last executing test programs: 4m56.271470455s ago: executing program 1 (id=1231): unshare(0x8040480) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000140)=[{r0, 0x400}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 4m56.121511619s ago: executing program 1 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x22, &(0x7f0000000380)={@link_local, @random="65c537c46509", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast}}}}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x5}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="24000000010006", 0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 4m52.671830325s ago: executing program 1 (id=1252): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44410}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m51.137648702s ago: executing program 1 (id=1249): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) 4m50.546887037s ago: executing program 1 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x22, &(0x7f0000000380)={@link_local, @random="65c537c46509", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast}}}}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x5}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="24000000010006", 0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 4m48.283248143s ago: executing program 1 (id=1267): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="510fdc7f383e19b5b7f159bf009b8ffd932eadfcdabb6190f1928520a7022201f281268e43aca35c86534f1faa23e48c46d6bb679d9330bb2c5a9e0527eedc16974eed7cc32fd6d6ca50819580aa28029a7eb9c7e2c7f4f8effae1f493d8f6218b4c26d8f8e2d4113c0ecd3175c9cfe5197b2eb062d2e56eea6a4523c257f1aee5a9a45d3a4db16cef050ce20d954e669dfa9452341924d651fa9ad574df2fa9fc446cf92c86192af6d424a84096efa13d1ec82ee45abeb3663bcf", 0xbb}], 0x1}}], 0x1, 0xc8009) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010"], 0x128}}, 0x0) 4m45.145372721s ago: executing program 0 (id=1278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa900000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xfdd, &(0x7f0000000540)=""/4061, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x63ff}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003160000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000009fd000000c005000500000000000a004e240000000900000000000000000000000000000000060000000300000006000800"], 0xb0}, 0x1, 0x7}, 0x18004) 4m41.069738561s ago: executing program 0 (id=1289): r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 4m37.584242377s ago: executing program 0 (id=1295): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x844) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x44, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_GROUP_TYPE={0x6}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf, 0x3}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 4m36.955301583s ago: executing program 0 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x33c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x30c, 0x2, [@TCA_BASIC_ACT={0x70, 0x3, [@m_connmark={0x6c, 0x1, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0x290, 0x3, [@m_sample={0xb0, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 4m33.668238045s ago: executing program 0 (id=1311): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) 4m32.586161371s ago: executing program 32 (id=1267): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)="510fdc7f383e19b5b7f159bf009b8ffd932eadfcdabb6190f1928520a7022201f281268e43aca35c86534f1faa23e48c46d6bb679d9330bb2c5a9e0527eedc16974eed7cc32fd6d6ca50819580aa28029a7eb9c7e2c7f4f8effae1f493d8f6218b4c26d8f8e2d4113c0ecd3175c9cfe5197b2eb062d2e56eea6a4523c257f1aee5a9a45d3a4db16cef050ce20d954e669dfa9452341924d651fa9ad574df2fa9fc446cf92c86192af6d424a84096efa13d1ec82ee45abeb3663bcf", 0xbb}], 0x1}}], 0x1, 0xc8009) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010"], 0x128}}, 0x0) 4m31.41658622s ago: executing program 0 (id=1308): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4000010, 0xffffffffffffffff, 0xf732000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000003c0)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{}]}) syz_emit_ethernet(0x46, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x4a040000) socket(0x8, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r7], &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4m15.443773805s ago: executing program 33 (id=1308): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4000010, 0xffffffffffffffff, 0xf732000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000003c0)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{}]}) syz_emit_ethernet(0x46, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x4a040000) socket(0x8, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x9, 0x6a, &(0x7f00000002c0)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r7], &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 4.997534387s ago: executing program 4 (id=2666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.702388914s ago: executing program 4 (id=2671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x18000000, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4.572094577s ago: executing program 6 (id=2673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 3.591791251s ago: executing program 2 (id=2676): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, 0x0, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4050) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e25, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES8=r3], 0x18}, 0x40c0) 3.509697313s ago: executing program 6 (id=2677): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c 122532'], 0xa) 3.509340353s ago: executing program 4 (id=2678): r0 = syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000001a40)={{r3, &(0x7f0000000440)='/dev/nullb0\x00', 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1}, 0x3, &(0x7f00000019c0)=[{0x3, 0x6, &(0x7f00000005c0)='syz0\x00', &(0x7f0000000600)="d80d4df123067a08584d392b80c179e64b8c4f45722ca5d77b0afa07ee69e10446de939bfdc4dc280fdaa20da591fe4d8939831193369687ddad9af238203520339abac13fcab1587d1a8e63ebb200032f2bf7f6c1ecb71582de6ec29c9e0017f4cfa940a7f32b85324b1b12bc7665057cf7313c50a7602811f746a87fbb227f50a1d95105fc173f24a95a70edc3a4048b593160e0dbae6f884d1bcbc667cc961cdd19023f0ec10bf81f35683c5e7b749c9b49ccdf849486ab7cf8a97876787551682ae88b0e985beae1fd715633e02c4d03bf3818ec87ffcdced26f86c5b7be36", 0xe1, 0x20}, {0x3, 0x4, &(0x7f0000000700)='*%(-\\?-(\x00', 0x0, 0x0, 0x8}, {0x2, 0x401, &(0x7f0000000780)='sysfs\x00', &(0x7f00000008c0), 0x0, 0x18}]}) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write(r4, &(0x7f0000000400)='dummy_', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) close(r0) 3.413642536s ago: executing program 6 (id=2679): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x20048010, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) 2.632702995s ago: executing program 2 (id=2680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0000000000000043fb6fdb000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 2.577635967s ago: executing program 5 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 2.577179656s ago: executing program 3 (id=2682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.575423117s ago: executing program 6 (id=2683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_tunnel_key={0x5c, 0x1, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 2.519545478s ago: executing program 4 (id=2684): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/19, 0x13}], 0x1, &(0x7f0000000f80)=""/128, 0x80}, 0xf1a2}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001080)=""/52, 0x34}, {0x0}, {0x0}], 0x3}, 0x40}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x0, 0x0) 2.504733058s ago: executing program 5 (id=2685): r0 = socket(0x840000000002, 0x3, 0x100) sendto$inet(r0, &(0x7f0000000000)='<', 0xfffffffffffffe8a, 0x805, 0x0, 0x0) 2.417568411s ago: executing program 2 (id=2686): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000000640)="$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") ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000fbffffff1af8ff00000000bfa100000000000007010000f8ffffffb70100000000000000030000870000008500000007000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000b80)={[{@errors_remount}, {@dioread_lock}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x10000f0}}, {@abort}, {@bh}, {@dioread_lock}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '\''}}]}, 0x3, 0x453, &(0x7f0000000600)="$eJzs281vFOUfAPDvzLbw+/HWivgColbR2PjS0oLKwYtGEw+amOgBj7UtBFmooTUR0mg1Bo+GxLvxaOJf4EkvRj2ZeNW7ISHaC+hpzczOlO2yu7R06xb280kGnmfm2T7Pt888O8/MMw2gb41k/yQRuyLit4gYqmdXFxip/3dteXH67+XF6SRqtTf/TPJyV5cXp8ui5ed2FpnRNCL9NCkqWW3+/IXTU9Xq7LkiP75w5r3x+fMXnjl1Zurk7MnZs5PHjh09MvH8c5PPrj2YJGl7aHfW1gMfzh3c/+rbl16fPn7pnZ++yUrvKo43xrERaUN6JAv8r1quudzj3ahsC9ndkE4Gbl6GraESEVl3Debjfygqcb3zhuKVT3raOGBTZdem7e0PL9VaqbTcC9x2kuh1C4DeKC/02f1vuf1HU48t4cqL9Rugq8ni9LXl+lY/MrByLz+4ifeuIxFxfOmfL7MtuvgcAgCgne+y+c/TreZ/adzbUG5PsTY0HBF3RcTeiLg7IvZFxD0Redn7IuL+G2pIO9bfvDR04/wnvXzLwa1BNv97oVjbWj3/W2n3cKXI7c7jH0xOnKrOHi5+J6MxuD3LT3So4/uXf/283bHG+V+2ZfWXc8GiHZcHmh7QzUwtTOWT0i648nHEgYFW8ScrKwFJROyPiAPr+9F7ysSpJ78+2K7QzePvoM0603rUvop4Iuv/WrIUTfGXks7rk+P/i+rs4fHyrLjRz79cfKNd/RuKvwuy/t+x+vxvLjKcNK7Xzq+/jou/f9b2nuZWz/9tyVt5v2wr9n0wtbBwbiJiW/Janl+1f/L6Z8t8WT6Lf/RQ6/G/t/hMVs8DEZGdxA9GxEMR8XDR9kci4tGIONQh/h9feuzdW49/c2Xxz7T8/ls5/5v6f/2Jyukfvm1X/9r6/2ieGi325N9/N7HWBm7kdwcAAAC3izR/Bz5Jx1bSaTo2Vn+Hf1/sSKtz8wtPnZh7/+xM/V354RhMyyddQw3PQyeSpeIn1vOTxbPi8viR4rnxF5X/5/mx6bnqTI9jh363s834z/xR6XXrgE3XhXU04DbVPP47v7IB3Elc/6F/Gf/Qv4x/6F+txv9HTXlrAXBncv2H/mX8Q/8y/qF/Gf/Qlzbyd/0S/ZyIdEs0Y5MSQ1ujGT1M9PqbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//82merZ") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) io_submit(0x0, 0x0, 0x0) 2.410192271s ago: executing program 5 (id=2687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(r2, 0x0) init_module(0x0, 0x2ef, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, r2, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, 0x0, &(0x7f0000000300)='ufs\x00', 0x2140e3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.292636134s ago: executing program 3 (id=2688): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x3, 0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 1.311251007s ago: executing program 2 (id=2689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x18000000, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.286195888s ago: executing program 5 (id=2690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, '\x00', "0000000000e3c100", '\x00', "00000000000000fd"}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) 1.261953819s ago: executing program 6 (id=2691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa1000000000000070100"], 0x0, 0x8001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x38}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x7, 0x9, 0x0, 0x10006, 0x0, 0x0, 0x1}, 0x9c) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14010000260001000000000004000000020100800c000100020000000000000014000c0100"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000060900020073797a3000000000050004000300000011000300686173683a69702c706f7274000000000500050003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES16=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x708c4ab9}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) 1.20972044s ago: executing program 4 (id=2692): writev(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.20947883s ago: executing program 3 (id=2693): r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x28000600) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) 1.138076172s ago: executing program 3 (id=2694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}}, 0x10) 1.063093634s ago: executing program 5 (id=2695): r0 = syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000001a40)={{r3, &(0x7f0000000440)='/dev/nullb0\x00', 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1}, 0x3, &(0x7f00000019c0)=[{0x3, 0x6, &(0x7f00000005c0)='syz0\x00', &(0x7f0000000600)="d80d4df123067a08584d392b80c179e64b8c4f45722ca5d77b0afa07ee69e10446de939bfdc4dc280fdaa20da591fe4d8939831193369687ddad9af238203520339abac13fcab1587d1a8e63ebb200032f2bf7f6c1ecb71582de6ec29c9e0017f4cfa940a7f32b85324b1b12bc7665057cf7313c50a7602811f746a87fbb227f50a1d95105fc173f24a95a70edc3a4048b593160e0dbae6f884d1bcbc667cc961cdd19023f0ec10bf81f35683c5e7b749c9b49ccdf849486ab7cf8a97876787551682ae88b0e985beae1fd715633e02c4d03bf3818ec87ffcdced26f86c5b7be36", 0xe1, 0x20}, {0x3, 0x4, &(0x7f0000000700)='*%(-\\?-(\x00', 0x0, 0x0, 0x8}, {0x2, 0x401, &(0x7f0000000780)='sysfs\x00', &(0x7f00000008c0), 0x0, 0x18}]}) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write(r4, &(0x7f0000000400)='dummy_', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) close(r0) 977.188696ms ago: executing program 3 (id=2696): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}}, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x210800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 876.038029ms ago: executing program 3 (id=2697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004800)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42, 0x20}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 276.049284ms ago: executing program 2 (id=2698): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="d859b1f54b28a42dce030bac1b0f", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) 157.640856ms ago: executing program 4 (id=2699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 157.248956ms ago: executing program 6 (id=2700): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000000640)="$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") ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000fbffffff1af8ff00000000bfa100000000000007010000f8ffffffb70100000000000000030000870000008500000007000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000b80)={[{@errors_remount}, {@dioread_lock}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x10000f0}}, {@abort}, {@bh}, {@dioread_lock}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '\''}}]}, 0x3, 0x453, &(0x7f0000000600)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) io_submit(0x0, 0x0, 0x0) 73.994509ms ago: executing program 5 (id=2701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x0, 0x9, 0xba, &(0x7f0000000480)=""/186, 0x41100, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(r2, 0x0) init_module(0x0, 0x2ef, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, r2, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, 0x0, &(0x7f0000000300)='ufs\x00', 0x2140e3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 2 (id=2702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_tunnel_key={0x5c, 0x1, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) kernel console output (not intermixed with test programs): tes in process `syz.1.560'. [ 267.709857][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.561'. [ 268.871975][ T6089] netlink: 44 bytes leftover after parsing attributes in process `syz.4.567'. [ 271.471383][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 272.184641][ T6123] netlink: 44 bytes leftover after parsing attributes in process `syz.3.580'. [ 272.476493][ T6127] comedi comedi1: Minor 2 could not be opened [ 275.628583][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.592'. [ 275.692408][ T6156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.593'. [ 276.342829][ T6170] comedi comedi1: Minor 2 could not be opened [ 279.539794][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'. [ 279.668871][ T6186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.605'. [ 280.561765][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.610'. [ 282.222248][ T6228] comedi comedi1: Minor 2 could not be opened [ 282.816121][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.618'. [ 285.480790][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.626'. [ 285.805736][ T6261] comedi comedi1: Minor 2 could not be opened [ 288.484539][ T6267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.630'. [ 290.485348][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.639'. [ 291.388215][ T6313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.647'. [ 291.785677][ T6325] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 292.027392][ T6328] comedi comedi1: Minor 2 could not be opened [ 292.056943][ T6329] bond1: (slave gretap1): making interface the new active one [ 293.691785][ T6329] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 293.948891][ T6325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.654'. [ 294.258389][ T6325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.017046][ T6341] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 295.025034][ T6341] netlink: 'syz.2.658': attribute type 2 has an invalid length. [ 296.387616][ T6361] netlink: 32 bytes leftover after parsing attributes in process `syz.1.663'. [ 296.812811][ T6375] Mass Storage Function, version: 2009/09/11 [ 296.820912][ T6375] LUN: removable file: (no medium) [ 296.848280][ T6375] LUN: removable file: (no medium) [ 297.597713][ T6381] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 297.695846][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'. [ 297.795006][ T6383] bond1: (slave gretap1): making interface the new active one [ 297.857704][ T6383] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 297.907095][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'. [ 298.021518][ T6381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.123201][ T6389] comedi comedi1: Minor 2 could not be opened [ 302.456087][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.685'. [ 303.545685][ T6442] comedi comedi1: Minor 2 could not be opened [ 305.125111][ T6443] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 305.487908][ T6456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.693'. [ 305.643545][ T6447] bond1: (slave gretap1): making interface the new active one [ 305.753255][ T6447] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 305.919781][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.689'. [ 306.031315][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.895307][ T6467] loop2: detected capacity change from 0 to 512 [ 308.132557][ T6467] EXT4-fs (loop2): 1 orphan inode deleted [ 308.138374][ T6467] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 308.150503][ T6467] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.166059][ T6467] EXT4-fs (loop2): shut down requested (2) [ 309.634394][ T6499] comedi comedi1: Minor 2 could not be opened [ 312.552800][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 314.258715][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.730'. [ 317.388031][ T6583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.741'. [ 318.963003][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.978189][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.531287][ T6624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.754'. [ 327.673203][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'. [ 332.550597][ T6705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 333.212244][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 339.604512][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 341.613550][ T6793] sctp: failed to load transform for md5: -2 [ 344.439133][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.811'. [ 347.771928][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.827'. [ 348.308265][ T6881] netlink: 56 bytes leftover after parsing attributes in process `syz.3.834'. [ 348.381321][ T6881] netlink: 288 bytes leftover after parsing attributes in process `syz.3.834'. [ 348.852122][ T6874] Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 349.674110][ T6905] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 351.221412][ T6915] ip_tables: iptables: counters copy to user failed while replacing table [ 351.362826][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'. [ 354.831321][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'. [ 355.289062][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.862'. [ 355.793974][ T6988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 357.227187][ T6992] sctp: failed to load transform for md5: -2 [ 357.803305][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.877'. [ 357.987971][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 360.213933][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 360.339623][ T7069] tipc: Started in network mode [ 360.372787][ T7069] tipc: Node identity 3239173f5eda, cluster identity 4711 [ 360.438088][ T7069] tipc: Enabled bearer , priority 0 [ 360.446211][ T7069] device syzkaller0 entered promiscuous mode [ 360.464631][ T7069] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 360.677230][ T7069] tipc: Resetting bearer [ 360.698469][ T7084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.892'. [ 360.853959][ T7068] tipc: Resetting bearer [ 361.187477][ T7068] tipc: Disabling bearer [ 363.769608][ T7124] loop2: detected capacity change from 0 to 512 [ 363.876267][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'. [ 364.153309][ T7124] EXT4-fs (loop2): 1 orphan inode deleted [ 364.159587][ T7124] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 364.172379][ T7124] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.265050][ T7124] EXT4-fs (loop2): shut down requested (2) [ 364.296646][ T4393] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 364.598297][ T4393] Quota error (device loop2): write_blk: dquota write failed [ 364.607993][ T4393] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 365.938115][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 366.915244][ T7158] device syzkaller0 entered promiscuous mode [ 366.979254][ T7161] tipc: Started in network mode [ 367.009244][ T7161] tipc: Node identity d617b3ff74a8, cluster identity 4711 [ 367.023402][ T7161] tipc: Enabled bearer , priority 0 [ 367.059747][ T7156] tipc: Resetting bearer [ 367.134418][ T7156] tipc: Disabling bearer [ 367.182513][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'. [ 371.428103][ T7214] tipc: Enabled bearer , priority 0 [ 371.465597][ T7214] device syzkaller0 entered promiscuous mode [ 371.489377][ T7216] device syzkaller0 entered promiscuous mode [ 371.495657][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 371.518234][ T7214] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 371.537013][ T7216] tipc: Started in network mode [ 371.542060][ T7216] tipc: Node identity f22723189a0c, cluster identity 4711 [ 371.575270][ T7216] tipc: Enabled bearer , priority 0 [ 371.617018][ T7214] tipc: Resetting bearer [ 371.650468][ T7213] tipc: Resetting bearer [ 371.846076][ T7213] tipc: Disabling bearer [ 371.870404][ T7216] tipc: Resetting bearer [ 371.984696][ T7216] tipc: Disabling bearer [ 374.224608][ T7252] device syzkaller0 entered promiscuous mode [ 374.313646][ T7254] loop2: detected capacity change from 0 to 512 [ 374.704545][ T7254] EXT4-fs (loop2): 1 orphan inode deleted [ 374.710724][ T7254] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 374.723354][ T7254] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.818917][ T7254] EXT4-fs (loop2): shut down requested (2) [ 374.847070][ T4344] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 375.117315][ T4344] Quota error (device loop2): write_blk: dquota write failed [ 375.151319][ T4344] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 375.431893][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.952'. [ 375.487169][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 377.984959][ T7308] device syzkaller0 entered promiscuous mode [ 378.031955][ T7308] tipc: Started in network mode [ 378.057804][ T7308] tipc: Node identity 2ef8bb22ea53, cluster identity 4711 [ 378.065356][ T7308] tipc: Enabled bearer , priority 0 [ 378.095776][ T7307] tipc: Resetting bearer [ 378.177216][ T7307] tipc: Disabling bearer [ 380.392735][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.399323][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.612015][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'. [ 381.829801][ T7376] tipc: Enabled bearer , priority 0 [ 381.887751][ T7380] device syzkaller0 entered promiscuous mode [ 381.943866][ T7376] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 382.031032][ T7372] tipc: Resetting bearer [ 382.160468][ T7372] tipc: Disabling bearer [ 386.866189][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.873640][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.274297][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.313955][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.836085][ T7426] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.845211][ T7426] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.854603][ T7426] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.865136][ T7426] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.046779][ T7436] tipc: Enabled bearer , priority 0 [ 389.076802][ T7439] bridge_slave_0: default FDB implementation only supports local addresses [ 389.109934][ T7436] tipc: Disabling bearer [ 390.247744][ T7473] loop3: detected capacity change from 0 to 512 [ 390.726041][ T7473] EXT4-fs (loop3): 1 orphan inode deleted [ 390.732236][ T7473] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 390.744784][ T7473] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.848811][ T7473] EXT4-fs (loop3): shut down requested (2) [ 390.874382][ T4335] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 391.035469][ T4335] Quota error (device loop3): write_blk: dquota write failed [ 391.106628][ T4335] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 391.263862][ T7482] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1021'. [ 393.122867][ T7497] tipc: Enabled bearer , priority 0 [ 393.158069][ T7497] device syzkaller0 entered promiscuous mode [ 393.218250][ T7504] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 393.273458][ T7494] tipc: Resetting bearer [ 393.361663][ T7494] tipc: Disabling bearer [ 394.422747][ T7516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1029'. [ 394.659295][ T7523] loop3: detected capacity change from 0 to 512 [ 395.099344][ T7523] EXT4-fs (loop3): 1 orphan inode deleted [ 395.105254][ T7523] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 395.117868][ T7523] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.211188][ T7523] EXT4-fs (loop3): shut down requested (2) [ 395.242689][ T4344] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 395.471579][ T4344] Quota error (device loop3): write_blk: dquota write failed [ 395.531924][ T4344] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 397.337767][ T7545] tipc: Enabled bearer , priority 0 [ 397.366140][ T7545] device syzkaller0 entered promiscuous mode [ 397.427228][ T7545] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 397.560453][ T7542] tipc: Resetting bearer [ 398.037363][ T7542] tipc: Disabling bearer [ 398.510817][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1044'. [ 398.557214][ T7566] loop3: detected capacity change from 0 to 512 [ 398.609862][ T7566] EXT4-fs (loop3): 1 orphan inode deleted [ 398.615858][ T7566] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 398.629598][ T7566] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.655850][ T7566] EXT4-fs (loop3): shut down requested (2) [ 399.963176][ T7594] tipc: Enabled bearer , priority 0 [ 400.999292][ T7602] device syzkaller0 entered promiscuous mode [ 401.066417][ T6444] tipc: Node number set to 1826821951 [ 401.085391][ T7594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 401.248624][ T7593] tipc: Resetting bearer [ 402.173574][ T7593] tipc: Disabling bearer [ 403.218912][ T7624] comedi comedi1: Minor 2 could not be opened [ 404.326954][ T7634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1062'. [ 405.575933][ T7655] tipc: Enabled bearer , priority 0 [ 405.796490][ T7658] netlink: 'syz.2.1074': attribute type 1 has an invalid length. [ 406.143967][ T7665] device syzkaller0 entered promiscuous mode [ 406.162242][ T7655] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 406.342545][ T7675] comedi comedi1: Minor 2 could not be opened [ 406.359909][ T7666] bond2: (slave veth3): Enslaving as an active interface with a down link [ 406.402029][ T7670] bond2: (slave veth5): Enslaving as an active interface with a down link [ 406.422583][ T7654] tipc: Resetting bearer [ 406.449065][ T7654] tipc: Disabling bearer [ 406.471670][ T7681] netlink: 'syz.3.1079': attribute type 2 has an invalid length. [ 406.887511][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 407.962667][ T7717] tipc: Enabled bearer , priority 0 [ 408.014717][ T7720] device syzkaller0 entered promiscuous mode [ 408.092115][ T7717] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 408.136161][ T7716] tipc: Resetting bearer [ 408.148307][ T7723] comedi comedi1: Minor 2 could not be opened [ 408.198651][ T7716] tipc: Disabling bearer [ 408.740536][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1101'. [ 410.119879][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 410.149688][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 410.208729][ T7765] tipc: Enabled bearer , priority 0 [ 410.225319][ T7765] device syzkaller0 entered promiscuous mode [ 410.245519][ T7765] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 410.298439][ T7764] tipc: Resetting bearer [ 410.361524][ T7764] tipc: Disabling bearer [ 410.396785][ T7774] comedi comedi1: Minor 2 could not be opened [ 410.677658][ T7784] loop3: detected capacity change from 0 to 512 [ 411.189924][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 411.419407][ T7784] EXT4-fs (loop3): 1 orphan inode deleted [ 411.425512][ T7784] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 411.438399][ T7784] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.519606][ T7784] EXT4-fs (loop3): shut down requested (2) [ 411.531730][ T3038] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 411.724051][ T3038] Quota error (device loop3): write_blk: dquota write failed [ 411.787032][ T3038] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 412.636974][ T7813] tipc: Enabled bearer , priority 0 [ 412.674031][ T7817] device syzkaller0 entered promiscuous mode [ 412.732767][ T7813] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 412.752526][ T7816] comedi comedi1: Minor 2 could not be opened [ 412.844304][ T7812] tipc: Resetting bearer [ 412.936039][ T7812] tipc: Disabling bearer [ 413.807395][ T7826] netlink: 'syz.2.1127': attribute type 2 has an invalid length. [ 414.902236][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1130'. [ 415.132784][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 415.157103][ T7841] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1133'. [ 417.112564][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1145'. [ 417.317898][ T7880] tipc: Enabling of bearer rejected, failed to enable media [ 417.865136][ T7895] netlink: 'syz.2.1146': attribute type 2 