last executing test programs: 1.69635148s ago: executing program 2 (id=2048): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xdc45, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x4000b69, 0x4000c1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1080, 0xd, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x9, 0x4, 0xb, 0x0, 0xbed4, 0x8, 0x80000fe, 0x3, 0x0, 0x11000, 0x80000000, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x6, 0x180000, 0x400a, 0x8b, 0x805, 0x2af, 0x0, 0x5, 0x5, 0x6, 0x5, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x7, 0x752, 0x0, 0x1003, 0x8, 0xffff, 0x6, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x84, 0x800100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0x45c, 0xffffffff]}}) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.600202085s ago: executing program 2 (id=2052): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000340)={{r3}, "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"}) pread64(r2, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 1.436277293s ago: executing program 2 (id=2055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x20000000002) 1.28737136s ago: executing program 0 (id=2058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)=@ethtool_eeprom={0x4f, 0xcd, 0x7}}) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x14, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff458}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[@ANYRES8=r6], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) 1.108234298s ago: executing program 4 (id=2063): syz_emit_ethernet(0x103, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1c0000005e0001000000000000000000000000000200000008000000", 0x1c}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600180f200140600fe8000000000000000000000000000bbfe8000000000000000000000000000bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0500000000000000"], 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe, 0x9, 0x100, 0x7b, @private1, @loopback, 0x10, 0x20, 0x1, 0xf9}}) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000009b40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002c00)="b5", 0x1}], 0x1, &(0x7f0000005f00)=[@mark={{0x14, 0x1, 0x24, 0xff}}], 0x18}}], 0x1, 0x4000000) 1.038582501s ago: executing program 1 (id=2064): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20, 0x10000}, 0x40) 1.027825742s ago: executing program 3 (id=2065): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000840000000100"], 0x38, 0x4855}, 0x24000052) 972.211864ms ago: executing program 4 (id=2066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@allocspi={0x10c, 0x16, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x200, 0x4e20, 0x0, 0xcae7388a885de62c, 0xe0, 0x20, 0x3b}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, {0x9, 0x100000001, 0x6, 0x2, 0x1, 0x7, 0xc0d, 0x9}, {0xffffffff7fffffff, 0x0, 0x8000000000000, 0x2}, {0x7, 0x2000000, 0x488}, 0x70bd26, 0x3505, 0x2, 0x86fa708a8da4f410, 0x6, 0x82}, 0x0, 0xe}, [@iptfs_pkt_size={0x8, 0x29, 0x3}, @lastused={0xc, 0xf, 0xb432}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x4040888) 925.383386ms ago: executing program 3 (id=2067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x7, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 885.443228ms ago: executing program 0 (id=2068): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x70bd26, 0x1001, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 840.23002ms ago: executing program 4 (id=2069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffff11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a0}, 0x200084c4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 840.06491ms ago: executing program 1 (id=2070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000015c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 714.399647ms ago: executing program 3 (id=2071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 698.998097ms ago: executing program 4 (id=2072): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x0, {0x5555555555550281}}}, 0x14) sendmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=[{0x10, 0x84, 0x3}], 0x10}}], 0x1, 0x14) 648.33955ms ago: executing program 1 (id=2073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, 0x0, 0x40010) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0xc050) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) unshare(0x22020400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f0000000700)=0xfffffffe, 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x80000000, 0x8}, 0xc) 630.71897ms ago: executing program 4 (id=2074): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500090007"], 0x7c}}, 0x0) 590.825292ms ago: executing program 2 (id=2075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 563.355623ms ago: executing program 4 (id=2076): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d00000002060000050002"], 0x1d}}, 0x24084000) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x3, 0x2}, 0x10) bind$tipc(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"6d637af0be24348db1de00", 0x0, 0x0, {0x7f, 0x8}, {0x4, 0xfffffffd}, 0x81, [0x1000000008, 0x8, 0x100, 0x2, 0x5, 0x7, 0x0, 0xfffffffffffffffd, 0x967, 0x40000000008, 0x8cb, 0x2, 0x3, 0x7fd, 0x3, 0x3ff]}) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000080)=0x5b7, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x16, 0x400c001, &(0x7f00000008c0)={0xa, 0x4e20, 0x7fffffc, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x1c) close(r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x9, 0xb9, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @local, {[@noop, @end, @lsrr={0x83, 0x7, 0xc, [@multicast1]}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x5, [{@multicast2, 0x400}, {@multicast1, 0x2}, {@multicast1}]}, @timestamp_prespec={0x44, 0x3c, 0x5, 0x3, 0x3, [{@local, 0x400}, {@broadcast, 0x1}, {@remote}, {@loopback, 0x8}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xf8000000}, {@multicast1, 0x326aa911}]}, @rr={0x7, 0x23, 0x80, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}]}, @timestamp_prespec={0x44, 0x2c, 0x3f, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@private=0xa010102}, {@rand_addr=0x64010101, 0x700}, {@loopback, 0x2}, {@multicast1, 0x3}]}, @end]}}}}}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000680)={r4, &(0x7f0000000580)='#&\x00', 0x401, 0x0, 0x6, &(0x7f0000000600), &(0x7f0000000640)=0x53ed12a0}) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x67f6022c, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @map_val={0x18, 0x7544a3006a793fe8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7fff, 0x26, &(0x7f0000000400)=""/38, 0x41000, 0x2d, '\x00', r5, @fallback=0x26, r6, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x2, 0x9, 0xa}, {0x1, 0x5, 0x9, 0xa}], 0x10, 0x67a}, 0x94) 547.080194ms ago: executing program 0 (id=2077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x664, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x638, 0x2, [@TCA_BPF_ACT={0x634, 0x1, [@m_bpf={0x124, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x30, 0x8, 0x0, 0x0, {{0x8}, {0x8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x4b0, 0x9, 0x0, 0x0, {{0xb}, {0x480, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x101, 0x3, 0x200, {0xf, 0x1, 0x1, 0x0, 0x5, 0xdb0}, {0x70, 0x1, 0x9, 0xda, 0x7, 0x9342}, 0x8, 0x2, 0xf}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x5, 0x7, 0x9, 0x53a4, 0x3, 0x6, 0x9, 0x7, 0x10, 0x3, 0x10002, 0x1, 0x6, 0xf9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0x3ff, 0x6, 0x0, 0xd, 0x4, 0x2, 0x4, 0x7ff, 0x9, 0x6, 0x3, 0x6, 0x4f, 0x4, 0x6, 0x4, 0x9, 0x6, 0x1, 0x7, 0xe, 0x2, 0xffffffff, 0x7, 0x8, 0x7a, 0x7fff, 0x3, 0x8, 0x7, 0x2, 0x2, 0xb, 0x745, 0x3, 0x0, 0x1, 0x8, 0x3, 0x5a6, 0x7, 0x4, 0x1a, 0x6, 0x8000, 0x2, 0x1794, 0x2, 0x7, 0x8, 0xe6, 0x9, 0x8, 0xe, 0x7, 0xab, 0x38e7, 0x60000000, 0x200, 0x5, 0xf, 0x4, 0xd2300000, 0xd, 0xf421e8c5, 0x4, 0x80000000, 0x2, 0x4, 0x9, 0x30f, 0xd, 0x87b8, 0xbb1f, 0x1a19, 0x1, 0x6, 0x36b, 0x2, 0x5, 0x80000001, 0x8000, 0xd3cc, 0x2, 0x9, 0xd2cc, 0x7, 0x4, 0x1, 0x6, 0x1ff, 0xe0000, 0x1, 0x260, 0x4, 0x8, 0x7fffffff, 0x2, 0xc6, 0x79, 0xac64, 0x0, 0x7, 0x6, 0x4, 0x6, 0x5, 0x8c, 0xcf41, 0x0, 0x0, 0x90, 0x4, 0x1, 0x10000, 0x7, 0xfff, 0x8, 0x1000, 0xffffffff, 0x2, 0x81, 0x6, 0x5, 0x8, 0xd6ed, 0x9, 0xffffffff, 0x9, 0x3, 0xc778, 0x1, 0x1ff, 0x6, 0x7, 0x6, 0x7f, 0xfff, 0x4, 0x4, 0x2, 0x80000000, 0x0, 0x3, 0x7, 0x8, 0x8, 0x7fffffff, 0x9b0, 0x4, 0x7f, 0x1, 0x0, 0x8, 0xd6, 0x3, 0x6, 0x8, 0x8, 0x8, 0x0, 0x3, 0x7ff, 0xfffffff4, 0x42e, 0x200, 0x3, 0xffffffff, 0x2, 0x8, 0xcf, 0x1, 0xef4, 0x7, 0x1, 0x80000000, 0x200, 0x3, 0x7, 0x2, 0x8, 0xd63, 0x4, 0xfffffffb, 0x9, 0x7, 0x2, 0x7, 0x8000, 0x9, 0x7, 0xc, 0x1, 0x1, 0xfffffffc, 0x3, 0xfffffa6a, 0x8, 0x80000001, 0x7ff, 0xfff, 0x4, 0x911f, 0x8, 0x8, 0x8, 0x3, 0x5, 0xf, 0x3ff, 0x51, 0x59ea8a2b, 0xfe2, 0x6, 0x5, 0x2, 0x8, 0x32a, 0xffffffff, 0x3, 0xfffffff8, 0x800, 0x9, 0x0, 0x4, 0x18, 0x7, 0xd, 0x4, 0x3, 0x40, 0x6, 0x1, 0x100, 0x200]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0xffffffffffffffff, 0x8001, 0x0, 0x7, {0x6, 0x1, 0xd, 0xd, 0x7f, 0x4}, {0x2, 0x0, 0x4, 0x8001, 0x7, 0x2}, 0x7fffffff, 0x5}}]]}, {0x5, 0x6, "94"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x664}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 498.004777ms ago: executing program 3 (id=2078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0)={r2, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) 384.473482ms ago: executing program 0 (id=2079): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x6f, 0x0, 0x1}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x10, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 384.179972ms ago: executing program 3 (id=2080): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 349.542213ms ago: executing program 3 (id=2081): pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080012400000000305001500090000000500010006000000050005000a00000005000400000000000900020073798530000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e0000001004e214e2204b1907840740e234b310000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 318.763325ms ago: executing program 1 (id=2082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 286.780256ms ago: executing program 2 (id=2083): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(0xffffffffffffffff, 0xfffffbeb) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e00080000"], 0x1c) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000020a000001162e04d200080000"], 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 226.31435ms ago: executing program 0 (id=2084): r0 = socket(0x10, 0x3, 0x0) unshare(0x24020400) shutdown(r0, 0x48e8a477d45de94a) 192.628431ms ago: executing program 0 (id=2085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x20000000002) 61.456237ms ago: executing program 1 (id=2086): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}], 0x1c) 18.435939ms ago: executing program 1 (id=2087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x6, 0x4, 0x6, 0x8, 0x14, 0x2}, @ipv4=@udp={{0xa, 0x4, 0x1, 0x9, 0x3c, 0x62, 0x0, 0x4, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xcd, 0x3, 0x6}, @rr={0x7, 0x3, 0x4b}, @noop, @generic={0x86, 0xb, "f3b9449692b66a9ae4"}]}}, {0x4e23, 0x4e20, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0xfb, 0x100, @void}, "66afe1c6f1349c2a"}}}}, 0x4a) 0s ago: executing program 2 (id=2088): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x70bd26, 0x1001, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): attributes in process `syz.0.17'. [ 59.531281][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 59.566047][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 59.699672][ T4361] ceph: No mds server is up or the cluster is laggy [ 59.784285][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 59.896324][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 61.244402][ T4393] loop2: detected capacity change from 0 to 512 [ 61.587874][ T4393] EXT4-fs (loop2): Ignoring removed nobh option [ 61.777036][ T4393] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 61.793977][ T4393] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.28: attempt to clear invalid blocks 1 len 1 [ 61.892488][ T4393] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 61.923843][ T4409] device syzkaller0 entered promiscuous mode [ 61.940641][ T4393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.28: invalid indirect mapped block 1819239214 (level 0) [ 61.961856][ T4409] tipc: Started in network mode [ 61.967020][ T4409] tipc: Node identity 1ec2aa5b4a8a, cluster identity 4711 [ 61.993509][ T4409] tipc: Enabled bearer , priority 0 [ 62.003812][ T4393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.28: invalid indirect mapped block 1819239214 (level 1) [ 62.049555][ T4409] tipc: Resetting bearer [ 62.120347][ T4408] tipc: Resetting bearer [ 62.140263][ T4393] EXT4-fs (loop2): 1 truncate cleaned up [ 62.152792][ T4408] tipc: Disabling bearer [ 62.231598][ T4393] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 62.299883][ T4416] ceph: No mds server is up or the cluster is laggy [ 62.311334][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 62.347993][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 63.132411][ T4422] netlink: 260 bytes leftover after parsing attributes in process `syz.1.37'. [ 63.726591][ T4447] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54'. [ 64.055365][ T4458] device syzkaller0 entered promiscuous mode [ 64.115927][ T4458] tipc: Started in network mode [ 64.120834][ T4458] tipc: Node identity 8a53c49f63d5, cluster identity 4711 [ 64.172280][ T4458] tipc: Enabled bearer , priority 0 [ 64.244603][ T4458] tipc: Resetting bearer [ 64.311829][ T4457] tipc: Resetting bearer [ 64.327577][ T4457] tipc: Disabling bearer [ 64.444969][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 64.459958][ T4465] ceph: No mds server is up or the cluster is laggy [ 64.475476][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 64.777580][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 64.797669][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 65.358403][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 65.375930][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 65.901848][ T26] tipc: Node number set to 3917923487 [ 66.230078][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 66.457958][ T4484] loop0: detected capacity change from 0 to 64 [ 67.640889][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 67.772727][ T4514] ceph: No mds server is up or the cluster is laggy [ 67.781340][ T13] libceph: connect (1)[c::]:6789 error -101 [ 67.804623][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 68.918323][ T4547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.74'. [ 69.027574][ T4550] device syzkaller0 entered promiscuous mode [ 69.432547][ T4572] ceph: No mds server is up or the cluster is laggy [ 69.443583][ T26] libceph: connect (1)[c::]:6789 error -101 [ 69.518313][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 70.345082][ T4593] loop4: detected capacity change from 0 