last executing test programs: 4m17.93786704s ago: executing program 32 (id=1957): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x100) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340), 0x2000011a) syz_clone3(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400080c}, 0x4000800) 57.11520192s ago: executing program 33 (id=4493): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x892f, @igmp={{0x5, 0x4, 0x1, 0x7, 0x1c, 0x66, 0x0, 0xa, 0x2, 0x0, @multicast2, @loopback}, {0x14, 0x4, 0x0, @multicast2}}}}}, 0x0) 29.218656852s ago: executing program 5 (id=4914): close(0xffffffffffffffff) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1915, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 28.176683224s ago: executing program 5 (id=4922): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, 0x0, 0x44004) 28.114741926s ago: executing program 5 (id=4925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x7, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 28.04767938s ago: executing program 5 (id=4927): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x104) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) 27.122899235s ago: executing program 6 (id=4941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0xfffffff3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 27.032985329s ago: executing program 5 (id=4945): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r3 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x6, 0x0, 0x70}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r6 = dup(0xffffffffffffffff) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r7, 0x2) listen(r7, 0x5) 26.967991363s ago: executing program 6 (id=4951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b929, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x10000000, 0xfe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000700)="504291f1", 0x4}], 0x2}, 0x4) 26.80811302s ago: executing program 6 (id=4955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) 26.782351492s ago: executing program 6 (id=4956): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x104) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) 26.510010875s ago: executing program 5 (id=4960): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000004) syz_emit_ethernet(0xf4e, &(0x7f0000000080)={@broadcast, @dev, @val={@val={0x88a8, 0x4, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x9, 0xf38, 0x65, 0x0, 0x76, 0x29, 0x0, @broadcast, @multicast2}, "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"}}}}, 0x0) 26.509870855s ago: executing program 34 (id=4960): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000004) syz_emit_ethernet(0xf4e, &(0x7f0000000080)={@broadcast, @dev, @val={@val={0x88a8, 0x4, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x9, 0xf38, 0x65, 0x0, 0x76, 0x29, 0x0, @broadcast, @multicast2}, "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"}}}}, 0x0) 25.734014094s ago: executing program 6 (id=4969): io_setup(0x5, &(0x7f0000000180)) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0x0) 25.323552784s ago: executing program 6 (id=4975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0) fcntl$setstatus(r3, 0x4, 0x42c00) fcntl$setstatus(r3, 0x4, 0x2400) write(r1, &(0x7f0000000040), 0xffffff4a) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d1) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r5, &(0x7f0000001100)=""/4091, 0xffb) 25.323203203s ago: executing program 35 (id=4975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0) fcntl$setstatus(r3, 0x4, 0x42c00) fcntl$setstatus(r3, 0x4, 0x2400) write(r1, &(0x7f0000000040), 0xffffff4a) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d1) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r5, &(0x7f0000001100)=""/4091, 0xffb) 22.710423432s ago: executing program 4 (id=4998): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607", 0x8, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0) 21.836828495s ago: executing program 4 (id=5006): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00005f2000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000003d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x2200a, 0x4) io_uring_enter(r0, 0x2216, 0x7721, 0x16, 0x0, 0x3b) 21.687624393s ago: executing program 4 (id=5009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffbffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x5, 0xa1, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x71b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4010844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 21.420122156s ago: executing program 4 (id=5011): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x104) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) 20.943071969s ago: executing program 4 (id=5015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x7, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 20.11138925s ago: executing program 4 (id=5025): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000080)=0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 20.11107182s ago: executing program 36 (id=5025): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000080)=0x20) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 13.861309938s ago: executing program 8 (id=5118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffbffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x5, 0xa1, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x71b923, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x2, 0xb}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4010844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.701366835s ago: executing program 8 (id=5120): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r1, &(0x7f0000000300)=[{0x0}], 0x1) 13.455638668s ago: executing program 8 (id=5121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) 13.20241034s ago: executing program 8 (id=5124): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 12.79655434s ago: executing program 8 (id=5135): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) 12.281196735s ago: executing program 8 (id=5139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0xb0, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}}, 0x0) 12.239615237s ago: executing program 37 (id=5139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0xb0, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}}, 0x0) 8.503997832s ago: executing program 9 (id=5174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009f00)={0x28, 0x0, 0x101, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040004}, 0x800c014) 8.458197513s ago: executing program 9 (id=5176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x7, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 8.346880669s ago: executing program 9 (id=5179): io_setup(0x5, &(0x7f0000000180)) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0x0) 7.243375573s ago: executing program 9 (id=5192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) 6.9072328s ago: executing program 9 (id=5199): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local}}}}, 0x0) 6.611542704s ago: executing program 9 (id=5205): close(0xffffffffffffffff) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1915, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x3, 0xff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.611180495s ago: executing program 38 (id=5205): close(0xffffffffffffffff) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1915, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xe, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x23, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x3, 0xff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x24a0, 0x4c1, 0x43, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.930608285s ago: executing program 1 (id=5266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 2.675968748s ago: executing program 1 (id=5270): lchown(&(0x7f0000000ac0)='./file1\x00', 0x0, 0xffffffffffffffff) 2.564338623s ago: executing program 1 (id=5272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000540)='/sys/power/wakeup_count', 0x0, 0x10a) r2 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 2.251469699s ago: executing program 0 (id=5280): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.668785387s ago: executing program 1 (id=5283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) readv(r1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}], 0x3, 0x2001, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 1.314754215s ago: executing program 0 (id=5291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.109129145s ago: executing program 0 (id=5297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4800) 1.047789978s ago: executing program 3 (id=5298): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) 1.047521388s ago: executing program 0 (id=5299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x5, 0x5, 0x6, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x4, 0x81, 0x8, 0x40, 0x1c}, 0xe) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.045778288s ago: executing program 3 (id=5300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) 1.036479188s ago: executing program 2 (id=5301): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 966.735802ms ago: executing program 3 (id=5302): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000380)) 907.490915ms ago: executing program 3 (id=5304): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r3 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x6, 0x0, 0x70}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r7 = dup(0xffffffffffffffff) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000040)) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r8, 0x2) listen(r8, 0x5) 872.561647ms ago: executing program 7 (id=5305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x7, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 735.986223ms ago: executing program 7 (id=5306): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@routing={0x84}]}}}}}, 0x0) 675.788056ms ago: executing program 1 (id=5307): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 675.235226ms ago: executing program 7 (id=5308): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040), 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x58) r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000d80)={0x6, {{0x2, 0x800, @multicast1}}, {{0x2, 0x4e20, @local}}}, 0x108) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x9, 0x0, &(0x7f0000000040)) 626.845179ms ago: executing program 1 (id=5309): syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x9, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0/file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f0000000300)='binfmt_misc\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 626.408019ms ago: executing program 7 (id=5310): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) 563.596322ms ago: executing program 7 (id=5311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) 542.271053ms ago: executing program 7 (id=5312): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) close(r1) 266.497267ms ago: executing program 3 (id=5313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) 135.449873ms ago: executing program 0 (id=5314): r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0xea60}) 86.106235ms ago: executing program 2 (id=5315): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) 66.141777ms ago: executing program 2 (id=5316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) write$P9_RMKNOD(r2, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) shutdown(r2, 0x1) 65.695047ms ago: executing program 3 (id=5317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x7, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 21.460579ms ago: executing program 2 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 20.975578ms ago: executing program 0 (id=5319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) readv(r1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}], 0x3, 0x2001, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 20.537019ms ago: executing program 2 (id=5320): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@routing={0x84}]}}}}}, 0x0) 0s ago: executing program 2 (id=5321): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x104) open(0x0, 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) kernel console output (not intermixed with test programs): 6][T14325] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3814'. [ 286.436207][T14367] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3828'. [ 286.649746][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.668681][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.746590][T14378] tipc: Enabled bearer , priority 0 [ 286.753589][T14378] syzkaller0: entered promiscuous mode [ 286.759254][T14380] IPVS: dh: FWM 3 0x00000003 - no destination available [ 286.771961][T14378] syzkaller0: entered allmulticast mode [ 286.802430][T14377] tipc: Resetting bearer [ 286.812900][T14377] tipc: Disabling bearer [ 287.204954][T14390] tipc: Enabled bearer , priority 0 [ 287.285097][T14391] syzkaller0: entered promiscuous mode [ 287.317320][T14391] syzkaller0: entered allmulticast mode [ 287.380205][T14390] tipc: Resetting bearer [ 287.395226][T14389] tipc: Resetting bearer [ 287.412146][T14389] tipc: Disabling bearer [ 287.420901][T14399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'. [ 287.492310][T14406] IPVS: fo: FWM 3 0x00000003 - no destination available [ 287.659917][ T28] audit: type=1400 audit(1774219203.307:465): avc: denied { connect } for pid=14418 comm="syz.0.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.702900][T14422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.712942][T14422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.722034][T14422] IPVS: fo: FWM 3 0x00000003 - no destination available [ 287.852365][ T28] audit: type=1400 audit(1774219203.497:466): avc: denied { write } for pid=14418 comm="syz.0.3850" path="socket:[56475]" dev="sockfs" ino=56475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.558324][ T28] audit: type=1400 audit(1774219204.197:467): avc: denied { write } for pid=14464 comm="syz.4.3869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.596593][T14469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3871'. [ 288.616408][T14471] IPVS: fo: FWM 3 0x00000003 - no destination available [ 289.425227][T14495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3880'. [ 289.434461][T14495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3880'. [ 289.755970][T14507] tipc: Enabled bearer , priority 0 [ 289.763229][T14507] syzkaller0: entered promiscuous mode [ 289.768989][T14507] syzkaller0: entered allmulticast mode [ 289.778859][T14507] tipc: Resetting bearer [ 289.785570][T14506] tipc: Resetting bearer [ 289.792563][T14506] tipc: Disabling bearer [ 289.940652][T14512] IPVS: fo: FWM 3 0x00000003 - no destination available [ 290.244889][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3890'. [ 290.263018][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3890'. [ 290.272615][T14524] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3891'. [ 290.283736][T14524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3891'. [ 290.370593][T14536] IPVS: fo: FWM 3 0x00000003 - no destination available [ 290.397276][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.406643][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.415294][T14541] IPVS: fo: FWM 3 0x00000003 - no destination available [ 290.687323][T14553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.793717][T14553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.818880][T14558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3904'. [ 290.858117][T14558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3904'. [ 291.050234][T14566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.078300][T14566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.078484][T14568] syzkaller0: entered promiscuous mode [ 291.092474][T14568] syzkaller0: entered allmulticast mode [ 291.200908][T14570] IPVS: dh: FWM 3 0x00000003 - no destination available [ 291.364689][T14580] tipc: Started in network mode [ 291.369649][T14580] tipc: Node identity e2dad8fb4b63, cluster identity 4711 [ 291.376825][T14580] tipc: Enabled bearer , priority 0 [ 291.394508][T14576] tipc: Resetting bearer [ 291.403417][T14575] tipc: Disabling bearer [ 292.017319][T14615] syzkaller0: entered promiscuous mode [ 292.023076][T14615] syzkaller0: entered allmulticast mode [ 292.161330][T14628] 9p: Bad value for 'rfdno' [ 292.325780][ T28] audit: type=1400 audit(1774219207.967:468): avc: denied { mounton } for pid=14638 comm="syz.4.3936" path="/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 292.479862][T14645] syzkaller0: entered promiscuous mode [ 292.497992][T14645] syzkaller0: entered allmulticast mode [ 292.520979][T14649] IPVS: fo: FWM 3 0x00000003 - no destination available [ 292.547454][T14647] syzkaller0: entered promiscuous mode [ 292.587147][T14647] syzkaller0: entered allmulticast mode [ 292.666731][ T28] audit: type=1400 audit(1774219207.997:469): avc: denied { read } for pid=14640 comm="syz.4.