has an invalid length. [ 418.300171][ T7905] sock: sock_timestamping_bind_phc: sock not bind to device [ 418.931694][ T7918] device syzkaller0 entered promiscuous mode [ 422.037099][ T7928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 422.224604][ T7935] tipc: Started in network mode [ 422.271608][ T7935] tipc: Node identity 46ebf0c349f, cluster identity 4711 [ 422.333993][ T7935] tipc: Enabled bearer , priority 0 [ 422.860441][ T7936] device syzkaller0 entered promiscuous mode [ 422.930486][ T7938] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 423.071713][ T7938] tipc: Resetting bearer [ 423.128545][ T7938] tipc: Disabling bearer [ 423.279156][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 423.307134][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 423.433443][ T7962] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 425.398803][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'. [ 425.545779][ T7967] device hsr_slave_1 left promiscuous mode [ 425.769845][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1171'. [ 427.243341][ T7999] tipc: Enabled bearer , priority 0 [ 427.262404][ T7999] device syzkaller0 entered promiscuous mode [ 427.294525][ T7999] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 427.589007][ T8006] tipc: Resetting bearer [ 427.624997][ T7998] tipc: Resetting bearer [ 428.384609][ T7998] tipc: Disabling bearer [ 429.577269][ T5743] tipc: Node number set to 3299588898 [ 429.880902][ T8020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1185'. [ 430.260372][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 432.144162][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 432.194674][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 432.233208][ T8052] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 433.487642][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 434.564688][ T8052] device hsr_slave_1 left promiscuous mode [ 434.946827][ T8061] tipc: Enabled bearer , priority 0 [ 435.007379][ T8062] device syzkaller0 entered promiscuous mode [ 435.372674][ T8061] tipc: Resetting bearer [ 435.462829][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'. [ 435.497807][ T8060] tipc: Resetting bearer [ 435.697167][ T8060] tipc: Disabling bearer [ 435.828451][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1202'. [ 436.579783][ T8093] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1206'. [ 439.430922][ T2857] Bluetooth: hci4: command 0x0405 tx timeout [ 440.659724][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1215'. [ 441.431683][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'. [ 441.541128][ T8129] xt_hashlimit: size too large, truncated to 1048576 [ 442.809126][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.817058][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.931968][ T8151] loop3: detected capacity change from 0 to 512 [ 444.335221][ T8151] EXT4-fs (loop3): 1 orphan inode deleted [ 444.382382][ T8151] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 444.466564][ T8151] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.724519][ T8151] EXT4-fs (loop3): shut down requested (2) [ 445.303332][ T8160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1230'. [ 445.461874][ T4344] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 445.564423][ T4344] Quota error (device loop3): write_blk: dquota write failed [ 445.646403][ T4344] Quota error (device loop3): remove_free_dqentry: Can't write block (8) with free entries [ 445.878724][ T4344] EXT4-fs (loop3): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 445.947624][ T4344] Quota error (device loop3): write_blk: dquota write failed [ 445.955240][ T4344] Quota error (device loop3): free_dqentry: Can't move quota data block (8) to free list [ 445.965579][ T4344] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 445.975994][ T4344] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 446.049940][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1233'. [ 448.517635][ T8196] netlink: 'syz.3.1240': attribute type 4 has an invalid length. [ 449.246404][ T8210] device syzkaller0 entered promiscuous mode [ 449.788083][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1245'. [ 450.264633][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1247'. [ 451.190645][ T8241] device syzkaller0 entered promiscuous mode [ 451.218296][ T8242] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1257'. [ 451.231114][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'. [ 453.373032][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'. [ 453.384125][ T8277] xt_hashlimit: size too large, truncated to 1048576 [ 454.668669][ T8292] device syzkaller0 entered promiscuous mode [ 457.255271][ T8315] netlink: 564 bytes leftover after parsing attributes in process `syz.2.1279'. [ 458.844483][ T8324] device lo entered promiscuous mode [ 458.967246][ T8324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.065688][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1282'. [ 460.288794][ T8340] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1287'. [ 460.388358][ T8345] device syzkaller0 entered promiscuous mode [ 462.014079][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 464.152578][ T8367] device lo entered promiscuous mode [ 464.194914][ T8367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.376719][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1298'. [ 467.805323][ T8382] device syzkaller0 entered promiscuous mode [ 468.760173][ T8388] device syzkaller0 entered promiscuous mode [ 470.464591][ T8402] chnl_net:caif_netlink_parms(): no params data found [ 470.542471][ T8415] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 471.125898][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.205540][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.285694][ T8402] device bridge_slave_0 entered promiscuous mode [ 471.334456][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.406555][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.436937][ T8402] device bridge_slave_1 entered promiscuous mode [ 471.651086][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.667751][ T5743] Bluetooth: hci5: command 0x0409 tx timeout [ 471.732505][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.901503][ T8402] team0: Port device team_slave_0 added [ 471.952762][ T8402] team0: Port device team_slave_1 added [ 472.109723][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.202375][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.367278][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.441106][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.465800][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.689088][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.325457][ T8402] device hsr_slave_0 entered promiscuous mode [ 473.467576][ T8402] device hsr_slave_1 entered promiscuous mode [ 473.533426][ T8402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.567249][ T8402] Cannot create hsr debugfs directory [ 473.746583][ T5743] Bluetooth: hci5: command 0x041b tx timeout [ 475.826427][ T5743] Bluetooth: hci5: command 0x040f tx timeout [ 475.950713][ T8438] device syzkaller0 entered promiscuous mode [ 476.454382][ T8443] device lo entered promiscuous mode [ 476.537430][ T8443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.870197][ T8402] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 477.048996][ T8454] comedi comedi1: Minor 2 could not be opened [ 477.797700][ T8402] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 477.906424][ T5743] Bluetooth: hci5: command 0x0419 tx timeout [ 477.992549][ T8402] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 480.060104][ T8402] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 481.636604][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.748523][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.827616][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.835512][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.908097][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 481.977499][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.036699][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.043939][ T8455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.076803][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.157266][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.222095][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.229427][ T8455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.296920][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.338325][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.380050][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.478718][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.519709][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.599842][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.623514][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.644435][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.750644][ T8402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.822435][ T8402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.872575][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.914213][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.977852][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.997003][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.085896][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.163832][ T8483] device syzkaller0 entered promiscuous mode [ 483.766048][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.932908][ T8500] comedi comedi1: Minor 2 could not be opened [ 486.129081][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.146910][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.518826][ T1273] tipc: Left network mode [ 486.577644][ T8510] tipc: Enabled bearer , priority 0 [ 486.619348][ T8510] device syzkaller0 entered promiscuous mode [ 486.771639][ T8519] tipc: Resetting bearer [ 486.964476][ T8509] tipc: Resetting bearer [ 487.057100][ T8509] tipc: Disabling bearer [ 487.327605][ T8532] comedi comedi1: Minor 2 could not be opened [ 488.493519][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.528303][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.604068][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.630091][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.735880][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 488.847811][ T8402] device veth0_vlan entered promiscuous mode [ 488.877022][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.890143][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.903950][ T2857] Bluetooth: hci0: command 0x0409 tx timeout [ 489.862176][ T8402] device veth1_vlan entered promiscuous mode [ 490.034064][ T8565] device syzkaller0 entered promiscuous mode [ 490.082470][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.158113][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.307264][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.350588][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.578568][ T8513] device bridge_slave_0 entered promiscuous mode [ 490.908382][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.936472][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.947089][ T5276] Bluetooth: hci0: command 0x041b tx timeout [ 490.977452][ T8513] device bridge_slave_1 entered promiscuous mode [ 491.173362][ T8402] device veth0_macvtap entered promiscuous mode [ 491.191759][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 491.238933][ T8402] device veth1_macvtap entered promiscuous mode [ 491.395804][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.481190][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.495208][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.508603][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.533650][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.557622][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.576113][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.589270][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.618862][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.643646][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.654678][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.670934][ T8603] loop2: detected capacity change from 0 to 512 [ 491.678802][ T8599] device syzkaller0 entered promiscuous mode [ 491.700023][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.714025][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.730315][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.755443][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.784559][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.796201][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.807483][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.818587][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.828756][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.831560][ T8603] EXT4-fs (loop2): 1 orphan inode deleted [ 491.839994][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.855613][ T8603] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 491.868829][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.881065][ T8603] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.956992][ T8603] EXT4-fs (loop2): shut down requested (2) [ 492.065063][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.098907][ T3038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.182863][ T8513] team0: Port device team_slave_0 added [ 492.206112][ T1273] device hsr_slave_0 left promiscuous mode [ 492.213336][ T1273] device hsr_slave_1 left promiscuous mode [ 492.220379][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.231752][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.239833][ T1273] device bridge_slave_1 left promiscuous mode [ 492.248243][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.260777][ T1273] device bridge_slave_0 left promiscuous mode [ 492.269855][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.403756][ T1273] team0 (unregistering): Port device team_slave_1 removed [ 492.453299][ T1273] team0 (unregistering): Port device team_slave_0 removed [ 492.497123][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.664541][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.762137][ T1273] bond0 (unregistering): Released all slaves [ 492.899157][ T8402] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.909452][ T8402] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.918387][ T8402] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.927270][ T8402] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.944761][ T8513] team0: Port device team_slave_1 added [ 493.195137][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 493.238821][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.986711][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.025005][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.086502][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.176312][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.237217][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.373409][ T8513] device hsr_slave_0 entered promiscuous mode [ 494.429320][ T8513] device hsr_slave_1 entered promiscuous mode [ 494.439695][ T8513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.457905][ T8513] Cannot create hsr debugfs directory [ 494.532699][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.571631][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.619644][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 