last executing test programs: 3m37.079890996s ago: executing program 2 (id=4609): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m36.073857701s ago: executing program 2 (id=4610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x20, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m35.054552054s ago: executing program 2 (id=4614): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4008000) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x1, 0x2d, 0x40}, @ipv4=@generic={{0x5, 0x4, 0x0, 0x9, 0x30, 0x65, 0x0, 0x6, 0x16, 0x0, @loopback, @loopback}, "5ef39d731b6a27a50c887b8ae087a873c616bc4e63659db40608c2e7"}}, 0x3e) 3m34.572340773s ago: executing program 2 (id=4623): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xa00000, &(0x7f0000000000), 0x21, 0x4c0, &(0x7f0000000840)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu85Z5jvOXNzzxlO23sCGFjnI2I7IkYj4n5ETLXLk3aKW62Uve7Vy8cLOy8fLyTRbN79T5LXZ2Wx799kTrbfczwifvqjiF8kb8atb26tzFcq5fV2vtiorhXrm1tXlqvzS+Wl8mqpNDc7N3Pj6vXSkfX1XPUPL364fPtnf/7TN57/dfv7v8qaNdmu29+Po9Tq+shenKxgOCJufxHB+mAoWv0ZPVDe4ZLzAUoj4ksRcSG//6diKL+aAMBx1mxORXNqfx4AOO7SfA0sSQvttYDJSNNCobWGdzYm0kqt3rj8oLaxuthaK5uOkfTBcqU8014rnI6RJMvP5uev86UD+asRcSYifj12Is8XFmqVxX5+8QGAAXbywPz//7HW/A8AHHPj/W4AANBz5n8AGDzmfwAYPOZ/ABg85n8AGDzmfwAYPOZ/ABgoP7lzJ0vNnfbzrxcfbm6s1B5eWSzXVwrVjYXCQm19rbBUqy3lz+ypvuv9KrXa2uy12HhUbJTrjWJ9c+tetbax2riXP9f7XnmkJ70CAN7mzLlnf08iYvvmiTzFvr0czNVwvKX9bgDQN0P9bgDQN3b7gsHl//jAu/Zr7forQk+Pvi1Ab1z6qvV/GFTW/2FwWf+HwWX9HwZXs5nY8x8ABow1fsDP/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODzm8xTkhbae4FPRpoWChGnImI6RpIHy5XyTEScjoi/jY2MZfnZfjcaAHhP6b+S+Ki9DeDFyYO1o8nHY/kxIn7527u/eTTfaKzPZuX/3StvPG2Xl3reeADgEHbn6d15fNerl48XdlMv2/PiB63NRbO4O+3UqhmO4fw4HtmXk4n/Je18SxIRQ0cQf/tJRHylU/+TfG1kur3z6cH4WexTPY2ffiZ+mte1jtln8eUjaAsMmmfZ+HOr0/2Xxvn82Pn+H89HqPe3O/7tHBz/kuG9SENdxr/zh41x7S8/Hu1W9yTia8Md4keyN/4mXeJfPGT8f3z9mxe61TV/F3EpOsffH6vYqK4V65tbV5ar80vlpfJqqTQ3Ozdz4+r1UjFfoy7urlS/6d83L5/uFj/r/0SX+PmVvzPZtf/fOWT/f//J/Z9/6y3xv/ftTvHTOJsfO3/+2Zz43UPGn5/4Y9ftu7P4i136/67rf/mQ8Z//c2vxkC8FAHqgvrm1Ml+plNedONk72f2m96G0p/tJc6rV0g+lPcfnpJ+jEtALr2/6frcEAAAAAAAAAAAAAADophd/TtTvPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8fRoAAP//wLrUnw==") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x8000, 0x109) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5b966d61fdcf335263bd9bbba95216817e8d59825910e81ce13dc577edb48b001d0000000000000000f0ffffff12fb00000000000000000200", "f2835973db229a4c6681000000004430eaf04faf0000000000b60000000100", [0x8, 0x8]}) link(&(0x7f00000001c0)='./file1\x00', 0x0) 3m33.939885026s ago: executing program 2 (id=4629): socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfe4f, &(0x7f0000000440)=ANY=[], 0x0) 3m32.730148267s ago: executing program 2 (id=4635): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4008000) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x1, 0x2d, 0x40}, @ipv4=@generic={{0x5, 0x4, 0x0, 0x9, 0x30, 0x65, 0x0, 0x6, 0x16, 0x0, @loopback, @loopback}, "5ef39d731b6a27a50c887b8ae087a873c616bc4e63659db40608c2e7"}}, 0x3e) 3m32.270622992s ago: executing program 32 (id=4635): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4008000) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x1, 0x2d, 0x40}, @ipv4=@generic={{0x5, 0x4, 0x0, 0x9, 0x30, 0x65, 0x0, 0x6, 0x16, 0x0, @loopback, @loopback}, "5ef39d731b6a27a50c887b8ae087a873c616bc4e63659db40608c2e7"}}, 0x3e) 40.093672472s ago: executing program 4 (id=5814): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 39.720608343s ago: executing program 4 (id=5815): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) write$binfmt_misc(r1, &(0x7f0000000100)="1c", 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x1000, 0x6}) 39.250751918s ago: executing program 4 (id=5819): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r2, @ANYBLOB="089805000750050008001300", @ANYRES32=r3, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x804) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 35.830779627s ago: executing program 4 (id=5836): sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x200000c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x8000, 0x109) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5b966d61fdcf335263bd9bbba95216817e8d59825910e81ce13dc577edb48b001d0000000000000000f0ffffff12fb00000000000000000200", "f2835973db229a4c6681000000004430eaf04faf0000000000b60000000100", [0x8, 0x5]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 33.619875319s ago: executing program 4 (id=5853): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x8040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x24000014) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) 32.664510057s ago: executing program 4 (id=5862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 32.144790973s ago: executing program 33 (id=5862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3e, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x5c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10.462852078s ago: executing program 5 (id=6011): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x68277a956ff09f6a, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020692500000000002020207b1af8ff0000718dbfa1004c3fe583000701d251d47a2bad519e120000f8ffffffb702000008000000b703000001800000448f58dfc0d8411f91d3a535c5ea55f5b19a3136fb17d0d7854713cf8088186652784d119f064d15576388b20c01dc949b2e780b825230f78610d1827d46304393fb82fc7647f0a9fbac80fefdd66c073a7d2b5d60ba7fa41ee10db2354d696c5e719636af0bcbb9fbcb3797fe47ca67c93792d3eb31391a5a923a5ff25cf3f9f8e4c3b9f043241fa6"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa98defe26b7ddb80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, 0x0, 0x20004000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in6={0xa, 0x4ea6, 0xb38, @dev={0xfe, 0x80, '\x00', 0xc}, 0x1000}, 0x1c, &(0x7f00000006c0), 0x0, 0x0, 0xffffffffffffffe2, 0x3d85ea52d5255795}, 0x2004c853) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0xff, @empty, 0x9}}, 0x6, 0x400}, &(0x7f0000000040)=0x90) r6 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x100, &(0x7f0000000400)=""/256, 0xb6df4c32c1d5c814}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 8.301606692s ago: executing program 6 (id=6013): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r2, @ANYBLOB="089805000750050008001300", @ANYRES32=r3, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x804) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 8.242768659s ago: executing program 5 (id=6015): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 7.714508437s ago: executing program 5 (id=6017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000002c80)=ANY=[@ANYBLOB="08000800000002"], 0x1011) 7.35973406s ago: executing program 7 (id=6019): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[], 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 6.915783333s ago: executing program 3 (id=6023): sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x200000c0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5b966d61fdcf335263bd9bbba95216817e8d59825910e81ce13dc577edb48b001d0000000000000000f0ffffff12fb00000000000000000200", "f2835973db229a4c6681000000004430eaf04faf0000000000b60000000100", [0x8, 0x5]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 6.795601588s ago: executing program 7 (id=6024): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.623842533s ago: executing program 5 (id=6026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002f0000001801000020786c2500000000002020207b0a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff760000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000001c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086"], 0xffdd) 6.62271061s ago: executing program 6 (id=6027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @multicast2}, {0x6, @multicast}, 0x48, {0x2, 0x4e22, @multicast1}, 'bridge_slave_0\x00'}) 6.531181982s ago: executing program 3 (id=6028): socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c10277582b9", 0x20) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r4, &(0x7f0000001c80)=[{&(0x7f0000000040)="ebfa0e81ceb3dc4c430515dc4dade38ff8c84ace9d15af003a", 0x19}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000020000000bca30000000000002403000040feffff720af1ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61146000000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) write(0xffffffffffffffff, &(0x7f0000000500), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001640)={0xffffffffffffffff, &(0x7f0000000240)="5cfb28e9787c90e4fb6ee3fa581982", &(0x7f0000000640)=""/4096}, 0x20) 6.439011555s ago: executing program 7 (id=6029): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 5.424550064s ago: executing program 6 (id=6031): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0xc555}}, {@oldalloc}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(0xffffffffffffffff, &(0x7f0000000680)="c0", 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0x3ffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @a}}) 5.421005858s ago: executing program 3 (id=6033): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r1}, 0x38) unshare(0x400) socket(0x1e, 0x805, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000b40)={0x0, "3b7e0f219fe6718411c8bd9f11cae160"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4004090) 5.327352924s ago: executing program 7 (id=6034): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002bc0)=""/245, 0xf5}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e", 0x56}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f0000000280)={@void, @void, @eth={@random="7de102ec8729", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x64, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "2aa7ba4927c51ee2f5170f2f3a0072ae8bdc7d17430e9cdab3dac3ad86d35880", "1cc1da49ece4be1c578b9ae7174e98c7", {"322e109dbcb3bc4e915ba6de2dab1188", "99e2077b885aaf3c1d2e182f2863f441"}}}}}}}}}, 0x9e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=@expire={0x304, 0x18, 0x400, 0x70bd26, 0x25dfdbfe, {{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x8, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x62, 0x0, 0xffffffffffffffff}, {@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d4, 0xff}, @in=@broadcast, {0x4, 0x4, 0xff, 0x7, 0x1, 0x6e, 0x4000000, 0x7}, {0x6, 0x8, 0x9, 0xc}, {0x7, 0x8, 0x6}, 0x70bd28, 0x0, 0x2, 0x4, 0x8}, 0xf4}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x7ff}, @algo_crypt={0x77, 0x2, {{'cbc-aes-neonbs\x00'}, 0x178, "fc1dcc722858dc130199b9e2b98ae69f647ecb76a989a20294786a2411fdc8efca3ec9d3d95e60bf27afad0736b2a2"}}, @algo_comp={0x62, 0x3, {{'lzjh\x00'}, 0xd0, "4859f67fb5632b8f222959ef79d33b193d4e167c4895e90ce037"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x180000}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e21, @in=@multicast1}}, @migrate={0xe8, 0x11, [{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, @in=@empty, 0x33, 0x7, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, @in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x2, 0x0, 0x3500, 0x2}, {@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x0, 0x3500, 0xa, 0x2}]}, @lastused={0xc, 0xf, 0x6}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2d, 0x6}}]}, 0x304}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) 4.910802368s ago: executing program 3 (id=6036): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[], 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 4.552012378s ago: executing program 6 (id=6038): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x0) 3.774720887s ago: executing program 6 (id=6040): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r2, @ANYBLOB="089805000750050008001300", @ANYRES32=r3, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x804) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 2.213228537s ago: executing program 0 (id=6045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r2, r2, 0x0, 0x1000000201005) 1.891870611s ago: executing program 0 (id=6048): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r1}, 0x38) unshare(0x400) socket(0x1e, 0x805, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000b40)={0x0, "3b7e0f219fe6718411c8bd9f11cae160"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x4004090) 1.863008833s ago: executing program 1 (id=6049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength', 0x33) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000180), 0x1000) 1.760838615s ago: executing program 0 (id=6050): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0xc555}}, {@oldalloc}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r1, &(0x7f0000000680)="c0", 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x3ffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @a}}) 1.759354911s ago: executing program 1 (id=6051): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000900)="00000d0000000000000001") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.542409624s ago: executing program 1 (id=6052): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, 0x0, 0x22000004) 1.429664671s ago: executing program 1 (id=6053): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0xb}, 0xb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1.427777245s ago: executing program 0 (id=6054): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.236529018s ago: executing program 0 (id=6055): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 1.00991451s ago: executing program 0 (id=6056): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x8040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x24000014) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) 580.123933ms ago: executing program 3 (id=6057): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setuid(0xee01) 475.982238ms ago: executing program 6 (id=6058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 475.726725ms ago: executing program 5 (id=6059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength', 0x33) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000180), 0x1000) 417.749043ms ago: executing program 1 (id=6060): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xf1e}, 0x8) 376.229446ms ago: executing program 7 (id=6061): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x20044804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 286.249148ms ago: executing program 5 (id=6062): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 121.590072ms ago: executing program 3 (id=6063): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r1}, 0x38) unshare(0x400) socket(0x1e, 0x805, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000b40)={0x0, "3b7e0f219fe6718411c8bd9f11cae160"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x4004090) 279.446µs ago: executing program 1 (id=6064): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 0s ago: executing program 7 (id=6065): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): _slave_0: left allmulticast mode [ 692.739065][T18860] bridge_slave_0: left promiscuous mode [ 692.757716][T18860] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.813255][T20927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4664'. [ 692.898044][T18860] batman_adv: batadv0: Removing interface: ip6gretap1 [ 692.944169][T18860] batman_adv: batadv0: Removing interface: ip6gretap2 [ 693.115886][T18860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.132646][T18860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.148347][T18860] bond0 (unregistering): Released all slaves [ 693.167418][T18860] bond1 (unregistering): Released all slaves [ 693.204985][T20938] tipc: Enabling of bearer rejected, failed to enable media [ 693.297185][T20924] bond4: entered promiscuous mode [ 693.306207][T20924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.425194][T20942] bond4: (slave bridge3): making interface the new active one [ 693.435891][T20942] bridge3: entered promiscuous mode [ 693.446795][T20942] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 693.515809][T18860] tipc: Left network mode [ 693.516022][T20948] syzkaller0: entered promiscuous mode [ 693.547858][T20948] syzkaller0: entered allmulticast mode [ 693.740993][T20950] syzkaller0: entered promiscuous mode [ 693.759349][T20950] syzkaller0: entered allmulticast mode [ 694.071255][ T5618] Bluetooth: hci5: command tx timeout [ 694.542152][ T8019] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 694.743448][ T8019] usb 1-1: Using ep0 maxpacket: 32 [ 694.758754][ T8019] usb 1-1: unable to get BOS descriptor or descriptor too short [ 694.777343][ T8019] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 694.795490][ T8019] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 694.813120][ T8019] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 694.829604][ T8019] usb 1-1: config 14 has no interface number 0 [ 694.839614][ T8019] usb 1-1: config 14 has no interface number 1 [ 694.846267][ T8019] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 694.857801][ T8019] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 694.871043][ T8019] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 694.883983][ T8019] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 694.895966][ T8019] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 694.908081][ T8019] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.927748][ T8019] usb 1-1: config 14 interface 57 has no altsetting 0 [ 694.936658][ T8019] usb 1-1: config 14 interface 228 has no altsetting 0 [ 694.955376][ T8019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.968515][ T8019] usb 1-1: Product: syz [ 694.973538][ T8019] usb 1-1: Manufacturer: syz [ 694.978266][ T8019] usb 1-1: SerialNumber: syz [ 695.061739][T21012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.075049][T21012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.149847][T21013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.215962][T20990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.225054][T20990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.865833][ T8019] legousbtower 1-1:14.57: interrupt endpoints not found [ 696.071272][T20990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.087906][T20990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.099720][T20990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.111689][T20990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.126200][T20990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.137654][T20990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.151324][ T5618] Bluetooth: hci5: command tx timeout [ 696.172102][ T8019] legousbtower 1-1:14.228: get version request failed: -71 [ 696.185291][ T8019] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 696.224583][ T8019] usb 1-1: USB disconnect, device number 11 [ 697.555749][ T5266] 8021q: adding VLAN 0 to HW filter on device eth1 [ 697.764747][T21022] bond1: left promiscuous mode [ 697.771303][T21022] bridge1: left promiscuous mode [ 697.816720][T21022] bond2: left promiscuous mode [ 697.829268][T21022] bridge2: left promiscuous mode [ 698.178057][T18860] hsr_slave_0: left promiscuous mode [ 698.214985][T18860] hsr_slave_1: left promiscuous mode [ 698.233485][T18860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.269017][T18860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.662982][T18860] team0 (unregistering): Port device team_slave_1 removed [ 698.681524][ T8019] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 698.709750][T18860] team0 (unregistering): Port device team_slave_0 removed [ 698.844468][ T8019] usb 6-1: Using ep0 maxpacket: 32 [ 698.857457][ T8019] usb 6-1: unable to get BOS descriptor or descriptor too short [ 698.874573][ T8019] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 698.895728][ T8019] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 698.907908][ T8019] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 698.925050][ T8019] usb 6-1: config 14 has no interface number 0 [ 698.931728][ T8019] usb 6-1: config 14 has no interface number 1 [ 698.938107][ T8019] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 698.966451][ T8019] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 698.989516][ T8019] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 699.012583][ T8019] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 699.030131][T21066] tipc: Enabled bearer , priority 0 [ 699.032757][ T8019] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 699.068581][ T8019] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.093925][ T8019] usb 6-1: config 14 interface 57 has no altsetting 0 [ 699.108776][ T8019] usb 6-1: config 14 interface 228 has no altsetting 0 [ 699.134480][ T8019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.142767][ T8019] usb 6-1: Product: syz [ 699.150937][ T8019] usb 6-1: Manufacturer: syz [ 699.157146][ T8019] usb 6-1: SerialNumber: syz [ 699.170737][T21069] syzkaller0: entered promiscuous mode [ 699.188013][T21069] syzkaller0: entered allmulticast mode [ 699.207247][T21069] tipc: Resetting bearer [ 699.268357][ T6191] tipc: Resetting bearer [ 699.503591][T21065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.596229][T21065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.193806][T21059] tipc: Resetting bearer [ 700.263795][ T8019] legousbtower 6-1:14.57: interrupt endpoints not found [ 700.406656][T21096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.430163][T21085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.464747][T21065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.480719][T21065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.496184][T21065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.496488][T21085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.508292][T21065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.526353][T21065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.537122][T21065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.559217][ T8019] legousbtower 6-1:14.228: get version request failed: -71 [ 700.570824][ T8019] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 700.607975][ T8019] usb 6-1: USB disconnect, device number 15 [ 701.339909][T21105] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4704'. [ 701.613002][T21059] tipc: Disabling bearer [ 701.640483][T20831] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.652711][T20831] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.659907][T20831] bridge_slave_0: entered allmulticast mode [ 701.682585][T20831] bridge_slave_0: entered promiscuous mode [ 701.856213][T21098] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.864001][T21098] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.109601][T21098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.143270][T21098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.557976][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 702.596637][T21098] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 702.629567][T21098] ip6gretap1: left allmulticast mode [ 702.665524][T20831] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.718976][T20831] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.754549][T20831] bridge_slave_1: entered allmulticast mode [ 702.798188][T20831] bridge_slave_1: entered promiscuous mode [ 702.978952][T20831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.991536][ T1207] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 703.007722][T21151] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 703.014227][T21151] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 703.035979][T20831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.078551][T21151] vhci_hcd vhci_hcd.0: Device attached [ 703.139500][T20831] team0: Port device team_slave_0 added [ 703.145231][T21152] vhci_hcd: connection closed [ 703.145571][ T36] vhci_hcd vhci_hcd.0: stop threads [ 703.158314][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 703.158676][T20831] team0: Port device team_slave_1 added [ 703.190557][ T1207] usb 5-1: unable to get BOS descriptor or descriptor too short [ 703.206526][ T36] vhci_hcd vhci_hcd.0: release socket [ 703.212231][ T6191] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.230623][ T1207] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 703.245440][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 703.258160][ T6191] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.281095][ T1207] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 703.296608][ T1207] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 703.305331][ T1207] usb 5-1: config 14 has no interface number 0 [ 703.312455][ T1207] usb 5-1: config 14 has no interface number 1 [ 703.318863][ T1207] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 703.329875][ T1207] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 703.362666][T18860] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.367528][ T1207] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 703.385324][T18860] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.402709][T20831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.414094][T20831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.416089][ T1207] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 703.468558][T20831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.491955][ T5266] 8021q: adding VLAN 0 to HW filter on device eth2 [ 703.504122][T20831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.518615][ T1207] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 703.518981][T21158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.542187][ T1207] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.556075][T20831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.609980][ T1207] usb 5-1: config 14 interface 57 has no altsetting 0 [ 703.633734][ T1207] usb 5-1: config 14 interface 228 has no altsetting 0 [ 703.650930][T20831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.664548][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.665382][T21158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.681381][ T1207] usb 5-1: Product: syz [ 703.696095][ T1207] usb 5-1: Manufacturer: syz [ 703.709911][ T1207] usb 5-1: SerialNumber: syz [ 703.860046][T20831] hsr_slave_0: entered promiscuous mode [ 703.879350][T20831] hsr_slave_1: entered promiscuous mode [ 703.954433][T21143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.976186][T21143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.492405][T21183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4725'. [ 704.569951][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4726'. [ 704.622174][ T1207] legousbtower 5-1:14.57: interrupt endpoints not found [ 704.791816][T20831] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 704.835471][T21143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.842839][T20831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 704.872318][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4728'. [ 704.885697][T20831] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 704.900419][T21143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.934970][T20831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 704.942680][T21143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.962152][T20831] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 704.985037][T21143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.006528][T20831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 705.029911][T21143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.039038][T20831] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 705.078496][T20831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 705.094224][T21143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.158807][ T1207] legousbtower 5-1:14.228: get version request failed: -71 [ 705.187376][ T1207] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 705.220303][T21215] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 705.226838][T21215] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 705.274535][ T1207] usb 5-1: USB disconnect, device number 5 [ 705.300160][T21215] vhci_hcd vhci_hcd.0: Device attached [ 705.344586][T21216] vhci_hcd: connection closed [ 705.346301][ T36] vhci_hcd vhci_hcd.0: stop threads [ 705.410967][ T36] vhci_hcd vhci_hcd.0: release socket [ 705.449116][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 705.526979][T20831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.608727][T20831] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.645662][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.652881][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.686609][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.693800][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.032101][ T5266] 8021q: adding VLAN 0 to HW filter on device eth3 [ 707.257459][T21263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4746'. [ 