last executing test programs: 6.307968803s ago: executing program 4 (id=4349): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x3, 0x8, 0x7, 0x960, 0xffffffffffffffff, 0xfca1}, 0x50) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="4f402a79945061bc84109c2aab5d", 0xe}, {&(0x7f0000000200)="5fefd8", 0x3}, {&(0x7f0000000840)="155e876d973099a3de769ee0a465ebefe4400ef56b22f9dfa07a9f4a2789ff72655a1fae087a27e259139609a8b78196b8743c7324456a0ad5cabe109c11ae5833a08051bb259cb11a259f3f85a5179c54a6f63ff0bccb1386e1bbaff74b327d9e5055bc91be0cd956df019f", 0x6c}], 0x3, 0x0, 0x0, 0x10}, 0x84) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442", 0x98}, {&(0x7f0000000640)="43215c74775babf5edd55ac86e504abc04f348ed36a3b40c1f9712ed2e1ca15ced0aede50fda81fdc1", 0x29}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f7", 0x1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="51c20000000000001c0012800e000100697036677265746170000000080002800400120008000300", @ANYBLOB="b792aff1372811d39dc11e32898769cfab90edd7161bdc2f0cca875daf4d04b996f6af840d2c9d7e75d74e4cbd733be740fc3ed5c527345fece4512de531b7d1a0393f33f5a5dd1bab7f7be135dd1d1bb2f77ba39586a9b5319ca5f73297000000000000002c00181b44bf8950dc30a1b8403e357dbf6f8b56a890cce5c8007924e828b7fe33a27d71f0"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000380)={0x7, 0x4, 0x3, 0xfffffff7}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.760659142s ago: executing program 4 (id=4367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}, 0x5) 4.510801047s ago: executing program 4 (id=4373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc33, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0xb9, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x5, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x7, 0x2, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xce3a, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0xffffffff, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, 0x0}, 0x4) 4.438809221s ago: executing program 3 (id=4374): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8922, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r5, &(0x7f0000000180)="02033e00d3fc02000000ab5d71b9edd7c9560385dc", 0x15, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = getpid() perf_event_open(0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.360450636s ago: executing program 4 (id=4376): ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000340)={0x0, "75398238079ac44447b1b28acae0a58d"}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="61050603"], 0x61) 4.249041742s ago: executing program 3 (id=4378): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x3, 0x8, 0x7, 0x960, 0xffffffffffffffff, 0xfca1}, 0x50) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="4f402a79945061bc84109c2aab5d", 0xe}, {&(0x7f0000000200)="5fefd8", 0x3}, {&(0x7f0000000840)="155e876d973099a3de769ee0a465ebefe4400ef56b22f9dfa07a9f4a2789ff72655a1fae087a27e259139609a8b78196b8743c7324456a0ad5cabe109c11ae5833a08051bb259cb11a259f3f85a5179c54a6f63ff0bccb1386e1bbaff74b327d9e5055bc91be0cd956df019f", 0x6c}], 0x3, 0x0, 0x0, 0x10}, 0x84) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442", 0x98}, {&(0x7f0000000640)="43215c74775babf5edd55ac86e504abc04f348ed36a3b40c1f9712ed2e1ca15ced0aede50fda81fdc1", 0x29}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f7", 0x1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="51c20000000000001c0012800e000100697036677265746170000000080002800400120008000300", @ANYBLOB="b792aff1372811d39dc11e32898769cfab90edd7161bdc2f0cca875daf4d04b996f6af840d2c9d7e75d74e4cbd733be740fc3ed5c527345fece4512de531b7d1a0393f33f5a5dd1bab7f7be135dd1d1bb2f77ba39586a9b5319ca5f73297000000000000002c00181b44bf8950dc30a1b8403e357dbf6f8b56a890cce5c8007924e828b7fe33a27d71f0"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000380)={0x7, 0x4, 0x3, 0xfffffff7}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.495103944s ago: executing program 1 (id=4391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000880000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 2.306075326s ago: executing program 1 (id=4393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000040)="388688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.303388326s ago: executing program 1 (id=4395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}, 0x5) 2.187685692s ago: executing program 1 (id=4396): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c", 0xc}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf2", 0x42}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000180)='/', 0xfffffffffffffff7, 0x80, 0x0, 0x0) 2.082067688s ago: executing program 0 (id=4397): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)={0x168, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x12c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc}]}, 0x168}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 2.0600859s ago: executing program 2 (id=4398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000001880)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@can={0xc, {{0x2, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "8d10a40481194769"}}}}, 0x0) 2.040798191s ago: executing program 0 (id=4399): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.021805292s ago: executing program 2 (id=4400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc33, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0xb9, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x5, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x7, 0x2, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xce3a, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0xffffffff, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 1.743545488s ago: executing program 2 (id=4401): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x1, 0x40000021, 0x0) 1.301423284s ago: executing program 1 (id=4402): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00000000", 0x17) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) r5 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6bf0, 0x9}, 0x110060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a42, 0x13) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000000)={0x0, 0x1, 0x11a, 0xc4cf, 0x6, "04920887e87fcb167844f100", 0x7, 0x200}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x8) sendfile(r6, r6, 0x0, 0xe3aa6ea) setrlimit(0x3, &(0x7f0000000100)={0x0, 0x6}) 1.278108195s ago: executing program 4 (id=4403): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8922, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r5, &(0x7f0000000180)="02033e00d3fc02000000ab5d71b9edd7c9560385dc", 0x15, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) r7 = getpid() perf_event_open(0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.276918845s ago: executing program 3 (id=4404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, 0x0}, 0x4005) 1.163203412s ago: executing program 0 (id=4405): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) 1.143905823s ago: executing program 0 (id=4406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.078847297s ago: executing program 3 (id=4407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 1.072033918s ago: executing program 0 (id=4408): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16], 0x21, 0x286, &(0x7f0000000640)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffff7f000000000000000b00000000000000000000000000000000000000000000000000ffffffffffffffff070000000000000000000000000000009e2ef0ff3a8f83d1fef0fb037a26c92ee5a42c133d7f6b874a036b3fddb59339e6119e0bd06bb34039837968118994e16928d2e88a09d8d91b51d0d07eeacdb609803d2b3c6b6390d81c21620f2d7621c69ca4430d97248c89cae34dcc790a2a689c4bd1540069e7e56e4b12594fd29ca0ddb755e0bdb0637a92aee466fc10d8682f30a713a94d32d1cd8467c1f35a208929f0abb18579b01e5d8f2d7835617786f033de1913d2260c195b7a04aa0122b7df56960510415506"], 0xb8}}, 0x10) 1.071543028s ago: executing program 4 (id=4409): syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x2b}, 0x28) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/handlers\x00', 0x0, 0x0) setrlimit(0x1, &(0x7f0000000340)={0x2, 0x40000e51}) lseek(r2, 0x4f9, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3821, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000380)={0x4, &(0x7f00000000c0)=[{0x1, 0x40, 0xde, 0xffff}, {0x1ff, 0x9, 0x8, 0x1}, {0x401, 0x1, 0xa8, 0x7}, {0x9, 0x3, 0x9, 0x8}]}) 473.980032ms ago: executing program 2 (id=4410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000001880)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@can={0xc, {{0x2, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "8d10a40481194769"}}}}, 0x0) 437.325625ms ago: executing program 3 (id=4411): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 312.156082ms ago: executing program 2 (id=4412): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x20, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, 0x0, 0xa4000061) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32, @ANYRES64=r6], 0x50) 297.748113ms ago: executing program 1 (id=4413): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c", 0xc}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536", 0x5d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf2", 0x42}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000180)='/', 0xfffffffffffffff7, 0x80, 0x0, 0x0) 129.533242ms ago: executing program 3 (id=4414): ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000340)={0x0, "75398238079ac44447b1b28acae0a58d"}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="61050603"], 0x61) 3.0486ms ago: executing program 2 (id=4415): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x3, 0x8, 0x7, 0x960, 0xffffffffffffffff, 0xfca1}, 0x50) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="4f402a79945061bc84109c2aab5d", 0xe}, {&(0x7f0000000200)="5fefd8", 0x3}, {&(0x7f0000000840)="155e876d973099a3de769ee0a465ebefe4400ef56b22f9dfa07a9f4a2789ff72655a1fae087a27e259139609a8b78196b8743c7324456a0ad5cabe109c11ae5833a08051bb259cb11a259f3f85a5179c54a6f63ff0bccb1386e1bbaff74b327d9e5055bc91be0cd956df019f", 0x6c}], 0x3, 0x0, 0x0, 0x10}, 0x84) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442", 0x98}, {&(0x7f0000000640)="43215c74775babf5edd55ac86e504abc04f348ed36a3b40c1f9712ed2e1ca15ced0aede50fda81fdc1", 0x29}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f7", 0x1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="51c20000000000001c0012800e000100697036677265746170000000080002800400120008000300", @ANYBLOB="b792aff1372811d39dc11e32898769cfab90edd7161bdc2f0cca875daf4d04b996f6af840d2c9d7e75d74e4cbd733be740fc3ed5c527345fece4512de531b7d1a0393f33f5a5dd1bab7f7be135dd1d1bb2f77ba39586a9b5319ca5f73297000000000000002c00181b44bf8950dc30a1b8403e357dbf6f8b56a890cce5c8007924e828b7fe33a27d71f0"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000380)={0x7, 0x4, 0x3, 0xfffffff7}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 0 (id=4416): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): active interface with an up link [ 188.564293][T11311] team0: Port device team_slave_0 added [ 188.582320][T11311] team0: Port device team_slave_1 added [ 188.618922][T11311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.640171][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.669744][T11311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.702867][T11311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.709880][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.736151][T11311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.821941][T11346] syzkaller0: entered promiscuous mode [ 188.827491][T11346] syzkaller0: entered allmulticast mode [ 188.862023][T11356] syzkaller0: entered promiscuous mode [ 188.867621][T11356] syzkaller0: entered allmulticast mode [ 188.883984][T11311] hsr_slave_0: entered promiscuous mode [ 188.891888][T11311] hsr_slave_1: entered promiscuous mode [ 188.897978][T11311] debugfs: 'hsr0' already exists in 'hsr' [ 188.919462][T11311] Cannot create hsr debugfs directory [ 188.947982][T11358] syzkaller0: entered promiscuous mode [ 188.958025][T11358] syzkaller0: entered allmulticast mode [ 189.069976][T11367] syzkaller0: entered promiscuous mode [ 189.076669][T11367] syzkaller0: entered allmulticast mode [ 189.090846][T11311] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.148997][T11373] loop2: detected capacity change from 0 to 1024 [ 189.159228][T11311] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.297008][T11380] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 189.313874][T11380] syzkaller0: entered promiscuous mode [ 189.319522][T11380] syzkaller0: entered allmulticast mode [ 189.337615][T11311] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.404438][T11311] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.543962][T11389] syzkaller0: entered promiscuous mode [ 189.549586][T11389] syzkaller0: entered allmulticast mode [ 189.602370][T11311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.615595][T11311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.627763][T11311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.640698][T11311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.704797][T11311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.732629][T11311] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.751264][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.758411][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.769201][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.776353][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.846128][T11311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.864144][T11311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.929012][T11409] syzkaller0: entered promiscuous mode [ 189.934667][T11409] syzkaller0: entered allmulticast mode [ 189.968691][T11409] __nla_validate_parse: 12 callbacks suppressed [ 189.968728][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3101'. [ 190.010331][T11413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3102'. [ 190.010481][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3101'. [ 190.049235][T11311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.125246][T11421] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 190.136932][T11421] syzkaller0: entered promiscuous mode [ 190.143205][T11421] syzkaller0: entered allmulticast mode [ 190.335401][T11311] veth0_vlan: entered promiscuous mode [ 190.354662][T11311] veth1_vlan: entered promiscuous mode [ 190.389998][T11311] veth0_macvtap: entered promiscuous mode [ 190.399473][T11311] veth1_macvtap: entered promiscuous mode [ 190.407302][T11439] syzkaller0: entered promiscuous mode [ 190.420242][T11439] syzkaller0: entered allmulticast mode [ 190.435411][T11311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.457671][T11311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.477267][ T261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.503300][ T261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.517811][ T261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.538259][ T261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.598717][T11445] loop4: detected capacity change from 0 to 1024 [ 190.636257][T11445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 190.653501][T11449] loop1: detected capacity change from 0 to 1024 [ 