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 292.707904][T14653] __nla_validate_parse: 6 callbacks suppressed [ 292.707916][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3942'. [ 293.001300][T14677] IPVS: fo: FWM 3 0x00000003 - no destination available [ 293.018722][T14678] syzkaller0: entered promiscuous mode [ 293.058231][T14678] syzkaller0: entered allmulticast mode [ 293.553648][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 293.813350][T14720] IPVS: fo: FWM 3 0x00000003 - no destination available [ 294.183524][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3970'. [ 294.210617][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3970'. [ 294.371430][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3972'. [ 295.050720][T14778] syzkaller0: entered promiscuous mode [ 295.066427][T14778] syzkaller0: entered allmulticast mode [ 295.315529][T14789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3989'. [ 295.360993][T14789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3989'. [ 295.487064][T14796] IPVS: fo: FWM 3 0x00000003 - no destination available [ 295.524767][T14800] syzkaller0: entered promiscuous mode [ 295.537775][T14800] syzkaller0: entered allmulticast mode [ 295.624952][T14808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.634353][T14808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.642819][T14808] IPVS: fo: FWM 3 0x00000003 - no destination available [ 295.810029][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4000'. [ 295.843198][ T28] audit: type=1400 audit(1774219211.407:470): avc: denied { shutdown } for pid=14812 comm="syz.4.4001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.464245][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4008'. [ 296.545270][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4008'. [ 296.555028][T14834] IPVS: fo: FWM 3 0x00000003 - no destination available [ 297.813968][T14890] tipc: Enabled bearer , priority 0 [ 297.821662][T14890] syzkaller0: entered promiscuous mode [ 297.828793][T14890] syzkaller0: entered allmulticast mode [ 297.837774][T14889] tipc: Resetting bearer [ 297.850688][T14889] tipc: Disabling bearer [ 297.891113][T14902] __nla_validate_parse: 2 callbacks suppressed [ 297.891139][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4037'. [ 297.906644][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4037'. [ 297.940098][T14908] usb usb9: check_ctrlrecip: process 14908 (syz.2.4041) requesting ep 01 but needs 81 [ 297.949704][T14908] usb usb9: usbfs: process 14908 (syz.2.4041) did not claim interface 0 before use [ 298.036167][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'. [ 298.046088][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'. [ 298.060443][T14924] tipc: Enabled bearer , priority 0 [ 298.067502][T14924] syzkaller0: entered promiscuous mode [ 298.073007][T14924] syzkaller0: entered allmulticast mode [ 298.091957][T14923] tipc: Resetting bearer [ 298.108903][T14923] tipc: Disabling bearer [ 298.202183][T14941] IPVS: Error connecting to the multicast addr [ 298.209172][ T28] audit: type=1400 audit(1774219213.857:471): avc: denied { getopt } for pid=14925 comm="syz.5.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.104036][ T28] audit: type=1400 audit(1774219214.747:472): avc: denied { connect } for pid=14964 comm="syz.1.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 299.427650][T15001] syzkaller0: entered promiscuous mode [ 299.448205][T15001] syzkaller0: entered allmulticast mode [ 299.602820][T15017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.620157][T15017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.656451][T15017] IPVS: dh: FWM 3 0x00000003 - no destination available [ 299.749436][T15025] tipc: Enabled bearer , priority 0 [ 299.761494][T15025] tipc: Resetting bearer [ 299.772616][T15024] tipc: Disabling bearer [ 299.972725][T15035] 9p: Bad value for 'rfdno' [ 300.050082][T15040] syzkaller0: entered promiscuous mode [ 300.055579][T15040] syzkaller0: entered allmulticast mode [ 300.075496][T15041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.140518][T15048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15048 comm=syz.2.4091 [ 300.153357][T15041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.165994][T15048] 9pnet_virtio: no channels available for device syz [ 300.288883][T15059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.318350][T15065] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4104'. [ 300.318579][T15059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.499876][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4108'. [ 300.854594][T15084] syzkaller0: entered promiscuous mode [ 300.888094][T15084] syzkaller0: entered allmulticast mode [ 301.164436][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 301.218250][T15103] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4118'. [ 301.238854][T15105] IPVS: fo: FWM 3 0x00000003 - no destination available [ 301.318134][T15115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.327426][T15115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.405722][T15121] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4125'. [ 301.825823][T15134] dvmrp1: entered allmulticast mode [ 302.011767][T15141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4131'. [ 302.146591][T15144] IPVS: dh: FWM 3 0x00000003 - no destination available [ 302.994265][T15179] dvmrp1: entered allmulticast mode [ 303.071853][T15184] __nla_validate_parse: 1 callbacks suppressed [ 303.071869][T15184] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4146'. [ 303.265530][T15187] IPVS: fo: FWM 3 0x00000003 - no destination available [ 303.499495][T15198] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4150'. [ 303.918924][T15217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4158'. [ 304.266833][T15236] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4164'. [ 304.646134][T15241] syzkaller0: entered promiscuous mode [ 304.658310][T15241] syzkaller0: entered allmulticast mode [ 304.759418][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.1.4165 [ 304.803511][T15243] 9pnet_virtio: no channels available for device syz [ 305.062188][T15254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4172'. [ 305.312946][ T28] audit: type=1400 audit(1774219220.957:473): avc: denied { map } for pid=15259 comm="syz.0.4174" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 305.482842][T15267] syzkaller0: entered promiscuous mode [ 305.488385][T15267] syzkaller0: entered allmulticast mode [ 306.215000][T15296] syzkaller0: entered promiscuous mode [ 306.226919][T15298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.271564][T15298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.278265][T15296] syzkaller0: entered allmulticast mode [ 306.299063][T15298] IPVS: fo: FWM 3 0x00000003 - no destination available [ 306.454417][T15306] netlink: 'syz.5.4194': attribute type 2 has an invalid length. [ 306.490269][T15306] netlink: 'syz.5.4194': attribute type 2 has an invalid length. [ 307.065309][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4205'. [ 307.097083][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4206'. [ 307.121790][T15340] netlink: 'syz.2.4207': attribute type 2 has an invalid length. [ 307.178541][ T23] usb usb6-port1: attempt power cycle [ 307.191700][T15343] netlink: 'syz.2.4207': attribute type 2 has an invalid length. [ 307.262922][T15349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.280726][T15349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.298539][T15349] IPVS: fo: FWM 3 0x00000003 - no destination available [ 307.305380][T15353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.314107][T15353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.832757][T15374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4219'. [ 307.872748][T15380] dvmrp1: entered allmulticast mode [ 308.042076][T15388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15388 comm=syz.4.4222 [ 308.056688][T15388] 9pnet_virtio: no channels available for device syz [ 308.119682][T15390] tipc: Enabling of bearer rejected, failed to enable media [ 308.760464][T15407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.770765][T15407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.781315][T15407] IPVS: dh: FWM 3 0x00000003 - no destination available [ 308.998446][ T23] usb usb6-port1: unable to enumerate USB device [ 309.006014][T15260] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 309.015323][T15260] vhci_hcd vhci_hcd.2: invalid port number 96 [ 309.031946][T15260] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 309.176795][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'. [ 309.402721][T15425] xt_recent: Unsupported userspace flags (000000de) [ 309.441414][T15425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.953565][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4245'. [ 310.001953][T15479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4246'. [ 310.011006][ T28] audit: type=1400 audit(1774219225.647:474): avc: denied { write } for pid=15477 comm="syz.0.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 310.077233][T15488] dvmrp1: entered allmulticast mode [ 310.304895][ T3402] kernel read not supported for file /1200/pagemap (pid: 3402 comm: kworker/0:3) [ 310.696947][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4252'. [ 311.079183][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4257'. [ 311.370147][T15561] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4264'. [ 311.536976][T15568] syzkaller0: entered promiscuous mode [ 311.610175][T15568] syzkaller0: entered allmulticast mode [ 312.344949][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4272'. [ 313.220724][T15618] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4285'. [ 313.273444][T15619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15619 comm=syz.5.4279 [ 313.287156][T15619] 9pnet_virtio: no channels available for device syz [ 313.545842][T15635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.578813][T15635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.634116][T15635] gretap0: entered promiscuous mode [ 314.211172][T15650] syzkaller0: entered promiscuous mode [ 314.216844][T15650] syzkaller0: entered allmulticast mode [ 314.316538][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 314.340853][T15655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.350016][T15655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.368580][T15655] IPVS: fo: FWM 3 0x00000003 - no destination available [ 314.424684][T15658] tipc: Enabled bearer , priority 0 [ 314.442769][T15658] tipc: Resetting bearer [ 314.472025][T15657] tipc: Disabling bearer [ 315.549978][T15686] syzkaller0: entered promiscuous mode [ 315.568328][T15686] syzkaller0: entered allmulticast mode [ 315.716616][T15692] syzkaller0: entered promiscuous mode [ 315.723921][T15692] syzkaller0: entered allmulticast mode [ 315.736380][T15694] tipc: Enabled bearer , priority 0 [ 315.762057][T15694] tipc: Resetting bearer [ 315.771445][T15693] tipc: Disabling bearer [ 315.866013][ T28] audit: type=1400 audit(1774219231.497:475): avc: denied { map } for pid=15702 comm="syz.4.4317" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 315.911924][T15711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.920887][T15711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.930732][T15711] IPVS: fo: FWM 3 0x00000003 - no destination available [ 317.262424][T15797] syzkaller0: entered promiscuous mode [ 317.278227][T15797] syzkaller0: entered allmulticast mode [ 317.424282][T15803] syzkaller0: entered promiscuous mode [ 317.461758][T15803] syzkaller0: entered allmulticast mode [ 318.026773][T15824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15824 comm=syz.1.4333 [ 318.072068][T15824] 9pnet_virtio: no channels available for device syz [ 318.503536][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.520903][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.997458][T15916] syz_tun: entered promiscuous mode [ 319.084410][T15916] macvtap1: entered promiscuous mode [ 319.519791][T15936] netlink: 'syz.4.4349': attribute type 11 has an invalid length. [ 319.529527][T15931] netlink: 296 bytes leftover after parsing attributes in process `syz.0.4346'. [ 319.622686][T15936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4349'. [ 320.100263][T15954] netlink: 'syz.5.4355': attribute type 4 has an invalid length. [ 320.274131][T15959] syzkaller0: entered promiscuous mode [ 320.314462][T15959] syzkaller0: entered allmulticast mode [ 320.448291][T15972] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4358'. [ 320.709645][T15991] syzkaller0: entered promiscuous mode [ 320.715127][T15991] syzkaller0: entered allmulticast mode [ 320.794514][T15999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.803635][T15999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.812738][T15999] IPVS: fo: FWM 3 0x00000003 - no destination available [ 323.195866][T16107] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 323.954633][T16191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.008329][T16202] syzkaller0: entered promiscuous mode [ 324.018334][T16191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.032486][T16202] syzkaller0: entered allmulticast mode [ 324.064355][T16191] IPVS: fo: FWM 3 0x00000003 - no destination available [ 324.509742][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4384'. [ 324.603770][T16255] tipc: Enabling of bearer rejected, failed to enable media [ 325.091450][T16276] syzkaller0: entered promiscuous mode [ 325.132439][T16276] syzkaller0: entered allmulticast mode [ 325.703145][T16298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.748407][T16298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.302423][T16312] syzkaller0: entered promiscuous mode [ 326.318890][T16312] syzkaller0: entered allmulticast mode [ 326.408120][T16319] syzkaller0: entered promiscuous mode [ 326.419438][T16319] syzkaller0: entered allmulticast mode [ 326.462089][ T28] audit: type=1400 audit(1774219242.107:476): avc: denied { create } for pid=16311 comm="syz.0.