to 64 [ 70.616428][ T4595] Illegal XDP return value 4294967294, expect packet loss! [ 71.165798][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.172399][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.285038][ T4603] device syzkaller0 entered promiscuous mode [ 71.398679][ T4612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 71.428414][ T4613] xt_CT: No such helper "snmp" [ 72.023558][ T4657] loop1: detected capacity change from 0 to 64 [ 72.869647][ T4671] netlink: 224 bytes leftover after parsing attributes in process `syz.4.107'. [ 73.010124][ T4677] ceph: No mds server is up or the cluster is laggy [ 73.019403][ T4659] libceph: connect (1)[c::]:6789 error -101 [ 73.068320][ T4659] libceph: mon0 (1)[c::]:6789 connect error [ 74.119471][ T4681] xt_CT: No such helper "snmp" [ 74.362771][ T4693] xt_CT: No such helper "snmp" [ 74.455802][ T4720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 74.504996][ T4720] device bond1 entered promiscuous mode [ 74.511013][ T4720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.520307][ T4717] device syzkaller0 entered promiscuous mode [ 74.544230][ T4726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.555476][ T4726] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 74.588613][ T4726] bond1: (slave gre1): Error -95 calling set_mac_address [ 74.675235][ T4717] tipc: Started in network mode [ 74.707585][ T4732] loop1: detected capacity change from 0 to 64 [ 74.721800][ T4717] tipc: Node identity 22415d0a95a3, cluster identity 4711 [ 75.119530][ T4717] tipc: Enabled bearer , priority 0 [ 75.345438][ T4720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 75.455267][ T4720] bond1 (unregistering): Released all slaves [ 75.537523][ T4731] tipc: Resetting bearer [ 75.555980][ T4731] tipc: Disabling bearer [ 75.847949][ T4754] xt_CT: No such helper "snmp" [ 76.111146][ T4777] loop0: detected capacity change from 0 to 64 [ 76.291258][ T1108] cfg80211: failed to load regulatory.db [ 76.313171][ T4776] device syzkaller0 entered promiscuous mode [ 76.565700][ T4776] tipc: Enabled bearer , priority 0 [ 76.651718][ T4779] device syzkaller0 entered promiscuous mode [ 76.781298][ T4773] tipc: Resetting bearer [ 76.894982][ T4773] tipc: Disabling bearer [ 77.011563][ T4782] tipc: Enabled bearer , priority 0 [ 77.180981][ T4789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.140'. [ 77.190221][ T4784] tipc: Resetting bearer [ 77.212086][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 77.223349][ T4789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.140'. [ 77.273499][ T4784] tipc: Disabling bearer [ 77.320322][ T4796] loop4: detected capacity change from 0 to 512 [ 77.327891][ T4789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.140'. [ 77.388541][ T4796] EXT4-fs (loop4): Ignoring removed nobh option [ 77.439139][ T4796] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 77.492379][ T4796] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.129: attempt to clear invalid blocks 1 len 1 [ 77.527904][ T4796] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 77.542442][ T4796] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.129: invalid indirect mapped block 1819239214 (level 0) [ 77.581353][ T4796] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.129: invalid indirect mapped block 1819239214 (level 1) [ 77.638823][ T4796] EXT4-fs (loop4): 1 truncate cleaned up [ 77.644760][ T4796] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 77.782908][ T4809] xt_CT: No such helper "snmp" [ 77.927625][ T4821] netlink: 67 bytes leftover after parsing attributes in process `syz.1.151'. [ 77.950808][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.027130][ T4819] loop0: detected capacity change from 0 to 64 [ 78.197254][ T4826] Zero length message leads to an empty skb [ 78.257661][ T4821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.526578][ T4829] device syzkaller0 entered promiscuous mode [ 78.732482][ T4830] tipc: Enabled bearer , priority 0 [ 78.877156][ T4827] tipc: Resetting bearer [ 78.954234][ T4825] tipc: Resetting bearer [ 78.987454][ T4825] tipc: Disabling bearer [ 78.998532][ T4839] tipc: Failed to remove unknown binding: 66,0,0/0:1379162403/1379162405 [ 79.031415][ T4839] tipc: Failed to remove unknown binding: 66,0,0/0:1379162403/1379162404 [ 79.137230][ T4839] tipc: Failed to remove unknown binding: 66,0,0/0:1379162403/1379162405 [ 79.196669][ T4839] tipc: Failed to remove unknown binding: 66,0,0/0:1379162403/1379162404 [ 79.229531][ T4851] xt_CT: No such helper "snmp" [ 79.316489][ T4860] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.383955][ T4659] libceph: connect (1)[c::]:6789 error -101 [ 79.396966][ T4861] ceph: No mds server is up or the cluster is laggy [ 79.427794][ T4659] libceph: mon0 (1)[c::]:6789 connect error [ 80.336605][ T4885] device syzkaller0 entered promiscuous mode [ 80.518330][ T4893] tipc: Failed to remove unknown binding: 66,0,0/0:1450300639/1450300641 [ 80.541606][ T4893] tipc: Failed to remove unknown binding: 66,0,0/0:1450300639/1450300640 [ 80.609199][ T4896] tipc: Failed to remove unknown binding: 66,0,0/0:1450300639/1450300641 [ 80.632549][ T4896] tipc: Failed to remove unknown binding: 66,0,0/0:1450300639/1450300640 [ 81.504014][ T26] libceph: connect (1)[c::]:6789 error -101 [ 81.539835][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 81.639387][ T4907] ceph: No mds server is up or the cluster is laggy [ 81.711414][ T26] libceph: connect (1)[c::]:6789 error -101 [ 81.814911][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 82.522081][ T4235] Bluetooth: hci3: command 0x0405 tx timeout [ 82.670469][ T4941] xt_CT: No such helper "snmp" [ 82.720410][ T4944] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.816585][ T4952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.198'. [ 83.047932][ T1344] libceph: connect (1)[c::]:6789 error -101 [ 83.076861][ T1344] libceph: mon0 (1)[c::]:6789 connect error [ 83.159530][ T4961] ceph: No mds server is up or the cluster is laggy [ 83.818507][ T4970] device syzkaller0 entered promiscuous mode [ 83.906975][ T4977] loop3: detected capacity change from 0 to 64 [ 84.678285][ T4979] xt_CT: No such helper "snmp" [ 84.730933][ T4989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 84.797597][ T4989] IPVS: Scheduler module ip_vs_sip not found [ 84.823781][ T4989] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 84.827849][ T4992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.212'. [ 84.859331][ T4989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.167622][ T5016] device syzkaller0 entered promiscuous mode [ 85.233585][ T5022] loop4: detected capacity change from 0 to 64 [ 85.261892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!! [ 86.135020][ T5028] xt_CT: No such helper "snmp" [ 86.568042][ T5040] loop3: detected capacity change from 0 to 512 [ 86.730924][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.229'. [ 86.741423][ T5040] EXT4-fs (loop3): Ignoring removed nobh option [ 86.852861][ T5040] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 86.902047][ T5040] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.217: attempt to clear invalid blocks 1 len 1 [ 86.917550][ T5040] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 86.932653][ T5040] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.217: invalid indirect mapped block 1819239214 (level 0) [ 86.961674][ T5040] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.217: invalid indirect mapped block 1819239214 (level 1) [ 86.981538][ T5057] device syzkaller0 entered promiscuous mode [ 87.047289][ T5040] EXT4-fs (loop3): 1 truncate cleaned up [ 87.073032][ T5040] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 87.100393][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 87.201255][ T5063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'. [ 87.280829][ T5067] loop2: detected capacity change from 0 to 64 [ 88.062060][ T5066] xt_CT: No such helper "snmp" [ 88.340431][ T5086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.243'. [ 88.385160][ T5091] device syzkaller0 entered promiscuous mode [ 88.437074][ T5091] tipc: Enabled bearer , priority 0 [ 88.469616][ T5092] device syzkaller0 entered promiscuous mode [ 88.485946][ T5091] tipc: Resetting bearer [ 88.556321][ T5090] tipc: Resetting bearer [ 88.568920][ T5090] tipc: Disabling bearer [ 88.763105][ T5103] loop2: detected capacity change from 0 to 64 [ 89.559047][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 89.582517][ T5105] xt_CT: No such helper "snmp" [ 89.697492][ T5121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 89.761227][ T5123] device syzkaller0 entered promiscuous mode [ 89.797257][ T5123] 0: reclassify loop, rule prio 0, protocol 700 [ 89.956078][ T5131] device syzkaller0 entered promiscuous mode [ 90.157854][ T5143] loop1: detected capacity change from 0 to 64 [ 91.094851][ T5159] netlink: 87 bytes leftover after parsing attributes in process `syz.0.273'. [ 91.223444][ T5163] xt_CT: No such helper "snmp" [ 91.250007][ T5170] loop3: detected capacity change from 0 to 512 [ 91.293677][ T5170] EXT4-fs (loop3): Ignoring removed nobh option [ 91.333555][ T5174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'. [ 91.354302][ T5170] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 91.413967][ T5170] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.261: attempt to clear invalid blocks 1 len 1 [ 91.450083][ T5170] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 91.472121][ T5170] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.261: invalid indirect mapped block 1819239214 (level 0) [ 91.496791][ T5170] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.261: invalid indirect mapped block 1819239214 (level 1) [ 91.525239][ T5180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 91.540455][ T5180] netem: invalid attributes len -8 [ 91.547918][ T5180] netem: change failed [ 91.548047][ T5170] EXT4-fs (loop3): 1 truncate cleaned up [ 91.566505][ T5170] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 91.584328][ T5182] device syzkaller0 entered promiscuous mode [ 91.909285][ T5188] loop0: detected capacity change from 0 to 64 [ 92.860750][ T5199] netlink: 67 bytes leftover after parsing attributes in process `syz.2.284'. [ 92.943984][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.968730][ T5199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.092521][ T5211] x_tables: duplicate underflow at hook 4 [ 93.093058][ T5209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.288'. [ 93.107500][ T5203] xt_CT: No such helper "snmp" [ 93.358122][ T5218] ceph: No mds server is up or the cluster is laggy [ 93.423929][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 93.461763][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 94.023908][ T5217] tipc: Started in network mode [ 94.050554][ T5217] tipc: Node identity 4a01f316ceb, cluster identity 4711 [ 94.058687][ T5217] tipc: Enabled bearer , priority 0 [ 94.080505][ T5227] netlink: 224 bytes leftover after parsing attributes in process `syz.3.295'. [ 94.095530][ T5216] tipc: Disabling bearer [ 94.302741][ T5242] loop4: detected capacity change from 0 to 64 [ 95.316668][ T5256] netlink: 44 bytes leftover after parsing attributes in process `syz.4.304'. [ 95.356457][ T5265] device syzkaller0 entered promiscuous mode [ 95.490217][ T5271] ceph: No mds server is up or the cluster is laggy [ 95.518978][ T4190] libceph: connect (1)[c::]:6789 error -101 [ 95.580880][ T4190] libceph: mon0 (1)[c::]:6789 connect error [ 96.335484][ T5284] xt_CT: No such helper "snmp" [ 96.694396][ T5307] loop3: detected capacity change from 0 to 64 [ 97.681923][ T5313] tc action pedit offset must be on 32 bit boundaries [ 97.781673][ T5314] ceph: No mds server is up or the cluster is laggy [ 97.804784][ T1344] libceph: connect (1)[c::]:6789 error -101 [ 97.859808][ T1344] libceph: mon0 (1)[c::]:6789 connect error [ 98.298533][ T5323] netlink: 452 bytes leftover after parsing attributes in process `syz.3.322'. [ 98.500776][ T5328] tipc: Failed to remove unknown binding: 66,0,0/0:1623017170/1623017172 [ 98.537020][ T5328] tipc: Failed to remove unknown binding: 66,0,0/0:1623017170/1623017171 [ 98.546619][ T5333] loop0: detected capacity change from 0 to 512 [ 98.552180][ T5331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.325'. [ 98.624364][ T5334] tipc: Failed to remove unknown binding: 66,0,0/0:1623017170/1623017172 [ 98.635335][ T5333] EXT4-fs (loop0): Ignoring removed nobh option [ 98.672535][ T5334] tipc: Failed to remove unknown binding: 66,0,0/0:1623017170/1623017171 [ 98.705320][ T5333] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 98.835976][ T5333] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.321: attempt to clear invalid blocks 1 len 1 [ 98.907383][ T5333] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 98.936178][ T5333] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.321: invalid indirect mapped block 1819239214 (level 0) [ 99.016036][ T5333] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.321: invalid indirect mapped block 1819239214 (level 1) [ 99.078056][ T5333] EXT4-fs (loop0): 1 truncate cleaned up [ 99.096179][ T5333] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 99.408943][ T5355] loop1: detected capacity change from 0 to 64 [ 100.869759][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 100.900729][ T5374] ceph: No mds server is up or the cluster is laggy [ 100.921515][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 101.386526][ T5377] xt_CT: No such helper "snmp" [ 101.779165][ T5343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.014097][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 102.056120][ T5407] 8021q: VLANs not supported on vcan0 [ 102.307780][ T5415] ceph: No mds server is up or the cluster is laggy [ 102.316361][ T21] libceph: connect (1)[c::]:6789 error -101 [ 102.416122][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 103.244373][ T5439] xt_CT: No such helper "snmp" [ 103.325703][ T5444] loop4: detected capacity change from 0 to 64 [ 103.460546][ T25] audit: type=1800 audit(1789648394.394:2): pid=5445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.351" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 104.142777][ T5451] netlink: 'syz.1.356': attribute type 24 has an invalid length. [ 104.150568][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 104.179479][ T5451] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 104.437850][ T5466] ceph: No mds server is up or the cluster is laggy [ 105.105619][ T5459] device syzkaller0 entered promiscuous mode [ 105.211793][ T5477] batman_adv: batadv0: Adding interface: gretap1 [ 105.219053][ T5477] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.244633][ T5477] batman_adv: batadv0: Interface activated: gretap1 [ 105.251813][ T5478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.364'. [ 105.370174][ T5488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 105.395469][ T5491] xt_hashlimit: size too large, truncated to 1048576 [ 105.789659][ T5506] ceph: No mds server is up or the