190.680622][T11445] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.722013][T11445] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.3067: lblock 0 mapped to illegal pblock 0 (length 1) [ 190.760534][T11445] EXT4-fs error (device loop4): ext4_ext_remove_space:2956: inode #15: comm syz.4.3067: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 190.799979][T11455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3111'. [ 190.828390][T11459] syzkaller0: entered promiscuous mode [ 190.835056][T11459] syzkaller0: entered allmulticast mode [ 190.846068][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3113'. [ 190.847104][T11311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 190.869775][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3113'. [ 190.898332][T11461] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3114'. [ 190.935732][T11465] loop2: detected capacity change from 0 to 128 [ 190.970879][T11463] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 190.986385][T11463] syzkaller0: entered promiscuous mode [ 191.011296][T11463] syzkaller0: entered allmulticast mode [ 191.088740][T11471] loop4: detected capacity change from 0 to 2048 [ 191.144549][T11471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.161075][T11482] loop1: detected capacity change from 0 to 1024 [ 191.351513][T11492] loop0: detected capacity change from 0 to 1024 [ 191.934225][T11492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.967017][T11494] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 191.982193][T11494] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 640 with error 28 [ 191.994831][T11494] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.994831][T11494] [ 192.004674][T11494] EXT4-fs (loop4): Total free blocks count 0 [ 192.010777][T11494] EXT4-fs (loop4): Free/Dirty block details [ 192.016701][T11494] EXT4-fs (loop4): free_blocks=2415919504 [ 192.022518][T11494] EXT4-fs (loop4): dirty_blocks=640 [ 192.028043][T11494] EXT4-fs (loop4): Block reservation details [ 192.031174][T11492] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.034452][T11494] EXT4-fs (loop4): i_reserved_data_blocks=40 [ 192.100623][T11492] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.3125: lblock 0 mapped to illegal pblock 0 (length 1) [ 192.127303][T11492] EXT4-fs error (device loop0): ext4_ext_remove_space:2956: inode #15: comm syz.0.3125: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 192.152951][T11311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.210907][T10169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.225520][T11501] syzkaller0: entered promiscuous mode [ 192.231848][T11501] syzkaller0: entered allmulticast mode [ 192.302597][T11505] syzkaller0: entered promiscuous mode [ 192.308216][T11505] syzkaller0: entered allmulticast mode [ 192.360891][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3129'. [ 192.380277][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3129'. [ 192.422423][T11509] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3130'. [ 192.786417][T11527] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 192.794843][T11527] syzkaller0: entered promiscuous mode [ 192.802306][T11527] syzkaller0: entered allmulticast mode [ 192.812544][T11527] tipc: Started in network mode [ 192.817516][T11527] tipc: Node identity beff27b1a44f, cluster identity 4711 [ 192.845278][T11527] tipc: Enabled bearer , priority 0 [ 192.869871][T11526] tipc: Resetting bearer [ 192.881350][T11526] tipc: Disabling bearer [ 192.969168][T11534] syzkaller0: entered promiscuous mode [ 192.985405][T11534] syzkaller0: entered allmulticast mode [ 193.332146][T11549] loop2: detected capacity change from 0 to 1024 [ 193.374976][T11549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 193.389790][T11549] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.412131][T11556] loop3: detected capacity change from 0 to 128 [ 193.436740][T11549] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.3147: lblock 0 mapped to illegal pblock 0 (length 1) [ 193.460509][T11549] EXT4-fs error (device loop2): ext4_ext_remove_space:2956: inode #15: comm syz.2.3147: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 193.560608][T10601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 193.743532][T11562] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 193.769037][T11562] syzkaller0: entered promiscuous mode [ 193.784323][T11562] syzkaller0: entered allmulticast mode [ 193.802393][T11562] tipc: Enabled bearer , priority 0 [ 193.819992][T11561] tipc: Resetting bearer [ 193.861761][T11561] tipc: Disabling bearer [ 194.108501][T11567] syzkaller0: entered promiscuous mode [ 194.147771][T11567] syzkaller0: entered allmulticast mode [ 194.381454][T11581] loop1: detected capacity change from 0 to 1024 [ 194.404854][T11584] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 194.439541][T11581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.463325][T11590] syzkaller0: entered promiscuous mode [ 194.493142][T11590] syzkaller0: entered allmulticast mode [ 194.502556][T11581] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.527672][T11592] loop3: detected capacity change from 0 to 2048 [ 194.535846][T11584] tipc: Enabled bearer , priority 0 [ 194.567142][T11581] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.3161: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.589658][T11584] tipc: Resetting bearer [ 194.604974][T11592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.619719][T11581] EXT4-fs error (device loop1): ext4_ext_remove_space:2956: inode #15: comm syz.1.3161: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 194.650822][T11581] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.3161: lblock 0 mapped to illegal pblock 0 (length 1) [ 194.664521][T11582] tipc: Resetting bearer [ 194.672840][T11582] tipc: Disabling bearer [ 194.681174][T11596] syzkaller0: entered promiscuous mode [ 194.687174][T11596] syzkaller0: entered allmulticast mode [ 194.693185][T11581] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 194.708801][T11581] EXT4-fs (loop1): This should not happen!! Data will be lost [ 194.708801][T11581] [ 194.739059][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.793839][T11600] loop2: detected capacity change from 0 to 2048 [ 195.334499][T11603] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 195.336260][T11600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.349656][T11603] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 195.373996][T11603] EXT4-fs (loop3): This should not happen!! Data will be lost [ 195.373996][T11603] [ 195.383912][T11603] EXT4-fs (loop3): Total free blocks count 0 [ 195.389967][T11603] EXT4-fs (loop3): Free/Dirty block details [ 195.396155][T11605] loop1: detected capacity change from 0 to 1024 [ 195.402586][T11603] EXT4-fs (loop3): free_blocks=2415919504 [ 195.408415][T11603] EXT4-fs (loop3): dirty_blocks=64 [ 195.409889][T11608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11608 comm=syz.4.3168 [ 195.413610][T11603] EXT4-fs (loop3): Block reservation details [ 195.413654][T11603] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 195.571724][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.867542][T11620] syzkaller0: entered promiscuous mode [ 195.883514][T11620] syzkaller0: entered allmulticast mode [ 195.906261][T11620] __nla_validate_parse: 7 callbacks suppressed [ 195.906342][T11620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3172'. [ 195.962447][T11620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3172'. [ 196.157747][T10601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.212898][T11630] syzkaller0: entered promiscuous mode [ 196.221923][T11630] syzkaller0: entered allmulticast mode [ 196.240290][T11632] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 196.256760][T11632] syzkaller0: entered promiscuous mode [ 196.263568][T11632] syzkaller0: entered allmulticast mode [ 196.281126][T11632] tipc: Enabled bearer , priority 0 [ 196.298472][T11632] tipc: Resetting bearer [ 196.340351][T11631] tipc: Resetting bearer [ 196.367085][T11631] tipc: Disabling bearer [ 196.373406][T11637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3180'. [ 196.405815][T11638] syzkaller0: entered promiscuous mode [ 196.411964][T11638] syzkaller0: entered allmulticast mode [ 196.458076][T11640] loop1: detected capacity change from 0 to 2048 [ 196.501254][T11640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.541475][T11648] loop2: detected capacity change from 0 to 128 [ 196.582828][T11647] loop3: detected capacity change from 0 to 1024 [ 197.429363][T11661] loop3: detected capacity change from 0 to 2048 [ 197.446693][T11651] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 197.470550][T11651] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 197.500253][T11651] EXT4-fs (loop1): This should not happen!! Data will be lost [ 197.500253][T11651] [ 197.564117][T11651] EXT4-fs (loop1): Total free blocks count 0 [ 197.583292][T11651] EXT4-fs (loop1): Free/Dirty block details [ 197.591249][T11661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.609682][T11651] EXT4-fs (loop1): free_blocks=2415919504 [ 197.625786][T11651] EXT4-fs (loop1): dirty_blocks=32 [ 197.700942][T11651] EXT4-fs (loop1): Block reservation details [ 197.707181][T11651] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 197.777303][T11671] syzkaller0: entered promiscuous mode [ 197.783094][T11671] syzkaller0: entered allmulticast mode [ 197.833846][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.023846][T11674] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3191'. [ 198.364827][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.405483][T11683] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 198.416182][T11679] syzkaller0: entered promiscuous mode [ 198.425448][T11679] syzkaller0: entered allmulticast mode [ 198.437493][T11683] syzkaller0: entered promiscuous mode [ 198.447164][T11683] syzkaller0: entered allmulticast mode [ 198.455198][T11683] tipc: Started in network mode [ 198.461142][T11683] tipc: Node identity cee7e9733f16, cluster identity 4711 [ 198.468541][T11683] tipc: Enabled bearer , priority 0 [ 198.478056][T11683] tipc: Resetting bearer [ 198.485137][T11680] tipc: Resetting bearer [ 198.493692][T11680] tipc: Disabling bearer [ 198.714080][T11708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3205'. [ 198.781083][T11702] syzkaller0: entered promiscuous mode [ 198.797546][T11702] syzkaller0: entered allmulticast mode [ 198.863934][T11711] loop2: detected capacity change from 0 to 2048 [ 198.910196][ T3423] IPVS: starting estimator thread 0... [ 198.930515][T11711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.009138][T11712] IPVS: using max 2112 ests per chain, 105600 per kthread [ 199.040735][T11721] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 199.069600][T11721] syzkaller0: entered promiscuous mode [ 199.100242][T11721] syzkaller0: entered allmulticast mode [ 199.117664][T11721] tipc: Started in network mode [ 199.611375][T11725] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 199.626196][T11725] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 199.638725][T11725] EXT4-fs (loop2): This should not happen!! Data will be lost [ 199.638725][T11725] [ 199.648683][T11725] EXT4-fs (loop2): Total free blocks count 0 [ 199.654859][T11725] EXT4-fs (loop2): Free/Dirty block details [ 199.660998][T11725] EXT4-fs (loop2): free_blocks=2415919504 [ 199.666804][T11725] EXT4-fs (loop2): dirty_blocks=64 [ 199.672083][T11725] EXT4-fs (loop2): Block reservation details [ 199.674731][T11721] tipc: Node identity 8239e7b4baa5, cluster identity 4711 [ 199.678196][T11725] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 199.736829][T11721] tipc: Enabled bearer , priority 0 [ 199.755529][T10601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.780459][T11730] tipc: Resetting bearer [ 199.858619][T11720] tipc: Resetting bearer [ 199.874800][T11737] loop3: detected capacity change from 0 to 512 [ 199.883869][T11720] tipc: Disabling bearer [ 199.930505][T11737] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3213: ea_inode with extended attributes [ 199.951217][T11737] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 199.951879][T11737] EXT4-fs (loop3): Remounting filesystem read-only [ 199.952948][T11740] syzkaller0: entered promiscuous mode [ 199.961290][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 199.961312][ C1] EXT4-fs (loop3): initial error at time 1771113428: ext4_xattr_inode_iget:441: inode 11 [ 199.989796][ C1] EXT4-fs (loop3): last error at time 1771113428: ext4_xattr_inode_iget:441: inode 11 [ 199.991401][T11740] syzkaller0: entered allmulticast mode [ 200.000183][T11737] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -30) [ 200.014447][T11737] EXT4-fs (loop3): 1 orphan inode deleted [ 200.020787][T11737] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.053022][ T3320] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 200.133309][T11752] syzkaller0: entered promiscuous mode [ 200.139069][T11752] syzkaller0: entered allmulticast mode [ 200.326169][T11764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3224'. [ 200.356752][T11767] loop3: detected capacity change from 0 to 2048 [ 200.505989][T11767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.657584][T11778] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 200.665789][T11778] syzkaller0: entered promiscuous mode [ 200.671579][T11778] syzkaller0: entered allmulticast mode [ 200.679532][T11778] tipc: Enabled bearer , priority 0 [ 200.691235][T11778] tipc: Resetting bearer [ 200.702126][T11775] tipc: Resetting bearer [ 200.712942][T11775] tipc: Disabling bearer [ 200.722925][T11780] syzkaller0: entered promiscuous mode [ 200.728764][T11780] syzkaller0: entered allmulticast mode [ 200.901921][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811be0da00: rx timeout, send abort [ 201.143260][ T28] audit: type=1400 audit(1771113430.034:242): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 201.175911][T11781] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 201.176761][ T28] audit: type=1400 audit(1771113430.034:243): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.190945][T11781] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 201.190981][T11781] EXT4-fs (loop3): This should not happen!! Data will be lost [ 201.190981][T11781] [ 201.190997][T11781] EXT4-fs (loop3): Total free blocks count 0 [ 201.191016][T11781] EXT4-fs (loop3): Free/Dirty block details [ 201.191030][T11781] EXT4-fs (loop3): free_blocks=2415919504 [ 201.191047][T11781] EXT4-fs (loop3): dirty_blocks=64 [ 201.191063][T11781] EXT4-fs (loop3): Block reservation details [ 201.260473][ T28] audit: type=1400 audit(1771113430.034:244): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.263828][T11781] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 201.310178][ T28] audit: type=1400 audit(1771113430.034:245): avc: denied { add_name } for pid=2984 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.360274][ T28] audit: type=1400 audit(1771113430.034:246): avc: denied { create } for pid=2984 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.365193][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.381126][ T28] audit: type=1400 audit(1771113430.034:247): avc: denied { append open } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.413228][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811be3d800: rx timeout, send abort [ 201.413274][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811be0da00: abort rx timeout. Force session deactivation [ 201.454828][T11789] loop4: detected capacity change from 0 to 1024 [ 201.495372][T11795] syzkaller0: entered promiscuous mode [ 201.506732][T11795] syzkaller0: entered allmulticast mode [ 201.524727][ T28] audit: type=1400 audit(1771113430.034:248): avc: denied { getattr } for pid=2984 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 201.562349][T11798] syzkaller0: entered promiscuous mode [ 201.568152][ T28] audit: type=1400 audit(1771113430.454:249): avc: denied { create } for pid=11797 comm="syz.4.