last executing test programs: 8.915324196s ago: executing program 1 (id=2405): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x8, 0x400000f, 0x86c, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000500)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000580)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f00000005c0)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000680)="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", 0xcad}], 0x5, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 8.128530736s ago: executing program 0 (id=2414): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'bridge_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002240)={0x0, 0x0, 0xe2, 0x0, 0x1, 0x66}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@bloom_filter={0x1e, 0x4, 0x509, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x5}, 0x50) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0x4c02}) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="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", 0x222}], 0x1}}], 0x3, 0x2090) 8.054546854s ago: executing program 0 (id=2416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d00)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000ec0)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000001080), 0x56) sendmsg$kcm(r5, &(0x7f00000010c0)={&(0x7f0000001100)=@xdp={0x2c, 0x0, 0x0, 0x36}, 0x80, &(0x7f0000001180)=[{&(0x7f00000011c0)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000001200)="442ea407603a16ff", 0x8}], 0x2}, 0x20048085) 7.845005005s ago: executing program 1 (id=2418): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000440)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x5855}, 0x0) 5.427965593s ago: executing program 0 (id=2425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001d00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x84000) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a0cf660000f2170e65e3f503a7e422000000000000000000001200000000001900", 0x3c}, 0x60) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) 4.670375061s ago: executing program 2 (id=2427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x67) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000000380), 0x400000000000046, 0x40000122, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) read(r1, &(0x7f00000003c0)=""/234, 0xea) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x1403, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000200)=0xa40, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000004c0)={@void, @void, @eth={@random="000000000400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@val={0x88a8, 0x1, 0x1, 0x6}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "e71366", 0x9, 0x11, 0x1, @mcast1, @loopback, {[], {0x4f19, 0x4e20, 0x9, 0x0, @opaque='\x00'}}}}}}}, 0x47) 4.648827293s ago: executing program 0 (id=2428): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x8, 0x400000f, 0x86c, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000500)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000580)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f00000005c0)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000680)="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", 0xcad}], 0x5, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) 4.636422445s ago: executing program 1 (id=2429): bind$bt_hci(0xffffffffffffffff, &(0x7f00000011c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000001200)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB="2cb2"], 0x8) 4.619936136s ago: executing program 3 (id=2430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001200)=ANY=[@ANYBLOB="8c0000000d0a010800000400000000000a0000010900020073797a31000000000900010073797a3100000000600003805c0000800c000180060002"], 0x8c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4.505990348s ago: executing program 1 (id=2431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000200)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) 4.464733662s ago: executing program 3 (id=2433): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="8c0000004000000128bd7000fcdbdf2566f58aa008461ed25d10146136987f7a9056f771339d036a01500e"], 0x8c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x0, 0x0, 0x34040005}, 0x48024) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 4.382031051s ago: executing program 2 (id=2434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd25, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0x2, 0x8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xa7dd, 0x1, 0x2625}, {0x8fa0, 0x1, 0x1, 0x5, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x3}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)}], 0x1}, 0x20004014) 4.308061479s ago: executing program 3 (id=2436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005"], 0x4a) 4.19738611s ago: executing program 2 (id=2437): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40080, 0x149) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) 4.19343116s ago: executing program 1 (id=2438): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="5001", @ANYRES16=r4], 0x14) 4.155189424s ago: executing program 4 (id=2439): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000001c00)={&(0x7f0000000200), 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xbc, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff30}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x104}, @IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x0, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x0, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x0, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x0, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x0, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x0, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS, @IPVS_DEST_ATTR_TUN_TYPE={0x0, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x0, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x11}, 0xc080) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x2, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.117691318s ago: executing program 3 (id=2440): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000002640)={{}, "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"}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000015800)='.\x00', 0x446802, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000001180)='configfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = openat(r0, 0x0, 0x8400, 0x0) ioctl$FITRIM(r1, 0xc4009420, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x1c, 0x31, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) write(0xffffffffffffffff, 0x0, 0x0) 4.068016143s ago: executing program 2 (id=2441): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r0, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) 3.915868118s ago: executing program 4 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 3.862064404s ago: executing program 4 (id=2443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xbef3f4b213cd21b6}, @TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x2, 0x9, 0xe, 0x7}, {0x8, 0x1, 0x401, 0x6, 0x7, 0xc}, 0x80000000, 0x38000, 0x6e0}}, @TCA_TBF_BURST={0x8, 0x6, 0xc}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.757966015s ago: executing program 0 (id=2444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000a00)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f0000000a40)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000001080)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x10}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xed, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1fb, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x5, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7ffb, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0xdc, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x7, 0x8, 0x4, 0x4, 0x4, 0x81, 0x3, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67c, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0xd, 0x6, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.06794793s ago: executing program 0 (id=2445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc0142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000dc0)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f00000000c0)="448b7c0acf8bc0cefe9360fcbe079c", 0xf}], 0x2) 1.043853053s ago: executing program 4 (id=2446): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'bridge_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x79, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002240)={0x0, 0x0, 0xe2, 0x0, 0x1, 0x66}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=@bloom_filter={0x1e, 0x4, 0x509, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x5}, 0x50) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0x4c02}) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="9b1ec3102117dd131651558fc4c6306995b4d62886823d505d0a278438a651c03e2e8d7e371d154226eb6181fc91cc079eb6d49cedb02ee75518cf4b84ccc42d764d69c494ee7b00e016e478c621c38194d359411b6e5179630aad8e52ea93632d828803222d33a43d837c305b3aec23f2247ef28eefc49fd779277a8bfdcb232c41a2a0c5ace98a778184c9f5ac2840f7ecb3452cb21d888e954e1773ceed03d443ea0208a3615c165ebcc4c4f32f8fecc3642036cb7c26427ad2a9c401d466ba6e137c758204e8d737b6343f354aece43e52363ece29c2bf4bf87292b53aeb723f217ce6359e7f7986781ca2419ce3b197e267166a33d19c2476eec8bd664966651ee93514e3844c8495d409225baa99ebfe696d302d1ab3b7641417a4a2f6cd45770705ffbdc438d803d147a33c9483eda65996c7e58d564b81975be94d8cd05d828547ce3a6ad8760df8b2ef8687c4d031366b5b4754aaac359bff71a2fda4fff2cf04ea0aa33032e275cbba8945055e29bdd8a43661abce861847fadf70e9858ddacbf581322fb4d4d81bdb6c37c78dcd03cb5f1210a2c995c4ff5a16532e01f1d10e69ba3dbaf7b2d01e4e38f77beabe7133d7b175a6d1276cbcfe544a11b724cc41704fc370c4b3ed2456710a32cf8a5ce2e8b9eb7185efb47a68722c3f4ab095037b249e9d63abf64e42b12165d2748785136c400f32646d07aa7e0e6e8ee2495511edc6057947e279ba89bd1dcaeea7abfc2b53988a72b9ce3eb01dec09", 0x222}], 0x1}}], 0x3, 0x2090) 1.013997856s ago: executing program 2 (id=2447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd25, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0x2, 0x8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xa7dd, 0x1, 0x2625}, {0x8fa0, 0x1, 0x1, 0x5, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x3}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)}], 0x1}, 0x20004014) 1.013169606s ago: executing program 1 (id=2448): close(0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000400)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x2, 0x0, 0x40, 0x8}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x7}, {0xd, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff}, {0x7, 0xab5d, 0x47b, 0x7e000000}}}]}]}]}}]}, 0x74}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x46) 862.847021ms ago: executing program 2 (id=2449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}}, 0x24}, 0x1, 0xfffffffffffffffd, 0x0, 0x4010}, 0x0) 507.246698ms ago: executing program 3 (id=2450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001200)=ANY=[@ANYBLOB="8c0000000d0a010800000400000000000a0000010900020073797a31000000000900010073797a3100000000600003805c0000800c000180060002"], 0x8c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 432.246616ms ago: executing program 3 (id=2451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@can_newroute={0x13c, 0x18, 0x1, 0x70bd26, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0xf8, 0x3, 0xff, 0x9, "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", 0x3, "5c8dc9f00000e4ffff004d01ffffff2814edb2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xe, 0x5, 0x3}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000840) 111.507769ms ago: executing program 4 (id=2452): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4", 0xf}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe163", 0xad}, {&(0x7f0000000600)="20b946e4ffc9", 0x6}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(0xffffffffffffffff, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x41e}], 0x1) 0s ago: executing program 4 (id=2453): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000440)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x5855}, 0x0) kernel console output (not intermixed with test programs): CHANGE): hsr_slave_1: link becomes ready [ 87.827979][ T4278] device veth1_vlan entered promiscuous mode [ 87.845517][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.852667][ T4276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.874277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.888570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.899101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.948500][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.012412][ T4278] device veth0_macvtap entered promiscuous mode [ 88.078678][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.095007][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.106086][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.119026][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.130669][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.144435][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.153421][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.185861][ T4278] device veth1_macvtap entered promiscuous mode [ 88.253280][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.262324][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.290483][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.301096][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.316923][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.329822][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.340591][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.351894][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.369330][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.381299][ T4280] device veth0_vlan entered promiscuous mode [ 88.393552][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.411456][ T4282] device veth0_vlan entered promiscuous mode [ 88.422145][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.435554][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.460923][ T4280] device veth1_vlan entered promiscuous mode [ 88.476013][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.503526][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.513066][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.523029][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.546803][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.557553][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.567079][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.575938][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.609359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.618316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.626636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.644486][ T4282] device veth1_vlan entered promiscuous mode [ 88.668955][ T4280] device veth0_macvtap entered promiscuous mode [ 88.698041][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.707576][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.717754][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.732595][ T4280] device veth1_macvtap entered promiscuous mode [ 88.759113][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.779949][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.794987][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.803334][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.827147][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.852588][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.878604][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.903499][ T4282] device veth0_macvtap entered promiscuous mode [ 88.931616][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.953905][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.972778][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.991666][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.000614][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.011258][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.021456][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.034556][ T4282] device veth1_macvtap entered promiscuous mode [ 