lo speed is unknown, defaulting to 1000 [ 186.163204][ T8457] lo speed is unknown, defaulting to 1000 [ 186.198604][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1647'. [ 187.025227][ T8498] loop0: detected capacity change from 0 to 128 [ 187.161453][ T8510] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 187.179371][ T8510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.232141][ T8515] lo speed is unknown, defaulting to 1000 [ 187.236774][ T8517] loop1: detected capacity change from 0 to 128 [ 187.339187][ T8515] lo speed is unknown, defaulting to 1000 [ 187.371873][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1665'. [ 187.497192][ T8539] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 187.512463][ T8539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.584857][ T8544] loop2: detected capacity change from 0 to 128 [ 187.626059][ T8545] xt_hashlimit: max too large, truncated to 1048576 [ 188.014752][ T8551] syzkaller0: entered promiscuous mode [ 188.020990][ T8551] syzkaller0: entered allmulticast mode [ 188.367908][ T8563] loop2: detected capacity change from 0 to 128 [ 188.386038][ T8563] bio_check_eod: 282 callbacks suppressed [ 188.386060][ T8563] syz.2.1684: attempt to access beyond end of device [ 188.386060][ T8563] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 188.407551][ T8563] syz.2.1684: attempt to access beyond end of device [ 188.407551][ T8563] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 188.441213][ T8570] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 188.451426][ T8563] syz.2.1684: attempt to access beyond end of device [ 188.451426][ T8563] loop2: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 188.465404][ T8563] buffer_io_error: 153 callbacks suppressed [ 188.465424][ T8563] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 188.483083][ T8569] syz.2.1684: attempt to access beyond end of device [ 188.483083][ T8569] loop2: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 188.498169][ T8562] syz.2.1684: attempt to access beyond end of device [ 188.498169][ T8562] loop2: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 188.504694][ T8570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.511994][ T8562] Buffer I/O error on dev loop2, logical block 69, async page read [ 188.512062][ T8562] syz.2.1684: attempt to access beyond end of device [ 188.512062][ T8562] loop2: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 188.540380][ T8562] Buffer I/O error on dev loop2, logical block 70, async page read [ 188.550046][ T8562] syz.2.1684: attempt to access beyond end of device [ 188.550046][ T8562] loop2: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 188.564309][ T8562] Buffer I/O error on dev loop2, logical block 71, async page read [ 188.572366][ T8562] syz.2.1684: attempt to access beyond end of device [ 188.572366][ T8562] loop2: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 188.586249][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'. [ 188.595437][ T8562] Buffer I/O error on dev loop2, logical block 72, async page read [ 188.603721][ T8562] syz.2.1684: attempt to access beyond end of device [ 188.603721][ T8562] loop2: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 188.618129][ T8562] Buffer I/O error on dev loop2, logical block 69, async page read [ 188.634557][ T8575] lo speed is unknown, defaulting to 1000 [ 188.654036][ T8562] syz.2.1684: attempt to access beyond end of device [ 188.654036][ T8562] loop2: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 188.668446][ T8562] Buffer I/O error on dev loop2, logical block 70, async page read [ 188.677977][ T8580] lo speed is unknown, defaulting to 1000 [ 188.692394][ T8562] Buffer I/O error on dev loop2, logical block 71, async page read [ 188.706235][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1687'. [ 188.719746][ T8562] Buffer I/O error on dev loop2, logical block 72, async page read [ 188.728498][ T8562] Buffer I/O error on dev loop2, logical block 69, async page read [ 188.744708][ T8583] loop3: detected capacity change from 0 to 128 [ 189.029270][ T8594] syzkaller0: entered promiscuous mode [ 189.035083][ T8594] syzkaller0: entered allmulticast mode [ 189.205434][ T8614] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 189.244806][ T8617] loop1: detected capacity change from 0 to 128 [ 189.255715][ T8614] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.276493][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 189.334906][ T8621] loop2: detected capacity change from 0 to 128 [ 189.657616][ T8633] lo speed is unknown, defaulting to 1000 [ 189.703873][ T8642] syzkaller0: entered promiscuous mode [ 189.709566][ T8642] syzkaller0: entered allmulticast mode [ 189.746035][ T8644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1708'. [ 189.801082][ T8643] lo speed is unknown, defaulting to 1000 [ 189.954966][ T8661] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 189.990549][ T8661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.014340][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 190.039231][ T8670] loop4: detected capacity change from 0 to 128 [ 190.123147][ T8677] loop3: detected capacity change from 0 to 128 [ 190.458123][ T8704] lo speed is unknown, defaulting to 1000 [ 190.524842][ T8709] lo speed is unknown, defaulting to 1000 [ 190.564452][ T8704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39940 sclass=netlink_route_socket pid=8704 comm=syz.2.1731 [ 190.741102][ T8714] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 190.780207][ T8714] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.789049][ T8717] loop2: detected capacity change from 0 to 128 [ 190.792463][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'. [ 190.911805][ T8721] loop3: detected capacity change from 0 to 128 [ 191.080706][ T8734] xt_hashlimit: max too large, truncated to 1048576 [ 191.263074][ T8748] lo speed is unknown, defaulting to 1000 [ 191.311240][ T8748] lo speed is unknown, defaulting to 1000 [ 191.349113][ T8753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39940 sclass=netlink_route_socket pid=8753 comm=syz.2.1746 [ 191.413446][ T8757] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 191.427001][ T8757] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.435995][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'. [ 191.464622][ T8760] loop3: detected capacity change from 0 to 128 [ 191.599216][ T8768] loop2: detected capacity change from 0 to 128 [ 191.927840][ T8784] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 191.943242][ T8784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.953787][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 191.992225][ T8787] lo speed is unknown, defaulting to 1000 [ 192.070010][ T8787] lo speed is unknown, defaulting to 1000 [ 192.083834][ T8791] FAT-fs (loop0): Directory bread(block 162) failed [ 192.100868][ T8792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39940 sclass=netlink_route_socket pid=8792 comm=syz.2.1762 [ 192.114948][ T8791] FAT-fs (loop0): Directory bread(block 163) failed [ 192.121812][ T8791] FAT-fs (loop0): Directory bread(block 164) failed [ 192.143328][ T8791] FAT-fs (loop0): Directory bread(block 165) failed [ 192.159216][ T8791] FAT-fs (loop0): Directory bread(block 166) failed [ 192.166091][ T8791] FAT-fs (loop0): Directory bread(block 167) failed [ 192.172909][ T8791] FAT-fs (loop0): Directory bread(block 168) failed [ 192.179663][ T8791] FAT-fs (loop0): Directory bread(block 169) failed [ 192.186428][ T8791] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.200059][ T8791] FAT-fs (loop0): Directory bread(block 162) failed [ 192.206873][ T8791] FAT-fs (loop0): Directory bread(block 163) failed [ 192.481520][ T8812] xt_hashlimit: max too large, truncated to 1048576 [ 192.545238][ T8814] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 192.620255][ T8814] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.654665][ T8819] syzkaller0: entered promiscuous mode [ 192.660375][ T8819] syzkaller0: entered allmulticast mode [ 192.922942][ T8838] lo speed is unknown, defaulting to 1000 [ 192.996766][ T8840] lo speed is unknown, defaulting to 1000 [ 193.379872][ T8859] set_capacity_and_notify: 3 callbacks suppressed [ 193.379893][ T8859] loop4: detected capacity change from 0 to 128 [ 193.396694][ T8859] bio_check_eod: 310 callbacks suppressed [ 193.396710][ T8859] syz.4.1784: attempt to access beyond end of device [ 193.396710][ T8859] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 193.439131][ T8858] syz.4.1784: attempt to access beyond end of device [ 193.439131][ T8858] loop4: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 193.538753][ T8865] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 193.597091][ T8865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.662065][ T8871] syzkaller0: entered promiscuous mode [ 193.667746][ T8871] syzkaller0: entered allmulticast mode [ 193.890222][ T8884] lo speed is unknown, defaulting to 1000 [ 193.967561][ T8891] lo speed is unknown, defaulting to 1000 [ 194.154991][ T8907] loop1: detected capacity change from 0 to 512 [ 194.166384][ T8907] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.189548][ T8907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 194.202347][ T8907] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.227615][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 194.946139][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 195.021973][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1813'. [ 195.059461][ T8952] lo speed is unknown, defaulting to 1000 [ 195.123936][ T8946] lo speed is unknown, defaulting to 1000 [ 195.186698][ T8960] loop0: detected capacity change from 0 to 128 [ 195.208591][ T8960] syz.0.1816: attempt to access beyond end of device [ 195.208591][ T8960] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 195.223241][ T8960] syz.0.1816: attempt to access beyond end of device [ 195.223241][ T8960] loop0: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 195.268856][ T8960] syz.0.1816: attempt to access beyond end of device [ 195.268856][ T8960] loop0: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 195.282685][ T8960] buffer_io_error: 155 callbacks suppressed [ 195.282699][ T8960] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 195.299045][ T8960] syz.0.1816: attempt to access beyond end of device [ 195.299045][ T8960] loop0: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 195.315119][ T8960] syz.0.1816: attempt to access beyond end of device [ 195.315119][ T8960] loop0: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 195.328873][ T8960] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 195.340648][ T8960] syz.0.1816: attempt to access beyond end of device [ 195.340648][ T8960] loop0: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 195.355990][ T8960] syz.0.1816: attempt to access beyond end of device [ 195.355990][ T8960] loop0: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 195.369928][ T8960] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 195.381233][ T8960] syz.0.1816: attempt to access beyond end of device [ 195.381233][ T8960] loop0: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 195.405567][ T8960] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 195.426390][ T8960] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 195.429325][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 195.438303][ T8960] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 195.463171][ T8960] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 195.474369][ T8977] loop4: detected capacity change from 0 to 128 [ 195.481334][ T8960] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 195.519049][ T8960] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 195.520170][ T8969] syzkaller0: entered promiscuous mode [ 195.533324][ T8969] syzkaller0: entered allmulticast mode [ 195.539692][ T8960] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 195.564231][ T8978] debugfs: 'netdev@ffff88810a572558' already exists in 'ref_tracker' [ 195.829540][ T9000] lo speed is unknown, defaulting to 1000 [ 195.948645][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1833'. [ 196.069561][ T9016] loop2: detected capacity change from 0 to 512 [ 196.082891][ T9008] lo speed is unknown, defaulting to 1000 [ 196.090959][ T9016] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.210212][ T9016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 196.259074][ T9016] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.274915][ T9023] loop4: detected capacity change from 0 to 128 [ 196.303614][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 196.332809][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 196.472706][ T9032] syzkaller0: entered promiscuous mode [ 196.478469][ T9032] syzkaller0: entered allmulticast mode [ 196.651098][ T9056] netlink: 'syz.2.1849': attribute type 1 has an invalid length. [ 196.692399][ T9060] loop0: detected capacity change from 0 to 512 [ 196.706444][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1849'. [ 196.724222][ T9060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 196.780356][ T9060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 196.852678][ T9060] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.944248][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 197.012019][ T9083] loop1: detected capacity change from 0 to 1024 [ 197.054955][ T9083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.104119][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.822671][ T9124] syzkaller0: entered promiscuous mode [ 197.828520][ T9124] syzkaller0: entered allmulticast mode [ 197.898908][ T9131] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 197.910253][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 198.139711][ T9150] loop1: detected capacity change from 0 to 128 [ 198.197250][ T9153] loop3: detected capacity change from 0 to 1024 [ 198.227504][ T9153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.256740][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.343577][ T9166] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 198.374291][ T9166] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.397706][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 198.574363][ T9177] syzkaller0: entered promiscuous mode [ 198.579925][ T9177] syzkaller0: entered allmulticast mode [ 198.601425][ T9184] loop2: detected capacity change from 0 to 128 [ 198.855432][ T9199] loop3: detected capacity change from 0 to 128 [ 198.953362][ T9207] loop0: detected capacity change from 0 to 512 [ 198.968474][ T9207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.982633][ T9211] loop1: detected capacity change from 0 to 128 [ 199.020852][ T9207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 199.036210][ T29] audit: type=1400 audit(1769212966.963:343): avc: denied { setopt } for pid=9217 comm="syz.3.