494.701399][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.733119][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.780554][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 495.064247][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 495.277511][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 495.926534][ T8513] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 496.002753][ T8513] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 496.037159][ T8513] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 496.107557][ T8513] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 496.352790][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.437465][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.445685][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.498433][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.594775][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.624144][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.654307][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.661564][ T8455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.677140][ T8685] netlink: 768 bytes leftover after parsing attributes in process `syz.2.1361'. [ 496.716394][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 496.759661][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 496.780147][ T8687] loop3: detected capacity change from 0 to 512 [ 496.786161][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.794061][ T8455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.823386][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 496.881413][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.925981][ T8687] EXT4-fs (loop3): 1 orphan inode deleted [ 496.933018][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 496.943033][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 496.955060][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 496.967639][ T8687] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 496.979905][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 496.989352][ T8687] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.099794][ T8687] EXT4-fs (loop3): shut down requested (2) [ 497.148009][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.173497][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.257551][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.267535][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.292827][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.313028][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.962870][ T8513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 498.463698][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 498.813264][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.836724][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.944893][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.856605][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 499.912397][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 500.024480][ T8746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.116516][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 501.321209][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.355397][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.465258][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.482577][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.528092][ T8513] device veth0_vlan entered promiscuous mode [ 501.540174][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.571723][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.617889][ T8513] device veth1_vlan entered promiscuous mode [ 501.780921][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.093427][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.334939][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.388554][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.499341][ T8513] device veth0_macvtap entered promiscuous mode [ 502.551298][ T5276] Bluetooth: hci2: command 0x0401 tx timeout [ 502.583583][ T8513] device veth1_macvtap entered promiscuous mode [ 502.727507][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.763330][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 502.785390][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.836234][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.877538][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.906465][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.960050][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.990491][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.031749][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.077101][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.112867][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.213139][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.265156][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.293576][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.300217][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.868989][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.119785][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.167645][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.214677][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.248781][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.280777][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.321660][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.337907][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.350878][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.375710][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.402641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 504.421317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 504.442446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.463699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 504.571020][ T8819] netlink: 'syz.5.1392': attribute type 142 has an invalid length. [ 504.604453][ T8513] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.627952][ T8513] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.650166][ T8513] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.659728][ T8513] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.219413][ T8455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.262448][ T8830] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 505.293723][ T8455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.312993][ T8832] loop5: detected capacity change from 0 to 512 [ 505.602429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 505.692358][ T8832] EXT4-fs (loop5): 1 orphan inode deleted [ 505.771808][ T8832] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 505.788168][ T8455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.816323][ T8455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.827756][ T8832] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.872101][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.985688][ T8832] EXT4-fs (loop5): shut down requested (2) [ 506.057021][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1401'. [ 507.373314][ T8867] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1404'. [ 509.075084][ T6] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.436917][ T6] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.523146][ T6] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.607229][ T6] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.747401][ T6] tipc: Left network mode [ 510.363072][ T8956] loop2: detected capacity change from 0 to 512 [ 510.479368][ T6] bond1: (slave gretap1): Releasing active interface [ 510.819339][ T8956] EXT4-fs (loop2): 1 orphan inode deleted [ 510.825117][ T8956] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 510.897819][ T8956] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.010013][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.043641][ T8953] EXT4-fs (loop2): shut down requested (2) [ 511.102218][ T8956] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #12: block 13: comm syz.2.1412: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 511.275768][ T8967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.176971][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1414'. [ 513.189413][ T4342] EXT4-fs (loop2): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 513.208187][ T4342] Quota error (device loop2): write_blk: dquota write failed [ 513.221787][ T4342] Quota error (device loop2): remove_free_dqentry: Can't write block (8) with free entries [ 513.238422][ T4342] EXT4-fs (loop2): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 513.279661][ T4342] Quota error (device loop2): write_blk: dquota write failed [ 513.445200][ T4342] Quota error (device loop2): free_dqentry: Can't move quota data block (8) to free list [ 513.583881][ T4342] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 513.594690][ T4342] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 514.446627][ T6] device hsr_slave_0 left promiscuous mode [ 514.453247][ T6] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.462662][ T6] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.473033][ T6] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.481143][ T6] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.489266][ T6] device bridge_slave_1 left promiscuous mode [ 514.495527][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.506204][ T6] device bridge_slave_0 left promiscuous mode [ 514.513114][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.531067][ T6] device veth1_macvtap left promiscuous mode [ 514.537766][ T6] device veth0_macvtap left promiscuous mode [ 514.543858][ T6] device veth1_vlan left promiscuous mode [ 514.551855][ T6] device veth0_vlan left promiscuous mode [ 514.858279][ T6] bond1 (unregistering): Released all slaves [ 515.005895][ T6] team0 (unregistering): Port device team_slave_1 removed [ 515.895088][ T6] team0 (unregistering): Port device team_slave_0 removed [ 515.988537][ T6] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.082485][ T6] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.161412][ T6] bond0 (unregistering): Released all slaves [ 519.372276][ T9040] device syzkaller0 entered promiscuous mode [ 519.426096][ T9042] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 519.662300][ T9045] device syzkaller0 entered promiscuous mode [ 523.132709][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1438'. [ 523.297865][ T9074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1437'. [ 523.410532][ T9080] loop5: detected capacity change from 0 to 512 [ 524.521805][ T9080] EXT4-fs (loop5): 1 orphan inode deleted [ 524.527737][ T9080] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 524.540300][ T9080] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.563910][ T9080] EXT4-fs (loop5): shut down requested (2) [ 528.917355][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'. [ 531.737373][ T9150] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1454'. [ 532.102988][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1459'. [ 532.556436][ T9161] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 534.721858][ T9161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.931055][ T9164] bond3: (slave veth0_to_bond): making interface the new active one [ 535.012253][ T9164] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 535.066867][ T9178] device macvlan2 entered promiscuous mode [ 535.118736][ T9178] device bond3 entered promiscuous mode [ 535.141838][ T9178] device veth0_to_bond entered promiscuous mode [ 535.172357][ T9178] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 535.221168][ T9178] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 535.297081][ T9178] device bond3 left promiscuous mode [ 535.318708][ T9178] device veth0_to_bond left promiscuous mode [ 535.475002][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1467'. [ 535.524596][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 537.696532][ T9208] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1473'. [ 537.854347][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 538.043306][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1472'. [ 540.083726][ T9251] device syzkaller0 entered promiscuous mode [ 540.137703][ T9248] loop6: detected capacity change from 0 to 512 [ 540.801658][ T9248] EXT4-fs (loop6): 1 orphan inode deleted [ 540.807898][ T9248] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 540.820412][ T9248] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.846647][ T9248] EXT4-fs (loop6): shut down requested (2) [ 540.905091][ T1273] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 541.005501][ T1273] Quota error (device loop6): write_blk: dquota write failed [ 541.028308][ T1273] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 541.037343][ T9266] netlink: 'syz.5.1485': attribute type 1 has an invalid length. [ 541.300284][ T9266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.115740][ T9267] bond1: (slave veth0_to_bond): making interface the new active one [ 542.135305][ T9267] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 542.160180][ T9264] device macvlan2 entered promiscuous mode [ 542.177995][ T9264] device bond1 entered promiscuous mode [ 542.201188][ T9264] device veth0_to_bond entered promiscuous mode [ 542.243333][ T9264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 542.267833][ T9264] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 542.326896][ T9264] device bond1 left promiscuous mode [ 542.345558][ T9264] device veth0_to_bond left promiscuous mode [ 542.389750][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 542.445969][ T9282] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1489'. [ 542.481202][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 543.501077][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1494'. [ 543.826589][ T9316] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1498'. [ 544.182629][ T9339] netlink: 'syz.4.1504': attribute type 1 has an invalid length. [ 544.332952][ T9339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.748584][ T9336] tipc: Started in network mode [ 544.754721][ T9336] tipc: Node identity a6c38caf2714, cluster identity 4711 [ 544.791676][ T9336] tipc: Enabled bearer , priority 0 [ 545.049050][ T9342] bond2: (slave veth0_to_bond): making interface the new active one [ 545.070593][ T9342] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 545.115091][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 545.135127][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'. [ 545.175415][ T9351] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 545.240489][ T9339] device macvlan2 entered promiscuous mode [ 545.265811][ T9339] device bond2 entered promiscuous mode [ 545.312656][ T9339] device veth0_to_bond entered promiscuous mode [ 545.343483][ T9339] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 545.353707][ T9339] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 545.387017][ T9339] device bond2 left promiscuous mode [ 545.392553][ T9339] device veth0_to_bond left promiscuous mode [ 545.474285][ T9365] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 545.537530][ T9359] tipc: Disabling bearer [ 545.584665][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1515'. [ 545.598952][ T9371] unsupported nla_type 35 [ 545.604862][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1515'. [ 545.786074][ T9379] netlink: 