last executing test programs: 4.935158018s ago: executing program 0 (id=1478): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x0) socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x700000080010000, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.440983158s ago: executing program 0 (id=1481): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) 3.19732704s ago: executing program 0 (id=1487): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.002837069s ago: executing program 0 (id=1489): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x8000, 0x4) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) 2.092413462s ago: executing program 0 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44040) 1.992184936s ago: executing program 2 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 1.981868897s ago: executing program 1 (id=1511): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae4, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x6}}]}}]}, 0x48}}, 0x8004) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.90842097s ago: executing program 0 (id=1512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x60, &(0x7f0000000540)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2a, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x19}]}}}}}}, 0x0) 1.725428859s ago: executing program 2 (id=1515): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.516312139s ago: executing program 1 (id=1517): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x8000, 0x4) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) 1.427838993s ago: executing program 3 (id=1518): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0xb9666000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x0, [0x2, 0x1, 0x7, 0x80, 0x100, 0x3], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) 1.384713505s ago: executing program 1 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) 1.197226934s ago: executing program 4 (id=1521): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) 1.168575865s ago: executing program 1 (id=1522): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000007}, 0xc000800) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) recvmsg(r3, &(0x7f0000002c00)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/250, 0xfa}, {&(0x7f0000001940)=""/96, 0x60}, {&(0x7f00000019c0)=""/39, 0x27}, {&(0x7f0000001a00)=""/244, 0xf4}, {&(0x7f0000001b00)=""/68, 0x44}], 0x7, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x200, 0x0, @loopback, 0x2}, {0xa, 0xfffc, 0x0, @mcast2}, 0x0, {[0x1, 0x34a, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x42]}}, 0x5c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, 0x0, &(0x7f0000000180)) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c00028005000100"], 0x74}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES16], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018400000fdffffff000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70001040000850000009b0000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0xffffe000}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) 1.148408256s ago: executing program 4 (id=1523): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xa8, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040044}, 0x4040000) 1.041233951s ago: executing program 4 (id=1524): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000002740)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg$alg(r3, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x10000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000500", @ANYRES32, @ANYBLOB="3000128009000100766c616e00000000200002800600013bd98200020000000d0002000b0000001d0000000600050088"], 0x58}}, 0x0) 849.11958ms ago: executing program 4 (id=1525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 795.855162ms ago: executing program 2 (id=1526): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000b0a0000000000000000000000080004", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x20044804) 698.864397ms ago: executing program 4 (id=1527): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae4, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x6}}]}}]}, 0x48}}, 0x8004) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 619.17385ms ago: executing program 3 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffff11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a0}, 0x200084c4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 618.311961ms ago: executing program 2 (id=1529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)="05", 0x1, 0x4088, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x3, 0x6, @remote}, 0x14) 365.289803ms ago: executing program 3 (id=1530): syz_emit_ethernet(0x95, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x5f, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x6, 0x0, 0x0, [{0x3, 0x9, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5"}]}}}}}}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008"], 0x70}}, 0x0) 340.099754ms ago: executing program 3 (id=1531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000025c0)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 332.339704ms ago: executing program 2 (id=1532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) 225.223349ms ago: executing program 1 (id=1533): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44000) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) 185.385541ms ago: executing program 3 (id=1534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0xa8, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4040044}, 0x4040000) 142.680893ms ago: executing program 4 (id=1535): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 81.337135ms ago: executing program 1 (id=1536): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 65.281297ms ago: executing program 3 (id=1537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0xa7, 0x1, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xffc, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=1538): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0xfffffbeb) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e00080000"], 0x1c) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000020a000001162e04d200080000"], 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) kernel console output (not intermixed with test programs): n_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.210678][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.232431][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.241984][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.251675][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.261478][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.274583][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.284475][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.294189][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.303285][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.316521][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.332310][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.353416][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.361421][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.372368][ T1456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.383175][ T1456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.391932][ T1456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.405434][ T1456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.416461][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.425393][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.434747][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.443728][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.500354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.505777][ T1456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.522314][ T1456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.530418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.539465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.581223][ T4187] device veth0_vlan entered promiscuous mode [ 70.592632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.600761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.728179][ T4187] device veth1_vlan entered promiscuous mode [ 70.773150][ T4265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 70.803335][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.812068][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.862247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.893442][ T1456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.901402][ T1456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.992519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.030991][ T4187] device veth0_macvtap entered promiscuous mode [ 71.037554][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.053693][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.065279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.085447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.096869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.108222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.121394][ T4271] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 71.130931][ T4187] device veth1_macvtap entered promiscuous mode [ 71.164614][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.227045][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.232545][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.250693][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.294829][ T4274] ceph: No mds server is up or the cluster is laggy [ 71.333539][ T4228] libceph: connect (1)[c::]:6789 error -101 [ 71.405118][ T4228] libceph: mon0 (1)[c::]:6789 connect error [ 71.543760][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.649578][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.751090][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.839821][ T21] libceph: connect (1)[c::]:6789 error -101 [ 71.859411][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 71.868961][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.978802][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.091508][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.103076][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 72.173466][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 72.216590][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 72.237913][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.279209][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 72.315256][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 72.324804][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.425212][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.434280][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.449037][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.457549][ T4289] Zero length message leads to an empty skb [ 72.468070][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 72.484872][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.488662][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 72.508196][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.579870][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.591539][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.605459][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.638420][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.689604][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.720658][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.745304][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.756705][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.770831][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.808545][ T4291] device syzkaller0 entered promiscuous mode [ 72.818113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.827104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.840936][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.857313][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.868228][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.880901][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.276317][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.298858][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.318797][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.390158][ T4310] loop2: detected capacity change from 0 to 64 [ 74.156311][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.198776][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.209074][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.357265][ T4317] loop3: detected capacity change from 0 to 64 [ 74.719670][ T4318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 75.611522][ T4348] netlink: 'syz.1.22': attribute type 2 has an invalid length. [ 75.626938][ T4348] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 75.662111][ T4348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.22'. [ 75.870084][ T4360] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 76.338262][ T4383] loop1: detected capacity change from 0 to 64 [ 77.339416][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 77.626577][ T4401] xt_CT: No such helper "snmp" [ 77.676089][ T4406] xt_CT: No such helper "snmp" [ 77.738577][ T4415] tipc: Failed to remove unknown binding: 66,0,0/0:252235431/252235433 [ 77.747669][ T4415] tipc: Failed to remove unknown binding: 66,0,0/0:252235431/252235432 [ 77.812146][ T4421] tipc: Failed to remove unknown binding: 66,0,0/0:252235431/252235433 [ 77.831247][ T4421] tipc: Failed to remove unknown binding: 66,0,0/0:252235431/252235432 [ 77.912230][ T4425] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 78.867920][ T4471] loop0: detected capacity change from 0 to 512 [ 78.895211][ T4474] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 78.987172][ T4471] EXT4-fs (loop0): Ignoring removed nobh option [ 79.204663][ T4471] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 79.330993][ T4471] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.53: attempt to clear invalid blocks 1 len 1 [ 79.364806][ T4471] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 79.411298][ T4471] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.53: invalid indirect mapped block 1819239214 (level 0) [ 79.474244][ T4471] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.53: invalid indirect mapped block 1819239214 (level 1) [ 79.560972][ T4471] EXT4-fs (loop0): 1 truncate cleaned up [ 79.577123][ T4471] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 80.241242][ T4513] tipc: Failed to remove unknown binding: 66,0,0/0:2445385444/2445385446 [ 80.302895][ T4513] tipc: Failed to