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 199.042904][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1912'. [ 199.069280][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1912'. [ 199.074365][ T9207] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.108408][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 199.153142][ T9225] loop3: detected capacity change from 0 to 128 [ 199.176764][ T9225] bio_check_eod: 20 callbacks suppressed [ 199.176854][ T9225] syz.3.1915: attempt to access beyond end of device [ 199.176854][ T9225] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 199.198642][ T9225] syz.3.1915: attempt to access beyond end of device [ 199.198642][ T9225] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 199.217450][ T9225] syz.3.1915: attempt to access beyond end of device [ 199.217450][ T9225] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 199.224022][ T9223] syzkaller0: entered promiscuous mode [ 199.237016][ T9223] syzkaller0: entered allmulticast mode [ 199.243424][ T9229] syz.3.1915: attempt to access beyond end of device [ 199.243424][ T9229] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 199.264631][ T9224] syz.3.1915: attempt to access beyond end of device [ 199.264631][ T9224] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 199.278972][ T9224] syz.3.1915: attempt to access beyond end of device [ 199.278972][ T9224] loop3: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 199.300706][ T9224] syz.3.1915: attempt to access beyond end of device [ 199.300706][ T9224] loop3: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 199.314935][ T9224] syz.3.1915: attempt to access beyond end of device [ 199.314935][ T9224] loop3: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 199.329315][ T9224] syz.3.1915: attempt to access beyond end of device [ 199.329315][ T9224] loop3: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 199.343704][ T9224] syz.3.1915: attempt to access beyond end of device [ 199.343704][ T9224] loop3: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 199.493358][ T9243] loop0: detected capacity change from 0 to 512 [ 199.596759][ T9243] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.630562][ T9243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 199.643945][ T9243] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.671717][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 199.858893][ T9253] loop0: detected capacity change from 0 to 128 [ 200.237359][ T9262] syzkaller0: entered promiscuous mode [ 200.238133][ T9264] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 200.243053][ T9262] syzkaller0: entered allmulticast mode [ 200.271711][ T9267] loop0: detected capacity change from 0 to 1024 [ 200.286610][ T9264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.305356][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 200.327769][ T9267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.390495][ T9274] loop4: detected capacity change from 0 to 128 [ 200.398808][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.451134][ T9274] buffer_io_error: 67 callbacks suppressed [ 200.451154][ T9274] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 200.470066][ T9274] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 200.498136][ T9273] Buffer I/O error on dev loop4, logical block 77, async page read [ 200.506280][ T9273] Buffer I/O error on dev loop4, logical block 78, async page read [ 200.514223][ T9273] Buffer I/O error on dev loop4, logical block 79, async page read [ 200.522314][ T9273] Buffer I/O error on dev loop4, logical block 80, async page read [ 200.530595][ T9273] Buffer I/O error on dev loop4, logical block 77, async page read [ 200.538759][ T9273] Buffer I/O error on dev loop4, logical block 78, async page read [ 200.546779][ T9273] Buffer I/O error on dev loop4, logical block 79, async page read [ 200.554801][ T9273] Buffer I/O error on dev loop4, logical block 80, async page read [ 200.689217][ T29] audit: type=1400 audit(1769212968.613:344): avc: denied { create } for pid=9297 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 200.725298][ T9304] netlink: 'syz.4.1943': attribute type 1 has an invalid length. [ 200.733662][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 200.885145][ T9312] syzkaller0: entered promiscuous mode [ 200.890926][ T9312] syzkaller0: entered allmulticast mode [ 201.408420][ T9322] loop0: detected capacity change from 0 to 128 [ 202.213103][ T9353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.303561][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.374434][ T9386] syzkaller0: entered promiscuous mode [ 203.380048][ T9386] syzkaller0: entered allmulticast mode [ 203.852149][ T9403] set_capacity_and_notify: 3 callbacks suppressed [ 203.852172][ T9403] loop2: detected capacity change from 0 to 128 [ 204.153259][ T9411] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1984'. [ 204.360060][ T9429] loop0: detected capacity change from 0 to 1024 [ 204.379241][ T9431] loop1: detected capacity change from 0 to 128 [ 204.408461][ T9429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.423182][ T9434] syzkaller0: entered promiscuous mode [ 204.428865][ T9434] syzkaller0: entered allmulticast mode [ 204.602352][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.817022][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2004'. [ 204.836418][ T9456] netlink: 'syz.4.2004': attribute type 3 has an invalid length. [ 204.838993][ T9464] loop1: detected capacity change from 0 to 128 [ 204.844254][ T9456] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2004'. [ 205.321632][ T9476] netlink: 'syz.1.2012': attribute type 4 has an invalid length. [ 205.329665][ T9476] netlink: 'syz.1.2012': attribute type 10 has an invalid length. [ 205.337532][ T9476] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2012'. [ 205.348340][ T9476] netlink: 'syz.1.2012': attribute type 10 has an invalid length. [ 205.427702][ T9478] loop4: detected capacity change from 0 to 1024 [ 205.458048][ T9478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.551617][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.575078][ T9489] loop1: detected capacity change from 0 to 128 [ 205.592815][ T9489] bio_check_eod: 157 callbacks suppressed [ 205.592831][ T9489] syz.1.2016: attempt to access beyond end of device [ 205.592831][ T9489] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 205.620450][ T9489] syz.1.2016: attempt to access beyond end of device [ 205.620450][ T9489] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 205.634527][ T9489] buffer_io_error: 52 callbacks suppressed [ 205.634547][ T9489] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 205.696579][ T9500] syz.1.2016: attempt to access beyond end of device [ 205.696579][ T9500] loop1: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 205.736247][ T9485] syz.1.2016: attempt to access beyond end of device [ 205.736247][ T9485] loop1: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 205.750915][ T9485] Buffer I/O error on dev loop1, logical block 77, async page read [ 205.766703][ T9485] syz.1.2016: attempt to access beyond end of device [ 205.766703][ T9485] loop1: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 205.780566][ T9485] Buffer I/O error on dev loop1, logical block 78, async page read [ 205.789540][ T9485] syz.1.2016: attempt to access beyond end of device [ 205.789540][ T9485] loop1: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 205.804259][ T9485] Buffer I/O error on dev loop1, logical block 79, async page read [ 205.813632][ T9485] syz.1.2016: attempt to access beyond end of device [ 205.813632][ T9485] loop1: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 205.827746][ T9485] Buffer I/O error on dev loop1, logical block 80, async page read [ 205.836381][ T9485] syz.1.2016: attempt to access beyond end of device [ 205.836381][ T9485] loop1: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 205.850798][ T9485] Buffer I/O error on dev loop1, logical block 77, async page read [ 205.872401][ T9485] syz.1.2016: attempt to access beyond end of device [ 205.872401][ T9485] loop1: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 205.887008][ T9485] Buffer I/O error on dev loop1, logical block 78, async page read [ 205.900511][ T9485] syz.1.2016: attempt to access beyond end of device [ 205.900511][ T9485] loop1: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 205.914922][ T9485] Buffer I/O error on dev loop1, logical block 79, async page read [ 205.923974][ T9485] Buffer I/O error on dev loop1, logical block 80, async page read [ 205.933470][ T9485] Buffer I/O error on dev loop1, logical block 77, async page read [ 205.958790][ T9505] syzkaller0: entered promiscuous mode [ 205.964452][ T9505] syzkaller0: entered allmulticast mode [ 206.011956][ T9514] loop2: detected capacity change from 0 to 1024 [ 206.040702][ T9514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.093705][ T9521] netlink: 'syz.1.2030': attribute type 1 has an invalid length. [ 206.110228][ T9521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.112012][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.125780][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'. [ 206.143543][ T9521] macvlan1: entered promiscuous mode [ 206.149140][ T9521] macvlan1: entered allmulticast mode [ 206.455369][ T9536] loop0: detected capacity change from 0 to 128 [ 206.484632][ T29] audit: type=1400 audit(1769212974.403:345): avc: denied { setopt } for pid=9537 comm="syz.1.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 206.621571][ T9550] loop3: detected capacity change from 0 to 128 [ 206.673381][ T9553] loop1: detected capacity change from 0 to 1024 [ 206.690082][ T9554] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 206.698224][ T9554] netlink: 'syz.0.2042': attribute type 3 has an invalid length. [ 206.706241][ T9554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2042'. [ 206.717938][ T9553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.743410][ T9558] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 206.758475][ T9558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.767696][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.771074][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 206.789011][ T9558] macvlan6: entered promiscuous mode [ 206.794456][ T9558] macvlan6: entered allmulticast mode [ 206.854685][ T9565] sctp: [Deprecated]: syz.0.2046 (pid 9565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.854685][ T9565] Use struct sctp_sack_info instead [ 206.883839][ T9569] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2048'. [ 206.969995][ T29] audit: type=1400 audit(1769212974.893:346): avc: denied { create } for pid=9574 comm="syz.4.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 207.150245][ T9588] netlink: 'syz.4.2057': attribute type 1 has an invalid length. [ 207.257831][ T9588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.327126][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 207.342837][ T9600] macvlan3: entered promiscuous mode [ 207.348350][ T9600] macvlan3: entered allmulticast mode [ 207.847388][ T9614] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2065'. [ 208.167442][ T9630] delete_channel: no stack [ 208.169585][ T29] audit: type=1400 audit(1769212976.093:347): avc: denied { ioctl } for pid=9630 comm="syz.4.2073" path="socket:[28427]" dev="sockfs" ino=28427 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 208.208141][ T9633] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 208.235456][ T9633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.247610][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 208.259962][ T9633] macvlan4: entered promiscuous mode [ 208.265339][ T9633] macvlan4: entered allmulticast mode [ 208.294090][ T9640] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2078'. [ 208.764385][ T9662] syzkaller0: entered promiscuous mode [ 208.769999][ T9662] syzkaller0: entered allmulticast mode [ 209.122991][ T9679] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2093'. [ 209.148176][ T9681] set_capacity_and_notify: 6 callbacks suppressed [ 209.148275][ T9681] loop2: detected capacity change from 0 to 128 [ 209.180901][ T29] audit: type=1400 audit(1769212977.103:348): avc: denied { ioctl } for pid=9678 comm="syz.1.2093" path="socket:[29184]" dev="sockfs" ino=29184 ioctlcmd=0x8b18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.457020][ T9704] loop2: detected capacity change from 0 to 128 [ 210.715468][ T9756] loop4: detected capacity change from 0 to 128 [ 210.740295][ T9756] bio_check_eod: 200 callbacks suppressed [ 210.740318][ T9756] syz.4.2122: attempt to access beyond end of device [ 210.740318][ T9756] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 210.784890][ T9756] syz.4.2122: attempt to access beyond end of device [ 210.784890][ T9756] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 210.798845][ T9756] buffer_io_error: 133 callbacks suppressed [ 210.798865][ T9756] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 210.816413][ T9756] syz.4.2122: attempt to access beyond end of device [ 210.816413][ T9756] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 210.857476][ T9759] syz.4.2122: attempt to access beyond end of device [ 210.857476][ T9759] loop4: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 210.887589][ T9755] syz.4.2122: attempt to access beyond end of device [ 210.887589][ T9755] loop4: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 210.901591][ T9755] Buffer I/O error on dev loop4, logical block 77, async page read [ 210.909993][ T9755] syz.4.2122: attempt to access beyond end of device [ 210.909993][ T9755] loop4: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 210.924382][ T9755] Buffer I/O error on dev loop4, logical block 78, async page read [ 211.009792][ T9755] syz.4.2122: attempt to access beyond end of device [ 211.009792][ T9755] loop4: rw=8388608, sector=158, nr_sectors = 2 limit=128 [ 211.024229][ T9755] Buffer I/O error on dev loop4, logical block 79, async page read [ 211.208967][ T9755] syz.4.2122: attempt to access beyond end of device [ 211.208967][ T9755] loop4: rw=8388608, sector=160, nr_sectors = 2 limit=128 [ 211.222764][ T9755] Buffer I/O error on dev loop4, logical block 80, async page read [ 211.487604][ T9755] syz.4.2122: attempt to access beyond end of device [ 211.487604][ T9755] loop4: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 211.501564][ T9755] Buffer I/O error on dev loop4, logical block 77, async page read [ 211.510361][ T9755] syz.4.2122: attempt to access beyond end of device [ 211.510361][ T9755] loop4: rw=8388608, sector=156, nr_sectors = 2 limit=128 [ 211.524259][ T9755] Buffer I/O error on dev loop4, logical block 78, async page read [ 211.873482][ T9755] Buffer I/O error on dev loop4, logical block 79, async page read [ 211.881620][ T9755] Buffer I/O error on dev loop4, logical block 80, async page read [ 211.889647][ T9755] Buffer I/O error on dev loop4, logical block 77, async page read [ 212.213762][ T9797] validate_nla: 2 callbacks suppressed [ 212.213783][ T9797] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 212.276563][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 212.286553][ T9797] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.325557][ T9803] macvlan2: entered promiscuous mode [ 212.330984][ T9803] macvlan2: entered allmulticast mode [ 213.046811][ T9822] netlink: 'syz.4.2146': attribute type 41 has an invalid length. [ 213.054828][ T9822] netlink: 'syz.4.2146': attribute type 4 has an invalid length. [ 213.062953][ T9822] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2146'. [ 213.099305][ T9825] skbuff: bad partial csum: csum=65535/127 headroom=146 headlen=65664 [ 213.711431][ T9854] syzkaller0: entered promiscuous mode [ 213.716987][ T9854] syzkaller0: entered allmulticast mode [ 213.939601][ T9866] netlink: 'syz.1.2164': attribute type 41 has an invalid length. [ 213.947760][ T9866] netlink: 'syz.1.2164': attribute type 4 has an invalid length. [ 213.955830][ T9866] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2164'. [ 214.532074][ T9890] syzkaller0: entered promiscuous mode [ 214.537715][ T9890] syzkaller0: entered allmulticast mode [ 215.810120][ T9964] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 215.922407][ T9975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2207'. [ 215.940392][ T9983] netlink: 'syz.4.2211': attribute type 1 has an invalid length. [ 215.987651][ T9987] loop3: detected capacity change from 0 to 128 [ 216.012467][ T9983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.018601][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 216.033848][ T9987] bio_check_eod: 22 callbacks suppressed [ 216.033869][ T9987] syz.3.2213: attempt to access beyond end of device [ 216.033869][ T9987] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 216.057495][ T9975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2207'. [ 216.073780][ T9993] macvlan5: entered promiscuous mode [ 216.079427][ T9993] macvlan5: entered allmulticast mode [ 216.114566][ T9984] syz.3.2213: attempt to access beyond end of device [ 216.114566][ T9984] loop3: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 216.128470][ T9984] buffer_io_error: 19 callbacks suppressed [ 216.128486][ T9984] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 216.173885][ T9997] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 216.181827][ T9997] netlink: 'syz.2.2216': attribute type 3 has an invalid length. [ 216.189981][ T9997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2216'. [ 216.221934][T10005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2220'. [ 216.227059][T10006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2216'. [ 216.242366][T10005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2220'. [ 216.495962][T10037] loop2: detected capacity change from 0 to 128 [ 216.504950][T10037] syz.2.2234: attempt to access beyond end of device [ 216.504950][T10037] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 216.520627][T10037] syz.2.2234: attempt to access beyond end of device [ 216.520627][T10037] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 216.543223][T10037] syz.2.2234: attempt to access beyond end of device [ 216.543223][T10037] loop2: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 216.557187][T10037] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 216.567998][T10043] netlink: 'syz.3.2236': attribute type 41 has an invalid length. [ 216.580420][T10041] syz.2.2234: attempt to access beyond end of device [ 216.580420][T10041] loop2: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 216.872832][T10062] veth1_macvtap: left promiscuous mode [ 216.878764][T10062] macsec0: entered allmulticast mode [ 216.910754][T10062] veth1_macvtap: entered promiscuous mode [ 216.916864][T10062] veth1_macvtap: entered allmulticast mode [ 216.923860][T10062] macsec0: entered promiscuous mode [ 217.046913][T10077] loop2: detected capacity change from 0 to 128 [ 217.067539][T10077] syz.2.2252: attempt to access beyond end of device [ 217.067539][T10077] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 217.092775][T10077] syz.2.2252: attempt to access beyond end of device [ 217.092775][T10077] loop2: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 217.120473][T10077] syz.2.2252: attempt to access beyond end of device [ 217.120473][T10077] loop2: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 217.134258][T10077] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 217.221235][T10082] syz.2.2252: attempt to access beyond end of device [ 217.221235][T10082] loop2: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 217.303826][T10094] __nla_validate_parse: 4 callbacks suppressed [ 217.303847][T10094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2259'. [ 217.331446][T10094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2259'. [ 217.350110][T10094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2259'. [ 217.512641][T10115] validate_nla: 1 callbacks suppressed [ 217.512677][T10115] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 217.526184][T10115] netlink: 'syz.0.2267': attribute type 3 has an invalid length. [ 217.534055][T10115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2267'. [ 217.775123][T10134] netlink: 'syz.2.2275': attribute type 10 has an invalid length. [ 217.819388][ T29] audit: type=1400 audit(1769212985.743:349): avc: denied { write } for pid=10139 comm="syz.0.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.872328][T10140] netlink: 'syz.0.2276': attribute type 39 has an invalid length. [ 218.532293][ T29] audit: type=1400 audit(1769212986.453:350): avc: denied { write } for pid=10169 comm="syz.3.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 218.748925][T10186] vxcan1: Caught tx_queue_len zero misconfig [ 218.762783][ T29] audit: type=1400 audit(1769212986.653:351): avc: denied { create } for pid=10181 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 218.790035][T10186] lo: Caught tx_queue_len zero misconfig [ 219.420645][T10227] syzkaller0: entered promiscuous mode [ 219.426411][T10227] syzkaller0: entered allmulticast mode [ 219.523477][T10229] loop1: detected capacity change from 0 to 2048 [ 219.538495][T10229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.614012][T10229] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 219.629887][T10229] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1386 with error 28 [ 219.642538][T10229] EXT4-fs (loop1): This should not happen!! Data will be lost [ 219.642538][T10229] [ 219.652791][T10229] EXT4-fs (loop1): Total free blocks count 0 [ 219.659386][T10229] EXT4-fs (loop1): Free/Dirty block details [ 219.665311][T10229] EXT4-fs (loop1): free_blocks=2415919104 [ 219.671098][T10229] EXT4-fs (loop1): dirty_blocks=1392 [ 219.676489][T10229] EXT4-fs (loop1): Block reservation details [ 219.682543][T10229] EXT4-fs (loop1): i_reserved_data_blocks=87 [ 219.725411][T10161] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 219.911579][T10257] netlink: 'syz.1.2312': attribute type 41 has an invalid length. [ 219.919719][T10257] netlink: 'syz.1.2312': attribute type 4 has an invalid length. [ 219.928663][T10257] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2312'. [ 220.018132][ T29] audit: type=1400 audit(1769212987.933:352): avc: denied { create } for pid=10237 comm="syz.0.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 220.136178][ T29] audit: type=1400 audit(1769212988.063:353): avc: denied { connect } for pid=10267 comm="syz.0.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.369079][T10254] Set syz1 is full, maxelem 65536 reached [ 220.577016][ T52] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 220.587621][T10298] ip6tnl0: Caught tx_queue_len zero misconfig [ 220.603099][T10298] lo: Caught tx_queue_len zero misconfig [ 220.948436][T10327] syzkaller0: entered promiscuous mode [ 220.954033][T10327] syzkaller0: entered allmulticast mode [ 221.272473][T10283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.279628][T10331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.310335][T10331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.400184][T10331] veth1_macvtap: left allmulticast mode [ 221.598601][ T3744] lo speed is unknown, defaulting to 1000 [ 221.598770][T10333] lo: Caught tx_queue_len zero misconfig [ 221.604456][ T3744] syz2: Port: 1 Link DOWN [ 221.639086][ T9903] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.675486][ T9903] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.720148][ T9903] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.742556][ T9903] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.795324][ T29] audit: type=1400 audit(1769212989.713:354): avc: denied { append } for pid=10356 comm="syz.3.2348" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 221.796451][T10357] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 221.825865][T10357] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 222.512153][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'. [ 222.586106][T10281] bond0: (slave bond_slave_0): interface is now down [ 222.592978][T10281] bond0: (slave bond_slave_1): interface is now down [ 222.602661][T10410] netlink: 'syz.4.2366': attribute type 10 has an invalid length. [ 222.610912][T10410] syz_tun: entered promiscuous mode [ 222.616683][T10187] bond0: (slave bond_slave_0): interface is now down [ 222.623528][T10187] bond0: (slave bond_slave_1): interface is now down [ 222.630332][T10410] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 222.639545][T10187] bond0: (slave syz_tun): interface is now down [ 222.649471][T10187] bond0: now running without any active interface! [ 222.693085][T10416] ref_ctr increment failed for inode: 0xa00 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811b29b600 [ 222.709445][T10418] netlink: 'syz.4.2370': attribute type 1 has an invalid length. [ 222.714760][T10415] uprobe: syz.1.2369:10415 failed to unregister, leaking uprobe [ 222.719869][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2370'. [ 223.167925][T10447] netlink: 'syz.3.2381': attribute type 1 has an invalid length. [ 223.176653][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 223.203905][T10449] lo: Caught tx_queue_len zero misconfig [ 223.758048][T10463] lo speed is unknown, defaulting to 1000 [ 223.786734][T10434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.828551][T10463] lo speed is unknown, defaulting to 1000 [ 223.879450][T10473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2387'. [ 224.255693][T10488] syzkaller0: entered promiscuous mode [ 224.261261][T10488] syzkaller0: entered allmulticast mode [ 225.104864][T10515] lo speed is unknown, defaulting to 1000 [ 225.143436][T10515] lo speed is unknown, defaulting to 1000 [ 225.183700][T10517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2405'. [ 226.037994][T10548] lo speed is unknown, defaulting to 1000 [ 226.119757][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2416'. [ 226.143680][ T5562] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.163206][ T5562] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.172747][T10555] lo speed is unknown, defaulting to 1000 [ 226.175758][ T5562] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.191126][ T5562] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.913220][T10603] lo speed is unknown, defaulting to 1000 [ 227.093576][T10603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2434'. [ 227.130752][T10615] lo speed is unknown, defaulting to 1000 [ 227.524947][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 227.662163][T10657] syzkaller0: entered promiscuous mode [ 227.667809][T10657] syzkaller0: entered allmulticast mode [ 228.810743][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2472'. [ 228.967775][T10726] syzkaller0: entered promiscuous mode [ 228.973356][T10726] syzkaller0: entered allmulticast mode [ 228.996694][T10729] syzkaller0: entered promiscuous mode [ 229.002358][T10729] syzkaller0: entered allmulticast mode [ 229.434872][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.574535][T10769] lo: Caught tx_queue_len zero misconfig [ 229.585048][ T5555] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.643870][ T5555] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.682711][ T5555] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.709164][T10783] syzkaller0: entered promiscuous mode [ 229.714809][T10783] syzkaller0: entered allmulticast mode [ 229.722856][ T5555] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.907299][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 229.916641][T10791] syzkaller0: entered promiscuous mode [ 229.922258][T10791] syzkaller0: entered allmulticast mode [ 230.101035][T10786] loop0: detected capacity change from 0 to 512 [ 230.147140][T10806] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 230.157723][T10786] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2502: inode has both inline data and extents flags [ 230.202365][T10812] netlink: 'syz.1.2510': attribute type 10 has an invalid length. [ 230.210495][T10812] syz_tun: entered promiscuous mode [ 230.270680][T10786] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2502: couldn't read orphan inode 15 (err -117) [ 230.290943][T10786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.308550][T10786] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 230.424388][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.456436][T10828] syzkaller0: entered promiscuous mode [ 230.461986][T10828] syzkaller0: entered allmulticast mode [ 230.665949][T10847] infiniband syz1: set down [ 230.670689][T10847] infiniband syz1: added syz_tun [ 230.695992][T10847] RDS/IB: syz1: added [ 230.711276][T10847] smc: adding ib device syz1 with port count 1 [ 230.725886][T10847] smc: ib device syz1 port 1 has no pnetid [ 230.998122][T10872] syzkaller0: entered promiscuous mode [ 231.003667][T10872] syzkaller0: entered allmulticast mode [ 231.251552][T10887] syzkaller0: entered promiscuous mode [ 231.257214][T10887] syzkaller0: entered allmulticast mode [ 231.483555][T10903] syzkaller0: entered promiscuous mode [ 231.489440][T10903] syzkaller0: entered allmulticast mode [ 232.156481][T10923] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 232.189690][T10923] netlink: 'syz.1.2560': attribute type 10 has an invalid length. [ 232.539436][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2572'. [ 232.778211][T10964] syzkaller0: entered promiscuous mode [ 232.783835][T10964] syzkaller0: entered allmulticast mode [ 232.900943][T10970] loop2: detected capacity change from 0 to 512 [ 232.934252][T10970] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2579: inode has both inline data and extents flags [ 232.947905][T10970] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2579: couldn't read orphan inode 15 (err -117) [ 232.961135][T10970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.056290][T10978] lo speed is unknown, defaulting to 1000 [ 233.124772][T10986] lo speed is unknown, defaulting to 1000 [ 233.169602][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2582'. [ 233.371006][T10997] syzkaller0: entered promiscuous mode [ 233.377575][T10997] syzkaller0: entered allmulticast mode [ 233.416255][T11011] vxcan1: Caught tx_queue_len zero misconfig [ 233.867209][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.526108][T11075] rdma_rxe: rxe_newlink: failed to add syz_tun [ 234.593758][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 234.607349][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 234.854958][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2622'. [ 235.238035][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2635'. [ 235.257691][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'. [ 235.281000][T11121] rdma_rxe: rxe_newlink: failed to add syz_tun [ 235.476888][T11146] syz1: rxe_newlink: already configured on syz_tun [ 236.314339][T11200] syz1: rxe_newlink: already configured on syz_tun [ 236.478341][T11208] lo speed is unknown, defaulting to 1000 [ 236.535171][T11204] lo speed is unknown, defaulting to 1000 [ 236.573371][T11219] syzkaller0: entered promiscuous mode [ 236.578988][T11219] syzkaller0: entered allmulticast mode [ 236.590103][T11220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2667'. [ 236.649904][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'. [ 236.658870][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'. [ 237.233317][T11289] netlink: 'syz.0.2697': attribute type 10 has an invalid length. [ 237.242286][T11283] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 237.666794][T11308] syz1: rxe_newlink: already configured on syz_tun [ 237.681231][T11304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 237.694696][T11304] __nla_validate_parse: 1 callbacks suppressed [ 237.694718][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'. [ 237.713876][T11304] macvlan7: entered promiscuous mode [ 237.719496][T11304] macvlan7: entered allmulticast mode [ 238.033542][T11344] lo speed is unknown, defaulting to 1000 [ 238.132448][T11349] lo speed is unknown, defaulting to 1000 [ 238.179709][T11344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2717'. [ 238.191173][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 238.315071][T11374] syz1: rxe_newlink: already configured on syz_tun [ 238.710086][T11412] syz1: rxe_newlink: already configured on syz_tun [ 238.844268][T11426] vxcan1: Caught tx_queue_len zero misconfig [ 239.493883][T11505] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 239.506203][T11505] netlink: 'syz.1.2785': attribute type 10 has an invalid length. [ 239.676412][T11516] syzkaller0: entered promiscuous mode [ 239.682816][T11516] syzkaller0: entered allmulticast mode [ 240.360108][T11571] syzkaller0: entered promiscuous mode [ 240.365880][T11571] syzkaller0: entered allmulticast mode [ 240.712719][T11574] lo speed is unknown, defaulting to 1000 [ 240.816829][T11574] chnl_net:caif_netlink_parms(): no params data found [ 241.004257][T11604] syz1: rxe_newlink: already configured on syz_tun [ 241.006843][T11574] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.019534][T11574] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.040779][T11574] bridge_slave_0: entered allmulticast mode [ 241.048174][T11574] bridge_slave_0: entered promiscuous mode [ 241.059893][T11574] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.067219][T11574] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.074730][T11574] bridge_slave_1: entered allmulticast mode [ 241.081615][T11574] bridge_slave_1: entered promiscuous mode [ 241.131235][T11574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.148392][T11606] lo speed is unknown, defaulting to 1000 [ 241.157151][T11574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.170674][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2819'. [ 241.219864][T11574] team0: Port device team_slave_0 added [ 241.236231][T11574] team0: Port device team_slave_1 added [ 241.268134][T11615] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.278301][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2819'. [ 241.310268][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 241.322935][T11574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.330061][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.356259][T11574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.372531][T11601] lo speed is unknown, defaulting to 1000 [ 241.379658][T11615] macvlan6: entered promiscuous mode [ 241.385006][T11615] macvlan6: entered allmulticast mode [ 241.391249][T11574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.398283][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.424756][T11574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.541537][T11574] hsr_slave_0: entered promiscuous mode [ 241.550654][T11574] hsr_slave_1: entered promiscuous mode [ 241.569387][T11574] debugfs: 'hsr0' already exists in 'hsr' [ 241.575521][T11574] Cannot create hsr debugfs directory [ 241.803377][ T5562] bond0 (unregistering): Released all slaves [ 241.836469][ T5562] bond1 (unregistering): Released all slaves [ 241.861408][ T5562] bond2 (unregistering): Released all slaves [ 241.884045][ T5562] bond3 (unregistering): Released all slaves [ 241.893583][ T5562] bond4 (unregistering): Released all slaves [ 241.907600][ T5562] bond5 (unregistering): Released all slaves [ 241.932836][ T5562] bond6 (unregistering): Released all slaves [ 241.976285][ T5562] bond7 (unregistering): Released all slaves [ 241.986204][ T29] audit: type=1400 audit(1769213009.913:355): avc: denied { read } for pid=3043 comm="dhcpcd" name="n25" dev="tmpfs" ino=11697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.010455][ T29] audit: type=1400 audit(1769213009.913:356): avc: denied { open } for pid=3043 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=11697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.034888][ T29] audit: type=1400 audit(1769213009.913:357): avc: denied { getattr } for pid=3043 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=11697 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.100437][ T29] audit: type=1400 audit(1769213010.023:358): avc: denied { read open } for pid=11653 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.140801][ T29] audit: type=1400 audit(1769213010.023:359): avc: denied { getattr } for pid=11653 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.200983][ T29] audit: type=1400 audit(1769213010.123:360): avc: denied { allowed } for pid=11663 comm="syz.2.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.269859][ T5562] hsr_slave_0: left promiscuous mode [ 242.276997][ T5562] hsr_slave_1: left promiscuous mode [ 242.283083][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.296723][ T29] audit: type=1400 audit(1769213010.153:361): avc: denied { add_name } for pid=11650 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.320572][ T29] audit: type=1400 audit(1769213010.153:362): avc: denied { create } for pid=11650 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.342999][ T29] audit: type=1400 audit(1769213010.153:363): avc: denied { write } for pid=11650 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=11723 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.370327][ T29] audit: type=1400 audit(1769213010.153:364): avc: denied { append } for pid=11650 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=11723 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.463151][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.507780][ T5562] team0 (unregistering): Port device team_slave_1 removed [ 242.519092][ T5562] team0 (unregistering): Port device team_slave_0 removed [ 242.626159][T11684] syzkaller0: entered promiscuous mode [ 242.631795][T11684] syzkaller0: entered allmulticast mode [ 242.716592][T11692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2843'. [ 242.738134][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2843'. [ 242.970524][T11574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.988165][T11574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.001711][T11574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.017361][T11574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.240481][T11729] syzkaller0: entered promiscuous mode [ 243.246206][T11729] syzkaller0: entered allmulticast mode [ 243.272056][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.297941][T11574] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.347337][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.354849][ T8948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.367120][ T5562] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.374472][ T5562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.407555][T11737] netlink: 'syz.4.2855': attribute type 1 has an invalid length. [ 243.434047][T11737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.455852][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 243.486251][T11737] macvlan6: entered promiscuous mode [ 243.493292][T11737] macvlan6: entered allmulticast mode [ 243.575397][T11574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.602739][T11757] syzkaller0: entered promiscuous mode [ 243.608974][T11757] syzkaller0: entered allmulticast mode [ 243.672699][T11574] veth0_vlan: entered promiscuous mode [ 243.681154][T11574] veth1_vlan: entered promiscuous mode [ 243.697651][T11574] veth0_macvtap: entered promiscuous mode [ 243.705382][T11574] veth1_macvtap: entered promiscuous mode [ 243.719110][T11574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.743401][T11574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.754984][ T8948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.771930][ T8948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.801714][ T8948] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.812896][ T8948] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.822322][T11766] syzkaller0: entered promiscuous mode [ 243.827986][T11766] syzkaller0: entered allmulticast mode [ 243.998141][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2862'. [ 244.009243][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 244.072390][T11779] bridge0: port 3(syz_tun) entered blocking state [ 244.079810][T11779] bridge0: port 3(syz_tun) entered disabled state [ 244.087877][T11779] syz_tun: entered allmulticast mode [ 244.094504][T11779] syz_tun: entered promiscuous mode [ 244.102048][T11779] bridge0: port 3(syz_tun) entered blocking state [ 244.108981][T11779] bridge0: port 3(syz_tun) entered forwarding state [ 244.118381][T11779] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 244.242695][T10281] smc: removing ib device syz1 [ 244.333177][T11801] syzkaller0: entered promiscuous mode [ 244.338773][T11801] syzkaller0: entered allmulticast mode [ 244.486798][T11796] chnl_net:caif_netlink_parms(): no params data found [ 244.539690][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2873'. [ 244.554939][T11796] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.562164][T11796] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.570332][T11796] bridge_slave_0: entered allmulticast mode [ 244.577225][T11796] bridge_slave_0: entered promiscuous mode [ 244.584262][T11796] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.591495][T11796] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.598807][T11796] bridge_slave_1: entered allmulticast mode [ 244.606290][T11796] bridge_slave_1: entered promiscuous mode [ 244.626947][T11796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.639205][T11796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.662402][T11796] team0: Port device team_slave_0 added [ 244.670218][T11796] team0: Port device team_slave_1 added [ 