89.044936][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.052905][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.077286][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.094752][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.120265][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.130223][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.141560][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.152151][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.162196][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.169446][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.195598][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.205966][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.221185][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.224961][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.239330][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.250204][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.269889][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.294866][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.306994][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.315254][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 89.328567][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.335778][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.344192][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.394702][ T50] Bluetooth: hci4: command 0x0419 tx timeout [ 89.400793][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 89.407421][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 89.407580][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 89.427827][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.441065][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.451814][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.470284][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.496983][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.507984][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.519592][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.539545][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.552999][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.580220][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.590113][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.605873][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.612826][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.619093][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.639987][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.689667][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.706211][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.720154][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.730877][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.742281][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.754455][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.771126][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.782340][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.791480][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.801363][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.810804][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.820500][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.829622][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.849757][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.887310][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.908404][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.920922][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.933357][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.973323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.985916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.093136][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.125371][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.143556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.152646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.172517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.643888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.653890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.663859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.673868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.683858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.693858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.703864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.734005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.755496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.775981][ T4277] device veth0_vlan entered promiscuous mode [ 90.851440][ T4277] device veth1_vlan entered promiscuous mode [ 90.933228][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.967920][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.987150][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.992327][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.014693][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.036566][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.054894][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.065384][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.119422][ T4277] device veth0_macvtap entered promiscuous mode [ 91.148131][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.172099][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.199918][ T4277] device veth1_macvtap entered promiscuous mode [ 91.242186][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.249313][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.258816][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.281465][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.297294][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.305356][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.319000][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.366750][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.383314][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.415390][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.451477][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.560755][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.568657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.582629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.688799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.765440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.827148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.910354][ T3541] cfg80211: failed to load regulatory.db [ 91.938976][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.003211][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.061916][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.149127][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.169539][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.186090][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.209591][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.227566][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.242408][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252470][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.268023][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.396176][ T4429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.455134][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.474632][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.557025][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.567589][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.584804][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 92.690449][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.701905][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.720125][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.730679][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.759905][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.793896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.813894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.823875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.952757][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.961379][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.200460][ T4276] device veth0_vlan entered promiscuous mode [ 93.600197][ T4276] device veth1_vlan entered promiscuous mode [ 93.628036][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.673489][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.698492][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.715612][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.746018][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.773303][ T4276] device veth0_macvtap entered promiscuous mode [ 93.807316][ T4276] device veth1_macvtap entered promiscuous mode [ 93.814971][ T4448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 93.877412][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.918853][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.968034][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.010353][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.040965][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.085065][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.098394][ T4456] loop2: detected capacity change from 0 to 512 [ 94.103041][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.115773][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.128201][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.158411][ T4287] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.217593][ T4454] device veth0 entered promiscuous mode [ 94.242824][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.263225][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.283487][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.306237][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.355230][ T4453] device veth0 left promiscuous mode [ 94.387682][ T4463] device syzkaller0 entered promiscuous mode [ 94.423419][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.444128][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.478880][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.529436][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.554978][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.576372][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.591149][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.605024][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.655719][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.775587][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.902101][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.184351][ T4472] loop4: detected capacity change from 0 to 512 [ 95.293144][ T4472] EXT4-fs: inline encryption not supported [ 95.303499][ T4472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.332626][ T4472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.363777][ T4472] EXT4-fs (loop4): 1 truncate cleaned up [ 95.376004][ T4472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.390981][ T4276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.408294][ T4276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.437927][ T4276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.458704][ T4276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539566][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059616400: rx timeout, send abort [ 96.060401][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059614800: rx timeout, send abort [ 96.068850][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059616400: abort rx timeout. Force session deactivation [ 96.504371][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 97.010068][ C1] vxcan1 (unregistering): j1939_tp_rxtimer: 0xffff888059614800: abort rx timeout. Force session deactivation [ 97.127453][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 97.315443][ T4485] loop0: detected capacity change from 0 to 512 [ 97.413625][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.428855][ T2172] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.444906][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.910382][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.242849][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.280547][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.375616][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.155776][ T4521] netlink: 'syz.2.26': attribute type 1 has an invalid length. [ 99.684930][ T4521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.723709][ T4516] loop0: detected capacity change from 0 to 512 [ 99.730650][ T4516] EXT4-fs: inline encryption not supported [ 99.742653][ T4516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.770845][ T4516] EXT4-fs (loop0): 1 truncate cleaned up [ 99.777370][ T4516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.930157][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 100.008893][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 101.086636][ T4555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.40'. [ 101.184071][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 101.725243][ T4570] loop3: detected capacity change from 0 to 512 [ 102.017868][ T4570] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 102.121982][ T4570] EXT4-fs (loop3): 1 truncate cleaned up [ 102.152002][ T4570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.445425][ T4577] loop1: detected capacity change from 0 to 512 [ 102.452559][ T4577] EXT4-fs: inline encryption not supported [ 102.464469][ T4577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.798821][ T4577] EXT4-fs (loop1): 1 truncate cleaned up [ 102.805800][ T4577] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.955706][ T4586] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 104.583510][ T4586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.571692][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 105.650800][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 107.655192][ T4629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 109.853502][ T4658] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 109.960998][ T4658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.082147][ T4653] loop3: detected capacity change from 0 to 512 [ 110.089126][ T4653] EXT4-fs: inline encryption not supported [ 110.103916][ T4653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.150601][ T4653] EXT4-fs (loop3): 1 truncate cleaned up [ 110.157208][ T4653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.287900][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 110.422743][ T4637] syz.2.64 (4637) used greatest stack depth: 17648 bytes left [ 111.862332][ T4691] xt_hashlimit: max too large, truncated to 1048576 [ 112.400299][ T4702] loop4: detected capacity change from 0 to 512 [ 112.777771][ T4705] loop0: detected capacity change from 0 to 512 [ 112.784774][ T4705] EXT4-fs: inline encryption not supported [ 112.791647][ T4705] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.879546][ T4705] EXT4-fs (loop0): 1 truncate cleaned up [ 112.885955][ T4705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.965018][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 113.238280][ T4715] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 113.430573][ T4715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.520561][ T4720] loop2: detected capacity change from 0 to 164 [ 113.528458][ T4720] ======================================================= [ 113.528458][ T4720] WARNING: The mand mount option has been deprecated and [ 113.528458][ T4720] and is ignored by this kernel. Remove the mand [ 113.528458][ T4720] option from the mount to silence this warning. [ 113.528458][ T4720] ======================================================= [ 113.571264][ T4720] rock: directory entry would overflow storage [ 113.577876][ T4720] rock: sig=0x5252, size=5, remaining=3 [ 113.583520][ T4720] isofs_fill_super: root inode is not a directory. Corrupted media? [ 114.670244][ T4730] device team_slave_0 entered promiscuous mode [ 114.676839][ T4730] device team_slave_1 entered promiscuous mode [ 114.799416][ T4732] loop4: detected capacity change from 0 to 128 [ 114.808955][ T4730] device macsec1 entered promiscuous mode [ 114.844341][ T4730] device team0 entered promiscuous mode [ 114.877157][ T4730] team0: Device macsec1 is already an upper device of the team interface [ 114.941150][ T4730] device team0 left promiscuous mode [ 114.947180][ T4730] device team_slave_0 left promiscuous mode [ 114.953250][ T4730] device team_slave_1 left promiscuous mode [ 115.173028][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.200522][ T4732] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.827688][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 116.961164][ T4760] TCP: TCP_TX_DELAY enabled [ 119.203073][ T4778] loop1: detected capacity change from 0 to 512 [ 119.587059][ T4782] loop4: detected capacity change from 0 to 128 [ 119.703751][ T4782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.815374][ T4782] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.421205][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 122.065961][ T4795] sctp: failed to load transform for md5: -2 [ 124.538411][ T4831] device ip6gretap0 entered promiscuous mode [ 125.486944][ T4837] loop4: detected capacity change from 0 to 164 [ 125.509647][ T4837] rock: directory entry would overflow storage [ 125.515973][ T4837] rock: sig=0x5252, size=5, remaining=3 [ 125.521617][ T4837] isofs_fill_super: root inode is not a directory. Corrupted media? [ 125.610197][ T4843] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.749980][ T4845] loop0: detected capacity change from 0 to 128 [ 126.429123][ T4845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.541920][ T4845] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.630375][ T4855] loop1: detected capacity change from 0 to 512 [ 128.137295][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 128.182149][ T4857] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.091894][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 131.921759][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 132.818831][ T4909] Bluetooth: MGMT ver 1.22 [ 132.837281][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.844660][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.329689][ T4296] Bluetooth: hci2: command 0x0401 tx timeout [ 136.336200][ T4294] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 136.478532][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.485123][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.491342][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.497541][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.503672][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.509876][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.516034][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.522152][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.528348][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.534514][ T4918] tc action pedit 'at' offset 9 out of bounds [ 136.540724][ T4918] TC_ACT_REPEAT abuse ? [ 137.611445][ T4929] loop0: detected capacity change from 0 to 512 [ 138.123809][ C0] sched: RT throttling activated [ 138.211214][ T4931] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.544607][ T4938] tipc: Started in network mode [ 138.564089][ T4938] tipc: Node identity 4e094b59352d, cluster identity 4711 [ 138.571576][ T4938] tipc: Enabled bearer , priority 0 [ 140.131305][ T4940] device syzkaller0 entered promiscuous mode [ 140.174716][ T4940] tipc: Resetting bearer [ 140.190278][ T14] tipc: Node number set to 2065976153 [ 140.216054][ T4935] tipc: Resetting bearer [ 142.882814][ T4964] Zero length message leads to an empty skb [ 143.424950][ T4980] loop3: detected capacity change from 0 to 164 [ 143.447833][ T4980] rock: directory entry would overflow storage [ 143.454549][ T4980] rock: sig=0x5252, size=5, remaining=3 [ 143.460199][ T4980] isofs_fill_super: root inode is not a directory. Corrupted media? [ 143.591125][ T4967] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 144.609047][ T4993] loop3: detected capacity change from 0 to 512 [ 144.635648][ T4993] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 144.715422][ T4993] EXT4-fs (loop3): 1 truncate cleaned up [ 144.722979][ T4993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 144.943479][ T4935] tipc: Disabling bearer [ 145.640013][ T5009] Bluetooth: MGMT ver 1.22 [ 148.056399][ T5017] loop2: detected capacity change from 0 to 128 [ 148.068105][ T5015] device syzkaller0 entered promiscuous mode [ 148.188782][ T5015] TC_ACT_REPEAT abuse ? [ 148.214920][ T5017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.281183][ T5017] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.715443][ T5025] device syzkaller0 entered promiscuous mode [ 149.054522][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 149.286024][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 149.971431][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 150.096755][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 152.528575][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 153.382629][ T5077] loop2: detected capacity change from 0 to 512 [ 153.389580][ T5077] EXT4-fs: inline encryption not supported [ 153.403113][ T5077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.454624][ T5077] EXT4-fs (loop2): 1 truncate cleaned up [ 153.461268][ T5077] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 153.475168][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 153.759246][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 155.372204][ T5126] loop4: detected capacity change from 0 to 128 [ 155.827223][ T5126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.904145][ T5126] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.924364][ T5136] loop3: detected capacity change from 0 to 512 [ 155.945387][ T5136] EXT4-fs: inline encryption not supported [ 156.101641][ T5136] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.341787][ T5136] EXT4-fs (loop3): 1 truncate cleaned up [ 156.379094][ T5136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.561686][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 156.715515][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 156.727446][ T5151] netlink: 'syz.2.207': attribute type 10 has an invalid length. [ 156.835195][ T5151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.854948][ T5151] team0: Port device bond0 added [ 158.021284][ T5168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 158.630404][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 159.811469][ T5183] loop3: detected capacity change from 0 to 512 [ 159.883162][ T5183] EXT4-fs: inline encryption not supported [ 159.964189][ T5183] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.094590][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 160.146500][ T5183] EXT4-fs (loop3): 1 truncate cleaned up [ 160.153119][ T5183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.348617][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 161.332459][ T5220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.228'. [ 161.515841][ T5228] Bluetooth: MGMT ver 1.22 [ 163.135841][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 163.425747][ T5243] loop4: detected capacity change from 0 to 512 [ 163.465182][ T5243] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 163.543460][ T5243] EXT4-fs (loop4): 1 truncate cleaned up [ 163.644821][ T5243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.349496][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 165.518181][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 165.652494][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 165.804485][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 167.157387][ T5317] netlink: 'syz.0.267': attribute type 16 has an invalid length. [ 167.194027][ T5317] netlink: 'syz.0.267': attribute type 17 has an invalid length. [ 167.277803][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.304294][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.331002][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.409022][ T5317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.467513][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 167.487721][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'. [ 167.527261][ T5317] netpci0: tun_chr_ioctl cmd 1074025678 [ 167.574454][ T5317] netpci0: group set to 0 [ 167.760498][ T5334] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 167.776385][ T5334] device syzkaller0 entered promiscuous mode [ 167.798831][ T5334] tipc: Enabled bearer , priority 0 [ 167.833391][ T5333] tipc: Resetting bearer [ 168.169566][ T5333] tipc: Disabling bearer [ 168.229793][ T5340] loop0: detected capacity change from 0 to 16 [ 168.425685][ T5340] erofs: (device loop0): mounted with root inode @ nid 36. [ 170.166817][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 170.400532][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 171.896478][ T5400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 172.133743][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 172.701301][ T5421] loop0: detected capacity change from 0 to 512 [ 172.931096][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 173.331026][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 173.859981][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 175.221043][ T5475] bridge0: port 3(syz_tun) entered blocking state [ 175.236222][ T5475] bridge0: port 3(syz_tun) entered disabled state [ 175.258417][ T5475] device syz_tun entered promiscuous mode [ 175.273452][ T5475] bridge0: port 3(syz_tun) entered blocking state [ 175.280542][ T5475] bridge0: port 3(syz_tun) entered forwarding state [ 175.297808][ T5476] bridge0: port 4(ip6gretap0) entered blocking state [ 175.308924][ T5476] bridge0: port 4(ip6gretap0) entered disabled state [ 175.749153][ T5484] loop4: detected capacity change from 0 to 128 [ 175.796283][ T5484] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.806971][ T5484] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.465243][ T5447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.751427][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 177.928491][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 178.491676][ T5527] loop2: detected capacity change from 0 to 128 [ 178.552340][ T5527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 178.591723][ T5527] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.508330][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 179.628158][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 180.473711][ T5559] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 181.050227][ T5574] syz.0.353 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 182.096198][ T5581] loop2: detected capacity change from 0 to 128 [ 182.209928][ T5585] loop4: detected capacity change from 0 to 164 [ 182.290169][ T5585] rock: directory entry would overflow storage [ 182.296468][ T5585] rock: sig=0x5252, size=5, remaining=3 [ 182.302130][ T5585] isofs_fill_super: root inode is not a directory. Corrupted media? [ 182.384613][ T5581] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 182.430680][ T5581] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.455579][ T5563] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.464430][ T5563] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.150102][ T5563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.204542][ T5563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.353555][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 184.923259][ T5563] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.932378][ T5563] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.941796][ T5563] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.950773][ T5563] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.090222][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 185.178644][ T5607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.428584][ T5630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.446640][ T5632] tipc: Enabling of bearer rejected, failed to enable media [ 185.465537][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 185.498982][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 185.585641][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.599479][ T5636] bond1: (slave bond0): making interface the new active one [ 185.652085][ T5636] bond1: (slave bond0): Enslaving as an active interface with an up link [ 185.662318][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 185.679743][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 185.837151][ T5649] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.991672][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 186.275696][ T5672] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 186.330068][ T5672] device syzkaller0 entered promiscuous mode [ 186.455916][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 186.978234][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 187.281733][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 187.578899][ T5721] device bond0 entered promiscuous mode [ 187.615516][ T5721] device bond_slave_0 entered promiscuous mode [ 187.621994][ T5721] device bond_slave_1 entered promiscuous mode [ 187.632189][ T5721] device batadv0 entered promiscuous mode [ 187.704666][ T5721] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 187.779702][ T5721] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 187.807600][ T5721] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 187.856564][ T5721] device bond0 left promiscuous mode [ 187.879102][ T5721] device bond_slave_0 left promiscuous mode [ 187.908314][ T5721] device bond_slave_1 left promiscuous mode [ 187.921139][ T5721] device batadv0 left promiscuous mode [ 188.143063][ T5736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.211737][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 189.365172][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 192.654060][ T5794] xt_hashlimit: size too large, truncated to 1048576 [ 192.967135][ T5803] device syzkaller0 entered promiscuous mode [ 194.276470][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.283128][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.555188][ T5838] loop3: detected capacity change from 0 to 128 [ 195.632166][ T5838] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.684849][ T5838] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.820916][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 196.474130][ T5861] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 196.613082][ T5865] device syzkaller0 entered promiscuous mode [ 196.775908][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 197.375666][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.392918][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.425655][ T5884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.477758][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.525161][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.460'. [ 198.614764][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 200.038300][ T5936] loop2: detected capacity change from 0 to 164 [ 200.190159][ T5936] rock: directory entry would overflow storage [ 200.365721][ T5936] rock: sig=0x5252, size=5, remaining=3 [ 200.371398][ T5936] isofs_fill_super: root inode is not a directory. Corrupted media? [ 200.563757][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 204.146390][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 204.196843][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'. [ 206.178101][ T6001] netlink: 52 bytes leftover after parsing attributes in process `syz.2.493'. [ 206.196851][ T6001] netlink: 'syz.2.493': attribute type 8 has an invalid length. [ 206.211349][ T6001] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 206.222023][ T6001] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 206.594615][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 206.595566][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 206.609325][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 206.617221][ T4296] Bluetooth: hci1: command 0x0406 tx timeout [ 207.235643][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.500'. [ 207.502841][ T6022] loop2: detected capacity change from 0 to 512 [ 207.558274][ T6022] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 207.667856][ T6022] EXT4-fs (loop2): 1 truncate cleaned up [ 207.703479][ T6022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.952022][ T4294] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 213.190486][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 213.538450][ T6063] netlink: 72 bytes leftover after parsing attributes in process `syz.1.513'. [ 213.603899][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 213.698303][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 213.765382][ T6068] loop4: detected capacity change from 0 to 512 [ 213.850932][ T6070] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.823281][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 214.885634][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 215.014854][ T6082] device syzkaller0 entered promiscuous mode [ 215.062715][ T6089] loop2: detected capacity change from 0 to 512 [ 215.143058][ T6089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.212051][ T6089] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.910252][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 215.967095][ T6110] loop4: detected capacity change from 0 to 16 [ 216.036215][ T6110] erofs: (device loop4): mounted with root inode @ nid 36. [ 216.834930][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 217.242772][ T6119] loop1: detected capacity change from 0 to 512 [ 218.354244][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 218.623447][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.804079][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 218.840186][ T6155] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 218.868368][ T6155] device syzkaller0 entered promiscuous mode [ 219.140086][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 219.292928][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 219.407894][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 219.645983][ T6185] loop3: detected capacity change from 0 to 512 [ 221.295929][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 221.475549][ T6199] tipc: Started in network mode [ 221.480522][ T6199] tipc: Node identity ba09f0d51ea7, cluster identity 4711 [ 221.498951][ T6199] tipc: Enabled bearer , priority 0 [ 221.596043][ T6180] netlink: 'syz.0.542': attribute type 5 has an invalid length. [ 222.181648][ T6197] tipc: Disabling bearer [ 222.686063][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 222.701615][ T6217] loop1: detected capacity change from 0 to 512 [ 222.880476][ T6217] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 222.900570][ T6217] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.987938][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 223.188176][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.555'. [ 223.484383][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 223.493647][ T6232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.557'. [ 223.571192][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 224.883526][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.562'. [ 225.174002][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 225.330975][ T6261] netlink: 52 bytes leftover after parsing attributes in process `syz.0.566'. [ 225.354598][ T6261] netlink: 'syz.0.566': attribute type 8 has an invalid length. [ 225.403445][ T6261] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 225.439581][ T6261] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 226.907631][ T6266] infiniband syz0: set active [ 227.961283][ T6266] infiniband syz0: added bridge_slave_1 [ 227.995706][ T6266] rdma_rxe: unable to create cq [ 228.000954][ T6266] infiniband syz0: Couldn't create ib_mad CQ [ 228.014723][ T6266] infiniband syz0: Couldn't open port 1 [ 228.075641][ T6266] RDS/IB: syz0: added [ 228.079767][ T6266] smc: adding ib device syz0 with port count 1 [ 228.099415][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 228.164027][ T6266] smc: ib device syz0 port 1 has pnetid [ 230.289913][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 230.494470][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 232.418045][ T6326] loop1: detected capacity change from 0 to 512 [ 232.907830][ T6326] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.364102][ T6326] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.164880][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 235.225416][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 235.360851][ T6353] syz.0.591 uses obsolete (PF_INET,SOCK_PACKET) [ 236.457702][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 237.635978][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 240.848911][ T6401] loop1: detected capacity change from 0 to 512 [ 241.005352][ T6401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.034377][ T6401] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.939052][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 244.617050][ T6435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.619'. [ 245.204255][ T6440] loop3: detected capacity change from 0 to 512 [ 245.374953][ T6440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 245.464063][ T6440] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.225450][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 246.551556][ T6449] device syzkaller0 entered promiscuous mode [ 249.376559][ T6471] loop0: detected capacity change from 0 to 512 [ 249.599018][ T6475] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 251.680652][ T6483] loop0: detected capacity change from 0 to 16 [ 251.733103][ T6483] erofs: (device loop0): mounted with root inode @ nid 36. [ 252.643682][ T6494] netlink: 44 bytes leftover after parsing attributes in process `syz.4.631'. [ 252.906735][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 254.811743][ T6518] tipc: Enabling of bearer rejected, failed to enable media [ 255.782058][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.788460][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.169623][ T6529] loop0: detected capacity change from 0 to 512 [ 256.188093][ T6531] loop3: detected capacity change from 0 to 512 [ 256.266878][ T6531] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 256.350494][ T6531] EXT4-fs (loop3): 1 truncate cleaned up [ 256.360221][ T6531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 256.487894][ T6537] netlink: 44 bytes leftover after parsing attributes in process `syz.2.646'. [ 257.330237][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 257.920047][ T6555] loop2: detected capacity change from 0 to 128 [ 258.005902][ T6555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 258.104230][ T6555] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.125197][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 259.982578][ T6573] tipc: Enabling of bearer rejected, failed to enable media [ 260.314271][ T6577] netlink: 44 bytes leftover after parsing attributes in process `syz.3.658'. [ 261.525166][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 261.730224][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 262.613042][ T6594] device syzkaller0 entered promiscuous mode [ 264.892705][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 264.961168][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 265.356166][ T6620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.673'. [ 265.377414][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 267.902541][ T6642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.669'. [ 271.092935][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 274.118399][ T6679] netlink: 44 bytes leftover after parsing attributes in process `syz.3.691'. [ 274.823683][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 274.866606][ T6693] tipc: Started in network mode [ 274.930217][ T6693] tipc: Node identity 02f755c1803f, cluster identity 4711 [ 274.996498][ T6693] tipc: Enabled bearer , priority 0 [ 275.123027][ T6691] tipc: Disabling bearer [ 276.852255][ T6719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.693'. [ 278.472244][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.4.706'. [ 283.716912][ T6754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.718'. [ 283.952349][ T6757] tipc: Started in network mode [ 283.964673][ T6757] tipc: Node identity 866fa51bcb78, cluster identity 4711 [ 283.983700][ T6757] tipc: Enabled bearer , priority 0 [ 285.530793][ T6760] device syzkaller0 entered promiscuous mode [ 285.537597][ T6760] tipc: Resetting bearer [ 285.554090][ T5595] tipc: Node number set to 1293395227 [ 285.674160][ T6756] tipc: Resetting bearer [ 292.466574][ T6807] netlink: 132 bytes leftover after parsing attributes in process `syz.3.727'. [ 293.701926][ T6756] tipc: Disabling bearer [ 293.731258][ T6775] tipc: Enabled bearer , priority 0 [ 293.756234][ T6770] tipc: Disabling bearer [ 299.386001][ T6846] loop0: detected capacity change from 0 to 164 [ 299.405620][ T6846] rock: directory entry would overflow storage [ 299.411870][ T6846] rock: sig=0x5252, size=5, remaining=3 [ 299.417730][ T6846] isofs_fill_super: root inode is not a directory. Corrupted media? [ 300.794276][ T6853] tipc: Enabled bearer , priority 0 [ 300.832586][ T6852] tipc: Disabling bearer [ 304.122500][ T6863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.382561][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 304.412555][ T6894] tipc: Enabled bearer , priority 0 [ 305.265062][ T6890] tipc: Disabling bearer [ 306.385160][ T6917] loop3: detected capacity change from 0 to 128 [ 306.462850][ T6917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 306.474431][ T6917] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.343554][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 309.796397][ T6936] batman_adv: batadv0: Adding interface: syzkaller0 [ 309.803085][ T6936] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.863941][ T6936] batman_adv: batadv0: Interface activated: syzkaller0 [ 310.764111][ T6935] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 310.841598][ T6935] batman_adv: batadv0: Removing interface: syzkaller0 [ 310.870613][ T6950] tipc: Enabling of bearer rejected, failed to enable media [ 314.814880][ T6990] loop4: detected capacity change from 0 to 164 [ 314.824842][ T6990] rock: directory entry would overflow storage [ 314.831169][ T6990] rock: sig=0x5252, size=5, remaining=3 [ 314.837030][ T6990] isofs_fill_super: root inode is not a directory. Corrupted media? [ 314.910686][ T7002] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.201910][ T7026] device syzkaller0 entered promiscuous mode [ 316.281786][ T7026] tipc: Enabled bearer , priority 0 [ 316.328219][ T7025] tipc: Resetting bearer [ 317.237383][ T7025] tipc: Disabling bearer [ 317.246750][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.253113][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.387176][ T7042] loop2: detected capacity change from 0 to 16 [ 318.502590][ T7042] erofs: (device loop2): mounted with root inode @ nid 36. [ 320.281965][ T7054] Bluetooth: MGMT ver 1.22 [ 322.378000][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 322.550842][ T7070] device syzkaller0 entered promiscuous mode [ 325.394795][ T7097] loop2: detected capacity change from 0 to 512 [ 325.413047][ T7097] EXT4-fs: inline encryption not supported [ 325.471331][ T7097] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 325.797805][ T7097] EXT4-fs (loop2): 1 truncate cleaned up [ 326.075928][ T7097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 326.234731][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 329.691789][ T7123] loop2: detected capacity change from 0 to 16 [ 329.734396][ T7123] erofs: (device loop2): mounted with root inode @ nid 36. [ 330.767970][ T7128] loop2: detected capacity change from 0 to 164 [ 331.635875][ T7128] rock: directory entry would overflow storage [ 331.642118][ T7128] rock: sig=0x5252, size=5, remaining=3 [ 331.647786][ T7128] isofs_fill_super: root inode is not a directory. Corrupted media? [ 332.476207][ T7144] loop2: detected capacity change from 0 to 128 [ 332.556644][ T7144] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 332.642429][ T7144] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.158801][ T7153] device syzkaller0 entered promiscuous mode [ 336.089457][ T7165] loop3: detected capacity change from 0 to 512 [ 336.096555][ T7165] EXT4-fs: inline encryption not supported [ 336.114285][ T7165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 336.149639][ T7165] EXT4-fs (loop3): 1 truncate cleaned up [ 336.155995][ T7165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 337.507443][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 337.842651][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 338.355694][ T7183] device syzkaller0 entered promiscuous mode [ 339.091590][ T7205] loop2: detected capacity change from 0 to 16 [ 339.131877][ T7205] erofs: (device loop2): mounted with root inode @ nid 36. [ 340.016828][ T7210] loop2: detected capacity change from 0 to 512 [ 340.052125][ T7210] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 340.124610][ T7210] EXT4-fs (loop2): 1 truncate cleaned up [ 340.135452][ T7210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 340.380027][ T4294] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 341.406457][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 347.671251][ T4294] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 348.313183][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.120979][ T7259] loop1: detected capacity change from 0 to 512 [ 349.989981][ T7268] tipc: Enabling of bearer rejected, failed to enable media [ 351.604869][ T7263] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 355.961708][ T7326] tipc: Enabling of bearer rejected, failed to enable media [ 356.335085][ T7332] loop2: detected capacity change from 0 to 512 [ 356.692309][ T7334] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.610896][ T7342] loop1: detected capacity change from 0 to 512 [ 357.740599][ T7342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 357.758565][ T7342] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.429147][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 359.544823][ T7364] netlink: 52 bytes leftover after parsing attributes in process `syz.1.882'. [ 359.667564][ T7366] tipc: Enabling of bearer rejected, failed to enable media [ 359.685251][ T7368] loop2: detected capacity change from 0 to 128 [ 359.712755][ T7368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 359.744307][ T7370] loop1: detected capacity change from 0 to 512 [ 359.760178][ T7368] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.826539][ T7370] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 359.906518][ T7370] EXT4-fs (loop1): 1 truncate cleaned up [ 359.913237][ T7370] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 362.551960][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 365.455763][ T7411] tipc: Enabled bearer , priority 0 [ 365.497012][ T7410] tipc: Disabling bearer [ 365.783603][ T7414] loop3: detected capacity change from 0 to 512 [ 365.812288][ T7414] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 365.876437][ T7414] EXT4-fs (loop3): 1 truncate cleaned up [ 365.883264][ T7414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 365.935433][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 369.388120][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 369.736163][ T7441] loop0: detected capacity change from 0 to 512 [ 369.909742][ T7441] EXT4-fs: inline encryption not supported [ 369.924203][ T7447] tipc: Enabled bearer , priority 0 [ 369.965932][ T7446] tipc: Disabling bearer [ 369.979267][ T7441] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 370.105747][ T7441] EXT4-fs (loop0): 1 truncate cleaned up [ 370.295349][ T7441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 371.894506][ T7464] netlink: 44 bytes leftover after parsing attributes in process `syz.4.915'. [ 372.172554][ T7468] loop4: detected capacity change from 0 to 512 [ 372.408468][ T7468] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 372.437402][ T7468] EXT4-fs (loop4): 1 truncate cleaned up [ 372.794590][ T7468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 373.876136][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 373.969514][ T4294] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 377.054034][ T7497] tipc: Started in network mode [ 377.087480][ T7497] tipc: Node identity ae451de78f8c, cluster identity 4711 [ 377.134029][ T7497] tipc: Enabled