'syz.4.1517': attribute type 12 has an invalid length. [ 546.525322][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 547.750235][ T9410] loop2: detected capacity change from 0 to 512 [ 547.910900][ T9410] EXT4-fs (loop2): 1 orphan inode deleted [ 547.917087][ T9410] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 547.929774][ T9410] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.973529][ T9410] EXT4-fs (loop2): shut down requested (2) [ 548.130281][ T9422] tipc: Started in network mode [ 548.163451][ T9422] tipc: Node identity 5a5bd90ccc57, cluster identity 4711 [ 548.217375][ T9422] tipc: Enabled bearer , priority 0 [ 548.255865][ T9432] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 548.317503][ T9422] tipc: Resetting bearer [ 548.382979][ T9421] tipc: Disabling bearer [ 548.467842][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 548.676081][ T9444] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1532'. [ 549.376522][ T9444] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1532'. [ 550.594529][ T9464] netlink: 'syz.5.1538': attribute type 39 has an invalid length. [ 550.994955][ T9478] device syzkaller0 entered promiscuous mode [ 551.011148][ T9482] loop3: detected capacity change from 0 to 512 [ 551.160703][ T9482] EXT4-fs (loop3): 1 orphan inode deleted [ 551.167282][ T9482] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 551.179440][ T9482] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.203439][ T9482] EXT4-fs (loop3): shut down requested (2) [ 552.060668][ T9496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1544'. [ 554.630620][ T9530] loop3: detected capacity change from 0 to 512 [ 554.718123][ T4410] wlan0: Trigger new scan to find an IBSS to join [ 554.788695][ T9530] EXT4-fs (loop3): 1 orphan inode deleted [ 554.794559][ T9530] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 554.807127][ T9530] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.834339][ T9530] EXT4-fs (loop3): shut down requested (2) [ 554.939911][ T1273] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 554.978898][ T1273] Quota error (device loop3): write_blk: dquota write failed [ 555.679095][ T1273] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 555.949943][ T9545] netlink: 'syz.5.1545': attribute type 1 has an invalid length. [ 556.033132][ T9545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.324264][ T9551] bond2: (slave geneve2): making interface the new active one [ 556.335925][ T9551] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 556.818846][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 557.060141][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 558.397722][ T9581] loop3: detected capacity change from 0 to 512 [ 558.624743][ T9586] tipc: Enabled bearer , priority 0 [ 558.667558][ T9586] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 558.686842][ T9581] EXT4-fs (loop3): 1 orphan inode deleted [ 558.692667][ T9581] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 558.704911][ T9581] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.729077][ T9581] EXT4-fs (loop3): shut down requested (2) [ 558.755091][ T9586] tipc: Resetting bearer [ 559.477319][ T9583] tipc: Disabling bearer [ 559.668399][ T4342] wlan0: Trigger new scan to find an IBSS to join [ 560.305613][ T9601] device syzkaller0 entered promiscuous mode [ 560.324103][ T13] tipc: Node number set to 2730472447 [ 560.551497][ T9626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1575'. [ 560.602244][ T8923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.637522][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 562.988534][ T9667] tipc: Enabling of bearer rejected, failed to enable media [ 564.448162][ T9718] netlink: 826 bytes leftover after parsing attributes in process `syz.3.1598'. [ 564.728729][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.736204][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.161299][ T9728] tipc: Enabled bearer , priority 0 [ 565.187298][ T6444] Bluetooth: hci0: command 0x0405 tx timeout [ 565.321448][ T9728] device syzkaller0 entered promiscuous mode [ 565.413628][ T9730] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 566.241809][ T9730] tipc: Resetting bearer [ 566.358235][ T9730] tipc: Disabling bearer [ 566.385450][ T4236] tipc: Node number set to 253489347 [ 566.397980][ T9749] tipc: Enabling of bearer rejected, failed to enable media [ 566.588087][ T9757] MPTCP: kernel_bind error, err=-99 [ 570.009903][ T9813] tipc: Enabling of bearer rejected, failed to enable media [ 570.141645][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1622'. [ 570.305270][ T9824] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.619543][ T9824] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.528747][ T9824] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.588676][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'. [ 571.829924][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'. [ 572.322714][ T9824] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.570518][ T9824] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.627406][ T9824] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.693367][ T9824] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.753187][ T9824] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.965301][ T9882] loop5: detected capacity change from 0 to 512 [ 572.995695][ T9888] Cannot find add_set index 0 as target [ 573.121000][ T9882] EXT4-fs (loop5): 1 orphan inode deleted [ 573.126981][ T9882] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 573.139408][ T9882] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.163619][ T9882] EXT4-fs (loop5): shut down requested (2) [ 573.258080][ T9899] device lo left promiscuous mode [ 575.105409][ T9899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.146970][ T9899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.355239][ T9899] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.364207][ T9899] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.379580][ T9899] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.391159][ T9899] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.443303][ T9899] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.452148][ T9899] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.460762][ T9899] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.469289][ T9899] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.481707][ T9899] device vxlan0 left promiscuous mode [ 575.586516][ T9902] tipc: Enabling of bearer rejected, failed to enable media [ 575.918726][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1647'. [ 576.092904][ T9944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.326143][ T9944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.452990][ T9944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.575543][ T9944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.673300][ T9944] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.720594][ T9944] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.743059][ T9944] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.788948][ T9944] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.945028][ T9984] tipc: Enabling of bearer rejected, failed to enable media [ 578.113750][T10006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 578.163211][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1659'. [ 578.187746][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1659'. [ 578.228989][T10013] loop2: detected capacity change from 0 to 512 [ 578.284911][T10008] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 578.381275][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1659'. [ 578.434026][T10011] comedi comedi1: Minor 2 could not be opened [ 578.502432][T10013] EXT4-fs (loop2): 1 orphan inode deleted [ 578.508277][T10013] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 578.520520][T10013] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.559968][T10013] EXT4-fs (loop2): shut down requested (2) [ 578.605470][ T8917] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 578.824158][ T8917] Quota error (device loop2): write_blk: dquota write failed [ 579.017623][ T8917] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 581.020758][T10016] device hsr_slave_1 left promiscuous mode [ 581.393599][T10048] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1669'. [ 581.506165][T10055] tipc: Enabling of bearer rejected, failed to enable media [ 582.463446][T10112] comedi comedi1: Minor 2 could not be opened [ 582.865021][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 583.326432][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 583.592940][T10128] tipc: Enabling of bearer rejected, failed to enable media [ 583.621553][T10129] syz.4.1686 (10129) used obsolete PPPIOCDETACH ioctl [ 584.109975][T10162] RDS: rds_bind could not find a transport for ::a:2800:0, load rds_tcp or rds_rdma? [ 584.258716][T10167] comedi comedi1: Minor 2 could not be opened [ 585.246709][T10171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1696'. [ 585.708135][T10195] tipc: Enabling of bearer rejected, failed to enable media [ 586.064324][T10217] comedi comedi1: Minor 2 could not be opened [ 588.544822][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1715'. [ 588.606521][T10245] netlink: 'syz.5.1715': attribute type 7 has an invalid length. [ 588.623564][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1715'. [ 588.671019][T10250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1717'. [ 589.094192][T10263] tipc: Enabling of bearer rejected, failed to enable media [ 589.303233][T10276] comedi comedi1: Minor 2 could not be opened [ 590.415477][T10290] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1725'. [ 590.935882][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1743'. [ 592.244971][T10330] comedi comedi1: Minor 2 could not be opened [ 592.504410][T10339] tipc: Enabling of bearer rejected, failed to enable media [ 592.841779][T10361] sctp: [Deprecated]: syz.5.1742 (pid 10361) Use of int in maxseg socket option. [ 592.841779][T10361] Use struct sctp_assoc_value instead [ 592.865531][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 593.220425][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1749'. [ 594.441894][T10397] comedi comedi1: Minor 2 could not be opened [ 594.547000][ T4236] Bluetooth: hci0: command 0x0405 tx timeout [ 594.672924][T10408] tipc: Enabling of bearer rejected, failed to enable media [ 595.188427][T10441] sctp: [Deprecated]: syz.6.1760 (pid 10441) Use of int in maxseg socket option. [ 595.188427][T10441] Use struct sctp_assoc_value instead [ 595.490802][T10453] loop6: detected capacity change from 0 to 512 [ 596.001390][T10453] EXT4-fs (loop6): 1 orphan inode deleted [ 596.007675][T10453] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 596.020933][T10453] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.272767][T10453] EXT4-fs (loop6): shut down requested (2) [ 596.285575][ T8917] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 596.349592][ T8917] Quota error (device loop6): write_blk: dquota write failed [ 596.418866][ T8917] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 596.508526][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1768'. [ 596.631611][T10468] comedi comedi1: Minor 2 could not be opened [ 596.641149][T10472] device bond3 entered promiscuous mode [ 596.790694][T10481] tipc: Enabling of bearer rejected, failed to enable media [ 596.818566][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1775'. [ 596.971418][ T4205] Bluetooth: hci0: link tx timeout [ 596.977619][ T4205] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 597.198736][T10508] loop5: detected capacity change from 0 to 512 [ 598.069922][ T4957] Bluetooth: hci5: command 0x0406 tx timeout [ 598.134690][T10508] EXT4-fs (loop5): 1 orphan inode deleted [ 598.140622][T10508] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 598.152686][T10508] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.177046][T10508] EXT4-fs (loop5): shut down requested (2) [ 598.463201][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 598.646910][T10540] device bond3 entered promiscuous mode [ 598.665024][T10545] comedi comedi1: Minor 2 could not be opened [ 598.941033][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1789'. [ 599.241926][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 600.073634][T10566] tipc: Enabled bearer , priority 0 [ 600.160435][T10566] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 600.172869][T10566] tipc: Resetting bearer [ 600.197689][T10563] tipc: Disabling bearer [ 600.264395][T10576] loop3: detected capacity change from 0 to 512 [ 600.362900][T10578] tipc: Enabled bearer , priority 10 [ 600.374637][T10576] EXT4-fs (loop3): 1 orphan inode deleted [ 600.381422][T10576] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 600.393495][T10576] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.417767][T10576] EXT4-fs (loop3): shut down requested (2) [ 600.427040][ T1273] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 600.438597][ T1273] Quota error (device loop3): write_blk: dquota write failed [ 600.452399][ T1273] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 600.698980][T10595] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1805'. [ 600.914076][T10597] comedi comedi1: Minor 2 could not be opened [ 601.833102][ T4957] tipc: Node number set to 2178387119 [ 602.080537][T10620] tipc: Enabled bearer , priority 0 [ 602.820822][T10620] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 602.864584][T10620] tipc: Resetting bearer [ 602.892513][T10617] tipc: Disabling bearer [ 603.100147][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 603.268045][T10650] loop5: detected capacity change from 0 to 512 [ 603.710108][T10650] EXT4-fs (loop5): 1 orphan inode deleted [ 603.716001][T10650] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 603.730359][T10650] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.755156][T10650] EXT4-fs (loop5): shut down requested (2) [ 604.304273][T10665] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1830'. [ 604.473187][ T4342] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 604.485157][ T4342] Quota error (device loop5): write_blk: dquota write failed [ 604.493250][ T4342] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 605.663128][T10689] tipc: Enabled bearer , priority 0 [ 605.713947][T10692] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 605.766930][T10689] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 605.799702][T10692] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1813'. [ 605.835137][T10689] tipc: Resetting bearer [ 605.853385][T10692] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 605.874883][T10688] tipc: Disabling bearer [ 606.340767][T10719] device vlan3 entered promiscuous mode [ 606.346854][T10719] device batadv0 entered promiscuous mode [ 606.505371][T10721] IPv4: Oversized IP packet from 127.202.26.0 [ 608.649650][T10734] device syzkaller1 entered promiscuous mode [ 608.707593][T10740] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 610.999318][T10784] comedi comedi1: Minor 2 could not be opened [ 611.815973][T10789] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1838'. [ 614.091348][T10834] comedi comedi1: Minor 2 could not be opened [ 614.987363][T10845] C: renamed from team_slave_0 [ 615.032847][T10845] netlink: 'syz.4.1869': attribute type 4 has an invalid length. [ 615.065162][T10845] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1869'. [ 