244.698594][T11796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.706012][T11796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.733490][T11796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.748070][T11796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.756091][T11796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.782381][T11796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.821793][T11796] hsr_slave_0: entered promiscuous mode [ 244.828677][T11796] hsr_slave_1: entered promiscuous mode [ 244.834645][T11796] debugfs: 'hsr0' already exists in 'hsr' [ 244.840512][T11796] Cannot create hsr debugfs directory [ 245.072458][T11833] syzkaller0: entered promiscuous mode [ 245.078186][T11833] syzkaller0: entered allmulticast mode [ 245.096247][T11839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2877'. [ 245.114486][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 245.169639][ T5562] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 245.239502][ T5562] bond0 (unregistering): Released all slaves [ 245.248736][ T5562] bond1 (unregistering): Released all slaves [ 245.258813][ T5562] bond2 (unregistering): Released all slaves [ 245.268257][ T5562] bond3 (unregistering): Released all slaves [ 245.279840][ T5562] bond4 (unregistering): Released all slaves [ 245.291916][ T5562] bond5 (unregistering): Released all slaves [ 245.358171][T11860] netlink: 'syz.4.2881': attribute type 10 has an invalid length. [ 245.375126][ T5562] hsr_slave_0: left promiscuous mode [ 245.384719][ T5562] hsr_slave_1: left promiscuous mode [ 245.397694][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.406123][ T5562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.448453][ T5562] team0 (unregistering): Port device team_slave_1 removed [ 245.460113][ T5562] team0 (unregistering): Port device C removed [ 245.547371][T11882] syzkaller0: entered promiscuous mode [ 245.553112][T11882] syzkaller0: entered allmulticast mode [ 245.586594][T11796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.710345][T11796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.721935][T11796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.740106][T11796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.841288][T11796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.872845][T11796] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.897507][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.904896][ T5555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.980414][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.987562][ T5555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.139126][T11903] loop4: detected capacity change from 0 to 512 [ 246.150360][T11796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.167716][T11903] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2888: inode has both inline data and extents flags [ 246.226829][T11903] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2888: couldn't read orphan inode 15 (err -117) [ 246.253704][T11903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.368863][T11796] veth0_vlan: entered promiscuous mode [ 246.388658][T11796] veth1_vlan: entered promiscuous mode [ 246.421979][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.441288][T11796] veth0_macvtap: entered promiscuous mode [ 246.460769][T11796] veth1_macvtap: entered promiscuous mode [ 246.479479][T11796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.500798][T11796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.517946][ T3426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.534371][ T3426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.569617][ T3426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.610910][T11955] netlink: 'syz.4.2893': attribute type 10 has an invalid length. [ 246.620923][ T3426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.766837][ T5566] nci: nci_rf_intf_activated_ntf_packet: error when signaling tm activation [ 247.062398][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'. [ 247.113251][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 247.196882][T11976] macvlan2: entered promiscuous mode [ 247.203922][T11976] macvlan2: entered allmulticast mode [ 247.324390][T11992] syzkaller0: entered promiscuous mode [ 247.331445][T11992] syzkaller0: entered allmulticast mode [ 247.500391][T12001] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 247.696512][T12019] loop3: detected capacity change from 0 to 512 [ 247.715782][T12019] EXT4-fs (loop3): Invalid log block size: 4294967295 [ 247.732907][T12022] syzkaller0: entered promiscuous mode [ 247.739006][T12022] syzkaller0: entered allmulticast mode [ 247.769543][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 247.769561][ T29] audit: type=1400 audit(1769213015.693:369): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 247.907402][T12023] loop4: detected capacity change from 0 to 512 [ 247.924799][T12023] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2917: inode has both inline data and extents flags [ 247.946841][T12023] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2917: couldn't read orphan inode 15 (err -117) [ 247.959825][T12023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.044875][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.998328][ T5566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.008601][ T5566] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 249.019197][ T5566] bond0 (unregistering): Released all slaves [ 249.028704][ T5566] bond1 (unregistering): Released all slaves [ 249.038839][ T5566] bond2 (unregistering): Released all slaves [ 249.048506][ T5566] bond3 (unregistering): Released all slaves [ 249.057952][ T5566] bond4 (unregistering): Released all slaves [ 249.066943][ T5566] bond5 (unregistering): Released all slaves [ 249.099153][T12069] syzkaller0: entered promiscuous mode [ 249.104795][T12069] syzkaller0: entered allmulticast mode [ 249.122157][ T5566] hsr_slave_0: left promiscuous mode [ 249.128518][ T5566] hsr_slave_1: left promiscuous mode [ 249.134389][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.172449][ T5566] team0 (unregistering): Port device team_slave_1 removed [ 249.183712][ T5566] team0 (unregistering): Port device team_slave_0 removed [ 249.222041][T12056] chnl_net:caif_netlink_parms(): no params data found [ 249.271316][T12056] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.278496][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.286368][T12056] bridge_slave_0: entered allmulticast mode [ 249.292994][T12056] bridge_slave_0: entered promiscuous mode [ 249.300302][T12056] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.307417][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.314701][T12056] bridge_slave_1: entered allmulticast mode [ 249.321379][T12056] bridge_slave_1: entered promiscuous mode [ 249.339279][T12056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.355028][T12084] loop0: detected capacity change from 0 to 512 [ 249.377295][T12084] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2932: inode has both inline data and extents flags [ 249.379983][T12056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.397145][T12084] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2932: couldn't read orphan inode 15 (err -117) [ 249.414794][T12084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.422057][T12056] team0: Port device team_slave_0 added [ 249.436531][T12056] team0: Port device team_slave_1 added [ 249.454591][T12056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.461735][T12056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.488187][T12056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.512511][T12056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.519612][T12056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.546038][T12056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.580268][T12056] hsr_slave_0: entered promiscuous mode [ 249.586530][T12056] hsr_slave_1: entered promiscuous mode [ 249.932868][T12056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.960937][T12056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.975289][T12056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.015961][T12056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.062969][T12106] syzkaller0: entered promiscuous mode [ 250.068688][T12106] syzkaller0: entered allmulticast mode [ 250.076048][T12113] loop4: detected capacity change from 0 to 1024 [ 250.131357][T12113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.147622][T12113] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.165085][T12113] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2938: bg 0: block 112: padding at end of block bitmap is not set [ 250.180450][T12113] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 250.193177][T12113] EXT4-fs (loop4): This should not happen!! Data will be lost [ 250.193177][T12113] [ 250.246737][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 250.258295][T12056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.272332][T12056] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.344376][T12056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.354980][T12056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.368230][T11574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.402981][T10141] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.410367][T10141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.426138][T10141] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.433467][T10141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.636299][T12056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.719155][T12168] syzkaller0: entered promiscuous mode [ 250.724710][T12168] syzkaller0: entered allmulticast mode [ 250.792688][T12056] veth0_vlan: entered promiscuous mode [ 250.801348][T12056] veth1_vlan: entered promiscuous mode [ 250.819056][T12056] veth0_macvtap: entered promiscuous mode [ 250.836947][T12056] veth1_macvtap: entered promiscuous mode [ 250.858646][T12056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.871107][T12056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.886536][ T5566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.905498][ T5566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.919779][ T5566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.935231][ T5562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.029965][T12182] syzkaller0: entered promiscuous mode [ 251.035739][T12182] syzkaller0: entered allmulticast mode [ 251.101936][T12185] syzkaller0: entered promiscuous mode [ 251.108227][T12185] syzkaller0: entered allmulticast mode [ 251.380504][T12211] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 251.649980][ T29] audit: type=1326 audit(1769213019.573:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.684982][ T29] audit: type=1326 audit(1769213019.593:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.708682][ T29] audit: type=1326 audit(1769213019.593:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.733075][ T29] audit: type=1326 audit(1769213019.593:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.756620][ T29] audit: type=1326 audit(1769213019.593:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.780280][ T29] audit: type=1326 audit(1769213019.593:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.804292][ T29] audit: type=1326 audit(1769213019.593:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.828409][ T29] audit: type=1326 audit(1769213019.593:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.852057][ T29] audit: type=1326 audit(1769213019.603:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 251.882025][T12233] __nla_validate_parse: 2 callbacks suppressed [ 251.882042][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'. [ 251.948593][T12237] syzkaller0: entered promiscuous mode [ 251.954352][T12237] syzkaller0: entered allmulticast mode [ 252.197828][T12242] syzkaller0: entered promiscuous mode [ 252.203524][T12242] syzkaller0: entered allmulticast mode [ 252.283133][T12246] syzkaller0: entered promiscuous mode [ 252.288874][T12246] syzkaller0: entered allmulticast mode [ 252.644367][T12260] syzkaller0: entered promiscuous mode [ 252.650020][T12260] syzkaller0: entered allmulticast mode [ 252.954778][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 252.954798][ T29] audit: type=1400 audit(1769213020.873:400): avc: denied { ioctl } for pid=12273 comm="syz.1.2981" path="socket:[40693]" dev="sockfs" ino=40693 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.015401][T12278] syzkaller0: entered promiscuous mode [ 253.021138][T12278] syzkaller0: entered allmulticast mode [ 253.105846][T12283] syzkaller0: entered promiscuous mode [ 253.111477][T12283] syzkaller0: entered allmulticast mode [ 253.293827][T12295] loop4: detected capacity change from 0 to 512 [ 253.310834][T12295] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2990: inode has both inline data and extents flags [ 253.360974][T12295] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2990: couldn't read orphan inode 15 (err -117) [ 253.379331][T12295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.430735][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2988'. [ 253.473327][ T29] audit: type=1326 audit(1769213021.343:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.497317][ T29] audit: type=1326 audit(1769213021.343:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.521825][ T29] audit: type=1326 audit(1769213021.343:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.546144][ T29] audit: type=1326 audit(1769213021.343:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.569677][ T29] audit: type=1326 audit(1769213021.343:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.593743][ T29] audit: type=1326 audit(1769213021.343:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.619521][ T29] audit: type=1326 audit(1769213021.343:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.643977][ T29] audit: type=1326 audit(1769213021.343:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.667911][ T29] audit: type=1326 audit(1769213021.343:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12288 comm="syz.1.