remove unknown binding: 66,0,0/0:2445385444/2445385445 [ 80.396533][ T4515] tipc: Failed to remove unknown binding: 66,0,0/0:2445385444/2445385446 [ 80.413507][ T4515] tipc: Failed to remove unknown binding: 66,0,0/0:2445385444/2445385445 [ 80.746070][ T4525] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 80.882954][ T4532] netlink: 72 bytes leftover after parsing attributes in process `syz.0.76'. [ 80.923792][ T4530] netlink: 104 bytes leftover after parsing attributes in process `syz.3.75'. [ 81.064790][ T4537] netlink: 'syz.3.77': attribute type 5 has an invalid length. [ 81.113710][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.400736][ T4548] loop4: detected capacity change from 0 to 64 [ 82.307606][ T4558] device syzkaller0 entered promiscuous mode [ 82.322487][ T4563] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 82.330703][ T4563] netlink: 'syz.2.92': attribute type 2 has an invalid length. [ 82.447975][ T4565] tipc: Failed to remove unknown binding: 66,0,0/0:1254603937/1254603939 [ 82.507508][ T4565] tipc: Failed to remove unknown binding: 66,0,0/0:1254603937/1254603938 [ 82.880384][ T4581] loop0: detected capacity change from 0 to 512 [ 82.956109][ T4581] EXT4-fs (loop0): Ignoring removed nobh option [ 83.028757][ T4581] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 83.044590][ T4581] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.85: attempt to clear invalid blocks 1 len 1 [ 83.059038][ T4581] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 83.073595][ T4581] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.85: invalid indirect mapped block 1819239214 (level 0) [ 83.088328][ T4581] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.85: invalid indirect mapped block 1819239214 (level 1) [ 83.106029][ T4581] EXT4-fs (loop0): 1 truncate cleaned up [ 83.111724][ T4581] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 83.366766][ T4587] xt_CT: No such helper "snmp" [ 83.510672][ T4591] xt_CT: No such helper "snmp" [ 83.541179][ T4601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'. [ 83.639569][ T4605] tipc: Failed to remove unknown binding: 66,0,0/0:3064761212/3064761214 [ 83.687135][ T4605] tipc: Failed to remove unknown binding: 66,0,0/0:3064761212/3064761213 [ 83.716101][ T4607] device syzkaller0 entered promiscuous mode [ 84.196692][ T4630] ceph: No mds server is up or the cluster is laggy [ 84.205707][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 84.236255][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 84.800495][ T4625] xt_CT: No such helper "snmp" [ 85.234095][ T4638] device syzkaller0 entered promiscuous mode [ 85.257532][ T4638] tipc: Started in network mode [ 85.274794][ T4638] tipc: Node identity a648f100c18, cluster identity 4711 [ 85.300864][ T4638] tipc: Enabled bearer , priority 0 [ 85.340015][ T4638] tipc: Resetting bearer [ 85.397972][ T4637] tipc: Resetting bearer [ 85.414737][ T4649] tipc: Failed to remove unknown binding: 66,0,0/0:2846132079/2846132081 [ 85.433066][ T4649] tipc: Failed to remove unknown binding: 66,0,0/0:2846132079/2846132080 [ 85.484626][ T4637] tipc: Disabling bearer [ 85.560830][ T4657] IPVS: Unknown mcast interface: nr0 [ 85.607960][ T4656] device syzkaller0 entered promiscuous mode [ 85.699823][ T4660] x_tables: unsorted underflow at hook 2 [ 85.781281][ T4664] Illegal XDP return value 4294967294, expect packet loss! [ 85.801025][ T4665] loop3: detected capacity change from 0 to 512 [ 85.849724][ T4665] EXT4-fs (loop3): Ignoring removed nobh option [ 85.915569][ T4665] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 85.925543][ T4665] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.112: attempt to clear invalid blocks 1 len 1 [ 85.941946][ T4665] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 85.957446][ T4665] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.112: invalid indirect mapped block 1819239214 (level 0) [ 85.976467][ T4665] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.112: invalid indirect mapped block 1819239214 (level 1) [ 85.992593][ T4665] EXT4-fs (loop3): 1 truncate cleaned up [ 85.998346][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 86.302233][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 86.424243][ T4694] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 86.465781][ T4694] netlink: 'syz.0.141': attribute type 2 has an invalid length. [ 86.544613][ T4698] device syzkaller0 entered promiscuous mode [ 86.594115][ T1108] cfg80211: failed to load regulatory.db [ 86.783003][ T4709] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 87.526190][ T4738] device syzkaller0 entered promiscuous mode [ 88.145854][ T4759] netlink: 'syz.2.169': attribute type 4 has an invalid length. [ 88.191543][ T4759] netlink: 17 bytes leftover after parsing attributes in process `syz.2.169'. [ 88.370972][ T4227] libceph: connect (1)[c::]:6789 error -101 [ 88.392257][ T4227] libceph: mon0 (1)[c::]:6789 connect error [ 88.491324][ T4765] ceph: No mds server is up or the cluster is laggy [ 88.507554][ T4764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.171'. [ 88.555508][ T4227] libceph: connect (1)[c::]:6789 error -101 [ 88.632014][ T4227] libceph: mon0 (1)[c::]:6789 connect error [ 89.055779][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 89.090611][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 89.645461][ T4779] device syzkaller0 entered promiscuous mode [ 89.683109][ T4787] tipc: Failed to remove unknown binding: 66,0,0/0:2817319782/2817319784 [ 89.703187][ T4778] xt_CT: No such helper "snmp" [ 89.732841][ T4787] tipc: Failed to remove unknown binding: 66,0,0/0:2817319782/2817319783 [ 89.819505][ T4790] tipc: Failed to remove unknown binding: 66,0,0/0:2817319782/2817319784 [ 89.840602][ T4790] tipc: Failed to remove unknown binding: 66,0,0/0:2817319782/2817319783 [ 90.557611][ T4829] ceph: No mds server is up or the cluster is laggy [ 90.636913][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 90.695041][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 91.376610][ T4842] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.467826][ T4841] xt_CT: No such helper "snmp" [ 91.498255][ T4846] device syzkaller0 entered promiscuous mode [ 91.806683][ T4859] device syzkaller0 entered promiscuous mode [ 91.862686][ T4859] tipc: Enabled bearer , priority 0 [ 91.936240][ T4857] tipc: Resetting bearer [ 92.006731][ T4857] tipc: Disabling bearer [ 92.266093][ T4885] xt_CT: No such helper "snmp" [ 92.460919][ T4898] device syzkaller0 entered promiscuous mode [ 92.775518][ T4919] netlink: 67 bytes leftover after parsing attributes in process `syz.1.218'. [ 92.844315][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.886567][ T4919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.009386][ T4925] loop3: detected capacity change from 0 to 64 [ 93.900624][ T4929] xt_CT: No such helper "snmp" [ 94.020269][ T4936] device syzkaller0 entered promiscuous mode [ 94.078545][ T4936] tipc: Started in network mode [ 94.089540][ T4936] tipc: Node identity d22094d8bc56, cluster identity 4711 [ 94.108885][ T4936] tipc: Enabled bearer , priority 0 [ 94.151026][ T4940] tipc: Resetting bearer [ 94.166425][ T4939] loop4: detected capacity change from 0 to 512 [ 94.192149][ T4935] tipc: Resetting bearer [ 94.251501][ T4935] tipc: Disabling bearer [ 94.276566][ T4939] EXT4-fs (loop4): Ignoring removed nobh option [ 94.343036][ T4939] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 94.364849][ T4939] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.216: attempt to clear invalid blocks 1 len 1 [ 94.384964][ T4939] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 94.404625][ T4939] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.216: invalid indirect mapped block 1819239214 (level 0) [ 94.419343][ T1108] Bluetooth: hci4: command 0x0405 tx timeout [ 94.522858][ T4939] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.216: invalid indirect mapped block 1819239214 (level 1) [ 94.584150][ T4939] EXT4-fs (loop4): 1 truncate cleaned up [ 94.617786][ T4950] xt_CT: No such helper "snmp" [ 94.627429][ T4939] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 95.044288][ T4964] device syzkaller0 entered promiscuous mode [ 95.164008][ T4968] loop0: detected capacity change from 0 to 64 [ 96.200194][ T4975] device syzkaller0 entered promiscuous mode [ 96.229912][ T4975] tipc: Started in network mode [ 96.248583][ T4975] tipc: Node identity 9a8fd9a18ae9, cluster identity 4711 [ 96.300558][ T4975] tipc: Enabled bearer , priority 0 [ 96.309008][ T4977] xt_CT: No such helper "snmp" [ 96.364359][ T4975] tipc: Resetting bearer [ 96.416543][ T4974] tipc: Resetting bearer [ 96.433358][ T4985] tipc: Failed to remove unknown binding: 66,0,0/0:1540158298/1540158300 [ 96.462061][ T4985] tipc: Failed to remove unknown binding: 66,0,0/0:1540158298/1540158299 [ 96.481957][ T4974] tipc: Disabling bearer [ 96.495705][ T4989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'. [ 96.557256][ T4990] tipc: Failed to remove unknown binding: 66,0,0/0:1540158298/1540158300 [ 96.578210][ T4990] tipc: Failed to remove unknown binding: 66,0,0/0:1540158298/1540158299 [ 97.265405][ T5007] xt_CT: No such helper "snmp" [ 97.425206][ T5017] device syzkaller0 entered promiscuous mode [ 97.455874][ T5017] tipc: Enabled bearer , priority 0 [ 97.510433][ T5017] tipc: Resetting bearer [ 97.551522][ T5020] tipc: MTU too low for tipc bearer [ 97.576839][ T5015] tipc: Resetting bearer [ 97.643696][ T5015] tipc: Disabling bearer [ 97.896781][ T5037] tipc: Failed to remove unknown binding: 66,0,0/0:4003496780/4003496782 [ 97.957846][ T5037] tipc: Failed to remove unknown binding: 66,0,0/0:4003496780/4003496781 [ 98.080766][ T5040] ceph: No mds server is up or the cluster is laggy [ 98.226422][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 98.251005][ T5037] tipc: Failed to remove unknown binding: 66,0,0/0:4003496780/4003496782 [ 98.270406][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 98.499027][ T5037] tipc: Failed to remove unknown binding: 66,0,0/0:4003496780/4003496781 [ 98.822467][ T5046] xt_CT: No such helper "snmp" [ 99.081833][ T5065] netlink: 44 bytes leftover after parsing attributes in process `syz.0.272'. [ 99.112208][ T5067] device syzkaller0 entered promiscuous mode [ 99.323934][ T5067] tipc: Enabled bearer , priority 0 [ 99.419372][ T5077] ceph: No mds server is up or the cluster is laggy [ 99.476830][ T1108] libceph: connect (1)[c::]:6789 error -101 [ 99.602215][ T1108] libceph: mon0 (1)[c::]:6789 connect error [ 100.177901][ T5082] tipc: Resetting bearer [ 100.255888][ T5066] tipc: Resetting bearer [ 100.295399][ T5066] tipc: Disabling bearer [ 100.360688][ T5084] tipc: Failed to remove unknown binding: 66,0,0/0:3884142863/3884142865 [ 100.423962][ T5084] tipc: Failed to remove unknown binding: 66,0,0/0:3884142863/3884142864 [ 100.467575][ T5084] tipc: Failed to remove unknown binding: 66,0,0/0:3884142863/3884142865 [ 100.516142][ T5084] tipc: Failed to remove unknown binding: 66,0,0/0:3884142863/3884142864 [ 100.601675][ T5099] xt_CT: No such helper "snmp" [ 101.126400][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 101.147345][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 101.264490][ T5118] ceph: No mds server is up or the cluster is laggy [ 101.479754][ T5122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 101.833506][ T5110] device syzkaller0 entered promiscuous mode [ 102.047507][ T5128] netlink: 452 bytes leftover after parsing attributes in process `syz.4.294'. [ 102.240608][ T5141] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.355482][ T5132] xt_CT: No such helper "snmp" [ 102.494717][ T5147] sch_tbf: peakrate 3 is lower than or equals to rate 4096 ! [ 102.583941][ T5150] tipc: Failed to remove unknown binding: 66,0,0/0:2296392189/2296392191 [ 102.753270][ T5156] ceph: No mds server is up or the cluster is laggy [ 102.768117][ T4227] libceph: connect (1)[c::]:6789 error -101 [ 102.855413][ T4227] libceph: mon0 (1)[c::]:6789 connect error [ 102.893662][ T5150] tipc: Failed to remove unknown binding: 66,0,0/0:2296392189/2296392190 [ 103.245639][ T5150] tipc: Failed to remove unknown binding: 66,0,0/0:2296392189/2296392191 [ 103.491340][ T5150] tipc: Failed to remove unknown binding: 66,0,0/0:2296392189/2296392190 [ 103.547026][ T5165] device syzkaller0 entered promiscuous mode [ 103.557085][ T5165] tipc: Started in network mode [ 103.562006][ T5165] tipc: Node identity d2c20c97560f, cluster identity 4711 [ 103.569582][ T5165] tipc: Enabled bearer , priority 0 [ 103.590260][ T5165] tipc: Resetting bearer [ 103.603464][ T5164] tipc: Resetting bearer [ 103.641321][ T5164] tipc: Disabling bearer [ 103.702861][ T5169] netlink: 452 bytes leftover after parsing attributes in process `syz.1.308'. [ 103.891633][ T5174] device syzkaller0 entered promiscuous mode [ 104.009226][ T5177] xt_CT: No such helper "snmp" [ 104.395708][ T1110] libceph: connect (1)[c::]:6789 error -101 [ 104.434635][ T1110] libceph: mon0 (1)[c::]:6789 connect error [ 104.550378][ T5197] ceph: No mds server is up or the cluster is laggy [ 104.573569][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 104.675467][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 105.161197][ T5203] device syzkaller0 entered promiscuous mode [ 105.177743][ T5210] tipc: Failed to remove unknown binding: 66,0,0/0:1503505064/1503505066 [ 105.186437][ T5210] tipc: Failed to remove unknown binding: 66,0,0/0:1503505064/1503505065 [ 105.201749][ T5203] 0: reclassify loop, rule prio 0, protocol 700 [ 105.228053][ T5209] netlink: 452 bytes leftover after parsing attributes in process `syz.3.321'. [ 105.253472][ T5211] tipc: Failed to remove unknown binding: 66,0,0/0:1503505064/1503505066 [ 105.261982][ T5211] tipc: Failed to remove unknown binding: 66,0,0/0:1503505064/1503505065 [ 105.308035][ T5213] device syzkaller0 entered promiscuous mode [ 105.321990][ T5213] tipc: Enabled bearer , priority 0 [ 105.340724][ T5213] tipc: Resetting bearer [ 105.350821][ T5212] tipc: Resetting bearer [ 105.397680][ T5212] tipc: Disabling bearer [ 105.548656][ T5225] ip_tables: iptables: counters copy to user failed while replacing table [ 105.561180][ T5221] xt_CT: No such helper "snmp" [ 105.632202][ T5227] device syzkaller0 entered promiscuous mode [ 105.812858][ T5239] netlink: 452 bytes leftover after parsing attributes in process `syz.0.334'. [ 105.925427][ T5236] device syzkaller0 entered promiscuous mode [ 106.099990][ T5245] netlink: 224 bytes leftover after parsing attributes in process `syz.1.336'. [ 106.267129][ T5253] device syzkaller0 entered promiscuous mode [ 106.307848][ T5255] device syzkaller0 entered promiscuous mode [ 106.361251][ T5255] tipc: Enabled bearer , priority 0 [ 106.383253][ T5255] tipc: Resetting bearer [ 106.395072][ T5254] tipc: Resetting bearer [ 106.414599][ T5254] tipc: Disabling bearer [ 106.614971][ T5265] xt_CT: No such helper "snmp" [ 106.744054][ T5273] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.753942][ T5273] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.762886][ T5273] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.771614][ T5273] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.834272][ T5273] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.843395][ T5273] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.852320][ T5273] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.861945][ T5273] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.910720][ T5281] tipc: Failed to remove unknown binding: 66,0,0/0:1262581343/1262581345 [ 106.956656][ T5281] tipc: Failed to remove unknown binding: 66,0,0/0:1262581343/1262581344 [ 106.983933][ T5278] netlink: 452 bytes leftover after parsing attributes in process `syz.1.346'. [ 107.002105][ T5283] device syzkaller0 entered promiscuous mode [ 107.028884][ T5285] tipc: Failed to remove unknown binding: 66,0,0/0:1262581343/1262581345 [ 107.048344][ T5273] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.057318][ T5273] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.066843][ T5273] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.075850][ T5273] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.092262][ T5285] tipc: Failed to remove unknown binding: 66,0,0/0:1262581343/1262581344 [ 107.106180][ T5273] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.115286][ T5273] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.124242][ T5273] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.133271][ T5273] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.253257][ T5289] device syzkaller0 entered promiscuous mode [ 107.270358][ T5273] syz.4.344 (5273) used greatest stack depth: 20880 bytes left [ 107.407001][ T5297] xt_CT: No such helper "snmp" [ 107.588425][ T5302] xt_CT: No such helper "snmp" [ 107.945193][ T5319] netlink: 452 bytes leftover after parsing attributes in process `syz.2.361'. [ 108.044957][ T5324] device syzkaller0 entered promiscuous mode [ 108.148062][ T5325] loop0: detected capacity change from 0 to 512 [ 108.206768][ T5325] EXT4-fs (loop0): Ignoring removed nobh option [ 108.249363][ T5325] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 108.330891][ T5325] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.354: attempt to clear invalid blocks 1 len 1 [ 108.364275][ T5325] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 108.463028][ T5325] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.354: invalid indirect mapped block 1819239214 (level 0) [ 108.522437][ T5337] tc action pedit offset must be on 32 bit boundaries [ 108.551431][ T5325] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.354: invalid indirect mapped block 1819239214 (level 1) [ 108.614025][ T5325] EXT4-fs (loop0): 1 truncate cleaned up [ 108.650333][ T5325] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 108.973782][ T5359] tipc: Failed to remove unknown binding: 66,0,0/0:1339203235/1339203237 [ 109.016755][ T5359] tipc: Failed to remove unknown binding: 66,0,0/0:1339203235/1339203236 [ 109.039547][ T5354] xt_CT: No such helper "snmp" [ 109.108286][ T5362] tipc: Failed to remove unknown binding: 66,0,0/0:1339203235/1339203237 [ 109.130253][ T5362] tipc: Failed to remove unknown binding: 66,0,0/0:1339203235/1339203236 [ 109.733983][ T5387] netlink: 452 bytes leftover after parsing attributes in process `syz.3.375'. [ 109.803674][ T5389] device syzkaller0 entered promiscuous mode [ 110.188241][ T5405] xt_CT: No such helper "snmp" [ 110.441072][ T5416] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.384'. [ 110.554115][ T5418] device syzkaller0 entered promiscuous mode [ 110.841381][ T5430] xt_CT: No such helper "snmp" [ 110.887969][ T5438] device syzkaller0 entered promiscuous mode [ 110.907876][ T5440] xt_CT: No such helper "snmp" [ 111.055229][ T5447] tipc: Enabling of bearer rejected, media not registered [ 111.151707][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 111.346869][ T5457] device syzkaller0 entered promiscuous mode [ 111.569328][ T5471] xt_CT: No such helper "snmp" [ 111.636125][ T5478] device syzkaller0 entered promiscuous mode [ 111.735974][ T5474] xt_CT: No such helper "snmp" [ 112.243076][ T5507] device syzkaller0 entered promiscuous mode [ 112.257999][ T5511] netlink: 452 bytes leftover after parsing attributes in process `syz.0.421'. [ 112.425629][ T5521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 112.753047][ T5540] netlink: 44 bytes leftover after parsing attributes in process `syz.0.431'. [ 112.848486][ T5547] netlink: 452 bytes leftover after parsing attributes in process `syz.4.436'. [ 112.962532][ T5552] device syzkaller0 entered promiscuous mode [ 113.039676][ T5554] device syzkaller0 entered promiscuous mode [ 113.340025][ T5566] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.535670][ T5572] tipc: Failed to remove unknown binding: 66,0,0/0:2336119777/2336119779 [ 113.570415][ T5572] tipc: Failed to remove unknown binding: 66,0,0/0:2336119777/2336119778 [ 113.650249][ T5578] tipc: Failed to remove unknown binding: 66,0,0/0:2336119777/2336119779 [ 113.671580][ T5578] tipc: Failed to remove unknown binding: 66,0,0/0:2336119777/2336119778 [ 113.782974][ T5588] netlink: 452 bytes leftover after parsing attributes in process `syz.1.451'. [ 113.903991][ T5594] device syzkaller0 entered promiscuous mode [ 114.205272][ T5600] device syzkaller0 entered promiscuous mode [ 114.478799][ T5613] loop3: detected capacity change from 0 to 64 [ 115.349999][ T5622] device syzkaller0 entered promiscuous mode [ 115.469438][ T5627] netlink: 452 bytes leftover after parsing attributes in process `syz.3.465'. [ 115.519604][ T5629] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 115.736993][ T5633] device syzkaller0 entered promiscuous mode [ 115.767550][ T5634] loop1: detected capacity change from 0 to 512 [ 115.821217][ T5637] device syzkaller0 entered promiscuous mode [ 115.854589][ T5634] EXT4-fs (loop1): Ignoring removed nobh option [ 115.908986][ T5642] tipc: Failed to remove unknown binding: 66,0,0/0:3473756550/3473756552 [ 115.917623][ T5642] tipc: Failed to remove unknown binding: 66,0,0/0:3473756550/3473756551 [ 115.937958][ T5634] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 115.979114][ T5643] tipc: Failed to remove unknown binding: 66,0,0/0:3473756550/3473756552 [ 116.008098][ T5643] tipc: Failed to remove unknown binding: 66,0,0/0:3473756550/3473756551 [ 116.022838][ T5634] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.461: attempt to clear invalid blocks 1 len 1 [ 116.047349][ T5634] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 116.119927][ T5634] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.461: invalid indirect mapped block 1819239214 (level 0) [ 116.150284][ T5634] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.461: invalid indirect mapped block 1819239214 (level 1) [ 116.197276][ T5634] EXT4-fs (loop1): 1 truncate cleaned up [ 116.214703][ T5634] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 117.100610][ T5673] device syzkaller0 entered promiscuous mode [ 117.137157][ T5675] device syzkaller0 entered promiscuous mode [ 117.703427][ T5701] tipc: Failed to remove unknown binding: 66,0,0/0:2768949983/2768949985 [ 117.713369][ T5701] tipc: Failed to remove unknown binding: 66,0,0/0:2768949983/2768949984 [ 117.841911][ T5709] tipc: Failed to remove unknown binding: 66,0,0/0:2768949983/2768949985 [ 117.865591][ T5709] tipc: Failed to remove unknown binding: 66,0,0/0:2768949983/2768949984 [ 117.894291][ T5707] xt_CT: No such helper "snmp" [ 118.265717][ T5722] loop4: detected capacity change from 0 to 64 [ 119.222541][ T5731] device syzkaller0 entered promiscuous mode [ 119.740814][ T5657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.025190][ T5746] tipc: Failed to remove unknown binding: 66,0,0/0:3460446981/3460446983 [ 120.050162][ T26] audit: type=1800 audit(1789648397.596:2): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.506" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 120.081484][ T5746] tipc: Failed to remove unknown binding: 66,0,0/0:3460446981/3460446982 [ 120.129843][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.509'. [ 120.170101][ T5746] tipc: Failed to remove unknown binding: 66,0,0/0:3460446981/3460446983 [ 120.199138][ T5746] tipc: Failed to remove unknown binding: 66,0,0/0:3460446981/3460446982 [ 120.222350][ T5755] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.329050][ T5760] loop2: detected capacity change from 0 to 64 [ 121.180792][ T5768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.513'. [ 121.280898][ T5765] xt_CT: No such helper "snmp" [ 121.340234][ T5773] device syzkaller0 entered promiscuous mode [ 121.377751][ T5773] tipc: Enabled bearer , priority 0 [ 121.442874][ T5773] tipc: Resetting bearer [ 121.558045][ T7] libceph: connect (1)[c::]:6789 error -101 [ 121.575352][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 121.688328][ T5787] ceph: No mds server is up or the cluster is laggy [ 121.719391][ T4307] libceph: connect (1)[c::]:6789 error -101 [ 121.764118][ T4307] libceph: mon0 (1)[c::]:6789 connect error [ 122.135698][ T4307] libceph: connect (1)[c::]:6789 error -101 [ 122.148727][ T4307] libceph: mon0 (1)[c::]:6789 connect error [ 122.765228][ T4307] libceph: connect (1)[c::]:6789 error -101 [ 122.808278][ T4307] libceph: mon0 (1)[c::]:6789 connect error [ 123.694103][ T5772] tipc: Resetting bearer [ 123.758775][ T5772] tipc: Disabling bearer [ 123.817502][ T4261] tipc: Node number set to 1853265112 [ 124.013093][ T26] audit: type=1800 audit(1789648401.556:3): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.525" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 124.101592][ T5816] tipc: Failed to remove unknown binding: 66,0,0/1853265112:1862729241/1862729243 [ 124.124742][ T5816] tipc: Failed to remove unknown binding: 66,0,0/1853265112:1862729241/1862729242 [ 124.183773][ T5822] loop3: detected capacity change from 0 to 512 [ 124.235941][ T5822] EXT4-fs (loop3): Ignoring removed nobh option [ 124.253383][ T5823] tipc: Failed to remove unknown binding: 66,0,0/1853265112:1862729241/1862729243 [ 124.292250][ T5822] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 124.301472][ T5822] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.524: attempt to clear invalid blocks 1 len 1 [ 124.315337][ T5822] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 124.330155][ T5822] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.524: invalid indirect mapped block 1819239214 (level 0) [ 124.346068][ T5822] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.524: invalid indirect mapped block 1819239214 (level 1) [ 124.361990][ T5823] tipc: Failed to remove unknown binding: 66,0,0/1853265112:1862729241/1862729242 [ 124.373719][ T5822] EXT4-fs (loop3): 1 truncate cleaned up [ 124.379602][ T5822] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 124.412562][ T5825] xt_CT: No such helper "snmp" [ 124.687492][ T5836] 0: reclassify loop, rule prio 0, protocol 800 [ 125.008203][ T5843] ceph: No mds server is up or the cluster is laggy [ 125.017028][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 125.036134][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 125.733435][ T5849] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 125.893355][ T5850] device syzkaller0 entered promiscuous mode [ 126.115320][ T5865] device syzkaller0 entered promiscuous mode [ 126.130249][ T5859] tipc: Enabled bearer , priority 0 [ 126.226645][ T5866] loop4: detected capacity change from 0 to 64 [ 126.368447][ T5859] tipc: Resetting bearer [ 126.639245][ T5858] tipc: Resetting bearer [ 126.903593][ T5858] tipc: Disabling bearer [ 126.990647][ T5868] block nbd3: not configured, cannot reconfigure [ 127.115773][ T5876] tipc: Failed to remove unknown binding: 66,0,0/1853265112:1194100373/1194100375 [ 127.125226][ T5876] tipc: Failed to remove unknown binding: 66,0,0/1853265112:1194100373/1194100374 [ 127.188098][ T5879] tipc: Failed to remove unknown binding: 66,0,0/1853265112:1194100373/1194100375 [ 127.207563][ T5879] tipc: Failed to remove unknown binding: 66,0,0/1853265112:1194100373/1194100374 [ 127.430110][ T5888] ceph: No mds server is up or the cluster is laggy [ 127.440418][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 127.459338][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 128.199624][ T5897] xt_CT: No such helper "snmp" [ 128.230490][ T5902] device syzkaller0 entered promiscuous mode [ 128.255875][ T26] audit: type=1800 audit(1789648405.806:4): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.555" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 128.490286][ T5912] loop1: detected capacity change from 0 to 64 [ 129.287348][ T5916] device syzkaller0 entered promiscuous mode [ 129.385302][ T5916] tipc: Enabled bearer , priority 0 [ 129.433329][ T5916] tipc: Resetting bearer [ 129.539102][ T5915] tipc: Resetting bearer [ 129.583945][ T5915] tipc: Disabling bearer [ 129.853864][ T5935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 129.938358][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 129.955331][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 130.057172][ T5938] ceph: No mds server is up or the cluster is laggy [ 130.128146][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 130.250540][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 130.952525][ T5965] x_tables: duplicate underflow at hook 1 [ 130.975894][ T5963] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 131.287349][ T5974] loop3: detected capacity change from 0 to 512 [ 132.110810][ T5974] EXT4-fs (loop3): Ignoring removed nobh option [ 132.197933][ T5971] netlink: 'syz.0.576': attribute type 13 has an invalid length. [ 132.208887][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 132.218265][ T5971] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 132.252997][ T5968] loop1: detected capacity change from 0 to 64 [ 132.268442][ T5965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.285214][ T5974] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 132.295204][ T5974] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.577: attempt to clear invalid blocks 1 len 1 [ 132.312867][ T5974] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 132.327602][ T5974] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.577: invalid indirect mapped block 1819239214 (level 0) [ 132.345738][ T5974] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.577: invalid indirect mapped block 1819239214 (level 1) [ 132.367319][ T5974] EXT4-fs (loop3): 1 truncate cleaned up [ 132.373099][ T5974] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 132.457902][ T4307] wlan1: authenticate with 08:02:11:00:00:00 [ 132.498494][ T4307] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 132.659368][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.668328][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.744392][ T4281] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 132.765612][ T5988] device syzkaller0 entered promiscuous mode [ 132.778494][ T5988] tipc: Enabled bearer , priority 0 [ 132.814010][ T5988] tipc: Resetting bearer [ 132.871935][ T5987] tipc: Resetting bearer [ 132.879281][ T155] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 132.920585][ T5987] tipc: Disabling bearer [ 132.971473][ T26] audit: type=1800 audit(1789648410.516:5): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.583" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 133.003760][ T5801] wlan1: authentication with 08:02:11:00:00:00 timed out [ 133.139369][ T6006] device syzkaller0 entered promiscuous mode [ 133.430844][ T6022] loop2: detected capacity change from 0 to 64 [ 134.310402][ T6033] device syzkaller0 entered promiscuous mode [ 134.320231][ T6033] tipc: Enabled bearer , priority 0 [ 134.333707][ T6033] tipc: Resetting bearer [ 134.410272][ T6032] tipc: Resetting bearer [ 134.450275][ T6032] tipc: Disabling bearer [ 134.501564][ T6041] device syzkaller0 entered promiscuous mode [ 134.615311][ T6049] device syzkaller0 entered promiscuous mode [ 134.809713][ T26] audit: type=1800 audit(1789648412.356:6): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.608" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 134.935570][ T6061] loop1: detected capacity change from 0 to 64 [ 135.671824][ T26] audit: type=1800 audit(1789648413.216:7): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.608" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 135.904792][ T6079] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 136.011180][ T6084] netlink: 80 bytes leftover after parsing attributes in process `syz.2.616'. [ 136.062393][ T6085] device syzkaller0 entered promiscuous mode [ 136.091610][ T6085] tipc: Enabled bearer , priority 0 [ 136.131151][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 136.191479][ T6085] tipc: Resetting bearer [ 136.201201][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'. [ 136.217934][ T6081] tipc: Resetting bearer [ 136.241461][ T6081] tipc: Disabling bearer [ 136.297430][ T6100] device syzkaller0 entered promiscuous mode [ 136.678847][ T6115] loop2: detected capacity change from 0 to 64 [ 137.502673][ T26] audit: type=1800 audit(1789648415.046:8): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.626" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 137.728807][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 137.831580][ T6137] device syzkaller0 entered promiscuous mode [ 137.861968][ T6137] tipc: Enabled bearer , priority 0 [ 137.909206][ T6137] tipc: Resetting bearer [ 137.930071][ T6136] tipc: Resetting bearer [ 137.993753][ T6136] tipc: Disabling bearer [ 138.245280][ T6153] loop2: detected capacity change from 0 to 64 [ 139.390745][ T4227] libceph: connect (1)[c::]:6789 error -22 [ 139.426874][ T4227] libceph: mon0 (1)[c::]:6789 connect error [ 139.441373][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 139.529600][ T6169] ceph: No mds server is up or the cluster is laggy [ 140.105697][ T6178] device syzkaller0 entered promiscuous mode [ 140.115202][ T6178] tipc: Started in network mode [ 140.120120][ T6178] tipc: Node identity eebca302e45c, cluster identity 4711 [ 140.127650][ T6178] tipc: Enabled bearer , priority 0 [ 140.253216][ T6178] tipc: Resetting bearer [ 140.271568][ T6177] tipc: Resetting bearer [ 140.292725][ T6177] tipc: Disabling bearer [ 140.456490][ T6186] device syzkaller0 entered promiscuous mode [ 140.953563][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 141.149875][ T6213] device syzkaller0 entered promiscuous mode [ 141.171491][ T6213] tipc: Enabled bearer , priority 0 [ 141.218854][ T6212] tipc: Resetting bearer [ 141.311059][ T6218] loop1: detected capacity change from 0 to 64 [ 142.095000][ T6212] tipc: Disabling bearer [ 142.170331][ T6220] device syzkaller0 entered promiscuous mode [ 142.479083][ T6232] device syzkaller0 entered promiscuous mode [ 142.545741][ T6238] xt_hashlimit: size too large, truncated to 1048576 [ 142.834746][ T6248] tipc: Failed to remove unknown binding: 66,0,0/0:2479316921/2479316923 [ 142.882879][ T6248] tipc: Failed to remove unknown binding: 66,0,0/0:2479316921/2479316922 [ 143.009518][ T6248] tipc: Failed to remove unknown binding: 66,0,0/0:2479316921/2479316923 [ 143.018244][ T6248] tipc: Failed to remove unknown binding: 66,0,0/0:2479316921/2479316922 [ 143.064620][ T21] libceph: connect (1)[c::]:6789 error -101 [ 143.080535][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 143.086866][ T6250] ceph: No mds server is up or the cluster is laggy [ 143.201644][ T6256] netlink: 'syz.1.680': attribute type 5 has an invalid length. [ 143.433262][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 143.472819][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 143.975486][ T6289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.058583][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 144.150539][ T6296] device syzkaller0 entered promiscuous mode [ 144.244311][ T6289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.599443][ T4307] libceph: connect (1)[c::]:6789 error -101 [ 144.630273][ T4307] libceph: mon0 (1)[c::]:6789 connect error [ 144.695929][ T6306] ceph: No mds server is up or the cluster is laggy [ 144.737381][ T6289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.848174][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 144.862534][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.871059][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.963105][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.989823][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.026997][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.037815][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.057383][ T6317] device bridge_slave_1 left promiscuous mode [ 145.065369][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.089005][ T6317] bond0: (slave bond_slave_0): Releasing backup interface [ 145.108792][ T6317] bond0: (slave bond_slave_1): Releasing backup interface [ 145.170316][ T6317] team0: Port device team_slave_0 removed [ 145.231518][ T6317] team0: Port device team_slave_1 removed [ 145.256480][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.280098][ T6317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.302595][ T6317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.320804][ T6317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.377283][ T6289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.685033][ T6289] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.749733][ T6289] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.814281][ T6289] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.872593][ T6289] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.899093][ T6344] device syzkaller0 entered promiscuous mode [ 146.140424][ T6355] xt_CT: No such helper "snmp" [ 146.191641][ T26] audit: type=1800 audit(1789648423.736:9): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.706" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 146.539488][ T6366] device syzkaller0 entered promiscuous mode [ 146.566680][ T6364] device geneve2 entered promiscuous mode [ 146.865569][ T6381] loop2: detected capacity change from 0 to 64 [ 147.262636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 147.682215][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 147.694521][ T6386] netlink: 'syz.3.717': attribute type 12 has an invalid length. [ 147.707256][ T6386] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.716874][ T6386] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.726006][ T6386] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.734802][ T6386] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.746560][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 147.777468][ T6388] netlink: 'syz.3.717': attribute type 12 has an invalid length. [ 147.892653][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 147.893790][ T6392] device syzkaller0 entered promiscuous mode [ 148.119134][ T6394] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 148.198447][ T6398] loop3: detected capacity change from 0 to 512 [ 148.308563][ T6394] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.326318][ T6394] ipt_ECN: cannot use operation on non-tcp rule [ 148.348499][ T6398] EXT4-fs (loop3): Ignoring removed nobh option [ 148.384057][ T6398] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 148.422068][ T6398] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.721: attempt to clear invalid blocks 1 len 1 [ 148.456821][ T6398] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 148.471550][ T6398] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.721: invalid indirect mapped block 1819239214 (level 0) [ 148.486028][ T6398] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.721: invalid indirect mapped block 1819239214 (level 1) [ 148.501169][ T6398] EXT4-fs (loop3): 1 truncate cleaned up [ 148.506944][ T6398] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 148.710923][ T6411] device syzkaller0 entered promiscuous mode [ 148.935872][ T26] audit: type=1800 audit(1789648426.486:10): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.727" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 149.037859][ T6428] loop0: detected capacity change from 0 to 64 [ 149.757973][ T6431] device lo entered promiscuous mode [ 149.893952][ T6431] device tunl0 entered promiscuous mode [ 149.951784][ T6431] device gre0 entered promiscuous mode [ 150.130625][ T6431] device gretap0 entered promiscuous mode [ 150.200161][ T6431] device erspan0 entered promiscuous mode [ 150.249155][ T6431] device ip_vti0 entered promiscuous mode [ 150.427681][ T6431] device ip6_vti0 entered promiscuous mode [ 150.477198][ T7] libceph: connect (1)[c::]:6789 error -101 [ 150.490237][ T6447] ceph: No mds server is up or the cluster is laggy [ 150.497463][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 150.518889][ T6431] device sit0 entered promiscuous mode [ 150.586932][ T6431] device ip6tnl0 entered promiscuous mode [ 150.642432][ T6431] device ip6gre0 entered promiscuous mode [ 150.659017][ T6431] device syz_tun entered promiscuous mode [ 150.750461][ T6431] device ip6gretap0 entered promiscuous mode [ 150.767839][ T6431] device bridge0 entered promiscuous mode [ 150.786116][ T6456] xt_CT: No such helper "snmp" [ 150.801338][ T6431] device vcan0 entered promiscuous mode [ 150.818515][ T6431] device bond0 entered promiscuous mode [ 150.873439][ T6431] device team0 entered promiscuous mode [ 150.929852][ T6431] device dummy0 entered promiscuous mode [ 150.979545][ T6431] device nlmon0 entered promiscuous mode [ 151.006362][ T6431] device caif0 entered promiscuous mode [ 151.027208][ T6431] device batadv0 entered promiscuous mode [ 151.073674][ T6459] loop0: detected capacity change from 0 to 512 [ 151.087562][ T6431] device vxcan0 entered promiscuous mode [ 151.102047][ T6431] device vxcan1 entered promiscuous mode [ 151.119064][ T6459] EXT4-fs (loop0): Ignoring removed nobh option [ 151.125711][ T6431] device veth0 entered promiscuous mode [ 151.153195][ T6459] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 151.179654][ T6459] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.736: attempt to clear invalid blocks 1 len 1 [ 151.193366][ T6459] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 151.208451][ T6459] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.736: invalid indirect mapped block 1819239214 (level 0) [ 151.223061][ T6459] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.736: invalid indirect mapped block 1819239214 (level 1) [ 151.238645][ T6459] EXT4-fs (loop0): 1 truncate cleaned up [ 151.244450][ T6459] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 151.355564][ T6431] device veth1 entered promiscuous mode [ 151.398125][ T6431] device wg0 entered promiscuous mode [ 151.419517][ T6431] device wg1 entered promiscuous mode [ 151.440724][ T6431] device wg2 entered promiscuous mode [ 151.487465][ T6431] device veth0_to_bridge entered promiscuous mode [ 151.524896][ T6466] tipc: Failed to remove unknown binding: 66,0,0/1853265112:3599449040/3599449042 [ 151.542923][ T6466] tipc: Failed to remove unknown binding: 66,0,0/1853265112:3599449040/3599449041 [ 151.575426][ T6431] device veth1_to_bridge entered promiscuous mode [ 151.608726][ T6431] device bridge_slave_1 entered promiscuous mode [ 151.609521][ T6467] tipc: Failed to remove unknown binding: 66,0,0/1853265112:3599449040/3599449042 [ 151.625936][ T6467] tipc: Failed to remove unknown binding: 66,0,0/1853265112:3599449040/3599449041 [ 151.638179][ T6431] device veth0_to_bond entered promiscuous mode [ 151.648853][ T6431] device bond_slave_0 entered promiscuous mode [ 151.661314][ T6431] device veth1_to_bond entered promiscuous mode [ 151.672305][ T6431] device bond_slave_1 entered promiscuous mode [ 151.685042][ T6431] device veth0_to_team entered promiscuous mode [ 151.696713][ T6431] device team_slave_0 entered promiscuous mode [ 151.721049][ T6431] device veth1_to_team entered promiscuous mode [ 151.738689][ T6431] device team_slave_1 entered promiscuous mode [ 151.746696][ T6431] device veth0_to_batadv entered promiscuous mode [ 151.773163][ T6431] device batadv_slave_0 entered promiscuous mode [ 151.786522][ T6431] device veth1_to_batadv entered promiscuous mode [ 151.816149][ T6431] device batadv_slave_1 entered promiscuous mode [ 151.836828][ T6431] device xfrm0 entered promiscuous mode [ 151.924572][ T6431] device veth0_to_hsr entered promiscuous mode [ 151.972576][ T6431] device veth1_to_hsr entered promiscuous mode [ 152.018949][ T6431] device hsr0 entered promiscuous mode [ 152.049343][ T6431] device veth1_virt_wifi entered promiscuous mode [ 152.080891][ T6431] device veth0_virt_wifi entered promiscuous mode [ 152.089895][ T6431] device virt_wifi0 entered promiscuous mode [ 152.172080][ T6431] device vlan0 entered promiscuous mode [ 152.179141][ T6431] device vlan1 entered promiscuous mode [ 152.188759][ T6431] device macvlan0 entered promiscuous mode [ 152.203420][ T6431] device macvlan1 entered