bearer , priority 0 [ 377.183283][ T7490] tipc: Disabling bearer [ 377.190877][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 378.690037][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.696799][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.796097][ T5591] tipc: Node number set to 566828519 [ 382.411575][ T7554] loop1: detected capacity change from 0 to 512 [ 382.431091][ T7554] EXT4-fs: inline encryption not supported [ 382.448335][ T7554] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 382.505409][ T7554] EXT4-fs (loop1): 1 truncate cleaned up [ 382.518877][ T7554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 385.059556][ T7539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.212090][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 385.414957][ T7569] loop0: detected capacity change from 0 to 512 [ 386.965088][ T7569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 386.998418][ T7569] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.174584][ T7566] device syzkaller0 entered promiscuous mode [ 387.304987][ T7584] xt_hashlimit: size too large, truncated to 1048576 [ 387.930025][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 388.116330][ T7597] loop3: detected capacity change from 0 to 512 [ 388.293130][ T7597] EXT4-fs: inline encryption not supported [ 388.400799][ T7597] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 388.460295][ T7597] EXT4-fs (loop3): 1 truncate cleaned up [ 388.659530][ T7597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 389.833298][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 393.358193][ T7628] loop2: detected capacity change from 0 to 512 [ 393.475222][ T7628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 393.553928][ T7628] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.541962][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 395.973603][ T7649] loop1: detected capacity change from 0 to 512 [ 396.061686][ T7649] EXT4-fs: inline encryption not supported [ 396.141797][ T7649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 396.198733][ T7660] device syzkaller0 entered promiscuous mode [ 396.224988][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 396.326684][ T7662] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.336028][ T7662] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.345137][ T7662] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.353942][ T7662] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.388304][ T7649] EXT4-fs (loop1): 1 truncate cleaned up [ 396.472541][ T7649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 396.896653][ T7678] loop0: detected capacity change from 0 to 164 [ 397.464839][ T7678] rock: directory entry would overflow storage [ 397.471143][ T7678] rock: sig=0x5252, size=5, remaining=3 [ 397.477370][ T7678] isofs_fill_super: root inode is not a directory. Corrupted media? [ 398.817587][ T7684] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 400.951326][ T7688] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 401.017307][ T7688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.663420][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 405.430400][ T7733] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 405.541961][ T7733] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.818966][ T7734] loop3: detected capacity change from 0 to 512 [ 405.860828][ T7734] EXT4-fs: inline encryption not supported [ 405.926169][ T7734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 406.022554][ T7734] EXT4-fs (loop3): 1 truncate cleaned up [ 406.225388][ T7734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 408.844546][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 409.560898][ T7796] device syzkaller0 entered promiscuous mode [ 409.894661][ T7797] loop0: detected capacity change from 0 to 164 [ 411.423606][ T7797] rock: directory entry would overflow storage [ 411.430078][ T7797] rock: sig=0x5252, size=5, remaining=3 [ 411.435916][ T7797] isofs_fill_super: root inode is not a directory. Corrupted media? [ 411.531930][ T7794] tipc: Enabled bearer , priority 0 [ 412.034391][ T7808] loop4: detected capacity change from 0 to 512 [ 412.135383][ T7808] EXT4-fs: inline encryption not supported [ 412.278650][ T7808] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 412.378485][ T7808] EXT4-fs (loop4): 1 truncate cleaned up [ 412.402029][ T7808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 413.941170][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 414.057656][ T7849] loop1: detected capacity change from 0 to 164 [ 414.078912][ T7849] rock: directory entry would overflow storage [ 414.085413][ T7849] rock: sig=0x5252, size=5, remaining=3 [ 414.091071][ T7849] isofs_fill_super: root inode is not a directory. Corrupted media? [ 415.071792][ T7865] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 415.125101][ T7865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.253485][ T7871] device syzkaller0 entered promiscuous mode [ 415.341778][ T7871] tipc: Enabled bearer , priority 0 [ 415.367491][ T7876] device syzkaller0 entered promiscuous mode [ 415.489788][ T7870] tipc: Resetting bearer [ 415.567666][ T7870] tipc: Disabling bearer [ 416.133445][ T7882] loop0: detected capacity change from 0 to 512 [ 416.140423][ T7882] EXT4-fs: inline encryption not supported [ 416.147032][ T7882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 416.184057][ T7882] EXT4-fs (loop0): 1 truncate cleaned up [ 416.190352][ T7882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 416.536849][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 416.591187][ T7894] loop1: detected capacity change from 0 to 164 [ 416.614827][ T7894] rock: directory entry would overflow storage [ 416.621200][ T7894] rock: sig=0x5252, size=5, remaining=3 [ 416.627380][ T7894] isofs_fill_super: root inode is not a directory. Corrupted media? [ 417.033920][ T7895] loop2: detected capacity change from 0 to 512 [ 417.176672][ T7895] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 417.223916][ T7895] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.458212][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 418.517937][ T7926] device syzkaller0 entered promiscuous mode [ 418.557184][ T7926] tipc: Enabled bearer , priority 0 [ 418.584522][ T7925] tipc: Resetting bearer [ 418.670341][ T7925] tipc: Disabling bearer [ 420.817622][ T7934] loop2: detected capacity change from 0 to 512 [ 420.866465][ T7934] EXT4-fs: inline encryption not supported [ 420.899619][ T7934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 420.942437][ T7934] EXT4-fs (loop2): 1 truncate cleaned up [ 420.984113][ T7934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 421.110540][ T7945] device syzkaller0 entered promiscuous mode [ 421.161688][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 421.441063][ T7956] loop0: detected capacity change from 0 to 512 [ 421.518756][ T7956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 421.539548][ T7956] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.230234][ T7971] tipc: Enabled bearer , priority 0 [ 423.309796][ T7970] tipc: Disabling bearer [ 423.353015][ T7973] device syzkaller0 entered promiscuous mode [ 423.372676][ T7973] tipc: Enabled bearer , priority 0 [ 423.412605][ T7972] tipc: Resetting bearer [ 423.495856][ T7972] tipc: Disabling bearer [ 423.885146][ T7984] loop2: detected capacity change from 0 to 512 [ 423.892301][ T7984] EXT4-fs: inline encryption not supported [ 423.974318][ T7984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 424.016395][ T7984] EXT4-fs (loop2): 1 truncate cleaned up [ 424.036798][ T7984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 424.181250][ T7989] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1078'. [ 424.204541][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 424.290773][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 426.215868][ T8008] tipc: Enabled bearer , priority 0 [ 426.286302][ T8007] tipc: Disabling bearer [ 426.440569][ T8016] loop2: detected capacity change from 0 to 512 [ 426.491501][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 426.571143][ T8020] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 426.642262][ T8016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 426.691350][ T8025] loop4: detected capacity change from 0 to 512 [ 426.727006][ T8016] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.758325][ T8025] EXT4-fs: inline encryption not supported [ 426.827688][ T8025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 427.092588][ T8025] EXT4-fs (loop4): 1 truncate cleaned up [ 427.184549][ T8025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 427.337052][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 428.153490][ T8048] device syzkaller0 entered promiscuous mode [ 428.201583][ T8048] tipc: Enabled bearer , priority 0 [ 428.319837][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 429.749733][ T4286] tipc: Node number set to 2194167233 [ 429.802457][ T8045] tipc: Resetting bearer [ 429.865924][ T4294] Bluetooth: hci0: unexpected event 0x0e length: 1 < 3 [ 429.916211][ T8045] tipc: Disabling bearer [ 430.927216][ T8070] loop2: detected capacity change from 0 to 512 [ 430.959465][ T8070] EXT4-fs: inline encryption not supported [ 431.089697][ T8070] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 431.154319][ T8070] EXT4-fs (loop2): 1 truncate cleaned up [ 431.160803][ T8070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 431.205232][ T8092] loop4: detected capacity change from 0 to 512 [ 431.222490][ T8074] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 431.371818][ T8092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 431.389740][ T8092] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.093659][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 433.510090][ T8108] device syzkaller0 entered promiscuous mode [ 433.570218][ T8108] tipc: Enabled bearer , priority 0 [ 433.614684][ T8107] tipc: Resetting bearer [ 433.792821][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 433.836017][ T8107] tipc: Disabling bearer [ 434.740837][ T8135] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1123'. [ 435.100178][ T8142] loop0: detected capacity change from 0 to 512 [ 435.144644][ T8142] EXT4-fs: inline encryption not supported [ 435.180668][ T8142] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.231718][ T8142] EXT4-fs (loop0): 1 truncate cleaned up [ 435.289458][ T8142] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 435.750055][ T8156] loop3: detected capacity change from 0 to 512 [ 435.873373][ T8156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 435.901607][ T8156] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.145229][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 436.886046][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 437.071445][ T8178] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1134'. [ 437.198723][ T8185] loop0: detected capacity change from 0 to 128 [ 437.290354][ T8185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 437.346415][ T8185] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 438.247870][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 438.287233][ T8197] loop2: detected capacity change from 0 to 16 [ 438.305575][ T8197] erofs: (device loop2): mounted with root inode @ nid 36. [ 439.098107][ T8216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1149'. [ 439.383324][ T8230] device syzkaller0 left promiscuous mode [ 439.881749][ T8246] loop1: detected capacity change from 0 to 16 [ 439.939362][ T8246] erofs: (device loop1): mounted with root inode @ nid 36. [ 440.674228][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.680625][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.600161][ T8267] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1167'. [ 443.543455][ T8306] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1179'. [ 443.835369][ T8312] loop2: detected capacity change from 0 to 16 [ 443.864518][ T8312] erofs: (device loop2): mounted with root inode @ nid 36. [ 444.918046][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.925396][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.932271][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.939168][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.946021][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.952823][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.959692][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.966562][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.973430][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.980295][ T8328] tc action pedit offset must be on 32 bit boundaries [ 444.987208][ T8328] 0: reclassify loop, rule prio 0, protocol 800 [ 445.187448][ T8330] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1189'. [ 445.330181][ T8334] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1191'. [ 446.552006][ T8353] loop1: detected capacity change from 0 to 16 [ 446.641292][ T8353] erofs: (device loop1): mounted with root inode @ nid 36. [ 447.867657][ T8393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1205'. [ 447.971051][ T8391] device syzkaller0 entered promiscuous mode [ 450.811909][ T8423] loop0: detected capacity change from 0 to 16 [ 450.844235][ T8423] erofs: (device loop0): mounted with root inode @ nid 36. [ 451.278424][ T8439] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 451.489024][ T8441] device syzkaller0 entered promiscuous mode [ 451.664552][ T8439] tipc: Enabled bearer , priority 0 [ 451.673570][ T8438] tipc: Resetting bearer [ 451.743910][ T8444] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1220'. [ 452.135389][ T8438] tipc: Disabling bearer [ 452.232248][ T8452] loop3: detected capacity change from 0 to 164 [ 452.365851][ T8452] rock: directory entry would overflow storage [ 452.372157][ T8452] rock: sig=0x5252, size=5, remaining=3 [ 452.378183][ T8452] isofs_fill_super: root inode is not a directory. Corrupted media? [ 453.299822][ T8465] device syzkaller0 entered promiscuous mode [ 453.485165][ T8485] loop2: detected capacity change from 0 to 16 [ 453.521192][ T8485] erofs: (device loop2): mounted with root inode @ nid 36. [ 454.289583][ T8496] loop2: detected capacity change from 0 to 128 [ 454.343931][ T8496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 454.359802][ T8496] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 455.164842][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 456.945387][ T8510] device syzkaller0 entered promiscuous mode [ 457.163435][ T8518] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 457.195756][ T8518] device syzkaller0 entered promiscuous mode [ 457.218754][ T8518] tipc: Enabled bearer , priority 0 [ 457.241576][ T8516] tipc: Resetting bearer [ 457.295181][ T8516] tipc: Disabling bearer [ 458.508451][ T8539] device syzkaller0 entered promiscuous mode [ 460.344709][ T8573] loop2: detected capacity change from 0 to 16 [ 460.372548][ T8573] erofs: (device loop2): mounted with root inode @ nid 36. [ 463.147658][ T8607] loop2: detected capacity change from 0 to 16 [ 463.197814][ T8607] erofs: (device loop2): mounted with root inode @ nid 36. [ 464.158161][ T8611] device syzkaller0 entered promiscuous mode [ 465.045774][ T8625] loop4: detected capacity change from 0 to 512 [ 465.071626][ T8625] EXT4-fs: inline encryption not supported [ 465.119738][ T8625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 465.184428][ T8625] EXT4-fs (loop4): 1 truncate cleaned up [ 465.220485][ T8625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 465.451285][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 467.253899][ T8641] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65500) ! [ 467.293932][ T8653] tipc: Resetting bearer [ 468.499841][ T8690] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 468.515713][ T8687] loop2: detected capacity change from 0 to 16 [ 468.539658][ T8687] erofs: (device loop2): mounted with root inode @ nid 36. [ 469.221246][ T8689] device syzkaller0 entered promiscuous mode [ 472.765332][ T8742] loop4: detected capacity change from 0 to 16 [ 472.804044][ T8742] erofs: (device loop4): mounted with root inode @ nid 36. [ 475.239378][ T8798] loop3: detected capacity change from 0 to 16 [ 475.293137][ T8798] erofs: (device loop3): mounted with root inode @ nid 36. [ 