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bc90acb9 code=0x7ffc0000 [ 253.668643][T12302] syzkaller0: entered promiscuous mode [ 253.700148][T12302] syzkaller0: entered allmulticast mode [ 253.732908][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.088922][T12328] syzkaller0: entered promiscuous mode [ 254.094489][T12328] syzkaller0: entered allmulticast mode [ 254.269116][T12333] syzkaller0: entered promiscuous mode [ 254.276217][T12333] syzkaller0: entered allmulticast mode [ 254.549137][T12317] Set syz1 is full, maxelem 65536 reached [ 254.562737][T12340] syzkaller0: entered promiscuous mode [ 254.568451][T12340] syzkaller0: entered allmulticast mode [ 254.602046][T12344] syzkaller0: entered promiscuous mode [ 254.607678][T12344] syzkaller0: entered allmulticast mode [ 254.934654][T12364] syzkaller0: entered promiscuous mode [ 254.940816][T12364] syzkaller0: entered allmulticast mode [ 254.972946][T12366] loop0: detected capacity change from 0 to 512 [ 254.983216][T12366] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3015: inode has both inline data and extents flags [ 255.003541][T12366] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3015: couldn't read orphan inode 15 (err -117) [ 255.049313][T12373] syzkaller0: entered promiscuous mode [ 255.054883][T12373] syzkaller0: entered allmulticast mode [ 255.063027][T12366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.159414][T11574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.190821][T12383] syzkaller0: entered promiscuous mode [ 255.196446][T12383] syzkaller0: entered allmulticast mode [ 255.204246][T12381] syzkaller0: entered promiscuous mode [ 255.209879][T12381] syzkaller0: entered allmulticast mode [ 255.529920][T12411] syzkaller0: entered promiscuous mode [ 255.535607][T12411] syzkaller0: entered allmulticast mode [ 255.557103][T12409] loop3: detected capacity change from 0 to 512 [ 255.567956][T12409] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3032: inode has both inline data and extents flags [ 255.586730][T12409] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3032: couldn't read orphan inode 15 (err -117) [ 255.616234][T12409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.652148][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.695172][T12402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.728836][T12419] syzkaller0: entered promiscuous mode [ 255.734388][T12419] syzkaller0: entered allmulticast mode [ 255.744755][T12420] syzkaller0: entered promiscuous mode [ 255.750482][T12420] syzkaller0: entered allmulticast mode [ 255.757115][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3029'. [ 255.770231][T12402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.870203][T12402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.935887][T12402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.951391][T12439] syzkaller0: entered promiscuous mode [ 255.957015][T12439] syzkaller0: entered allmulticast mode [ 255.996440][ T9730] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.008077][ T9730] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.020265][ T9730] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.033754][ T9730] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.206242][T12448] syzkaller0: entered promiscuous mode [ 256.211896][T12448] syzkaller0: entered allmulticast mode [ 256.410627][T12451] chnl_net:caif_netlink_parms(): no params data found [ 256.478545][T12451] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.485857][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.493261][T12451] bridge_slave_0: entered allmulticast mode [ 256.500460][T12451] bridge_slave_0: entered promiscuous mode [ 256.508985][T12451] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.516310][T12451] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.524198][T12451] bridge_slave_1: entered allmulticast mode [ 256.531038][T12451] bridge_slave_1: entered promiscuous mode [ 256.576531][ T9730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.585883][ T9730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.595122][ T9730] bond0 (unregistering): Released all slaves [ 256.603553][ T9730] nicvf0 (unregistering): Released all slaves [ 256.614044][ T9730] bond1 (unregistering): Released all slaves [ 256.624940][ T9730] bond2 (unregistering): Released all slaves [ 256.635187][ T9730] bond3 (unregistering): Released all slaves [ 256.645142][ T9730] bond4 (unregistering): Released all slaves [ 256.654485][ T9730] bond5 (unregistering): Released all slaves [ 256.663198][ T9730] bond6 (unregistering): Released all slaves [ 256.672707][ T9730] bond7 (unregistering): Released all slaves [ 256.683618][ T9730] bond8 (unregistering): Released all slaves [ 256.693358][T12451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.704667][T12451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.725483][T12451] team0: Port device team_slave_0 added [ 256.732799][T12451] team0: Port device team_slave_1 added [ 256.752733][T12451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.759778][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.786171][T12451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.807548][ T9730] hsr_slave_0: left promiscuous mode [ 256.813395][ T9730] hsr_slave_1: left promiscuous mode [ 256.819218][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.829858][ T9730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.866390][ T9730] team0 (unregistering): Port device team_slave_1 removed [ 256.900379][T12451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.907436][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.933518][T12451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.952883][T12481] syzkaller0: entered promiscuous mode [ 256.958750][T12481] syzkaller0: entered allmulticast mode [ 256.978111][T12451] hsr_slave_0: entered promiscuous mode [ 256.984198][T12451] hsr_slave_1: entered promiscuous mode [ 256.990276][T12451] debugfs: 'hsr0' already exists in 'hsr' [ 256.996116][T12451] Cannot create hsr debugfs directory [ 257.057046][T12487] syzkaller0: entered promiscuous mode [ 257.062689][T12487] syzkaller0: entered allmulticast mode [ 257.208000][T12504] syzkaller0: entered promiscuous mode [ 257.213579][T12504] syzkaller0: entered allmulticast mode [ 257.413664][T12525] netlink: 'syz.4.3058': attribute type 10 has an invalid length. [ 257.460653][T12451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.474034][T12451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.483841][T12451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.493883][T12451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.549164][T12554] Driver unsupported XDP return value 0 on prog (id 444) dev N/A, expect packet loss! [ 257.562295][T12451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.587070][T12451] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.610813][T12451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.621391][T12451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.755707][ T5562] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.762895][ T5562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.772330][ T5562] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.779554][ T5562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.831732][T12451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.908333][T12451] veth0_vlan: entered promiscuous mode [ 257.917044][T12451] veth1_vlan: entered promiscuous mode [ 257.933992][T12451] veth0_macvtap: entered promiscuous mode [ 257.942762][T12451] veth1_macvtap: entered promiscuous mode [ 257.958300][T12451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.970637][T12451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.982273][ T3426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.997362][ T3426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.014818][ T3426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.028763][ T3426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.067816][T12596] loop3: detected capacity change from 0 to 512 [ 258.080456][T12596] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3047: inode has both inline data and extents flags [ 258.100326][T12596] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3047: couldn't read orphan inode 15 (err -117) [ 258.113596][T12596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.140425][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.166700][T12601] syzkaller0: entered promiscuous mode [ 258.172647][T12601] syzkaller0: entered allmulticast mode [ 258.224263][T12603] netlink: 'syz.4.3070': attribute type 10 has an invalid length. [ 258.500604][T12627] syzkaller0: entered promiscuous mode [ 258.506263][T12627] syzkaller0: entered allmulticast mode [ 258.623024][ T5566] bond0: (slave bond_slave_0): interface is now down [ 258.629836][ T5566] bond0: (slave bond_slave_1): interface is now down [ 258.637071][T12629] netlink: 'syz.2.3081': attribute type 10 has an invalid length. [ 258.637479][ T5566] bond0: now running without any active interface! [ 258.652233][T12629] syz_tun: entered promiscuous mode [ 258.661170][T12629] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 258.670109][ T9730] bond0: (slave syz_tun): interface is now down [ 258.676843][ T9730] bond0: now running without any active interface! [ 258.894022][T12644] syzkaller0: entered promiscuous mode [ 258.899778][T12644] syzkaller0: entered allmulticast mode [ 259.561542][T12661] netlink: 'syz.4.3092': attribute type 10 has an invalid length. [ 259.575944][T12663] syzkaller0: entered promiscuous mode [ 259.581452][T12663] syzkaller0: entered allmulticast mode [ 259.600395][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 259.600413][ T29] audit: type=1400 audit(1769213027.523:486): avc: denied { connect } for pid=12666 comm="syz.4.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.281222][T12678] syzkaller0: entered promiscuous mode [ 260.286872][T12678] syzkaller0: entered allmulticast mode [ 260.668351][ T3318] bond0: (slave syz_tun): Releasing backup interface [ 261.005798][ T3426] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 261.033418][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.043021][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.053134][ T3426] bond0 (unregistering): Released all slaves [ 261.062951][ T3426] bond1 (unregistering): Released all slaves [ 261.071901][ T3426] bond2 (unregistering): Released all slaves [ 261.082533][ T3426] bond3 (unregistering): Released all slaves [ 261.093458][ T3426] bond4 (unregistering): Released all slaves [ 261.106342][ T3426] bond5 (unregistering): Released all slaves [ 261.116870][ T3426] bond6 (unregistering): Released all slaves [ 261.149535][ T3426] tipc: Left network mode [ 261.157646][ T3426] hsr_slave_0: left promiscuous mode [ 261.163887][ T3426] hsr_slave_1: left promiscuous mode [ 261.213963][ T3426] team0 (unregistering): Port device team_slave_1 removed [ 261.228424][ T3426] team0 (unregistering): Port device team_slave_0 removed [ 261.261973][ T29] audit: type=1326 audit(1769213029.183:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.286966][ T29] audit: type=1326 audit(1769213029.183:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.311271][ T29] audit: type=1326 audit(1769213029.183:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.335956][ T29] audit: type=1326 audit(1769213029.183:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.359999][ T29] audit: type=1326 audit(1769213029.183:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.383818][ T29] audit: type=1326 audit(1769213029.183:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.409120][ T29] audit: type=1326 audit(1769213029.183:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.433522][ T29] audit: type=1326 audit(1769213029.183:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.457156][ T29] audit: type=1326 audit(1769213029.213:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.2.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcdecacb9 code=0x7ffc0000 [ 261.481097][T12688] chnl_net:caif_netlink_parms(): no params data found [ 261.513243][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3107'. [ 261.538693][T12688] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.545962][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.553588][T12688] bridge_slave_0: entered allmulticast mode [ 261.560388][T12688] bridge_slave_0: entered promiscuous mode [ 261.567297][T12688] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.574392][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.582161][T12688] bridge_slave_1: entered allmulticast mode [ 261.588891][T12688] bridge_slave_1: entered promiscuous mode [ 261.608998][T12688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.621674][T12688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.643521][T12688] team0: Port device team_slave_0 added [ 261.651046][T12688] team0: Port device team_slave_1 added [ 261.670740][T12688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.677846][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.704220][T12688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.723265][T12688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.730689][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.756857][T12688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.782159][T12725] syzkaller0: entered promiscuous mode [ 261.788015][T12725] syzkaller0: entered allmulticast mode [ 261.823652][T12730] syzkaller0: entered promiscuous mode [ 261.830134][T12730] syzkaller0: entered allmulticast mode [ 261.874634][T12739] syzkaller0: entered promiscuous mode [ 261.880364][T12739] syzkaller0: entered allmulticast mode [ 261.890250][T12688] hsr_slave_0: entered promiscuous mode [ 261.899874][T12688] hsr_slave_1: entered promiscuous mode [ 261.906528][T12688] debugfs: 'hsr0' already exists in 'hsr' [ 261.912510][T12688] Cannot create hsr debugfs directory [ 262.073261][T12759] syzkaller0: entered promiscuous mode [ 262.078978][T12759] syzkaller0: entered allmulticast mode [ 262.298048][ T5569] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 262.943375][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 