cluster is laggy [ 106.132444][ T5498] device syzkaller0 entered promiscuous mode [ 106.235769][ T21] libceph: connect (1)[c::]:6789 error -101 [ 106.365025][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 106.952304][ T5521] device syzkaller0 entered promiscuous mode [ 106.989913][ T5524] device syzkaller0 entered promiscuous mode [ 107.034753][ T5527] loop0: detected capacity change from 0 to 512 [ 107.133447][ T5527] EXT4-fs (loop0): Ignoring removed nobh option [ 107.236341][ T5527] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 107.246589][ T5527] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.367: attempt to clear invalid blocks 1 len 1 [ 107.260288][ T5527] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 107.275632][ T5527] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.367: invalid indirect mapped block 1819239214 (level 0) [ 107.291342][ T5527] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.367: invalid indirect mapped block 1819239214 (level 1) [ 107.306479][ T5527] EXT4-fs (loop0): 1 truncate cleaned up [ 107.312384][ T5527] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 107.633147][ T5532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 108.061902][ T5556] 0: reclassify loop, rule prio 0, protocol 800 [ 108.064857][ T5554] device syzkaller0 entered promiscuous mode [ 108.104321][ T5553] device syzkaller0 entered promiscuous mode [ 108.549553][ T5566] loop1: detected capacity change from 0 to 64 [ 109.689083][ T5584] netlink: 44 bytes leftover after parsing attributes in process `syz.1.402'. [ 109.873564][ T5589] device syzkaller0 entered promiscuous mode [ 110.026609][ T5595] device syzkaller0 entered promiscuous mode [ 110.176283][ T5602] loop2: detected capacity change from 0 to 64 [ 110.964137][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 111.023967][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 111.308963][ T5628] device syzkaller0 entered promiscuous mode [ 111.419198][ T5635] netlink: 72 bytes leftover after parsing attributes in process `syz.2.425'. [ 111.470803][ T5633] device syzkaller0 entered promiscuous mode [ 111.615123][ T5638] xt_CT: No such helper "snmp" [ 112.334876][ T25] audit: type=1800 audit(1789648403.294:3): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.435" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 112.577395][ T5675] device syzkaller0 entered promiscuous mode [ 112.700456][ T5680] xt_CT: No such helper "snmp" [ 113.006291][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 113.061164][ T5706] device syz_tun entered promiscuous mode [ 113.271502][ T5716] device syzkaller0 entered promiscuous mode [ 113.313473][ T5718] xt_CT: No such helper "snmp" [ 113.403340][ T5724] device syz_tun entered promiscuous mode [ 113.438165][ T5724] device macvlan2 entered promiscuous mode [ 113.445523][ T5724] device vlan2 entered promiscuous mode [ 113.477538][ T5724] device vlan2 left promiscuous mode [ 113.487517][ T5724] device syz_tun left promiscuous mode [ 113.638793][ T5736] loop4: detected capacity change from 0 to 512 [ 113.703062][ T5736] EXT4-fs (loop4): Ignoring removed nobh option [ 113.844523][ T5736] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 113.853595][ T5736] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.452: attempt to clear invalid blocks 1 len 1 [ 113.867881][ T5736] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 113.882685][ T5736] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.452: invalid indirect mapped block 1819239214 (level 0) [ 113.898458][ T5736] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.452: invalid indirect mapped block 1819239214 (level 1) [ 113.914448][ T5736] EXT4-fs (loop4): 1 truncate cleaned up [ 113.920477][ T5736] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 114.001795][ T5742] device syzkaller0 entered promiscuous mode [ 114.310333][ T5757] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 114.349709][ T5759] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 114.367412][ T5757] netlink: 'syz.1.467': attribute type 2 has an invalid length. [ 114.401761][ T5759] device syzkaller0 entered promiscuous mode [ 114.620524][ T5772] device syzkaller0 entered promiscuous mode [ 114.672806][ T5774] netlink: 72 bytes leftover after parsing attributes in process `syz.2.475'. [ 115.274902][ T5796] loop1: detected capacity change from 0 to 512 [ 115.808842][ T5796] EXT4-fs (loop1): Ignoring removed nobh option [ 115.868979][ T5803] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 115.893939][ T5796] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 115.901599][ T5806] tipc: Failed to remove unknown binding: 66,0,0/0:2791970144/2791970146 [ 115.917260][ T5796] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.481: attempt to clear invalid blocks 1 len 1 [ 115.933040][ T5796] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 115.944885][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 115.947746][ T5796] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.481: invalid indirect mapped block 1819239214 (level 0) [ 115.965284][ T5806] tipc: Failed to remove unknown binding: 66,0,0/0:2791970144/2791970145 [ 115.976719][ T5796] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.481: invalid indirect mapped block 1819239214 (level 1) [ 115.996822][ T5796] EXT4-fs (loop1): 1 truncate cleaned up [ 116.002743][ T5796] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 116.027395][ T5803] device syzkaller0 entered promiscuous mode [ 116.077956][ T5806] tipc: Failed to remove unknown binding: 66,0,0/0:2791970144/2791970146 [ 116.089844][ T5806] tipc: Failed to remove unknown binding: 66,0,0/0:2791970144/2791970145 [ 116.172413][ T5815] device syzkaller0 entered promiscuous mode [ 116.317436][ T5819] xt_CT: No such helper "snmp" [ 116.591415][ T25] audit: type=1800 audit(1789648407.544:4): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.499" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 116.655072][ T5842] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.665587][ T5842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.673284][ T5842] IPv6: NLM_F_CREATE should be set when creating new route [ 116.705937][ T5842] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.713262][ T5842] IPv6: NLM_F_CREATE should be set when creating new route [ 116.894014][ T5846] device syzkaller0 entered promiscuous mode [ 116.936625][ T5856] xt_CT: No such helper "snmp" [ 117.143177][ T5864] device syzkaller0 entered promiscuous mode [ 117.429172][ T5883] tipc: Failed to remove unknown binding: 66,0,0/0:2292753705/2292753707 [ 117.482816][ T5883] tipc: Failed to remove unknown binding: 66,0,0/0:2292753705/2292753706 [ 117.551635][ T5887] xt_CT: No such helper "snmp" [ 117.730299][ T5893] device syzkaller0 entered promiscuous mode [ 118.115021][ T5910] device syzkaller0 entered promiscuous mode [ 118.225689][ T4190] libceph: connect (1)[c::]:6789 error -101 [ 118.235460][ T4190] libceph: mon0 (1)[c::]:6789 connect error [ 118.280452][ T5913] ceph: No mds server is up or the cluster is laggy [ 119.320229][ T5930] device syzkaller0 entered promiscuous mode [ 119.350099][ T5943] tipc: Failed to remove unknown binding: 66,0,0/0:40371018/40371020 [ 119.382473][ T5943] tipc: Failed to remove unknown binding: 66,0,0/0:40371018/40371019 [ 119.539930][ T4302] libceph: connect (1)[c::]:6789 error -101 [ 119.570451][ T4302] libceph: mon0 (1)[c::]:6789 connect error [ 119.658443][ T5948] ceph: No mds server is up or the cluster is laggy [ 120.344851][ T5958] device syzkaller0 entered promiscuous mode [ 120.823054][ T5974] loop1: detected capacity change from 0 to 512 [ 120.953676][ T5974] EXT4-fs (loop1): Ignoring removed nobh option [ 121.213360][ T5974] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 121.227158][ T5974] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.546: attempt to clear invalid blocks 1 len 1 [ 121.243157][ T5974] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 121.258135][ T5974] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.546: invalid indirect mapped block 1819239214 (level 0) [ 121.274829][ T5974] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.546: invalid indirect mapped block 1819239214 (level 1) [ 121.293911][ T5974] EXT4-fs (loop1): 1 truncate cleaned up [ 121.299582][ T5974] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 121.460904][ T5989] x_tables: duplicate underflow at hook 1 [ 121.610611][ T5993] tipc: Failed to remove unknown binding: 66,0,0/0:2392551203/2392551205 [ 121.651143][ T5993] tipc: Failed to remove unknown binding: 66,0,0/0:2392551203/2392551204 [ 121.874747][ T6001] ceph: No mds server is up or the cluster is laggy [ 121.884666][ T4190] libceph: connect (1)[c::]:6789 error -101 [ 121.940944][ T4190] libceph: mon0 (1)[c::]:6789 connect error [ 122.885318][ T6031] device syzkaller0 entered promiscuous mode [ 123.029199][ T6036] ODEBUG: Out of memory. ODEBUG disabled [ 123.127037][ T6041] tipc: Failed to remove unknown binding: 66,0,0/0:828920081/828920083 [ 123.171605][ T6040] loop1: detected capacity change from 0 to 512 [ 123.189057][ T6041] tipc: Failed to remove unknown binding: 66,0,0/0:828920081/828920082 [ 123.238696][ T6040] EXT4-fs (loop1): Ignoring removed nobh option [ 123.297402][ T6041] tipc: Failed to remove unknown binding: 66,0,0/0:828920081/828920083 [ 123.313232][ T6041] tipc: Failed to remove unknown binding: 66,0,0/0:828920081/828920082 [ 123.323576][ T6040] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 123.351983][ T6040] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.566: attempt to clear invalid blocks 1 len 1 [ 123.367337][ T6040] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 123.392175][ T6040] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.566: invalid indirect mapped block 1819239214 (level 0) [ 123.432567][ T6040] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.566: invalid indirect mapped block 1819239214 (level 1) [ 123.546042][ T26] libceph: connect (1)[c::]:6789 error -101 [ 123.561005][ T6051] ceph: No mds server is up or the cluster is laggy [ 123.593283][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 123.842220][ T6040] EXT4-fs (loop1): 1 truncate cleaned up [ 124.004914][ T6040] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 124.441033][ T6061] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.659841][ T6070] device syzkaller0 entered promiscuous mode [ 125.013050][ T6086] tipc: Failed to remove unknown binding: 66,0,0/0:4213246555/4213246557 [ 125.021529][ T6086] tipc: Failed to remove unknown binding: 66,0,0/0:4213246555/4213246556 [ 125.128979][ T6088] tipc: Failed to remove unknown binding: 66,0,0/0:4213246555/4213246557 [ 125.154487][ T6088] tipc: Failed to remove unknown binding: 66,0,0/0:4213246555/4213246556 [ 125.371433][ T6101] 0: reclassify loop, rule prio 0, protocol 800 [ 125.559554][ T6115] device syzkaller0 entered promiscuous mode [ 125.838638][ T6124] xt_CT: No such helper "snmp" [ 126.185800][ T25] audit: type=1800 audit(1789648417.144:5): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.603" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 126.437343][ T6167] loop1: detected capacity change from 0 to 64 [ 127.288138][ T6172] device syzkaller0 entered promiscuous mode [ 127.515336][ T6186] tipc: Failed to remove unknown binding: 66,0,0/0:953527845/953527847 [ 127.550874][ T6181] xt_CT: No such helper "snmp" [ 127.569241][ T6186] tipc: Failed to remove unknown binding: 66,0,0/0:953527845/953527846 [ 127.661364][ T6186] tipc: Failed to remove unknown binding: 66,0,0/0:953527845/953527847 [ 127.717935][ T6186] tipc: Failed to remove unknown binding: 66,0,0/0:953527845/953527846 [ 127.993016][ T6208] 0: reclassify loop, rule prio 0, protocol 800 [ 128.199199][ T25] audit: type=1800 audit(1789648419.154:6): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.621" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 128.211049][ T6221] device syzkaller0 entered promiscuous mode [ 128.389903][ T6229] xt_CT: No such helper "snmp" [ 128.579332][ T6244] tipc: Failed to remove unknown binding: 66,0,0/0:3798853419/3798853421 [ 128.587933][ T6244] tipc: Failed to remove unknown binding: 66,0,0/0:3798853419/3798853420 [ 128.603206][ T6244] tipc: Failed to remove unknown binding: 66,0,0/0:3798853419/3798853421 [ 128.611657][ T6244] tipc: Failed to remove unknown binding: 66,0,0/0:3798853419/3798853420 [ 129.118805][ T6272] device syzkaller0 entered promiscuous mode [ 129.323811][ T6277] device syzkaller0 entered promiscuous mode [ 129.436416][ T6285] loop1: detected capacity change from 0 to 512 [ 129.439478][ T6281] xt_CT: No such helper "snmp" [ 129.452054][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.643'. [ 129.481144][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.643'. [ 129.532996][ T6285] EXT4-fs (loop1): Ignoring removed nobh option [ 129.578270][ T6285] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 129.661960][ T6285] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.641: attempt to clear invalid blocks 1 len 1 [ 129.816417][ T6295] loop0: detected capacity change from 0 to 64 [ 130.549304][ T6285] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 130.592966][ T6285] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.641: invalid indirect mapped block 1819239214 (level 0) [ 130.644441][ T6302] device syzkaller0 entered promiscuous mode [ 130.684180][ T25] audit: type=1800 audit(1789648421.644:7): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.648" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 130.783787][ T6305] device syzkaller0 entered promiscuous mode [ 130.789901][ T6285] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.641: invalid indirect mapped block 1819239214 (level 1) [ 130.831375][ T6305] tipc: Enabled bearer , priority 0 [ 130.851333][ T6285] EXT4-fs (loop1): 1 truncate cleaned up [ 130.859207][ T6304] tipc: Resetting bearer [ 130.901197][ T6285] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 130.929745][ T6304] tipc: Disabling bearer [ 131.000914][ T6310] device syzkaller0 entered promiscuous mode [ 131.290618][ T6320] tipc: Failed to remove unknown binding: 66,0,0/0:936735204/936735206 [ 131.316633][ T6320] tipc: Failed to remove unknown binding: 66,0,0/0:936735204/936735205 [ 131.322887][ T6317] xt_CT: No such helper "snmp" [ 131.340582][ T6320] tipc: Failed to remove unknown binding: 66,0,0/0:936735204/936735206 [ 131.364219][ T6320] tipc: Failed to remove unknown binding: 66,0,0/0:936735204/936735205 [ 131.635856][ T6330] loop2: detected capacity change from 0 to 64 [ 131.893048][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 132.020575][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.658'. [ 132.604219][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.610671][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.774583][ T6342] device syzkaller0 entered promiscuous mode [ 132.809911][ T6344] device lo entered promiscuous mode [ 132.850813][ T6344] device tunl0 entered promiscuous mode [ 132.890593][ T6344] device gre0 entered promiscuous