707.376052][T21257] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.383821][T21257] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.836835][T21257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.894101][T21257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.297656][T21257] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 708.335807][T21257] ip6gretap1: left allmulticast mode [ 709.129575][T21257] bond2: left promiscuous mode [ 709.139713][T21257] bridge1: left promiscuous mode [ 709.149701][T21257] bond2: left allmulticast mode [ 709.161218][T21257] bridge1: left allmulticast mode [ 709.189970][T21257] bond3: left promiscuous mode [ 709.195481][T21257] bridge2: left promiscuous mode [ 709.200629][T21257] bond3: left allmulticast mode [ 709.211603][T21257] bridge2: left allmulticast mode [ 709.224987][T21257] bond4: left promiscuous mode [ 709.233360][T21257] bridge3: left promiscuous mode [ 709.303334][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.332936][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.438813][T21307] capability: warning: `syz.4.4755' uses 32-bit capabilities (legacy support in use) [ 709.844047][ T5790] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.090301][ T5790] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.635451][ T5266] 8021q: adding VLAN 0 to HW filter on device eth4 [ 711.140798][T21346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4768'. [ 711.459195][T20831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.476751][T21359] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 711.483286][T21359] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 711.495623][T21359] vhci_hcd vhci_hcd.0: Device attached [ 711.550222][T21360] vhci_hcd: connection closed [ 711.554891][ T3241] vhci_hcd vhci_hcd.1: stop threads [ 711.586279][ T3241] vhci_hcd vhci_hcd.1: release socket [ 711.596962][ T3241] vhci_hcd vhci_hcd.1: disconnect device [ 712.302922][T21396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4785'. [ 712.430357][T20831] veth0_vlan: entered promiscuous mode [ 712.473036][T20831] veth1_vlan: entered promiscuous mode [ 712.611137][T20831] veth0_macvtap: entered promiscuous mode [ 712.638146][T20831] veth1_macvtap: entered promiscuous mode [ 712.734352][T20831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.764153][T20831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.812181][ T146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.931531][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.971003][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.067964][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.094075][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.122450][ T3241] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.153831][T21422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4797'. [ 713.166086][ T3241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.184844][ T3241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.550978][T21431] loop1: detected capacity change from 0 to 512 [ 713.581450][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4803'. [ 713.612985][T21431] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.4801: inode has both inline data and extents flags [ 713.658538][T21431] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 713.660782][T21431] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.4801: couldn't read orphan inode 15 (err -117) [ 713.669965][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 713.670007][ C1] EXT4-fs (loop1): initial error at time 1786482221: ext4_orphan_get:1399: inode 15 [ 713.670061][ C1] EXT4-fs (loop1): last error at time 1786482221: ext4_orphan_get:1399: inode 15 [ 713.733480][T21431] loop1: lost filesystem error report for type 5 error -117 [ 713.811813][T21431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.079248][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.632142][T21467] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.639992][T21467] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.863580][T21467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.887557][T21467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.892224][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4822'. [ 715.206483][T21487] netlink: 'syz.4.4825': attribute type 12 has an invalid length. [ 715.215388][T21487] netlink: 'syz.4.4825': attribute type 29 has an invalid length. [ 715.224272][T21487] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4825'. [ 715.233655][T21487] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4825'. [ 715.261906][ T36] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.291293][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.391501][ T36] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.413182][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.217174][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4843'. [ 717.503078][T21552] syzkaller0: entered promiscuous mode [ 717.514738][T21552] syzkaller0: entered allmulticast mode [ 717.884530][T21575] loop6: detected capacity change from 0 to 128 [ 717.987587][T21575] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 718.067379][T21575] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 718.114109][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4859'. [ 718.215717][T20831] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 718.363131][T21594] loop6: detected capacity change from 0 to 128 [ 718.403245][T21594] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 718.712542][T21604] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 718.719095][T21604] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 718.733146][T21604] vhci_hcd vhci_hcd.0: Device attached [ 718.747937][T21605] vhci_hcd: connection closed [ 718.748504][T19647] vhci_hcd vhci_hcd.6: stop threads [ 718.766987][T19647] vhci_hcd vhci_hcd.6: release socket [ 718.773116][T19647] vhci_hcd vhci_hcd.6: disconnect device [ 718.798118][T21608] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 718.806313][T21608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.814541][T21608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 719.418935][T21537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.675201][ T30] audit: type=1326 audit(1786482227.250:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 719.765801][ T30] audit: type=1326 audit(1786482227.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 719.845215][T21628] syzkaller0: entered promiscuous mode [ 719.851099][T21628] syzkaller0: entered allmulticast mode [ 719.880385][T21626] loop4: detected capacity change from 0 to 2048 [ 719.897976][ T30] audit: type=1326 audit(1786482227.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 719.954109][T21626] Alternate GPT is invalid, using primary GPT. [ 719.984056][T21626] loop4: p2 p3 p7 [ 719.990572][ T30] audit: type=1326 audit(1786482227.280:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 720.080270][ T30] audit: type=1326 audit(1786482227.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 720.183773][ T30] audit: type=1326 audit(1786482227.280:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 720.319302][ T30] audit: type=1326 audit(1786482227.290:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 720.480246][ T30] audit: type=1326 audit(1786482227.290:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 720.582836][T21640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 720.589383][T21640] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 720.628688][ T30] audit: type=1326 audit(1786482227.290:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21621 comm="syz.3.4872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff29fb9e0d9 code=0x7ffc0000 [ 720.695960][T21640] vhci_hcd vhci_hcd.0: Device attached [ 720.739704][T21641] vhci_hcd: connection closed [ 720.740307][ T36] vhci_hcd vhci_hcd.1: stop threads [ 720.775316][ T36] vhci_hcd vhci_hcd.1: release socket [ 720.797665][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 720.806673][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 720.826871][ T6276] udevd[6276]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 720.841985][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 724.058700][T21654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.602315][T21710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4899'. [ 724.690587][T21714] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 724.697124][T21714] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 724.775395][T21714] vhci_hcd vhci_hcd.0: Device attached [ 724.936390][T21715] vhci_hcd: connection closed [ 725.015024][T18860] vhci_hcd vhci_hcd.6: stop threads [ 725.259549][T18860] vhci_hcd vhci_hcd.6: release socket [ 725.422664][T18860] vhci_hcd vhci_hcd.6: disconnect device [ 725.612499][T21729] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 726.446454][T21769] syzkaller0: entered promiscuous mode [ 726.466642][T21769] syzkaller0: entered allmulticast mode [ 726.593952][ T8019] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 727.505561][ T8019] usb 2-1: Using ep0 maxpacket: 32 [ 727.515974][ T8019] usb 2-1: unable to get BOS descriptor or descriptor too short [ 727.527864][ T8019] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 727.538872][ T8019] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 727.547644][ T8019] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 727.556179][ T8019] usb 2-1: config 14 has no interface number 0 [ 727.562944][ T8019] usb 2-1: config 14 has no interface number 1 [ 727.569198][ T8019] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 727.580071][ T8019] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 727.597041][ T8019] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 727.609608][ T8019] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 727.621543][ T8019] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 727.632943][ T8019] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.646298][ T8019] usb 2-1: config 14 interface 57 has no altsetting 0 [ 727.653167][ T8019] usb 2-1: config 14 interface 228 has no altsetting 0 [ 727.666126][ T8019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.674972][ T8019] usb 2-1: Product: syz [ 727.679141][ T8019] usb 2-1: Manufacturer: syz [ 727.683842][ T8019] usb 2-1: SerialNumber: syz [ 727.908716][T21767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.922826][T21767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.543331][ T8019] legousbtower 2-1:14.57: interrupt endpoints not found [ 728.750013][T21767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.784065][T21767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.814118][T21767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.832205][T21767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.847061][T21767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.859592][T21767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.879798][ T8019] legousbtower 2-1:14.228: get version request failed: -71 [ 728.890265][ T8019] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 728.912559][ T8019] usb 2-1: USB disconnect, device number 10 [ 728.920089][T21747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.099245][T21796] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 730.319645][T21855] 9pnet_fd: p9_fd_create_unix (21855): problem connecting socket: ./file0: -111 [ 730.330836][T21844] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 730.345935][T21832] syzkaller0: entered promiscuous mode [ 730.354063][T21832] syzkaller0: entered allmulticast mode [ 730.385453][T21837] tipc: Enabled bearer , priority 0 [ 730.404149][T21845] tipc: Resetting bearer [ 730.765664][T21871] loop4: detected capacity change from 0 to 1024 [ 730.788947][T21871] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 730.834003][ T8066] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 730.848671][T21871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.992370][ T8066] usb 7-1: Using ep0 maxpacket: 32 [ 731.001898][ T8066] usb 7-1: unable to get BOS descriptor or descriptor too short [ 731.014354][ T8066] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 731.025505][ T8066] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 731.034542][ T8066] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 731.044535][ T8066] usb 7-1: config 14 has no interface number 0 [ 731.050775][ T8066] usb 7-1: config 14 has no interface number 1 [ 731.057425][ T8066] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 731.068706][ T8066] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 731.080679][ T8066] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 731.092266][ T8066] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 731.110217][ T8066] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 731.121761][ T8066] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.135123][ T8066] usb 7-1: config 14 interface 57 has no altsetting 0 [ 731.142021][ T8066] usb 7-1: config 14 interface 228 has no altsetting 0 [ 731.152034][ T8066] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.169255][ T8066] usb 7-1: Product: syz [ 731.173712][ T8066] usb 7-1: Manufacturer: syz [ 731.178351][ T8066] usb 7-1: SerialNumber: syz [ 731.234286][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.426249][T21864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.440748][T21864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.074248][ T8066] legousbtower 7-1:14.57: interrupt endpoints not found [ 732.270616][T21830] tipc: Resetting bearer [ 732.272518][T21864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.287214][T21864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.299440][T21864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.309016][T21830] tipc: Disabling bearer [ 732.318154][T21864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.330099][T21864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.343942][T21864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.377504][ T8066] legousbtower 7-1:14.228: get version request failed: -71 [ 732.413310][ T8066] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 732.464210][ T8066] usb 7-1: USB disconnect, device number 2 [ 735.016934][T21927] Process accounting resumed [ 735.706361][T21906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 737.454489][ T8066] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 737.611348][ T8066] usb 1-1: Using ep0 maxpacket: 32 [ 737.632809][ T8066] usb 1-1: unable to get BOS descriptor or descriptor too short [ 737.641009][ T8066] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 737.660806][ T8066] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 737.675311][ T8066] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 737.697352][ T8066] usb 1-1: config 14 has no interface number 0 [ 737.704085][ T8066] usb 1-1: config 14 has no interface number 1 [ 737.717362][ T8066] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 737.728647][ T8066] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 737.741860][ T8066] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 737.763977][ T8066] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 737.801232][ T8066] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 737.812871][ T8066] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.826390][ T8066] usb 1-1: config 14 interface 57 has no altsetting 0 [ 737.847388][ T8066] usb 1-1: config 14 interface 228 has no altsetting 0 [ 737.875666][ T8066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.884017][ T8066] usb 1-1: Product: syz [ 737.895591][ T8066] usb 1-1: Manufacturer: syz [ 737.900283][ T8066] usb 1-1: SerialNumber: syz [ 738.135917][T21978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.147089][T21978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.772953][ T8066] legousbtower 1-1:14.57: interrupt endpoints not found [ 738.990064][T21978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.034484][T21978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.077185][T21978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.257048][T22005] syzkaller0: entered promiscuous mode [ 739.265790][T21978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.361081][T22005] syzkaller0: entered allmulticast mode [ 739.497649][T21978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.722987][T21978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.830955][T22011] tipc: Enabled bearer , priority 0 [ 739.980756][T22002] tipc: Resetting bearer [ 740.041472][ T8066] legousbtower 1-1:14.228: get version request failed: -71 [ 740.079749][ T8066] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 740.130291][ T8066] usb 1-1: USB disconnect, device number 12 [ 740.137468][T22002] tipc: Disabling bearer [ 740.508386][T22038] loop1: detected capacity change from 0 to 512 [ 740.518934][T22038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 740.559943][T22038] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 740.594654][T22038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 740.624168][T22038] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 740.647925][T22038] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 740.683473][T22038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 740.743808][T22038] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 740.843345][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.635376][T22015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.299098][T22070] loop4: detected capacity change from 0 to 512 [ 743.534568][T22070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.692759][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.031942][T22079] syzkaller0: entered promiscuous mode [ 744.033177][T22097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.037754][T22079] syzkaller0: entered allmulticast mode [ 744.089075][T22097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.095530][ T8066] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 744.153380][T22097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.271317][ T8066] usb 5-1: Using ep0 maxpacket: 32 [ 744.285992][ T8066] usb 5-1: unable to get BOS descriptor or descriptor too short [ 744.294544][ T8066] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 744.308295][ T8066] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 744.318349][ T8066] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 744.328049][ T8066] usb 5-1: config 14 has no interface number 0 [ 744.334821][ T8066] usb 5-1: config 14 has no interface number 1 [ 744.341374][ T8066] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 744.352558][ T8066] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 744.364654][ T8066] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 744.377866][ T8066] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 744.389666][ T8066] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 744.408739][ T8066] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.424089][ T8066] usb 5-1: config 14 interface 57 has no altsetting 0 [ 744.447112][ T8066] usb 5-1: config 14 interface 228 has no altsetting 0 [ 744.465278][ T8066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.484811][ T8066] usb 5-1: Product: syz [ 744.494581][ T8066] usb 5-1: Manufacturer: syz [ 744.504905][ T8066] usb 5-1: SerialNumber: syz [ 744.764098][T22091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.782717][T22091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.063423][ T8066] legousbtower 5-1:14.57: interrupt endpoints not found [ 746.086960][T22120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.124809][T22120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.160526][T22120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.178288][T22120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.203259][T22120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.219260][T22120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.290428][ T8066] legousbtower 5-1:14.228: get version request failed: -71 [ 746.311506][ T8066] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 746.343668][ T8066] usb 5-1: USB disconnect, device number 6 [ 746.553665][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.788982][T22136] syzkaller0: entered promiscuous mode [ 748.796996][T22136] syzkaller0: entered allmulticast mode [ 749.071514][T22162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5019'. [ 749.129705][T22163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5019'. [ 750.318100][T22170] syz_tun: entered allmulticast mode [ 750.339460][T22172] tipc: Enabling of bearer rejected, failed to enable media [ 750.595218][T22187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5027'. [ 750.632466][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5027'. [ 750.664577][T22187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5027'. [ 750.694636][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5027'. [ 750.902168][T22197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5031'. [ 751.232566][T22210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5037'. [ 751.302952][T22217] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5037'. [ 752.583882][T22212] tipc: Enabled bearer , priority 0 [ 752.688971][T22211] tipc: Disabling bearer [ 753.375958][T22249] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5053'. [ 753.470458][T22252] loop6: detected capacity change from 0 to 512 [ 753.563445][T22252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.633262][T22252] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 753.747974][T22252] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 753.880703][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.987970][T22275] tipc: Enabled bearer , priority 0 [ 754.082098][T22282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5065'. [ 754.133905][T22269] tipc: Disabling bearer [ 754.150420][T22278] syzkaller0: entered promiscuous mode [ 754.158630][T22278] syzkaller0: entered allmulticast mode [ 756.854967][T22301] loop0: detected capacity change from 0 to 2048 [ 756.956916][T22306] loop5: detected capacity change from 0 to 1024 [ 756.975555][T22306] EXT4-fs: Ignoring removed oldalloc option [ 757.011001][T22301] Alternate GPT is invalid, using primary GPT. [ 757.055840][T22301] loop0: p2 p3 p7 [ 757.076156][T22306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.044775][ T30] audit: type=1804 audit(1786482265.610:15): pid=22306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5073" name="/newroot/264/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 758.109192][T22323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5078'. [ 758.382684][T16855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.582157][T22333] loop1: detected capacity change from 0 to 512 [ 758.647665][T22336] loop6: detected capacity change from 0 to 164 [ 758.721957][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 758.732042][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 758.742964][ T6276] udevd[6276]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 758.802744][T22328] syzkaller0: entered promiscuous mode [ 758.841889][T22340] loop5: detected capacity change from 0 to 2048 [ 759.055414][T22328] syzkaller0: entered allmulticast mode [ 759.138827][T22340] Alternate GPT is invalid, using primary GPT. [ 759.145695][T22340] loop5: p1 p2 p3 [ 759.526000][T22336] ISOFS: unable to read i-node block [ 759.542291][T22345] 9p: Bad value for 'rfdno' [ 759.606924][T22336] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 759.863735][ T6036] udevd[6036]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 759.875071][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 759.885197][ T6399] udevd[6399]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 762.767961][T22375] syzkaller0: entered promiscuous mode [ 762.783902][T22375] syzkaller0: entered allmulticast mode [ 762.972716][T22379] loop0: detected capacity change from 0 to 2048 [ 763.042425][T22383] loop5: detected capacity change from 0 to 1024 [ 763.074250][T22379] Alternate GPT is invalid, using primary GPT. [ 763.075179][T22383] EXT4-fs: Ignoring removed oldalloc option [ 763.094665][T22379] loop0: p2 p3 p7 [ 763.129319][T22383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.244740][ T30] audit: type=1804 audit(1786482270.820:16): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5095" name="/newroot/267/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 763.492985][T22405] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 763.536796][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 763.537163][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 763.547697][ T6036] udevd[6036]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 764.521072][T22409] syzkaller0: entered promiscuous mode [ 764.625832][T22409] syzkaller0: entered allmulticast mode [ 764.786841][T16855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.940529][T22428] loop5: detected capacity change from 0 to 512 [ 764.957340][T22428] EXT4-fs: Ignoring removed nobh option [ 764.967922][T22428] EXT4-fs: Ignoring removed oldalloc option [ 764.998582][T22430] 9p: Bad value for 'rfdno' [ 765.009745][T22428] EXT4-fs: old and new quota format mixing [ 766.277473][T22394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.518718][T22454] loop1: detected capacity change from 0 to 2048 [ 766.614717][T22454] Alternate GPT is invalid, using primary GPT. [ 766.630625][T22454] loop1: p2 p3 p7 [ 766.850235][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 766.862396][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 766.878180][ T6276] udevd[6276]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 767.992623][T22504] loop6: detected capacity change from 0 to 1024 [ 768.060790][T22504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.480444][T22526] syzkaller0: entered promiscuous mode [ 768.486624][T22526] syzkaller0: entered allmulticast mode [ 768.987270][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.434977][T22565] loop1: detected capacity change from 0 to 1024 [ 770.451860][T22568] loop4: detected capacity change from 0 to 1024 [ 770.483805][T22565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.529759][T22568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.628462][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.675649][T22490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.235927][T22592] loop6: detected capacity change from 0 to 128 [ 771.295457][T22592] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 771.385862][T22592] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 771.514550][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.762334][T22611] loop1: detected capacity change from 0 to 2048 [ 771.854565][T22611] Alternate GPT is invalid, using primary GPT. [ 771.861842][T22611] loop1: p2 p3 p7 [ 771.894961][T20831] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 772.038181][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5172'. [ 772.146283][ T6276] udevd[6276]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 772.155614][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 772.157453][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 772.309913][T22625] netlink: 'syz.1.5173': attribute type 1 has an invalid length. [ 772.379147][T22627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5173'. [ 773.268422][T22612] syzkaller0: entered promiscuous mode [ 773.276370][T22612] syzkaller0: entered allmulticast mode [ 773.284657][T22617] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5170'. [ 773.294131][T22619] tipc: Enabling of bearer rejected, already enabled [ 773.323269][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5173'. [ 773.323858][T22625] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 773.841654][T22651] loop4: detected capacity change from 0 to 2048 [ 773.928662][T22651] Alternate GPT is invalid, using primary GPT. [ 773.945738][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5187'. [ 773.955484][T22651] loop4: p2 p3 p7 [ 774.172527][T22665] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5192'. [ 774.225077][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 774.227868][ T6276] udevd[6276]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 774.246036][ T6036] udevd[6036]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 774.469271][T22677] loop6: detected capacity change from 0 to 164 [ 774.502972][T22680] loop5: detected capacity change from 0 to 512 [ 774.517011][T22677] ISOFS: unable to read i-node block [ 774.535654][T22677] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 774.618095][T22680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.717957][T22680] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.045745][T22702] loop0: detected capacity change from 0 to 1024 [ 775.123941][T22702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.250456][T16855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.404892][T22710] loop6: detected capacity change from 0 to 1024 [ 775.465492][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5207'. [ 775.492271][T22710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.865261][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.021177][T22728] loop6: detected capacity change from 0 to 164 [ 776.069022][T22728] ISOFS: unable to read i-node block [ 776.077848][T22728] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 776.275732][ T30] audit: type=1800 audit(1786482283.850:17): pid=22702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5202" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 776.780757][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.184505][T22758] loop5: detected capacity change from 0 to 128 [ 777.242638][T22758] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 777.291698][T22761] sctp: [Deprecated]: syz.0.5224 (pid 22761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 777.291698][T22761] Use struct sctp_sack_info instead [ 777.302823][T22758] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 777.484278][T22764] loop0: detected capacity change from 0 to 1024 [ 777.574980][T22764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.577642][T16855] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 778.217268][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.326972][T22772] loop0: detected capacity change from 0 to 164 [ 778.343912][T22772] ISOFS: unable to read i-node block [ 778.359987][T22772] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 778.565204][T22718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5208'. [ 779.225924][T22803] loop4: detected capacity change from 0 to 1024 [ 779.267067][T22803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.817120][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.778979][T22847] loop6: detected capacity change from 0 to 2048 [ 780.929919][T22847] Alternate GPT is invalid, using primary GPT. [ 780.957555][T22847] loop6: p2 p3 p7 [ 781.032891][T22851] loop4: detected capacity change from 0 to 1024 [ 781.081024][T22851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.349177][ T6276] udevd[6276]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 781.362922][ T5624] udevd[5624]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 781.381746][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 781.778689][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.866946][T22785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.716081][T22891] loop0: detected capacity change from 0 to 1024 [ 783.776254][T22891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.850342][T22899] loop5: detected capacity change from 0 to 2048 [ 783.896038][T22899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.909036][T22902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5275'. [ 783.939627][T22902] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5275'. [ 784.023558][ T5790] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 784.107312][ T5790] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 784.137389][ T5790] EXT4-fs (loop5): This should not happen!! Data will be lost [ 784.137389][ T5790] [ 784.154297][T22910] loop1: detected capacity change from 0 to 1024 [ 784.160770][ T5790] EXT4-fs (loop5): Total free blocks count 0 [ 784.168542][T22910] EXT4-fs: Ignoring removed orlov option [ 784.196275][ T5790] EXT4-fs (loop5): Free/Dirty block details [ 784.229283][ T5790] EXT4-fs (loop5): free_blocks=66060288 [ 784.245464][T22910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.268644][ T5790] EXT4-fs (loop5): dirty_blocks=32 [ 784.276107][ T5790] EXT4-fs (loop5): Block reservation details [ 784.289746][ T5790] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 784.302183][ T5790] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 784.317994][T16855] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 784.572613][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.980234][T22931] syzkaller0: entered promiscuous mode [ 785.004397][T22931] syzkaller0: entered allmulticast mode [ 785.047042][T22933] loop5: detected capacity change from 0 to 256 [ 785.085065][T22933] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 785.159224][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.751005][T22956] loop0: detected capacity change from 0 to 1024 [ 785.780382][T22956] EXT4-fs: Ignoring removed oldalloc option [ 785.833195][T22956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.931565][ T30] audit: type=1804 audit(1786482293.500:18): pid=22956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5290" name="/newroot/224/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 786.684509][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.058971][T22981] loop0: detected capacity change from 0 to 1024 [ 787.105729][T22981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.302360][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.388054][T23042] loop1: detected capacity change from 0 to 1024 [ 789.426816][T23042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.065800][T23079] capability: warning: `syz.3.5327' uses deprecated v2 capabilities in a way that may be insecure [ 791.380733][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.870537][T23109] syzkaller0: entered promiscuous mode [ 792.898596][T23109] syzkaller0: entered allmulticast mode [ 796.329770][T23190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5361'. [ 796.459846][T23194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5363'. [ 797.557048][T23181] syzkaller0: entered promiscuous mode [ 797.563095][T23181] syzkaller0: entered allmulticast mode [ 798.248815][T23235] loop6: detected capacity change from 0 to 1024 [ 798.329795][T23235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.186871][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.304594][T23254] syzkaller0: entered promiscuous mode [ 799.336230][T23254] syzkaller0: entered allmulticast mode [ 799.876921][T23277] loop5: detected capacity change from 0 to 1024 [ 799.936271][T23277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.227511][T16855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.478665][T23344] loop4: detected capacity change from 0 to 1024 [ 802.498241][T23344] EXT4-fs: Ignoring removed oldalloc option [ 802.569081][T23344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.650678][ T30] audit: type=1804 audit(1786482310.220:19): pid=23344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5417" name="/newroot/245/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 802.762160][T23351] EXT4-fs (loop4): shut down requested (0) [ 803.113642][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.440835][T23378] loop4: detected capacity change from 0 to 256 [ 804.497506][T23378] FAT-fs (loop4): Directory bread(block 1285) failed [ 804.524942][T23378] FAT-fs (loop4): Directory bread(block 1286) failed [ 804.555301][T23378] FAT-fs (loop4): Directory bread(block 1287) failed [ 804.607007][T23378] FAT-fs (loop4): Directory bread(block 1288) failed [ 804.710371][T23378] FAT-fs (loop4): Directory bread(block 1285) failed [ 804.732715][T23378] FAT-fs (loop4): Directory bread(block 1286) failed [ 804.770109][T23378] FAT-fs (loop4): Directory bread(block 1287) failed [ 804.802100][T23378] FAT-fs (loop4): Directory bread(block 1288) failed [ 804.831523][T23378] FAT-fs (loop4): Directory bread(block 1285) failed [ 804.860629][T23378] FAT-fs (loop4): Directory bread(block 1286) failed [ 805.564785][T23404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.619218][T23408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.717863][T23404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.497940][T23429] loop1: detected capacity change from 0 to 1024 [ 806.525704][T23429] EXT4-fs: Ignoring removed oldalloc option [ 806.599868][T23429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.755004][ T30] audit: type=1804 audit(1786482314.330:20): pid=23429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5449" name="/newroot/202/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 806.792452][T23429] EXT4-fs (loop1): shut down requested (0) [ 806.948332][T23444] loop6: detected capacity change from 0 to 1024 [ 807.004832][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.048379][T23444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.367861][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.993573][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.132529][T23479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5467'. [ 808.416539][T23484] tipc: Enabling of bearer rejected, already enabled [ 808.439852][T23485] loop6: detected capacity change from 0 to 1024 [ 808.460704][T23484] netlink: 'syz.4.5470': attribute type 1 has an invalid length. [ 808.469984][T23485] EXT4-fs: Ignoring removed oldalloc option [ 808.525859][T23485] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.551261][ T30] audit: type=1804 audit(1786482316.120:21): pid=23485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5469" name="/newroot/126/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 808.597361][T23491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5470'. [ 808.608821][T23485] EXT4-fs (loop6): shut down requested (0) [ 808.772605][T23484] bond5: entered promiscuous mode [ 808.850953][T23484] 8021q: adding VLAN 0 to HW filter on device bond5 [ 808.943559][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.066330][T23496] bond5: (slave bridge5): making interface the new active one [ 809.075765][T23496] bridge5: entered promiscuous mode [ 809.083012][T23496] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 809.096223][T23491] bond5: entered allmulticast mode [ 809.142992][T23491] bridge5: entered allmulticast mode [ 809.203641][T23499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5474'. [ 809.949507][T23526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5482'. [ 810.072142][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 811.186107][T23540] loop4: detected capacity change from 0 to 1024 [ 811.209978][T23540] EXT4-fs: Ignoring removed oldalloc option [ 811.282814][T23548] tipc: Enabling of bearer rejected, already enabled [ 811.292132][T23548] netlink: 'syz.0.5490': attribute type 1 has an invalid length. [ 811.312942][T23540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.319776][T23542] loop1: detected capacity change from 0 to 1024 [ 811.348576][ T30] audit: type=1804 audit(1786482318.920:22): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5487" name="/newroot/257/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 811.380367][T23540] EXT4-fs (loop4): shut down requested (0) [ 811.387551][T23548] bond2: entered promiscuous mode [ 811.389831][T23551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5490'. [ 811.394100][T23548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 811.410322][T23550] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5491'. [ 811.424437][T23551] bond2: entered allmulticast mode [ 811.447740][T23542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.548801][T23555] netlink: 'syz.5.5492': attribute type 1 has an invalid length. [ 811.889305][T23548] bond2: (slave bridge1): making interface the new active one [ 811.941337][T23548] bridge1: entered promiscuous mode [ 812.037117][T23548] bridge1: entered allmulticast mode [ 812.264244][T23548] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 812.292518][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.316585][T23555] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 812.850882][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.957076][T23567] TC_ACT_REPEAT abuse ? [ 813.150648][T23573] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5500'. [ 813.470953][T23585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5505'. [ 815.108215][T23617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5519'. [ 815.283861][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5520'. [ 815.351698][T23624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5521'. [ 815.366306][T23625] loop0: detected capacity change from 0 to 256 [ 815.387892][T23625] FAT-fs (loop0): Directory bread(block 1285) failed [ 815.432843][T23625] FAT-fs (loop0): Directory bread(block 1286) failed [ 815.455699][T23625] FAT-fs (loop0): Directory bread(block 1287) failed [ 815.480292][T23625] FAT-fs (loop0): Directory bread(block 1288) failed [ 816.696875][T23638] loop6: detected capacity change from 0 to 1024 [ 816.792794][T23638] EXT4-fs: Ignoring removed oldalloc option [ 816.878955][T23638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.106202][ T30] audit: type=1804 audit(1786482324.650:23): pid=23638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5527" name="/newroot/139/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 817.231981][T23648] EXT4-fs (loop6): shut down requested (0) [ 818.527597][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.544402][T23657] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[23658] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[23657] [ 819.330488][T23676] loop5: detected capacity change from 0 to 256 [ 819.372401][T23676] FAT-fs (loop5): Directory bread(block 1285) failed [ 819.429867][T23676] FAT-fs (loop5): Directory bread(block 1286) failed [ 819.474142][T23676] FAT-fs (loop5): Directory bread(block 1287) failed [ 819.504412][T23676] FAT-fs (loop5): Directory bread(block 1288) failed [ 820.279125][T23686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5544'. [ 820.329601][T23686] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5544'. [ 820.690116][T23693] loop0: detected capacity change from 0 to 1024 [ 820.793782][T23693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.120519][T23703] loop4: detected capacity change from 0 to 512 [ 821.136659][T23703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 821.203331][T23703] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.5548: bad orphan inode 131083 [ 821.264168][T23703] loop4: lost filesystem error report for type 5 error -117 [ 821.275486][T23703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.349760][ T30] audit: type=1326 