477.139120][ T8839] device syzkaller0 entered promiscuous mode [ 477.151029][ T8839] tipc: Enabled bearer , priority 0 [ 477.181034][ T8838] tipc: Resetting bearer [ 477.265836][ T8838] tipc: Disabling bearer [ 477.292661][ T8847] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1336'. [ 477.517723][ T8856] loop4: detected capacity change from 0 to 16 [ 477.576017][ T8856] erofs: (device loop4): mounted with root inode @ nid 36. [ 478.547908][ T8873] loop2: detected capacity change from 0 to 128 [ 478.628307][ T8873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 478.660475][ T8873] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.898211][ T8884] device syzkaller0 entered promiscuous mode [ 478.943032][ T8884] tipc: Enabled bearer , priority 0 [ 479.137316][ T8898] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1350'. [ 479.250812][ T8883] tipc: Resetting bearer [ 479.341317][ T8883] tipc: Disabling bearer [ 479.411174][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 479.553466][ T8903] device syzkaller0 entered promiscuous mode [ 481.980618][ T8951] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1364'. [ 482.652477][ T8980] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1376'. [ 482.776414][ T8982] device syzkaller0 entered promiscuous mode [ 487.347339][ T9000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.426248][ T9030] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1389'. [ 487.905351][ T9046] device syzkaller0 entered promiscuous mode [ 489.222657][ T9069] loop1: detected capacity change from 0 to 128 [ 489.260512][ T9069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 489.269991][ T9069] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.118232][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 491.673393][ T9087] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1405'. [ 491.687102][ T9088] loop0: detected capacity change from 0 to 16 [ 491.732978][ T9088] erofs: (device loop0): mounted with root inode @ nid 36. [ 492.571825][ T9099] device syzkaller0 entered promiscuous mode [ 495.374026][ T9129] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1420'. [ 495.568914][ T9134] loop4: detected capacity change from 0 to 16 [ 495.644048][ T9134] erofs: (device loop4): mounted with root inode @ nid 36. [ 497.532258][ T9173] loop2: detected capacity change from 0 to 512 [ 497.551264][ T9173] EXT4-fs: inline encryption not supported [ 497.589686][ T9173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 497.647571][ T9173] EXT4-fs (loop2): 1 truncate cleaned up [ 497.660154][ T9173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 497.969755][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 499.741069][ T9189] tipc: Enabled bearer , priority 10 [ 499.759838][ T9188] tipc: Resetting bearer [ 499.866002][ T9188] tipc: Disabling bearer [ 500.956587][ T9193] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 501.478032][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.486850][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.277164][ T9208] loop0: detected capacity change from 0 to 512 [ 503.320248][ T9208] EXT4-fs: inline encryption not supported [ 503.348353][ T9208] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 503.409964][ T9208] EXT4-fs (loop0): 1 truncate cleaned up [ 503.420271][ T9208] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 503.613563][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 503.836587][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1459'. [ 504.032912][ T9243] loop0: detected capacity change from 0 to 128 [ 504.142149][ T9243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 504.153122][ T9244] 0: reclassify loop, rule prio 0, protocol 03 [ 504.188553][ T9243] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 505.897924][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 508.030364][ T9326] loop4: detected capacity change from 0 to 512 [ 508.068209][ T9326] EXT4-fs: inline encryption not supported [ 508.304543][ T9326] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 508.539517][ T9326] EXT4-fs (loop4): 1 truncate cleaned up [ 508.550193][ T9326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 508.590909][ T9335] device syzkaller0 entered promiscuous mode [ 508.935886][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 509.069077][ T9348] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1477'. [ 509.178914][ T9351] device syzkaller0 entered promiscuous mode [ 509.670220][ T9358] loop2: detected capacity change from 0 to 16 [ 509.687917][ T9358] erofs: (device loop2): mounted with root inode @ nid 36. [ 512.919644][ T9373] tipc: Enabling of bearer rejected, failed to enable media [ 514.519920][ T9391] loop1: detected capacity change from 0 to 128 [ 514.559364][ T9391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 514.631413][ T9391] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 516.335750][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 516.512370][ T9408] device veth11 entered promiscuous mode [ 516.627965][ T9415] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1496'. [ 516.761521][ T9417] loop0: detected capacity change from 0 to 16 [ 516.826780][ T9417] erofs: (device loop0): mounted with root inode @ nid 36. [ 520.628990][ T9428] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1490'. [ 520.940161][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1503'. [ 524.442437][ T9462] loop0: detected capacity change from 0 to 16 [ 524.474917][ T9462] erofs: (device loop0): mounted with root inode @ nid 36. [ 525.474721][ T9480] tipc: Enabling of bearer rejected, failed to enable media [ 525.605952][ T9483] device syzkaller0 left promiscuous mode [ 525.646027][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 530.351834][ T9513] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1514'. [ 531.743491][ T9519] loop3: detected capacity change from 0 to 512 [ 531.750488][ T9519] EXT4-fs: inline encryption not supported [ 531.768922][ T9519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 531.821957][ T9519] EXT4-fs (loop3): 1 truncate cleaned up [ 531.828577][ T9519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 531.971116][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 532.167931][ T9544] loop4: detected capacity change from 0 to 16 [ 532.185143][ T9544] erofs: (device loop4): mounted with root inode @ nid 36. [ 538.565885][ T9548] device syzkaller0 entered promiscuous mode [ 538.572147][ T9548] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 540.387167][ T9595] loop1: detected capacity change from 0 to 16 [ 540.443917][ T9595] erofs: (device loop1): mounted with root inode @ nid 36. [ 543.307475][ T9611] device syzkaller0 entered promiscuous mode [ 543.326936][ T9613] netlink: 'syz.3.1549': attribute type 3 has an invalid length. [ 551.134804][ T9687] device syzkaller0 entered promiscuous mode [ 551.166503][ T9691] device syzkaller0 left promiscuous mode [ 551.172612][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 554.879278][ T9712] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.825752][ T9744] loop3: detected capacity change from 0 to 128 [ 558.993507][ T9744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 559.022606][ T9744] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 560.662343][ T9766] loop2: detected capacity change from 0 to 512 [ 560.669462][ T9766] EXT4-fs: inline encryption not supported [ 560.687492][ T9766] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 560.721447][ T9766] EXT4-fs (loop2): 1 truncate cleaned up [ 560.727832][ T9766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 560.933008][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 561.026895][ T9778] Cannot find map_set index 135 as target [ 561.430570][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 561.449717][ T9791] ip_tables: iptables: counters copy to user failed while replacing table [ 562.631085][ T9820] loop0: detected capacity change from 0 to 128 [ 562.712705][ T9820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 562.731796][ T9820] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.917565][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.926069][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.589562][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 564.930591][ T9858] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 567.420747][ T9892] batman_adv: batadv0: Adding interface: veth0 [ 567.461339][ T9892] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.498192][ T9892] batman_adv: batadv0: Interface activated: veth0 [ 567.576832][ T9892] batman_adv: batadv0: Interface deactivated: veth0 [ 567.594373][ T9892] batman_adv: batadv0: Removing interface: veth0 [ 567.608356][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.626965][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.891353][ T9892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.146632][ T9892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.542376][ T9894] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 572.256313][T10006] loop2: detected capacity change from 0 to 512 [ 572.278991][T10006] EXT4-fs: inline encryption not supported [ 572.288750][T10006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 572.315680][T10006] EXT4-fs (loop2): 1 truncate cleaned up [ 572.322379][T10006] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 572.508507][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 572.855324][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b2fb400: rx timeout, send abort [ 572.864242][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880567d8400: rx timeout, send abort [ 572.872636][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b2fb400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 572.873197][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880567d8400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 573.775365][T10033] loop1: detected capacity change from 0 to 512 [ 573.782302][T10033] EXT4-fs: inline encryption not supported [ 573.789556][T10033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 573.835915][T10033] EXT4-fs (loop1): 1 truncate cleaned up [ 573.842242][T10033] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 574.024785][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 575.338969][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1692'. [ 575.356494][T10073] loop4: detected capacity change from 0 to 512 [ 576.334322][T10073] EXT4-fs: inline encryption not supported [ 576.386821][T10073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 576.443058][T10073] EXT4-fs (loop4): 1 truncate cleaned up [ 576.459970][T10073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 576.649478][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 576.728633][T10091] device syzkaller0 entered promiscuous mode [ 579.618635][T10132] loop2: detected capacity change from 0 to 512 [ 579.635258][T10132] EXT4-fs: inline encryption not supported [ 579.672787][T10132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 579.701083][T10132] EXT4-fs (loop2): 1 truncate cleaned up [ 579.712208][T10132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 579.836661][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 581.407474][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 581.460129][T10145] loop2: detected capacity change from 0 to 16 [ 581.488709][T10145] erofs: (device loop2): mounted with root inode @ nid 36. [ 582.253921][T10164] loop1: detected capacity change from 0 to 512 [ 582.343220][T10164] EXT4-fs: inline encryption not supported [ 582.503885][T10164] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 582.556052][T10164] EXT4-fs (loop1): 1 truncate cleaned up [ 582.659834][T10164] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 582.741526][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 585.260598][T10199] device syzkaller0 entered promiscuous mode [ 587.590914][T10240] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 593.948321][T10261] device syzkaller0 entered promiscuous mode [ 596.110928][T10321] device syzkaller0 entered promiscuous mode [ 598.240182][T10347] Bluetooth: MGMT ver 1.22 [ 604.887441][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1804'. [ 604.912761][T10398] tipc: Can't bind to reserved service type 0 [ 608.932430][T10340] tipc: Enabling of bearer rejected, already enabled [ 608.967855][T10398] device veth1_macvtap left promiscuous mode [ 608.995550][T10398] device macsec0 entered promiscuous mode [ 610.346002][T10413] device syzkaller0 entered promiscuous mode [ 613.618870][T10455] device syzkaller0 entered promiscuous mode [ 613.633906][T10455] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 613.666808][T10456] tipc: Enabled bearer , priority 0 [ 614.757513][T10454] tipc: Disabling bearer [ 614.825004][ T4286] tipc: Node number set to 2762928341 [ 617.344916][T10505] device syzkaller0 entered promiscuous mode [ 621.582057][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1847'. [ 621.695669][T10550] loop0: detected capacity change from 0 to 16 [ 621.722623][T10550] erofs: (device loop0): mounted with root inode @ nid 36. [ 622.989546][T10567] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 623.000916][T10567] tipc: Enabled bearer , priority 0 [ 624.247921][T10566] tipc: Disabling bearer [ 624.317012][T10577] device syzkaller0 entered promiscuous mode [ 624.358908][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.365660][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.696209][T10581] tipc: Enabling of bearer rejected, failed to enable media [ 624.898430][T10581] device syzkaller0 entered promiscuous mode [ 624.918499][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 629.561461][T10588] (unnamed net_device) (uninitialized): option arp_validate: invalid value (262147) [ 629.571271][T10589] bond3: option arp_validate: invalid value (262147) [ 629.592220][T10610] tipc: Enabling of bearer rejected, failed to enable media [ 629.867573][T10646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1875'. [ 629.963260][T10653] loop1: detected capacity change from 0 to 16 [ 629.996529][T10653] erofs: (device loop1): mounted with root inode @ nid 36. [ 631.849397][T10676] device syzkaller0 entered promiscuous mode [ 631.874406][T10678] tipc: Enabling of bearer rejected, failed to enable media [ 632.191231][T10678] device syzkaller0 entered promiscuous mode [ 634.976597][T10688] device syzkaller0 entered promiscuous mode [ 634.984799][T10701] device syzkaller0 entered promiscuous mode [ 635.619920][T10742] device syzkaller0 entered promiscuous mode [ 635.791664][T10757] tipc: Enabling of bearer rejected, failed to enable media [ 635.983997][T10757] device syzkaller0 entered promiscuous mode [ 641.358931][T10856] device syzkaller0 left promiscuous mode [ 641.367664][T10856] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 641.379879][T10858] device syzkaller0 entered promiscuous mode [ 641.396463][T10857] device syzkaller0 entered promiscuous mode [ 641.871880][T10868] device syzkaller0 entered promiscuous mode [ 645.609619][T10920] device syzkaller0 entered promiscuous mode [ 645.648416][T10923] device syzkaller0 entered promiscuous mode [ 645.665049][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 645.768638][T10927] tun0: tun_chr_ioctl cmd 1074025677 [ 645.799545][T10927] tun0: linktype set to 778 [ 645.812528][T10927] tun0: tun_chr_ioctl cmd 1074025681 [ 646.830891][T10944] IPv6: NLM_F_REPLACE set, but no existing node found! [ 647.504179][T10972] device syzkaller0 entered promiscuous mode [ 647.556042][T10978] block nbd0: not configured, cannot reconfigure [ 647.871964][T10985] netlink: 'syz.1.1970': attribute type 9 has an invalid length. [ 649.202990][T11006] device syzkaller0 entered promiscuous mode [ 649.526073][T11019] SET target dimension over the limit! [ 649.564613][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 650.199025][T11023] device syzkaller0 entered promiscuous mode [ 650.539538][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1990'. [ 650.996900][T11057] device syzkaller0 entered promiscuous mode [ 651.879103][T11070] ip_tables: iptables: counters copy to user failed while replacing table [ 654.899737][T11100] loop1: detected capacity change from 0 to 16 [ 654.932838][T11100] erofs: (device loop1): mounted with root inode @ nid 36. [ 