promiscuous mode [ 152.212736][ T6431] device ipvlan0 entered promiscuous mode [ 152.219166][ T6431] device ipvlan1 entered promiscuous mode [ 152.237682][ T6431] device macvtap0 entered promiscuous mode [ 152.249149][ T6431] device macsec0 entered promiscuous mode [ 152.268629][ T6431] device geneve0 entered promiscuous mode [ 152.277795][ T6431] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.293266][ T6431] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.302230][ T6431] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.317144][ T6431] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.328100][ T6431] device geneve1 entered promiscuous mode [ 152.368079][ T6431] device netdevsim0 entered promiscuous mode [ 152.409043][ T6431] device netdevsim1 entered promiscuous mode [ 152.443145][ T6431] device netdevsim2 entered promiscuous mode [ 152.454609][ T6431] device netdevsim3 entered promiscuous mode [ 152.469763][ T6431] device wlan0 entered promiscuous mode [ 152.491221][ T6431] device wlan1 entered promiscuous mode [ 152.539744][ T6477] device syzkaller0 entered promiscuous mode [ 152.904357][ T6489] loop0: detected capacity change from 0 to 64 [ 153.692440][ T6487] device syzkaller0 entered promiscuous mode [ 153.890736][ T6496] device syzkaller0 entered promiscuous mode [ 153.929626][ T7] libceph: connect (1)[c::]:6789 error -101 [ 153.937675][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 153.961096][ T6508] ceph: No mds server is up or the cluster is laggy [ 154.197843][ T6519] tipc: Failed to remove unknown binding: 66,0,0/0:1782665194/1782665196 [ 154.236102][ T6519] tipc: Failed to remove unknown binding: 66,0,0/0:1782665194/1782665195 [ 154.321549][ T6526] device syzkaller0 entered promiscuous mode [ 154.342980][ T6527] device syzkaller0 entered promiscuous mode [ 154.358969][ T6526] tc action pedit 'at' offset 5 out of bounds [ 154.368564][ T6522] tipc: Failed to remove unknown binding: 66,0,0/0:1782665194/1782665196 [ 154.385533][ T6522] tipc: Failed to remove unknown binding: 66,0,0/0:1782665194/1782665195 [ 154.563485][ T6529] device syzkaller0 entered promiscuous mode [ 154.782569][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.758'. [ 155.215221][ T6565] device syzkaller0 entered promiscuous mode [ 155.261263][ T6567] ip_tables: iptables: counters copy to user failed while replacing table [ 155.370647][ T6569] device syzkaller0 entered promiscuous mode [ 155.532844][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.767'. [ 155.648626][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 155.684753][ T6579] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.693927][ T6579] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.703497][ T6579] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.712228][ T6579] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.723772][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 155.930966][ T6591] loop0: detected capacity change from 0 to 64 [ 156.669792][ T6595] tipc: Failed to remove unknown binding: 66,0,0/0:2846365450/2846365452 [ 156.718414][ T6597] device syzkaller0 entered promiscuous mode [ 156.732494][ T6595] tipc: Failed to remove unknown binding: 66,0,0/0:2846365450/2846365451 [ 156.830093][ T6601] tipc: Failed to remove unknown binding: 66,0,0/0:2846365450/2846365452 [ 156.917576][ T6601] tipc: Failed to remove unknown binding: 66,0,0/0:2846365450/2846365451 [ 157.093602][ T6612] device syzkaller0 entered promiscuous mode [ 157.334716][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 157.487818][ T6636] loop0: detected capacity change from 0 to 64 [ 158.807796][ T6660] tipc: Failed to remove unknown binding: 66,0,0/1853265112:12803786/12803788 [ 158.823760][ T6662] loop2: detected capacity change from 0 to 512 [ 158.838338][ T6660] tipc: Failed to remove unknown binding: 66,0,0/1853265112:12803786/12803787 [ 158.866351][ T6662] EXT4-fs (loop2): Ignoring removed nobh option [ 158.905519][ T6660] tipc: Failed to remove unknown binding: 66,0,0/1853265112:12803786/12803788 [ 158.931357][ T6662] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 158.940410][ T6662] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.794: attempt to clear invalid blocks 1 len 1 [ 158.963096][ T6662] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 158.978261][ T6662] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.794: invalid indirect mapped block 1819239214 (level 0) [ 158.990378][ T6660] tipc: Failed to remove unknown binding: 66,0,0/1853265112:12803786/12803787 [ 159.004570][ T6662] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.794: invalid indirect mapped block 1819239214 (level 1) [ 159.020400][ T6668] device syzkaller0 entered promiscuous mode [ 159.039774][ T6662] EXT4-fs (loop2): 1 truncate cleaned up [ 159.045566][ T6662] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 159.194411][ T6673] loop3: detected capacity change from 0 to 64 [ 160.447723][ T6707] netlink: 44 bytes leftover after parsing attributes in process `syz.0.812'. [ 160.631940][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 160.674464][ T6716] loop2: detected capacity change from 0 to 512 [ 160.726114][ T6716] EXT4-fs (loop2): Ignoring removed nobh option [ 160.764501][ T6716] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 160.783542][ T6716] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.811: attempt to clear invalid blocks 1 len 1 [ 160.802448][ T6716] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 160.817355][ T6716] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.811: invalid indirect mapped block 1819239214 (level 0) [ 160.832443][ T6716] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.811: invalid indirect mapped block 1819239214 (level 1) [ 160.847929][ T6716] EXT4-fs (loop2): 1 truncate cleaned up [ 160.853651][ T6716] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 161.385752][ T6741] xt_CT: No such helper "snmp" [ 161.392983][ T6744] netlink: 44 bytes leftover after parsing attributes in process `syz.1.826'. [ 161.540647][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 161.622104][ T6759] device syzkaller0 entered promiscuous mode [ 162.042264][ T6775] loop1: detected capacity change from 0 to 512 [ 162.063976][ T6776] device syzkaller0 entered promiscuous mode [ 162.069299][ T6777] xt_CT: No such helper "snmp" [ 162.099306][ T6775] EXT4-fs (loop1): Ignoring removed nobh option [ 162.125029][ T6775] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 162.134528][ T6775] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.839: attempt to clear invalid blocks 1 len 1 [ 162.147941][ T6775] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 162.162788][ T6775] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.839: invalid indirect mapped block 1819239214 (level 0) [ 162.177682][ T6775] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.839: invalid indirect mapped block 1819239214 (level 1) [ 162.194109][ T6775] EXT4-fs (loop1): 1 truncate cleaned up [ 162.199819][ T6775] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 162.327397][ T6786] netlink: 44 bytes leftover after parsing attributes in process `syz.3.842'. [ 162.739686][ T6809] device syzkaller0 entered promiscuous mode [ 162.756623][ T6807] tipc: Failed to remove unknown binding: 66,0,0/1853265112:357129813/357129815 [ 162.816501][ T6807] tipc: Failed to remove unknown binding: 66,0,0/1853265112:357129813/357129814 [ 162.874810][ T6812] device syzkaller0 entered promiscuous mode [ 162.881423][ T6807] tipc: Failed to remove unknown binding: 66,0,0/1853265112:357129813/357129815 [ 162.963399][ T6807] tipc: Failed to remove unknown binding: 66,0,0/1853265112:357129813/357129814 [ 162.992946][ T6820] ip_tables: iptables: counters copy to user failed while replacing table [ 163.118319][ T6822] device syzkaller0 entered promiscuous mode [ 163.151254][ T6822] tipc: Enabled bearer , priority 0 [ 163.178176][ T6821] tipc: Resetting bearer [ 163.233544][ T6821] tipc: Disabling bearer [ 163.538600][ T6833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.862'. [ 163.653677][ T6833] netlink: 120 bytes leftover after parsing attributes in process `syz.2.862'. [ 163.842438][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 163.858630][ T6851] device hsr_slave_0 left promiscuous mode [ 163.865674][ T6851] device hsr_slave_1 left promiscuous mode [ 164.054820][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 164.227168][ T6866] tipc: Failed to remove unknown binding: 66,0,0/0:2343708329/2343708331 [ 164.251146][ T6866] tipc: Failed to remove unknown binding: 66,0,0/0:2343708329/2343708330 [ 164.341147][ T6871] tipc: Failed to remove unknown binding: 66,0,0/0:2343708329/2343708331 [ 164.367729][ T26] audit: type=1800 audit(1789648441.916:11): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.877" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 164.371050][ T6871] tipc: Failed to remove unknown binding: 66,0,0/0:2343708329/2343708330 [ 164.524015][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 165.040117][ T6897] loop3: detected capacity change from 0 to 64 [ 166.057862][ T6907] device syzkaller0 entered promiscuous mode [ 166.348552][ T6916] netlink: 'syz.3.890': attribute type 16 has an invalid length. [ 166.393598][ T6916] netlink: 'syz.3.890': attribute type 17 has an invalid length. [ 166.430910][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.439200][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.477670][ T6916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.510343][ T6916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.716172][ T6928] xt_CT: No such helper "snmp" [ 166.746385][ T6935] device syzkaller0 entered promiscuous mode [ 166.765005][ T6935] tipc: Enabled bearer , priority 0 [ 166.801442][ T6935] tipc: Resetting bearer [ 166.827956][ T6932] tipc: Resetting bearer [ 166.856986][ T6932] tipc: Disabling bearer [ 166.945588][ T6941] loop1: detected capacity change from 0 to 64 [ 167.101634][ T6939] smc: net device vlan1 applied user defined pnetid SYZ2 [ 167.356317][ T6939] __nla_validate_parse: 1 callbacks suppressed [ 167.356757][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 167.770828][ T6946] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.897'. [ 168.168434][ T6957] loop0: detected capacity change from 0 to 512 [ 168.207542][ T6957] EXT4-fs (loop0): Ignoring removed nobh option [ 168.249251][ T6957] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 168.259614][ T6957] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.901: attempt to clear invalid blocks 1 len 1 [ 168.273195][ T6957] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 168.288645][ T6957] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.901: invalid indirect mapped block 1819239214 (level 0) [ 168.304892][ T6957] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.901: invalid indirect mapped block 1819239214 (level 1) [ 168.322254][ T6957] EXT4-fs (loop0): 1 truncate cleaned up [ 168.328100][ T6957] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 168.395346][ T6969] xt_CT: No such helper "snmp" [ 168.629482][ T4228] libceph: connect (1)[c::]:6789 error -101 [ 168.635934][ T4228] libceph: mon0 (1)[c::]:6789 connect error [ 168.642600][ T6981] tipc: Failed to remove unknown binding: 66,0,0/0:2320886550/2320886552 [ 168.659613][ T6981] tipc: Failed to remove unknown binding: 66,0,0/0:2320886550/2320886551 [ 168.670968][ T6981] tipc: Failed to remove unknown binding: 66,0,0/0:2320886550/2320886552 [ 168.682000][ T6979] ceph: No mds server is up or the cluster is laggy [ 168.708366][ T6981] tipc: Failed to remove unknown binding: 66,0,0/0:2320886550/2320886551 [ 169.031859][ T6998] device syzkaller0 entered promiscuous mode [ 169.044484][ T6995] device syzkaller0 entered promiscuous mode [ 169.063222][ T6998] tipc: Enabled bearer , priority 0 [ 169.118941][ T6998] tipc: Resetting bearer [ 169.163682][ T6997] tipc: Resetting bearer [ 169.207938][ T6997] tipc: Disabling bearer [ 169.637482][ T7018] xt_CT: No such helper "snmp" [ 170.265879][ T7038] tipc: Failed to remove unknown binding: 66,0,0/0:2288259037/2288259039 [ 170.274488][ T7038] tipc: Failed to remove unknown binding: 66,0,0/0:2288259037/2288259038 [ 170.284636][ T7038] tipc: Failed to remove unknown binding: 66,0,0/0:2288259037/2288259039 [ 170.317133][ T7038] tipc: Failed to remove unknown binding: 66,0,0/0:2288259037/2288259038 [ 170.420527][ T7039] loop4: detected capacity change from 0 to 512 [ 170.599673][ T7039] EXT4-fs (loop4): Ignoring removed nobh option [ 170.769090][ T7039] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 170.796186][ T7039] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.924: attempt to clear invalid blocks 1 len 1 [ 170.814677][ T7039] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 170.829656][ T7039] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.924: invalid indirect mapped block 1819239214 (level 0) [ 170.847987][ T7039] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.924: invalid indirect mapped block 1819239214 (level 1) [ 170.877193][ T7039] EXT4-fs (loop4): 1 truncate cleaned up [ 170.883013][ T7039] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 171.295647][ T7049] loop0: detected capacity change from 0 to 64 [ 172.073026][ T7055] device syzkaller0 entered promiscuous mode [ 172.185457][ T7062] netlink: 52 bytes leftover after parsing attributes in process `syz.3.933'. [ 172.205682][ T7001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.436700][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.937'. [ 172.588175][ T7074] xt_CT: No such helper "snmp" [ 172.875124][ T7100] loop1: detected capacity change from 0 to 64 [ 173.627002][ T7092] device syzkaller0 entered promiscuous mode [ 173.817603][ T7117] netlink: 52 bytes leftover after parsing attributes in process `syz.0.945'. [ 173.958850][ T7128] tipc: Failed to remove unknown binding: 66,0,0/0:3993629096/3993629098 [ 173.967789][ T7128] tipc: Failed to remove unknown binding: 66,0,0/0:3993629096/3993629097 [ 174.010351][ T7121] device syzkaller0 entered promiscuous mode [ 174.037021][ T7134] tipc: Failed to remove unknown binding: 66,0,0/0:3993629096/3993629098 [ 174.065481][ T7121] tipc: Enabled bearer , priority 0 [ 174.114114][ T7134] tipc: Failed to remove unknown binding: 66,0,0/0:3993629096/3993629097 [ 174.146060][ T7121] tipc: Resetting bearer [ 174.182174][ T7119] tipc: Resetting bearer [ 174.213803][ T7119] tipc: Disabling bearer [ 174.230978][ T7142] tipc: Enabling of bearer rejected, failed to enable media [ 174.360684][ T7141] xt_CT: No such helper "snmp" [ 174.424767][ T7149] 0: reclassify loop, rule prio 0, protocol 800 [ 