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 326.540819][ T28] audit: type=1400 audit(1774219242.187:477): avc: denied { recv } for pid=16326 comm="syz.0.4411" saddr=10.128.0.163 src=40694 daddr=10.128.0.242 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.639714][ T28] audit: type=1400 audit(1774219242.287:478): avc: denied { mounton } for pid=16337 comm="syz.0.4416" path="/proc/586/task" dev="proc" ino=60991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 326.681760][ T23] kernel read not supported for file /1270/pagemap (pid: 23 comm: kworker/1:0) [ 327.036488][T16355] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 327.217908][ T28] audit: type=1326 audit(1774219242.857:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16359 comm="syz.5.4423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdc6c3c799 code=0x0 [ 327.279130][T16365] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.286369][T16365] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.486622][T16383] xt_recent: Unsupported userspace flags (000000de) [ 327.505775][T16383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.643478][T16360] Set syz1 is full, maxelem 65536 reached [ 327.697707][T16393] syzkaller0: entered promiscuous mode [ 327.703428][T16393] syzkaller0: entered allmulticast mode [ 328.455027][T16412] loop2: detected capacity change from 0 to 512 [ 328.471124][T16412] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4438: iget: bad i_size value: 38620345925642 [ 328.488240][T16412] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 328.488460][T16412] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4438: couldn't read orphan inode 15 (err -117) [ 328.509402][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 328.509419][ C1] EXT4-fs (loop2): initial error at time 1774219244: ext4_orphan_get:1391: inode 15 [ 328.509456][ C1] EXT4-fs (loop2): last error at time 1774219244: ext4_orphan_get:1391: inode 15 [ 328.534833][T16412] loop2: lost filesystem error report for type 5 error -117 [ 328.535334][T16412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.557005][ T28] audit: type=1400 audit(1774219244.197:480): avc: denied { add_name } for pid=16411 comm="syz.2.4438" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.578616][T16419] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4440'. [ 328.589761][ T28] audit: type=1400 audit(1774219244.197:481): avc: denied { create } for pid=16411 comm="syz.2.4438" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 328.594310][T10362] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.790179][T16436] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 328.810919][T16436] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 328.850041][ T28] audit: type=1400 audit(1774219244.497:482): avc: denied { accept } for pid=16443 comm="syz.5.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 329.084179][T16456] netlink: 'syz.2.4454': attribute type 10 has an invalid length. [ 329.092742][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.099814][T16456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.107155][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.114330][T16456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.123510][T16456] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 329.195248][T16463] bridge0: port 3(syz_tun) entered blocking state [ 329.202029][T16463] bridge0: port 3(syz_tun) entered disabled state [ 329.209315][T16463] syz_tun: entered allmulticast mode [ 329.216005][T16463] syz_tun: entered promiscuous mode [ 329.567433][T16471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.586706][T16471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.214031][ T3409] kernel read not supported for file /713/pagemap (pid: 3409 comm: kworker/1:5) [ 330.258583][ T23] usb usb8-port1: attempt power cycle [ 330.345074][T16495] xt_recent: Unsupported userspace flags (000000de) [ 330.353196][T16495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.680354][T16509] syzkaller0: entered promiscuous mode [ 330.685929][T16509] syzkaller0: entered allmulticast mode [ 330.715762][T16511] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4476'. [ 330.757439][T16513] loop2: detected capacity change from 0 to 512 [ 330.766522][T16513] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4477: inode has both inline data and extents flags [ 330.783028][T16513] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.783871][T16513] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4477: couldn't read orphan inode 15 (err -117) [ 330.793039][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 330.793055][ C1] EXT4-fs (loop2): initial error at time 1774219246: ext4_orphan_get:1391: inode 15 [ 330.793079][ C1] EXT4-fs (loop2): last error at time 1774219246: ext4_orphan_get:1391: inode 15 [ 330.834717][T16513] loop2: lost filesystem error report for type 5 error -117 [ 330.835177][T16513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.860823][ T28] audit: type=1400 audit(1774219246.507:483): avc: denied { mounton } for pid=16512 comm="syz.2.4477" path="/362/file0/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 330.943490][T16513] loop2: detected capacity change from 512 to 0 [ 330.952169][T16519] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.2.4477: unable to read itable block [ 330.959119][ C0] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 330.974624][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 330.983999][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 330.991219][T16519] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.2.4477: unable to read itable block [ 331.004155][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.012519][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 331.019656][T16519] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: IO failure [ 331.028509][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.036795][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 331.043654][T16519] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #18: comm syz.2.4477: mark_inode_dirty error [ 331.055420][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.063762][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 331.070643][T16519] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.2.4477: unable to read itable block [ 331.083615][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.091893][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 331.099190][T16519] EXT4-fs error (device loop2): ext4_get_max_inline_size:121: inode #18: comm syz.2.4477: can't get inode location 18 [ 331.112200][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.123358][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 331.130639][T16519] EXT4-fs error (device loop2): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.2.4477: unable to read itable block [ 331.144034][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.152556][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 331.161334][T16519] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: IO failure [ 331.170474][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.179237][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 331.186191][T16519] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #18: comm syz.2.4477: mark_inode_dirty error [ 331.198323][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.206685][T16519] EXT4-fs (loop2): I/O error while writing superblock [ 331.214242][T16519] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.4477: Error while async write back metadata [ 331.227265][T16519] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 331.466720][ T28] audit: type=1400 audit(1774219247.107:484): avc: denied { setopt } for pid=16522 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.466913][T16523] netlink: 'syz.0.4480': attribute type 2 has an invalid length. [ 331.507288][ T28] audit: type=1400 audit(1774219247.147:485): avc: denied { listen } for pid=16522 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 331.795460][T10362] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 331.854806][T10362] syz_tun (unregistering): left allmulticast mode [ 331.872631][T10362] syz_tun (unregistering): left promiscuous mode [ 331.888530][T10362] bridge0: port 3(syz_tun) entered disabled state [ 331.941097][T16164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.002094][T16164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.073113][T16164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.088089][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4490'. [ 332.156330][T16164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.258079][T16164] bridge_slave_1: left allmulticast mode [ 332.268968][T16164] bridge_slave_1: left promiscuous mode [ 332.275057][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.294863][T16164] bridge_slave_0: left allmulticast mode [ 332.301463][T16164] bridge_slave_0: left promiscuous mode [ 332.307238][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.328371][ T23] usb usb8-port1: unable to enumerate USB device [ 332.348231][ T23] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 332.354823][T16164] dvmrp1 (unregistering): left allmulticast mode [ 332.374120][T16164] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 332.420229][T16164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.430045][T16164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.442847][T16164] bond0 (unregistering): Released all slaves [ 332.450427][T16164] bond1 (unregistering): Released all slaves [ 332.459257][T16164] bond2 (unregistering): Released all slaves [ 332.467460][T16164] bond3 (unregistering): Released all slaves [ 332.475865][T16164] bond4 (unregistering): Released all slaves [ 332.483651][T16164] bond5 (unregistering): Released all slaves [ 332.491746][T16164] bond6 (unregistering): Released all slaves [ 332.503344][T16572] bridge0: port 3(syz_tun) entered blocking state [ 332.509924][T16572] bridge0: port 3(syz_tun) entered disabled state [ 332.516425][T16572] syz_tun: entered allmulticast mode [ 332.522763][T16572] syz_tun: entered promiscuous mode [ 332.528559][T16579] syzkaller0: entered promiscuous mode [ 332.537483][T16579] syzkaller0: entered allmulticast mode [ 332.555202][T16164] tipc: Left network mode [ 332.570425][T16164] IPVS: stopping master sync thread 16355 ... [ 332.618594][T16164] hsr_slave_0: left promiscuous mode [ 332.625183][T16164] hsr_slave_1: left promiscuous mode [ 332.631702][T16164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.654595][T16164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.663746][T16164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.673511][T16164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.692724][T16164] veth1_macvtap: left promiscuous mode [ 332.698304][T16164] veth0_macvtap: left promiscuous mode [ 332.703908][T16164] veth1_vlan: left promiscuous mode [ 332.709598][T16164] veth0_vlan: left promiscuous mode [ 332.779902][T16164] team0 (unregistering): Port device team_slave_1 removed [ 332.789670][T16164] team0 (unregistering): Port device team_slave_0 removed [ 332.827246][T16609] bridge0: port 3(syz_tun) entered blocking state [ 332.833880][T16609] bridge0: port 3(syz_tun) entered disabled state [ 332.845710][T16609] syz_tun: entered allmulticast mode [ 332.853445][T16609] syz_tun: entered promiscuous mode [ 332.932031][T16559] chnl_net:caif_netlink_parms(): no params data found [ 333.227771][T16559] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.277418][T16559] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.285649][T16666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.309613][T16559] bridge_slave_0: entered allmulticast mode [ 333.316000][T16559] bridge_slave_0: entered promiscuous mode [ 333.323561][T16666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.327444][T16559] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.338819][T16559] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.353733][T16559] bridge_slave_1: entered allmulticast mode [ 333.361995][T16559] bridge_slave_1: entered promiscuous mode [ 333.376435][T16164] IPVS: stop unused estimator thread 0... [ 333.416237][T16559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.446774][T16559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.518474][T16559] team0: Port device team_slave_0 added [ 333.539971][T16559] team0: Port device team_slave_1 added [ 333.578312][T16559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.585293][T16559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.611427][T16559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.624566][T16559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.632058][T16559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.665347][T16559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.680477][T16696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16696 comm=syz.1.4523 [ 333.712249][T16696] 9pnet_virtio: no channels available for device syz [ 333.726646][T16559] hsr_slave_0: entered promiscuous mode [ 333.739057][T16559] hsr_slave_1: entered promiscuous mode [ 333.854257][T16703] syzkaller0: entered promiscuous mode [ 333.867618][T16703] syzkaller0: entered allmulticast mode [ 334.025564][T16559] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 334.082246][T16559] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.104766][T16559] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.123663][T16559] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.208372][ T3402] usb usb8-port1: attempt power cycle [ 334.282431][T16559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.300531][T16559] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.310196][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.317297][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.743301][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.750373][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.984057][T16559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.233115][T16772] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4538'. [ 335.260599][T16559] veth0_vlan: entered promiscuous mode [ 335.275528][T16559] veth1_vlan: entered promiscuous mode [ 335.305729][T16559] veth0_macvtap: entered promiscuous mode [ 335.322950][T16559] veth1_macvtap: entered promiscuous mode [ 335.335517][T16559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.350089][T16559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.366722][ T71] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.384772][ T71] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.402151][ T71] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.412111][ T71] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.438070][ T28] audit: type=1400 audit(1774219251.077:486): avc: denied { mount } for pid=16559 comm="syz-executor" name="/" dev="gadgetfs" ino=4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 335.612140][T16788] syzkaller0: entered promiscuous mode [ 335.617703][T16788] syzkaller0: entered allmulticast mode [ 335.912126][ T28] audit: type=1326 audit(1774219251.557:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16793 comm="syz.4.4546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd18620c799 code=0x0 [ 336.668424][ T3402] usb usb8-port1: unable to enumerate USB device [ 336.696348][T16806] syzkaller0: entered promiscuous mode [ 336.715145][T16806] syzkaller0: entered allmulticast mode [ 336.872681][T16814] bridge_slave_0: left allmulticast mode [ 336.878766][T16814] bridge_slave_0: left promiscuous mode [ 336.884813][T16814] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.903895][T16817] xt_recent: Unsupported userspace flags (000000de) [ 336.918780][T16814] bridge_slave_1: left allmulticast mode [ 336.925235][T16814] bridge_slave_1: left promiscuous mode [ 336.931776][T16823] netlink: 'syz.5.4556': attribute type 2 has an invalid length. [ 336.935996][T16817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.948034][T16814] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.962532][T16814] bond0: (slave bond_slave_0): Releasing backup interface [ 336.975623][T16814] bond0: (slave bond_slave_1): Releasing backup interface [ 336.988881][T16814] team0: Port device team_slave_0 removed [ 336.998058][T16814] team0: Port device team_slave_1 removed [ 337.006696][T16814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.015039][T16814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.025501][T16814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.033121][T16814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.042786][T16814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.115100][T16830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.123831][T16830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.764296][T16848] syzkaller0: entered promiscuous mode [ 337.812555][T16848] syzkaller0: entered allmulticast mode [ 338.040741][T16856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16856 comm=syz.5.4562 [ 338.073931][T16856] 9pnet_virtio: no channels available for device syz [ 338.547934][T16870] xt_recent: Unsupported userspace flags (000000de) [ 338.576031][T16870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.130238][T16885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.148307][T16885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.384481][T16895] syzkaller0: entered promiscuous mode [ 339.390254][T16895] syzkaller0: entered allmulticast mode [ 339.567051][T16899] dvmrp1: entered allmulticast mode [ 339.605827][T16903] syzkaller0: entered promiscuous mode [ 339.611476][T16903] syzkaller0: entered allmulticast mode [ 340.739570][T16927] syzkaller0: entered promiscuous mode [ 340.809395][T16927] syzkaller0: entered allmulticast mode [ 340.887423][T16932] dvmrp1: entered allmulticast mode [ 340.944428][T16939] syzkaller0: entered promiscuous mode [ 340.950949][T16939] syzkaller0: entered allmulticast mode [ 340.985052][T16945] xt_recent: Unsupported userspace flags (000000de) [ 340.995114][T16945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.100891][T16954] bridge_slave_0: left allmulticast mode [ 341.106739][T16954] bridge_slave_0: left promiscuous mode [ 341.113575][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.144276][T16954] bridge_slave_1: left allmulticast mode [ 341.165891][T16954] bridge_slave_1: left promiscuous mode [ 341.174676][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.189084][T16954] bond0: (slave bond_slave_0): Releasing backup interface [ 341.200368][T16954] bond0: (slave bond_slave_1): Releasing backup interface [ 341.214581][T16954] team0: Port device team_slave_0 removed [ 341.224312][T16954] team0: Port device team_slave_1 removed [ 341.232885][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.240368][T16954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.251749][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.259645][T16954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.270871][T16954] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 341.567084][T16971] syzkaller0: entered promiscuous mode [ 341.583002][T16971] syzkaller0: entered allmulticast mode [ 341.787817][T16982] syzkaller0: entered promiscuous mode [ 341.801383][T16982] syzkaller0: entered allmulticast mode [ 341.896014][ T41] vlan2: left allmulticast mode [ 341.910988][ T41] dummy0: left allmulticast mode [ 341.921194][ T41] vlan2: left promiscuous mode [ 341.926152][ T41] dummy0: left promiscuous mode [ 341.931247][ T41] bridge0: port 3(vlan2) entered disabled state [ 341.939699][ T41] bridge_slave_1: left allmulticast mode [ 341.945460][ T41] bridge_slave_1: left promiscuous mode [ 341.951437][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.959459][ T41] bridge_slave_0: left allmulticast mode [ 341.971197][ T41] bridge_slave_0: left promiscuous mode [ 341.989321][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.021671][ T41] gretap0 (unregistering): left promiscuous mode [ 342.051391][T16999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.074189][T16999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.083510][T16999] IPVS: fo: FWM 3 0x00000003 - no destination available [ 342.093023][ T41] bond1 (unregistering): (slave gretap1): Releasing active interface [ 342.139888][ T41] bond0 (unregistering): left promiscuous mode [ 342.146044][ T41] bond_slave_0: left promiscuous mode [ 342.151608][ T41] bond_slave_1: left promiscuous mode [ 342.159383][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.163528][T16978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16978 comm=syz.1.4610 [ 342.185806][T16978] 9pnet_virtio: no channels available for device syz [ 342.215412][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.225874][ T41] bond0 (unregistering): Released all slaves [ 342.262909][ T41] bond1 (unregistering): Released all slaves [ 342.412881][ T41] hsr_slave_0: left promiscuous mode [ 342.437039][ T41] hsr_slave_1: left promiscuous mode [ 342.459854][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.504002][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.600265][ T41] team0 (unregistering): Port device team_slave_1 removed [ 342.609764][ T41] team0 (unregistering): Port device team_slave_0 removed [ 342.774956][T17035] syzkaller0: entered promiscuous mode [ 342.780982][T17035] syzkaller0: entered allmulticast mode [ 342.833488][T17039] syzkaller0: entered promiscuous mode [ 342.839192][T17039] syzkaller0: entered allmulticast mode [ 343.646731][T17116] syzkaller0: entered promiscuous mode [ 343.652617][T17116] syzkaller0: entered allmulticast mode [ 343.831489][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4646'. [ 343.904727][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.913721][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.922898][T17132] IPVS: fo: FWM 3 0x00000003 - no destination available [ 344.012475][T17143] xt_recent: Unsupported userspace flags (000000de) [ 344.035190][T17143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.104028][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4657'. [ 344.158069][T17160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.167152][T17160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.473802][T17176] tipc: Enabling of bearer rejected, failed to enable media [ 344.529297][T17176] syzkaller0: entered promiscuous mode [ 344.704321][T17176] syzkaller0: entered allmulticast mode [ 345.408929][T17221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.475933][T17221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.485959][T17221] IPVS: fo: FWM 3 0x00000003 - no destination available [ 345.573475][ T28] audit: type=1400 audit(1774219261.217:488): avc: denied { create } for pid=17235 comm="syz.0.4679" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.594835][ T28] audit: type=1400 audit(1774219261.217:489): avc: denied { map } for pid=17235 comm="syz.0.4679" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.619598][ T28] audit: type=1400 audit(1774219261.217:490): avc: denied { read write } for pid=17235 comm="syz.0.4679" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.842033][T17262] syzkaller0: entered promiscuous mode [ 345.847515][T17262] syzkaller0: entered allmulticast mode [ 345.943283][T17264] tipc: Enabling of bearer rejected, failed to enable media [ 345.952025][T17264] syzkaller0: entered promiscuous mode [ 345.957488][T17264] syzkaller0: entered allmulticast mode [ 346.060467][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.069762][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.482698][T17288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.605000][T17288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.713130][T17298] tipc: Enabling of bearer rejected, failed to enable media [ 346.728476][T17298] syzkaller0: entered promiscuous mode [ 346.734092][T17298] syzkaller0: entered allmulticast mode [ 347.373020][T17324] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 347.380757][T17324] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 347.685286][T17332] syzkaller0: entered promiscuous mode [ 347.693793][T17332] syzkaller0: entered allmulticast mode [ 347.725697][T17338] tipc: Enabling of bearer rejected, failed to enable media [ 347.736218][T17338] syzkaller0: entered promiscuous mode [ 347.748229][T17338] syzkaller0: entered allmulticast mode [ 347.854257][T17353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.871983][T17353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.881230][T17353] IPVS: fo: FWM 3 0x00000003 - no destination available [ 348.343935][T17375] syzkaller0: entered promiscuous mode [ 348.349930][T17375] syzkaller0: entered allmulticast mode [ 348.480494][T17383] tipc: Enabling of bearer rejected, failed to enable media [ 348.489453][T17383] syzkaller0: entered promiscuous mode [ 348.494966][T17383] syzkaller0: entered allmulticast mode [ 348.572462][T17385] netlink: 'syz.1.4727': attribute type 2 has an invalid length. [ 348.803687][T17400] syzkaller0: entered promiscuous mode [ 348.809603][T17400] syzkaller0: entered allmulticast mode [ 348.911989][T17403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.920792][T17403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.931694][T17403] IPVS: fo: FWM 3 0x00000003 - no destination available [ 349.330772][T17409] syzkaller0: entered promiscuous mode [ 349.336322][T17409] syzkaller0: entered allmulticast mode [ 350.084095][T17440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.098869][T17440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.131376][T17440] IPVS: dh: FWM 3 0x00000003 - no destination available [ 350.417405][T17468] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4763'. [ 353.506508][ T28] audit: type=1400 audit(1774219269.147:491): avc: denied { open } for pid=17580 comm="syz.5.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 353.555845][T17583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.867562][T17583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.941793][ T28] audit: type=1400 audit(1774219269.147:492): avc: denied { kernel } for pid=17580 comm="syz.5.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 354.851722][T17639] syzkaller0: entered promiscuous mode [ 354.878913][T17639] syzkaller0: entered allmulticast mode [ 355.078903][ T8478] syz_tun (unregistering): left allmulticast mode [ 355.108218][ T8478] syz_tun (unregistering): left promiscuous mode [ 355.114613][ T8478] bridge0: port 3(syz_tun) entered disabled state [ 355.145572][T17676] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4827'. [ 355.179415][T17674] syzkaller0: entered promiscuous mode [ 355.184965][T17674] syzkaller0: entered allmulticast mode [ 355.272476][T17615] chnl_net:caif_netlink_parms(): no params data found [ 355.392633][T17615] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.403736][T17615] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.411197][T17615] bridge_slave_0: entered allmulticast mode [ 355.418885][T17615] bridge_slave_0: entered promiscuous mode [ 355.426420][T17704] syzkaller0: entered promiscuous mode [ 355.432457][T17704] syzkaller0: entered allmulticast mode [ 355.439940][T17615] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.448868][T17615] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.456301][T17615] bridge_slave_1: entered allmulticast mode [ 355.463346][T17615] bridge_slave_1: entered promiscuous mode [ 355.488946][T17615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.500770][T17615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.668498][T17615] team0: Port device team_slave_0 added [ 355.728928][T17615] team0: Port device team_slave_1 added [ 355.777007][T17615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.797030][T17615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.826107][T17615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.852392][T17732] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4838'. [ 355.856668][T17733] xt_recent: Unsupported userspace flags (000000de) [ 355.862316][T17615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.878355][T17615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.905651][T17615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.909296][T17733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.949489][T17735] netlink: 'syz.0.4840': attribute type 2 has an invalid length. [ 355.962708][T16166] bridge_slave_1: left allmulticast mode [ 355.968536][T16166] bridge_slave_1: left promiscuous mode [ 355.976845][T16166] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.991734][T16166] bridge_slave_0: left allmulticast mode [ 356.003669][T16166] bridge_slave_0: left promiscuous mode [ 356.015613][T16166] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.037671][T16166] gretap0 (unregistering): left promiscuous mode [ 356.046101][T16166] bond1 (unregistering): (slave gretap1): Releasing active interface [ 356.058094][T16166] dvmrp1 (unregistering): left allmulticast mode [ 356.120211][T16166] bond0 (unregistering): left promiscuous mode [ 356.126536][T16166] bond_slave_0: left promiscuous mode [ 356.132142][T16166] bond_slave_1: left promiscuous mode [ 356.140698][T16166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.149949][T16166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.159068][T16166] bond0 (unregistering): Released all slaves [ 356.165699][T17768] netlink: 'syz.4.4844': attribute type 2 has an invalid length. [ 356.169640][T16166] bond1 (unregistering): Released all slaves [ 356.183146][T16166] bond2 (unregistering): Released all slaves [ 356.191603][T16166] bond3 (unregistering): Released all slaves [ 356.207678][T17759] syzkaller0: entered promiscuous mode [ 356.213310][T17759] syzkaller0: entered allmulticast mode [ 356.243719][T17746] syzkaller0: entered promiscuous mode [ 356.249255][T17746] syzkaller0: entered allmulticast mode [ 356.269518][T17615] hsr_slave_0: entered promiscuous mode [ 356.275571][T17615] hsr_slave_1: entered promiscuous mode [ 356.281396][T17615] debugfs: 'hsr0' already exists in 'hsr' [ 356.287153][T17615] Cannot create hsr debugfs directory [ 356.293194][T16166] tipc: Left network mode [ 356.347415][T16166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.354918][T16166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.407718][T16166] team0 (unregistering): Port device team_slave_1 removed [ 356.419265][T16166] team0 (unregistering): Port device team_slave_0 removed [ 356.492589][T17788] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4851'. [ 356.508891][T17790] xt_recent: Unsupported userspace flags (000000de) [ 356.541411][T17790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.631100][T17808] syzkaller0: entered promiscuous mode [ 356.636620][T17808] syzkaller0: entered allmulticast mode [ 356.793636][T17814] syzkaller0: entered promiscuous mode [ 356.799543][T17814] syzkaller0: entered allmulticast mode [ 356.955793][T16166] IPVS: stop unused estimator thread 0... [ 357.189047][T17615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 357.237497][T17615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 357.253322][T17615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 357.254760][T17825] netlink: 'syz.0.4859': attribute type 2 has an invalid length. [ 