655.443539][T11114] ip_tables: iptables: counters copy to user failed while replacing table [ 656.681652][T11131] device syzkaller0 entered promiscuous mode [ 656.808923][T11135] device syzkaller0 entered promiscuous mode [ 657.042849][T11146] ip_tables: iptables: counters copy to user failed while replacing table [ 657.795871][T11156] loop4: detected capacity change from 0 to 16 [ 657.881197][T11156] erofs: (device loop4): mounted with root inode @ nid 36. [ 658.837253][T11173] device syzkaller0 left promiscuous mode [ 658.843254][T11173] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 658.951858][T11177] device syzkaller0 entered promiscuous mode [ 659.012301][T11183] ip_tables: iptables: counters copy to user failed while replacing table [ 659.057202][T11182] device syzkaller0 entered promiscuous mode [ 659.368715][T11192] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) ! [ 659.597270][T11196] device syzkaller0 entered promiscuous mode [ 659.727263][T11196] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 660.355099][T11215] ip_tables: iptables: counters copy to user failed while replacing table [ 660.600338][T11220] device syzkaller0 entered promiscuous mode [ 660.807338][T11229] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 660.858225][T11229] device syzkaller0 entered promiscuous mode [ 661.873997][T11243] ip_tables: iptables: counters copy to user failed while replacing table [ 662.105937][T11252] loop1: detected capacity change from 0 to 16 [ 662.149953][T11252] erofs: (device loop1): mounted with root inode @ nid 36. [ 662.235054][T11258] device syzkaller0 entered promiscuous mode [ 664.268624][T11313] loop2: detected capacity change from 0 to 16 [ 664.295241][T11313] erofs: (device loop2): mounted with root inode @ nid 36. [ 666.542329][T11305] device syzkaller0 entered promiscuous mode [ 667.370092][T11352] device syzkaller0 entered promiscuous mode [ 670.038078][T11381] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) ! [ 673.625366][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'. [ 673.641648][T11404] device syzkaller0 entered promiscuous mode [ 673.922130][T11456] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 674.007329][T11454] device syzkaller0 entered promiscuous mode [ 674.021363][T11456] device syzkaller0 entered promiscuous mode [ 679.200590][T11499] loop3: detected capacity change from 0 to 16 [ 679.411619][T11499] erofs: (device loop3): mounted with root inode @ nid 36. [ 681.030258][T11527] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 681.138992][T11530] device syzkaller0 entered promiscuous mode [ 681.151018][T11527] device syzkaller0 entered promiscuous mode [ 681.736641][T11556] loop2: detected capacity change from 0 to 16 [ 681.758081][T11556] erofs: (device loop2): mounted with root inode @ nid 36. [ 684.487645][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 685.797810][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.108200][T11622] device syzkaller0 entered promiscuous mode [ 686.465467][T11630] TC_ACT_REPEAT abuse ? [ 688.290633][T11657] batman_adv: batadv0: Adding interface: veth0 [ 688.326425][T11657] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.390613][T11657] batman_adv: batadv0: Interface activated: veth0 [ 688.465153][T11657] batman_adv: batadv0: Interface deactivated: veth0 [ 688.503951][T11657] batman_adv: batadv0: Removing interface: veth0 [ 688.540485][T11657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.560663][T11657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.570740][T11657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.587565][T11657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.742429][T11675] device syzkaller0 entered promiscuous mode [ 689.178005][T11691] device syzkaller0 entered promiscuous mode [ 691.850899][T11703] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) ! [ 692.629886][T11756] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 692.700387][T11758] device syzkaller0 entered promiscuous mode [ 692.711220][T11756] device syzkaller0 entered promiscuous mode [ 695.138716][T11734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.784321][T11792] device syzkaller0 entered promiscuous mode [ 695.815234][T11792] tipc: Enabled bearer , priority 0 [ 695.835757][T11791] tipc: Resetting bearer [ 696.679268][T11791] tipc: Disabling bearer [ 696.807351][T11807] device syzkaller0 left promiscuous mode [ 696.813482][T11807] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 696.951163][T11811] device syzkaller0 entered promiscuous mode [ 697.071513][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 697.092169][T11819] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (238) [ 697.237788][T11822] device syzkaller0 entered promiscuous mode [ 697.275908][T11829] ip_tables: iptables: counters copy to user failed while replacing table [ 697.289907][T11830] ksmbd: Unknown IPC event: 3, ignore. [ 697.305809][T11829] raw_sendmsg: syz.3.2245 forgot to set AF_INET. Fix it! [ 699.240570][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2246'. [ 699.651882][T11859] loop2: detected capacity change from 0 to 16 [ 699.691211][T11859] erofs: (device loop2): mounted with root inode @ nid 36. [ 699.944516][T11862] netlink: 'syz.0.2253': attribute type 4 has an invalid length. [ 700.730416][T11877] device syzkaller0 entered promiscuous mode [ 700.916002][T11882] device syzkaller0 entered promiscuous mode [ 701.897563][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880442b9c00: rx timeout, send abort [ 701.906129][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880442b9c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 703.421284][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2264'. [ 703.460353][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2267'. [ 703.625761][T11920] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2270'. [ 703.766258][T11929] loop2: detected capacity change from 0 to 16 [ 703.805161][T11929] erofs: (device loop2): mounted with root inode @ nid 36. [ 703.935795][T11931] device syzkaller0 entered promiscuous mode [ 704.803765][T11954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2280'. [ 704.814661][T11950] device syzkaller0 entered promiscuous mode [ 704.829561][T11952] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 705.039308][T11956] device syzkaller0 entered promiscuous mode [ 706.358592][T11989] ip_tables: iptables: counters copy to user failed while replacing table [ 706.474238][T11991] loop0: detected capacity change from 0 to 16 [ 706.491694][T11991] erofs: (device loop0): mounted with root inode @ nid 36. [ 708.949590][T12017] bridge0: port 3(syz_tun) entered blocking state [ 708.973881][T12017] bridge0: port 3(syz_tun) entered disabled state [ 708.982008][T12017] device syz_tun entered promiscuous mode [ 708.989649][T12017] bridge0: port 3(syz_tun) entered blocking state [ 708.997308][T12017] bridge0: port 3(syz_tun) entered forwarding state [ 709.101225][T12025] device syzkaller0 entered promiscuous mode [ 709.121688][T12030] loop0: detected capacity change from 0 to 16 [ 709.141027][T12030] erofs: (device loop0): mounted with root inode @ nid 36. [ 710.051578][T12046] device syzkaller0 entered promiscuous mode [ 710.072635][T12046] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 710.447445][T12063] loop3: detected capacity change from 0 to 16 [ 710.456449][T12063] erofs: (device loop3): mounted with root inode @ nid 36. [ 710.489381][T11861] udevd[11861]: symlink '../../loop3' '/dev/disk/by-diskseq/352.tmp-b7:3' failed: Read-only file system [ 710.580425][T11861] udevd[11861]: symlink '../../loop3' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:3' failed: Read-only file system [ 711.091073][T11861] udevd[11861]: symlink '../../loop3' '/dev/disk/by-diskseq/352.tmp-b7:3' failed: Read-only file system [ 711.108187][T11861] udevd[11861]: symlink '../../loop3' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:3' failed: Read-only file system [ 711.175523][T12069] device syzkaller0 entered promiscuous mode [ 711.191031][T11861] udevd[11861]: symlink '../../loop3' '/dev/disk/by-diskseq/352.tmp-b7:3' failed: Read-only file system [ 711.216182][T11861] udevd[11861]: symlink '../../loop3' '/dev/disk/by-diskseq/352.tmp-b7:3' failed: Read-only file system [ 711.442029][T12076] device syzkaller0 entered promiscuous mode [ 711.672641][T12083] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 711.682137][T12083] overlayfs: overlapping lowerdir path [ 711.720994][T12083] device lo entered promiscuous mode [ 711.757807][T12083] device tunl0 entered promiscuous mode [ 711.788663][T12083] device gre0 entered promiscuous mode [ 711.900339][T12083] device gretap0 entered promiscuous mode [ 711.949068][T12083] device erspan0 entered promiscuous mode [ 712.036087][T12083] device ip_vti0 entered promiscuous mode [ 712.067000][T12083] device ip6_vti0 entered promiscuous mode [ 712.111844][T12083] device sit0 entered promiscuous mode [ 712.240272][T12083] device ip6tnl0 entered promiscuous mode [ 712.291413][T12083] device ip6gre0 entered promiscuous mode [ 712.309898][T12098] Cannot find add_set index 4 as target [ 712.376198][T12083] bridge0: port 3(syz_tun) entered disabled state [ 712.430925][T12083] device ip6gretap0 entered promiscuous mode [ 712.487694][T12098] loop0: detected capacity change from 0 to 512 [ 712.515171][T12083] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.522631][T12083] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.537650][T12098] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 712.556634][T12083] device bridge0 entered promiscuous mode [ 712.614112][T12083] device vcan0 entered promiscuous mode [ 712.637348][T12083] device bond0 entered promiscuous mode [ 712.643200][T12083] device bond_slave_0 entered promiscuous mode [ 712.652197][T11861] udevd[11861]: symlink '../../loop0' '/dev/disk/by-diskseq/354.tmp-b7:0' failed: Read-only file system [ 712.654779][T12083] device bond_slave_1 entered promiscuous mode [ 712.678712][T11861] udevd[11861]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 712.705207][T12083] device team0 entered promiscuous mode [ 712.707585][T11861] udevd[11861]: symlink '../../loop0' '/dev/disk/by-diskseq/354.tmp-b7:0' failed: Read-only file system [ 712.711221][T12083] device team_slave_0 entered promiscuous mode [ 712.730764][T12083] device team_slave_1 entered promiscuous mode [ 712.760464][T11861] udevd[11861]: symlink '../../loop0' '/dev/disk/by-diskseq/354.tmp-b7:0' failed: Read-only file system [ 712.782724][T12083] device dummy0 entered promiscuous mode [ 712.816282][T12083] device nlmon0 entered promiscuous mode [ 712.823498][T12083] device caif0 entered promiscuous mode [ 712.845302][T12083] device batadv0 entered promiscuous mode [ 712.875918][T12083] device veth0 entered promiscuous mode [ 712.905055][T12083] device veth1 entered promiscuous mode [ 712.918241][T12033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.945669][T12083] device wg0 entered promiscuous mode [ 713.015011][T12083] device wg1 entered promiscuous mode [ 713.040360][T12083] device wg2 entered promiscuous mode [ 713.084668][T12083] device veth0_to_bridge entered promiscuous mode [ 713.174529][T12083] device veth1_to_bridge entered promiscuous mode [ 713.262362][T12083] device veth0_to_bond entered promiscuous mode [ 713.327133][T12083] device veth1_to_bond entered promiscuous mode [ 713.381317][T12083] device veth0_to_team entered promiscuous mode [ 713.430820][T12083] device veth1_to_team entered promiscuous mode [ 713.478312][T12083] device veth0_to_batadv entered promiscuous mode [ 713.494557][T12083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.539230][T12083] device batadv_slave_0 entered promiscuous mode [ 713.574158][T12083] device veth1_to_batadv entered promiscuous mode [ 713.592687][T12083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.620419][T12083] device batadv_slave_1 entered promiscuous mode [ 713.657017][T12083] device xfrm0 entered promiscuous mode [ 713.699493][T12083] device veth0_to_hsr entered promiscuous mode [ 713.780672][T12083] device veth1_to_hsr entered promiscuous mode [ 713.847969][T12083] device hsr0 entered promiscuous mode [ 713.884779][T12083] device veth1_virt_wifi entered promiscuous mode [ 713.915844][T12083] device veth0_virt_wifi entered promiscuous mode [ 713.932237][T12083] device virt_wifi0 entered promiscuous mode [ 714.006461][T12083] device vlan0 entered promiscuous mode [ 714.012249][T12083] device vlan1 entered promiscuous mode [ 714.065349][T12083] device macvlan0 entered promiscuous mode [ 714.097327][T12083] device macvlan1 entered promiscuous mode [ 714.105540][T12083] device ipvlan0 entered promiscuous mode [ 714.111494][T12083] device ipvlan1 entered promiscuous mode [ 714.141012][T12083] device veth1_macvtap entered promiscuous mode [ 714.207889][T12083] device macvtap0 entered promiscuous mode [ 714.240371][T12083] device geneve0 entered promiscuous mode [ 714.269541][T12083] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.279633][T12083] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.289065][T12083] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.298434][T12083] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.308656][T12083] device geneve1 entered promiscuous mode [ 714.339704][T12083] device netdevsim0 entered promiscuous mode [ 714.363526][T12083] device netdevsim1 entered promiscuous mode [ 714.395660][T12083] device netdevsim2 entered promiscuous mode [ 714.419647][T12083] device netdevsim3 entered promiscuous mode [ 714.446262][T12083] device wlan0 entered promiscuous mode [ 714.468190][T12083] device wlan1 entered promiscuous mode [ 714.492141][T12083] device pimreg entered promiscuous mode [ 714.498710][T12083] device syztnl1 entered promiscuous mode [ 714.518395][T12083] device bond1 entered promiscuous mode [ 714.533203][T12083] device vlan2 entered promiscuous mode [ 714.546845][T12083] device gre1 entered promiscuous mode [ 714.559527][T12083] device veth2 entered promiscuous mode [ 714.565358][T12083] device veth3 entered promiscuous mode [ 714.571951][T12094] netlink: 'syz.3.2324': attribute type 4 has an invalid length. [ 714.609216][T12096] netlink: 'syz.0.2325': attribute type 16 has an invalid length. [ 714.627889][T12096] netlink: 'syz.0.2325': attribute type 17 has an invalid length. [ 714.649653][T12096] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 714.673882][T12096] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 714.692872][T12096] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 714.700532][T12096] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 714.708969][T12096] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 714.717817][T12096] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 714.912263][T12132] loop3: detected capacity change from 0 to 736 [ 715.014902][T12138] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 715.058970][T12132] IPVS: lc: FWM 3 0x00000003 - no destination available [ 715.182579][T12142] tipc: Enabled bearer , priority 0 [ 715.210442][T12141] tipc: Disabling bearer [ 715.773880][T12146] loop0: detected capacity change from 0 to 32768 [ 715.799582][T12154] device syzkaller0 entered promiscuous mode [ 715.807073][T12146] XFS: noattr2 mount option is deprecated. [ 715.824841][T12159] nfs4: Unknown parameter '(' [ 715.905054][T12146] XFS (loop0): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 716.066043][T11861] udevd[11861]: symlink '../../loop0' '/dev/disk/by-diskseq/360.tmp-b7:0' failed: Read-only file system [ 716.095452][T11861] udevd[11861]: symlink '../../loop0' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:0' failed: Read-only file system [ 716.182642][T11861] udevd[11861]: symlink '../../loop0' '/dev/disk/by-diskseq/360.tmp-b7:0' failed: Read-only file system [ 716.232106][T11861] udevd[11861]: symlink '../../loop0' '/dev/disk/by-diskseq/360.tmp-b7:0' failed: Read-only file system [ 718.109166][T12173] batman_adv: batadv0: Adding interface: veth0 [ 718.116228][T12173] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.142003][T12173] batman_adv: batadv0: Interface activated: veth0 [ 718.169604][T12177] batman_adv: batadv0: Interface deactivated: veth0 [ 718.193349][T12177] batman_adv: batadv0: Removing interface: veth0 [ 