263.055911][T12775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.065425][T12688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.075402][T12688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.101684][T12688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.123750][T12688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.000097][T12887] syzkaller0: entered promiscuous mode [ 264.005772][T12887] syzkaller0: entered allmulticast mode [ 264.038861][T12688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.052849][T12688] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.063959][ T5569] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.071270][ T5569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.102424][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.109653][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.132962][T12688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.143489][T12688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.178863][T12895] syzkaller0: entered promiscuous mode [ 264.184399][T12895] syzkaller0: entered allmulticast mode [ 264.240398][T12688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.403904][T12688] veth0_vlan: entered promiscuous mode [ 264.414550][T12688] veth1_vlan: entered promiscuous mode [ 264.433386][T12688] veth0_macvtap: entered promiscuous mode [ 264.443114][T12688] veth1_macvtap: entered promiscuous mode [ 264.456408][T12688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.471089][T12688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.483265][ T3426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.503096][ T3426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.521809][ T3426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.543371][ T3426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.205837][T12948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3146'. [ 265.473307][T12962] syzkaller0: entered promiscuous mode [ 265.479038][T12962] syzkaller0: entered allmulticast mode [ 265.545039][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3153'. [ 265.583002][ T3426] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 265.651869][T12983] syzkaller0: entered promiscuous mode [ 265.657602][T12983] syzkaller0: entered allmulticast mode [ 266.349449][T12965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.402124][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3163'. [ 266.426607][T13010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3164'. [ 266.437059][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3164'. [ 266.511593][T13014] syzkaller0: entered promiscuous mode [ 266.517244][T13014] syzkaller0: entered allmulticast mode [ 266.803728][T13022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3169'. [ 266.855079][T13024] syzkaller0: entered promiscuous mode [ 266.860800][T13024] syzkaller0: entered allmulticast mode [ 267.096223][ T3426] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 267.358368][T13062] syzkaller0: entered promiscuous mode [ 267.363988][T13062] syzkaller0: entered allmulticast mode [ 268.186847][T13083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3184'. [ 268.459675][T13091] netlink: 'syz.2.3187': attribute type 10 has an invalid length. [ 268.516683][T13094] syzkaller0: entered promiscuous mode [ 268.522432][T13094] syzkaller0: entered allmulticast mode [ 268.604038][ T5569] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 268.766628][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3193'. [ 268.851993][T13114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3194'. [ 268.880264][T13116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3195'. [ 268.889984][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 268.973990][T13118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3196'. [ 269.268913][T13127] netlink: 'syz.4.3200': attribute type 10 has an invalid length. [ 269.277358][T13127] syz_tun: entered promiscuous mode [ 269.287430][T13127] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 269.325411][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3201'. [ 269.380232][T13098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.422354][T13131] loop4: detected capacity change from 0 to 512 [ 269.487049][T13131] EXT4-fs: Ignoring removed bh option [ 269.492628][T13131] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.524626][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'. [ 269.534920][T13131] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 269.550992][T13131] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 269.601876][T13131] EXT4-fs (loop4): orphan cleanup on readonly fs [ 269.614346][T13131] __quota_error: 4 callbacks suppressed [ 269.614366][T13131] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 269.629820][T13131] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 269.700594][T13131] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3201: Failed to acquire dquot type 1 [ 269.713140][T13131] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3201: Invalid block bitmap block 0 in block_group 0 [ 269.750619][T13131] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3201: Invalid block bitmap block 0 in block_group 0 [ 269.764976][T13131] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3201: Invalid block bitmap block 0 in block_group 0 [ 269.779070][T13131] Quota error (device loop4): write_blk: dquota write failed [ 269.786628][T13131] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 269.796716][T13131] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3201: Failed to acquire dquot type 1 [ 269.809967][T13131] Quota error (device loop4): write_blk: dquota write failed [ 269.819224][T13131] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 269.830086][T13131] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3201: Failed to acquire dquot type 1 [ 269.832365][T13151] syzkaller0: entered promiscuous mode [ 269.847161][T13151] syzkaller0: entered allmulticast mode [ 269.867449][T13131] EXT4-fs (loop4): 1 orphan inode deleted [ 269.874136][T13131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.938916][T13131] syz.4.3201 (13131) used greatest stack depth: 8976 bytes left [ 269.981010][T12688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.984379][T13153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3207'. [ 270.166461][T13157] pimreg: tun_chr_ioctl cmd 1074812118 [ 270.350837][T13165] netlink: 'syz.2.3211': attribute type 10 has an invalid length. [ 270.384730][T13167] loop2: detected capacity change from 0 to 512 [ 270.405736][T13167] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3212: inode has both inline data and extents flags [ 270.419580][T13167] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3212: couldn't read orphan inode 15 (err -117) [ 270.432866][T13167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.557641][T13175] syzkaller0: entered promiscuous mode [ 270.563203][T13175] syzkaller0: entered allmulticast mode [ 270.608642][T13179] syzkaller0: entered promiscuous mode [ 270.614206][T13179] syzkaller0: entered allmulticast mode [ 270.621525][T13177] syzkaller0: entered promiscuous mode [ 270.627235][T13177] syzkaller0: entered allmulticast mode [ 270.920832][T13195] netlink: 'syz.4.3223': attribute type 10 has an invalid length. [ 271.223731][T13217] bridge0: port 3(syz_tun) entered blocking state [ 271.230477][T13217] bridge0: port 3(syz_tun) entered disabled state [ 271.237727][T13217] syz_tun: entered allmulticast mode [ 271.244139][T13217] syz_tun: entered promiscuous mode [ 271.250314][T13217] bridge0: port 3(syz_tun) entered blocking state [ 271.256825][T13217] bridge0: port 3(syz_tun) entered forwarding state [ 271.264765][T13217] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 271.311049][T13219] syzkaller0: entered promiscuous mode [ 271.316626][T13219] syzkaller0: entered allmulticast mode [ 271.418273][ T29] audit: type=1326 audit(1769213039.343:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3900acb9 code=0x7ffc0000 [ 271.442436][ T29] audit: type=1326 audit(1769213039.343:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3900acb9 code=0x7ffc0000 [ 271.466123][ T29] audit: type=1326 audit(1769213039.343:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b3900acb9 code=0x7ffc0000 [ 271.489931][ T29] audit: type=1326 audit(1769213039.373:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13220 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3900acb9 code=0x7ffc0000 [ 271.838507][T13231] __nla_validate_parse: 4 callbacks suppressed [ 271.838523][T13231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3235'. [ 271.855044][T13231] netlink: 'syz.1.3235': attribute type 10 has an invalid length. [ 271.863417][T13231] syz_tun: entered promiscuous mode [ 271.873626][T13231] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 271.961421][T13235] syzkaller0: entered promiscuous mode [ 271.967102][T13235] syzkaller0: entered allmulticast mode [ 272.103576][T13239] syzkaller0: entered promiscuous mode [ 272.109228][T13239] syzkaller0: entered allmulticast mode [ 272.196275][T13245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3242'. [ 272.252925][T13247] loop3: detected capacity change from 0 to 1024 [ 272.318985][T13247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.374134][T13247] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.458431][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.480729][T13260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3246'. [ 272.490496][T13260] netlink: 'syz.0.3246': attribute type 10 has an invalid length. [ 272.501341][T13260] bridge0: port 3(syz_tun) entered disabled state [ 272.508622][T13260] syz_tun: left allmulticast mode [ 272.513956][T13260] bridge0: port 3(syz_tun) entered disabled state [ 272.524323][T13260] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 272.566325][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 273.368275][T13284] syzkaller0: entered promiscuous mode [ 273.373915][T13284] syzkaller0: entered allmulticast mode [ 273.451562][T12056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.494798][T13288] syzkaller0: entered promiscuous mode [ 273.500636][T13288] syzkaller0: entered allmulticast mode [ 273.540105][T13295] loop1: detected capacity change from 0 to 1024 [ 273.567014][T13295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.581562][T13295] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.596584][T13301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3258'. [ 273.626593][T13301] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 273.639942][T13301] bridge0: port 3(syz_tun) entered disabled state [ 273.651738][T11796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.676368][T13301] syz_tun: left allmulticast mode [ 273.681701][T13301] bridge0: port 3(syz_tun) entered disabled state [ 273.700639][T13301] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 273.757477][T13309] syzkaller0: entered promiscuous mode [ 273.763012][T13309] syzkaller0: entered allmulticast mode [ 273.800511][T13315] loop2: detected capacity change from 0 to 512 [ 273.810747][T13315] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3263: inode has both inline data and extents flags [ 273.824980][T13315] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3263: couldn't read orphan inode 15 (err -117) [ 273.837638][T13315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.883813][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3264'. [ 273.906250][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 273.906901][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3265'. [ 274.029668][T13324] loop3: detected capacity change from 0 to 512 [ 274.057068][T13324] EXT4-fs: Ignoring removed bh option [ 274.062591][T13324] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.111429][T13324] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 274.227982][T13324] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 274.236300][T13324] EXT4-fs (loop3): orphan cleanup on readonly fs [ 274.243083][T13324] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3265: Failed to acquire dquot type 1 [ 274.263973][T13324] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3265: Invalid block bitmap block 0 in block_group 0 [ 274.277836][T13324] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3265: Invalid block bitmap block 0 in block_group 0 [ 274.291544][T13324] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3265: Invalid block bitmap block 0 in block_group 0 [ 274.305848][T13324] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3265: Failed to acquire dquot type 1 [ 274.317551][T13324] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3265: Failed to acquire dquot type 1 [ 274.329240][T13324] EXT4-fs (loop3): 1 orphan inode deleted [ 274.336786][T13324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.412105][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3268'. [ 274.442483][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.488925][T13337] loop3: detected capacity change from 0 to 1024 [ 274.499992][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3271'. [ 274.509285][T13335] netlink: 'syz.1.3271': attribute type 10 has an invalid length. [ 274.523351][T13337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.590643][T13337] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.635119][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 274.980152][T13356] syzkaller0: entered promiscuous mode [ 274.985724][T13356] syzkaller0: entered allmulticast mode [ 275.095985][T13358] syzkaller0: entered promiscuous mode [ 275.101532][T13358] syzkaller0: entered allmulticast mode [ 275.211059][T13364] syzkaller0: entered promiscuous mode [ 275.216726][T13364] syzkaller0: entered allmulticast mode [ 275.340577][T13369] loop3: detected capacity change from 0 to 512 [ 275.347832][T13369] EXT4-fs: Ignoring removed bh option [ 275.353498][T13369] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.366660][T13369] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 275.397128][T13369] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 275.405275][T13369] EXT4-fs (loop3): orphan cleanup on readonly fs [ 275.413064][T13369] __quota_error: 23 callbacks suppressed [ 275.413083][T13369] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 275.428630][T13369] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 275.439080][T13369] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3281: Failed to acquire dquot type 1 [ 275.450926][T13369] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3281: Invalid block bitmap block 0 in block_group 0 [ 275.464781][T13369] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3281: Invalid block bitmap block 0 in block_group 0 [ 275.479684][T13369] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3281: Invalid block bitmap block 0 in block_group 0 [ 275.493670][T13369] Quota error (device loop3): write_blk: dquota write failed [ 275.501350][T13369] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 275.511449][T13369] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3281: Failed to acquire dquot type 1 [ 275.523697][T13369] Quota error (device loop3): write_blk: dquota write failed [ 275.531199][T13369] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 275.541197][T13369] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.3281: Failed to acquire dquot type 1 [ 275.553045][T13369] EXT4-fs (loop3): 1 orphan inode deleted [ 275.560428][T13369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.636847][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.902255][ T29] audit: type=1326 audit(1769213043.823:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.0.