615.075805][T10845] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 615.101749][T10847] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1868'. [ 617.023578][T10878] loop5: detected capacity change from 0 to 512 [ 617.143486][T10878] EXT4-fs (loop5): 1 orphan inode deleted [ 617.149424][T10878] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 617.161574][T10878] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.187279][T10878] EXT4-fs (loop5): shut down requested (2) [ 617.612447][T10904] comedi comedi1: Minor 2 could not be opened [ 619.971700][T10942] netlink: 'syz.6.1889': attribute type 1 has an invalid length. [ 620.000196][T10942] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1889'. [ 620.145771][T10949] loop5: detected capacity change from 0 to 512 [ 620.407687][T10944] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 620.528791][T10949] EXT4-fs (loop5): 1 orphan inode deleted [ 620.534691][T10949] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 620.547850][T10949] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.570974][T10949] EXT4-fs (loop5): shut down requested (2) [ 620.832979][T10971] comedi comedi1: Minor 2 could not be opened [ 622.744417][T10977] device vlan2 entered promiscuous mode [ 622.958716][T10977] device batadv0 entered promiscuous mode [ 624.134770][T11007] netlink: 'syz.4.1905': attribute type 1 has an invalid length. [ 624.353463][T11007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.494766][T11026] comedi comedi1: Minor 2 could not be opened [ 626.423706][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.439605][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.689439][T11038] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 626.735177][T11038] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 627.026078][T11045] IPVS: Error connecting to the multicast addr [ 628.204230][T11061] device syzkaller0 entered promiscuous mode [ 628.499633][T11059] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 628.939874][T11078] loop5: detected capacity change from 0 to 512 [ 630.405983][T11078] EXT4-fs (loop5): 1 orphan inode deleted [ 630.412246][T11078] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 630.424566][T11078] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.449064][T11078] EXT4-fs (loop5): shut down requested (2) [ 630.458320][ T8920] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 630.566389][ T8920] Quota error (device loop5): write_blk: dquota write failed [ 630.636452][ T8920] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 631.025218][T11118] netlink: 'syz.5.1928': attribute type 1 has an invalid length. [ 633.784814][T11143] netlink: 774 bytes leftover after parsing attributes in process `syz.5.1941'. [ 633.820319][T11143] netlink: 'syz.5.1941': attribute type 1 has an invalid length. [ 633.849578][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.886274][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.946330][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.987281][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.006342][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.026321][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.049973][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.091782][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.130704][T11144] device batadv_slave_1 entered promiscuous mode [ 635.042524][T11147] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 635.400096][T11164] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 635.464728][T11170] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 638.118660][T11201] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 638.190504][T11201] netlink: 'syz.3.1959': attribute type 1 has an invalid length. [ 638.245496][T11207] loop6: detected capacity change from 0 to 512 [ 639.059908][T11207] EXT4-fs (loop6): 1 orphan inode deleted [ 639.065708][T11207] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 639.078246][T11207] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.099494][T11207] EXT4-fs (loop6): shut down requested (2) [ 639.194561][ T4410] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 639.205415][ T4410] Quota error (device loop6): write_blk: dquota write failed [ 639.229614][ T4410] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 639.872251][T11230] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1970'. [ 640.167500][T11230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.209227][T11230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.308705][T11230] bond0 (unregistering): Released all slaves [ 642.375173][T11253] netlink: 'syz.6.1975': attribute type 1 has an invalid length. [ 642.384714][T11253] netlink: 'syz.6.1975': attribute type 1 has an invalid length. [ 642.408329][T11256] loop3: detected capacity change from 0 to 512 [ 642.619859][T11256] EXT4-fs (loop3): 1 orphan inode deleted [ 642.625711][T11256] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 642.638935][T11256] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.660481][T11256] EXT4-fs (loop3): shut down requested (2) [ 642.952275][T11279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1984'. [ 643.072991][T11278] comedi comedi1: Minor 2 could not be opened [ 643.218005][T11282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.274986][T11282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.286033][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 643.776934][T11308] device syzkaller0 entered promiscuous mode [ 643.825038][T11308] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 644.104354][T11319] device syzkaller0 entered promiscuous mode [ 644.518593][T11335] comedi comedi1: Minor 2 could not be opened [ 644.557303][T11339] loop2: detected capacity change from 0 to 512 [ 645.022022][T11339] EXT4-fs (loop2): 1 orphan inode deleted [ 645.028211][T11339] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 645.041369][T11339] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.166893][T11339] EXT4-fs (loop2): shut down requested (2) [ 645.675527][ T8923] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 645.695360][ T8923] Quota error (device loop2): write_blk: dquota write failed [ 645.711788][ T8923] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 645.830705][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2003'. [ 645.914491][T11359] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 645.964922][T11359] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 645.994188][T11358] device syzkaller0 entered promiscuous mode [ 646.020585][T11358] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 646.193090][T11364] device syzkaller0 entered promiscuous mode [ 646.263213][T11366] can: request_module (can-proto-0) failed. [ 646.731803][T11380] comedi comedi1: Minor 2 could not be opened [ 647.115763][T11394] netlink: 'syz.2.2019': attribute type 1 has an invalid length. [ 647.125331][T11394] netlink: 'syz.2.2019': attribute type 1 has an invalid length. [ 647.555322][T11402] device syzkaller0 entered promiscuous mode [ 647.602119][T11402] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 647.901587][T11407] device syzkaller0 entered promiscuous mode [ 647.946118][T11418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2027'. [ 648.301898][T11426] netlink: 'syz.3.2031': attribute type 1 has an invalid length. [ 648.350757][T11426] netlink: 'syz.3.2031': attribute type 1 has an invalid length. [ 648.420973][T11429] comedi comedi1: Minor 2 could not be opened [ 648.504488][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 648.678508][T11437] netlink: 'syz.6.2036': attribute type 2 has an invalid length. [ 648.734310][T11438] loop3: detected capacity change from 0 to 512 [ 648.808565][T11441] device syzkaller1 entered promiscuous mode [ 648.826011][T11438] EXT4-fs (loop3): 1 orphan inode deleted [ 648.831870][T11438] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 648.844221][T11438] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.869142][T11438] EXT4-fs (loop3): shut down requested (2) [ 648.989794][T11447] device syzkaller0 entered promiscuous mode [ 649.015503][T11447] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 649.351724][T11453] device syzkaller0 entered promiscuous mode [ 649.444756][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 649.517682][T11463] comedi comedi1: Minor 2 could not be opened [ 649.730931][T11469] netlink: 'syz.5.2048': attribute type 1 has an invalid length. [ 649.763297][T11469] netlink: 'syz.5.2048': attribute type 1 has an invalid length. [ 649.842359][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2049'. [ 649.993455][T11482] device syzkaller0 entered promiscuous mode [ 650.012988][T11482] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 650.257479][T11495] loop3: detected capacity change from 0 to 512 [ 650.281664][T11494] comedi comedi1: Minor 2 could not be opened [ 650.364585][T11497] device syzkaller0 entered promiscuous mode [ 650.365243][T11495] EXT4-fs (loop3): 1 orphan inode deleted [ 650.376998][T11495] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 650.389251][T11495] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.412076][T11495] EXT4-fs (loop3): shut down requested (2) [ 650.671644][T11506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 650.915080][T11517] netlink: 'syz.5.2067': attribute type 1 has an invalid length. [ 650.926877][T11517] netlink: 'syz.5.2067': attribute type 1 has an invalid length. [ 651.150070][T11523] device syzkaller0 entered promiscuous mode [ 651.166330][T11523] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 651.214727][T11529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2073'. [ 651.333047][T11533] comedi comedi1: Minor 2 could not be opened [ 651.537494][T11536] device syzkaller0 entered promiscuous mode [ 651.958427][T11556] loop2: detected capacity change from 0 to 512 [ 651.965254][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2084'. [ 651.986323][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2084'. [ 652.053123][T11560] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 652.069158][T11556] EXT4-fs (loop2): 1 orphan inode deleted [ 652.074931][T11556] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 652.087220][T11556] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.112023][T11556] EXT4-fs (loop2): shut down requested (2) [ 652.161808][ T4344] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 652.172997][T11553] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 652.210643][ T4344] Quota error (device loop2): write_blk: dquota write failed [ 652.252360][ T4344] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 652.332568][T11563] device syzkaller0 entered promiscuous mode [ 652.361427][T11563] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 652.519014][T11570] comedi comedi1: Minor 2 could not be opened [ 652.552841][T11572] netlink: 'syz.4.2090': attribute type 29 has an invalid length. [ 652.576403][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 652.602576][T11572] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 652.881380][T11577] device syzkaller0 entered promiscuous mode [ 653.065293][T11586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2095'. [ 653.089652][T11591] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2097'. [ 653.308904][T11599] device syzkaller0 entered promiscuous mode [ 653.333214][T11599] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 653.352778][T11603] validate_nla: 2 callbacks suppressed [ 653.352798][T11603] netlink: 'syz.3.2103': attribute type 1 has an invalid length. [ 653.377959][T11603] netlink: 'syz.3.2103': attribute type 2 has an invalid length. [ 653.492866][T11605] comedi comedi1: Minor 2 could not be opened [ 653.545182][T11609] loop3: detected capacity change from 0 to 512 [ 653.621375][T11609] EXT4-fs (loop3): 1 orphan inode deleted [ 653.627748][T11609] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 653.639855][T11609] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.662343][T11609] EXT4-fs (loop3): shut down requested (2) [ 653.687016][ T8913] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 653.766578][ T8913] Quota error (device loop3): write_blk: dquota write failed [ 653.834974][ T8913] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 653.913942][T11619] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.975129][T11618] device syzkaller0 entered promiscuous mode [ 654.205312][T11627] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2113'. [ 654.244709][T11627] netlink: 'syz.5.2113': attribute type 1 has an invalid length. [ 654.360571][T11634] device syzkaller0 entered promiscuous mode [ 654.371334][T11634] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 654.610925][T11642] comedi comedi1: Minor 2 could not be opened [ 654.658223][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2120'. [ 655.020323][T11654] device syzkaller0 entered promiscuous mode [ 655.495445][T11664] loop5: detected capacity change from 0 to 512 [ 655.558508][T11664] EXT4-fs (loop5): 1 orphan inode deleted [ 655.564474][T11664] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 655.574476][T11665] Illegal XDP return value 4294967274, expect packet loss! [ 655.578210][T11664] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.608282][T11664] EXT4-fs (loop5): shut down requested (2) [ 655.665803][T11666] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2129'. [ 655.705811][T11666] netlink: 'syz.2.2129': attribute type 1 has an invalid length. [ 655.952224][T11676] comedi comedi1: Minor 2 could not be opened [ 655.978655][T11678] device syzkaller0 entered promiscuous mode [ 655.991295][T11678] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 656.336568][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2136'. [ 656.432013][T11683] device syzkaller0 entered promiscuous mode [ 656.595586][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2139'. [ 656.717064][T11700] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2142'. [ 656.737391][T11700] netlink: 'syz.6.2142': attribute type 1 has an invalid length. [ 656.970388][T11706] comedi comedi1: Minor 2 could not be opened [ 657.535062][T11718] device syzkaller0 entered promiscuous mode [ 657.564534][T11721] loop2: detected capacity change from 0 to 512 [ 657.589876][T11718] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 657.717819][T11721] EXT4-fs (loop2): 1 orphan inode deleted [ 657.723632][T11721] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 657.735774][T11721] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.759456][T11721] EXT4-fs (loop2): shut down requested (2) [ 657.927551][T11730] device syzkaller0 entered promiscuous mode [ 658.102590][T11735] device syzkaller0 entered promiscuous mode [ 658.605770][T11752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2160'. [ 658.626779][T11749] comedi comedi1: Minor 2 could not be opened [ 658.874750][T11755] device syzkaller0 entered promiscuous mode [ 658.902575][T11755] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 659.946366][T11776] loop3: detected capacity change from 0 to 512 [ 660.123749][T11776] EXT4-fs (loop3): 1 orphan inode deleted [ 660.130011][T11776] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 660.142441][T11776] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.171653][T11776] EXT4-fs (loop3): shut down requested (2) [ 660.479050][T11783] comedi comedi1: Minor 2 could not be opened [ 660.621368][T11782] device syzkaller0 entered promiscuous mode [ 660.664250][T11790] device syzkaller0 entered promiscuous mode [ 660.685019][T11790] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 660.941882][T11802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2179'. [ 661.125152][T11806] device syzkaller0 entered promiscuous mode [ 662.244170][T11823] comedi comedi1: Minor 2 could not be opened [ 662.438733][T11831] device syzkaller0 entered promiscuous mode [ 663.001034][T11847] device syzkaller0 entered promiscuous mode [ 663.052189][T11847] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 664.173836][T11866] comedi comedi1: Minor 2 could not be opened [ 664.277408][T11878] loop2: detected capacity change from 0 to 512 [ 664.441342][T11878] EXT4-fs (loop2): 1 orphan inode deleted [ 664.447286][T11878] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 664.459391][T11878] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.483157][T11878] EXT4-fs (loop2): shut down requested (2) [ 664.751838][T11891] device syzkaller0 entered promiscuous mode [ 664.897973][T11891] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 666.661510][T11931] loop3: detected capacity change from 0 to 512 [ 666.686616][T11926] comedi comedi1: Minor 2 could not be opened [ 667.789292][T11931] EXT4-fs (loop3): 1 orphan inode deleted [ 667.795340][T11931] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 667.809208][T11931] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.833626][T11931] EXT4-fs (loop3): shut down requested (2) [ 667.976599][T11953] device syzkaller0 entered promiscuous mode [ 668.046043][T11953] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 668.579611][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 668.592070][T11969] comedi comedi1: Minor 2 could not be opened [ 669.316260][T11989] loop6: detected capacity change from 0 to 512 [ 669.401423][T11989] EXT4-fs (loop6): 1 orphan inode deleted [ 669.407727][T11989] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 669.419880][T11989] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.442913][T11989] EXT4-fs (loop6): shut down requested (2) [ 669.561752][ T8923] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 669.726026][ T8923] Quota error (device loop6): write_blk: dquota write failed [ 669.858950][ T8923] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 670.444714][T12009] device syzkaller0 entered promiscuous mode [ 670.499673][T12009] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 670.578716][T12014] comedi comedi1: Minor 2 could not be opened [ 671.057761][T12041] loop6: detected capacity change from 0 to 512 [ 671.229426][T12041] EXT4-fs (loop6): 1 orphan inode deleted [ 671.235364][T12041] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 671.247819][T12041] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.288179][T12041] EXT4-fs (loop6): shut down requested (2) [ 672.022351][T12050] device syzkaller0 entered promiscuous mode [ 672.031992][T12050] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 672.295571][T12058] comedi comedi1: Minor 2 could not be opened [ 672.766957][T12073] netlink: 'syz.5.2279': attribute type 1 has an invalid length. [ 672.872918][T12075] device bond4 entered promiscuous mode [ 672.879303][T12075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 673.701743][T12073] device bridge1 entered promiscuous mode [ 673.749345][T12073] bond4: (slave bridge1): Enslaving as a backup interface with an up link [ 673.827030][ T4344] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 673.889294][ T8913] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 673.940493][T12094] tipc: Enabling of bearer rejected, failed to enable media [ 673.976907][ T8923] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 673.987630][T12094] device syzkaller0 entered promiscuous mode [ 674.005967][T12094] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 674.271374][T12105] comedi comedi1: Minor 2 could not be opened [ 674.599764][T12122] loop5: detected capacity change from 0 to 512 [ 674.910364][T12122] EXT4-fs (loop5): 1 orphan inode deleted [ 674.916479][T12122] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 674.929138][T12122] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.988803][T12122] EXT4-fs (loop5): shut down requested (2) [ 675.640304][T12134] tipc: Enabling of bearer rejected, failed to enable media [ 675.669708][T12138] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2299'. [ 675.702834][T12134] device syzkaller0 entered promiscuous mode [ 675.718668][T12138] netlink: 'syz.6.2299': attribute type 1 has an invalid length. [ 675.760727][T12134] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 676.149999][T12163] comedi comedi1: Minor 2 could not be opened [ 676.973312][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2307'. [ 677.473450][T12179] loop2: detected capacity change from 0 to 512 [ 678.118815][T12179] EXT4-fs (loop2): 1 orphan inode deleted [ 678.124959][T12179] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 678.137924][T12179] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.162879][T12179] EXT4-fs (loop2): shut down requested (2) [ 678.370871][T12188] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2314'. [ 678.422309][T12190] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 678.475584][T12191] tipc: Enabling of bearer rejected, failed to enable media [ 678.495971][T12191] device syzkaller0 entered promiscuous mode [ 678.518177][T12191] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 678.647988][T12193] device syzkaller0 entered promiscuous mode [ 679.306410][T12215] comedi comedi1: Minor 2 could not be opened [ 681.640226][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.698467][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.053358][T12199] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.061923][T12199] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.071692][T12199] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.080342][T12199] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.113883][T12199] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.122683][T12199] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.131523][T12199] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.140180][T12199] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.331098][T12238] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2328'. [ 682.383076][T12241] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 682.462013][T12240] device syzkaller0 entered promiscuous mode [ 682.575339][T12248] tipc: Enabling of bearer rejected, failed to enable media [ 682.673182][T12248] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 682.770528][T12243] device syzkaller0 entered promiscuous mode [ 682.787246][T12243] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 683.642699][T12269] loop5: detected capacity change from 0 to 512 [ 683.828264][T12273] comedi comedi1: Minor 2 could not be opened [ 683.962543][T12269] EXT4-fs (loop5): 1 orphan inode deleted [ 683.968969][T12269] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 683.981484][T12269] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.052124][T12269] EXT4-fs (loop5): shut down requested (2) [ 684.775806][T12281] netlink: 'syz.5.2343': attribute type 1 has an invalid length. [ 684.842325][T12281] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2343'. [ 685.009855][T12294] tipc: Enabling of bearer rejected, failed to enable media [ 685.235541][T12299] device syzkaller0 entered promiscuous mode [ 685.563572][T12294] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 686.019089][T12306] device syzkaller0 entered promiscuous mode [ 686.116581][T12314] loop5: detected capacity change from 0 to 512 [ 686.195912][T12316] comedi comedi1: Minor 2 could not be opened [ 686.282016][T12314] EXT4-fs (loop5): 1 orphan inode deleted [ 686.288104][T12314] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 686.300742][T12314] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.366752][T12314] EXT4-fs (loop5): shut down requested (2) [ 687.591293][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.598227][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.492719][T12326] netlink: 'syz.4.2360': attribute type 1 has an invalid length. [ 688.521054][T12329] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 688.540140][T12326] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2360'. [ 689.689506][T12344] tipc: MTU too low for tipc bearer [ 689.797268][T12351] loop2: detected capacity change from 0 to 512 [ 689.883401][T12352] device syzkaller0 entered promiscuous mode [ 689.911233][T12354] tipc: Enabling of bearer rejected, failed to enable media [ 689.933643][T12351] EXT4-fs (loop2): 1 orphan inode deleted [ 689.939878][T12351] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 689.951957][T12351] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.975148][T12351] EXT4-fs (loop2): shut down requested (2) [ 690.064943][T12354] device syzkaller0 entered promiscuous mode [ 690.115390][T12365] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 693.173250][T12406] device syzkaller0 entered promiscuous mode [ 693.218797][T12402] device syzkaller0 entered promiscuous mode [ 693.247356][T12406] tipc: Enabled bearer , priority 0 [ 693.408724][T12405] tipc: Resetting bearer [ 693.584678][T12405] tipc: Disabling bearer [ 693.636322][T12418] tipc: Enabling of bearer rejected, failed to enable media [ 696.991808][T12470] tipc: Enabling of bearer rejected, failed to enable media [ 697.018552][T12470] device syzkaller0 entered promiscuous mode [ 697.033965][T12475] loop2: detected capacity change from 0 to 512 [ 697.045342][T12474] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2406'. [ 697.055869][T12470] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 697.078793][T12474] xt_l2tp: invalid flags combination: 8 [ 697.235689][T12475] EXT4-fs (loop2): 1 orphan inode deleted [ 697.241596][T12475] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 697.254386][T12475] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.278527][T12475] EXT4-fs (loop2): shut down requested (2) [ 697.547259][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2409'. [ 700.328070][T12486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.485232][T12511] device syzkaller0 entered promiscuous mode [ 700.589222][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 700.612771][T12517] tipc: Enabling of bearer rejected, failed to enable media [ 700.629988][T12517] device syzkaller0 entered promiscuous mode [ 700.660128][T12517] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 701.081687][T12534] netlink: 'syz.2.2424': attribute type 49 has an invalid length. [ 701.099845][T12534] netlink: 'syz.2.2424': attribute type 49 has an invalid length. [ 701.114608][T12535] loop3: detected capacity change from 0 to 512 [ 701.120976][T12534] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.201587][T12535] EXT4-fs (loop3): 1 orphan inode deleted [ 701.207535][T12535] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 701.219704][T12535] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.243326][T12535] EXT4-fs (loop3): shut down requested (2) [ 702.831551][T12560] device syzkaller0 entered promiscuous mode [ 702.864793][T12569] device syzkaller0 entered promiscuous mode [ 703.072789][T12569] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 703.396813][T12588] device syzkaller0 entered promiscuous mode [ 703.428096][T12588] tipc: Enabled bearer , priority 0 [ 703.534531][T12586] tipc: Resetting bearer [ 703.578624][T12601] loop6: detected capacity change from 0 to 512 [ 703.663585][T12601] EXT4-fs (loop6): 1 orphan inode deleted [ 703.669828][T12601] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 703.681966][T12601] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.706756][T12601] EXT4-fs (loop6): shut down requested (2) [ 703.735511][T12586] tipc: Disabling bearer [ 704.475018][T12608] netlink: 'syz.4.2447': attribute type 11 has an invalid length. [ 704.578335][T12612] netlink: 564 bytes leftover after parsing attributes in process `syz.6.2446'. [ 704.906315][T12617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2450'. [ 705.650525][T12629] device syzkaller0 entered promiscuous mode [ 705.754538][T12628] device syzkaller0 entered promiscuous mode [ 705.988023][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2459'. [ 705.994467][T12641] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 706.026818][T12641] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2458'. [ 706.042843][T12646] loop2: detected capacity change from 0 to 512 [ 706.133497][T12646] EXT4-fs (loop2): 1 orphan inode deleted [ 706.139461][T12646] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 706.153627][T12646] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.178015][T12646] EXT4-fs (loop2): shut down requested (2) [ 706.187911][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2460'. [ 706.304289][T12653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2460'. [ 708.287440][T12677] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 708.693755][T12689] device syzkaller0 entered promiscuous mode [ 709.060216][T12696] netlink: 'syz.4.2474': attribute type 1 has an invalid length. [ 709.088272][T12696] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2474'. [ 709.134423][T12698] loop2: detected capacity change from 0 to 512 [ 709.294382][T12698] EXT4-fs (loop2): 1 orphan inode deleted [ 709.300383][T12698] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 709.312509][T12698] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.338880][T12698] EXT4-fs (loop2): shut down requested (2) [ 710.840360][T12724] device syzkaller0 entered promiscuous mode [ 710.907675][T12729] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 710.963793][T12727] device syzkaller0 entered promiscuous mode [ 710.990246][T12734] 8021q: VLANs not supported on hsr0 [ 711.078142][T12734] 8021q: VLANs not supported on hsr0 [ 711.090463][T12737] loop5: detected capacity change from 0 to 512 [ 711.153814][T12741] netlink: 'syz.2.2490': attribute type 1 has an invalid length. [ 711.164551][T12741] netlink: 'syz.2.2490': attribute type 2 has an invalid length. [ 711.363191][T12737] EXT4-fs (loop5): 1 orphan inode deleted [ 711.369370][T12737] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 711.382158][T12737] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.461920][T12737] EXT4-fs (loop5): shut down requested (2) [ 711.484206][ T8910] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 711.678652][ T8910] Quota error (device loop5): write_blk: dquota write failed [ 711.945742][ T8910] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 713.252736][T12775] netlink: 'syz.2.2497': attribute type 10 has an invalid length. [ 713.490633][T12787] device syzkaller0 entered promiscuous mode [ 713.534766][T12785] device syzkaller0 entered promiscuous mode [ 713.560226][T12785] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 713.580988][T12793] loop2: detected capacity change from 0 to 512 [ 713.816353][T12793] EXT4-fs (loop2): 1 orphan inode deleted [ 713.822295][T12793] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 713.834909][T12793] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.902515][T12793] EXT4-fs (loop2): shut down requested (2) [ 715.986815][T12845] loop2: detected capacity change from 0 to 512 [ 716.174699][T12845] EXT4-fs (loop2): 1 orphan inode deleted [ 716.180699][T12845] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 