357.272320][T17615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 357.283049][T17829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.303051][T17829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.316313][ T3409] IPVS: starting estimator thread 0... [ 357.328313][T17844] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4862'. [ 357.362254][T17615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.381888][T17615] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.395553][T13517] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.402763][T13517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.413549][T17850] syzkaller0: entered promiscuous mode [ 357.419887][T17850] syzkaller0: entered allmulticast mode [ 357.435359][T13517] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.442518][T13517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.467705][T17841] IPVS: using max 2448 ests per chain, 122400 per kthread [ 357.533129][T17615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.598032][T17874] syzkaller0: entered promiscuous mode [ 357.603587][T17874] syzkaller0: entered allmulticast mode [ 357.626920][T17877] syzkaller0: entered promiscuous mode [ 357.632476][T17877] syzkaller0: entered allmulticast mode [ 357.641164][T17615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.732006][T17894] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4872'. [ 357.799526][T17615] veth0_vlan: entered promiscuous mode [ 357.809131][T17615] veth1_vlan: entered promiscuous mode [ 357.832057][T17615] veth0_macvtap: entered promiscuous mode [ 357.851266][T17615] veth1_macvtap: entered promiscuous mode [ 357.866103][T17615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.877933][T17903] netlink: 'syz.6.4874': attribute type 2 has an invalid length. [ 357.899227][T17615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.964879][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.993817][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.044275][T17910] syzkaller0: entered promiscuous mode [ 358.058622][T17910] syzkaller0: entered allmulticast mode [ 358.100439][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.164369][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.274431][T17920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.284921][T17920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.315433][T17924] syzkaller0: entered promiscuous mode [ 358.321260][T17924] syzkaller0: entered allmulticast mode [ 358.930566][T17954] syzkaller0: entered promiscuous mode [ 358.936196][T17954] syzkaller0: entered allmulticast mode [ 359.006261][T17964] syzkaller0: entered promiscuous mode [ 359.012032][T17964] syzkaller0: entered allmulticast mode [ 359.114201][T17989] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4893'. [ 359.221770][T18009] syzkaller0: entered promiscuous mode [ 359.227327][T18009] syzkaller0: entered allmulticast mode [ 359.493643][T18046] IPv6: addrconf: prefix option has invalid lifetime [ 359.940517][T18082] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4909'. [ 359.945414][T18080] syzkaller0: entered promiscuous mode [ 359.955061][T18080] syzkaller0: entered allmulticast mode [ 360.062737][T18091] syzkaller0: entered promiscuous mode [ 360.068373][T18091] syzkaller0: entered allmulticast mode [ 360.091436][T18096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.100638][T18096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.481886][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 360.481990][T18122] IPv6: addrconf: prefix option has invalid lifetime [ 360.935095][T18190] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4921'. [ 361.169192][T18212] syzkaller0: entered promiscuous mode [ 361.174768][T18212] syzkaller0: entered allmulticast mode [ 361.210258][T18216] loop5: detected capacity change from 0 to 512 [ 361.218272][T18216] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.4927: inode has both inline data and extents flags [ 361.231523][T18216] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 361.231615][T18216] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4927: couldn't read orphan inode 15 (err -117) [ 361.240923][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 361.240947][ C0] EXT4-fs (loop5): initial error at time 1774219276: ext4_orphan_get:1391: inode 15 [ 361.240965][ C0] EXT4-fs (loop5): last error at time 1774219276: ext4_orphan_get:1391: inode 15 [ 361.277915][T18216] loop5: lost filesystem error report for type 5 error -117 [ 361.284016][T18216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.358231][T18216] loop5: detected capacity change from 512 to 0 [ 361.405099][T18231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.418289][T18216] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.5.4927: unable to read itable block [ 361.424336][T18231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.431615][T18216] buffer_io_error: 26 callbacks suppressed [ 361.431628][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.457193][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.464608][T18216] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.5.4927: unable to read itable block [ 361.478105][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.486779][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.493927][T18216] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: IO failure [ 361.505661][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.514086][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.521962][T18216] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #18: comm syz.5.4927: mark_inode_dirty error [ 361.534012][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.542553][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.549710][T18216] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.5.4927: unable to read itable block [ 361.562793][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.571105][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.578454][T18216] EXT4-fs error (device loop5): ext4_get_max_inline_size:121: inode #18: comm syz.5.4927: can't get inode location 18 [ 361.591065][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.599406][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.606485][T18216] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.5.4927: unable to read itable block [ 361.619379][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.627697][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.634686][T18216] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: IO failure [ 361.643615][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.651988][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.658824][T18216] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #18: comm syz.5.4927: mark_inode_dirty error [ 361.670293][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 361.678640][T18216] EXT4-fs (loop5): I/O error while writing superblock [ 361.685572][T18216] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.4927: Error while async write back metadata [ 361.698258][T18216] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 362.029058][T18340] syzkaller0: entered promiscuous mode [ 362.037417][T18340] syzkaller0: entered allmulticast mode [ 362.161854][T18366] syzkaller0: entered promiscuous mode [ 362.167360][T18366] syzkaller0: entered allmulticast mode [ 362.212801][T18369] syzkaller0: entered promiscuous mode [ 362.218499][T18369] syzkaller0: entered allmulticast mode [ 362.233485][T18374] syzkaller0: entered promiscuous mode [ 362.242856][T18374] syzkaller0: entered allmulticast mode [ 362.243170][T17615] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 362.321952][T18383] syzkaller0: entered promiscuous mode [ 362.336076][T18383] syzkaller0: entered allmulticast mode [ 362.373611][T18389] syzkaller0: entered promiscuous mode [ 362.381754][T18389] syzkaller0: entered allmulticast mode [ 362.533833][T18431] loop6: detected capacity change from 0 to 512 [ 362.548742][T18430] syzkaller0: entered promiscuous mode [ 362.561428][T18431] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4956: inode has both inline data and extents flags [ 362.563978][T18430] syzkaller0: entered allmulticast mode [ 362.590956][T18431] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 362.595202][T18431] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4956: couldn't read orphan inode 15 (err -117) [ 362.604369][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 362.604386][ C0] EXT4-fs (loop6): initial error at time 1774219278: ext4_orphan_get:1391: inode 15 [ 362.604403][ C0] EXT4-fs (loop6): last error at time 1774219278: ext4_orphan_get:1391: inode 15 [ 362.643098][T18431] loop6: lost filesystem error report for type 5 error -117 [ 362.643589][T18431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.688286][T18431] loop6: detected capacity change from 512 to 0 [ 362.697723][T18431] EXT4-fs error (device loop6): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.6.4956: unable to read itable block [ 362.712672][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.719936][T18431] EXT4-fs error (device loop6): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.6.4956: unable to read itable block [ 362.733039][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.749948][T18431] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: IO failure [ 362.759442][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.766344][T18431] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #18: comm syz.6.4956: mark_inode_dirty error [ 362.779491][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.786803][T18431] EXT4-fs error (device loop6): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.6.4956: unable to read itable block [ 362.788085][T13517] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.800549][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.816814][T18431] EXT4-fs error (device loop6): ext4_get_max_inline_size:121: inode #18: comm syz.6.4956: can't get inode location 18 [ 362.829684][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.851550][T13517] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.858338][T18431] EXT4-fs error (device loop6): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.6.4956: unable to read itable block [ 362.881740][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.915360][T18431] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: IO failure [ 362.919096][T18472] syzkaller0: entered promiscuous mode [ 362.928223][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.930793][T18472] syzkaller0: entered allmulticast mode [ 362.936446][T18431] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #18: comm syz.6.4956: mark_inode_dirty error [ 362.961271][T13517] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.977935][T18431] EXT4-fs (loop6): I/O error while writing superblock [ 362.985976][T18431] EXT4-fs error (device loop6): ext4_check_bdev_write_error:227: comm syz.6.4956: Error while async write back metadata [ 363.027575][T13517] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.073834][T18494] syzkaller0: entered promiscuous mode [ 363.081292][T18494] syzkaller0: entered allmulticast mode [ 363.128899][T18459] chnl_net:caif_netlink_parms(): no params data found [ 363.163937][T13517] bridge_slave_1: left allmulticast mode [ 363.171790][T13517] bridge_slave_1: left promiscuous mode [ 363.177527][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.215685][T13517] bridge_slave_0: left allmulticast mode [ 363.221567][T13517] bridge_slave_0: left promiscuous mode [ 363.228324][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.380635][T13517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.390337][T13517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.399834][T13517] bond0 (unregistering): Released all slaves [ 363.417416][T18545] syzkaller0: entered promiscuous mode [ 363.422984][T18545] syzkaller0: entered allmulticast mode [ 363.457247][T18529] syzkaller0: entered promiscuous mode [ 363.462747][T18529] syzkaller0: entered allmulticast mode [ 363.480362][T13517] hsr_slave_0: left promiscuous mode [ 363.486093][T13517] hsr_slave_1: left promiscuous mode [ 363.491768][T13517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.499264][T13517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.506791][T13517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.514324][T13517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.523804][T13517] veth1_macvtap: left promiscuous mode [ 363.529406][T13517] veth0_macvtap: left promiscuous mode [ 363.534915][T13517] veth1_vlan: left promiscuous mode [ 363.540298][T13517] veth0_vlan: left promiscuous mode [ 363.546323][T16559] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 363.616111][T13517] team0 (unregistering): Port device team_slave_1 removed [ 363.626889][T13517] team0 (unregistering): Port device team_slave_0 removed [ 363.702704][T18459] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.715040][T18459] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.722215][T18459] bridge_slave_0: entered allmulticast mode [ 363.729066][T18459] bridge_slave_0: entered promiscuous mode [ 363.740082][T18459] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.748498][T18459] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.757490][T18459] bridge_slave_1: entered allmulticast mode [ 363.770218][T18459] bridge_slave_1: entered promiscuous mode [ 363.799584][T18459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.809963][T18459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.833878][T18577] netlink: 'syz.0.4973': attribute type 2 has an invalid length. [ 363.847478][T18459] team0: Port device team_slave_0 added [ 363.856089][T18459] team0: Port device team_slave_1 added [ 363.887980][T18459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.895224][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.930103][T18459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.953472][T18459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.963576][T18459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.989738][T18459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.035281][T18459] hsr_slave_0: entered promiscuous mode [ 364.042227][T18459] hsr_slave_1: entered promiscuous mode [ 364.048477][T18459] debugfs: 'hsr0' already exists in 'hsr' [ 364.054249][T18459] Cannot create hsr debugfs directory [ 364.242259][T18646] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4978'. [ 364.268793][T18459] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 364.285158][T18459] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 364.301957][T18459] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 364.316794][T18598] chnl_net:caif_netlink_parms(): no params data found [ 364.326234][T18459] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 364.391640][T18598] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.398819][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.406007][T18598] bridge_slave_0: entered allmulticast mode [ 364.414669][T18598] bridge_slave_0: entered promiscuous mode [ 364.421772][T18598] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.429023][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.436196][T18598] bridge_slave_1: entered allmulticast mode [ 364.442924][T18598] bridge_slave_1: entered promiscuous mode [ 364.470384][T18598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.481599][T18598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.504976][T18598] team0: Port device team_slave_0 added [ 364.517714][T18598] team0: Port device team_slave_1 added [ 