174.670734][ T7157] loop1: detected capacity change from 0 to 64 [ 175.640416][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'. [ 175.849953][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'. [ 175.920237][ T7179] device syzkaller0 entered promiscuous mode [ 176.012496][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'. [ 176.100414][ T7191] device syzkaller0 entered promiscuous mode [ 176.129747][ T7193] device syzkaller0 entered promiscuous mode [ 176.144321][ T7191] tipc: Enabled bearer , priority 0 [ 176.155556][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 176.165053][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 176.184040][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 176.195385][ T4307] libceph: connect (1)[c::]:6789 error -101 [ 176.201436][ T4307] libceph: mon0 (1)[c::]:6789 connect error [ 176.207740][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 176.217065][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.969'. [ 176.230457][ T7193] tipc: Enabled bearer , priority 0 [ 176.238467][ T7197] ceph: No mds server is up or the cluster is laggy [ 176.305506][ T7201] tipc: Resetting bearer [ 176.317776][ T7204] tipc: Failed to remove unknown binding: 66,0,0/0:3332063058/3332063060 [ 176.327065][ T7204] tipc: Failed to remove unknown binding: 66,0,0/0:3332063058/3332063059 [ 176.339647][ T7191] tipc: Resetting bearer [ 176.376635][ T7192] tipc: Resetting bearer [ 176.389818][ T7207] tipc: Failed to remove unknown binding: 66,0,0/0:3332063058/3332063060 [ 176.421394][ T7192] tipc: Disabling bearer [ 176.434229][ T7207] tipc: Failed to remove unknown binding: 66,0,0/0:3332063058/3332063059 [ 176.456043][ T7188] tipc: Resetting bearer [ 176.484112][ T7188] tipc: Disabling bearer [ 176.673602][ T7224] smc: net device vlan1 applied user defined pnetid SYZ2 [ 176.922046][ T7236] device syzkaller0 entered promiscuous mode [ 177.170085][ T7245] ceph: No mds server is up or the cluster is laggy [ 177.179129][ T2300] libceph: connect (1)[c::]:6789 error -101 [ 177.209432][ T2300] libceph: mon0 (1)[c::]:6789 connect error [ 177.335288][ T7263] device syzkaller0 entered promiscuous mode [ 177.346431][ T7263] tipc: Enabled bearer , priority 0 [ 177.401669][ T7263] tipc: Resetting bearer [ 177.441947][ T7262] tipc: Resetting bearer [ 177.459594][ T7262] tipc: Disabling bearer [ 177.536220][ T7265] device syzkaller0 entered promiscuous mode [ 177.565511][ T7274] __nla_validate_parse: 3 callbacks suppressed [ 177.565527][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 177.697347][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 177.809776][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 178.157112][ T7288] device syzkaller0 entered promiscuous mode [ 178.183555][ T7301] ceph: No mds server is up or the cluster is laggy [ 178.775631][ T7325] device syzkaller0 entered promiscuous mode [ 179.040832][ T4307] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 179.052520][ T7341] ceph: No mds server is up or the cluster is laggy [ 179.383836][ T1108] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.832983][ T7369] loop1: detected capacity change from 0 to 512 [ 180.037520][ T7369] EXT4-fs (loop1): Ignoring removed nobh option [ 180.172125][ T7369] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 180.191832][ T7369] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1025: attempt to clear invalid blocks 1 len 1 [ 180.210826][ T7369] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 180.225885][ T7369] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1025: invalid indirect mapped block 1819239214 (level 0) [ 180.243490][ T7369] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1025: invalid indirect mapped block 1819239214 (level 1) [ 180.265461][ T7369] EXT4-fs (loop1): 1 truncate cleaned up [ 180.271267][ T7369] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 180.699892][ T4228] libceph: connect (1)[c::]:6789 error -22 [ 180.730082][ T4228] libceph: mon0 (1)[c::]:6789 connect error [ 180.741333][ T7376] ceph: No mds server is up or the cluster is laggy [ 180.848812][ T7388] device syzkaller0 entered promiscuous mode [ 181.319254][ T7406] loop2: detected capacity change from 0 to 64 [ 182.150940][ T7410] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 182.378731][ T7411] device syzkaller0 entered promiscuous mode [ 182.791516][ T4282] libceph: connect (1)[c::]:6789 error -101 [ 182.798640][ T4282] libceph: mon0 (1)[c::]:6789 connect error [ 182.830452][ T7431] ceph: No mds server is up or the cluster is laggy [ 182.850840][ T7435] device syzkaller0 entered promiscuous mode [ 182.893632][ T7435] tipc: Enabled bearer , priority 0 [ 182.969944][ T7435] tipc: Resetting bearer [ 183.012153][ T7432] tipc: Resetting bearer [ 183.125865][ T7432] tipc: Disabling bearer [ 183.241011][ T1108] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.422519][ T7450] loop0: detected capacity change from 0 to 512 [ 183.475710][ T7450] EXT4-fs (loop0): Ignoring removed nobh option [ 183.611926][ T7450] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 183.626243][ T7450] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1052: attempt to clear invalid blocks 1 len 1 [ 183.645855][ T7450] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 183.661178][ T7450] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1052: invalid indirect mapped block 1819239214 (level 0) [ 183.684200][ T7450] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1052: invalid indirect mapped block 1819239214 (level 1) [ 183.708831][ T7450] EXT4-fs (loop0): 1 truncate cleaned up [ 183.714634][ T7450] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 184.313699][ T7459] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 184.466200][ T7459] device syzkaller0 entered promiscuous mode [ 184.621546][ T7468] loop1: detected capacity change from 0 to 512 [ 185.278821][ T7468] EXT4-fs (loop1): Ignoring removed nobh option [ 185.323666][ T7468] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 185.334440][ T7468] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1070: attempt to clear invalid blocks 1 len 1 [ 185.348678][ T7468] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 185.363347][ T7468] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1070: invalid indirect mapped block 1819239214 (level 0) [ 185.381685][ T7468] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1070: invalid indirect mapped block 1819239214 (level 1) [ 185.397971][ T7468] EXT4-fs (loop1): 1 truncate cleaned up [ 185.403726][ T7468] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 185.501154][ T7474] device syzkaller0 entered promiscuous mode [ 185.636896][ T7477] x_tables: duplicate underflow at hook 1 [ 186.093425][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 186.731816][ T7492] tipc: Enabled bearer , priority 0 [ 186.748044][ T7492] tipc: Resetting bearer [ 186.764243][ T7491] tipc: Disabling bearer [ 187.032454][ T7501] loop3: detected capacity change from 0 to 64 [ 187.668890][ T7504] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 189.079522][ T7520] device syzkaller0 entered promiscuous mode [ 189.197248][ T7526] x_tables: duplicate underflow at hook 1 [ 189.293382][ T7526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.009346][ T7544] device syzkaller0 entered promiscuous mode [ 191.040572][ T7560] device syzkaller0 entered promiscuous mode [ 191.052841][ T6471] Bluetooth: hci4: command 0x0406 tx timeout [ 191.071541][ T6471] Bluetooth: hci3: command 0x0406 tx timeout [ 191.102788][ T6471] Bluetooth: hci2: command 0x0406 tx timeout [ 191.117768][ T6471] Bluetooth: hci1: command 0x0406 tx timeout [ 191.445192][ T7578] loop1: detected capacity change from 0 to 64 [ 192.501375][ T7593] loop0: detected capacity change from 0 to 512 [ 194.153989][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.160343][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.234217][ T7591] sched: RT throttling activated [ 194.442106][ T7595] device syzkaller0 entered promiscuous mode [ 194.462968][ T7593] EXT4-fs (loop0): Ignoring removed nobh option [ 194.569152][ T7593] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 194.578200][ T7593] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1109: attempt to clear invalid blocks 1 len 1 [ 194.600415][ T7593] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 194.616375][ T7593] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1109: invalid indirect mapped block 1819239214 (level 0) [ 194.645581][ T7593] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1109: invalid indirect mapped block 1819239214 (level 1) [ 194.675563][ T7593] EXT4-fs (loop0): 1 truncate cleaned up [ 194.681292][ T7593] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 194.895947][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 194.925833][ T7603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.933705][ T7603] IPv6: NLM_F_CREATE should be set when creating new route [ 195.134260][ T7612] device syzkaller0 entered promiscuous mode [ 195.330462][ T7618] device syzkaller0 entered promiscuous mode [ 195.439730][ T7616] device syzkaller0 entered promiscuous mode [ 195.725684][ T7643] loop0: detected capacity change from 0 to 64 [ 196.840608][ T7659] loop1: detected capacity change from 0 to 512 [ 196.887970][ T7659] EXT4-fs (loop1): Ignoring removed nobh option [ 196.963591][ T7659] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 196.983320][ T7659] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1124: attempt to clear invalid blocks 1 len 1 [ 196.997104][ T7659] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 197.011753][ T7659] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1124: invalid indirect mapped block 1819239214 (level 0) [ 197.026899][ T7659] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1124: invalid indirect mapped block 1819239214 (level 1) [ 197.042829][ T7659] EXT4-fs (loop1): 1 truncate cleaned up [ 197.048517][ T7659] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 197.664343][ T7657] device syzkaller0 entered promiscuous mode [ 197.851788][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 197.883739][ T7675] device syzkaller0 entered promiscuous mode [ 198.158027][ T7691] xt_CT: No such helper "snmp" [ 198.451265][ T7696] device syzkaller0 entered promiscuous mode [ 199.148372][ T7707] device lo entered promiscuous mode [ 199.180996][ T7707] device tunl0 entered promiscuous mode [ 199.227907][ T7707] device gre0 entered promiscuous mode [ 199.333793][ T7707] device gretap0 entered promiscuous mode [ 199.403914][ T7707] device erspan0 entered promiscuous mode [ 199.434200][ T7707] device ip_vti0 entered promiscuous mode [ 199.573856][ T7714] loop0: detected capacity change from 0 to 512 [ 199.747201][ T7714] EXT4-fs (loop0): Ignoring removed nobh option [ 199.930354][ T7714] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 199.955418][ T7714] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1142: attempt to clear invalid blocks 1 len 1 [ 199.973808][ T7714] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 199.988820][ T7714] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1142: invalid indirect mapped block 1819239214 (level 0) [ 200.006999][ T7714] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1142: invalid indirect mapped block 1819239214 (level 1) [ 200.038201][ T7714] EXT4-fs (loop0): 1 truncate cleaned up [ 200.044134][ T7714] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 200.225372][ T7707] device ip6_vti0 entered promiscuous mode [ 200.268789][ T7707] device sit0 entered promiscuous mode [ 200.286613][ T7707] device ip6tnl0 entered promiscuous mode [ 200.422900][ T7707] device ip6gre0 entered promiscuous mode [ 200.451466][ T7707] device syz_tun entered promiscuous mode [ 200.505740][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.513261][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.524071][ T7707] device bridge0 entered promiscuous mode [ 200.571456][ T7707] device vcan0 entered promiscuous mode [ 200.593031][ T7707] device bond0 entered promiscuous mode [ 200.598668][ T7707] device bond_slave_0 entered promiscuous mode [ 200.622988][ T7707] device bond_slave_1 entered promiscuous mode [ 200.666702][ T7707] device team0 entered promiscuous mode [ 200.672338][ T7707] device team_slave_0 entered promiscuous mode [ 200.679355][ T7707] device team_slave_1 entered promiscuous mode [ 200.710374][ T7707] device dummy0 entered promiscuous mode [ 200.731763][ T7707] device nlmon0 entered promiscuous mode [ 200.740123][ T7707] device caif0 entered promiscuous mode [ 200.752459][ T7707] device batadv0 entered promiscuous mode [ 200.768967][ T7707] device vxcan0 entered promiscuous mode [ 200.781131][ T7707] device vxcan1 entered promiscuous mode [ 200.790817][ T7707] device veth0 entered promiscuous mode [ 200.808378][ T7707] device veth1 entered promiscuous mode [ 200.830021][ T7707] device wg0 entered promiscuous mode [ 200.839764][ T7707] device wg1 entered promiscuous mode [ 200.848444][ T7707] device wg2 entered promiscuous mode [ 200.857137][ T7707] device veth0_to_bridge entered promiscuous mode [ 200.972012][ T7707] device veth1_to_bridge entered promiscuous mode [ 201.017565][ T7707] device veth0_to_bond entered promiscuous mode [ 201.055468][ T7707] device veth1_to_bond entered promiscuous mode [ 201.093668][ T7707] device veth0_to_team entered promiscuous mode [ 201.138972][ T7707] device veth1_to_team entered promiscuous mode [ 201.185545][ T7707] device veth0_to_batadv entered promiscuous mode [ 201.201415][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.223455][ T7707] device batadv_slave_0 entered promiscuous mode [ 201.253721][ T7707] device veth1_to_batadv entered promiscuous mode [ 201.262438][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.291036][ T7707] device batadv_slave_1 entered promiscuous mode [ 201.324135][ T7707] device xfrm0 entered promiscuous mode [ 201.351930][ T7707] device veth0_to_hsr entered promiscuous mode [ 201.396747][ T7707] device veth1_to_hsr entered promiscuous mode [ 201.443490][ T7707] device hsr0 entered promiscuous mode [ 201.471547][ T7707] device veth1_virt_wifi entered promiscuous mode [ 201.500544][ T7707] device veth0_virt_wifi entered promiscuous mode [ 201.509956][ T7707] device virt_wifi0 entered promiscuous mode [ 201.585905][ T7707] device vlan0 entered promiscuous mode [ 201.591685][ T7707] device vlan1 entered promiscuous mode [ 201.613338][ T7707] device macvlan0 entered promiscuous mode [ 201.665014][ T7707] device macvlan1 entered promiscuous mode [ 201.679603][ T7707] device ipvlan0 entered promiscuous mode [ 201.690939][ T7707] device