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68abefacb9 code=0x7ffc0000 [ 275.929674][ T29] audit: type=1326 audit(1769213043.853:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.0.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68abefacb9 code=0x7ffc0000 [ 275.953549][ T29] audit: type=1326 audit(1769213043.853:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.0.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68abefacb9 code=0x7ffc0000 [ 275.977431][ T29] audit: type=1326 audit(1769213043.853:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13371 comm="syz.0.3283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f68abefacb9 code=0x7ffc0000 [ 275.995294][T13385] netlink: 'syz.4.3286': attribute type 25 has an invalid length. [ 276.011467][T13373] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.025589][T13385] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 276.058982][T13373] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.219298][T13373] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.251659][T13391] syzkaller0: entered promiscuous mode [ 276.257372][T13391] syzkaller0: entered allmulticast mode [ 276.268392][T13373] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.338683][ T357] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.370034][ T357] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.386201][ T357] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.410163][ T357] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.833650][T12056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.020955][T13429] syzkaller0: entered promiscuous mode [ 277.026643][T13429] syzkaller0: entered allmulticast mode [ 277.126487][T13434] syzkaller0: entered promiscuous mode [ 277.132046][T13434] syzkaller0: entered allmulticast mode [ 277.247349][T13439] __nla_validate_parse: 4 callbacks suppressed [ 277.247370][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3301'. [ 277.383822][T13447] netlink: 'syz.1.3305': attribute type 1 has an invalid length. [ 277.408196][T13447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.445322][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3305'. [ 277.490730][T13447] bond1: (slave ip6gretap1): making interface the new active one [ 277.499426][T13447] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 277.540643][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3302'. [ 277.682987][T13463] syzkaller0: entered promiscuous mode [ 277.688622][T13463] syzkaller0: entered allmulticast mode [ 278.097316][T13451] ================================================================== [ 278.105454][T13451] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 278.114111][T13451] [ 278.116462][T13451] write to 0xffff888104a14468 of 8 bytes by task 13445 on cpu 0: [ 278.124205][T13451] shmem_file_splice_read+0x470/0x600 [ 278.129879][T13451] splice_direct_to_actor+0x26e/0x670 [ 278.135308][T13451] do_splice_direct+0x119/0x1a0 [ 278.140215][T13451] do_sendfile+0x380/0x650 [ 278.144667][T13451] __x64_sys_sendfile64+0x105/0x150 [ 278.150087][T13451] x64_sys_call+0x2db1/0x3000 [ 278.154835][T13451] do_syscall_64+0xc0/0x2a0 [ 278.159367][T13451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.165338][T13451] [ 278.167690][T13451] write to 0xffff888104a14468 of 8 bytes by task 13451 on cpu 1: [ 278.175437][T13451] shmem_file_splice_read+0x470/0x600 [ 278.180874][T13451] splice_direct_to_actor+0x26e/0x670 [ 278.186307][T13451] do_splice_direct+0x119/0x1a0 [ 278.191217][T13451] do_sendfile+0x380/0x650 [ 278.195686][T13451] __x64_sys_sendfile64+0x105/0x150 [ 278.200941][T13451] x64_sys_call+0x2db1/0x3000 [ 278.205672][T13451] do_syscall_64+0xc0/0x2a0 [ 278.210231][T13451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.216188][T13451] [ 278.218546][T13451] value changed: 0x0000000000008e5b -> 0x0000000000008e63 [ 278.225679][T13451] [ 278.228024][T13451] Reported by Kernel Concurrency Sanitizer on: [ 278.234223][T13451] CPU: 1 UID: 0 PID: 13451 Comm: syz.4.3304 Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.244063][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.254144][T13451] ================================================================== [ 278.397785][T12056] bond0: (slave syz_tun): Releasing backup interface [ 278.410443][T13461] bond0: (slave syz_tun): Releasing backup interface [ 278.445913][T13451] bond0: (slave syz_tun): Releasing backup interface [ 278.457550][T13440] bond0: (slave syz_tun): Releasing backup interface [ 278.474243][T10281] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.539951][T10281] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.618552][T10281] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.659131][T10281] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.717502][T10281] bridge_slave_1: left allmulticast mode [ 278.723250][T10281] bridge_slave_1: left promiscuous mode [ 278.729014][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.738277][T10281] bridge_slave_0: left allmulticast mode [ 278.744020][T10281] bridge_slave_0: left promiscuous mode [ 278.750132][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.849431][T10281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.863311][T10281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.873413][T10281] bond0 (unregistering): Released all slaves [ 278.930717][T10281] hsr_slave_0: left promiscuous mode [ 278.936610][T10281] hsr_slave_1: left promiscuous mode [ 278.942290][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.949856][T10281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.957575][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.965003][T10281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.976805][T10281] veth1_macvtap: left promiscuous mode [ 278.982345][T10281] veth0_macvtap: left promiscuous mode [ 278.988001][T10281] veth1_vlan: left promiscuous mode [ 278.993381][T10281] veth0_vlan: left promiscuous mode [ 279.070702][T10281] team0 (unregistering): Port device team_slave_1 removed [ 279.080826][T10281] team0 (unregistering): Port device team_slave_0 removed [ 279.410281][T10281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.488412][T10281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.549627][T10281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.628396][T10281] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.707873][T10281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.759208][T10281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.838846][T10281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.874648][T10281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.957897][T10281] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.009123][T10281] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.058917][T10281] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.141099][T10281] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.217724][T10281] bridge_slave_1: left allmulticast mode [ 280.223499][T10281] bridge_slave_1: left promiscuous mode [ 280.229411][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.237300][T10281] bridge_slave_0: left allmulticast mode [ 280.243002][T10281] bridge_slave_0: left promiscuous mode [ 280.249031][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.257883][T10281] bridge_slave_1: left allmulticast mode [ 280.263535][T10281] bridge_slave_1: left promiscuous mode [ 280.269485][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.277679][T10281] bridge_slave_0: left allmulticast mode [ 280.283329][T10281] bridge_slave_0: left promiscuous mode [ 280.289260][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.297783][T10281] bridge_slave_1: left allmulticast mode [ 280.303507][T10281] bridge_slave_1: left promiscuous mode [ 280.309370][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.317151][T10281] bridge_slave_0: left allmulticast mode [ 280.322804][T10281] bridge_slave_0: left promiscuous mode [ 280.328606][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.411775][T10281] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 280.478187][T10281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.488613][T10281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.498454][T10281] bond0 (unregistering): Released all slaves [ 280.506283][T10281] bond1 (unregistering): Released all slaves [ 280.559042][T10281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.569061][T10281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.579182][T10281] bond0 (unregistering): Released all slaves [ 280.638764][T10281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.648655][T10281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.658475][T10281] bond0 (unregistering): Released all slaves [ 280.693922][T10281] hsr_slave_0: left promiscuous mode [ 280.699828][T10281] hsr_slave_1: left promiscuous mode [ 280.705805][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.713464][T10281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.721661][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.729216][T10281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.739075][T10281] hsr_slave_0: left promiscuous mode [ 280.745002][T10281] hsr_slave_1: left promiscuous mode [ 280.751173][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.758744][T10281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.766816][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.774247][T10281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.784202][T10281] hsr_slave_0: left promiscuous mode [ 280.790255][T10281] hsr_slave_1: left promiscuous mode [ 280.796595][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.804009][T10281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.812299][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.819838][T10281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.837909][T10281] veth1_macvtap: left promiscuous mode [ 280.843451][T10281] veth0_macvtap: left promiscuous mode [ 280.849270][T10281] veth1_vlan: left promiscuous mode [ 280.854550][T10281] veth0_vlan: left promiscuous mode [ 280.860918][T10281] veth1_macvtap: left promiscuous mode [ 280.866503][T10281] veth0_macvtap: left promiscuous mode [ 280.872241][T10281] veth1_vlan: left promiscuous mode [ 280.878571][T10281] veth0_vlan: left promiscuous mode [ 280.884477][T10281] veth1_macvtap: left promiscuous mode [ 280.890459][T10281] veth0_macvtap: left promiscuous mode [ 280.896188][T10281] veth1_vlan: left promiscuous mode [ 280.901447][T10281] veth0_vlan: left promiscuous mode [ 281.055085][T10281] team0 (unregistering): Port device team_slave_1 removed [ 281.065728][T10281] team0 (unregistering): Port device team_slave_0 removed [ 281.126693][T10281] team0 (unregistering): Port device team_slave_1 removed [ 281.138506][T10281] team0 (unregistering): Port device team_slave_0 removed [ 281.199973][T10281] team0 (unregistering): Port device team_slave_1 removed [ 281.212709][T10281] team0 (unregistering): Port device team_slave_0 removed [ 281.636609][T13462] bond0: (slave syz_tun): Releasing backup interface [ 281.988540][T10281] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.047591][T10281] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.097925][T10281] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.147747][T10281] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.221662][T10281] bridge_slave_1: left allmulticast mode [ 282.227603][T10281] bridge_slave_1: left promiscuous mode [ 282.233520][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.241971][T10281] bridge_slave_0: left allmulticast mode [ 282.247860][T10281] bridge_slave_0: left promiscuous mode [ 282.253608][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.328489][T10281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.338513][T10281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.348131][T10281] bond0 (unregistering): Released all slaves [ 282.383231][T10281] hsr_slave_0: left promiscuous mode [ 282.389521][T10281] hsr_slave_1: left promiscuous mode [ 282.395284][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.402844][T10281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.411498][T10281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.419221][T10281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.430356][T10281] veth1_macvtap: left promiscuous mode [ 282.435970][T10281] veth0_macvtap: left promiscuous mode [ 282.441579][T10281] veth1_vlan: left promiscuous mode [ 282.447171][T10281] veth0_vlan: left promiscuous mode [ 282.530706][T10281] team0 (unregistering): Port device team_slave_1 removed [ 282.542007][T10281] team0 (unregistering): Port device team_slave_0 removed