364.527834][T18459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.553006][T18459] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.560323][T18598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.567251][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.594475][T18598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.607980][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.615049][ T7183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.626765][T18598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.634915][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.661975][T18598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.687337][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.694482][ T7183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.754665][T18727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.764351][T18727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.772708][T18598] hsr_slave_0: entered promiscuous mode [ 364.780523][T18598] hsr_slave_1: entered promiscuous mode [ 364.786599][T18598] debugfs: 'hsr0' already exists in 'hsr' [ 364.792570][T18598] Cannot create hsr debugfs directory [ 364.833022][T18732] netlink: 'syz.0.4981': attribute type 2 has an invalid length. [ 364.912217][T18598] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 364.923792][T18459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.933204][T18598] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 364.942337][T18598] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 364.952387][T18598] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 365.036483][T18598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.050650][T18598] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.061437][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.068507][T16163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.100716][T18598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.111863][T18598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.127696][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4984'. [ 365.163438][T18459] veth0_vlan: entered promiscuous mode [ 365.507969][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.515054][T16163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.552874][T18774] tipc: Enabling of bearer rejected, failed to enable media [ 365.562686][T18776] syzkaller0: entered promiscuous mode [ 365.570336][T18776] syzkaller0: entered allmulticast mode [ 365.577576][T18459] veth1_vlan: entered promiscuous mode [ 365.609111][T18787] syzkaller0: entered promiscuous mode [ 365.614562][T18787] syzkaller0: entered allmulticast mode [ 365.627126][T18598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.665083][T18459] veth0_macvtap: entered promiscuous mode [ 365.673467][T18459] veth1_macvtap: entered promiscuous mode [ 365.684799][T18459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.701732][T18459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.756631][T16164] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.776298][T16166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.785631][T16166] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.807376][T16166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.124570][T18809] syzkaller0: entered promiscuous mode [ 366.144788][T18809] syzkaller0: entered allmulticast mode [ 366.275133][T18598] veth0_vlan: entered promiscuous mode [ 366.281919][T18819] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4992'. [ 366.304542][T18598] veth1_vlan: entered promiscuous mode [ 366.326255][T18598] veth0_macvtap: entered promiscuous mode [ 366.342434][T18598] veth1_macvtap: entered promiscuous mode [ 366.366335][T18823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.367918][T18598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.381031][T18823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.401187][ T3662] IPVS: starting estimator thread 0... [ 366.404284][T18598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.445891][T16166] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.462484][T16166] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.475696][T16166] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.487189][T16166] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.496153][T18824] IPVS: using max 2400 ests per chain, 120000 per kthread [ 367.137554][T18854] syzkaller0: entered promiscuous mode [ 367.143252][T18854] syzkaller0: entered allmulticast mode [ 367.226332][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5002'. [ 367.305902][T18858] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5005'. [ 367.583518][T18866] bridge0: port 3(syz_tun) entered blocking state [ 367.599691][T18866] bridge0: port 3(syz_tun) entered disabled state [ 367.618332][T18866] syz_tun: entered allmulticast mode [ 367.624767][T18866] syz_tun: entered promiscuous mode [ 367.645483][T18866] batman_adv: batadv0: Adding interface: dummy0 [ 367.654451][T18866] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.679731][T18866] batman_adv: batadv0: Interface activated: dummy0 [ 367.687790][T18869] tipc: Enabled bearer , priority 0 [ 367.698768][T18866] batadv0: mtu less than device minimum [ 367.705225][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.715954][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.726866][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.737724][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.748687][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.759548][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.770384][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.781153][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.791947][T18866] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.812541][T18872] tipc: Resetting bearer [ 367.822546][T18868] tipc: Disabling bearer [ 367.882170][T18876] loop4: detected capacity change from 0 to 512 [ 367.891310][T18876] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.5011: inode has both inline data and extents flags [ 367.904643][T18876] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 367.904833][T18876] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5011: couldn't read orphan inode 15 (err -117) [ 367.913984][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 367.913998][ C0] EXT4-fs (loop4): initial error at time 1774219283: ext4_orphan_get:1391: inode 15 [ 367.914030][ C0] EXT4-fs (loop4): last error at time 1774219283: ext4_orphan_get:1391: inode 15 [ 367.947111][T18880] netlink: 'syz.1.5012': attribute type 2 has an invalid length. [ 367.951057][T18876] loop4: lost filesystem error report for type 5 error -117 [ 367.967235][T18876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.028414][T18876] loop4: detected capacity change from 512 to 0 [ 368.037977][T18876] EXT4-fs error (device loop4): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.4.5011: unable to read itable block [ 368.063943][T18876] buffer_io_error: 62 callbacks suppressed [ 368.063958][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.079862][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.086777][T18876] EXT4-fs error (device loop4): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.4.5011: unable to read itable block [ 368.100160][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.108851][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.119433][T18876] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: IO failure [ 368.128625][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.136928][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.143962][T18876] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #18: comm syz.4.5011: mark_inode_dirty error [ 368.155416][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.163692][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.170792][T18876] EXT4-fs error (device loop4): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.4.5011: unable to read itable block [ 368.183784][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.193869][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.203253][T18876] EXT4-fs error (device loop4): ext4_get_max_inline_size:121: inode #18: comm syz.4.5011: can't get inode location 18 [ 368.216792][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.226177][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.233122][T18876] EXT4-fs error (device loop4): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.4.5011: unable to read itable block [ 368.246366][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.255345][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.262560][T18876] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: IO failure [ 368.271511][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.280549][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.287413][T18876] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #18: comm syz.4.5011: mark_inode_dirty error [ 368.300895][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.310147][T18876] EXT4-fs (loop4): I/O error while writing superblock [ 368.318064][T18876] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.5011: Error while async write back metadata [ 368.331120][T18876] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 368.352705][T11979] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 369.092452][T18907] tipc: Enabling of bearer rejected, failed to enable media [ 369.101349][T18907] syzkaller0: entered promiscuous mode [ 369.106829][T18907] syzkaller0: entered allmulticast mode [ 369.181926][ T7183] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.244193][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5024'. [ 369.294079][ T7183] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.331503][T18920] netlink: 'syz.0.5027': attribute type 2 has an invalid length. [ 369.373419][ T7183] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.474750][ T7183] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.800200][ T7183] bond1 (unregistering): (slave gretap1): Releasing active interface [ 369.812321][ T7183] dvmrp1 (unregistering): left allmulticast mode [ 369.880916][ T7183] bond0 (unregistering): Released all slaves [ 369.890092][ T7183] bond1 (unregistering): Released all slaves [ 370.019685][ T7183] tipc: Left network mode [ 370.029075][ T28] audit: type=1400 audit(1774219285.647:493): avc: denied { create } for pid=18939 comm="syz.8.5033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 370.070934][ T7183] IPVS: stopping master sync thread 16107 ... [ 370.097689][ T7183] hsr_slave_0: left promiscuous mode [ 370.133709][ T7183] hsr_slave_1: left promiscuous mode [ 370.166423][ T7183] veth1_macvtap: left promiscuous mode [ 370.171968][ T7183] veth0_macvtap: left promiscuous mode [ 370.177468][ T7183] veth1_vlan: left promiscuous mode [ 370.182739][ T7183] veth0_vlan: left promiscuous mode [ 370.626438][T18912] chnl_net:caif_netlink_parms(): no params data found [ 370.799957][ T7183] IPVS: stop unused estimator thread 0... [ 370.807123][T18912] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.821691][T18912] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.837259][T18912] bridge_slave_0: entered allmulticast mode [ 370.851209][T18912] bridge_slave_0: entered promiscuous mode [ 370.864683][T18912] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.878297][T18912] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.890544][T18912] bridge_slave_1: entered allmulticast mode [ 370.902244][T18912] bridge_slave_1: entered promiscuous mode [ 370.923956][T18912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.939401][T18912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.971063][T18912] team0: Port device team_slave_0 added [ 370.983733][T18912] team0: Port device team_slave_1 added [ 371.039496][T18912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.083924][T18912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.150334][T18912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.169818][T18912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.176818][T18912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.207479][T18912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.266572][T18912] hsr_slave_0: entered promiscuous mode [ 371.278909][T18912] hsr_slave_1: entered promiscuous mode [ 371.285361][T18912] debugfs: 'hsr0' already exists in 'hsr' [ 371.306540][T18912] Cannot create hsr debugfs directory [ 371.499333][T19109] tipc: Enabling of bearer rejected, failed to enable media [ 371.508587][T18912] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 371.519506][T19109] syzkaller0: entered promiscuous mode [ 371.526437][T19109] syzkaller0: entered allmulticast mode [ 372.038090][T18912] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 372.047977][T18912] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 372.071078][T18912] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 372.114912][T18912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.172615][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5063'. [ 372.201523][T18912] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.287834][T16146] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.294916][T16146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.480655][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.487727][T16146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.605745][T19148] xt_recent: Unsupported userspace flags (000000de) [ 372.649596][T19156] bridge0: port 3(syz_tun) entered blocking state [ 372.663144][T19156] bridge0: port 3(syz_tun) entered disabled state [ 372.670037][T19156] syz_tun: entered allmulticast mode [ 372.675960][T19156] syz_tun: entered promiscuous mode [ 372.682837][T19156] bridge0: port 3(syz_tun) entered blocking state [ 372.689309][T19156] bridge0: port 3(syz_tun) entered forwarding state [ 372.709046][T19160] syzkaller0: entered promiscuous mode [ 372.724052][T19160] syzkaller0: entered allmulticast mode [ 372.759183][T18912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.782831][T19170] net_ratelimit: 12 callbacks suppressed [ 372.782848][T19170] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 372.896174][T19183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.918436][T19183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.050059][T18912] veth0_vlan: entered promiscuous mode [ 373.059443][T18912] veth1_vlan: entered promiscuous mode [ 373.085859][T18912] veth0_macvtap: entered promiscuous mode [ 373.101711][T18912] veth1_macvtap: entered promiscuous mode [ 373.132775][T18912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.234927][T18912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.553171][ T2102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.567398][ T2102] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.582916][ T2102] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.593348][ T2102] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.618425][T19223] tipc: Started in network mode [ 373.623531][T19223] tipc: Node identity aee1497f8bb7, cluster identity 4711 [ 373.631109][T19223] tipc: Enabled bearer , priority 0 [ 373.643679][T19223] syzkaller0: entered promiscuous mode [ 373.649805][T19223] syzkaller0: entered allmulticast mode [ 373.663078][T19222] tipc: Resetting bearer [ 373.672187][T19222] tipc: Disabling bearer [ 373.721230][T19235] bridge0: port 3(syz_tun) entered blocking state [ 373.728107][T19235] bridge0: port 3(syz_tun) entered disabled state [ 373.735023][T19235] syz_tun: entered allmulticast mode [ 373.740883][T19235] syz_tun: entered promiscuous mode [ 373.746279][T19235] bridge0: port 3(syz_tun) entered blocking