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.568285][T11798] syzkaller0: entered allmulticast mode [ 201.588463][ T28] audit: type=1400 audit(1771113430.454:250): avc: denied { ioctl } for pid=11797 comm="syz.4.3238" path="socket:[36508]" dev="sockfs" ino=36508 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 201.642433][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3238'. [ 201.659158][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3238'. [ 201.736455][T11804] syzkaller0: entered promiscuous mode [ 201.745424][T11807] loop3: detected capacity change from 0 to 1024 [ 201.761066][T11804] syzkaller0: entered allmulticast mode [ 201.767803][T11807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 201.790516][T11807] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.816187][T11807] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.3241: lblock 0 mapped to illegal pblock 0 (length 1) [ 201.841274][T11812] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 201.849639][T11812] syzkaller0: entered promiscuous mode [ 201.855957][T11807] EXT4-fs error (device loop3): ext4_ext_remove_space:2956: inode #15: comm syz.3.3241: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 201.874450][T11812] syzkaller0: entered allmulticast mode [ 201.886723][T11812] tipc: Started in network mode [ 201.891828][T11812] tipc: Node identity 260f2fde25ce, cluster identity 4711 [ 201.913290][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811be3d800: abort rx timeout. Force session deactivation [ 201.936107][T11812] tipc: Enabled bearer , priority 0 [ 201.947558][T11816] tipc: Resetting bearer [ 201.955582][T11810] tipc: Resetting bearer [ 201.982690][ T30] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 201.999308][T11810] tipc: Disabling bearer [ 202.009463][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 202.024393][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 202.024393][ T30] [ 202.050199][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 202.080954][T11822] loop0: detected capacity change from 0 to 512 [ 202.087605][T11821] tipc: Enabling of bearer rejected, failed to enable media [ 202.103212][T11822] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.3246: ea_inode with extended attributes [ 202.124931][T11821] syzkaller0: entered promiscuous mode [ 202.131649][T11821] syzkaller0: entered allmulticast mode [ 202.139420][T11822] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 202.140178][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 202.153512][T11822] EXT4-fs (loop0): Remounting filesystem read-only [ 202.155964][ C1] EXT4-fs (loop0): initial error at time 1771113431: ext4_xattr_inode_iget:441: inode 11 [ 202.170513][T11822] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -30) [ 202.172265][ C1] EXT4-fs (loop0): last error at time 1771113431: ext4_xattr_inode_iget:441: inode 11 [ 202.193741][T11822] EXT4-fs (loop0): 1 orphan inode deleted [ 202.195682][T11827] loop3: detected capacity change from 0 to 2048 [ 202.201605][T11822] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.233687][T10169] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 202.234334][T11827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.320307][T11833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3250'. [ 202.372182][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811957b200: rx timeout, send abort [ 202.872214][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811be3d800: rx timeout, send abort [ 202.880527][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811957b200: abort rx timeout. Force session deactivation [ 203.380521][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811be3d800: abort rx timeout. Force session deactivation [ 203.421699][T11844] loop4: detected capacity change from 0 to 128 [ 204.244540][T11846] syzkaller0: entered promiscuous mode [ 204.267073][T11846] syzkaller0: entered allmulticast mode [ 204.473095][T11836] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 204.488084][T11836] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 928 with error 28 [ 204.500560][T11836] EXT4-fs (loop3): This should not happen!! Data will be lost [ 204.500560][T11836] [ 204.510377][T11836] EXT4-fs (loop3): Total free blocks count 0 [ 204.516544][T11836] EXT4-fs (loop3): Free/Dirty block details [ 204.522516][T11836] EXT4-fs (loop3): free_blocks=2415919504 [ 204.528363][T11836] EXT4-fs (loop3): dirty_blocks=928 [ 204.533661][T11836] EXT4-fs (loop3): Block reservation details [ 204.539701][T11836] EXT4-fs (loop3): i_reserved_data_blocks=58 [ 204.669443][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.074586][T11870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3262'. [ 205.188432][T11874] tipc: Enabling of bearer rejected, failed to enable media [ 205.197514][T11874] syzkaller0: entered promiscuous mode [ 205.203502][T11874] syzkaller0: entered allmulticast mode [ 205.231541][T11876] loop2: detected capacity change from 0 to 2048 [ 205.261675][T11876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.411185][T11885] syzkaller0: entered promiscuous mode [ 205.417957][T11885] syzkaller0: entered allmulticast mode [ 205.494197][T11887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3268'. [ 205.544668][T11887] loop4: detected capacity change from 0 to 1024 [ 206.125592][T11894] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 206.140395][T11894] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 36 with error 28 [ 206.152734][T11894] EXT4-fs (loop2): This should not happen!! Data will be lost [ 206.152734][T11894] [ 206.162437][T11894] EXT4-fs (loop2): Total free blocks count 0 [ 206.168458][T11894] EXT4-fs (loop2): Free/Dirty block details [ 206.174419][T11894] EXT4-fs (loop2): free_blocks=2415919504 [ 206.180210][T11894] EXT4-fs (loop2): dirty_blocks=48 [ 206.185427][T11894] EXT4-fs (loop2): Block reservation details [ 206.191723][T11894] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 206.407217][T11912] tipc: Enabling of bearer rejected, failed to enable media [ 206.420888][T11912] syzkaller0: entered promiscuous mode [ 206.426460][T11912] syzkaller0: entered allmulticast mode [ 206.579236][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 206.673190][T11928] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 206.700673][T11928] syzkaller0: entered promiscuous mode [ 206.706312][T11928] syzkaller0: entered allmulticast mode [ 206.718669][T11928] tipc: Enabled bearer , priority 0 [ 206.736989][T11928] tipc: Resetting bearer [ 206.750449][T11927] tipc: Resetting bearer [ 206.758542][T11927] tipc: Disabling bearer [ 206.999127][ T28] audit: type=1400 audit(1771113435.884:251): avc: denied { create } for pid=11936 comm="syz.1.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 207.026883][ T28] audit: type=1400 audit(1771113435.904:252): avc: denied { write } for pid=11936 comm="syz.1.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 207.072252][T10601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.097698][T11940] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.109355][T11940] netlink: 'syz.1.3287': attribute type 1 has an invalid length. [ 207.118162][T11940] netlink: 'syz.1.3287': attribute type 2 has an invalid length. [ 207.263560][T11942] syzkaller0: entered promiscuous mode [ 207.280736][T11942] syzkaller0: entered allmulticast mode [ 207.627613][T11961] syzkaller0: entered promiscuous mode [ 207.633538][T11961] syzkaller0: entered allmulticast mode [ 207.707268][T11963] syzkaller0: entered promiscuous mode [ 207.722842][T11963] syzkaller0: entered allmulticast mode [ 207.811073][T11969] tipc: Enabling of bearer rejected, failed to enable media [ 207.834793][T11969] syzkaller0: entered promiscuous mode [ 207.844323][T11969] syzkaller0: entered allmulticast mode [ 207.893750][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3298'. [ 207.906839][T11978] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.918179][T11978] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 207.937033][T11978] netlink: 'syz.2.3299': attribute type 2 has an invalid length. [ 208.048212][T11985] syzkaller0: entered promiscuous mode [ 208.053795][T11985] syzkaller0: entered allmulticast mode [ 208.242643][ T28] audit: type=1400 audit(1771113437.134:253): avc: denied { ioctl } for pid=12002 comm="syz.0.3306" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.374064][T12008] syzkaller0: entered promiscuous mode [ 208.379757][T12008] syzkaller0: entered allmulticast mode [ 208.582236][T12023] netlink: 'syz.2.3314': attribute type 1 has an invalid length. [ 208.590435][T12023] netlink: 'syz.2.3314': attribute type 2 has an invalid length. [ 208.604114][T12019] tipc: Enabling of bearer rejected, failed to enable media [ 208.615900][T12024] loop0: detected capacity change from 0 to 2048 [ 208.621300][T12019] syzkaller0: entered promiscuous mode [ 208.634525][T12019] syzkaller0: entered allmulticast mode [ 208.687045][T12028] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 209.050585][T12024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.118135][T12039] syzkaller0: entered promiscuous mode [ 209.135600][T12039] syzkaller0: entered allmulticast mode [ 209.475996][T12056] syzkaller0: entered promiscuous mode [ 209.510419][T12056] syzkaller0: entered allmulticast mode [ 209.934935][T12070] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 209.949759][T12070] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 864 with error 28 [ 209.962364][T12070] EXT4-fs (loop0): This should not happen!! Data will be lost [ 209.962364][T12070] [ 209.972180][T12070] EXT4-fs (loop0): Total free blocks count 0 [ 209.978260][T12070] EXT4-fs (loop0): Free/Dirty block details [ 209.984233][T12070] EXT4-fs (loop0): free_blocks=2415919504 [ 209.990238][T12070] EXT4-fs (loop0): dirty_blocks=864 [ 209.995439][T12069] syzkaller0: entered promiscuous mode [ 209.995544][T12069] syzkaller0: entered allmulticast mode [ 210.001044][T12070] EXT4-fs (loop0): Block reservation details [ 210.001062][T12070] EXT4-fs (loop0): i_reserved_data_blocks=54 [ 210.083350][T12076] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 210.092928][T10169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.106139][T12076] netlink: 'syz.1.3326': attribute type 2 has an invalid length. [ 210.358137][T12097] tipc: Enabling of bearer rejected, failed to enable media [ 210.367702][T12097] syzkaller0: entered promiscuous mode [ 210.377692][T12097] syzkaller0: entered allmulticast mode [ 210.908205][T12126] loop3: detected capacity change from 0 to 2048 [ 211.034707][T12126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.163613][T12138] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 211.190149][T12138] netlink: 'syz.2.3340': attribute type 2 has an invalid length. [ 211.720413][T12142] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 211.735264][T12142] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 211.747652][T12142] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.747652][T12142] [ 211.757768][T12142] EXT4-fs (loop3): Total free blocks count 0 [ 211.764046][T12142] EXT4-fs (loop3): Free/Dirty block details [ 211.769975][T12142] EXT4-fs (loop3): free_blocks=2415919504 [ 211.775768][T12142] EXT4-fs (loop3): dirty_blocks=96 [ 211.781074][T12142] EXT4-fs (loop3): Block reservation details [ 211.787119][T12142] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 211.877053][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.931055][T12161] tipc: Enabling of bearer rejected, failed to enable media [ 211.953419][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3347'. [ 211.963637][T12161] syzkaller0: entered promiscuous mode [ 211.969464][T12161] syzkaller0: entered allmulticast mode [ 212.043057][T12171] syzkaller0: entered promiscuous mode [ 212.048592][T12171] syzkaller0: entered allmulticast mode [ 212.061542][T12175] syzkaller0: entered promiscuous mode [ 212.070587][T12175] syzkaller0: entered allmulticast mode [ 212.309022][T12194] loop3: detected capacity change from 0 to 2048 [ 212.356603][T12194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.872417][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3363'. [ 212.890218][T12215] syzkaller0: entered promiscuous mode [ 212.902534][T12215] syzkaller0: entered allmulticast mode [ 212.924074][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3361'. [ 212.941279][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3361'. [ 213.135464][T12218] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 213.150580][T12218] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 213.163269][T12218] EXT4-fs (loop3): This should not happen!! Data will be lost [ 213.163269][T12218] [ 213.173962][T12218] EXT4-fs (loop3): Total free blocks count 0 [ 213.180096][T12218] EXT4-fs (loop3): Free/Dirty block details [ 213.186785][T12218] EXT4-fs (loop3): free_blocks=2415919504 [ 213.197957][T12218] EXT4-fs (loop3): dirty_blocks=32 [ 213.203300][T12218] EXT4-fs (loop3): Block reservation details [ 213.209356][T12218] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 213.331726][T12225] syzkaller0: entered promiscuous mode [ 213.337378][T12225] syzkaller0: entered allmulticast mode [ 213.650035][T12250] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3371'. [ 213.706746][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 213.784592][T12255] syzkaller0: entered promiscuous mode [ 213.793081][T12255] syzkaller0: entered allmulticast mode [ 213.818549][T12261] syzkaller0: entered promiscuous mode [ 213.824212][T12261] syzkaller0: entered allmulticast mode [ 213.832575][T12261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3376'. [ 213.841855][T12261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3376'. [ 213.844346][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.886872][T12263] syzkaller0: entered promiscuous mode [ 213.900964][T12263] syzkaller0: entered allmulticast mode [ 213.939033][T12265] syzkaller0: entered promiscuous mode [ 213.945410][T12265] syzkaller0: entered allmulticast mode [ 213.957826][T12267] syzkaller0: entered promiscuous mode [ 213.963675][T12267] syzkaller0: entered allmulticast mode [ 214.078753][T12271] syzkaller0: entered promiscuous mode [ 214.084466][T12271] syzkaller0: entered allmulticast mode [ 214.287737][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3384'. [ 214.305695][T12269] chnl_net:caif_netlink_parms(): no params data found [ 214.325726][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 214.395674][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.403088][T12269] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.410703][T12269] bridge_slave_0: entered allmulticast mode [ 