ipvlan1 entered promiscuous mode [ 201.711070][ T7707] device macvtap0 entered promiscuous mode [ 201.741324][ T7707] device macsec0 entered promiscuous mode [ 201.781851][ T7707] device geneve0 entered promiscuous mode [ 201.802942][ T7707] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.811917][ T7707] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.821168][ T7707] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.837326][ T7707] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.848357][ T7707] device geneve1 entered promiscuous mode [ 201.883090][ T7707] device netdevsim0 entered promiscuous mode [ 201.905566][ T7707] device netdevsim1 entered promiscuous mode [ 201.926470][ T7707] device netdevsim2 entered promiscuous mode [ 201.947699][ T7707] device netdevsim3 entered promiscuous mode [ 201.983198][ T7707] device wlan0 entered promiscuous mode [ 202.000686][ T7707] device wlan1 entered promiscuous mode [ 202.009478][ T7707] device bond1 entered promiscuous mode [ 202.016362][ T7707] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.025573][ T7707] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.034578][ T7707] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.043501][ T7707] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.059247][ T7707] device  entered promiscuous mode [ 202.079899][ T7707] device gre1 entered promiscuous mode [ 202.335471][ T7738] device syzkaller0 entered promiscuous mode [ 202.374811][ T7740] device syzkaller0 entered promiscuous mode [ 203.201218][ T7747] xt_CT: No such helper "snmp" [ 204.943484][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 205.261504][ T7758] device syzkaller0 entered promiscuous mode [ 205.280462][ T7763] device lo entered promiscuous mode [ 205.341262][ T7763] device tunl0 entered promiscuous mode [ 205.366964][ T7763] device gre0 entered promiscuous mode [ 205.454957][ T7763] device gretap0 entered promiscuous mode [ 205.484554][ T7763] device erspan0 entered promiscuous mode [ 205.513197][ T7763] device ip_vti0 entered promiscuous mode [ 205.535083][ T7763] device ip6_vti0 entered promiscuous mode [ 205.565721][ T7763] device sit0 entered promiscuous mode [ 205.615771][ T7763] device ip6tnl0 entered promiscuous mode [ 205.644761][ T7763] device ip6gre0 entered promiscuous mode [ 205.674228][ T7763] device syz_tun entered promiscuous mode [ 205.704211][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.711849][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.719847][ T7763] device bridge0 entered promiscuous mode [ 205.748333][ T7763] device vcan0 entered promiscuous mode [ 205.761957][ T7763] device bond0 entered promiscuous mode [ 205.767749][ T7763] device bond_slave_0 entered promiscuous mode [ 205.774647][ T7763] device bond_slave_1 entered promiscuous mode [ 205.805442][ T7763] device team0 entered promiscuous mode [ 205.811047][ T7763] device team_slave_0 entered promiscuous mode [ 205.817595][ T7763] device team_slave_1 entered promiscuous mode [ 205.848191][ T7763] device dummy0 entered promiscuous mode [ 205.878616][ T7763] device nlmon0 entered promiscuous mode [ 205.887344][ T7763] device caif0 entered promiscuous mode [ 205.907681][ T7763] device batadv0 entered promiscuous mode [ 205.938384][ T7763] device vxcan0 entered promiscuous mode [ 205.952011][ T7763] device vxcan1 entered promiscuous mode [ 205.966185][ T7763] device veth0 entered promiscuous mode [ 205.996090][ T7763] device veth1 entered promiscuous mode [ 206.027214][ T7763] device wg0 entered promiscuous mode [ 206.049664][ T7763] device wg1 entered promiscuous mode [ 206.071882][ T7763] device wg2 entered promiscuous mode [ 206.094918][ T7763] device veth0_to_bridge entered promiscuous mode [ 206.138838][ T7763] device veth1_to_bridge entered promiscuous mode [ 206.182307][ T7763] device veth0_to_bond entered promiscuous mode [ 206.219944][ T7763] device veth1_to_bond entered promiscuous mode [ 206.257073][ T7763] device veth0_to_team entered promiscuous mode [ 206.301084][ T7763] device veth1_to_team entered promiscuous mode [ 206.344971][ T7763] device veth0_to_batadv entered promiscuous mode [ 206.355503][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.373087][ T7763] device batadv_slave_0 entered promiscuous mode [ 206.401898][ T7763] device veth1_to_batadv entered promiscuous mode [ 206.414648][ T7763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.428042][ T7763] device batadv_slave_1 entered promiscuous mode [ 206.461472][ T7763] device xfrm0 entered promiscuous mode [ 206.488695][ T7763] device veth0_to_hsr entered promiscuous mode [ 206.516721][ T7763] device hsr_slave_0 entered promiscuous mode [ 206.538601][ T7763] device veth1_to_hsr entered promiscuous mode [ 206.567405][ T7763] device hsr_slave_1 entered promiscuous mode [ 206.589997][ T7763] device veth1_virt_wifi entered promiscuous mode [ 206.617874][ T7763] device veth0_virt_wifi entered promiscuous mode [ 206.626605][ T7763] device virt_wifi0 entered promiscuous mode [ 206.688345][ T7763] device vlan0 entered promiscuous mode [ 206.695748][ T7763] device vlan1 entered promiscuous mode [ 206.702429][ T7763] device macvlan0 entered promiscuous mode [ 206.760046][ T7763] device macvlan1 entered promiscuous mode [ 206.783943][ T7763] device ipvlan0 entered promiscuous mode [ 206.789894][ T7763] device ipvlan1 entered promiscuous mode [ 206.857449][ T7763] device macvtap0 entered promiscuous mode [ 206.887234][ T7763] device macsec0 entered promiscuous mode [ 206.916667][ T7763] device geneve0 entered promiscuous mode [ 206.945492][ T7763] device geneve1 entered promiscuous mode [ 206.973672][ T7763] device netdevsim0 entered promiscuous mode [ 207.002463][ T7763] device netdevsim1 entered promiscuous mode [ 207.023888][ T7763] device netdevsim2 entered promiscuous mode [ 207.045030][ T7763] device netdevsim3 entered promiscuous mode [ 207.060982][ T7763] device wlan0 entered promiscuous mode [ 207.075932][ T7763] device wlan1 entered promiscuous mode [ 207.087793][ T7763] device gre1 entered promiscuous mode [ 207.136438][ T7763] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.147837][ T7763] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.159310][ T7763] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.168805][ T7763] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.229241][ T7762] device syzkaller0 entered promiscuous mode [ 207.469347][ T7777] device syzkaller0 entered promiscuous mode [ 207.655253][ T7789] xt_CT: No such helper "snmp" [ 207.977956][ T7797] loop2: detected capacity change from 0 to 512 [ 208.767956][ T7797] EXT4-fs (loop2): Ignoring removed nobh option [ 208.834184][ T7797] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 208.858679][ T7797] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1163: attempt to clear invalid blocks 1 len 1 [ 208.872207][ T7797] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 208.886639][ T7797] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1163: invalid indirect mapped block 1819239214 (level 0) [ 208.901404][ T7797] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1163: invalid indirect mapped block 1819239214 (level 1) [ 208.916362][ T7797] EXT4-fs (loop2): 1 truncate cleaned up [ 208.922056][ T7797] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 209.029590][ T7805] device syzkaller0 entered promiscuous mode [ 209.277200][ T7814] device syzkaller0 entered promiscuous mode [ 209.374575][ T7812] device syzkaller0 entered promiscuous mode [ 209.532207][ T7821] smc: net device vlan1 applied user defined pnetid SYZ2 [ 209.722054][ T7830] xt_CT: No such helper "snmp" [ 210.916167][ T7852] device syzkaller0 entered promiscuous mode [ 211.015312][ T7861] loop3: detected capacity change from 0 to 64 [ 212.641190][ T7868] xt_CT: No such helper "snmp" [ 213.348159][ T7888] device syzkaller0 entered promiscuous mode [ 213.432985][ T7896] device syzkaller0 entered promiscuous mode [ 213.765789][ T7904] device syzkaller0 entered promiscuous mode [ 213.884323][ T7917] loop0: detected capacity change from 0 to 64 [ 215.156011][ T7935] device syzkaller0 entered promiscuous mode [ 215.382614][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 215.392636][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 215.402617][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 215.412615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 215.422619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 215.432615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 215.442613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 215.452630][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 215.462615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 215.573349][ T7956] loop4: detected capacity change from 0 to 64 [ 215.700640][ T7957] loop1: detected capacity change from 0 to 512 [ 216.468244][ T7957] EXT4-fs (loop1): Ignoring removed nobh option [ 216.752728][ T7957] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 216.761880][ T7957] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1221: attempt to clear invalid blocks 1 len 1 [ 216.776923][ T7957] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 216.791414][ T7957] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1221: invalid indirect mapped block 1819239214 (level 0) [ 216.807230][ T7957] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1221: invalid indirect mapped block 1819239214 (level 1) [ 216.825992][ T7957] EXT4-fs (loop1): 1 truncate cleaned up [ 216.831677][ T7957] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 216.955746][ T7946] device syzkaller0 entered promiscuous mode [ 217.291267][ T7976] tipc: Failed to remove unknown binding: 66,0,0/0:320348776/320348778 [ 217.320394][ T7976] tipc: Failed to remove unknown binding: 66,0,0/0:320348776/320348777 [ 217.409169][ T7983] tipc: Failed to remove unknown binding: 66,0,0/0:320348776/320348778 [ 217.422704][ T7983] tipc: Failed to remove unknown binding: 66,0,0/0:320348776/320348777 [ 218.059500][ T8010] loop3: detected capacity change from 0 to 512 [ 218.791201][ T8011] loop1: detected capacity change from 0 to 64 [ 218.800670][ T8010] EXT4-fs (loop3): Ignoring removed nobh option [ 218.906536][ T8010] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 218.916436][ T8010] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1233: attempt to clear invalid blocks 1 len 1 [ 218.933472][ T8010] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 218.947933][ T8010] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1233: invalid indirect mapped block 1819239214 (level 0) [ 218.965555][ T8010] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1233: invalid indirect mapped block 1819239214 (level 1) [ 218.989761][ T8010] EXT4-fs (loop3): 1 truncate cleaned up [ 218.995494][ T8010] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 219.338475][ T8009] device syzkaller0 entered promiscuous mode [ 219.758990][ T8019] device syzkaller0 entered promiscuous mode [ 220.070569][ T8055] tipc: Enabled bearer , priority 0 [ 220.121464][ T8055] tipc: Resetting bearer [ 220.145936][ T8062] tipc: Failed to remove unknown binding: 66,0,0/0:3632258578/3632258580 [ 220.179815][ T8062] tipc: Failed to remove unknown binding: 66,0,0/0:3632258578/3632258579 [ 220.262535][ T8070] loop2: detected capacity change from 0 to 64 [ 220.344630][ T8068] tipc: Failed to remove unknown binding: 66,0,0/0:3632258578/3632258580 [ 220.492079][ T8068] tipc: Failed to remove unknown binding: 66,0,0/0:3632258578/3632258579 [ 220.653338][ T8054] tipc: Disabling bearer [ 222.002449][ T8089] device syzkaller0 entered promiscuous mode [ 222.124227][ T8097] netlink: 'syz.2.1253': attribute type 3 has an invalid length. [ 222.171352][ T8091] device syzkaller0 entered promiscuous mode [ 222.189474][ T8091] tipc: Enabled bearer , priority 0 [ 222.229925][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1253'. [ 222.249523][ T8091] tipc: Resetting bearer [ 222.282826][ T8087] tipc: Resetting bearer [ 222.333631][ T8087] tipc: Disabling bearer [ 222.393721][ T8104] device vlan2 entered promiscuous mode [ 222.400953][ T8110] sctp: [Deprecated]: syz.0.1261 (pid 8110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.400953][ T8110] Use struct sctp_sack_info instead [ 222.587647][ T8104] syz.1.1259 (8104) used greatest stack depth: 20624 bytes left [ 222.613585][ T8121] loop0: detected capacity change from 0 to 64 [ 222.779095][ T8120] tipc: Failed to remove unknown binding: 66,0,0/0:3893856592/3893856594 [ 222.898499][ T8120] tipc: Failed to remove unknown binding: 66,0,0/0:3893856592/3893856593 [ 223.423007][ T8123] tipc: Failed to remove unknown binding: 66,0,0/0:3893856592/3893856594 [ 223.491807][ T8123] tipc: Failed to remove unknown binding: 66,0,0/0:3893856592/3893856593 [ 223.681572][ T8129] device syzkaller0 entered promiscuous mode [ 223.896416][ T8143] loop1: detected capacity change from 0 to 512 [ 224.096882][ T8143] EXT4-fs (loop1): Ignoring removed nobh option [ 224.272335][ T8143] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 224.288023][ T8143] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1271: attempt to clear invalid blocks 1 len 1 [ 224.303972][ T8143] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 224.319091][ T8143] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1271: invalid indirect mapped block 1819239214 (level 0) [ 224.335690][ T8143] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1271: invalid indirect mapped block 1819239214 (level 1) [ 224.363974][ T8143] EXT4-fs (loop1): 1 truncate cleaned up [ 224.369793][ T8143] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 224.751617][ T8147] device syzkaller0 entered promiscuous mode [ 224.815936][ T8147] tipc: Enabled bearer , priority 0 [ 224.888488][ T8147] tipc: Resetting bearer [ 224.905270][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'. [ 224.957208][ T8146] tipc: Resetting bearer [ 224.975808][ T8146] tipc: Disabling bearer [ 225.932990][ T8178] sctp: [Deprecated]: syz.1.1286 (pid 8178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.932990][ T8178] Use struct sctp_sack_info instead [ 226.173514][ T8184] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 226.370522][ T8194] loop2: detected capacity change from 0 to 512 [ 226.508165][ T8194] EXT4-fs (loop2): Ignoring removed nobh option [ 226.716837][ T8194] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 226.729779][ T8194] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1288: attempt to clear invalid blocks 1 len 1 [ 226.747012][ T8194] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 226.761966][ T8194] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1288: invalid indirect mapped block 1819239214 (level 0) [ 226.780198][ T8194] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1288: invalid indirect mapped block 1819239214 (level 1) [ 226.801385][ T8194] EXT4-fs (loop2): 1 truncate cleaned up [ 226.807207][ T8194] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 227.226573][ T8174] ODEBUG: Out of memory. ODEBUG disabled [ 227.308362][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 227.442511][ T8207] tipc: Enabled bearer , priority 0 [ 227.461351][ T8207] device syzkaller0 entered promiscuous mode [ 227.489076][ T8207] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 227.538766][ T8207] tipc: Resetting bearer [ 227.588844][ T8206] tipc: Resetting bearer [ 227.624117][ T8206] tipc: Disabling bearer [ 227.853906][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 228.188556][ T8223] device syzkaller0 entered promiscuous mode [ 228.854736][ T8227] device syzkaller0 entered promiscuous mode [ 229.261162][ T8237] syz.1.1308 (8237) used greatest stack depth: 18480 bytes left [ 229.366250][ T8260] policy can only be matched on NF_INET_PRE_ROUTING [ 229.366270][ T8260] unable to load match [ 229.526038][ T8270] device syzkaller0 entered promiscuous mode [ 229.552439][ T8274] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1321'. [ 229.565306][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.572857][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.660185][ T8276] device syzkaller0 entered promiscuous mode [ 229.675994][ T8277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1321'. [ 229.693256][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.700436][ T8277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.707954][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.715074][ T8277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.730683][ T8277] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1321'. [ 229.740511][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.748220][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.998491][ T8287] device syzkaller0 entered promiscuous mode [ 230.023651][ T8287] tipc: Enabled bearer , priority 0 [ 230.043068][ T8287] tipc: Resetting bearer [ 230.051638][ T8286] tipc: Resetting bearer [ 230.073787][ T8286] tipc: Disabling bearer [ 230.180330][ T8294] device syzkaller0 entered promiscuous mode [ 230.790982][ T8320] loop1: detected capacity change from 0 to 512 [ 230.944503][ T8320] EXT4-fs (loop1): Ignoring removed nobh option [ 231.145335][ T8320] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 231.158667][ T8320] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1334: attempt to clear invalid blocks 1 len 1 [ 231.176726][ T8320] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 231.191894][ T8320] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1334: invalid indirect mapped block 1819239214 (level 0) [ 231.208376][ T8320] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1334: invalid indirect mapped block 1819239214 (level 1) [ 231.232094][ T8320] EXT4-fs (loop1): 1 truncate cleaned up [ 231.237969][ T8320] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 231.598501][ T8332] device syzkaller0 entered promiscuous mode [ 231.633704][ T8334] device syzkaller0 entered promiscuous mode [ 231.731922][ T8334] tipc: Enabled bearer , priority 0 [ 231.773158][ T8334] tipc: Resetting bearer [ 231.880946][ T8343] device syzkaller0 entered promiscuous mode [ 231.914673][ T8329] tipc: Resetting bearer [ 231.948564][ T8329] tipc: Disabling bearer [ 232.578288][ T8374] loop0: detected capacity change from 0 to 64 [ 232.604791][ T8371] device syzkaller0 entered promiscuous mode [ 233.536449][ T8383] tipc: Enabled bearer , priority 0 [ 233.555587][ T8383] tipc: Resetting bearer [ 233.585871][ T8384] device syzkaller0 entered promiscuous mode [ 233.595322][ T8382] tipc: Disabling bearer [ 233.896397][ T8394] ip_tables: iptables: counters copy to user failed while replacing table [ 234.160125][ T8403] device syzkaller0 entered promiscuous mode [ 234.190124][ T8403] 0: reclassify loop, rule prio 0, protocol 700 [ 234.227033][ T8401] device syzkaller0 entered promiscuous mode [ 234.640952][ T8417] device syzkaller0 entered promiscuous mode [ 235.159465][ T8447] device syzkaller0 entered promiscuous mode [ 235.181786][ T8447] tipc: Enabled bearer , priority 0 [ 235.250701][ T8447] tipc: Resetting bearer [ 235.284809][ T8446] tipc: Resetting bearer [ 235.323562][ T8446] tipc: Disabling bearer [ 235.779464][ T8459] device syzkaller0 entered promiscuous mode [ 235.874715][ T8463] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1394'. [ 236.314003][ T8481] tipc: Enabled bearer , priority 0 [ 236.361037][ T8481] tipc: Resetting bearer [ 236.388943][ T8480] tipc: Disabling bearer [ 236.409357][ T8486] device syzkaller0 entered promiscuous mode [ 237.005077][ T8513] device syzkaller0 entered promiscuous mode [ 237.026479][ T8515] tipc: Enabled bearer , priority 0 [ 237.106753][ T8515] tipc: Resetting bearer [ 237.134366][ T8514] tipc: Disabling bearer [ 237.734105][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 238.573504][ T8568] device syzkaller0 entered promiscuous mode [ 239.407510][ T8579] device syzkaller0 entered promiscuous mode [ 239.607058][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 239.645416][ T8584] device syzkaller0 entered promiscuous mode [ 239.851115][ T8599] device syzkaller0 entered promiscuous mode [ 239.959437][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 240.096715][ T8607] ip_tables: iptables: counters copy to user failed while replacing table [ 240.169425][ T8611] device syzkaller0 entered promiscuous mode [ 240.676356][ T8636] device lo entered promiscuous mode [ 240.748348][ T8636] device tunl0 entered promiscuous mode [ 240.788351][ T8636] device gre0 entered promiscuous mode [ 240.938320][ T8636] device gretap0 entered promiscuous mode [ 240.999428][ T8636] device erspan0 entered promiscuous mode [ 241.043833][ T8636] device ip_vti0 entered promiscuous mode [ 241.065487][ T8636] device ip6_vti0 entered promiscuous mode [ 241.102114][ T8636] device sit0 entered promiscuous mode [ 241.166912][ T8636] device ip6tnl0 entered promiscuous mode [ 241.196392][ T8636] device ip6gre0 entered promiscuous mode [ 241.225248][ T8636] device syz_tun entered promiscuous mode [ 241.263023][ T8636] device ip6gretap0 entered promiscuous mode [ 241.322086][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.329397][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.337491][ T8636] device bridge0 entered promiscuous mode [ 241.366520][ T8636] device vcan0 entered promiscuous mode [ 241.381412][ T8636] device bond0 entered promiscuous mode [ 241.387745][ T8636] device bond_slave_0 entered promiscuous mode [ 241.394338][ T8636] device bond_slave_1 entered promiscuous mode [ 241.416858][ T8636] device team0 entered promiscuous mode [ 241.424654][ T8636] device team_slave_0 entered promiscuous mode [ 241.431025][ T8636] device team_slave_1 entered promiscuous mode [ 241.462094][ T8636] device dummy0 entered promiscuous mode [ 241.495018][ T8636] device nlmon0 entered promiscuous mode [ 241.517269][ T8636] device caif0 entered promiscuous mode [ 241.523456][ T8636] device batadv0 entered promiscuous mode [ 241.554288][ T8636] device vxcan0 entered promiscuous mode [ 241.567627][ T8636] device vxcan1 entered promiscuous mode [ 241.581526][ T8636] device veth0 entered promiscuous mode [ 241.608779][ T8636] device veth1 entered promiscuous mode [ 241.638207][ T8636] device wg0 entered promiscuous mode [ 241.658761][ T8636] device wg1 entered promiscuous mode [ 241.679676][ T8636] device wg2 entered promiscuous mode [ 241.700244][ T8636] device veth0_to_bridge entered promiscuous mode [ 241.745317][ T8636] device veth1_to_bridge entered promiscuous mode [ 241.789601][ T8636] device veth0_to_bond entered promiscuous mode [ 241.824588][ T8636] device veth1_to_bond entered promiscuous mode [ 241.854098][ T8636] device veth0_to_team entered promiscuous mode [ 241.871460][ T8636] device veth1_to_team entered promiscuous mode [ 241.899040][ T8636] device veth0_to_batadv entered promiscuous mode [ 241.915700][ T8636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.924252][ T8636] device batadv_slave_0 entered promiscuous mode [ 241.950145][ T8636] device veth1_to_batadv entered promiscuous mode [ 241.959536][ T8636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.967612][ T8636] device batadv_slave_1 entered promiscuous mode [ 241.984310][ T8636] device xfrm0 entered promiscuous mode [ 242.004979][ T8636] device veth0_to_hsr entered promiscuous mode [ 242.052773][ T8636] device veth1_to_hsr entered promiscuous mode [ 242.096425][ T8636] device hsr0 entered promiscuous mode [ 242.121820][ T8636] device veth1_virt_wifi entered promiscuous mode [ 242.145974][ T8636] device veth0_virt_wifi entered promiscuous mode [ 242.155961][ T8636] device virt_wifi0 entered promiscuous mode [ 242.193049][ T8636] device vlan0 entered promiscuous mode [ 242.198893][ T8636] device vlan1 entered promiscuous mode [ 242.216347][ T8636] device macvlan0 entered promiscuous mode [ 242.243014][ T8636] device macvlan1 entered promiscuous mode [ 242.263495][ T8636] device ipvlan0 entered promiscuous mode [ 242.269438][ T8636] device ipvlan1 entered promiscuous mode [ 242.295639][ T8636] device macvtap0 entered promiscuous mode [ 242.304203][ T8636] device macsec0 entered promiscuous mode [ 242.312950][ T8636] device geneve0 entered promiscuous mode [ 242.321695][ T8636] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.331084][ T8636] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.340496][ T8636] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.349970][ T8636] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.359288][ T8636] device geneve1 entered promiscuous mode [ 242.380512][ T8636] device netdevsim0 entered promiscuous mode [ 242.397210][ T8636] device netdevsim1 entered promiscuous mode [ 242.418260][ T8636] device netdevsim2 entered promiscuous mode [ 242.442947][ T8636] device netdevsim3 entered promiscuous mode [ 242.452025][ T8636] device wlan0 entered promiscuous mode [ 242.471663][ T8636] device wlan1 entered promiscuous mode [ 242.488441][ T8636] device gtp0 entered promiscuous mode [ 242.504209][ T8636] device bridge1 entered promiscuous mode [ 242.513235][ T8636] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.522162][ T8636] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.531157][ T8636] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.540188][ T8636] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.554449][ T8636] device  entered promiscuous mode [ 242.570925][ T8636] device bridge2 entered promiscuous mode [ 242.606898][ T8636] device gre1 entered promiscuous mode [ 242.648231][ T8658] tipc: Enabled bearer , priority 0 [ 242.756085][ T8672] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 242.764965][ T8672] netlink: 'syz.4.1480': attribute type 2 has an invalid length. [ 242.791293][ T8658] tipc: Disabling bearer [ 242.931853][ T8675] device syzkaller0 entered promiscuous mode [ 242.970713][ T8675] tipc: Enabled bearer , priority 0 [ 243.035755][ T8675] tipc: Resetting bearer [ 243.060298][ T8674] tipc: Resetting bearer [ 243.085171][ T8674] tipc: Disabling bearer [ 243.115297][ T8689] device syzkaller0 entered promiscuous mode [ 243.276800][ T8699] device syzkaller0 entered promiscuous mode [ 243.606729][ T8710] tipc: Enabling of bearer rejected, failed to enable media [ 243.861221][ T8731] device syzkaller0 entered promiscuous mode [ 243.979676][ T8736] device syzkaller0 entered promiscuous mode [ 244.027007][ T8743] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1504'. [ 244.040251][ T8738] netlink: 'syz.4.1504': attribute type 1 has an invalid length. [ 244.072418][ T8738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.196966][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 244.278280][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 244.341976][ T8762] xt_hashlimit: size too large, truncated to 1048576 [ 244.402413][ T8766] tipc: Enabling of bearer rejected, failed to enable media [ 244.545022][ T8773] device syzkaller0 entered promiscuous mode [ 244.666403][ T8778] device syzkaller0 entered promiscuous mode [ 244.880040][ T8787] device syzkaller0 entered promiscuous mode [ 245.158929][ T8796] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1522'. [ 245.487016][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1526'. [ 245.632088][ T8810] device syzkaller0 entered promiscuous mode [ 245.669401][ T8815] device syzkaller0 entered promiscuous mode [ 245.731859][ T8807] tipc: Enabling of bearer rejected, failed to enable media [ 245.989560][ T8826] device syzkaller0 entered promiscuous mode [ 246.197198][ T8839] device syzkaller0 entered promiscuous mode [ 246.442995][ T155] BUG: using __this_cpu_add() in preemptible [00000000] code: kworker/u4:3/155 [ 246.452500][ T155] caller is nf_flow_offload_del+0xba/0x190 [ 246.458696][ T155] CPU: 1 PID: 155 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 246.466185][ T155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.476273][ T155] Workqueue: act_ct_workqueue tcf_ct_flow_table_cleanup_work [ 246.483839][ T155] Call Trace: [ 246.487182][ T155] [ 246.490194][ T155] dump_stack_lvl+0x188/0x250 [ 246.494946][ T155] ? show_regs_print_info+0x20/0x20 [ 246.500171][ T155] ? load_image+0x410/0x410 [ 246.504706][ T155] check_preemption_disabled+0x104/0x110 [ 246.510425][ T155] nf_flow_offload_del+0xba/0x190 [ 246.515481][ T155] nf_flow_table_iterate+0x132/0x1e0 [ 246.520819][ T155] ? nf_flow_table_iterate+0x1e0/0x1e0 [ 246.526307][ T155] ? nf_flow_table_gc_run+0x20/0x20 [ 246.531547][ T155] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 246.537669][ T155] nf_flow_table_free+0x12f/0x150 [ 246.542728][ T155] tcf_ct_flow_table_cleanup_work+0x29/0x1d0 [ 246.548732][ T155] ? _raw_spin_unlock_irq+0x1f/0x40 [ 246.554045][ T155] process_one_work+0x867/0xff0 [ 246.558988][ T155] ? worker_detach_from_pool+0x240/0x240 [ 246.564641][ T155] ? lockdep_hardirqs_off+0x70/0x100 [ 246.569959][ T155] ? _raw_spin_lock_irq+0xb7/0xf0 [ 246.575004][ T155] ? _raw_spin_lock_irqsave+0x100/0x100 [ 246.580570][ T155] ? wq_worker_running+0x97/0x170 [ 246.585630][ T155] worker_thread+0xad7/0x12a0 [ 246.590343][ T155] kthread+0x42e/0x520 [ 246.594521][ T155] ? rcu_lock_release+0x20/0x20 [ 246.599392][ T155] ? kthread_blkcg+0xd0/0xd0 [ 246.604001][ T155] ret_from_fork+0x1f/0x30 [ 246.608468][ T155] [ 249.081678][ T8835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.535150][ T1419] ieee802154 phy1 wpan1: encryption failed: -22