state [ 373.752723][T19235] bridge0: port 3(syz_tun) entered forwarding state [ 373.761957][T19235] batman_adv: batadv0: Adding interface: dummy0 [ 373.771770][T19235] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.843033][T19235] batman_adv: batadv0: Interface activated: dummy0 [ 373.851635][T19240] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 373.907062][T19246] IPv6: addrconf: prefix option has invalid lifetime [ 373.921487][T19251] bridge0: port 3(syz_tun) entered blocking state [ 373.934850][T19251] bridge0: port 3(syz_tun) entered disabled state [ 373.940709][T19254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.942489][T19251] syz_tun: entered allmulticast mode [ 373.950135][T19254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.956331][T19251] syz_tun: entered promiscuous mode [ 373.968561][T19251] bridge0: port 3(syz_tun) entered blocking state [ 373.974997][T19251] bridge0: port 3(syz_tun) entered forwarding state [ 374.061221][T19262] tipc: Started in network mode [ 374.066146][T19262] tipc: Node identity 9203474d730c, cluster identity 4711 [ 374.073315][T19262] tipc: Enabled bearer , priority 0 [ 374.080349][T19262] syzkaller0: entered promiscuous mode [ 374.085850][T19262] syzkaller0: entered allmulticast mode [ 374.168477][T19261] tipc: Resetting bearer [ 374.177987][T19261] tipc: Disabling bearer [ 374.683697][T19294] netlink: 'syz.0.5102': attribute type 2 has an invalid length. [ 374.754393][T19305] batman_adv: batadv0: Adding interface: dummy0 [ 374.760699][T19305] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.785966][T19305] batman_adv: batadv0: Interface activated: dummy0 [ 374.793580][T19305] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 374.810558][T19307] tipc: Enabled bearer , priority 0 [ 374.817833][T19307] syzkaller0: entered promiscuous mode [ 374.823466][T19307] syzkaller0: entered allmulticast mode [ 374.833647][T19306] tipc: Resetting bearer [ 374.844532][T19306] tipc: Disabling bearer [ 375.112664][T19354] xt_recent: Unsupported userspace flags (000000de) [ 375.273524][T19379] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19379 comm=syz.1.5111 [ 375.288392][T19379] 9pnet_virtio: no channels available for device syz [ 375.337802][T19383] netlink: 'syz.8.5116': attribute type 2 has an invalid length. [ 375.477665][T19395] tipc: Enabled bearer , priority 0 [ 375.492638][T19395] syzkaller0: entered promiscuous mode [ 375.503876][T19395] syzkaller0: entered allmulticast mode [ 375.513582][T19395] tipc: Resetting bearer [ 375.520224][T19394] tipc: Resetting bearer [ 375.527621][T19394] tipc: Disabling bearer [ 375.890769][T19414] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 375.902453][T19414] IPv6: addrconf: prefix option has invalid lifetime [ 375.909747][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 375.916643][ C1] IPv6: addrconf: prefix option has invalid lifetime [ 376.095961][T19429] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 376.100480][T19431] loop8: detected capacity change from 0 to 512 [ 376.131436][T19434] syzkaller0: entered promiscuous mode [ 376.137056][T19434] syzkaller0: entered allmulticast mode [ 376.158460][T19431] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.5124: inode has both inline data and extents flags [ 376.196940][T19431] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 376.197114][T19431] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.5124: couldn't read orphan inode 15 (err -117) [ 376.206267][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 376.206288][ C0] EXT4-fs (loop8): initial error at time 1774219291: ext4_orphan_get:1391: inode 15 [ 376.206337][ C0] EXT4-fs (loop8): last error at time 1774219291: ext4_orphan_get:1391: inode 15 [ 376.297261][T19431] loop8: lost filesystem error report for type 5 error -117 [ 376.300677][T19451] netlink: 'syz.0.5129': attribute type 2 has an invalid length. [ 376.316970][T19431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.418364][T19431] loop8: detected capacity change from 512 to 0 [ 376.474091][T19470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.483913][T18598] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 376.509958][T19470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.519470][T19477] loop9: detected capacity change from 0 to 512 [ 376.574426][T16164] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:25: unable to read itable block [ 376.589672][T19477] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5136: inode has both inline data and extents flags [ 376.615595][T16164] buffer_io_error: 26 callbacks suppressed [ 376.615608][T16164] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 376.644428][T19477] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 376.644657][T19477] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5136: couldn't read orphan inode 15 (err -117) [ 376.653825][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 376.653843][ C1] EXT4-fs (loop9): initial error at time 1774219292: ext4_orphan_get:1391: inode 15 [ 376.653868][ C1] EXT4-fs (loop9): last error at time 1774219292: ext4_orphan_get:1391: inode 15 [ 376.655452][T16164] EXT4-fs (loop8): I/O error while writing superblock [ 376.697638][T19477] loop9: lost filesystem error report for type 5 error -117 [ 376.701949][T18598] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.704645][T19477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.726720][T18598] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 376.751950][T18598] EXT4-fs (loop8): I/O error while writing superblock [ 376.778548][T18912] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.787953][T18598] bridge0: port 3(syz_tun) entered disabled state [ 376.795827][T18598] syz_tun (unregistering): left allmulticast mode [ 376.802672][T18598] syz_tun (unregistering): left promiscuous mode [ 376.809388][T18598] bridge0: port 3(syz_tun) entered disabled state [ 376.847245][T19514] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5137'. [ 376.974627][T16146] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.035005][T16146] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.073426][T19546] syzkaller0: entered promiscuous mode [ 377.081080][T19546] syzkaller0: entered allmulticast mode [ 377.121227][T16146] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.215498][T16146] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.388445][T16146] bridge_slave_1: left allmulticast mode [ 377.421058][T16146] bridge_slave_1: left promiscuous mode [ 377.430794][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.475267][T16146] bridge_slave_0: left allmulticast mode [ 377.488202][T16146] bridge_slave_0: left promiscuous mode [ 377.501453][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.609850][T19633] loop7: detected capacity change from 0 to 2048 [ 377.620228][T16146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.630257][T16146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.640881][T16146] bond0 (unregistering): Released all slaves [ 377.678269][T19633] Alternate GPT is invalid, using primary GPT. [ 377.688424][T19633] loop7: p1 p2 p3 [ 377.692140][T19633] loop7: partition table partially beyond EOD, truncated [ 377.705912][T16146] tipc: Left network mode [ 377.720521][T19556] chnl_net:caif_netlink_parms(): no params data found [ 377.782032][T16146] hsr_slave_0: left promiscuous mode [ 377.810516][T19647] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5149'. [ 377.834151][T16146] hsr_slave_1: left promiscuous mode [ 377.860627][T16146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.868113][T16146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.887198][T16146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.900735][T16146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.937665][T16146] veth1_macvtap: left promiscuous mode [ 377.943338][T16146] veth0_macvtap: left promiscuous mode [ 377.948887][T16146] veth1_vlan: left promiscuous mode [ 377.954158][T16146] veth0_vlan: left promiscuous mode [ 377.983013][T19658] loop7: detected capacity change from 0 to 512 [ 378.010183][T19658] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.5150: inode has both inline data and extents flags [ 378.024719][T19658] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 378.024865][T19658] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.5150: couldn't read orphan inode 15 (err -117) [ 378.034004][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 378.034020][ C1] EXT4-fs (loop7): initial error at time 1774219293: ext4_orphan_get:1391: inode 15 [ 378.034059][ C1] EXT4-fs (loop7): last error at time 1774219293: ext4_orphan_get:1391: inode 15 [ 378.071177][T19658] loop7: lost filesystem error report for type 5 error -117 [ 378.071964][T19658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.110940][T18459] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.141805][T19668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.151895][T16146] team0 (unregistering): Port device team_slave_1 removed [ 378.152335][T19668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.171137][T16146] team0 (unregistering): Port device team_slave_0 removed [ 378.224969][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.232214][T19556] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.239495][T19556] bridge_slave_0: entered allmulticast mode [ 378.257349][T19556] bridge_slave_0: entered promiscuous mode [ 378.264210][T19556] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.271611][T19556] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.278776][T19556] bridge_slave_1: entered allmulticast mode [ 378.285318][T19556] bridge_slave_1: entered promiscuous mode [ 378.315922][T19556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.327313][T19556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.347562][T19556] team0: Port device team_slave_0 added [ 378.354142][T19556] team0: Port device team_slave_1 added [ 378.372676][T19556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.380044][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.406423][T19556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.424406][T19556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.432974][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.459768][T19556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.749480][T19556] hsr_slave_0: entered promiscuous mode [ 378.764340][T19556] hsr_slave_1: entered promiscuous mode [ 378.771241][T19556] debugfs: 'hsr0' already exists in 'hsr' [ 378.776976][T19556] Cannot create hsr debugfs directory [ 378.806520][T19691] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 378.876804][T19700] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5160'. [ 379.244502][T19719] tipc: Enabled bearer , priority 0 [ 379.270926][T19719] syzkaller0: entered promiscuous mode [ 379.292803][T19719] syzkaller0: entered allmulticast mode [ 379.317290][T19556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 379.357062][T19719] tipc: Resetting bearer [ 379.372812][T19556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.396359][T19718] tipc: Resetting bearer [ 379.410892][T19718] tipc: Disabling bearer [ 379.423001][T19556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.436730][T19556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.524482][T19556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.542591][T19556] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.566432][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.573625][ T8077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.584709][T19750] IPv6: addrconf: prefix option has invalid lifetime [ 379.594348][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.601410][ T8077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.703641][T19556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.777375][T19778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19778 comm=syz.7.5164 [ 379.823569][T19778] 9pnet_virtio: no channels available for device syz [ 379.946012][T19556] veth0_vlan: entered promiscuous mode [ 379.956926][T19556] veth1_vlan: entered promiscuous mode [ 379.981797][T19556] veth0_macvtap: entered promiscuous mode [ 379.992062][T19556] veth1_macvtap: entered promiscuous mode [ 380.012442][T19556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.029525][T19556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.042962][ T8077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.075327][ T8077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.124308][ T8077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.162447][ T8077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.861294][T19840] syzkaller0: entered promiscuous mode [ 380.868282][T19840] syzkaller0: entered allmulticast mode [ 381.982027][T19916] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 382.001946][T19916] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 382.068878][T19931] loop9: detected capacity change from 0 to 512 [ 382.088442][T19931] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5192: inode has both inline data and extents flags [ 382.144234][T19931] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 382.144389][T19931] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5192: couldn't read orphan inode 15 (err -117) [ 382.153603][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 382.153627][ C0] EXT4-fs (loop9): initial error at time 1774219297: ext4_orphan_get:1391: inode 15 [ 382.153665][ C0] EXT4-fs (loop9): last error at time 1774219297: ext4_orphan_get:1391: inode 15 [ 382.219397][T19931] loop9: lost filesystem error report for type 5 error -117 [ 382.219907][T19931] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.295326][T19959] syzkaller0: entered promiscuous mode [ 382.308264][T19959] syzkaller0: entered allmulticast mode [ 382.308608][T19931] loop9: detected capacity change from 512 to 0 [ 382.364657][T18912] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 382.403139][ T8010] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:12: unable to read itable block [ 382.425643][T19975] syzkaller0: entered promiscuous mode [ 382.431460][ T8010] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 382.440494][T19975] syzkaller0: entered allmulticast mode [ 382.448757][ T8010] EXT4-fs (loop9): I/O error while writing superblock [ 382.459874][T18912] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.474002][T18912] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 382.482487][T18912] EXT4-fs (loop9): I/O error while writing superblock [ 382.494501][T18912] bridge0: port 3(syz_tun) entered disabled state [ 382.513947][T18912] syz_tun (unregistering): left allmulticast mode [ 382.520617][T18912] syz_tun (unregistering): left promiscuous mode [ 382.549704][T18912] bridge0: port 3(syz_tun) entered disabled state [ 382.561151][T19989] bridge0: port 3(syz_tun) entered blocking state [ 382.567674][T19989] bridge0: port 3(syz_tun) entered disabled state [ 382.574933][T19989] syz_tun: entered allmulticast mode [ 382.584353][T19989] syz_tun: entered promiscuous mode [ 382.590079][T19989] bridge0: port 3(syz_tun) entered blocking state [ 382.596519][T19989] bridge0: port 3(syz_tun) entered forwarding state [ 382.654997][ T8010] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.711280][ T8010] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.771013][ T8010] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.834106][ T8010] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.923217][ T8010] bridge_slave_1: left allmulticast mode [ 382.935589][ T8010] bridge_slave_1: left promiscuous mode [ 382.948782][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.965919][ T8010] bridge_slave_0: left allmulticast mode [ 382.978274][ T8010] bridge_slave_0: left promiscuous mode [ 382.989519][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.062238][ T8010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.072121][ T8010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.081738][ T8010] bond0 (unregistering): Released all slaves [ 383.120078][ T8010] tipc: Left network mode [ 383.128826][ T8010] hsr_slave_0: left promiscuous mode [ 383.139969][ T8010] hsr_slave_1: left promiscuous mode [ 383.147186][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.154802][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.162592][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.171530][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.180749][ T8010] batman_adv: batadv0: Interface deactivated: dummy0 [ 383.187480][ T8010] batman_adv: batadv0: Removing interface: dummy0 [ 383.202179][ T8010] veth1_macvtap: left promiscuous mode [ 383.209266][ T8010] veth0_macvtap: left promiscuous mode [ 383.214940][ T8010] veth1_vlan: left promiscuous mode [ 383.220559][ T8010] veth0_vlan: left promiscuous mode [ 383.319910][ T8010] team0 (unregistering): Port device team_slave_1 removed [ 383.332780][ T8010] team0 (unregistering): Port device team_slave_0 removed [ 383.420170][T20016] chnl_net:caif_netlink_parms(): no params data found [ 383.486812][T20016] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.498250][T20016] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.505471][T20016] bridge_slave_0: entered allmulticast mode [ 383.512682][T20016] bridge_slave_0: entered promiscuous mode [ 383.519178][T20094] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5212'. [ 383.519844][T20016] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.535269][T20016] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.542510][T20016] bridge_slave_1: entered allmulticast mode [ 383.550131][T20016] bridge_slave_1: entered promiscuous mode [ 383.578485][T20093] syzkaller0: entered promiscuous mode [ 383.587401][T20093] syzkaller0: entered allmulticast mode [ 383.604110][T20016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.615084][T20016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.632667][T20096] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5213'. [ 383.644822][T20096] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5213'. [ 383.674076][T20105] tipc: Enabled bearer , priority 0 [ 383.684486][T20105] syzkaller0: entered promiscuous mode [ 383.690164][T20105] syzkaller0: entered allmulticast mode [ 383.715118][T20105] tipc: Resetting bearer [ 383.727310][T20016] team0: Port device team_slave_0 added [ 383.734563][T20104] tipc: Resetting bearer [ 383.742091][T20104] tipc: Disabling bearer [ 383.750585][T20016] team0: Port device team_slave_1 added [ 383.777553][T20016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.799630][T20016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.868051][T20016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.887233][T20016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.894516][T20016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.922515][T20016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.973619][T20149] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5226'. [ 383.976563][T20016] hsr_slave_0: entered promiscuous mode [ 383.989036][T20016] hsr_slave_1: entered promiscuous mode [ 383.994841][T20016] debugfs: 'hsr0' already exists in 'hsr' [ 384.000730][T20016] Cannot create hsr debugfs directory [ 384.078500][T20161] syzkaller0: entered promiscuous mode [ 384.084048][T20161] syzkaller0: entered allmulticast mode [ 384.091690][T20157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5228'. [ 384.101315][T20157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5228'. [ 384.217262][T20183] tipc: Enabled bearer , priority 0 [ 384.224383][T20183] syzkaller0: entered promiscuous mode [ 384.230090][T20183] syzkaller0: entered allmulticast mode [ 384.240635][T20183] tipc: Resetting bearer [ 384.247180][T20181] tipc: Resetting bearer [ 384.269341][T20181] tipc: Disabling bearer [ 384.276368][ T28] audit: type=1400 audit(1774219299.917:494): avc: denied { unmount } for pid=18459 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 384.468652][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5234'. [ 384.477535][T20210] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5234'. [ 384.607249][T20016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.630347][T20016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.650400][T20016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.678469][T20016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.790924][T20016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.825751][T20016] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.846346][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.853500][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.862922][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.869997][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.957606][T20016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.054089][T20016] veth0_vlan: entered promiscuous mode [ 385.064271][T20016] veth1_vlan: entered promiscuous mode [ 385.084866][T20016] veth0_macvtap: entered promiscuous mode [ 385.094023][T20016] veth1_macvtap: entered promiscuous mode [ 385.098405][T20280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5237'. [ 385.106380][T20016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.127844][T20016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.226216][ T8010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.245403][ T8010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.735109][T20299] syzkaller0: entered promiscuous mode [ 385.744593][T20299] syzkaller0: entered allmulticast mode [ 385.752423][ T8010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.785256][ T8010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.903935][T20319] syzkaller0: entered promiscuous mode [ 385.909986][T20319] syzkaller0: entered allmulticast mode [ 385.920406][T20341] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5248'. [ 385.967492][T20337] tipc: Enabled bearer , priority 0 [ 385.999506][T20337] syzkaller0: entered promiscuous mode [ 386.013401][T20337] syzkaller0: entered allmulticast mode [ 386.037652][T20337] tipc: Resetting bearer [ 386.058656][T20361] loop3: detected capacity change from 0 to 512 [ 386.068012][T20353] syzkaller0: entered promiscuous mode [ 386.087340][T20353] syzkaller0: entered allmulticast mode [ 386.094271][T20361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.121557][T20361] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.122749][T20336] tipc: Resetting bearer [ 386.148447][ T28] audit: type=1400 audit(1774219301.797:495): avc: denied { setattr } for pid=20358 comm="syz.3.5254" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 386.186613][T20336] tipc: Disabling bearer [ 386.194135][T19556] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.208747][T20371] syzkaller0: entered promiscuous mode [ 386.214449][T20371] syzkaller0: entered allmulticast mode [ 386.263514][T20387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.296657][T20387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.481667][T20411] syzkaller0: entered promiscuous mode [ 386.495404][T20411] syzkaller0: entered allmulticast mode [ 386.889975][T20437] syzkaller0: entered promiscuous mode [ 386.903120][T20437] syzkaller0: entered allmulticast mode [ 386.939327][T20445] syzkaller0: entered promiscuous mode [ 386.944840][T20445] syzkaller0: entered allmulticast mode [ 387.403491][T20492] syzkaller0: entered promiscuous mode [ 387.430306][T20492] syzkaller0: entered allmulticast mode [ 387.794111][T20535] syzkaller0: entered promiscuous mode [ 387.802177][T20535] syzkaller0: entered allmulticast mode [ 387.945364][T20547] syzkaller0: entered promiscuous mode [ 387.952898][T20547] syzkaller0: entered allmulticast mode [ 388.163970][T20573] tipc: Started in network mode [ 388.168967][T20573] tipc: Node identity 36378a5c9ae4, cluster identity 4711 [ 388.184364][T20573] tipc: Enabled bearer , priority 0 [ 388.204881][T20573] syzkaller0: entered promiscuous mode [ 388.213928][T20579] IPv6: addrconf: prefix option has invalid lifetime [ 388.223772][T20573] syzkaller0: entered allmulticast mode [ 388.252017][T20573] tipc: Resetting bearer [ 388.262327][T20571] tipc: Resetting bearer [ 388.284911][T20571] tipc: Disabling bearer [ 388.366896][T20601] xt_recent: Unsupported userspace flags (000000de) [ 388.378535][T20601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.455058][T20605] syzkaller0: entered promiscuous mode [ 388.461246][T20605] syzkaller0: entered allmulticast mode [ 388.587479][T20610] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 388.697314][T20622] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 388.708993][T20622] IPv6: addrconf: prefix option has invalid lifetime [ 388.715962][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 388.722929][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 388.896043][T20632] binfmt_misc: Unknown parameter 'trans' [ 389.128629][T20638] __nla_validate_parse: 6 callbacks suppressed [ 389.128979][T20638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5313'. [ 389.241328][T20647] syzkaller0: entered promiscuous mode [ 389.246874][T20647] syzkaller0: entered allmulticast mode [ 389.300008][T20656] ================================================================== [ 389.308105][T20656] BUG: KCSAN: data-race in bdev_statx / queue_limits_commit_update [ 389.315993][T20656] [ 389.318306][T20656] read to 0xffff888101dde2b8 of 4 bytes by task 16194 on cpu 0: [ 389.325926][T20656] bdev_statx+0x295/0x2d0 [ 389.330252][T20656] vfs_getattr_nosec+0x1b6/0x1e0 [ 389.335179][T20656] __se_sys_newfstat+0x96/0x460 [ 389.340024][T20656] __x64_sys_newfstat+0x31/0x40 [ 389.344886][T20656] x64_sys_call+0x2773/0x3020 [ 389.349564][T20656] do_syscall_64+0x12c/0x370 [ 389.354149][T20656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.360037][T20656] [ 389.362354][T20656] write to 0xffff888101dde278 of 192 bytes by task 20656 on cpu 1: [ 389.370315][T20656] queue_limits_commit_update+0x4b/0x160 [ 389.375944][T20656] loop_configure+0x78c/0x9c0 [ 389.380622][T20656] lo_ioctl+0x1e1/0x13a0 [ 389.384873][T20656] blkdev_ioctl+0x387/0x460 [ 389.389378][T20656] __se_sys_ioctl+0xce/0x140 [ 389.393966][T20656] __x64_sys_ioctl+0x43/0x50 [ 389.398545][T20656] x64_sys_call+0x1563/0x3020 [ 389.402650][T20660] syzkaller0: entered promiscuous mode [ 389.403219][T20656] do_syscall_64+0x12c/0x370 [ 389.409182][T20660] syzkaller0: entered allmulticast mode [ 389.413222][T20656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.424624][T20656] [ 389.426941][T20656] Reported by Kernel Concurrency Sanitizer on: [ 389.433100][T20656] CPU: 1 UID: 0 PID: 20656 Comm: syz.2.5321 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 389.442465][T20656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.452509][T20656] ================================================================== [ 389.461124][T20656] loop2: detected capacity change from 0 to 512 [ 389.622518][T20630] bridge0: port 3(syz_tun) entered disabled state [ 389.640139][T20630] syz_tun (unregistering): left allmulticast mode [ 389.646558][T20630] syz_tun (unregistering): left promiscuous mode [ 389.678459][T20630] bridge0: port 3(syz_tun) entered disabled state [ 389.691785][T20659] bridge0: port 3(syz_tun) entered disabled state [ 389.709556][T20659] syz_tun (unregistering): left allmulticast mode [ 389.715973][T20659] syz_tun (unregistering): left promiscuous mode [ 389.738200][T20659] bridge0: port 3(syz_tun) entered disabled state [ 389.761502][ T8077] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.820973][ T8077] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.862057][T11295] syz_tun (unregistering): left allmulticast mode [ 389.869001][T11295] syz_tun (unregistering): left promiscuous mode [ 389.875355][T11295] bridge0: port 3(syz_tun) entered disabled state [ 389.930684][ T8077] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.022342][ T8077] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.111507][T20662] syz_tun (unregistering): left allmulticast mode [ 390.117914][T20662] syz_tun (unregistering): left promiscuous mode [ 390.124451][T20662] bridge0: port 3(syz_tun) entered disabled state [ 390.139051][ T8077] bridge_slave_1: left allmulticast mode [ 390.144695][ T8077] bridge_slave_1: left promiscuous mode [ 390.150599][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.158231][ T8077] bridge_slave_0: left allmulticast mode [ 390.163894][ T8077] bridge_slave_0: left promiscuous mode [ 390.169503][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.239970][ T8077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.250261][ T8077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.259516][ T8077] bond0 (unregistering): Released all slaves [ 390.320223][ T8077] tipc: Left network mode [ 390.332191][ T8077] hsr_slave_0: left promiscuous mode [ 390.337926][ T8077] hsr_slave_1: left promiscuous mode [ 390.343697][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.358264][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.365714][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.373926][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.382028][ T8077] batman_adv: batadv0: Interface deactivated: dummy0 [ 390.397339][ T8077] batman_adv: batadv0: Removing interface: dummy0 [ 390.407239][ T8077] veth1_macvtap: left promiscuous mode [ 390.412739][ T8077] veth0_macvtap: left promiscuous mode [ 390.419369][ T8077] veth1_vlan: left promiscuous mode [ 390.424576][ T8077] veth0_vlan: left promiscuous mode [ 390.482119][ T8077] team0 (unregistering): Port device team_slave_1 removed [ 390.492979][ T8077] team0 (unregistering): Port device team_slave_0 removed [ 390.721295][ T8077] IPVS: stop unused estimator thread 0... [ 390.812163][T13517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.860800][T13517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.930871][T13517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.980322][T13517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.065746][T13517] bridge_slave_1: left allmulticast mode [ 391.071429][T13517] bridge_slave_1: left promiscuous mode [ 391.077058][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.084796][T13517] bridge_slave_0: left allmulticast mode [ 391.090554][T13517] bridge_slave_0: left promiscuous mode [ 391.096277][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.151424][T13517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.161140][T13517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.170538][T13517] bond0 (unregistering): Released all slaves [ 391.211686][T13517] hsr_slave_0: left promiscuous mode [ 391.217372][T13517] hsr_slave_1: left promiscuous mode [ 391.223384][T13517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.230784][T13517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.238386][T13517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.247304][T13517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.260310][T13517] veth1_macvtap: left promiscuous mode [ 391.265782][T13517] veth0_macvtap: left promiscuous mode [ 391.271369][T13517] veth1_vlan: left promiscuous mode [ 391.276760][T13517] veth0_vlan: left promiscuous mode [ 391.337394][T13517] team0 (unregistering): Port device team_slave_1 removed [ 391.346935][T13517] team0 (unregistering): Port device team_slave_0 removed