214.417586][T12269] bridge_slave_0: entered promiscuous mode [ 214.425212][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.432629][T12269] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.440431][T12269] bridge_slave_1: entered allmulticast mode [ 214.447267][T12269] bridge_slave_1: entered promiscuous mode [ 214.485680][T12269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.533381][T12299] syzkaller0: entered promiscuous mode [ 214.538923][T12299] syzkaller0: entered allmulticast mode [ 214.548623][T12269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.558432][T12301] syzkaller0: entered promiscuous mode [ 214.564083][T12301] syzkaller0: entered allmulticast mode [ 214.572628][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3389'. [ 214.581979][T12303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3389'. [ 214.616880][T12269] team0: Port device team_slave_0 added [ 214.624071][T12269] team0: Port device team_slave_1 added [ 214.654066][T12269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.668390][T12269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.696412][T12269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.709430][T12269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.720665][T12269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.747061][T12269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.769010][T12306] syzkaller0: entered promiscuous mode [ 214.774736][T12306] syzkaller0: entered allmulticast mode [ 214.790092][T12307] syzkaller0: entered promiscuous mode [ 214.796071][T12307] syzkaller0: entered allmulticast mode [ 214.817289][T12269] hsr_slave_0: entered promiscuous mode [ 214.823876][T12269] hsr_slave_1: entered promiscuous mode [ 214.830093][T12269] debugfs: 'hsr0' already exists in 'hsr' [ 214.836107][T12269] Cannot create hsr debugfs directory [ 214.944651][T12269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.015803][T12312] syzkaller0: entered promiscuous mode [ 215.021596][T12312] syzkaller0: entered allmulticast mode [ 215.033455][T12269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.172961][T12269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.224202][T12269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.242556][T12327] netlink: 'syz.2.3398': attribute type 1 has an invalid length. [ 215.255196][T12327] netlink: 'syz.2.3398': attribute type 2 has an invalid length. [ 215.476866][T12330] syzkaller0: entered promiscuous mode [ 215.482759][T12330] syzkaller0: entered allmulticast mode [ 215.565577][T12269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.578995][T12269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.625003][T12269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.681358][T12269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.711358][T12333] syzkaller0: entered promiscuous mode [ 215.718517][T12333] syzkaller0: entered allmulticast mode [ 215.777427][T12269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.795342][T12269] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.807442][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.814812][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.865358][ T261] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.872610][ T261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.898773][T12343] syzkaller0: entered promiscuous mode [ 215.930204][T12343] syzkaller0: entered allmulticast mode [ 215.941655][T12345] syzkaller0: entered promiscuous mode [ 215.947374][T12345] syzkaller0: entered allmulticast mode [ 216.082372][T12355] syzkaller0: entered promiscuous mode [ 216.088064][T12355] syzkaller0: entered allmulticast mode [ 216.123614][T12269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.132275][T12361] syzkaller0: entered promiscuous mode [ 216.137912][T12361] syzkaller0: entered allmulticast mode [ 216.232215][T12364] syzkaller0: entered promiscuous mode [ 216.237841][T12364] syzkaller0: entered allmulticast mode [ 216.303977][T12269] veth0_vlan: entered promiscuous mode [ 216.313774][T12269] veth1_vlan: entered promiscuous mode [ 216.347486][T12269] veth0_macvtap: entered promiscuous mode [ 216.361682][T12269] veth1_macvtap: entered promiscuous mode [ 216.370027][T12374] syzkaller0: entered promiscuous mode [ 216.376019][T12374] syzkaller0: entered allmulticast mode [ 216.399543][T12269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.413078][T12269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.425449][ T261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.437614][ T261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.449435][ T261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.474538][ T261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.555283][T12384] syzkaller0: entered promiscuous mode [ 216.564350][T12384] syzkaller0: entered allmulticast mode [ 216.580934][T12388] syzkaller0: entered promiscuous mode [ 216.586610][T12388] syzkaller0: entered allmulticast mode [ 217.345239][T12400] syzkaller0: entered promiscuous mode [ 217.350934][T12400] syzkaller0: entered allmulticast mode [ 217.614520][T12409] syzkaller0: entered promiscuous mode [ 217.620082][T12409] syzkaller0: entered allmulticast mode [ 218.685580][T12421] syzkaller0: entered promiscuous mode [ 218.691241][T12421] syzkaller0: entered allmulticast mode [ 218.950339][T12429] syzkaller0: entered promiscuous mode [ 218.955871][T12429] syzkaller0: entered allmulticast mode [ 219.272516][T12439] syzkaller0: entered promiscuous mode [ 219.278067][T12439] syzkaller0: entered allmulticast mode [ 219.428514][T12441] __nla_validate_parse: 7 callbacks suppressed [ 219.428536][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3436'. [ 219.523220][T12443] syzkaller0: entered promiscuous mode [ 219.528751][T12443] syzkaller0: entered allmulticast mode [ 219.541971][T12445] syzkaller0: entered promiscuous mode [ 219.547634][T12445] syzkaller0: entered allmulticast mode [ 219.559425][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3438'. [ 219.568853][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3438'. [ 219.661747][T12452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3441'. [ 219.744515][T12454] syzkaller0: entered promiscuous mode [ 219.750354][T12454] syzkaller0: entered allmulticast mode [ 219.828044][T12393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.678812][T12467] syzkaller0: entered promiscuous mode [ 220.684479][T12467] syzkaller0: entered allmulticast mode [ 221.024452][T12481] syzkaller0: entered promiscuous mode [ 221.030049][T12481] syzkaller0: entered allmulticast mode [ 221.135140][T12484] syzkaller0: entered promiscuous mode [ 221.140776][T12484] syzkaller0: entered allmulticast mode [ 221.265482][T12488] loop1: detected capacity change from 0 to 2048 [ 221.301494][T12488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.709377][T12494] ·’¯ñ: entered allmulticast mode [ 221.722347][T12494] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 221.733825][T12494] netlink: 'syz.0.3456': attribute type 1 has an invalid length. [ 221.744660][T12494] netlink: 'syz.0.3456': attribute type 2 has an invalid length. [ 221.870916][T12502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3460'. [ 221.884032][T12500] gtp0: entered promiscuous mode [ 221.889517][T12491] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 222.062459][T12505] syzkaller0: entered promiscuous mode [ 222.068176][T12505] syzkaller0: entered allmulticast mode [ 222.098246][T12488] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 224 with error 28 [ 222.110968][T12488] EXT4-fs (loop1): This should not happen!! Data will be lost [ 222.110968][T12488] [ 222.120719][T12488] EXT4-fs (loop1): Total free blocks count 0 [ 222.126839][T12488] EXT4-fs (loop1): Free/Dirty block details [ 222.132815][T12488] EXT4-fs (loop1): free_blocks=2415919504 [ 222.138659][T12488] EXT4-fs (loop1): dirty_blocks=224 [ 222.143991][T12488] EXT4-fs (loop1): Block reservation details [ 222.150143][T12488] EXT4-fs (loop1): i_reserved_data_blocks=14 [ 222.214537][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.322609][T12515] syzkaller0: entered promiscuous mode [ 222.329996][T12515] syzkaller0: entered allmulticast mode [ 222.367967][T12525] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 222.375914][T12525] netlink: 'syz.1.3467': attribute type 2 has an invalid length. [ 222.436214][T12528] syzkaller0: entered promiscuous mode [ 222.445347][T12528] syzkaller0: entered allmulticast mode [ 222.455254][T12528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3469'. [ 222.464705][T12528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3469'. [ 222.481319][ T35] IPVS: starting estimator thread 0... [ 222.592210][T12533] IPVS: using max 2064 ests per chain, 103200 per kthread [ 222.792698][T12547] loop4: detected capacity change from 0 to 2048 [ 222.866516][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3478'. [ 222.916983][T12547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.933130][T12551] loop2: detected capacity change from 0 to 1024 [ 223.002533][T12558] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 223.800200][T12557] netlink: 'syz.3.3479': attribute type 1 has an invalid length. [ 224.002514][T12557] netlink: 'syz.3.3479': attribute type 2 has an invalid length. [ 224.842310][T12561] syzkaller0: entered promiscuous mode [ 224.856042][T12561] syzkaller0: entered allmulticast mode [ 225.787875][T12546] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 225.802622][T12546] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 225.807334][T12563] syzkaller0: entered promiscuous mode [ 225.815141][T12546] EXT4-fs (loop4): This should not happen!! Data will be lost [ 225.815141][T12546] [ 225.815164][T12546] EXT4-fs (loop4): Total free blocks count 0 [ 225.815181][T12546] EXT4-fs (loop4): Free/Dirty block details [ 225.842593][T12546] EXT4-fs (loop4): free_blocks=2415919504 [ 225.848445][T12546] EXT4-fs (loop4): dirty_blocks=320 [ 225.853762][T12546] EXT4-fs (loop4): Block reservation details [ 225.859857][T12546] EXT4-fs (loop4): i_reserved_data_blocks=20 [ 225.896305][T12563] syzkaller0: entered allmulticast mode [ 225.907332][T11311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.918756][ T2091] bridge_slave_1: left allmulticast mode [ 225.925035][ T2091] bridge_slave_1: left promiscuous mode [ 225.941875][ T2091] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.953059][ T2091] bridge_slave_0: left allmulticast mode [ 225.959085][ T2091] bridge_slave_0: left promiscuous mode [ 225.965372][ T2091] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.053630][ T2091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.064700][ T2091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.079780][ T2091] bond0 (unregistering): Released all slaves [ 226.099287][T12567] syzkaller0: entered promiscuous mode [ 226.105166][T12567] syzkaller0: entered allmulticast mode [ 226.122536][ T2091] tipc: Left network mode [ 226.139305][ T2091] hsr_slave_0: left promiscuous mode [ 226.150472][ T2091] hsr_slave_1: left promiscuous mode [ 226.162026][ T2091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.178650][ T2091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.202553][ T2091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.216375][ T2091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.237233][ T2091] veth1_macvtap: left promiscuous mode [ 226.243102][ T2091] veth0_macvtap: left promiscuous mode [ 226.248737][ T2091] veth1_vlan: left promiscuous mode [ 226.254739][ T2091] veth0_vlan: left promiscuous mode [ 226.396385][T12587] syzkaller0: entered promiscuous mode [ 226.410601][T12587] syzkaller0: entered allmulticast mode [ 226.506564][T12603] loop0: detected capacity change from 0 to 2048 [ 226.552094][T12600] netlink: 'syz.1.3492': attribute type 1 has an invalid length. [ 226.564826][T12600] netlink: 'syz.1.3492': attribute type 2 has an invalid length. [ 226.574570][T12603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.625011][T12609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3495'. [ 227.569452][T12613] loop1: detected capacity change from 0 to 128 [ 227.590431][T12556] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 229.297207][T12603] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [ 229.309684][T12603] EXT4-fs (loop0): This should not happen!! Data will be lost [ 229.309684][T12603] [ 229.319588][T12603] EXT4-fs (loop0): Total free blocks count 0 [ 229.325703][T12603] EXT4-fs (loop0): Free/Dirty block details [ 229.331757][T12603] EXT4-fs (loop0): free_blocks=2415919504 [ 229.337514][T12603] EXT4-fs (loop0): dirty_blocks=384 [ 229.342808][T12603] EXT4-fs (loop0): Block reservation details [ 229.349085][T12603] EXT4-fs (loop0): i_reserved_data_blocks=24 [ 229.412275][T10169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.481072][T12619] syzkaller0: entered promiscuous mode [ 229.486659][T12619] syzkaller0: entered allmulticast mode [ 229.523427][T12617] syzkaller0: entered promiscuous mode [ 229.529048][T12617] syzkaller0: entered allmulticast mode [ 229.540959][ T2091] IPVS: stop unused estimator thread 0... [ 229.662002][T12632] gtp0: entered promiscuous mode [ 229.820792][T12649] netlink: 'syz.1.3506': attribute type 1 has an invalid length. [ 229.829496][T12649] netlink: 'syz.1.3506': attribute type 2 has an invalid length. [ 229.899491][T12650] syzkaller0: entered promiscuous mode [ 229.905368][T12650] syzkaller0: entered allmulticast mode [ 229.918977][T12637] ·’¯ñ: entered allmulticast mode [ 229.926979][ T2091] bridge_slave_1: left allmulticast mode [ 230.377365][ T2091] bridge_slave_1: left promiscuous mode [ 230.392963][ T2091] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.431247][ T2091] bridge_slave_0: left allmulticast mode [ 230.457825][ T2091] bridge_slave_0: left promiscuous mode [ 230.482881][ T2091] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.541626][ T2091] bridge_slave_1: left allmulticast mode [ 230.556929][ T2091] bridge_slave_1: left promiscuous mode [ 230.568422][T12660] loop3: detected capacity change from 0 to 2048 [ 230.580413][ T2091] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.652584][ T2091] bridge_slave_0: left allmulticast mode [ 230.664434][ T2091] bridge_slave_0: left promiscuous mode [ 230.670324][ T2091] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.682649][T12660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.717184][T12666] loop2: detected capacity change from 0 to 128 [ 230.931550][ T2091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.942204][ T2091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.258669][ T2091] bond0 (unregistering): Released all slaves [ 231.357982][ T2091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.373598][T12675] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 231.388821][T12675] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 231.401344][T12675] EXT4-fs (loop3): This should not happen!! Data will be lost [ 231.401344][T12675] [ 231.411193][T12675] EXT4-fs (loop3): Total free blocks count 0 [ 231.417249][T12675] EXT4-fs (loop3): Free/Dirty block details [ 231.423367][T12675] EXT4-fs (loop3): free_blocks=2415919504 [ 231.429166][T12675] EXT4-fs (loop3): dirty_blocks=128 [ 231.429916][ T2091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.434488][T12675] EXT4-fs (loop3): Block reservation details [ 231.434506][T12675] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 231.474138][ T2091] bond0 (unregistering): Released all slaves [ 231.506873][T12269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.566081][T12677] syzkaller0: entered promiscuous mode [ 231.572258][T12677] syzkaller0: entered allmulticast mode [ 231.579583][T12681] syzkaller0: entered promiscuous mode [ 231.585404][T12681] syzkaller0: entered allmulticast mode [ 231.594115][ T2091] tipc: Left network mode [ 231.635023][ T2091] tipc: Left network mode [ 231.661901][ T2091] hsr_slave_0: left promiscuous mode [ 231.672363][ T2091] hsr_slave_1: left promiscuous mode [ 231.681862][ T2091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.689402][ T2091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.697783][ T2091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.707554][ T2091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.728821][ T2091] hsr_slave_0: left promiscuous mode [ 231.749007][ T2091] hsr_slave_1: left promiscuous mode [ 231.763190][ T2091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.771508][ T2091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.779551][ T2091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.787640][ T2091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.801818][ T2091] veth1_macvtap: left promiscuous mode [ 231.807387][ T2091] veth0_macvtap: left promiscuous mode [ 231.814543][ T2091] veth1_vlan: left promiscuous mode [ 231.820329][ T2091] veth0_vlan: left promiscuous mode [ 231.867861][T12711] netlink: 'syz.0.3521': attribute type 1 has an invalid length. [ 231.878867][T12711] netlink: 'syz.0.3521': attribute type 2 has an invalid length. [ 231.991735][ T2091] veth1_macvtap: left promiscuous mode [ 231.999774][ T2091] veth0_macvtap: left promiscuous mode [ 232.005744][ T2091] veth1_vlan: left promiscuous mode [ 232.011164][ T2091] veth0_vlan: left promiscuous mode [ 232.279600][T12715] loop0: detected capacity change from 0 to 1024 [ 232.891255][T12723] syzkaller0: entered promiscuous mode [ 232.896861][T12723] syzkaller0: entered allmulticast mode [ 233.005783][T12726] loop4: detected capacity change from 0 to 2048 [ 233.104214][T12726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.201078][T12739] syzkaller0: entered promiscuous mode [ 233.233063][T12739] syzkaller0: entered allmulticast mode [ 233.298952][T12747] loop0: detected capacity change from 0 to 128 [ 233.824532][T12748] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 233.839480][T12748] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 233.851934][T12748] EXT4-fs (loop4): This should not happen!! Data will be lost [ 233.851934][T12748] [ 233.861644][T12748] EXT4-fs (loop4): Total free blocks count 0 [ 233.867684][T12748] EXT4-fs (loop4): Free/Dirty block details [ 233.873928][T12748] EXT4-fs (loop4): free_blocks=2415919504 [ 233.879704][T12748] EXT4-fs (loop4): dirty_blocks=128 [ 233.884988][T12748] EXT4-fs (loop4): Block reservation details [ 233.891144][T12748] EXT4-fs (loop4): i_reserved_data_blocks=8 [ 234.001984][T11311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.004823][ T2091] IPVS: stop unused estimator thread 0... [ 234.043696][ T2091] IPVS: stop unused estimator thread 0... [ 234.102688][T12760] syzkaller0: entered promiscuous mode [ 234.116481][T12760] syzkaller0: entered allmulticast mode [ 234.415647][ T2091] bridge_slave_1: left allmulticast mode [ 234.421598][ T2091] bridge_slave_1: left promiscuous mode [ 234.432897][ T2091] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.445328][ T2091] bridge_slave_0: left allmulticast mode [ 234.453457][ T2091] bridge_slave_0: left promiscuous mode [ 234.459471][ T2091] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.102600][T12781] loop4: detected capacity change from 0 to 1024 [ 235.188479][ T2091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.220592][ T2091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.232962][ T2091] bond0 (unregistering): Released all slaves [ 235.252442][T12774] gtp0: entered promiscuous mode [ 235.280423][T12785] syzkaller0: entered promiscuous mode [ 235.286012][T12785] syzkaller0: entered allmulticast mode [ 235.300953][ T2091] tipc: Left network mode [ 235.325009][T12790] loop1: detected capacity change from 0 to 2048 [ 235.360087][ T2091] hsr_slave_0: left promiscuous mode [ 235.379644][T12790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.396407][ T2091] hsr_slave_1: left promiscuous mode [ 235.406886][ T2091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.414531][ T2091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.424209][ T2091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.440219][ T2091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.457931][ T2091] veth1_macvtap: left promiscuous mode [ 235.466914][ T2091] veth0_macvtap: left promiscuous mode [ 235.474663][ T2091] veth1_vlan: left promiscuous mode [ 235.481896][ T2091] veth0_vlan: left promiscuous mode [ 235.496736][T12799] loop4: detected capacity change from 0 to 128 [ 236.154162][T12803] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 236.169018][T12803] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 236.181453][T12803] EXT4-fs (loop1): This should not happen!! Data will be lost [ 236.181453][T12803] [ 236.191194][T12803] EXT4-fs (loop1): Total free blocks count 0 [ 236.197219][T12803] EXT4-fs (loop1): Free/Dirty block details [ 236.203288][T12803] EXT4-fs (loop1): free_blocks=2415919504 [ 236.209482][T12803] EXT4-fs (loop1): dirty_blocks=160 [ 236.214808][T12803] EXT4-fs (loop1): Block reservation details [ 236.220952][T12803] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 236.403365][ T2091] team0 (unregistering): Port device team_slave_1 removed [ 236.407949][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.428852][ T2091] team0 (unregistering): Port device team_slave_0 removed [ 236.505318][T12814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3559'. [ 236.758284][T12830] team0 (unregistering): Failed to send options change via netlink (err -105) [ 236.768626][T12830] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 236.779873][T12830] team0 (unregistering): Port device team_slave_0 removed [ 236.792582][T12830] team0 (unregistering): Failed to send options change via netlink (err -105) [ 236.801949][T12830] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 236.808765][T12832] sctp: [Deprecated]: syz.2.3568 (pid 12832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.808765][T12832] Use struct sctp_sack_info instead [ 236.829923][T12830] team0 (unregistering): Port device team_slave_1 removed [ 236.864345][ T2091] IPVS: stop unused estimator thread 0... [ 236.989040][T12836] syzkaller0: entered promiscuous mode [ 236.995217][T12836] syzkaller0: entered allmulticast mode [ 237.093072][T12838] syzkaller0: entered promiscuous mode [ 237.098854][T12838] syzkaller0: entered allmulticast mode [ 237.551973][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3576'. [ 237.654311][T12858] loop0: detected capacity change from 0 to 1024 [ 237.806976][T12866] netlink: 'syz.0.3582': attribute type 1 has an invalid length. [ 237.815383][T12866] netlink: 'syz.0.3582': attribute type 2 has an invalid length. [ 238.034086][T12871] loop4: detected capacity change from 0 to 2048 [ 238.073604][T12871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.199441][T12886] sctp: [Deprecated]: syz.0.3588 (pid 12886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.199441][T12886] Use struct sctp_sack_info instead [ 238.918838][T12890] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 238.933695][T12890] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 238.946159][T12890] EXT4-fs (loop4): This should not happen!! Data will be lost [ 238.946159][T12890] [ 238.955865][T12890] EXT4-fs (loop4): Total free blocks count 0 [ 238.961985][T12890] EXT4-fs (loop4): Free/Dirty block details [ 238.967936][T12890] EXT4-fs (loop4): free_blocks=2415919504 [ 238.973753][T12890] EXT4-fs (loop4): dirty_blocks=64 [ 238.979002][T12890] EXT4-fs (loop4): Block reservation details [ 238.985071][T12890] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 239.058406][T11311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.375992][T12901] loop0: detected capacity change from 0 to 1024 [ 239.391525][T12906] ·’¯ñ: entered allmulticast mode [ 239.435427][T12906] netlink: 'syz.2.3594': attribute type 1 has an invalid length. [ 239.461240][T12906] netlink: 'syz.2.3594': attribute type 2 has an invalid length. [ 239.568033][T12916] team0 (unregistering): Failed to send options change via netlink (err -105) [ 239.586462][T12916] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 239.609347][T12916] team0 (unregistering): Port device team_slave_0 removed [ 239.631829][T12916] team0 (unregistering): Failed to send options change via netlink (err -105) [ 239.650674][T12916] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 239.672962][T12916] team0 (unregistering): Port device team_slave_1 removed [ 239.706188][T12918] gtp0: entered promiscuous mode [ 239.817445][T12932] tipc: Enabled bearer , priority 0 [ 239.832878][T12932] tipc: Resetting bearer [ 240.076744][T12931] tipc: Disabling bearer [ 240.224192][T12940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3607'. [ 240.854955][T12947] ·’¯ñ: entered allmulticast mode [ 240.955254][T12948] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 241.007392][T12947] netlink: 'syz.4.3609': attribute type 1 has an invalid length. [ 241.015407][T12947] netlink: 'syz.4.3609': attribute type 2 has an invalid length. [ 241.067721][T12952] loop2: detected capacity change from 0 to 1024 [ 241.200073][T12961] team0 (unregistering): Failed to send options change via netlink (err -105) [ 241.213349][T12961] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 241.253836][T12961] team0 (unregistering): Port device team_slave_0 removed [ 241.273188][T12961] team0 (unregistering): Failed to send options change via netlink (err -105) [ 241.292837][T12961] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 241.317316][T12961] team0 (unregistering): Port device team_slave_1 removed [ 241.343010][T12963] tipc: Enabled bearer , priority 0 [ 241.353080][T12963] tipc: Resetting bearer [ 241.360843][T12962] tipc: Disabling bearer [ 241.448297][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3621'. [ 241.547147][T12982] netlink: 'syz.4.3623': attribute type 1 has an invalid length. [ 241.555073][T12982] netlink: 'syz.4.3623': attribute type 2 has an invalid length. [ 241.833623][T12988] loop2: detected capacity change from 0 to 1024 [ 242.427366][T13003] tipc: Enabled bearer , priority 0 [ 242.467636][T13003] syzkaller0: entered promiscuous mode [ 242.493788][T13003] syzkaller0: entered allmulticast mode [ 242.596498][T13002] tipc: Resetting bearer [ 242.692614][T13002] tipc: Disabling bearer [ 242.715532][T13012] loop3: detected capacity change from 0 to 128 [ 242.882797][T13014] syzkaller0: entered promiscuous mode [ 242.888371][T13014] syzkaller0: entered allmulticast mode [ 242.931007][T13016] netlink: 'syz.1.3635': attribute type 1 has an invalid length. [ 242.938800][T13016] netlink: 'syz.1.3635': attribute type 2 has an invalid length. [ 243.077388][T13026] loop1: detected capacity change from 0 to 1024 [ 243.291885][ T28] audit: type=1400 audit(1771113472.184:254): avc: denied { connect } for pid=13039 comm="syz.4.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.343127][ T28] audit: type=1400 audit(1771113472.204:255): avc: denied { setopt } for pid=13039 comm="syz.4.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.364403][ T28] audit: type=1400 audit(1771113472.224:256): avc: denied { bind } for pid=13039 comm="syz.4.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.456686][ T28] audit: type=1400 audit(1771113472.224:257): avc: denied { write } for pid=13039 comm="syz.4.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.485714][T13048] syzkaller0: entered promiscuous mode [ 243.504353][T13048] syzkaller0: entered allmulticast mode [ 243.586666][T13050] syzkaller0: entered promiscuous mode [ 243.593338][T13050] syzkaller0: entered allmulticast mode [ 243.605790][T13062] gtp0: entered promiscuous mode [ 243.680498][T13065] syzkaller0: entered promiscuous mode [ 243.686096][T13065] syzkaller0: entered allmulticast mode [ 243.733191][T13071] tipc: Enabled bearer , priority 0 [ 243.740798][T13071] syzkaller0: entered promiscuous mode [ 243.746325][T13071] syzkaller0: entered allmulticast mode [ 243.974385][T13070] tipc: Resetting bearer [ 243.985691][T13070] tipc: Disabling bearer [ 244.038897][T13088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3657'. [ 244.174478][T13104] syzkaller0: entered promiscuous mode [ 244.180344][T13104] syzkaller0: entered allmulticast mode [ 244.218104][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3666'. [ 244.239257][T13107] syzkaller0: entered promiscuous mode [ 244.249079][T13107] syzkaller0: entered allmulticast mode [ 244.329315][T13120] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3669'. [ 244.345598][T13122] tipc: Enabled bearer , priority 0 [ 244.352923][T13122] syzkaller0: entered promiscuous mode [ 244.358444][T13122] syzkaller0: entered allmulticast mode [ 244.379676][T13121] tipc: Resetting bearer [ 244.388610][T13121] tipc: Disabling bearer [ 244.440807][T13126] 0: reclassify loop, rule prio 0, protocol 800 [ 244.465259][T13130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3674'. [ 244.514277][ T28] audit: type=1400 audit(1771113473.404:258): avc: denied { relabelfrom } for pid=13131 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 244.544540][ T28] audit: type=1400 audit(1771113473.404:259): avc: denied { relabelto } for pid=13131 comm="syz.4.