718.235421][T12177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.246936][T12177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.326184][T12179] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 718.340456][T12180] tipc: Enabling of bearer rejected, failed to enable media [ 718.775776][T12190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2352'. [ 719.668319][T12194] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 719.675426][T12194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 719.685800][T12194] vhci_hcd vhci_hcd.0: Device attached [ 719.919685][T12195] vhci_hcd: connection closed [ 719.926088][ T58] vhci_hcd: stop threads [ 719.997002][ T58] vhci_hcd: release socket [ 720.033444][ T58] vhci_hcd: disconnect device [ 720.045597][ T5586] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 721.323722][ T4286] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 721.467953][T12230] batman_adv: batadv0: Adding interface: veth0 [ 721.493649][T12230] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.548634][ T4286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.573626][ T4286] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 721.582825][ T4286] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 721.613660][T12230] batman_adv: batadv0: Interface activated: veth0 [ 721.620906][ T4286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.631589][T12233] tipc: Enabled bearer , priority 0 [ 721.643973][ T4286] usb 5-1: config 0 descriptor?? [ 721.663703][T12234] batman_adv: batadv0: Interface deactivated: veth0 [ 721.691679][T12234] batman_adv: batadv0: Removing interface: veth0 [ 722.142294][T12234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.152200][T12246] Cannot find add_set index 0 as target [ 722.158234][T12234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.173614][T12234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.182268][T12234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.338401][T12248] loop4: detected capacity change from 0 to 8 [ 722.982404][T12214] udevd[12214]: symlink '../../loop4' '/dev/disk/by-diskseq/362.tmp-b7:4' failed: Read-only file system [ 723.074586][T12214] udevd[12214]: symlink '../../loop4' '/dev/disk/by-diskseq/362.tmp-b7:4' failed: Read-only file system [ 723.123028][T12230] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 723.333978][T12227] tipc: Disabling bearer [ 723.449120][T12259] usb 5-1: USB disconnect, device number 2 [ 723.620000][T12259] rxe_eth0 speed is unknown, defaulting to 1000 [ 724.160631][T12260] rxe_eth0 speed is unknown, defaulting to 1000 [ 724.608667][T12214] udevd[12214]: symlink '../../loop4' '/dev/disk/by-diskseq/362.tmp-b7:4' failed: Read-only file system [ 724.673173][T12214] udevd[12214]: symlink '../../loop4' '/dev/disk/by-diskseq/362.tmp-b7:4' failed: Read-only file system [ 724.856576][T12272] device syzkaller0 entered promiscuous mode [ 725.202622][T12288] loop1: detected capacity change from 0 to 128 [ 725.264181][ T5586] vhci_hcd: vhci_device speed not set [ 725.320651][T12214] udevd[12214]: symlink '../../loop1' '/dev/disk/by-diskseq/364.tmp-b7:1' failed: Read-only file system [ 725.490402][T12214] udevd[12214]: symlink '../../loop1' '/dev/disk/by-diskseq/364.tmp-b7:1' failed: Read-only file system [ 725.601071][T12214] udevd[12214]: symlink '../../loop1' '/dev/disk/by-diskseq/364.tmp-b7:1' failed: Read-only file system [ 725.679749][T12214] udevd[12214]: symlink '../../loop1' '/dev/disk/by-diskseq/364.tmp-b7:1' failed: Read-only file system [ 729.030272][T12285] device syzkaller0 entered promiscuous mode [ 729.049839][T12307] rxe_eth0 speed is unknown, defaulting to 1000 [ 729.486419][T12323] tipc: Enabled bearer , priority 0 [ 729.644752][T12323] device syzkaller0 entered promiscuous mode [ 729.673066][T12323] tipc: Resetting bearer [ 729.698890][T12341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2392'. [ 729.710852][T12342] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 729.734675][T12322] tipc: Resetting bearer [ 731.856151][T12322] tipc: Disabling bearer [ 732.051374][T12365] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 732.118975][T12370] device syzkaller0 entered promiscuous mode [ 732.135146][T12369] loop1: detected capacity change from 0 to 16 [ 732.183843][T12369] erofs: (device loop1): mounted with root inode @ nid 36. [ 732.251843][T12372] udevd[12372]: symlink '../../loop1' '/dev/disk/by-diskseq/366.tmp-b7:1' failed: Read-only file system [ 732.405047][T12372] udevd[12372]: symlink '../../loop1' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:1' failed: Read-only file system [ 733.012538][T12372] udevd[12372]: symlink '../../loop1' '/dev/disk/by-diskseq/366.tmp-b7:1' failed: Read-only file system [ 733.117196][T12372] udevd[12372]: symlink '../../loop1' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:1' failed: Read-only file system [ 733.249906][T12372] udevd[12372]: symlink '../../loop1' '/dev/disk/by-diskseq/366.tmp-b7:1' failed: Read-only file system [ 733.388648][T12372] udevd[12372]: symlink '../../loop1' '/dev/disk/by-diskseq/366.tmp-b7:1' failed: Read-only file system [ 733.592613][T12408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2409'. [ 733.716708][T12410] tipc: Enabled bearer , priority 0 [ 733.832008][T12410] device syzkaller0 entered promiscuous mode [ 733.838944][T12410] tipc: Resetting bearer [ 733.889242][T12409] tipc: Resetting bearer [ 736.427248][T12409] tipc: Disabling bearer [ 737.275996][T12436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.195580][T12521] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 738.205530][T12521] device syzkaller0 entered promiscuous mode [ 738.350125][T12525] device syzkaller0 entered promiscuous mode [ 740.879762][T12502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.084426][T12528] device syzkaller0 entered promiscuous mode [ 742.122660][T12558] [ 742.125061][T12558] ====================================================== [ 742.132106][T12558] WARNING: possible circular locking dependency detected [ 742.139142][T12558] syzkaller #0 Not tainted [ 742.143576][T12558] ------------------------------------------------------ [ 742.150603][T12558] syz.4.2453/12558 is trying to acquire lock: [ 742.156670][T12558] ffff888079c17350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x55c/0xd10 [ 742.166014][T12558] [ 742.166014][T12558] but task is already holding lock: [ 742.173418][T12558] ffff888054dca510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 742.184216][T12558] [ 742.184216][T12558] which lock already depends on the new lock. [ 742.184216][T12558] [ 742.194633][T12558] [ 742.194633][T12558] the existing dependency chain (in reverse order) is: [ 742.203675][T12558] [ 742.203675][T12558] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 742.212379][T12558] __mutex_lock+0x12d/0xb40 [ 742.217480][T12558] nfc_urelease_event_work+0x120/0x310 [ 742.223481][T12558] process_one_work+0x8ab/0x1160 [ 742.229066][T12558] worker_thread+0xaf5/0x12a0 [ 742.234286][T12558] kthread+0x29d/0x330 [ 742.238959][T12558] ret_from_fork+0x1f/0x30 [ 742.243935][T12558] [ 742.243935][T12558] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 742.251787][T12558] __mutex_lock+0x12d/0xb40 [ 742.256838][T12558] nfc_register_device+0x38/0x300 [ 742.262443][T12558] nci_register_device+0x89f/0x9f0 [ 742.268121][T12558] virtual_ncidev_open+0x55/0xc0 [ 742.273745][T12558] misc_open+0x31f/0x390 [ 742.278638][T12558] chrdev_open+0x585/0x5f0 [ 742.283704][T12558] do_dentry_open+0x7dd/0x10b0 [ 742.289075][T12558] path_openat+0x2674/0x2f10 [ 742.294229][T12558] do_filp_open+0x1ee/0x420 [ 742.299295][T12558] do_sys_openat2+0x14b/0x4f0 [ 742.304535][T12558] __x64_sys_openat+0x135/0x160 [ 742.309934][T12558] do_syscall_64+0x4c/0xa0 [ 742.314983][T12558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.321454][T12558] [ 742.321454][T12558] -> #1 (nci_mutex){+.+.}-{3:3}: [ 742.328593][T12558] __mutex_lock+0x12d/0xb40 [ 742.333650][T12558] virtual_nci_close+0x13/0x40 [ 742.338984][T12558] nci_dev_up+0x976/0xd90 [ 742.343889][T12558] nfc_dev_up+0x15d/0x310 [ 742.348760][T12558] nfc_genl_dev_up+0x85/0xd0 [ 742.353901][T12558] genl_family_rcv_msg_doit+0x22f/0x350 [ 742.360119][T12558] genl_rcv_msg+0x601/0x790 [ 742.365187][T12558] netlink_rcv_skb+0x1ef/0x440 [ 742.370490][T12558] genl_rcv+0x24/0x40 [ 742.375060][T12558] netlink_unicast+0x7ad/0x920 [ 742.380393][T12558] netlink_sendmsg+0x8ad/0xbd0 [ 742.385705][T12558] ____sys_sendmsg+0x5ed/0x9a0 [ 742.391082][T12558] ___sys_sendmsg+0x2a2/0x360 [ 742.396296][T12558] __se_sys_sendmsg+0x1c3/0x2b0 [ 742.401691][T12558] do_syscall_64+0x4c/0xa0 [ 742.406650][T12558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.413106][T12558] [ 742.413106][T12558] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 742.420787][T12558] __lock_acquire+0x3a03/0x7ea0 [ 742.426232][T12558] lock_acquire+0x1bc/0x4a0 [ 742.431294][T12558] __mutex_lock+0x12d/0xb40 [ 742.436343][T12558] nci_start_poll+0x55c/0xd10 [ 742.441822][T12558] nfc_start_poll+0x141/0x2c0 [ 742.447075][T12558] nfc_genl_start_poll+0x1d7/0x340 [ 742.452753][T12558] genl_family_rcv_msg_doit+0x22f/0x350 [ 742.458846][T12558] genl_rcv_msg+0x601/0x790 [ 742.463903][T12558] netlink_rcv_skb+0x1ef/0x440 [ 742.469248][T12558] genl_rcv+0x24/0x40 [ 742.473806][T12558] netlink_unicast+0x7ad/0x920 [ 742.479131][T12558] netlink_sendmsg+0x8ad/0xbd0 [ 742.484433][T12558] ____sys_sendmsg+0x5ed/0x9a0 [ 742.489742][T12558] ___sys_sendmsg+0x2a2/0x360 [ 742.494983][T12558] __se_sys_sendmsg+0x1c3/0x2b0 [ 742.500407][T12558] do_syscall_64+0x4c/0xa0 [ 742.505384][T12558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.511819][T12558] [ 742.511819][T12558] other info that might help us debug this: [ 742.511819][T12558] [ 742.522058][T12558] Chain exists of: [ 742.522058][T12558] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 742.522058][T12558] [ 742.536326][T12558] Possible unsafe locking scenario: [ 742.536326][T12558] [ 742.543838][T12558] CPU0 CPU1 [ 742.549236][T12558] ---- ---- [ 742.554608][T12558] lock(&genl_data->genl_data_mutex); [ 742.560079][T12558] lock(nfc_devlist_mutex); [ 742.567205][T12558] lock(&genl_data->genl_data_mutex); [ 742.575204][T12558] lock(&ndev->req_lock); [ 742.579635][T12558] [ 742.579635][T12558] *** DEADLOCK *** [ 742.579635][T12558] [ 742.587789][T12558] 4 locks held by syz.4.2453/12558: [ 742.593079][T12558] #0: ffffffff8edcc730 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 742.601291][T12558] #1: ffffffff8edcc548 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790 [ 742.610292][T12558] #2: ffff888054dca510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 742.621393][T12558] #3: ffff888054dca100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 742.630683][T12558] [ 742.630683][T12558] stack backtrace: [ 742.636602][T12558] CPU: 1 PID: 12558 Comm: syz.4.2453 Not tainted syzkaller #0 [ 742.644073][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 742.654151][T12558] Call Trace: [ 742.657446][T12558] [ 742.660415][T12558] dump_stack_lvl+0x188/0x24e [ 742.665156][T12558] ? load_image+0x410/0x410 [ 742.669731][T12558] ? show_regs_print_info+0x12/0x12 [ 742.674971][T12558] ? print_circular_bug+0x12b/0x1a0 [ 742.680223][T12558] check_noncircular+0x2f8/0x400 [ 742.685189][T12558] ? print_deadlock_bug+0x5d0/0x5d0 [ 742.690410][T12558] ? lockdep_lock+0xf1/0x1f0 [ 742.695069][T12558] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 742.701021][T12558] ? _find_first_zero_bit+0xd2/0x100 [ 742.706422][T12558] __lock_acquire+0x3a03/0x7ea0 [ 742.711316][T12558] ? __stack_depot_save+0x439/0x480 [ 742.716615][T12558] ? kasan_set_track+0x4b/0x70 [ 742.721489][T12558] ? nfc_llcp_build_gb+0x31f/0x3e0 [ 742.726624][T12558] ? nfc_start_poll+0x141/0x2c0 [ 742.731514][T12558] ? netlink_unicast+0x7ad/0x920 [ 742.736492][T12558] ? netlink_sendmsg+0x8ad/0xbd0 [ 742.741487][T12558] ? ____sys_sendmsg+0x5ed/0x9a0 [ 742.746486][T12558] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 742.751560][T12558] ? do_syscall_64+0x4c/0xa0 [ 742.756180][T12558] ? verify_lock_unused+0x140/0x140 [ 742.761403][T12558] ? mark_lock+0x94/0x320 [ 742.765762][T12558] lock_acquire+0x1bc/0x4a0 [ 742.770302][T12558] ? nci_start_poll+0x55c/0xd10 [ 742.775200][T12558] ? kasan_quarantine_put+0xd4/0x210 [ 742.780558][T12558] ? __might_sleep+0xd0/0xd0 [ 742.785238][T12558] ? read_lock_is_recursive+0x10/0x10 [ 742.790635][T12558] ? slab_free_freelist_hook+0x133/0x1b0 [ 742.796294][T12558] ? nfc_llcp_build_gb+0x31f/0x3e0 [ 742.801436][T12558] ? __kmem_cache_free+0xb6/0x200 [ 742.806498][T12558] __mutex_lock+0x12d/0xb40 [ 742.811012][T12558] ? nci_start_poll+0x55c/0xd10 [ 742.815883][T12558] ? nfc_llcp_general_bytes+0xc8/0x240 [ 742.821365][T12558] ? nfc_llcp_general_bytes+0x240/0x240 [ 742.826953][T12558] ? nci_start_poll+0x55c/0xd10 [ 742.831844][T12558] ? mutex_lock_nested+0x10/0x10 [ 742.836887][T12558] ? nfc_llcp_general_bytes+0x141/0x240 [ 742.842484][T12558] ? nfc_llcp_general_bytes+0x204/0x240 [ 742.848062][T12558] nci_start_poll+0x55c/0xd10 [ 742.852812][T12558] ? nci_dev_down+0x40/0x40 [ 742.857353][T12558] ? trace_raw_output_contention_end+0xd0/0xd0 [ 742.863539][T12558] ? __mutex_trylock_common+0x15c/0x260 [ 742.869124][T12558] ? rcu_is_watching+0x11/0xa0 [ 742.874036][T12558] ? trace_contention_end+0x5f/0x170 [ 742.879366][T12558] ? __mutex_lock+0x1ab/0xb40 [ 742.884092][T12558] ? __mutex_lock+0x1ab/0xb40 [ 742.888811][T12558] ? nfc_start_poll+0x4f/0x2c0 [ 742.893613][T12558] ? nfc_get_device+0x82/0xd0 [ 742.898331][T12558] ? nfc_release+0x2e0/0x2e0 [ 742.902936][T12558] nfc_start_poll+0x141/0x2c0 [ 742.907645][T12558] nfc_genl_start_poll+0x1d7/0x340 [ 742.912799][T12558] genl_family_rcv_msg_doit+0x22f/0x350 [ 742.918366][T12558] ? end_current_label_crit_section+0x170/0x170 [ 742.924809][T12558] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 742.930776][T12558] ? bpf_lsm_capable+0x5/0x10 [ 742.935548][T12558] ? security_capable+0x85/0xb0 [ 742.940517][T12558] genl_rcv_msg+0x601/0x790 [ 742.945046][T12558] ? genl_bind+0x360/0x360 [ 742.949485][T12558] ? nfc_genl_dev_down+0xd0/0xd0 [ 742.954472][T12558] netlink_rcv_skb+0x1ef/0x440 [ 742.959256][T12558] ? genl_bind+0x360/0x360 [ 742.963692][T12558] ? netlink_ack+0x1160/0x1160 [ 742.968479][T12558] ? down_read+0x1a8/0x2d0 [ 742.972912][T12558] genl_rcv+0x24/0x40 [ 742.976963][T12558] netlink_unicast+0x7ad/0x920 [ 742.981802][T12558] netlink_sendmsg+0x8ad/0xbd0 [ 742.986607][T12558] ? netlink_getsockopt+0x550/0x550 [ 742.991826][T12558] ? apparmor_socket_sendmsg+0x8a/0x330 [ 742.997388][T12558] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 743.002842][T12558] ? security_socket_sendmsg+0x7c/0xa0 [ 743.008318][T12558] ? netlink_getsockopt+0x550/0x550 [ 743.013554][T12558] ____sys_sendmsg+0x5ed/0x9a0 [ 743.018353][T12558] ? __sys_sendmsg_sock+0x30/0x30 [ 743.023411][T12558] ? __import_iovec+0x306/0x510 [ 743.028297][T12558] ? import_iovec+0x6f/0xa0 [ 743.032864][T12558] ___sys_sendmsg+0x2a2/0x360 [ 743.037570][T12558] ? __sys_sendmsg+0x2a0/0x2a0 [ 743.042368][T12558] ? virtual_ncidev_read+0x3e0/0x3e0 [ 743.047688][T12558] __se_sys_sendmsg+0x1c3/0x2b0 [ 743.052558][T12558] ? __x64_sys_sendmsg+0x80/0x80 [ 743.057541][T12558] ? lockdep_hardirqs_on+0x94/0x140 [ 743.062784][T12558] do_syscall_64+0x4c/0xa0 [ 743.067227][T12558] ? clear_bhb_loop+0x60/0xb0 [ 743.072010][T12558] ? clear_bhb_loop+0x60/0xb0 [ 743.076724][T12558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 743.082680][T12558] RIP: 0033:0x7fbfc099fb19 [ 743.087158][T12558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.106830][T12558] RSP: 002b:00007fbfc1932028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.115297][T12558] RAX: ffffffffffffffda RBX: 00007fbfc0c26090 RCX: 00007fbfc099fb19 [ 743.123323][T12558] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 743.131337][T12558] RBP: 00007fbfc0a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 743.139352][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.147363][T12558] R13: 00007fbfc0c26128 R14: 00007fbfc0c26090 R15: 00007ffebe9fc4c8 [ 743.155385][T12558] [ 744.206465][T12542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2449'. [ 745.012403][T12558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.022237][T12558] nci: nci_start_poll: failed to set local general bytes [ 745.030057][T12553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.235433][ T1283] ieee802154 phy1 wpan1: encryption failed: -22