716.193717][T12845] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.288292][T12845] EXT4-fs (loop2): shut down requested (2) [ 716.297462][ T8928] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 716.425885][ T8928] Quota error (device loop2): write_blk: dquota write failed [ 716.559231][ T8928] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 716.845904][T12853] device syzkaller0 entered promiscuous mode [ 717.070847][T12851] device syzkaller0 entered promiscuous mode [ 717.135641][T12853] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 717.167285][T12865] device gre0 entered promiscuous mode [ 717.192421][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2523'. [ 718.381374][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2529'. [ 718.430868][T12894] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 718.446668][T12893] netlink: 'syz.6.2529': attribute type 21 has an invalid length. [ 718.648547][T12905] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 718.661143][T12908] loop6: detected capacity change from 0 to 512 [ 718.696399][T12905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2535'. [ 718.763559][T12905] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.886208][T12908] EXT4-fs (loop6): 1 orphan inode deleted [ 718.892402][T12908] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 718.905234][T12908] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.980687][T12908] EXT4-fs (loop6): shut down requested (2) [ 719.008986][ T8910] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 719.152156][ T8910] Quota error (device loop6): write_blk: dquota write failed [ 719.269808][ T8910] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 719.581562][T12918] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2540'. [ 719.619986][T12915] device syzkaller0 entered promiscuous mode [ 719.657521][T12915] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 719.731165][T12922] device syzkaller0 entered promiscuous mode [ 720.298302][T12950] device syzkaller0 entered promiscuous mode [ 720.319150][T12950] tipc: Enabled bearer , priority 0 [ 720.351762][T12950] tipc: Resetting bearer [ 720.372305][T12949] tipc: Resetting bearer [ 720.401125][T12949] tipc: Disabling bearer [ 720.628125][T12958] loop3: detected capacity change from 0 to 512 [ 720.801178][T12958] EXT4-fs (loop3): 1 orphan inode deleted [ 720.807176][T12958] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 720.819269][T12958] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.904165][T12958] EXT4-fs (loop3): shut down requested (2) [ 721.404039][T12972] device syzkaller0 entered promiscuous mode [ 721.587688][T12976] device syzkaller0 entered promiscuous mode [ 721.659964][T12976] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 723.205750][T13022] loop2: detected capacity change from 0 to 512 [ 723.240830][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'. [ 723.330177][T13022] EXT4-fs (loop2): 1 orphan inode deleted [ 723.336023][T13022] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 723.348218][T13022] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.375382][T13022] EXT4-fs (loop2): shut down requested (2) [ 723.400780][T13035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2574'. [ 723.490157][T13018] device syzkaller0 entered promiscuous mode [ 723.725356][T13042] device syzkaller0 entered promiscuous mode [ 723.779747][T13042] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 724.192625][T13054] netlink: 'syz.6.2582': attribute type 1 has an invalid length. [ 725.200920][T13062] device bond1 entered promiscuous mode [ 725.236977][T13062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 725.334477][T13080] device syzkaller0 entered promiscuous mode [ 725.526666][T13089] loop2: detected capacity change from 0 to 512 [ 725.610293][T13095] device syzkaller0 entered promiscuous mode [ 725.673573][T13089] EXT4-fs (loop2): 1 orphan inode deleted [ 725.679792][T13089] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 725.692141][T13089] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.715751][T13089] EXT4-fs (loop2): shut down requested (2) [ 725.723903][ T4344] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 725.742897][T13095] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 725.803875][ T4344] Quota error (device loop2): write_blk: dquota write failed [ 725.860414][ T4344] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 727.086462][T13125] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2601'. [ 727.628256][T13151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 727.657599][T13151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 727.725627][T13151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 728.015359][T13158] device syzkaller0 entered promiscuous mode [ 729.409749][T13177] device syzkaller0 entered promiscuous mode [ 729.573587][T13176] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 730.224366][T13210] loop5: detected capacity change from 0 to 512 [ 730.717257][T13210] EXT4-fs (loop5): 1 orphan inode deleted [ 730.723395][T13210] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 730.736487][T13210] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 730.867311][T13210] EXT4-fs (loop5): shut down requested (2) [ 730.921111][ T4344] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 731.236409][ T4344] Quota error (device loop5): write_blk: dquota write failed [ 731.243964][ T4344] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 731.542634][T13238] device syzkaller0 entered promiscuous mode [ 731.579134][T13239] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 731.609977][T13238] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 731.621180][T13239] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 733.199295][T13283] device syzkaller0 entered promiscuous mode [ 734.124683][T13300] device syzkaller0 entered promiscuous mode [ 734.134990][T13300] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 734.192507][T13304] loop5: detected capacity change from 0 to 512 [ 734.356138][T13304] EXT4-fs (loop5): 1 orphan inode deleted [ 734.362283][T13304] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 734.374581][T13304] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.399689][T13304] EXT4-fs (loop5): shut down requested (2) [ 734.411798][ T8455] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 734.443725][ T8455] Quota error (device loop5): write_blk: dquota write failed [ 734.497450][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2656'. [ 734.517165][ T8455] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 736.270339][T13340] netlink: 75 bytes leftover after parsing attributes in process `syz.4.2661'. [ 736.443740][T13352] device syzkaller0 entered promiscuous mode [ 736.472991][T13352] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 736.787526][T13370] loop5: detected capacity change from 0 to 512 [ 736.961178][T13370] EXT4-fs (loop5): 1 orphan inode deleted [ 736.967103][T13370] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 736.979176][T13370] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.026112][T13370] EXT4-fs (loop5): shut down requested (2) [ 737.293664][T13383] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2673'. [ 738.881374][T13411] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2681'. [ 738.935662][T13414] device syzkaller0 entered promiscuous mode [ 738.945715][T13414] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 739.045777][T13419] device syzkaller0 entered promiscuous mode [ 739.058074][T13426] loop2: detected capacity change from 0 to 512 [ 739.202928][T13426] EXT4-fs (loop2): 1 orphan inode deleted [ 739.208867][T13426] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 739.220990][T13426] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.244420][T13426] EXT4-fs (loop2): shut down requested (2) [ 739.294157][ T3038] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 739.309620][ T3038] Quota error (device loop2): write_blk: dquota write failed [ 739.679221][ T3038] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 740.323338][T13440] netlink: 'syz.2.2689': attribute type 1 has an invalid length. [ 740.334281][T13445] netlink: 'syz.6.2691': attribute type 1 has an invalid length. [ 740.370350][T13440] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2689'. [ 740.372288][T13445] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2691'. [ 740.433026][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2691'. [ 741.318635][T13458] device syzkaller0 entered promiscuous mode [ 741.401336][T13468] loop6: detected capacity change from 0 to 512 [ 741.445779][T13470] device syzkaller0 entered promiscuous mode [ 741.461717][T13458] [ 741.464121][T13458] ============================================ [ 741.470305][T13458] WARNING: possible recursive locking detected [ 741.476548][T13458] syzkaller #0 Not tainted [ 741.480995][T13458] -------------------------------------------- [ 741.487166][T13458] syz.3.2697/13458 is trying to acquire lock: [ 741.493257][T13458] ffff888030ea8108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 741.502554][T13458] [ 741.502554][T13458] but task is already holding lock: [ 741.509951][T13458] ffff888030ea8108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 741.519140][T13458] [ 741.519140][T13458] other info that might help us debug this: [ 741.527229][T13458] Possible unsafe locking scenario: [ 741.527229][T13458] [ 741.534703][T13458] CPU0 [ 741.538094][T13458] ---- [ 741.541393][T13458] lock(&sch->q.lock); [ 741.545578][T13458] lock(&sch->q.lock); [ 741.549760][T13458] [ 741.549760][T13458] *** DEADLOCK *** [ 741.549760][T13458] [ 741.557927][T13458] May be due to missing lock nesting notation [ 741.557927][T13458] [ 741.566271][T13458] 3 locks held by syz.3.2697/13458: [ 741.571496][T13458] #0: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 741.581120][T13458] #1: ffff888030ea8108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 741.590746][T13458] #2: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 741.600560][T13458] [ 741.600560][T13458] stack backtrace: [ 741.606497][T13458] CPU: 0 PID: 13458 Comm: syz.3.2697 Not tainted syzkaller #0 [ 741.613985][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.624358][T13458] Call Trace: [ 741.627734][T13458] [ 741.630722][T13458] dump_stack_lvl+0x188/0x250 [ 741.635473][T13458] ? show_regs_print_info+0x20/0x20 [ 741.640754][T13458] ? load_image+0x410/0x410 [ 741.645308][T13458] __lock_acquire+0x1247/0x7b50 [ 741.650223][T13458] ? verify_lock_unused+0x140/0x140 [ 741.655472][T13458] ? mark_lock+0x94/0x320 [ 741.659841][T13458] ? __lock_acquire+0x13dc/0x7b50 [ 741.664909][T13458] ? rcu_lock_release+0x5/0x20 [ 741.669718][T13458] lock_acquire+0x19e/0x400 [ 741.674254][T13458] ? __dev_queue_xmit+0xa2b/0x2e50 [ 741.679408][T13458] ? read_lock_is_recursive+0x10/0x10 [ 741.684825][T13458] ? rcu_read_lock_bh_held+0x76/0xf0 [ 741.690146][T13458] ? rcu_read_lock_held+0x40/0x40 [ 741.692385][T13465] tipc: Enabled bearer , priority 0 [ 741.695238][T13458] _raw_spin_lock+0x2a/0x40 [ 741.706449][T13458] ? __dev_queue_xmit+0xa2b/0x2e50 [ 741.710619][T13465] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 741.711601][T13458] __dev_queue_xmit+0xa2b/0x2e50 [ 741.724373][T13458] ? dev_queue_xmit+0x20/0x20 [ 741.729091][T13458] ? __kernel_text_address+0x9a/0x100 [ 741.733032][T13465] tipc: Resetting bearer [ 741.734500][T13458] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 741.746135][T13458] ? lockdep_hardirqs_on+0x94/0x140 [ 741.751383][T13458] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 741.757312][T13458] ? _raw_spin_unlock+0x40/0x40 [ 741.762203][T13458] ? stack_trace_save+0xa6/0xf0 [ 741.767085][T13458] ? netdev_core_pick_tx+0x300/0x300 [ 741.772415][T13458] sch_frag_xmit_hook+0x2d8/0x1be0 [ 741.777563][T13458] ? __kasan_slab_alloc+0xa9/0xc0 [ 741.782882][T13458] ? __kasan_slab_alloc+0x92/0xc0 [ 741.787924][T13458] ? slab_post_alloc_hook+0x4c/0x380 [ 741.793232][T13458] ? kmem_cache_alloc+0x15d/0x280 [ 741.798265][T13458] ? skb_clone+0x1bd/0x350 [ 741.802707][T13458] ? tcf_mirred_act+0x5b0/0x1640 [ 741.807660][T13458] ? tcf_action_exec+0x177/0x570 [ 741.812630][T13458] ? basic_classify+0x1ae/0x2c0 [ 741.817494][T13458] ? tcf_classify+0x218/0xad0 [ 741.822196][T13458] ? qfq_enqueue+0x31b/0x1310 [ 741.826881][T13458] ? dev_qdisc_enqueue+0x48/0x210 [ 741.831935][T13458] ? __dev_queue_xmit+0xbde/0x2e50 [ 741.837050][T13458] ? packet_sendmsg+0x3b4f/0x4de0 [ 741.842109][T13458] ? mq_dump_class_stats+0x430/0x430 [ 741.847405][T13458] ? do_syscall_64+0x4c/0xa0 [ 741.852021][T13458] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 741.858121][T13458] ? __copy_skb_header+0x3ba/0x4f0 [ 741.863272][T13458] ? memcpy+0x3c/0x60 [ 741.867273][T13458] ? __copy_skb_header+0x3ba/0x4f0 [ 741.872437][T13458] ? __skb_clone+0x446/0x6c0 [ 741.877106][T13458] ? skb_clone+0x1f1/0x350 [ 741.881555][T13458] ? tcf_mirred_act+0x59a/0x1640 [ 741.886509][T13458] tcf_mirred_act+0xc5a/0x1640 [ 741.891321][T13458] tcf_action_exec+0x177/0x570 [ 741.896205][T13458] basic_classify+0x1ae/0x2c0 [ 741.900936][T13458] tcf_classify+0x218/0xad0 [ 741.905476][T13458] qfq_enqueue+0x31b/0x1310 [ 741.909992][T13458] ? sch_tree_lock+0x110/0x110 [ 741.914790][T13458] ? do_raw_spin_lock+0x128/0x2f0 [ 741.919819][T13458] ? __rwlock_init+0x140/0x140 [ 741.924587][T13458] ? __alloc_skb+0x473/0x750 [ 741.929199][T13458] dev_qdisc_enqueue+0x48/0x210 [ 741.934086][T13458] __dev_queue_xmit+0xbde/0x2e50 [ 741.939043][T13458] ? dev_queue_xmit+0x20/0x20 [ 741.943745][T13458] ? virtio_net_hdr_to_skb+0xb8c/0x11e0 [ 741.949311][T13458] ? packet_cached_dev_get+0x270/0x270 [ 741.954813][T13458] ? skb_put+0x10e/0x200 [ 741.959071][T13458] packet_sendmsg+0x3b4f/0x4de0 [ 741.963949][T13458] ? sched_move_task+0x2c0/0x4f0 [ 741.968916][T13458] ? aa_sk_perm+0x7dc/0x910 [ 741.973457][T13458] ? packet_getsockopt+0x9a0/0x9a0 [ 741.978586][T13458] ? unpack_rlimits+0x113e/0x1230 [ 741.983800][T13458] ? apparmor_socket_sendmsg+0x88/0x230 [ 741.989358][T13458] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 741.994681][T13458] ? security_socket_sendmsg+0x7c/0xa0 [ 742.000144][T13458] ? packet_getsockopt+0x9a0/0x9a0 [ 742.005261][T13458] ____sys_sendmsg+0x5be/0x8f0 [ 742.010032][T13458] ? __sys_sendmsg_sock+0x30/0x30 [ 742.015242][T13458] ? import_iovec+0x6f/0xa0 [ 742.019776][T13458] ___sys_sendmsg+0x236/0x2e0 [ 742.024514][T13458] ? __sys_sendmsg+0x290/0x290 [ 742.029316][T13458] __se_sys_sendmsg+0x1b7/0x2a0 [ 742.034216][T13458] ? __x64_sys_sendmsg+0x80/0x80 [ 742.039171][T13458] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 742.045184][T13458] ? lockdep_hardirqs_on+0x94/0x140 [ 742.050423][T13458] do_syscall_64+0x4c/0xa0 [ 742.054843][T13458] ? clear_bhb_loop+0x30/0x80 [ 742.059531][T13458] ? clear_bhb_loop+0x30/0x80 [ 742.064228][T13458] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 742.070162][T13458] RIP: 0033:0x7fa1dded3159 [ 742.074606][T13458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.094229][T13458] RSP: 002b:00007fa1dc12b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.102653][T13458] RAX: ffffffffffffffda RBX: 00007fa1de15afa0 RCX: 00007fa1dded3159 [ 742.110807][T13458] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 742.118793][T13458] RBP: 00007fa1ddf6a024 R08: 0000000000000000 R09: 0000000000000000 [ 742.126811][T13458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.134828][T13458] R13: 00007fa1de15b038 R14: 00007fa1de15afa0 R15: 00007fffa3ea4978 [ 742.142812][T13458]