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 244.650574][T13139] syzkaller0: entered promiscuous mode [ 244.656196][T13139] syzkaller0: entered allmulticast mode [ 244.680657][T13149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3682'. [ 244.702105][T13151] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3683'. [ 244.724017][T13147] syzkaller0: entered promiscuous mode [ 244.729563][T13147] syzkaller0: entered allmulticast mode [ 244.774580][T13153] tipc: Started in network mode [ 244.779548][T13153] tipc: Node identity e6b4488c0137, cluster identity 4711 [ 244.787607][T13153] tipc: Enabled bearer , priority 0 [ 244.814654][T13153] syzkaller0: entered promiscuous mode [ 244.820422][T13153] syzkaller0: entered allmulticast mode [ 244.831204][T13153] tipc: Resetting bearer [ 244.838206][T13152] tipc: Resetting bearer [ 244.846332][T13152] tipc: Disabling bearer [ 244.936710][T13168] syzkaller0: entered promiscuous mode [ 244.942407][T13168] syzkaller0: entered allmulticast mode [ 245.044626][T13179] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3695'. [ 245.055418][T13177] ·’¯ñ: entered allmulticast mode [ 245.084630][T13177] netlink: 'syz.3.3694': attribute type 1 has an invalid length. [ 245.099985][T13181] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3696'. [ 245.109570][T13177] netlink: 'syz.3.3694': attribute type 2 has an invalid length. [ 245.374146][T13201] tipc: Enabled bearer , priority 0 [ 245.382966][T13201] syzkaller0: entered promiscuous mode [ 245.388997][T13201] syzkaller0: entered allmulticast mode [ 245.405284][T13201] tipc: Resetting bearer [ 245.414537][T13198] 0: reclassify loop, rule prio 0, protocol 800 [ 245.421359][T13200] tipc: Resetting bearer [ 245.429518][T13200] tipc: Disabling bearer [ 245.497060][T13213] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3706'. [ 245.553785][T13217] syzkaller0: entered promiscuous mode [ 245.559411][T13217] syzkaller0: entered allmulticast mode [ 245.754637][T13234] tipc: Enabled bearer , priority 0 [ 245.763372][T13234] syzkaller0: entered promiscuous mode [ 245.768992][T13234] syzkaller0: entered allmulticast mode [ 245.783916][T13238] 0: reclassify loop, rule prio 0, protocol 800 [ 245.789113][T13234] tipc: Resetting bearer [ 245.802927][T13233] tipc: Resetting bearer [ 245.810792][T13233] tipc: Disabling bearer [ 245.838729][T13240] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3719'. [ 245.940233][T13250] netlink: 'syz.3.3723': attribute type 1 has an invalid length. [ 245.948725][T13250] netlink: 'syz.3.3723': attribute type 2 has an invalid length. [ 245.967209][T13248] syzkaller0: entered promiscuous mode [ 245.972905][T13248] syzkaller0: entered allmulticast mode [ 246.145902][T13267] syzkaller0: entered promiscuous mode [ 246.162210][T13267] syzkaller0: entered allmulticast mode [ 246.300337][T13283] netlink: 'syz.0.3738': attribute type 1 has an invalid length. [ 246.310997][T13287] 0: reclassify loop, rule prio 0, protocol 800 [ 246.319303][T13283] netlink: 'syz.0.3738': attribute type 2 has an invalid length. [ 246.423024][T13296] syzkaller0: entered promiscuous mode [ 246.429891][T13296] syzkaller0: entered allmulticast mode [ 246.582004][T13310] syzkaller0: entered promiscuous mode [ 246.587861][T13310] syzkaller0: entered allmulticast mode [ 246.644678][T13323] syzkaller0: entered promiscuous mode [ 246.650318][T13323] syzkaller0: entered allmulticast mode [ 246.693208][T13327] syzkaller0: entered promiscuous mode [ 246.699771][T13327] syzkaller0: entered allmulticast mode [ 246.919736][T13352] syzkaller0: entered promiscuous mode [ 246.925798][T13352] syzkaller0: entered allmulticast mode [ 247.024935][T13358] syzkaller0: entered promiscuous mode [ 247.030635][T13358] syzkaller0: entered allmulticast mode [ 247.084093][T13362] syzkaller0: entered promiscuous mode [ 247.089683][T13362] syzkaller0: entered allmulticast mode [ 247.289253][T13386] netlink: 'syz.3.3780': attribute type 1 has an invalid length. [ 247.297274][T13386] netlink: 'syz.3.3780': attribute type 2 has an invalid length. [ 247.356000][T13391] syzkaller0: entered promiscuous mode [ 247.361935][T13391] syzkaller0: entered allmulticast mode [ 247.381298][T13393] syzkaller0: entered promiscuous mode [ 247.387000][T13393] syzkaller0: entered allmulticast mode [ 247.470004][T13399] syzkaller0: entered promiscuous mode [ 247.481434][T13399] syzkaller0: entered allmulticast mode [ 247.815825][T13426] syzkaller0: entered promiscuous mode [ 247.835003][T13426] syzkaller0: entered allmulticast mode [ 247.851658][T13422] syzkaller0: entered promiscuous mode [ 247.870298][T13422] syzkaller0: entered allmulticast mode [ 247.909775][T13433] tipc: Enabled bearer , priority 0 [ 247.925514][T13433] syzkaller0: entered promiscuous mode [ 247.931813][T13433] syzkaller0: entered allmulticast mode [ 247.963987][T13434] syzkaller0: entered promiscuous mode [ 247.969703][T13434] syzkaller0: entered allmulticast mode [ 247.983845][T13433] tipc: Resetting bearer [ 247.992173][T13432] tipc: Resetting bearer [ 248.003389][T13432] tipc: Disabling bearer [ 248.031009][T13442] netlink: 'syz.2.3807': attribute type 1 has an invalid length. [ 248.040276][T13442] netlink: 'syz.2.3807': attribute type 2 has an invalid length. [ 248.197138][T13450] syzkaller0: entered promiscuous mode [ 248.203867][T13450] syzkaller0: entered allmulticast mode [ 248.312028][T13466] syzkaller0: entered promiscuous mode [ 248.337661][T13466] syzkaller0: entered allmulticast mode [ 248.359505][T13469] netlink: 'syz.4.3820': attribute type 1 has an invalid length. [ 248.368272][T13469] netlink: 'syz.4.3820': attribute type 2 has an invalid length. [ 248.379202][T13467] tipc: Enabled bearer , priority 0 [ 248.404108][T13467] syzkaller0: entered promiscuous mode [ 248.417220][T13467] syzkaller0: entered allmulticast mode [ 248.447069][T13467] tipc: Resetting bearer [ 248.469171][T13464] tipc: Resetting bearer [ 248.478156][T13464] tipc: Disabling bearer [ 248.527567][T13482] syzkaller0: entered promiscuous mode [ 248.545537][T13482] syzkaller0: entered allmulticast mode [ 248.910934][T13505] netlink: 'syz.4.3833': attribute type 1 has an invalid length. [ 248.956837][T13505] netlink: 'syz.4.3833': attribute type 2 has an invalid length. [ 249.051262][T13522] tipc: Enabled bearer , priority 0 [ 249.105130][T13531] syzkaller0: entered promiscuous mode [ 249.111361][T13531] syzkaller0: entered allmulticast mode [ 249.141710][T13522] tipc: Resetting bearer [ 249.148849][T13521] tipc: Resetting bearer [ 249.172105][T13537] __nla_validate_parse: 15 callbacks suppressed [ 249.172133][T13537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3843'. [ 249.429279][T13521] tipc: Disabling bearer [ 249.462985][T13540] syzkaller0: entered promiscuous mode [ 249.468976][T13540] syzkaller0: entered allmulticast mode [ 249.572084][T13556] syzkaller0: entered promiscuous mode [ 249.577688][T13556] syzkaller0: entered allmulticast mode [ 249.623851][T13563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3851'. [ 249.634430][T13563] netlink: 'syz.3.3851': attribute type 1 has an invalid length. [ 249.642875][T13563] netlink: 'syz.3.3851': attribute type 2 has an invalid length. [ 249.746756][T13577] syzkaller0: entered promiscuous mode [ 249.752575][T13577] syzkaller0: entered allmulticast mode [ 249.774349][T13576] syzkaller0: entered promiscuous mode [ 249.779990][T13576] syzkaller0: entered allmulticast mode [ 249.909644][T13586] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3861'. [ 249.985493][T13594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3864'. [ 249.998256][T13593] syzkaller0: entered promiscuous mode [ 250.009489][T13593] syzkaller0: entered allmulticast mode [ 250.019070][T13594] netlink: 'syz.0.3864': attribute type 1 has an invalid length. [ 250.027270][T13594] netlink: 'syz.0.3864': attribute type 2 has an invalid length. [ 250.144940][T13612] syzkaller0: entered promiscuous mode [ 250.170186][T13612] syzkaller0: entered allmulticast mode [ 250.215537][T13622] syzkaller0: entered promiscuous mode [ 250.221756][T13622] syzkaller0: entered allmulticast mode [ 250.234113][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3871'. [ 250.264034][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3871'. [ 250.294665][T13628] syzkaller0: entered promiscuous mode [ 250.300734][T13628] syzkaller0: entered allmulticast mode [ 250.363655][T13634] syzkaller0: entered promiscuous mode [ 250.377779][T13634] syzkaller0: entered allmulticast mode [ 250.562178][T13669] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3887'. [ 250.580714][T13666] syzkaller0: entered promiscuous mode [ 250.586364][T13666] syzkaller0: entered allmulticast mode [ 250.717946][T13675] syzkaller0: entered promiscuous mode [ 250.723629][T13675] syzkaller0: entered allmulticast mode [ 250.731842][T13675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3890'. [ 250.741006][T13675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3890'. [ 250.981080][T13708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3900'. [ 251.049276][T13712] syzkaller0: entered promiscuous mode [ 251.055193][T13712] syzkaller0: entered allmulticast mode [ 251.500952][T13744] tipc: Enabled bearer , priority 0 [ 251.521227][T13744] syzkaller0: entered promiscuous mode [ 251.526767][T13744] syzkaller0: entered allmulticast mode [ 251.543555][T13744] tipc: Resetting bearer [ 251.651282][T13743] tipc: Resetting bearer [ 251.851263][T13743] tipc: Disabling bearer [ 251.917704][T13764] syzkaller0: entered promiscuous mode [ 251.923340][T13764] syzkaller0: entered allmulticast mode [ 251.948174][T13772] syzkaller0: entered promiscuous mode [ 251.954094][T13772] syzkaller0: entered allmulticast mode [ 252.196129][T13797] syzkaller0: entered promiscuous mode [ 252.202047][T13797] syzkaller0: entered allmulticast mode [ 252.356660][T13811] syzkaller0: entered promiscuous mode [ 252.362507][T13811] syzkaller0: entered allmulticast mode [ 252.369540][T13807] tipc: Enabled bearer , priority 0 [ 252.387928][T13813] syzkaller0: entered promiscuous mode [ 252.394092][T13813] syzkaller0: entered allmulticast mode [ 252.401528][T13807] syzkaller0: entered promiscuous mode [ 252.407131][T13807] syzkaller0: entered allmulticast mode [ 252.504748][T13817] tipc: Resetting bearer [ 252.515554][T13806] tipc: Resetting bearer [ 252.522794][T13806] tipc: Disabling bearer [ 252.655155][T13832] syzkaller0: entered promiscuous mode [ 252.661251][T13832] syzkaller0: entered allmulticast mode [ 253.585964][T13851] syzkaller0: entered promiscuous mode [ 253.602843][T13851] syzkaller0: entered allmulticast mode [ 254.013238][T13871] syzkaller0: entered promiscuous mode [ 254.022414][T13871] syzkaller0: entered allmulticast mode [ 254.076694][T13878] syzkaller0: entered promiscuous mode [ 254.100360][T13878] syzkaller0: entered allmulticast mode [ 254.202610][T13890] syzkaller0: entered promiscuous mode [ 254.208277][T13890] syzkaller0: entered allmulticast mode [ 254.332458][T13895] syzkaller0: entered promiscuous mode [ 254.343082][T13895] syzkaller0: entered allmulticast mode [ 254.370913][T13895] __nla_validate_parse: 5 callbacks suppressed [ 254.370938][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3963'. [ 254.398655][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3963'. [ 254.473640][T13905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3966'. [ 254.519711][T13918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3971'. [ 254.677335][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3980'. [ 254.697203][T13938] validate_nla: 4 callbacks suppressed [ 254.697286][T13938] netlink: 'syz.2.3980': attribute type 1 has an invalid length. [ 254.734824][T13938] netlink: 'syz.2.3980': attribute type 2 has an invalid length. [ 254.746709][T13929] syzkaller0: entered promiscuous mode [ 254.768520][T13929] syzkaller0: entered allmulticast mode [ 254.883095][T13952] syzkaller0: entered promiscuous mode [ 254.888806][T13952] syzkaller0: entered allmulticast mode [ 254.912650][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3982'. [ 254.986627][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3982'. [ 255.113141][T13965] loop1: detected capacity change from 0 to 1024 [ 255.207884][T13968] syzkaller0: entered promiscuous mode [ 255.227690][T13968] syzkaller0: entered allmulticast mode [ 255.359270][T13969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3987'. [ 255.527207][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3993'. [ 255.557698][T13988] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 255.587338][T13988] netlink: 'syz.1.3993': attribute type 2 has an invalid length. [ 255.877860][T14009] syzkaller0: entered promiscuous mode [ 255.892248][T14009] syzkaller0: entered allmulticast mode [ 256.807094][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'. [ 256.869188][T14039] netlink: 'syz.2.4010': attribute type 1 has an invalid length. [ 256.895427][T14043] loop1: detected capacity change from 0 to 2048 [ 256.917458][T14039] netlink: 'syz.2.4010': attribute type 2 has an invalid length. [ 256.976922][T14043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.045453][T14057] tipc: Enabled bearer , priority 0 [ 257.110732][T14057] syzkaller0: entered promiscuous mode [ 257.125290][T14057] syzkaller0: entered allmulticast mode [ 257.152419][T14057] tipc: Resetting bearer [ 257.169827][T14056] tipc: Resetting bearer [ 257.687860][T14073] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 257.702690][T14073] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 257.715142][T14073] EXT4-fs (loop1): This should not happen!! Data will be lost [ 257.715142][T14073] [ 257.724954][T14073] EXT4-fs (loop1): Total free blocks count 0 [ 257.731057][T14073] EXT4-fs (loop1): Free/Dirty block details [ 257.737091][T14073] EXT4-fs (loop1): free_blocks=2415919504 [ 257.742897][T14073] EXT4-fs (loop1): dirty_blocks=64 [ 257.748120][T14073] EXT4-fs (loop1): Block reservation details [ 257.754280][T14073] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 257.912192][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.922072][T14056] tipc: Disabling bearer [ 257.974496][T14081] syzkaller0: entered promiscuous mode [ 257.980220][T14081] syzkaller0: entered allmulticast mode [ 258.084605][T14096] syzkaller0: entered promiscuous mode [ 258.096991][T14096] syzkaller0: entered allmulticast mode [ 258.643623][T14151] syzkaller0: entered promiscuous mode [ 258.649547][T14151] syzkaller0: entered allmulticast mode [ 258.851209][T14159] syzkaller0: entered promiscuous mode [ 258.856831][T14159] syzkaller0: entered allmulticast mode [ 259.062056][T14178] syzkaller0: entered promiscuous mode [ 259.067694][T14178] syzkaller0: entered allmulticast mode [ 259.239028][T14199] syzkaller0: entered promiscuous mode [ 259.252660][T14199] syzkaller0: entered allmulticast mode [ 259.276300][T14207] loop4: detected capacity change from 0 to 1024 [ 259.439798][T14208] syzkaller0: entered promiscuous mode [ 259.454567][T14208] syzkaller0: entered allmulticast mode [ 259.826808][T14235] syzkaller0: entered promiscuous mode [ 259.832520][T14235] syzkaller0: entered allmulticast mode [ 260.008821][T14257] syzkaller0: entered promiscuous mode [ 260.015629][T14257] syzkaller0: entered allmulticast mode [ 260.194421][T14266] syzkaller0: entered promiscuous mode [ 260.200316][T14266] syzkaller0: entered allmulticast mode [ 260.256909][T14268] loop0: detected capacity change from 0 to 1024 [ 261.360610][T14297] syzkaller0: entered promiscuous mode [ 261.366181][T14297] syzkaller0: entered allmulticast mode [ 261.429212][T14304] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 261.450340][T14304] netlink: 'syz.3.4090': attribute type 2 has an invalid length. [ 261.480531][T14313] syzkaller0: entered promiscuous mode [ 261.486240][T14313] syzkaller0: entered allmulticast mode [ 261.495023][T14313] __nla_validate_parse: 4 callbacks suppressed [ 261.495047][T14313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4093'. [ 261.520030][T14313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4093'. [ 261.586028][T14317] syzkaller0: entered promiscuous mode [ 261.591901][T14317] syzkaller0: entered allmulticast mode [ 261.637292][T14319] syzkaller0: entered promiscuous mode [ 261.643182][T14319] syzkaller0: entered allmulticast mode [ 261.907239][T14333] tipc: Enabled bearer , priority 0 [ 261.915320][T14333] syzkaller0: entered promiscuous mode [ 261.921484][T14333] syzkaller0: entered allmulticast mode [ 261.935378][T14333] tipc: Resetting bearer [ 261.944828][T14330] tipc: Resetting bearer [ 261.956008][T14330] tipc: Disabling bearer [ 261.973986][T14336] netlink: 'syz.4.4105': attribute type 1 has an invalid length. [ 261.982565][T14336] netlink: 'syz.4.4105': attribute type 2 has an invalid length. [ 261.983060][T14337] loop2: detected capacity change from 0 to 2048 [ 262.024765][T14337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.050148][T14343] syzkaller0: entered promiscuous mode [ 262.059275][T14343] syzkaller0: entered allmulticast mode [ 262.068007][T14343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4107'. [ 262.077501][T14343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4107'. [ 262.231136][T14350] syzkaller0: entered promiscuous mode [ 262.236845][T14350] syzkaller0: entered allmulticast mode [ 262.812439][T14353] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 262.827256][T14353] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 262.833188][T14358] syzkaller0: entered promiscuous mode [ 262.839981][T14353] EXT4-fs (loop2): This should not happen!! Data will be lost [ 262.839981][T14353] [ 262.855510][T14353] EXT4-fs (loop2): Total free blocks count 0 [ 262.861585][T14353] EXT4-fs (loop2): Free/Dirty block details [ 262.867536][T14353] EXT4-fs (loop2): free_blocks=2415919504 [ 262.872801][T14358] syzkaller0: entered allmulticast mode [ 262.873967][T14353] EXT4-fs (loop2): dirty_blocks=64 [ 262.873983][T14353] EXT4-fs (loop2): Block reservation details [ 262.873995][T14353] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 262.952456][T10601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.171266][T14377] netlink: 'syz.3.4118': attribute type 1 has an invalid length. [ 263.179304][T14377] netlink: 'syz.3.4118': attribute type 2 has an invalid length. [ 263.284930][T14380] syzkaller0: entered promiscuous mode [ 263.352951][T14380] syzkaller0: entered allmulticast mode [ 263.391185][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4119'. [ 263.439363][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4119'. [ 264.158181][T14391] syzkaller0: entered promiscuous mode [ 264.163816][T14391] syzkaller0: entered allmulticast mode [ 264.266188][T14393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4123'. [ 264.345834][T14401] loop2: detected capacity change from 0 to 1024 [ 264.453117][T14407] syzkaller0: entered promiscuous mode [ 264.469181][T14407] syzkaller0: entered allmulticast mode [ 264.495272][T14409] tipc: Enabled bearer , priority 0 [ 264.517730][T14409] syzkaller0: entered promiscuous mode [ 264.536347][T14409] syzkaller0: entered allmulticast mode [ 264.565774][T14411] netlink: 'syz.1.4131': attribute type 1 has an invalid length. [ 264.579417][T14409] tipc: Resetting bearer [ 264.586658][T14408] tipc: Resetting bearer [ 264.592150][T14411] netlink: 'syz.1.4131': attribute type 2 has an invalid length. [ 264.602883][T14408] tipc: Disabling bearer [ 264.642664][T14413] syzkaller0: entered promiscuous mode [ 264.648354][T14413] syzkaller0: entered allmulticast mode [ 265.069794][T14432] syzkaller0: entered promiscuous mode [ 265.075551][T14432] syzkaller0: entered allmulticast mode [ 265.094992][T14444] syzkaller0: entered promiscuous mode [ 265.100639][T14444] syzkaller0: entered allmulticast mode [ 265.114744][T14448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4139'. [ 265.195833][T14454] loop1: detected capacity change from 0 to 2048 [ 265.224910][T14454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.367797][T14463] netlink: 'syz.4.4144': attribute type 1 has an invalid length. [ 265.376023][T14463] netlink: 'syz.4.4144': attribute type 2 has an invalid length. [ 265.942712][T14477] syzkaller0: entered promiscuous mode [ 265.984810][T14477] syzkaller0: entered allmulticast mode [ 266.003877][T14482] loop4: detected capacity change from 0 to 128 [ 266.029695][T14470] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 266.044611][T14470] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 266.056988][T14470] EXT4-fs (loop1): This should not happen!! Data will be lost [ 266.056988][T14470] [ 266.067125][T14470] EXT4-fs (loop1): Total free blocks count 0 [ 266.073179][T14470] EXT4-fs (loop1): Free/Dirty block details [ 266.079114][T14470] EXT4-fs (loop1): free_blocks=2415919504 [ 266.084987][T14470] EXT4-fs (loop1): dirty_blocks=96 [ 266.090176][T14470] EXT4-fs (loop1): Block reservation details [ 266.096271][T14470] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 266.172318][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.186464][T14486] syzkaller0: entered promiscuous mode [ 266.192066][T14486] syzkaller0: entered allmulticast mode [ 266.327743][T14494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4153'. [ 266.417602][T14496] syzkaller0: entered promiscuous mode [ 266.436635][T14496] syzkaller0: entered allmulticast mode [ 266.458832][T14492] syzkaller0: entered promiscuous mode [ 266.464556][T14492] syzkaller0: entered allmulticast mode [ 266.643022][T14522] syzkaller0: entered promiscuous mode [ 266.648666][T14522] syzkaller0: entered allmulticast mode [ 266.653952][T14524] loop2: detected capacity change from 0 to 2048 [ 266.683061][T14524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.730067][T14529] syzkaller0: entered promiscuous mode [ 266.735741][T14529] syzkaller0: entered allmulticast mode [ 266.856565][T14536] loop1: detected capacity change from 0 to 128 [ 266.881795][T14538] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4166'. [ 267.477596][T14540] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 267.492744][T14540] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 267.505443][T14540] EXT4-fs (loop2): This should not happen!! Data will be lost [ 267.505443][T14540] [ 267.515950][T14540] EXT4-fs (loop2): Total free blocks count 0 [ 267.522316][T14540] EXT4-fs (loop2): Free/Dirty block details [ 267.528267][T14540] EXT4-fs (loop2): free_blocks=2415919504 [ 267.534099][T14540] EXT4-fs (loop2): dirty_blocks=96 [ 267.539363][T14540] EXT4-fs (loop2): Block reservation details [ 267.545460][T14540] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 267.567189][T14544] syzkaller0: entered promiscuous mode [ 267.580219][T14544] syzkaller0: entered allmulticast mode [ 267.611963][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4168'. [ 267.622588][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4168'. [ 267.644166][T10601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.757537][T14553] syzkaller0: entered promiscuous mode [ 267.763319][T14553] syzkaller0: entered allmulticast mode [ 267.868015][T14565] loop0: detected capacity change from 0 to 1024 [ 267.896419][T14567] loop1: detected capacity change from 0 to 2048 [ 267.925674][T14567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.939684][T14575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4180'. [ 268.151097][T14580] syzkaller0: entered promiscuous mode [ 268.156882][T14580] syzkaller0: entered allmulticast mode [ 268.166856][T14579] tipc: Enabled bearer , priority 0 [ 268.724345][T14583] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 268.740163][T14583] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 800 with error 28 [ 268.753533][T14583] EXT4-fs (loop1): This should not happen!! Data will be lost [ 268.753533][T14583] [ 268.763401][T14583] EXT4-fs (loop1): Total free blocks count 0 [ 268.769517][T14583] EXT4-fs (loop1): Free/Dirty block details [ 268.776020][T14583] EXT4-fs (loop1): free_blocks=2415919504 [ 268.782318][T14583] EXT4-fs (loop1): dirty_blocks=800 [ 268.787566][T14583] EXT4-fs (loop1): Block reservation details [ 268.794237][T14583] EXT4-fs (loop1): i_reserved_data_blocks=50 [ 268.864630][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.894730][T14579] syzkaller0: entered promiscuous mode [ 268.900367][T14579] syzkaller0: entered allmulticast mode [ 268.932088][T14593] tipc: Resetting bearer [ 268.969259][T14588] syzkaller0: entered promiscuous mode [ 268.975872][T14588] syzkaller0: entered allmulticast mode [ 268.983663][T14578] tipc: Resetting bearer [ 268.994347][T14578] tipc: Disabling bearer [ 269.039286][T14605] loop3: detected capacity change from 0 to 128 [ 269.183469][T14614] syzkaller0: entered promiscuous mode [ 269.189088][T14614] syzkaller0: entered allmulticast mode [ 269.248195][T14617] loop1: detected capacity change from 0 to 1024 [ 269.368488][T14622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4195'. [ 269.503903][T14635] syzkaller0: entered promiscuous mode [ 269.509445][T14635] syzkaller0: entered allmulticast mode [ 269.744622][T14641] tipc: Enabled bearer , priority 0 [ 269.768252][T14639] syzkaller0: entered promiscuous mode [ 269.776970][T14639] syzkaller0: entered allmulticast mode [ 269.785502][T14645] syzkaller0: entered promiscuous mode [ 269.800182][T14645] syzkaller0: entered allmulticast mode [ 269.828231][T14637] tipc: Resetting bearer [ 269.861657][T14636] tipc: Resetting bearer [ 269.868996][T14636] tipc: Disabling bearer [ 269.931159][T14658] syzkaller0: entered promiscuous mode [ 269.936897][T14658] syzkaller0: entered allmulticast mode [ 269.999566][T14661] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4207'. [ 270.046041][T14671] loop2: detected capacity change from 0 to 128 [ 270.048654][T14663] loop1: detected capacity change from 0 to 1024 [ 270.245692][T14675] syzkaller0: entered promiscuous mode [ 270.257085][T14675] syzkaller0: entered allmulticast mode [ 270.284980][T14683] syzkaller0: entered promiscuous mode [ 270.290806][T14683] syzkaller0: entered allmulticast mode [ 270.294858][T14680] loop1: detected capacity change from 0 to 2048 [ 270.465066][T14680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.671984][T14693] syzkaller0: entered promiscuous mode [ 270.693786][T14693] syzkaller0: entered allmulticast mode [ 271.176486][T14700] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 271.191251][T14700] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 544 with error 28 [ 271.203897][T14700] EXT4-fs (loop1): This should not happen!! Data will be lost [ 271.203897][T14700] [ 271.213699][T14700] EXT4-fs (loop1): Total free blocks count 0 [ 271.219748][T14700] EXT4-fs (loop1): Free/Dirty block details [ 271.225769][T14700] EXT4-fs (loop1): free_blocks=2415919504 [ 271.232031][T14700] EXT4-fs (loop1): dirty_blocks=544 [ 271.237271][T14700] EXT4-fs (loop1): Block reservation details [ 271.243330][T14700] EXT4-fs (loop1): i_reserved_data_blocks=34 [ 271.271475][T14695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4215'. [ 271.290913][T14695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4215'. [ 271.322668][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.335094][T14703] tipc: Enabled bearer , priority 0 [ 271.343093][T14703] syzkaller0: entered promiscuous mode [ 271.348659][T14703] syzkaller0: entered allmulticast mode [ 271.360721][T14703] tipc: Resetting bearer [ 271.368944][T14702] tipc: Resetting bearer [ 271.382226][T14702] tipc: Disabling bearer [ 271.477274][T14709] syzkaller0: entered promiscuous mode [ 271.482985][T14709] syzkaller0: entered allmulticast mode [ 271.556484][T14717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4224'. [ 271.636915][T14723] loop0: detected capacity change from 0 to 1024 [ 271.749110][T14727] syzkaller0: entered promiscuous mode [ 271.764624][T14727] syzkaller0: entered allmulticast mode [ 271.978026][T14738] syzkaller0: entered promiscuous mode [ 271.983633][T14738] syzkaller0: entered allmulticast mode [ 271.991745][T14738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4233'. [ 272.001456][T14738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4233'. [ 272.015424][T14739] tipc: Enabled bearer , priority 0 [ 272.034355][T14739] syzkaller0: entered promiscuous mode [ 272.039886][T14739] syzkaller0: entered allmulticast mode [ 272.078220][T14739] tipc: Resetting bearer [ 272.085199][T14734] tipc: Resetting bearer [ 272.102799][T14734] tipc: Disabling bearer [ 272.176778][T14754] syzkaller0: entered promiscuous mode [ 272.183525][T14754] syzkaller0: entered allmulticast mode [ 272.277693][T14761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4239'. [ 272.318782][T14764] loop2: detected capacity change from 0 to 1024 [ 272.720950][T14782] syzkaller0: entered promiscuous mode [ 272.729810][T14782] syzkaller0: entered allmulticast mode [ 272.775087][T14784] tipc: Enabled bearer , priority 0 [ 272.784986][T14782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4247'. [ 272.878394][T14782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4247'. [ 272.942721][T14787] loop4: detected capacity change from 0 to 2048 [ 272.958814][T14784] syzkaller0: entered promiscuous mode [ 272.964561][T14784] syzkaller0: entered allmulticast mode [ 272.986193][T14787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.011015][T14798] tipc: Resetting bearer [ 273.027672][T14783] tipc: Resetting bearer [ 273.040589][T14783] tipc: Disabling bearer [ 273.650165][T14804] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 273.665185][T14804] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 273.678024][T14804] EXT4-fs (loop4): This should not happen!! Data will be lost [ 273.678024][T14804] [ 273.687796][T14804] EXT4-fs (loop4): Total free blocks count 0 [ 273.693954][T14804] EXT4-fs (loop4): Free/Dirty block details [ 273.699903][T14804] EXT4-fs (loop4): free_blocks=2415919504 [ 273.705874][T14804] EXT4-fs (loop4): dirty_blocks=64 [ 273.711325][T14804] EXT4-fs (loop4): Block reservation details [ 273.717391][T14804] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 273.743609][T14803] loop3: detected capacity change from 0 to 1024 [ 273.769292][T14809] loop2: detected capacity change from 0 to 2048 [ 273.785698][T11311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.845589][T14812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4256'. [ 273.874422][T14809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.964028][T14817] syzkaller0: entered promiscuous mode [ 273.969743][T14817] syzkaller0: entered allmulticast mode [ 274.595893][T14825] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 274.610798][T14825] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 274.623226][T14825] EXT4-fs (loop2): This should not happen!! Data will be lost [ 274.623226][T14825] [ 274.633012][T14825] EXT4-fs (loop2): Total free blocks count 0 [ 274.639037][T14825] EXT4-fs (loop2): Free/Dirty block details [ 274.644996][T14825] EXT4-fs (loop2): free_blocks=2415919504 [ 274.650884][T14825] EXT4-fs (loop2): dirty_blocks=64 [ 274.656026][T14825] EXT4-fs (loop2): Block reservation details [ 274.662118][T14825] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 274.720801][T10601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.927174][T14832] syzkaller0: entered promiscuous mode [ 274.948736][T14832] syzkaller0: entered allmulticast mode [ 275.041420][T14844] syzkaller0: entered promiscuous mode [ 275.046974][T14844] syzkaller0: entered allmulticast mode [ 275.058761][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4262'. [ 275.081297][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4262'. [ 275.137699][T14846] tipc: Enabled bearer , priority 0 [ 275.154853][T14846] syzkaller0: entered promiscuous mode [ 275.165416][T14848] loop0: detected capacity change from 0 to 2048 [ 275.169790][T14846] syzkaller0: entered allmulticast mode [ 275.206814][T14850] loop2: detected capacity change from 0 to 1024 [ 275.215467][T14848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.234202][T14846] tipc: Resetting bearer [ 275.251694][T14845] tipc: Resetting bearer [ 275.306687][T14845] tipc: Disabling bearer [ 275.369809][T14860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4269'. [ 275.395147][T14858] syzkaller0: entered promiscuous mode [ 