audit(1786482328.920:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 821.395928][ T30] audit: type=1326 audit(1786482328.950:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 821.447727][ T30] audit: type=1326 audit(1786482328.950:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 821.547348][ T30] audit: type=1326 audit(1786482328.950:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 821.622139][ T30] audit: type=1326 audit(1786482328.950:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 821.705571][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.717204][ T30] audit: type=1326 audit(1786482328.950:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 821.800081][ T30] audit: type=1326 audit(1786482328.950:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 822.084185][ T30] audit: type=1326 audit(1786482328.950:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 822.486426][ T30] audit: type=1326 audit(1786482328.950:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 822.582470][ T30] audit: type=1326 audit(1786482328.950:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 822.608639][ T30] audit: type=1326 audit(1786482328.950:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 822.608716][ T30] audit: type=1326 audit(1786482328.950:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 822.608790][ T30] audit: type=1326 audit(1786482328.950:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23710 comm="syz.1.5551" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9814f9e0d9 code=0x7ffc0000 [ 824.365939][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.568685][T23753] netlink: 'syz.3.5567': attribute type 1 has an invalid length. [ 824.605599][T23755] loop5: detected capacity change from 0 to 128 [ 824.680509][T23755] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 824.819615][T23755] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.650594][T23753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 825.751048][T16855] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 825.768294][T23756] bond4: (slave geneve2): making interface the new active one [ 825.806497][T23756] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 825.842631][ T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.888579][ T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.929516][ T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.957975][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.335773][T23784] loop4: detected capacity change from 0 to 1024 [ 826.352983][T23782] TC_ACT_REPEAT abuse ? [ 826.426624][T23784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.933649][T23810] loop0: detected capacity change from 0 to 1024 [ 827.958925][T23810] EXT4-fs: Ignoring removed oldalloc option [ 828.052236][T23810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.115059][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5589'. [ 828.130812][ T30] audit: type=1804 audit(1786482335.700:37): pid=23810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5587" name="/newroot/270/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 828.240196][T23819] EXT4-fs (loop0): shut down requested (0) [ 828.461186][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.952212][T19647] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.952304][T19647] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.952365][T19647] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.952425][T19647] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.059350][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.183050][T23841] loop1: detected capacity change from 0 to 1024 [ 829.239828][T23841] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 829.335471][T23841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.017929][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.084115][T23865] tipc: Enabling of bearer rejected, failed to enable media [ 830.348629][T23869] loop6: detected capacity change from 0 to 128 [ 830.417377][T23869] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 830.447442][T23869] FAT-fs (loop6): Filesystem has been set read-only [ 830.802151][T23875] syzkaller0: entered promiscuous mode [ 830.819739][T23875] syzkaller0: entered allmulticast mode [ 831.060171][T23887] loop0: detected capacity change from 0 to 1024 [ 831.185561][T23887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.625830][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.215471][T23945] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5624'. [ 834.236795][T23946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5626'. [ 834.260532][T23945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5624'. [ 834.484897][T23953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5628'. [ 834.656919][T23963] veth1_to_bond: entered promiscuous mode [ 834.688251][T23963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5633'. [ 834.720039][T23963] veth1_to_bond (unregistering): left promiscuous mode [ 834.768318][T23963] bond0: (slave bond_slave_1): Releasing backup interface [ 834.888902][T23966] syzkaller0: entered promiscuous mode [ 834.897196][T23966] syzkaller0: entered allmulticast mode [ 836.070881][T23987] bond5: left promiscuous mode [ 836.082952][T23987] bridge5: left promiscuous mode [ 836.100644][T23987] bond5: left allmulticast mode [ 836.109324][T23987] bridge5: left allmulticast mode [ 836.120267][T23993] loop1: detected capacity change from 0 to 256 [ 836.308499][T23998] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5644'. [ 836.353440][T23998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5644'. [ 836.358179][T23992] syzkaller0: entered promiscuous mode [ 836.401752][T23992] syzkaller0: entered allmulticast mode [ 839.288733][T24055] loop1: detected capacity change from 0 to 1024 [ 839.314245][T24057] bond2: left promiscuous mode [ 839.320406][T24061] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5661'. [ 839.333303][T24055] EXT4-fs: Ignoring removed oldalloc option [ 839.342031][T24057] bridge1: left promiscuous mode [ 839.347240][T24061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5661'. [ 839.356803][T24057] bond2: left allmulticast mode [ 839.366641][T24064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5660'. [ 839.379136][T24057] bridge1: left allmulticast mode [ 839.406249][T24055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.438701][T24060] veth1_to_bond: entered promiscuous mode [ 839.476028][T24064] veth1_to_bond (unregistering): left promiscuous mode [ 839.570003][T24064] bond0: (slave bond_slave_1): Releasing backup interface [ 839.585180][ T30] audit: type=1804 audit(1786482347.150:38): pid=24055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5658" name="/newroot/236/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 839.674577][T24077] EXT4-fs (loop1): shut down requested (0) [ 839.948060][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.106623][T24090] loop0: detected capacity change from 0 to 128 [ 840.142894][T24090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 840.160562][T24090] System zones: 1-3, 19-19, 35-36 [ 840.179243][T24090] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 840.257923][T24090] ext4 filesystem being mounted at /283/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 840.396771][T24093] syzkaller0: entered promiscuous mode [ 840.425830][T24093] syzkaller0: entered allmulticast mode [ 840.823508][T17247] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 841.105281][T24127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.140287][T24127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.209506][T24127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.666958][T24138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5682'. [ 842.727732][T24101] syzkaller0: entered promiscuous mode [ 842.733316][T24101] syzkaller0: entered allmulticast mode [ 842.814701][T24137] veth1_to_bond: entered promiscuous mode [ 842.835666][T24137] veth1_to_bond: left promiscuous mode [ 842.925028][T24138] bond0: (slave bond_slave_1): Releasing backup interface [ 843.282267][T24154] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5688'. [ 843.853258][T24158] loop5: detected capacity change from 0 to 256 [ 844.067387][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5691'. [ 844.094255][T24163] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5691'. [ 844.112978][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5691'. [ 844.122176][T24164] loop0: detected capacity change from 0 to 256 [ 844.138727][T24163] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5691'. [ 844.562641][T24182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.698572][T24178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.798605][T24187] syzkaller0: entered promiscuous mode [ 844.817393][T24187] syzkaller0: entered allmulticast mode [ 845.044811][T24195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5704'. [ 845.168654][T24199] veth1_to_bond: entered promiscuous mode [ 845.191001][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5706'. [ 845.223367][T24199] veth1_to_bond (unregistering): left promiscuous mode [ 845.276839][T24199] bond0: (slave bond_slave_1): Releasing backup interface [ 845.302429][T24201] loop0: detected capacity change from 0 to 128 [ 845.502167][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5710'. [ 845.548175][T24207] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5710'. [ 845.591057][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5710'. [ 845.644838][T24207] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5710'. [ 846.921050][T24226] syzkaller0: entered promiscuous mode [ 846.964219][T24226] syzkaller0: entered allmulticast mode [ 847.349188][T24237] loop4: detected capacity change from 0 to 1024 [ 847.385188][T24239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.412434][T24237] EXT4-fs: Ignoring removed oldalloc option [ 847.506964][T24241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.561294][T24237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.687718][T24236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.729452][ T30] audit: type=1804 audit(1786482355.290:39): pid=24237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5723" name="/newroot/294/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 847.824833][T24248] EXT4-fs (loop4): shut down requested (0) [ 848.036424][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5726'. [ 848.056565][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.080400][T24250] syzkaller0: entered promiscuous mode [ 848.107563][T24250] syzkaller0: entered allmulticast mode [ 848.147485][T24256] loop0: detected capacity change from 0 to 512 [ 849.837882][T24281] loop4: detected capacity change from 0 to 1024 [ 849.933021][T24281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 850.739765][T24301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.791432][T24301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.888141][T24299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.200067][T24306] loop0: detected capacity change from 0 to 128 [ 851.231335][T24306] EXT4-fs: Ignoring removed bh option [ 851.277767][T24306] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 851.335133][T24306] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 851.418461][ T30] audit: type=1800 audit(1786482358.990:40): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5739" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 851.554809][T24306] loop0: detected capacity change from 128 to 64 [ 852.765982][T17247] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 852.929367][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.095356][T24334] loop5: detected capacity change from 0 to 1024 [ 853.157112][T24334] EXT4-fs: Ignoring removed oldalloc option [ 853.249431][T24334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.390915][ T30] audit: type=1804 audit(1786482360.960:41): pid=24334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5761" name="/newroot/365/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 853.499468][T24350] EXT4-fs (loop5): shut down requested (2) [ 853.704545][T24355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.720697][T16855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.759707][T24355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.860836][T24352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.995033][T24360] loop5: detected capacity change from 0 to 128 [ 854.646179][T24370] loop5: detected capacity change from 0 to 1024 [ 854.758012][T24370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.975510][T24383] netlink: 'syz.1.5777': attribute type 1 has an invalid length. [ 855.162843][T24388] loop4: detected capacity change from 0 to 128 [ 855.200327][T24388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 855.223024][T24388] System zones: 1-3, 19-19, 35-36 [ 855.241680][T24388] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 855.257587][T24388] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 855.264062][T24383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 855.389504][T24385] bond3: entered promiscuous mode [ 855.398955][T17788] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.409030][T24385] bond3: entered allmulticast mode [ 855.577323][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5781'. [ 855.611511][T24395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5781'. [ 855.642122][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5781'. [ 855.676590][T24395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5781'. [ 856.140974][ T30] audit: type=1800 audit(1786482363.710:42): pid=24370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5773" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 856.258089][T24409] loop4: detected capacity change from 0 to 1024 [ 856.303759][T24409] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 856.503630][T24409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.979878][T17788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.215192][T16855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.230539][T24428] loop1: detected capacity change from 0 to 128 [ 858.058990][T24428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 858.116783][T24428] System zones: 1-3, 19-19, 35-36 [ 858.125773][T24428] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 858.210504][T24428] ext4 filesystem being