mode [ 132.958579][ T6344] device gretap0 entered promiscuous mode [ 132.985813][ T6344] device erspan0 entered promiscuous mode [ 133.038066][ T6344] device ip_vti0 entered promiscuous mode [ 133.055066][ T6344] device ip6_vti0 entered promiscuous mode [ 133.092490][ T6344] device sit0 entered promiscuous mode [ 133.148898][ T6344] device ip6tnl0 entered promiscuous mode [ 133.172779][ T6344] device ip6gre0 entered promiscuous mode [ 133.207676][ T6344] device syz_tun entered promiscuous mode [ 133.235310][ T6344] device ip6gretap0 entered promiscuous mode [ 133.287680][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.295993][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.336637][ T6344] device bridge0 entered promiscuous mode [ 133.369059][ T6344] device vcan0 entered promiscuous mode [ 133.381528][ T6344] device bond0 entered promiscuous mode [ 133.393289][ T6344] device bond_slave_0 entered promiscuous mode [ 133.399657][ T6344] device bond_slave_1 entered promiscuous mode [ 133.434927][ T6344] device team0 entered promiscuous mode [ 133.440623][ T6344] device team_slave_0 entered promiscuous mode [ 133.450879][ T6344] device team_slave_1 entered promiscuous mode [ 133.480373][ T6344] device dummy0 entered promiscuous mode [ 133.515877][ T6344] device nlmon0 entered promiscuous mode [ 133.518705][ T6242] Set syz1 is full, maxelem 65536 reached [ 133.529258][ T6344] device caif0 entered promiscuous mode [ 133.545649][ T6344] device batadv0 entered promiscuous mode [ 133.574994][ T6344] device vxcan0 entered promiscuous mode [ 133.589706][ T6344] device vxcan1 entered promiscuous mode [ 133.606066][ T6344] device veth0 entered promiscuous mode [ 133.645522][ T6344] device veth1 entered promiscuous mode [ 133.665991][ T6344] device wg0 entered promiscuous mode [ 133.678937][ T6344] device wg1 entered promiscuous mode [ 133.694800][ T6344] device wg2 entered promiscuous mode [ 133.708669][ T6344] device veth0_to_bridge entered promiscuous mode [ 133.735662][ T6344] device veth1_to_bridge entered promiscuous mode [ 133.770275][ T6344] device veth0_to_bond entered promiscuous mode [ 133.801112][ T6344] device veth1_to_bond entered promiscuous mode [ 133.827451][ T6344] device veth0_to_team entered promiscuous mode [ 133.856154][ T6344] device veth1_to_team entered promiscuous mode [ 133.884061][ T6344] device veth0_to_batadv entered promiscuous mode [ 133.896659][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.907768][ T6344] device batadv_slave_0 entered promiscuous mode [ 133.926326][ T6344] device veth1_to_batadv entered promiscuous mode [ 133.934223][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.953240][ T6344] device batadv_slave_1 entered promiscuous mode [ 133.971343][ T6344] device xfrm0 entered promiscuous mode [ 133.982422][ T6344] device veth0_to_hsr entered promiscuous mode [ 134.008637][ T6344] device veth1_to_hsr entered promiscuous mode [ 134.034862][ T6344] device hsr0 entered promiscuous mode [ 134.052279][ T6344] device veth1_virt_wifi entered promiscuous mode [ 134.069004][ T6344] device veth0_virt_wifi entered promiscuous mode [ 134.077992][ T6344] device virt_wifi0 entered promiscuous mode [ 134.106941][ T6344] device vlan0 entered promiscuous mode [ 134.113151][ T6344] device vlan1 entered promiscuous mode [ 134.119254][ T6344] device macvlan0 entered promiscuous mode [ 134.135034][ T6344] device macvlan1 entered promiscuous mode [ 134.143869][ T6344] device ipvlan0 entered promiscuous mode [ 134.160071][ T6344] device ipvlan1 entered promiscuous mode [ 134.195373][ T6344] device macvtap0 entered promiscuous mode [ 134.215096][ T6344] device macsec0 entered promiscuous mode [ 134.232224][ T6344] device geneve0 entered promiscuous mode [ 134.248566][ T6344] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.257671][ T6344] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.266675][ T6344] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.275667][ T6344] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.284801][ T6344] device geneve1 entered promiscuous mode [ 134.297726][ T6344] device netdevsim0 entered promiscuous mode [ 134.312161][ T6344] device netdevsim1 entered promiscuous mode [ 134.326509][ T6344] device netdevsim2 entered promiscuous mode [ 134.343129][ T6344] device netdevsim3 entered promiscuous mode [ 134.361539][ T6344] device wlan0 entered promiscuous mode [ 134.376583][ T6344] device wlan1 entered promiscuous mode [ 134.384624][ T6342] tipc: Started in network mode [ 134.389514][ T6342] tipc: Node identity cef26a47e76a, cluster identity 4711 [ 134.401810][ T6342] tipc: Enabled bearer , priority 0 [ 134.456508][ T6348] tipc: Resetting bearer [ 134.479928][ T6348] tipc: Disabling bearer [ 134.490553][ T6373] tipc: Failed to remove unknown binding: 66,0,0/0:180059551/180059553 [ 134.499811][ T6373] tipc: Failed to remove unknown binding: 66,0,0/0:180059551/180059552 [ 134.562070][ T6377] tipc: Failed to remove unknown binding: 66,0,0/0:180059551/180059553 [ 134.572701][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 134.579205][ T6377] tipc: Failed to remove unknown binding: 66,0,0/0:180059551/180059552 [ 134.590099][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.597786][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.677833][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.713381][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.721091][ T6376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.731123][ T6376] device bridge_slave_0 left promiscuous mode [ 134.740450][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.788644][ T6376] device bridge_slave_1 left promiscuous mode [ 134.795918][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.811159][ T6376] bond0: (slave bond_slave_0): Releasing backup interface [ 134.827624][ T6376] bond0: (slave bond_slave_1): Releasing backup interface [ 134.863371][ T6376] team0: Port device team_slave_0 removed [ 134.884558][ T6376] team0: Port device team_slave_1 removed [ 134.890808][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.898736][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.922492][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.930067][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.983775][ T6376] syz.3.670 (6376) used greatest stack depth: 20400 bytes left [ 135.147991][ T6404] xt_CT: No such helper "snmp" [ 135.178557][ T6412] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 135.195318][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 135.214156][ T6413] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.259163][ T6415] device syzkaller0 entered promiscuous mode [ 135.288745][ T6415] tipc: Enabled bearer , priority 0 [ 135.302531][ T6414] tipc: Resetting bearer [ 135.338207][ T6414] tipc: Disabling bearer [ 135.373380][ T6417] device syzkaller0 entered promiscuous mode [ 135.477382][ T6424] device syzkaller0 entered promiscuous mode [ 135.485753][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.686'. [ 135.749137][ T6443] device syzkaller0 entered promiscuous mode [ 135.773092][ T6443] tipc: Enabled bearer , priority 0 [ 135.805389][ T6441] tipc: Resetting bearer [ 135.852308][ T6441] tipc: Disabling bearer [ 136.099384][ T6456] device syzkaller0 entered promiscuous mode [ 136.157518][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 136.180611][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 136.222311][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 136.231195][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 136.327347][ T6471] device syzkaller0 entered promiscuous mode [ 136.458244][ T6482] device syzkaller0 entered promiscuous mode [ 136.475711][ T6482] tipc: Enabled bearer , priority 0 [ 136.539754][ T6481] tipc: Resetting bearer [ 136.616686][ T6481] tipc: Disabling bearer [ 136.927051][ T25] audit: type=1800 audit(1789648427.884:8): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.723" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 137.246427][ T6535] device syzkaller0 entered promiscuous mode [ 137.465800][ T6545] syz.4.731 (6545) used greatest stack depth: 16144 bytes left [ 137.475233][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 137.547455][ T6554] device syzkaller0 entered promiscuous mode [ 137.822301][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 137.836095][ T6570] ceph: No mds server is up or the cluster is laggy [ 137.852850][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 137.964784][ T6583] xt_CT: No such helper "snmp" [ 138.283833][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'. [ 138.346275][ T6611] device syzkaller0 entered promiscuous mode [ 138.705874][ T6621] loop0: detected capacity change from 0 to 512 [ 138.780923][ T6621] EXT4-fs (loop0): Ignoring removed nobh option [ 138.800469][ T6621] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 138.810130][ T6621] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.759: attempt to clear invalid blocks 1 len 1 [ 138.823492][ T6621] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 138.838068][ T6621] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.759: invalid indirect mapped block 1819239214 (level 0) [ 138.853866][ T6621] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.759: invalid indirect mapped block 1819239214 (level 1) [ 138.869085][ T6621] EXT4-fs (loop0): 1 truncate cleaned up [ 138.874815][ T6621] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 139.107201][ T6634] xt_CT: No such helper "snmp" [ 139.133033][ T6639] device syzkaller0 entered promiscuous mode [ 139.214640][ T6639] tc action pedit 'at' offset 5 out of bounds [ 139.690679][ T6677] netlink: 144 bytes leftover after parsing attributes in process `syz.1.777'. [ 139.707567][ T6674] xt_CT: No such helper "snmp" [ 139.759383][ T6680] loop0: detected capacity change from 0 to 512 [ 140.043563][ T6680] EXT4-fs (loop0): Ignoring removed nobh option [ 140.094507][ T6680] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 140.116163][ T6680] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.774: attempt to clear invalid blocks 1 len 1 [ 140.134282][ T6680] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 140.138431][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 140.148750][ T6680] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.774: invalid indirect mapped block 1819239214 (level 0) [ 140.176207][ T6680] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.774: invalid indirect mapped block 1819239214 (level 1) [ 140.198537][ T6680] EXT4-fs (loop0): 1 truncate cleaned up [ 140.204609][ T6680] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 140.258076][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 140.707140][ T6720] xt_CT: No such helper "snmp" [ 140.979695][ T6739] device syzkaller0 entered promiscuous mode [ 141.048843][ T6743] loop1: detected capacity change from 0 to 512 [ 141.191059][ T6741] loop3: detected capacity change from 0 to 64 [ 141.194978][ T6743] EXT4-fs (loop1): Ignoring removed nobh option [ 141.735063][ T6743] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 141.743772][ T6743] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.795: attempt to clear invalid blocks 1 len 1 [ 141.757430][ T6743] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 141.772245][ T6743] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.795: invalid indirect mapped block 1819239214 (level 0) [ 141.786971][ T6743] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.795: invalid indirect mapped block 1819239214 (level 1) [ 141.799808][ T6742] device syzkaller0 entered promiscuous mode [ 141.820535][ T6743] EXT4-fs (loop1): 1 truncate cleaned up [ 141.826276][ T6743] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 142.138403][ T6763] netlink: 60 bytes leftover after parsing attributes in process `syz.2.804'. [ 142.206779][ T6765] ceph: No mds server is up or the cluster is laggy [ 142.215254][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 142.232290][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 142.280457][ T6769] xt_CT: No such helper "snmp" [ 142.349420][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.808'. [ 142.404271][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 142.490557][ T6788] device syzkaller0 entered promiscuous mode [ 142.631049][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 142.750978][ T6805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.818'. [ 142.821572][ T6808] loop4: detected capacity change from 0 to 512 [ 142.865108][ T6808] EXT4-fs (loop4): Ignoring removed nobh option [ 142.885281][ T6808] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 142.894440][ T6808] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.814: attempt to clear invalid blocks 1 len 1 [ 142.929059][ T6808] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 142.943634][ T6808] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.814: invalid indirect mapped block 1819239214 (level 0) [ 142.968755][ T6808] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.814: invalid indirect mapped block 1819239214 (level 1) [ 142.993351][ T6808] EXT4-fs (loop4): 1 truncate cleaned up [ 142.999026][ T6808] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 143.260001][ T6821] ceph: No mds server is up or the cluster is laggy [ 143.268333][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 143.284460][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 143.747370][ T6813] xt_CT: No such helper "snmp" [ 144.499007][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.506259][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.750137][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.781276][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.032075][ T6810] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.040957][ T6810] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.051278][ T6810] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.060493][ T6810] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.135533][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'. [ 145.154458][ T6834] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.163931][ T6834] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.172694][ T6834] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.181403][ T6834] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.197208][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.822'. [ 145.328429][ T6858] device syzkaller0 entered promiscuous mode [ 145.448865][ T6867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.834'. [ 145.596378][ T6829] libceph: connect (1)[c::]:6789 error -101 [ 145.622071][ T6829] libceph: mon0 (1)[c::]:6789 connect error [ 145.730299][ T6868] ceph: No mds server is up or the cluster is laggy [ 145.751986][ T6827] libceph: connect (1)[c::]:6789 error -101 [ 145.779064][ T6827] libceph: mon0 (1)[c::]:6789 connect error [ 146.345420][ T6876] xt_CT: No such helper "snmp" [ 146.385371][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 146.530632][ T6887] device syzkaller0 entered promiscuous mode [ 146.621615][ T6898] netlink: 56 bytes leftover after parsing attributes in process `syz.0.843'. [ 146.726411][ T6906] device syzkaller0 entered promiscuous mode [ 147.074129][ T7] libceph: connect (1)[c::]:6789 error -101 [ 147.098960][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 147.152940][ T6917] ceph: No mds server is up or the cluster is laggy [ 147.622061][ T6914] xt_CT: No such helper "snmp" [ 147.899303][ T6926] device syzkaller0 entered promiscuous mode [ 147.907946][ T6923] tipc: Failed to remove unknown binding: 66,0,0/0:657327185/657327187 [ 147.949896][ T6931] loop1: detected capacity change from 0 to 64 [ 147.977493][ T6923] tipc: Failed to remove unknown binding: 66,0,0/0:657327185/657327186 [ 148.237438][ T6933] tipc: Failed to remove unknown binding: 66,0,0/0:657327185/657327187 [ 148.340395][ T6933] tipc: Failed to remove unknown binding: 66,0,0/0:657327185/657327186 [ 148.869256][ T6937] device syzkaller0 entered promiscuous mode [ 148.936009][ T6939] device syzkaller0 entered promiscuous mode [ 148.954930][ T6947] device syzkaller0 entered promiscuous mode [ 148.985878][ T6947] tipc: Enabled bearer , priority 0 [ 148.994493][ T6945] tipc: Resetting bearer [ 149.017840][ T6945] tipc: Disabling bearer [ 149.124954][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 149.197845][ T6827] libceph: connect (1)[c::]:6789 error -101 [ 149.207481][ T6827] libceph: mon0 (1)[c::]:6789 connect error [ 149.247584][ T6963] ceph: No mds server is up or the cluster is laggy [ 149.409568][ T6971] xt_CT: No such helper "snmp" [ 149.584745][ T6989] loop1: detected capacity change from 0 to 64 [ 150.407371][ T6992] device syzkaller0 entered promiscuous mode [ 150.490259][ T6996] device syzkaller0 entered promiscuous mode [ 150.526152][ T6999] device syzkaller0 entered promiscuous mode [ 150.794679][ T7009] ceph: No mds server is up or the cluster is laggy [ 150.802180][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 150.815761][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 150.824727][ T7012] xt_CT: No such helper "snmp" [ 150.857216][ T7024] loop3: detected capacity change from 0 to 512 [ 150.861894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 150.881885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 150.915491][ T7024] EXT4-fs (loop3): Ignoring removed nobh option [ 150.967987][ T7024] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 150.977196][ T7024] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.879: attempt to clear invalid blocks 1 len 1 [ 150.991155][ T7024] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 151.005545][ T7024] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.879: invalid indirect mapped block 1819239214 (level 0) [ 151.022241][ T7029] device syzkaller0 entered promiscuous mode [ 151.025072][ T7024] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.879: invalid indirect mapped block 1819239214 (level 1) [ 151.044344][ T7024] EXT4-fs (loop3): 1 truncate cleaned up [ 151.049986][ T7024] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 151.096107][ T7035] device syzkaller0 entered promiscuous mode [ 151.216985][ T7035] tipc: Enabled bearer , priority 0 [ 151.235064][ T7034] tipc: Resetting bearer [ 151.265794][ T7034] tipc: Disabling bearer [ 151.432340][ T7044] device syzkaller0 entered promiscuous mode [ 151.494282][ T7052] device syzkaller0 entered promiscuous mode [ 151.659093][ T7060] xt_CT: No such helper "snmp" [ 151.780296][ T7071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.897'. [ 151.797331][ T4190] libceph: connect (1)[c::]:6789 error -101 [ 151.811962][ T4190] libceph: mon0 (1)[c::]:6789 connect error [ 151.831458][ T7066] ceph: No mds server is up or the cluster is laggy [ 151.914974][ T7076] device syzkaller0 entered promiscuous mode [ 151.930309][ T7080] device syzkaller0 entered promiscuous mode [ 152.033625][ T7080] tipc: Enabled bearer , priority 0 [ 152.161116][ T7080] tipc: Resetting bearer [ 152.203343][ T7095] device syzkaller0 entered promiscuous mode [ 152.215563][ T7079] tipc: Resetting bearer [ 152.233023][ T7079] tipc: Disabling bearer [ 152.247555][ T7099] loop2: detected capacity change from 0 to 512 [ 152.291366][ T7101] xt_CT: No such helper "snmp" [ 152.341300][ T7099] EXT4-fs (loop2): Ignoring removed nobh option [ 152.384945][ T7104] device syzkaller0 entered promiscuous mode [ 152.393965][ T7099] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 152.402906][ T7099] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.906: attempt to clear invalid blocks 1 len 1 [ 152.408920][ T7110] smc: net device vlan1 applied user defined pnetid SYZ2 [ 152.427417][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 152.428629][ T7099] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 152.452480][ T7099] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.906: invalid indirect mapped block 1819239214 (level 0) [ 152.467325][ T7099] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.906: invalid indirect mapped block 1819239214 (level 1) [ 152.492522][ T7099] EXT4-fs (loop2): 1 truncate cleaned up [ 152.498269][ T7099] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 152.512454][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 152.550464][ T26] libceph: connect (1)[c::]:6789 error -101 [ 152.568229][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 152.596573][ T7114] ceph: No mds server is up or the cluster is laggy [ 152.717493][ T7126] tipc: Failed to remove unknown binding: 66,0,0/0:2898495225/2898495227 [ 152.735773][ T7126] tipc: Failed to remove unknown binding: 66,0,0/0:2898495225/2898495226 [ 152.799870][ T7132] tipc: Failed to remove unknown binding: 66,0,0/0:2898495225/2898495227 [ 152.824643][ T7133] tipc: Enabled bearer , priority 0 [ 152.834410][ T7132] tipc: Failed to remove unknown binding: 66,0,0/0:2898495225/2898495226 [ 152.838687][ T7133] tipc: Resetting bearer [ 152.891323][ T25] audit: type=1800 audit(1789648443.844:9): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.921" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 152.949186][ T7129] tipc: Disabling bearer [ 153.014635][ T7139] device syzkaller0 entered promiscuous mode [ 153.064808][ T7145] x_tables: duplicate underflow at hook 2 [ 153.117382][ T7147] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.278436][ T7156] netlink: 136 bytes leftover after parsing attributes in process `syz.3.930'. [ 153.297807][ T7156] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 153.316696][ T7154] device syzkaller0 entered promiscuous mode [ 153.444419][ T7160] ceph: No mds server is up or the cluster is laggy [ 153.603258][ T7172] tipc: Enabled bearer , priority 0 [ 153.620155][ T7170] device syzkaller0 entered promiscuous mode [ 153.660917][ T7172] tipc: Resetting bearer [ 153.720092][ T7171] tipc: Disabling bearer [ 153.783753][ T7183] device syzkaller0 entered promiscuous mode [ 153.927508][ T7187] netlink: 56 bytes leftover after parsing attributes in process `syz.2.941'. [ 153.943611][ T7186] device syzkaller0 entered promiscuous mode [ 153.986975][ T7189] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.136958][ T13] libceph: connect (1)[c::]:6789 error -101 [ 154.145312][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 154.156919][ T7197] tipc: Failed to remove unknown binding: 66,0,0/0:3531109632/3531109634 [ 154.181559][ T7197] tipc: Failed to remove unknown binding: 66,0,0/0:3531109632/3531109633 [ 154.190409][ T7194] ceph: No mds server is up or the cluster is laggy [ 154.258312][ T7197] tipc: Failed to remove unknown binding: 66,0,0/0:3531109632/3531109634 [ 154.295380][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 154.342516][ T7197] tipc: Failed to remove unknown binding: 66,0,0/0:3531109632/3531109633 [ 154.408748][ T25] audit: type=1800 audit(1789648445.364:10): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.950" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 154.471450][ T7213] tipc: Enabled bearer , priority 0 [ 154.483269][ T7213] tipc: Resetting bearer [ 154.527431][ T7212] tipc: Disabling bearer [ 154.550501][ T7216] device syzkaller0 entered promiscuous mode [ 154.830769][ T7222] device syzkaller0 entered promiscuous mode [ 154.958648][ T7238] loop3: detected capacity change from 0 to 64 [ 155.825236][ T7247] device syzkaller0 entered promiscuous mode [ 155.838937][ T7247] tipc: Enabled bearer , priority 0 [ 155.890982][ T7252] smc: net device vlan1 applied user defined pnetid SYZ2 [ 155.919404][ T7247] tipc: Resetting bearer [ 155.950265][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 155.997116][ T7246] tipc: Resetting bearer [ 156.032323][ T7246] tipc: Disabling bearer [ 156.216546][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 156.240087][ T7275] batman_adv: batadv0: Adding interface: gretap1 [ 156.267556][ T7275] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.312863][ T7275] batman_adv: batadv0: Interface activated: gretap1 [ 156.342570][ T7279] ceph: No mds server is up or the cluster is laggy [ 156.355102][ T13] libceph: connect (1)[c::]:6789 error -101 [ 156.371371][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 156.423391][ T7292] device syzkaller0 entered promiscuous mode [ 156.449434][ T7302] netlink: 52 bytes leftover after parsing attributes in process `syz.1.975'. [ 156.682874][ T7307] device syzkaller0 entered promiscuous mode [ 156.722933][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.980'. [ 156.852952][ T7329] smc: net device vlan1 applied user defined pnetid SYZ2 [ 156.894158][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 157.134901][ T7348] device syzkaller0 entered promiscuous mode [ 157.141648][ T7345] ceph: No mds server is up or the cluster is laggy [ 157.466557][ T7373] device syzkaller0 entered promiscuous mode [ 157.852288][ T4190] libceph: connect (1)[c::]:6789 error -101 [ 157.858313][ T4190] libceph: mon0 (1)[c::]:6789 connect error [ 157.866053][ T7397] ceph: No mds server is up or the cluster is laggy [ 157.943364][ T7411] device syzkaller0 entered promiscuous mode [ 157.981315][ T7408] smc: net device vlan1 applied user defined pnetid SYZ2 [ 158.001528][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 158.300749][ T7432] tipc: Failed to remove unknown binding: 66,0,0/3917923487:1819790513/1819790515 [ 158.326914][ T7432] tipc: Failed to remove unknown binding: 66,0,0/3917923487:1819790513/1819790514 [ 158.341663][ T7427] device syzkaller0 entered promiscuous mode [ 158.403088][ T7438] tipc: Failed to remove unknown binding: 66,0,0/3917923487:1819790513/1819790515 [ 158.428788][ T7438] tipc: Failed to remove unknown binding: 66,0,0/3917923487:1819790513/1819790514 [ 158.644746][ T7442] loop3: detected capacity change from 0 to 512 [ 158.740168][ T7442] EXT4-fs (loop3): Ignoring removed nobh option [ 158.926515][ T7442] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 158.940256][ T7442] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1015: attempt to clear invalid blocks 1 len 1 [ 158.957113][ T7442] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 158.972034][ T7442] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1015: invalid indirect mapped block 1819239214 (level 0) [ 158.993390][ T7442] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1015: invalid indirect mapped block 1819239214 (level 1) [ 159.020935][ T7442] EXT4-fs (loop3): 1 truncate cleaned up [ 159.026727][ T7442] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 159.244444][ T7452] device syzkaller0 entered promiscuous mode [ 159.391441][ T7454] ceph: No mds server is up or the cluster is laggy [ 159.463334][ T7465] device syzkaller0 entered promiscuous mode [ 160.279443][ T7505] loop1: detected capacity change from 0 to 512 [ 161.181866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 161.201858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 161.211864][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 161.221858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 161.475072][ T7505] EXT4-fs (loop1): Ignoring removed nobh option [ 161.515215][ T7500] ceph: No mds server is up or the cluster is laggy [ 161.522466][ T4230] libceph: connect (1)[c::]:6789 error -101 [ 161.530060][ T4230] libceph: mon0 (1)[c::]:6789 connect error [ 161.531896][ T7505] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 161.546653][ T7505] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1032: attempt to clear invalid blocks 1 len 1 [ 161.560397][ T7505] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 161.574866][ T7505] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1032: invalid indirect mapped block 1819239214 (level 0) [ 161.590983][ T7505] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1032: invalid indirect mapped block 1819239214 (level 1) [ 161.606458][ T7505] EXT4-fs (loop1): 1 truncate cleaned up [ 161.612203][ T7505] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 161.770466][ T7518] device syzkaller0 entered promiscuous mode [ 162.644224][ T7568] loop0: detected capacity change from 0 to 512 [ 162.785205][ T7568] EXT4-fs (loop0): Ignoring removed nobh option [ 162.881216][ T7568] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 162.895890][ T7568] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1052: attempt to clear invalid blocks 1 len 1 [ 162.911475][ T7568] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 162.926362][ T7568] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1052: invalid indirect mapped block 1819239214 (level 0) [ 162.944574][ T7568] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1052: invalid indirect mapped block 1819239214 (level 1) [ 162.968440][ T7568] EXT4-fs (loop0): 1 truncate cleaned up [ 162.974224][ T7568] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 163.078614][ T7573] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1056'. [ 163.138335][ T7572] device syzkaller0 entered promiscuous mode [ 163.429056][ T7588] loop4: detected capacity change from 0 to 64 [ 164.385773][ T7606] device syzkaller0 entered promiscuous mode [ 164.488621][ T7606] tipc: Enabled bearer , priority 0 [ 164.535511][ T13] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.560290][ T7606] tipc: Resetting bearer [ 164.719112][ T7616] loop1: detected capacity change from 0 to 512 [ 164.807610][ T7605] tipc: Resetting bearer [ 164.894260][ T7605] tipc: Disabling bearer [ 164.990917][ T7616] EXT4-fs (loop1): Ignoring removed nobh option [ 165.074491][ T7616] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 165.086581][ T7616] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1071: attempt to clear invalid blocks 1 len 1 [ 165.104848][ T7616] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 165.120029][ T7616] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1071: invalid indirect mapped block 1819239214 (level 0) [ 165.139413][ T7616] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1071: invalid indirect mapped block 1819239214 (level 1) [ 165.154606][ T7616] EXT4-fs (loop1): 1 truncate cleaned up [ 165.160269][ T7616] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 165.396141][ T7628] device syzkaller0 entered promiscuous mode [ 165.654076][ T7642] loop1: detected capacity change from 0 to 64 [ 166.260952][ T7644] device syzkaller0 entered promiscuous mode [ 166.349339][ T7647] tipc: Enabled bearer , priority 0 [ 166.441047][ T7644] tipc: Resetting bearer [ 166.540605][ T7643] tipc: Resetting bearer [ 166.566218][ T7643] tipc: Disabling bearer [ 166.857023][ T7677] device syzkaller0 entered promiscuous mode [ 166.904629][ T7677] tipc: Enabled bearer , priority 0 [ 167.018637][ T7677] tipc: Resetting bearer [ 167.088177][ T7676] tipc: Resetting bearer [ 167.104555][ T7676] tipc: Disabling bearer [ 167.116184][ T7683] device syzkaller0 entered promiscuous mode [ 167.410348][ T7709] device syzkaller0 entered promiscuous mode [ 167.422084][ T7710] xt_recent: hitcount (53010) is larger than allowed maximum (255) [ 167.463985][ T7709] tipc: Enabled bearer , priority 0 [ 167.508390][ T7709] tipc: Resetting bearer [ 167.530386][ T7707] tipc: Resetting bearer [ 167.544956][ T7707] tipc: Disabling bearer [ 167.724667][ T7729] device syzkaller0 entered promiscuous mode [ 168.006323][ T7737] loop2: detected capacity change from 0 to 512 [ 168.165532][ T7737] EXT4-fs (loop2): Ignoring removed nobh option [ 168.276407][ T7737] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 168.289124][ T7737] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1102: attempt to clear invalid blocks 1 len 1 [ 168.310024][ T7737] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 168.324904][ T7737] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1102: invalid indirect mapped block 1819239214 (level 0) [ 168.347572][ T7737] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1102: invalid indirect mapped block 1819239214 (level 1) [ 168.371451][ T7737] EXT4-fs (loop2): 1 truncate cleaned up [ 168.377218][ T7737] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 168.429156][ T7736] tipc: Enabled bearer , priority 0 [ 168.465181][ T7736] tipc: Resetting bearer [ 168.533554][ T7730] tipc: Disabling bearer [ 168.980113][ T7776] device syzkaller0 entered promiscuous mode [ 169.155063][ T7784] tipc: Enabled bearer , priority 0 [ 169.234024][ T7790] loop0: detected capacity change from 0 to 64 [ 169.251951][ T7784] tipc: Resetting bearer [ 169.465129][ T7783] tipc: Disabling bearer [ 169.570537][ T7792] device syzkaller0 entered promiscuous mode [ 170.522003][ T4190] Bluetooth: hci1: command 0x0406 tx timeout [ 170.522032][ T26] Bluetooth: hci2: command 0x0406 tx timeout [ 170.522061][ T26] Bluetooth: hci3: command 0x0406 tx timeout [ 170.522080][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 170.651121][ T4190] Bluetooth: hci4: command 0x0406 tx timeout [ 170.740565][ T7830] xt_CT: No such helper "snmp" [ 170.821792][ T7840] loop0: detected capacity change from 0 to 64 [ 171.636966][ T7848] device syzkaller0 entered promiscuous mode [ 172.108833][ T7878] device syzkaller0 entered promiscuous mode [ 172.114088][ T7875] xt_CT: No such helper "snmp" [ 172.131432][ T7870] tipc: Enabled bearer , priority 0 [ 172.142302][ T7868] tipc: Resetting bearer [ 172.177963][ T7868] tipc: Disabling bearer [ 172.370679][ T7891] device syzkaller0 entered promiscuous mode [ 172.748646][ T7914] xt_CT: No such helper "snmp" [ 173.031102][ T7924] device syzkaller0 entered promiscuous mode [ 173.107643][ T7925] loop0: detected capacity change from 0 to 512 [ 173.197353][ T7925] EXT4-fs (loop0): Ignoring removed nobh option [ 173.397221][ T7925] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 173.409842][ T7925] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1165: attempt to clear invalid blocks 1 len 1 [ 173.429098][ T7925] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 173.444072][ T7925] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1165: invalid indirect mapped block 1819239214 (level 0) [ 173.462029][ T7925] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1165: invalid indirect mapped block 1819239214 (level 1) [ 173.484494][ T7925] EXT4-fs (loop0): 1 truncate cleaned up [ 173.490259][ T7925] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 173.514879][ T7924] tipc: Enabled bearer , priority 0 [ 173.577252][ T7923] tipc: Resetting bearer [ 173.621566][ T7923] tipc: Disabling bearer [ 174.142910][ T7968] tipc: Enabled bearer , priority 0 [ 174.157194][ T7964] xt_CT: No such helper "snmp" [ 174.237553][ T7968] tipc: Resetting bearer [ 174.265401][ T7963] tipc: Disabling bearer [ 174.340245][ T7986] device syzkaller0 entered promiscuous mode [ 174.355950][ T7986] tipc: Enabled bearer , priority 0 [ 174.375915][ T7985] tipc: Resetting bearer [ 174.418613][ T7985] tipc: Disabling bearer [ 174.587707][ T7992] loop0: detected capacity change from 0 to 512 [ 174.728521][ T7992] EXT4-fs (loop0): Ignoring removed nobh option [ 174.912543][ T7992] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 174.925674][ T7992] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1183: attempt to clear invalid blocks 1 len 1 [ 174.941947][ T7992] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 174.957008][ T7992] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1183: invalid indirect mapped block 1819239214 (level 0) [ 174.980295][ T7992] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1183: invalid indirect mapped block 1819239214 (level 1) [ 175.002107][ T7992] EXT4-fs (loop0): 1 truncate cleaned up [ 175.007885][ T7992] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 175.351213][ T8006] xt_CT: No such helper "snmp" [ 175.518936][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 175.592900][ T8024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.600182][ T8024] IPv6: NLM_F_CREATE should be set when creating new route [ 175.615244][ T8029] loop3: detected capacity change from 0 to 64 [ 176.483289][ T8033] device syzkaller0 entered promiscuous mode [ 176.498572][ T8046] device syzkaller0 entered promiscuous mode [ 176.563896][ T8043] tipc: Enabled bearer , priority 0 [ 176.583883][ T8042] tipc: Resetting bearer [ 176.615438][ T8042] tipc: Disabling bearer [ 176.992265][ T8069] loop2: detected capacity change from 0 to 512 [ 177.058693][ T8069] EXT4-fs (loop2): Ignoring removed nobh option [ 177.192412][ T8069] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 177.208757][ T8069] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1204: attempt to clear invalid blocks 1 len 1 [ 177.225468][ T8069] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 177.240363][ T8069] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1204: invalid indirect mapped block 1819239214 (level 0) [ 177.256951][ T8069] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1204: invalid indirect mapped block 1819239214 (level 1) [ 177.277416][ T8069] EXT4-fs (loop2): 1 truncate cleaned up [ 177.283167][ T8069] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 177.560284][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 177.582808][ T8082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.590093][ T8082] IPv6: NLM_F_CREATE should be set when creating new route [ 177.618093][ T8066] xt_CT: No such helper "snmp" [ 177.786521][ T8091] device syzkaller0 entered promiscuous mode [ 177.797142][ T8099] x_tables: duplicate underflow at hook 1 [ 177.876194][ T8098] tipc: Enabled bearer , priority 0 [ 177.889757][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.925943][ T8106] device syzkaller0 entered promiscuous mode [ 177.938983][ T8098] tipc: Resetting bearer [ 177.947224][ T8097] tipc: Disabling bearer [ 177.965141][ T8106] tipc: Enabled bearer , priority 0 [ 177.992764][ T8105] tipc: Resetting bearer [ 178.014265][ T8105] tipc: Disabling bearer [ 178.216848][ T8121] xt_CT: No such helper "snmp" [ 178.323957][ T8131] device syzkaller0 entered promiscuous mode [ 178.393652][ T8137] tipc: Enabled bearer , priority 0 [ 178.414261][ T8137] tipc: Resetting bearer [ 178.473155][ T8139] 0: reclassify loop, rule prio 0, protocol 800 [ 178.480936][ T8136] tipc: Disabling bearer [ 178.718171][ T8153] device syzkaller0 entered promiscuous mode [ 178.739905][ T8153] tipc: Enabled bearer , priority 0 [ 178.761556][ T8158] smc: net device vlan1 applied user defined pnetid SYZ2 [ 178.771010][ T8152] tipc: Resetting bearer [ 178.817776][ T8152] tipc: Disabling bearer [ 178.848532][ T8159] xt_CT: No such helper "snmp" [ 178.886612][ T8167] x_tables: duplicate underflow at hook 1 [ 179.047264][ T8178] tipc: Enabled bearer , priority 0 [ 179.077223][ T8178] tipc: Resetting bearer [ 179.120080][ T8175] tipc: Disabling bearer [ 179.271478][ T8197] device syzkaller0 entered promiscuous mode [ 179.295785][ T8194] xt_CT: No such helper "snmp" [ 179.307447][ T8197] tipc: Enabled bearer , priority 0 [ 179.325955][ T8195] tipc: Resetting bearer [ 179.364692][ T8195] tipc: Disabling bearer [ 179.475838][ T8212] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 179.612384][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 179.625241][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1267'. [ 179.638637][ T8222] tipc: Enabled bearer , priority 0 [ 179.649264][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 179.660028][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1267'. [ 179.674225][ T8222] tipc: Resetting bearer [ 179.683094][ T8221] tipc: Disabling bearer [ 179.887778][ T8236] xt_CT: No such helper "snmp" [ 179.991503][ T8252] device syzkaller0 entered promiscuous mode [ 180.038980][ T8252] tipc: Enabled bearer , priority 0 [ 180.070744][ T8251] tipc: Resetting bearer [ 180.112189][ T8251] tipc: Disabling bearer [ 180.181077][ T8260] tipc: Enabling of bearer rejected, failed to enable media [ 180.578415][ T8292] xt_CT: No such helper "snmp" [ 180.642508][ T8303] device syzkaller0 entered promiscuous mode [ 180.669196][ T8303] tipc: Enabled bearer , priority 0 [ 180.711550][ T8301] tipc: Resetting bearer [ 180.750691][ T8301] tipc: Disabling bearer [ 180.771225][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 180.791357][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.813704][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.823024][ T8314] bond0: (slave bond_slave_0): Releasing backup interface [ 180.832433][ T8314] bond0: (slave bond_slave_1): Releasing backup interface [ 180.845245][ T8314] team0: Port device team_slave_0 removed [ 180.852539][ T8314] team0: Port device team_slave_1 removed [ 180.858494][ T8314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.881011][ T8314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.171264][ T8343] tipc: Enabling of bearer rejected, failed to enable media [ 181.188609][ T8334] xt_CT: No such helper "snmp" [ 181.316273][ T8352] device syzkaller0 entered promiscuous mode [ 181.560755][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 181.600449][ T8371] device bridge_slave_0 left promiscuous mode [ 181.639274][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.677105][ T8371] device bridge_slave_1 left promiscuous mode [ 181.685040][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.695883][ T8371] bond0: (slave bond_slave_0): Releasing backup interface [ 181.705909][ T8371] bond0: (slave bond_slave_1): Releasing backup interface [ 181.723396][ T8371] team0: Port device team_slave_0 removed [ 181.730673][ T8371] team0: Port device team_slave_1 removed [ 181.743136][ T8371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.751310][ T8371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.769125][ T8385] xt_CT: No such helper "snmp" [ 181.901618][ T8394] device syzkaller0 entered promiscuous mode [ 181.956856][ T8402] tipc: Enabling of bearer rejected, failed to enable media [ 182.367010][ T8423] xt_CT: No such helper "snmp" [ 182.387801][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 182.432239][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.439564][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.507221][ T8444] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.554962][ T8444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.637554][ T8444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.665644][ T8444] device bridge_slave_0 left promiscuous mode [ 182.671878][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.681140][ T8444] device bridge_slave_1 left promiscuous mode [ 182.695505][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.708951][ T8444] bond0: (slave bond_slave_0): Releasing backup interface [ 182.729983][ T8444] bond0: (slave bond_slave_1): Releasing backup interface [ 182.803630][ T8444] team0: Port device team_slave_0 removed [ 182.833112][ T8444] team0: Port device team_slave_1 removed [ 182.839454][ T8444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.847251][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.855482][ T8444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.863266][ T8444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.876850][ T8444] batman_adv: batadv0: Interface deactivated: gretap1 [ 182.884046][ T8444] batman_adv: batadv0: Removing interface: gretap1 [ 183.135106][ T8486] tipc: Enabling of bearer rejected, failed to enable media [ 183.230698][ T8485] device syzkaller0 entered promiscuous mode [ 183.619977][ T8518] device syzkaller0 entered promiscuous mode [ 183.935185][ T8534] loop2: detected capacity change from 0 to 64 [ 184.803102][ T8538] 0: reclassify loop, rule prio 0, protocol 800 [ 184.809999][ T8542] tipc: Enabling of bearer rejected, failed to enable media [ 185.051534][ T8569] device syzkaller0 entered promiscuous mode [ 185.224942][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 185.256275][ T8579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.368182][ T8587] loop2: detected capacity change from 0 to 64 [ 186.175391][ T8591] xt_CT: No such helper "snmp" [ 186.369617][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1404'. [ 186.388027][ T8611] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1404'. [ 186.459036][ T8613] tc action pedit offset must be on 32 bit boundaries [ 186.560498][ T8624] tipc: Enabling of bearer rejected, failed to enable media [ 186.678540][ T8629] xt_CT: No such helper "snmp" [ 186.833920][ T8641] loop2: detected capacity change from 0 to 64 [ 187.810167][ T8660] device syzkaller0 entered promiscuous mode [ 188.219409][ T8670] tipc: Enabling of bearer rejected, failed to enable media [ 188.382467][ T8687] loop3: detected capacity change from 0 to 512 [ 188.534012][ T8687] EXT4-fs (loop3): Ignoring removed nobh option [ 188.642925][ T8687] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 188.657763][ T8687] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1424: attempt to clear invalid blocks 1 len 1 [ 188.676463][ T8687] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 188.691712][ T8687] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1424: invalid indirect mapped block 1819239214 (level 0) [ 188.710477][ T8687] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1424: invalid indirect mapped block 1819239214 (level 1) [ 188.735534][ T8687] EXT4-fs (loop3): 1 truncate cleaned up [ 188.741436][ T8687] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 