275.401071][T14858] syzkaller0: entered allmulticast mode [ 275.977841][T14865] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 275.992673][T14865] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 276.004983][T14865] EXT4-fs (loop0): This should not happen!! Data will be lost [ 276.004983][T14865] [ 276.014857][T14865] EXT4-fs (loop0): Total free blocks count 0 [ 276.020928][T14865] EXT4-fs (loop0): Free/Dirty block details [ 276.026876][T14865] EXT4-fs (loop0): free_blocks=2415919504 [ 276.032763][T14865] EXT4-fs (loop0): dirty_blocks=96 [ 276.038023][T14865] EXT4-fs (loop0): Block reservation details [ 276.044105][T14865] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 276.105146][T10169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.157970][T14876] netlink: 'syz.4.4275': attribute type 1 has an invalid length. [ 276.166463][T14876] netlink: 'syz.4.4275': attribute type 2 has an invalid length. [ 276.184315][T14878] syzkaller0: entered promiscuous mode [ 276.203596][T14878] syzkaller0: entered allmulticast mode [ 276.221417][T14880] syzkaller0: entered promiscuous mode [ 276.227117][T14880] syzkaller0: entered allmulticast mode [ 276.250169][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4277'. [ 276.366730][T14888] loop0: detected capacity change from 0 to 1024 [ 276.423452][T14890] tipc: Enabled bearer , priority 0 [ 276.430818][T14890] syzkaller0: entered promiscuous mode [ 276.436619][T14890] syzkaller0: entered allmulticast mode [ 276.460275][T14890] tipc: Resetting bearer [ 276.485581][T14889] tipc: Resetting bearer [ 276.509917][T14889] tipc: Disabling bearer [ 277.525810][T14915] netlink: 'syz.1.4290': attribute type 1 has an invalid length. [ 277.533952][T14915] netlink: 'syz.1.4290': attribute type 2 has an invalid length. [ 277.615389][T14922] syzkaller0: entered promiscuous mode [ 277.628795][T14922] syzkaller0: entered allmulticast mode [ 277.636503][T14920] syzkaller0: entered promiscuous mode [ 277.647119][T14920] syzkaller0: entered allmulticast mode [ 277.664176][T14922] __nla_validate_parse: 1 callbacks suppressed [ 277.664194][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4292'. [ 277.683930][T14928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4295'. [ 277.694771][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4292'. [ 277.837682][T14936] syzkaller0: entered promiscuous mode [ 277.846089][T14936] syzkaller0: entered allmulticast mode [ 278.032571][T14948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4303'. [ 278.042698][T14948] netlink: 'syz.0.4303': attribute type 1 has an invalid length. [ 278.050874][T14948] netlink: 'syz.0.4303': attribute type 2 has an invalid length. [ 278.654908][T14953] syzkaller0: entered promiscuous mode [ 278.683392][T14953] syzkaller0: entered allmulticast mode [ 278.725060][T14959] tipc: Enabled bearer , priority 0 [ 278.802793][T14959] syzkaller0: entered promiscuous mode [ 278.813566][T14959] syzkaller0: entered allmulticast mode [ 278.943920][T14958] tipc: Resetting bearer [ 278.963050][T14958] tipc: Disabling bearer [ 279.039129][T14963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4307'. [ 279.074335][T14968] syzkaller0: entered promiscuous mode [ 279.080028][T14968] syzkaller0: entered allmulticast mode [ 279.088916][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4308'. [ 279.098382][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4308'. [ 279.176772][T14974] syzkaller0: entered promiscuous mode [ 279.182562][T14974] syzkaller0: entered allmulticast mode [ 279.321007][T14980] syzkaller0: entered promiscuous mode [ 279.326589][T14980] syzkaller0: entered allmulticast mode [ 279.383662][T14984] loop0: detected capacity change from 0 to 1024 [ 279.406867][T14987] loop1: detected capacity change from 0 to 2048 [ 279.467626][T14987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.211254][T15008] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 280.226048][T15008] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 280.238792][T15008] EXT4-fs (loop1): This should not happen!! Data will be lost [ 280.238792][T15008] [ 280.248519][T15008] EXT4-fs (loop1): Total free blocks count 0 [ 280.254642][T15008] EXT4-fs (loop1): Free/Dirty block details [ 280.260716][T15008] EXT4-fs (loop1): free_blocks=2415919504 [ 280.266645][T15008] EXT4-fs (loop1): dirty_blocks=64 [ 280.271853][T15008] EXT4-fs (loop1): Block reservation details [ 280.278225][T15008] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 280.290762][T15013] loop3: detected capacity change from 0 to 2048 [ 280.341451][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.361270][T15013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.435050][T15021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4327'. [ 280.466710][T15021] netlink: 'syz.4.4327': attribute type 1 has an invalid length. [ 280.491429][T15021] netlink: 'syz.4.4327': attribute type 2 has an invalid length. [ 280.595841][T15025] loop4: detected capacity change from 0 to 1024 [ 280.672834][T15027] syzkaller0: entered promiscuous mode [ 280.678433][T15027] syzkaller0: entered allmulticast mode [ 281.090895][T15028] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 281.105857][T15028] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 281.118284][T15028] EXT4-fs (loop3): This should not happen!! Data will be lost [ 281.118284][T15028] [ 281.128083][T15028] EXT4-fs (loop3): Total free blocks count 0 [ 281.134217][T15028] EXT4-fs (loop3): Free/Dirty block details [ 281.140274][T15028] EXT4-fs (loop3): free_blocks=2415919504 [ 281.146048][T15028] EXT4-fs (loop3): dirty_blocks=32 [ 281.151398][T15028] EXT4-fs (loop3): Block reservation details [ 281.157442][T15028] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 281.217862][T12269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.259469][T15034] syzkaller0: entered promiscuous mode [ 281.270169][T15034] syzkaller0: entered allmulticast mode [ 281.653210][T15056] syzkaller0: entered promiscuous mode [ 281.659050][T15056] syzkaller0: entered allmulticast mode [ 281.861908][T15058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4339'. [ 282.016818][T15063] loop0: detected capacity change from 0 to 1024 [ 282.074483][T15065] syzkaller0: entered promiscuous mode [ 282.080290][T15065] syzkaller0: entered allmulticast mode [ 282.123243][T15067] loop2: detected capacity change from 0 to 2048 [ 282.142084][T15067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.257676][T15076] syzkaller0: entered promiscuous mode [ 282.263564][T15076] syzkaller0: entered allmulticast mode [ 282.855456][T15085] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4349'. [ 282.881753][T15087] syzkaller0: entered promiscuous mode [ 282.887505][T15087] syzkaller0: entered allmulticast mode [ 282.960362][T15081] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 282.975255][T15081] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 282.987672][T15081] EXT4-fs (loop2): This should not happen!! Data will be lost [ 282.987672][T15081] [ 282.997783][T15081] EXT4-fs (loop2): Total free blocks count 0 [ 283.003854][T15081] EXT4-fs (loop2): Free/Dirty block details [ 283.009870][T15081] EXT4-fs (loop2): free_blocks=2415919504 [ 283.015812][T15081] EXT4-fs (loop2): dirty_blocks=96 [ 283.021059][T15081] EXT4-fs (loop2): Block reservation details [ 283.027140][T15081] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 283.082101][T15092] syzkaller0: entered promiscuous mode [ 283.088469][T15092] syzkaller0: entered allmulticast mode [ 283.098988][T15092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4352'. [ 283.099666][T10601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.108688][T15092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4352'. [ 283.148335][T15096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4353'. [ 283.207022][T15098] syzkaller0: entered promiscuous mode [ 283.217921][T15098] syzkaller0: entered allmulticast mode [ 283.380459][T15111] syzkaller0: entered promiscuous mode [ 283.386548][T15111] syzkaller0: entered allmulticast mode [ 284.187579][T15121] loop1: detected capacity change from 0 to 128 [ 284.305581][T15039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.330182][T15085] netlink: 'syz.4.4349': attribute type 1 has an invalid length. [ 284.352634][T15085] netlink: 'syz.4.4349': attribute type 2 has an invalid length. [ 284.387733][T15124] syzkaller0: entered promiscuous mode [ 284.400158][T15124] syzkaller0: entered allmulticast mode [ 284.417757][T15124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4366'. [ 284.447721][T15124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4366'. [ 284.485661][T15126] syzkaller0: entered promiscuous mode [ 284.537480][T15126] syzkaller0: entered allmulticast mode [ 284.550268][T15130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4368'. [ 284.708906][T15140] syzkaller0: entered promiscuous mode [ 284.724604][T15140] syzkaller0: entered allmulticast mode [ 284.760963][T15144] team0 (unregistering): Failed to send options change via netlink (err -105) [ 284.770494][T15144] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 284.782739][T15144] team0 (unregistering): Port device team_slave_0 removed [ 284.792649][T15144] team0 (unregistering): Failed to send options change via netlink (err -105) [ 284.802307][T15144] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 284.816839][T15144] team0 (unregistering): Port device team_slave_1 removed [ 284.945369][T15156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4378'. [ 285.003419][T15158] syzkaller0: entered promiscuous mode [ 285.009279][T15158] syzkaller0: entered allmulticast mode [ 285.022409][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4379'. [ 285.032384][T15158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4379'. [ 285.201039][T15161] loop0: detected capacity change from 0 to 128 [ 285.445965][T15170] syzkaller0: entered promiscuous mode [ 285.452311][T15170] syzkaller0: entered allmulticast mode [ 285.611907][T15175] syzkaller0: entered promiscuous mode [ 285.617604][T15175] syzkaller0: entered allmulticast mode [ 285.733519][T15178] loop1: detected capacity change from 0 to 2048 [ 285.752440][T15178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.552949][T15187] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 286.567889][T15187] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 286.580292][T15187] EXT4-fs (loop1): This should not happen!! Data will be lost [ 286.580292][T15187] [ 286.590007][T15187] EXT4-fs (loop1): Total free blocks count 0 [ 286.596065][T15187] EXT4-fs (loop1): Free/Dirty block details [ 286.602017][T15187] EXT4-fs (loop1): free_blocks=2415919504 [ 286.607764][T15187] EXT4-fs (loop1): dirty_blocks=128 [ 286.613024][T15187] EXT4-fs (loop1): Block reservation details [ 286.619114][T15187] EXT4-fs (loop1): i_reserved_data_blocks=8 [ 286.696876][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.755993][T15195] syzkaller0: entered promiscuous mode [ 286.770187][T15195] syzkaller0: entered allmulticast mode [ 286.889059][T15201] syzkaller0: entered promiscuous mode [ 286.895889][T15203] loop0: detected capacity change from 0 to 128 [ 286.904053][T15201] syzkaller0: entered allmulticast mode [ 287.165403][T15214] syzkaller0: entered promiscuous mode [ 287.171450][T15214] syzkaller0: entered allmulticast mode [ 287.837771][T15147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.849039][T15156] netlink: 'syz.3.4378': attribute type 1 has an invalid length. [ 287.857076][T15156] netlink: 'syz.3.4378': attribute type 2 has an invalid length. [ 287.913167][T15222] syzkaller0: entered promiscuous mode [ 287.918911][T15222] syzkaller0: entered allmulticast mode [ 287.935841][T15223] loop1: detected capacity change from 0 to 2048 [ 287.988461][T15223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.120236][T15234] syzkaller0: entered promiscuous mode [ 288.127064][T15234] syzkaller0: entered allmulticast mode [ 288.154882][T15237] loop0: detected capacity change from 0 to 128 [ 288.752690][T15240] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 288.767621][T15240] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 288.780107][T15240] EXT4-fs (loop1): This should not happen!! Data will be lost [ 288.780107][T15240] [ 288.789787][T15240] EXT4-fs (loop1): Total free blocks count 0 [ 288.795965][T15240] EXT4-fs (loop1): Free/Dirty block details [ 288.802010][T15240] EXT4-fs (loop1): free_blocks=2415919504 [ 288.807778][T15240] EXT4-fs (loop1): dirty_blocks=96 [ 288.812967][T15240] EXT4-fs (loop1): Block reservation details [ 288.818979][T15240] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 288.894894][T10760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.900933][T15247] __nla_validate_parse: 1 callbacks suppressed [ 288.900997][T15247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4411'. [ 289.195685][T15263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4415'. [ 289.422886][T15261] ================================================================== [ 289.431061][T15261] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 289.440739][T15261] [ 289.443093][T15261] write to 0xffff888119ebe800 of 8 bytes by task 15264 on cpu 1: [ 289.450860][T15261] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 289.456801][T15261] page_pool_alloc_pages+0xd0/0x130 [ 289.462052][T15261] bpf_test_run_xdp_live+0x66c/0x1360 [ 289.467596][T15261] bpf_prog_test_run_xdp+0x57b/0xa10 [ 289.473046][T15261] bpf_prog_test_run+0x204/0x340 [ 289.478060][T15261] __sys_bpf+0x52e/0x7e0 [ 289.482342][T15261] __x64_sys_bpf+0x41/0x50 [ 289.486808][T15261] x64_sys_call+0x10cb/0x3020 [ 289.491523][T15261] do_syscall_64+0x12c/0x370 [ 289.496170][T15261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.502103][T15261] [ 289.504457][T15261] read to 0xffff888119ebe800 of 8 bytes by task 15261 on cpu 0: [ 289.512116][T15261] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 289.518045][T15261] napi_pp_put_page+0xe9/0x200 [ 289.522870][T15261] skb_release_data+0x624/0x670 [ 289.527754][T15261] __kfree_skb+0x44/0x150 [ 289.532107][T15261] sk_skb_reason_drop+0xbd/0x290 [ 289.537175][T15261] __first_packet_length+0x318/0x400 [ 289.542500][T15261] first_packet_length+0x217/0x240 [ 289.547652][T15261] udp_poll+0xc8/0x150 [ 289.551740][T15261] sock_poll+0x21c/0x240 [ 289.556035][T15261] do_select+0x94e/0xfa0 [ 289.560348][T15261] core_sys_select+0x45d/0x730 [ 289.565178][T15261] __se_sys_pselect6+0x23c/0x2a0 [ 289.570153][T15261] __x64_sys_pselect6+0x78/0x90 [ 289.575056][T15261] x64_sys_call+0x8d5/0x3020 [ 289.579690][T15261] do_syscall_64+0x12c/0x370 [ 289.584413][T15261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.590354][T15261] [ 289.592709][T15261] value changed: 0xffffea00047eacc0 -> 0x0000000000000000 [ 289.599935][T15261] [ 289.602274][T15261] Reported by Kernel Concurrency Sanitizer on: [ 289.608992][T15261] CPU: 0 UID: 0 PID: 15261 Comm: syz.0.4416 Not tainted syzkaller #0 PREEMPT(full) [ 289.618388][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 289.628501][T15261] ================================================================== [ 292.042146][T15254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.051309][T15263] netlink: 'syz.2.4415': attribute type 1 has an invalid length. [ 292.059571][T15263] netlink: 'syz.2.4415': attribute type 2 has an invalid length.