mounted at /258/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 858.535280][T18280] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 858.757783][T24454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5804'. [ 858.852653][T24457] loop0: detected capacity change from 0 to 1024 [ 858.877219][T24458] netlink: 'syz.1.5803': attribute type 1 has an invalid length. [ 858.900119][T24457] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 858.977906][T24457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.999319][T24466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5803'. [ 859.268684][T24458] bond4: entered promiscuous mode [ 859.278131][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.300786][T24458] 8021q: adding VLAN 0 to HW filter on device bond4 [ 859.341866][T24466] bond4: entered allmulticast mode [ 859.461988][T24470] bond4: (slave bridge4): making interface the new active one [ 859.514983][T24470] bridge4: entered promiscuous mode [ 859.542110][T24470] bridge4: entered allmulticast mode [ 859.591846][T24470] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 859.618599][T24484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5813'. [ 859.996164][T24488] loop4: detected capacity change from 0 to 128 [ 860.024455][T24488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 860.069718][T24488] System zones: 1-3, 19-19, 35-36 [ 860.078124][T24488] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 860.128270][T24488] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 860.355414][T17788] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 860.639245][T24495] syzkaller0: entered promiscuous mode [ 860.659415][T24495] syzkaller0: entered allmulticast mode [ 860.800236][T24503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.058555][T24508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5822'. [ 861.425126][T24497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.893740][T24520] loop5: detected capacity change from 0 to 1024 [ 861.974475][T24520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.109482][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5829'. [ 862.126172][T24529] loop6: detected capacity change from 0 to 128 [ 862.157861][T24529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 862.178901][T24529] System zones: 1-3, 19-19, 35-36 [ 862.196985][T24529] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 862.228292][T24529] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 862.276779][T16855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.518731][T20831] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 863.706988][T24526] bridge0: port 3(syz_tun) entered blocking state [ 863.714139][T24526] bridge0: port 3(syz_tun) entered disabled state [ 863.720857][T24526] syz_tun: entered allmulticast mode [ 863.728838][T24526] syz_tun: entered promiscuous mode [ 863.798363][T24544] loop4: detected capacity change from 0 to 128 [ 863.813769][T24544] EXT4-fs: Ignoring removed bh option [ 863.928172][T24544] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 863.990799][T24550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5837'. [ 864.020166][T24544] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 864.067438][T24552] process 'syz.3.5839' launched './file0' with NULL argv: empty string added [ 864.161371][T24544] loop4: detected capacity change from 128 to 64 [ 864.179064][T24559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Out of memory [ 864.236590][T24559] EXT4-fs error (device loop4): ext4_ext_tree_init:882: inode #13: comm syz.4.5836: mark_inode_dirty error [ 864.713191][T24559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Out of memory [ 865.054798][T24559] EXT4-fs error (device loop4): __ext4_new_inode:1349: inode #13: comm syz.4.5836: mark_inode_dirty error [ 865.178574][T24559] EXT4-fs error (device loop4) in __ext4_new_inode:1351: Out of memory [ 865.194755][T24559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Out of memory [ 865.241830][T24559] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #13: comm syz.4.5836: mark_inode_dirty error [ 865.285534][T24574] loop5: detected capacity change from 0 to 128 [ 865.291020][T24559] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -12 [ 865.304747][T24559] EXT4-fs warning (device loop4): ext4_evict_inode:269: couldn't mark inode dirty (err -12) [ 865.331650][T24574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 865.375171][T24574] System zones: 1-3, 19-19, 35-36 [ 865.412152][T24574] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 865.474767][T24574] ext4 filesystem being mounted at /375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 865.478860][T24544] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Out of memory [ 865.623362][T24544] EXT4-fs error (device loop4): ext4_ext_tree_init:882: inode #14: comm syz.4.5836: mark_inode_dirty error [ 865.637410][T24582] loop1: detected capacity change from 0 to 1024 [ 865.646661][T24582] EXT4-fs: Ignoring removed oldalloc option [ 865.694200][T24544] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Out of memory [ 865.729255][T24582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.764505][T24582] EXT4-fs (loop1): shut down requested (0) [ 865.770507][T24580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.775108][T16855] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 865.805974][T24544] loop4: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -12 [ 865.807979][T24544] EXT4-fs warning (device loop4): ext4_evict_inode:269: couldn't mark inode dirty (err -12) [ 865.813731][T24562] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -12 [ 865.814134][T24562] EXT4-fs warning (device loop4): ext4_evict_inode:269: couldn't mark inode dirty (err -12) [ 865.816285][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5850'. [ 865.822992][T24570] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -12 [ 865.823380][T24570] EXT4-fs warning (device loop4): ext4_evict_inode:269: couldn't mark inode dirty (err -12) [ 865.827917][T24579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.895514][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.897668][T24588] bond0: (slave bond_slave_1): Releasing backup interface [ 866.786267][T17788] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 867.169911][T24622] loop1: detected capacity change from 0 to 128 [ 867.220501][T24622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 867.235101][T24622] System zones: 1-3, 19-19, 35-36 [ 867.314148][T24622] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 867.374300][T24622] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 867.657101][T18280] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 867.878138][T24639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5868'. [ 867.907651][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 867.919185][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 867.927490][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 867.935799][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 867.943646][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 868.238809][ T146] bridge_slave_1: left allmulticast mode [ 868.253541][ T146] bridge_slave_1: left promiscuous mode [ 868.281386][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.323848][ T146] bridge_slave_0: left allmulticast mode [ 868.341719][ T146] bridge_slave_0: left promiscuous mode [ 868.354932][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.436544][T24646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.554085][ T146] batman_adv: batadv0: Removing interface: ip6gretap1 [ 868.739780][ T146] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 868.795738][ T146] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 868.832362][ T146] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 868.899130][ T146] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 868.940505][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.964222][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.980325][ T146] bond0 (unregistering): Released all slaves [ 868.987042][T24645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.036249][ T146] bond1 (unregistering): Released all slaves [ 869.103618][ T146] bond2 (unregistering): Released all slaves [ 869.168412][ T146] bond3 (unregistering): Released all slaves [ 869.224198][ T146] bond4 (unregistering): Released all slaves [ 869.282553][ T146] bond5 (unregistering): Released all slaves [ 869.436811][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.512341][ T146] tipc: Disabling bearer [ 869.538415][ T146] tipc: Left network mode [ 869.787416][T24690] loop6: detected capacity change from 0 to 128 [ 869.866070][T24690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 869.896471][T24690] System zones: 1-3, 19-19, 35-36 [ 869.990212][T24690] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 870.003639][ T50] Bluetooth: hci2: command tx timeout [ 870.072048][T24690] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 870.223348][ T146] hsr_slave_0: left promiscuous mode [ 870.266458][ T146] hsr_slave_1: left promiscuous mode [ 870.289776][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.358932][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.366892][T20831] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 870.401256][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5886'. [ 870.575613][T24719] netlink: 'syz.6.5888': attribute type 1 has an invalid length. [ 870.898316][ T146] team0 (unregistering): Port device team_slave_1 removed [ 870.929244][ T146] team0 (unregistering): Port device team_slave_0 removed [ 871.243138][T24719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 871.324108][T24724] bond1: (slave geneve2): making interface the new active one [ 871.333561][T24724] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 871.354520][T24724] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 871.370195][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 871.422867][ T5793] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.454860][ T5793] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.488071][ T5793] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.703437][T24744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.781749][T24745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.881187][T19647] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.902299][T24744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.024963][T24761] tipc: Enabling of bearer rejected, already enabled [ 872.033599][T24761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5900'. [ 872.044603][T24761] netlink: 'syz.3.5900': attribute type 1 has an invalid length. [ 872.057740][T24763] loop1: detected capacity change from 0 to 128 [ 872.071520][ T50] Bluetooth: hci2: command tx timeout [ 872.085132][T24763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 872.099814][T24766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5900'. [ 872.122321][T24763] System zones: 1-3, 19-19, 35-36 [ 872.170105][T24763] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 872.238301][T24763] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 872.257241][T24761] bond5: entered promiscuous mode [ 872.276344][T24761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 872.393888][T24766] bond5: entered allmulticast mode [ 872.466738][T18280] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 872.487447][T24776] bond5: (slave bridge2): making interface the new active one [ 872.503503][T24776] bridge2: entered promiscuous mode [ 872.509152][T24776] bridge2: entered allmulticast mode [ 872.526716][T24776] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 872.669963][T24787] loop5: detected capacity change from 0 to 1024 [ 872.717798][T24787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.738466][T24792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5903'. [ 873.585383][T16855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.037410][T24824] loop0: detected capacity change from 0 to 512 [ 874.058854][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 874.082777][T24640] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.090974][T24640] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.098809][T24640] bridge_slave_0: entered allmulticast mode [ 874.125121][T24824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.125301][T24640] bridge_slave_0: entered promiscuous mode [ 874.149773][ T8019] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 874.161555][ T50] Bluetooth: hci2: command tx timeout [ 874.168574][T24824] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.174641][T24640] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.186234][T24640] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.193508][T24640] bridge_slave_1: entered allmulticast mode [ 874.218043][T24640] bridge_slave_1: entered promiscuous mode [ 874.362408][ T8019] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 874.383818][ T8019] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.415732][ T8019] usb 6-1: config 0 has no interfaces? [ 874.423189][T24640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.435348][T24640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.440088][ T8019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.446448][T24838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.456383][ T8019] usb 6-1: config 0 descriptor?? [ 874.458396][T24838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.488918][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.519927][T24835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.613518][T24640] team0: Port device team_slave_0 added [ 874.637760][T24640] team0: Port device team_slave_1 added [ 874.783335][T24640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.783377][T24640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.786876][T24640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.794778][T24640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.794802][T24640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.794850][T24640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.803158][ T1207] usb 6-1: USB disconnect, device number 16 [ 875.000134][T24640] hsr_slave_0: entered promiscuous mode [ 875.005084][T24640] hsr_slave_1: entered promiscuous mode [ 875.008411][T24640] debugfs: 'hsr0' already exists in 'hsr' [ 875.008439][T24640] Cannot