188.896855][ T8697] loop0: detected capacity change from 0 to 64 [ 189.862563][ T8702] device syzkaller0 entered promiscuous mode [ 189.878934][ T8707] device syzkaller0 entered promiscuous mode [ 190.078160][ T8722] tipc: Enabling of bearer rejected, failed to enable media [ 190.170578][ T8724] tc action pedit offset must be on 32 bit boundaries [ 190.269797][ T8731] device syzkaller0 entered promiscuous mode [ 190.320163][ T8731] tc action pedit 'at' offset 5 out of bounds [ 190.342557][ T8739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1441'. [ 190.414437][ T8745] tipc: Failed to remove unknown binding: 66,0,0/0:1675552690/1675552692 [ 190.450853][ T8745] tipc: Failed to remove unknown binding: 66,0,0/0:1675552690/1675552691 [ 190.526204][ T8748] tipc: Failed to remove unknown binding: 66,0,0/0:1675552690/1675552692 [ 190.552241][ T8748] tipc: Failed to remove unknown binding: 66,0,0/0:1675552690/1675552691 [ 190.612878][ T8754] loop2: detected capacity change from 0 to 64 [ 191.405781][ T8760] device syzkaller0 entered promiscuous mode [ 191.501722][ T8761] device syzkaller0 entered promiscuous mode [ 191.712044][ T8788] tipc: Enabling of bearer rejected, failed to enable media [ 192.016727][ T8811] tipc: Failed to remove unknown binding: 66,0,0/0:1957464049/1957464051 [ 192.045672][ T8811] tipc: Failed to remove unknown binding: 66,0,0/0:1957464049/1957464050 [ 192.134799][ T8814] tipc: Failed to remove unknown binding: 66,0,0/0:1957464049/1957464051 [ 192.183907][ T8819] loop2: detected capacity change from 0 to 64 [ 192.304424][ T8814] tipc: Failed to remove unknown binding: 66,0,0/0:1957464049/1957464050 [ 193.010836][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 193.074716][ T8827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.082005][ T8827] IPv6: NLM_F_CREATE should be set when creating new route [ 193.135140][ T8833] device syzkaller0 entered promiscuous mode [ 193.255120][ T8843] device syzkaller0 entered promiscuous mode [ 193.393062][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1476'. [ 193.415490][ T8859] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.424383][ T8859] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.433130][ T8859] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.441921][ T8859] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.561019][ T8862] tipc: Enabling of bearer rejected, failed to enable media [ 193.573893][ T8867] loop1: detected capacity change from 0 to 64 [ 193.684380][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1476'. [ 193.815096][ T8868] tipc: Failed to remove unknown binding: 66,0,0/0:3819117752/3819117754 [ 194.000657][ T8868] tipc: Failed to remove unknown binding: 66,0,0/0:3819117752/3819117753 [ 194.046175][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.056172][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.291899][ T8868] tipc: Failed to remove unknown binding: 66,0,0/0:3819117752/3819117754 [ 194.334597][ T8868] tipc: Failed to remove unknown binding: 66,0,0/0:3819117752/3819117753 [ 194.501568][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 194.511748][ T8889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.584606][ T8893] device syzkaller0 entered promiscuous mode [ 194.883015][ T8917] loop1: detected capacity change from 0 to 64 [ 194.917317][ T8920] tipc: Enabling of bearer rejected, failed to enable media [ 195.841744][ T8932] tipc: Failed to remove unknown binding: 66,0,0/3917923487:658326845/658326847 [ 195.853172][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'. [ 195.878638][ T8932] tipc: Failed to remove unknown binding: 66,0,0/3917923487:658326845/658326846 [ 195.891005][ T8934] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.900074][ T8934] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.908827][ T8934] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.917576][ T8934] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.936036][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 195.946698][ T8942] tipc: Failed to remove unknown binding: 66,0,0/3917923487:658326845/658326847 [ 195.957741][ T8937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.966711][ T8942] tipc: Failed to remove unknown binding: 66,0,0/3917923487:658326845/658326846 [ 195.976275][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'. [ 196.076702][ T8947] device syzkaller0 entered promiscuous mode [ 196.470021][ T8965] loop1: detected capacity change from 0 to 512 [ 197.025056][ T8965] EXT4-fs (loop1): Ignoring removed nobh option [ 197.037277][ T8965] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 197.046236][ T8965] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1507: attempt to clear invalid blocks 1 len 1 [ 197.060296][ T8965] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 197.075046][ T8965] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1507: invalid indirect mapped block 1819239214 (level 0) [ 197.094585][ T8965] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1507: invalid indirect mapped block 1819239214 (level 1) [ 197.109785][ T8965] EXT4-fs (loop1): 1 truncate cleaned up [ 197.115570][ T8965] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 197.204201][ T8985] tipc: Enabling of bearer rejected, failed to enable media [ 197.468501][ T8995] device syzkaller0 entered promiscuous mode [ 197.568794][ T9005] tipc: Failed to remove unknown binding: 66,0,0/0:1852003158/1852003160 [ 197.575420][ T9003] device syzkaller0 entered promiscuous mode [ 197.583656][ T9005] tipc: Failed to remove unknown binding: 66,0,0/0:1852003158/1852003159 [ 197.644878][ T9011] tipc: Failed to remove unknown binding: 66,0,0/0:1852003158/1852003160 [ 197.662965][ T9011] tipc: Failed to remove unknown binding: 66,0,0/0:1852003158/1852003159 [ 197.870383][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1527'. [ 198.126554][ T9038] loop2: detected capacity change from 0 to 512 [ 198.176544][ T9038] EXT4-fs (loop2): Ignoring removed nobh option [ 198.768509][ T9038] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 198.779569][ T9038] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1526: attempt to clear invalid blocks 1 len 1 [ 198.795716][ T9038] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 198.810581][ T9038] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1526: invalid indirect mapped block 1819239214 (level 0) [ 198.827203][ T9038] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1526: invalid indirect mapped block 1819239214 (level 1) [ 198.847740][ T9038] EXT4-fs (loop2): 1 truncate cleaned up [ 198.853513][ T9038] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 199.095427][ T9047] device syzkaller0 entered promiscuous mode [ 199.192485][ T9043] tipc: Enabled bearer , priority 0 [ 199.235516][ T9043] tipc: Resetting bearer [ 199.264585][ T9053] device syzkaller0 entered promiscuous mode [ 199.372793][ T9042] tipc: Disabling bearer [ 199.558246][ T9070] tipc: Failed to remove unknown binding: 66,0,0/0:3829798356/3829798358 [ 199.612596][ T9071] tipc: Enabled bearer , priority 0 [ 199.622132][ T9070] tipc: Failed to remove unknown binding: 66,0,0/0:3829798356/3829798357 [ 199.649084][ T9071] tipc: Resetting bearer [ 199.676336][ T9070] tipc: Failed to remove unknown binding: 66,0,0/0:3829798356/3829798358 [ 199.755350][ T9068] tipc: Disabling bearer [ 199.869828][ T9070] tipc: Failed to remove unknown binding: 66,0,0/0:3829798356/3829798357 [ 200.201994][ T9089] loop3: detected capacity change from 0 to 512 [ 201.163302][ T9089] EXT4-fs (loop3): Ignoring removed nobh option [ 201.245334][ T9089] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 201.257047][ T9089] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1543: attempt to clear invalid blocks 1 len 1 [ 201.274443][ T9089] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 201.289179][ T9089] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1543: invalid indirect mapped block 1819239214 (level 0) [ 201.305473][ T9089] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1543: invalid indirect mapped block 1819239214 (level 1) [ 201.324615][ T9089] EXT4-fs (loop3): 1 truncate cleaned up [ 201.330363][ T9089] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 201.668949][ T9101] device syzkaller0 entered promiscuous mode [ 201.724917][ T9108] tipc: Enabled bearer , priority 0 [ 201.859305][ T9108] tipc: Resetting bearer [ 201.871112][ T9112] device syzkaller0 entered promiscuous mode [ 201.906054][ T9106] tipc: Disabling bearer [ 203.109989][ T9151] device syzkaller0 entered promiscuous mode [ 204.811708][ T9154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.820927][ T9154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.829835][ T9154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.838720][ T9154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.149180][ T9211] netlink: 'syz.1.1589': attribute type 3 has an invalid length. [ 206.207776][ T9214] device syzkaller0 entered promiscuous mode [ 206.226333][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'. [ 206.245537][ T9220] device syzkaller0 entered promiscuous mode [ 206.295792][ T9220] tipc: Enabled bearer , priority 0 [ 206.320736][ T9220] tipc: Resetting bearer [ 206.359778][ T9216] tipc: Resetting bearer [ 206.406598][ T9216] tipc: Disabling bearer [ 206.427952][ T9228] device vlan3 entered promiscuous mode [ 206.695040][ T9248] sctp: [Deprecated]: syz.1.1608 (pid 9248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.695040][ T9248] Use struct sctp_sack_info instead [ 206.829855][ T9251] loop2: detected capacity change from 0 to 512 [ 207.089085][ T9251] EXT4-fs (loop2): Ignoring removed nobh option [ 207.260615][ T9251] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 207.275453][ T9251] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1601: attempt to clear invalid blocks 1 len 1 [ 207.292706][ T9251] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 207.307665][ T9251] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1601: invalid indirect mapped block 1819239214 (level 0) [ 207.323294][ T9251] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1601: invalid indirect mapped block 1819239214 (level 1) [ 207.373559][ T9251] EXT4-fs (loop2): 1 truncate cleaned up [ 207.379251][ T9251] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 207.380204][ T9260] device syzkaller0 entered promiscuous mode [ 207.750282][ T9277] device syzkaller0 entered promiscuous mode [ 207.827626][ T9272] device syzkaller0 entered promiscuous mode [ 208.107711][ T9310] device syzkaller0 entered promiscuous mode [ 208.117203][ T9310] tipc: Enabled bearer , priority 0 [ 208.162777][ T9310] tipc: Resetting bearer [ 208.219023][ T9314] device syzkaller0 entered promiscuous mode [ 208.237039][ T9309] tipc: Resetting bearer [ 208.361020][ T9318] loop2: detected capacity change from 0 to 512 [ 208.432245][ T9309] tipc: Disabling bearer [ 208.477766][ T9318] EXT4-fs (loop2): Ignoring removed nobh option [ 208.621796][ T9318] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 208.637437][ T9318] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1629: attempt to clear invalid blocks 1 len 1 [ 208.656018][ T9318] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 208.670930][ T9318] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1629: invalid indirect mapped block 1819239214 (level 0) [ 208.687779][ T9318] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1629: invalid indirect mapped block 1819239214 (level 1) [ 208.711301][ T9318] EXT4-fs (loop2): 1 truncate cleaned up [ 208.717248][ T9318] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 209.010841][ T9328] device syzkaller0 entered promiscuous mode [ 209.191420][ T9335] device syzkaller0 entered promiscuous mode [ 209.346324][ T9351] device syzkaller0 entered promiscuous mode [ 209.374680][ T9351] tipc: Enabled bearer , priority 0 [ 209.431589][ T9351] tipc: Resetting bearer [ 209.496264][ T9350] tipc: Resetting bearer [ 209.528456][ T9350] tipc: Disabling bearer [ 209.581500][ T9366] device syzkaller0 entered promiscuous mode [ 209.664416][ T9376] device syzkaller0 entered promiscuous mode [ 209.854993][ T9388] device syzkaller0 entered promiscuous mode [ 210.031253][ T9399] device syzkaller0 entered promiscuous mode [ 210.157697][ T9407] device syzkaller0 entered promiscuous mode [ 210.184355][ T9407] tipc: Enabled bearer , priority 0 [ 210.232585][ T9407] tipc: Resetting bearer [ 210.269701][ T9405] tipc: Resetting bearer [ 210.301605][ T9405] tipc: Disabling bearer [ 210.329085][ T9415] device syzkaller1 entered promiscuous mode [ 210.546964][ T9429] device syzkaller0 entered promiscuous mode [ 210.581505][ T9432] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 210.678548][ T9439] device syzkaller0 entered promiscuous mode [ 210.779907][ T9443] device syzkaller0 entered promiscuous mode [ 210.808532][ T9441] device syzkaller0 entered promiscuous mode [ 211.027737][ T9458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.217411][ T9475] device syzkaller0 entered promiscuous mode [ 211.247610][ T9476] device syzkaller0 entered promiscuous mode [ 211.330709][ T9484] netlink: 'syz.0.1689': attribute type 3 has an invalid length. [ 211.346431][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1689'. [ 211.435895][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 211.545376][ T9497] device syzkaller0 entered promiscuous mode [ 211.647263][ T9502] device syzkaller0 entered promiscuous mode [ 211.818184][ T9514] device syzkaller0 entered promiscuous mode [ 212.051359][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1710'. [ 212.103319][ T9530] device syzkaller0 entered promiscuous mode [ 212.239257][ T9537] device syzkaller0 entered promiscuous mode [ 212.303839][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1721'. [ 212.320107][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 212.330048][ T9551] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 212.344765][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 212.426805][ T9554] device syzkaller0 entered promiscuous mode [ 212.582548][ T9564] device syzkaller0 entered promiscuous mode [ 212.608182][ T9564] tipc: Enabled bearer , priority 0 [ 212.649160][ T9564] tipc: Resetting bearer [ 212.712137][ T9563] tipc: Resetting bearer [ 212.748370][ T9563] tipc: Disabling bearer [ 212.788363][ T9571] device syzkaller0 entered promiscuous mode [ 212.808858][ T9574] device syzkaller0 entered promiscuous mode [ 212.838533][ T9571] tipc: Enabled bearer , priority 0 [ 212.978470][ T9584] tipc: Resetting bearer [ 213.118020][ T9570] tipc: Resetting bearer [ 213.233125][ T9570] tipc: Disabling bearer [ 213.888684][ T9586] device syzkaller0 entered promiscuous mode [ 213.977656][ T9599] device syzkaller0 entered promiscuous mode [ 214.029498][ T9608] tc action pedit offset must be on 32 bit boundaries [ 214.095958][ T9616] device syzkaller0 entered promiscuous mode [ 214.179877][ T9619] device syzkaller0 entered promiscuous mode [ 214.215416][ T9619] tipc: Enabled bearer , priority 0 [ 214.260760][ T9619] tipc: Resetting bearer [ 214.287301][ T9618] tipc: Resetting bearer [ 214.319154][ T9618] tipc: Disabling bearer [ 214.403074][ T9624] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 214.606780][ T9638] device syzkaller0 entered promiscuous mode [ 214.742428][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1759'. [ 214.791580][ T9646] device syzkaller0 entered promiscuous mode [ 214.868849][ T9650] device syzkaller0 entered promiscuous mode [ 215.037169][ T9658] tipc: Enabled bearer , priority 0 [ 215.055497][ T9658] tipc: Resetting bearer [ 215.063720][ T9656] tipc: Disabling bearer [ 215.077654][ T9659] tipc: Enabled bearer , priority 0 [ 215.106311][ T9659] device syzkaller0 entered promiscuous mode [ 215.182084][ T9659] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 215.228148][ T9659] tipc: Resetting bearer [ 215.271519][ T9665] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 215.333148][ T9657] tipc: Resetting bearer [ 215.348176][ T9657] tipc: Disabling bearer [ 215.374508][ T9677] Unknown options in mask 6 [ 215.376042][ T9675] device syzkaller0 entered promiscuous mode [ 215.401288][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1774'. [ 215.413443][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1774'. [ 215.428148][ T9677] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1774'. [ 215.469675][ T9679] device syzkaller0 entered promiscuous mode [ 215.574131][ T9684] device syzkaller0 entered promiscuous mode [ 215.604326][ T9684] tipc: Enabled bearer , priority 0 [ 215.650529][ T9684] tipc: Resetting bearer [ 215.681079][ T9691] device syzkaller0 entered promiscuous mode [ 215.690674][ T9681] tipc: Resetting bearer [ 215.708385][ T9681] tipc: Disabling bearer [ 216.935863][ T9720] device syzkaller0 entered promiscuous mode [ 217.139562][ T9727] device syzkaller0 entered promiscuous mode [ 217.372861][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 217.430636][ T9749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1802'. [ 217.449019][ T9746] policy can only be matched on NF_INET_PRE_ROUTING [ 217.449035][ T9746] unable to load match [ 217.501136][ T9749] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1802'. [ 217.522885][ T9749] device bridge0 left promiscuous mode [ 217.537950][ T9749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1802'. [ 218.412029][ T9762] device syzkaller0 entered promiscuous mode [ 218.721379][ T9775] device syzkaller0 entered promiscuous mode [ 218.750464][ T9778] tipc: Failed to remove unknown binding: 66,0,0/3917923487:585688230/585688231 [ 218.892497][ T9784] tipc: Failed to remove unknown binding: 66,0,0/3917923487:585688230/585688231 [ 219.097341][ T9786] loop3: detected capacity change from 0 to 512 [ 219.177349][ T9786] EXT4-fs (loop3): Ignoring removed nobh option [ 219.369732][ T9786] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 219.384101][ T9786] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1817: attempt to clear invalid blocks 1 len 1 [ 219.401621][ T9786] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 219.416583][ T9786] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1817: invalid indirect mapped block 1819239214 (level 0) [ 219.439460][ T9786] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1817: invalid indirect mapped block 1819239214 (level 1) [ 219.462251][ T9786] EXT4-fs (loop3): 1 truncate cleaned up [ 219.468153][ T9786] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 219.936881][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1822'. [ 220.611595][ T9821] device syzkaller0 entered promiscuous mode [ 220.862153][ T9830] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1829'. [ 220.874379][ T9836] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1829'. [ 220.894592][ T9836] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1829'. [ 220.917687][ T9835] device syzkaller0 entered promiscuous mode [ 222.101152][ T9870] device syzkaller0 entered promiscuous mode [ 222.147509][ T9865] device syzkaller0 entered promiscuous mode [ 222.269550][ T9875] device syzkaller0 entered promiscuous mode [ 222.459824][ T9879] device syzkaller0 entered promiscuous mode [ 222.508141][ T9885] device syzkaller0 entered promiscuous mode [ 224.088146][ T9902] device syzkaller0 entered promiscuous mode [ 224.140304][ T9907] tipc: Enabled bearer , priority 0 [ 224.150425][ T9900] device syzkaller0 entered promiscuous mode [ 224.229251][ T9902] tipc: Resetting bearer [ 224.261420][ T9898] tipc: Resetting bearer [ 224.283164][ T9898] tipc: Disabling bearer [ 224.402810][ T9917] device syzkaller0 entered promiscuous mode [ 224.589469][ T9931] ip_tables: iptables: counters copy to user failed while replacing table [ 224.754194][ T9942] device syzkaller0 entered promiscuous mode [ 224.771042][ T9942] tipc: Enabled bearer , priority 0 [ 224.808698][ T9942] tipc: Resetting bearer [ 224.817636][ T9941] tipc: Resetting bearer [ 224.834408][ T9941] tipc: Disabling bearer [ 225.148641][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 225.411611][ T9972] tipc: Enabled bearer , priority 0 [ 225.425412][ T9972] device syzkaller0 entered promiscuous mode [ 225.464420][ T9972] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 225.504131][ T9972] tipc: Resetting bearer [ 225.538101][ T9971] tipc: Resetting bearer [ 225.567968][ T9971] tipc: Disabling bearer [ 225.587963][ T9979] device syzkaller0 entered promiscuous mode [ 225.612164][ T9979] tipc: Enabled bearer , priority 0 [ 225.635831][ T9979] tipc: Resetting bearer [ 225.672993][ T9978] tipc: Resetting bearer [ 225.755807][ T9988] loop2: detected capacity change from 0 to 64 [ 225.809761][ T9978] tipc: Disabling bearer [ 226.509507][ T9992] tipc: Failed to remove unknown binding: 66,0,0/0:2931500637/2931500639 [ 226.587031][ T9992] tipc: Failed to remove unknown binding: 66,0,0/0:2931500637/2931500638 [ 226.613928][T10001] netlink: 632 bytes leftover after parsing attributes in process `syz.1.1900'. [ 226.750535][T10012] tipc: Enabled bearer , priority 0 [ 226.777244][T10012] device syzkaller0 entered promiscuous mode [ 226.788119][T10012] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 226.811880][T10008] tipc: Enabled bearer , priority 0 [ 226.850434][T10012] tipc: Resetting bearer [ 226.870854][T10008] tipc: Resetting bearer [ 226.884213][T10011] tipc: Resetting bearer [ 226.900783][T10011] tipc: Disabling bearer [ 226.927373][T10005] tipc: Disabling bearer [ 227.008396][T10025] device syzkaller0 entered promiscuous mode [ 227.038309][T10023] device syzkaller0 entered promiscuous mode [ 227.048507][T10025] tipc: Enabled bearer , priority 0 [ 227.100348][T10025] tipc: Resetting bearer [ 227.122728][T10024] tipc: Resetting bearer [ 227.139262][T10024] tipc: Disabling bearer [ 227.156869][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 227.270438][T10037] device syzkaller0 entered promiscuous mode [ 227.503059][T10054] tipc: Enabled bearer , priority 0 [ 227.536888][T10054] device syzkaller0 entered promiscuous mode [ 227.553885][T10054] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 227.607729][T10059] netlink: 880 bytes leftover after parsing attributes in process `syz.1.1923'. [ 227.669656][T10054] tipc: Resetting bearer [ 227.690652][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 227.708938][T10053] tipc: Resetting bearer [ 227.773395][T10053] tipc: Disabling bearer [ 227.911462][T10078] device syzkaller0 entered promiscuous mode [ 227.930725][T10082] ip_tables: iptables: counters copy to user failed while replacing table [ 227.935669][T10078] 0: reclassify loop, rule prio 0, protocol 700 [ 228.132955][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 228.354439][T10084] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 228.518481][T10116] tipc: Enabled bearer , priority 0 [ 228.552907][T10116] device syzkaller0 entered promiscuous mode [ 228.568649][T10116] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 228.607212][T10116] tipc: Resetting bearer [ 228.645693][T10115] tipc: Resetting bearer [ 228.670085][T10115] tipc: Disabling bearer [ 228.688803][T10127] ip_tables: iptables: counters copy to user failed while replacing table [ 228.842218][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 229.282166][T10165] device syzkaller0 entered promiscuous mode [ 229.291091][T10165] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 229.409069][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1963'. [ 230.672862][T10198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1974'. [ 230.704742][T10200] netlink: 'syz.1.1975': attribute type 1 has an invalid length. [ 230.712608][T10200] netlink: 'syz.1.1975': attribute type 2 has an invalid length. [ 230.855762][T10210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.863032][T10210] IPv6: NLM_F_CREATE should be set when creating new route [ 230.870285][T10210] IPv6: NLM_F_CREATE should be set when creating new route [ 231.063039][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1985'. [ 232.108400][T10152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.321406][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1991'. [ 232.380351][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'. [ 232.545153][T10256] tipc: Enabled bearer , priority 0 [ 232.633957][T10260] device syzkaller0 entered promiscuous mode [ 232.661482][T10256] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 232.680581][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1998'. [ 232.730246][T10256] tipc: Resetting bearer [ 232.759981][T10255] tipc: Resetting bearer [ 232.801606][T10255] tipc: Disabling bearer [ 232.849120][T10273] tipc: Failed to remove unknown binding: 66,0,0/0:757715651/757715652 [ 232.937845][T10281] tipc: Failed to remove unknown binding: 66,0,0/0:757715651/757715652 [ 233.007577][T10283] device sit0 entered promiscuous mode [ 233.030444][T10283] netlink: 'syz.3.2008': attribute type 1 has an invalid length. [ 233.055569][T10283] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2008'. [ 233.087797][T10283] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2008'. [ 233.718943][T10301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2014'. [ 233.818888][T10309] tipc: Enabled bearer , priority 0 [ 233.833996][T10309] device syzkaller0 entered promiscuous mode [ 233.851093][T10309] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 233.913519][T10309] tipc: Resetting bearer [ 233.932637][T10308] tipc: Resetting bearer [ 233.959495][T10308] tipc: Disabling bearer [ 233.988414][T10321] ip_tables: iptables: counters copy to user failed while replacing table [ 234.316120][T10343] batman_adv: batadv0: Adding interface: macvlan2 [ 234.352065][T10343] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.422790][T10343] batman_adv: batadv0: Interface activated: macvlan2 [ 234.520082][T10348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.532011][T10348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.543206][T10348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.558558][T10348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.642604][T10356] tipc: Enabled bearer , priority 0 [ 234.662638][T10356] device syzkaller0 entered promiscuous mode [ 234.683664][T10356] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 234.720263][T10356] tipc: Resetting bearer [ 234.738041][T10355] tipc: Resetting bearer [ 234.790470][T10355] tipc: Disabling bearer [ 234.850842][T10360] netlink: 'syz.4.2038': attribute type 4 has an invalid length. [ 235.007169][T10368] device syzkaller0 entered promiscuous mode [ 235.071319][T10372] device syzkaller0 entered promiscuous mode [ 235.247707][T10383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2049'. [ 235.317691][T10388] tipc: Enabled bearer , priority 0 [ 235.352480][T10388] device syzkaller0 entered promiscuous mode [ 235.377921][T10388] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 235.409885][T10388] tipc: Resetting bearer [ 235.438468][T10387] tipc: Resetting bearer [ 235.466683][T10387] tipc: Disabling bearer [ 235.692353][T10409] device syzkaller0 entered promiscuous mode [ 235.908526][T10427] unsupported nla_type 41 [ 236.075359][T10434] device syzkaller0 entered promiscuous mode [ 236.112205][T10441] tipc: Enabled bearer , priority 0 [ 236.119520][T10441] device syzkaller0 entered promiscuous mode [ 236.133446][T10441] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 236.186478][T10441] tipc: Resetting bearer [ 236.209093][T10440] tipc: Resetting bearer [ 236.225759][T10440] tipc: Disabling bearer [ 236.268224][T10450] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2074'. [ 236.280499][T10451] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2073'. [ 236.350629][T10453] tipc: Failed to remove unknown binding: 66,0,0/3917923487:3741389931/3741389932 [ 236.451226][T10461] device syzkaller0 entered promiscuous mode [ 236.478272][T10460] tipc: Failed to remove unknown binding: 66,0,0/3917923487:3741389931/3741389932 [ 236.601776][T10470] device syzkaller0 entered promiscuous mode [ 236.882482][ T4240] BUG: using __this_cpu_add() in preemptible [00000000] code: kworker/u4:5/4240 [ 236.892450][ T4240] caller is nf_flow_offload_del+0xba/0x190 [ 236.898312][ T4240] CPU: 1 PID: 4240 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 236.905866][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.907694][T10482] device syzkaller1 entered promiscuous mode [ 236.915919][ T4240] Workqueue: act_ct_workqueue tcf_ct_flow_table_cleanup_work [ 236.915987][ T4240] Call Trace: [ 236.915994][ T4240] [ 236.916001][ T4240] dump_stack_lvl+0x188/0x250 [ 236.934938][T10484] tipc: Enabled bearer , priority 0 [ 236.935523][ T4240] ? show_regs_print_info+0x20/0x20 [ 236.935549][ T4240] ? load_image+0x410/0x410 [ 236.945586][T10484] device syzkaller0 entered promiscuous mode [ 236.946799][ T4240] check_preemption_disabled+0x104/0x110 [ 236.946830][ T4240] nf_flow_offload_del+0xba/0x190 [ 236.967484][T10484] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 236.968050][ T4240] nf_flow_table_iterate+0x132/0x1e0 [ 236.968075][ T4240] ? nf_flow_table_iterate+0x1e0/0x1e0 [ 236.991560][ T4240] ? nf_flow_table_gc_run+0x20/0x20 [ 236.996751][ T4240] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 237.002727][ T4240] nf_flow_table_free+0x12f/0x150 [ 237.007760][ T4240] tcf_ct_flow_table_cleanup_work+0x29/0x1d0 [ 237.013743][ T4240] ? _raw_spin_unlock_irq+0x1f/0x40 [ 237.018939][ T4240] process_one_work+0x867/0xff0 [ 237.023811][ T4240] ? worker_detach_from_pool+0x240/0x240 [ 237.029456][ T4240] ? lockdep_hardirqs_off+0x70/0x100 [ 237.034742][ T4240] ? _raw_spin_lock_irq+0xb7/0xf0 [ 237.039749][ T4240] ? _raw_spin_lock_irqsave+0x100/0x100 [ 237.045300][ T4240] ? wq_worker_running+0x97/0x170 [ 237.050340][ T4240] worker_thread+0xad7/0x12a0 [ 237.055037][ T4240] kthread+0x42e/0x520 [ 237.059111][ T4240] ? rcu_lock_release+0x20/0x20 [ 237.063964][ T4240] ? kthread_blkcg+0xd0/0xd0 [ 237.068558][ T4240] ret_from_fork+0x1f/0x30 [ 237.072990][ T4240] [ 237.124037][T10484] tipc: Resetting bearer [ 237.155066][T10483] tipc: Resetting bearer [ 237.176967][T10483] tipc: Disabling bearer