create hsr debugfs directory [ 875.561807][T24863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5922'. [ 875.955120][T24873] syzkaller0: entered promiscuous mode [ 875.978256][T24873] syzkaller0: entered allmulticast mode [ 876.231212][ T50] Bluetooth: hci2: command tx timeout [ 877.003894][T24910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5929'. [ 877.013267][T24910] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5929'. [ 877.022875][T24910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5929'. [ 877.032653][T24910] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5929'. [ 877.900805][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7 [ 879.491820][T24640] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 879.564561][T24640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 879.600098][T24640] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 879.672061][T24640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 879.705374][T24640] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 879.727134][T24640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 879.780781][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 879.794431][T24640] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 879.801644][T24952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5942'. [ 879.812211][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 879.821908][T24952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5942'. [ 879.838202][T24640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 879.942807][T24962] loop6: detected capacity change from 0 to 1024 [ 879.984050][T24962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.849832][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.055076][T24973] syzkaller0: entered promiscuous mode [ 881.067327][T24973] syzkaller0: entered allmulticast mode [ 881.373880][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5951'. [ 882.840820][ T5266] 8021q: adding VLAN 0 to HW filter on device eth8 [ 882.938158][T24640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.038877][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5957'. [ 883.049515][T24640] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.076069][T25018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5957'. [ 883.110312][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.117497][ T6191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.148492][T25020] loop1: detected capacity change from 0 to 1024 [ 883.194553][T25020] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 883.227071][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5957'. [ 883.229979][T25023] loop6: detected capacity change from 0 to 1024 [ 883.241985][ T6191] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.261475][T25018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5957'. [ 883.284913][T19647] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.288940][T25020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.292097][T19647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.308736][T25023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 883.451260][ T6191] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.482384][ T6191] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.596996][ T5790] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.693264][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.542922][T25057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5969'. [ 885.116799][T25075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.180916][T25077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.197051][T24965] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 885.219816][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5974'. [ 885.242466][T25075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.253936][T25079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5974'. [ 885.324577][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5974'. [ 885.347914][T25079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5974'. [ 885.401192][ T5790] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.410168][ T5790] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.419697][ T5790] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.429025][ T5790] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.762920][T24640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.315534][T25104] bond5: left promiscuous mode [ 886.326867][T25104] bridge2: left promiscuous mode [ 886.336697][T25104] bond5: left allmulticast mode [ 886.352698][T25104] bridge2: left allmulticast mode [ 886.391341][ T6191] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.420816][ T6191] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.470849][ T6191] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.503057][ T6191] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 886.588387][T25109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5983'. [ 886.631150][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.836151][T25118] loop5: detected capacity change from 0 to 128 [ 886.880704][T25118] EXT4-fs: Ignoring removed bh option [ 886.953223][T25118] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 886.966327][T25118] ext4 filesystem being mounted at /404/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 886.978848][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5988'. [ 887.026789][T25123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5988'. [ 887.080188][T24640] veth0_vlan: entered promiscuous mode [ 887.163181][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5988'. [ 887.173065][T18860] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.189398][T25123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5988'. [ 887.214971][T24640] veth1_vlan: entered promiscuous mode [ 887.282484][T16855] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 887.342381][T18860] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.391808][T19647] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.454572][T24640] veth0_macvtap: entered promiscuous mode [ 887.490212][T25136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.493377][ T6191] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.532878][T25133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.552469][T24640] veth1_macvtap: entered promiscuous mode [ 887.617673][T24640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.711478][T25145] ieee802154 phy0 wpan0: encryption failed: -22 [ 887.750882][T24640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.764795][T25133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.812055][ T6191] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.846157][ T6191] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.873512][T25149] bond3: left promiscuous mode [ 887.882604][T25149] bond3: left allmulticast mode [ 887.913490][T25149] bond4: left promiscuous mode [ 887.925791][T25149] bridge4: left promiscuous mode [ 887.950778][T25149] bond4: left allmulticast mode [ 887.968757][T25149] bridge4: left allmulticast mode [ 888.131441][ T5793] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.187779][T25152] syzkaller0: entered promiscuous mode [ 888.202517][T25152] syzkaller0: entered allmulticast mode [ 888.242415][T18860] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.271062][T18860] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.413218][ T5793] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.450793][T25160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6001'. [ 888.534592][ T5790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.546494][ T5793] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.582069][ T5790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.595895][ T5793] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 888.752987][T25169] loop5: detected capacity change from 0 to 128 [ 888.768171][T25169] EXT4-fs: Ignoring removed bh option [ 888.830351][T25169] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 888.853059][ T3241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.878079][ T3241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.879757][T25173] loop0: detected capacity change from 0 to 1024 [ 888.893501][T25169] ext4 filesystem being mounted at /408/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 888.918543][T25173] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 889.009694][T25173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.087125][T25182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6009'. [ 889.138140][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.163780][T16855] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 889.435213][T25190] loop0: detected capacity change from 0 to 4096 [ 889.489589][T25190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.068824][T25182] hsr_slave_1 (unregistering): left promiscuous mode [ 891.518198][T25201] loop7: detected capacity change from 0 to 1024 [ 891.584567][T25201] EXT4-fs: Ignoring removed oldalloc option [ 891.750104][T25201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.931714][T25201] EXT4-fs (loop7): shut down requested (0) [ 891.979307][T25219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.187668][T25205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.192864][T24640] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.299470][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.656001][T25230] loop1: detected capacity change from 0 to 1024 [ 892.678817][T25230] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 892.751672][T25230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.908311][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.228148][T25260] loop0: detected capacity change from 0 to 1024 [ 894.332916][T25260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.432898][T25273] loop6: detected capacity change from 0 to 1024 [ 894.475550][T25273] EXT4-fs: Ignoring removed oldalloc option [ 894.580585][T25273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.632856][T25270] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 894.690585][T25273] EXT4-fs (loop6): shut down requested (0) [ 894.992905][T20831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.226316][T25290] loop1: detected capacity change from 0 to 1024 [ 895.295465][T25290] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 895.329475][T25293] loop6: detected capacity change from 0 to 128 [ 895.392547][T25290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.456743][T25293] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 895.528653][T25293] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 895.707178][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.863698][T20831] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 896.462212][T25306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.508985][T25306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.598173][T25306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.375321][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.927427][T25337] loop0: detected capacity change from 0 to 1024 [ 897.939462][T25337] EXT4-fs: Ignoring removed oldalloc option [ 898.003980][T25337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.032495][T25337] EXT4-fs (loop0): shut down requested (0) [ 898.146494][T17247] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.307795][T25359] syzkaller0: entered promiscuous mode [ 899.347516][T25359] syzkaller0: entered allmulticast mode [ 899.533950][T25378] loop5: detected capacity change from 0 to 512 [ 899.664601][T25378] [ 899.666951][T25378] ====================================================== [ 899.673970][T25378] WARNING: possible circular locking dependency detected [ 899.680980][T25378] syzkaller #0 Not tainted [ 899.685391][T25378] ------------------------------------------------------ [ 899.692403][T25378] syz.5.6062/25378 is trying to acquire lock: [ 899.698462][T25378] ffff8880531a0c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 899.708343][T25378] [ 899.708343][T25378] but task is already holding lock: [ 899.715700][T25378] ffff888052761ce0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x5db/0x880 [ 899.725596][T25378] [ 899.725596][T25378] which lock already depends on the new lock. [ 899.725596][T25378] [ 899.736018][T25378] [ 899.736018][T25378] the existing dependency chain (in reverse order) is: [ 899.745024][T25378] [ 899.745024][T25378] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 899.752612][T25378] lock_acquire+0x1b9/0x370 [ 899.757657][T25378] down_write+0x8b/0x1f0 [ 899.762445][T25378] ext4_destroy_inline_data+0x2d/0xe0 [ 899.768346][T25378] ext4_do_writepages+0x1185/0x3ed0 [ 899.774084][T25378] ext4_writepages+0x347/0x750 [ 899.779384][T25378] do_writepages+0x278/0x600 [ 899.784496][T25378] __writeback_single_inode+0x164/0x1300 [ 899.790664][T25378] writeback_sb_inodes+0x766/0x1c50 [ 899.796397][T25378] wb_writeback+0x1c0/0xb50 [ 899.801435][T25378] wb_workfn+0x143/0xc80 [ 899.806217][T25378] process_one_work+0xa23/0x1940 [ 899.811679][T25378] worker_thread+0x5ef/0xe50 [ 899.816790][T25378] kthread+0x370/0x450 [ 899.821374][T25378] ret_from_fork+0x72b/0xd50 [ 899.826499][T25378] ret_from_fork_asm+0x1a/0x30 [ 899.831800][T25378] [ 899.831800][T25378] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 899.840247][T25378] check_prev_add+0xeb/0xe60 [ 899.845367][T25378] __lock_acquire+0x136c/0x1a40 [ 899.850745][T25378] lock_acquire+0x1b9/0x370 [ 899.855773][T25378] ext4_writepages+0x21d/0x750 [ 899.861080][T25378] do_writepages+0x278/0x600 [ 899.866198][T25378] __writeback_single_inode+0x164/0x1300 [ 899.872364][T25378] writeback_single_inode+0x51c/0xfc0 [ 899.878270][T25378] write_inode_now+0x174/0x1f0 [ 899.883567][T25378] iput.part.0+0x62a/0x1050 [ 899.888595][T25378] iput+0x35/0x40 [ 899.892751][T25378] ext4_xattr_block_set+0x6f7/0x3660 [ 899.898565][T25378] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 899.904993][T25378] __ext4_expand_extra_isize+0x346/0x480 [ 899.911174][T25378] __ext4_mark_inode_dirty+0x668/0x880 [ 899.917173][T25378] ext4_evict_inode+0x835/0x1960 [ 899.922649][T25378] evict+0x3c2/0xad0 [ 899.927072][T25378] iput.part.0+0x989/0x1050 [ 899.932101][T25378] iput+0x35/0x40 [ 899.936261][T25378] ext4_orphan_cleanup+0x71e/0x11e0 [ 899.942000][T25378] ext4_fill_super+0x917f/0xb470 [ 899.947460][T25378] get_tree_bdev_flags+0x38c/0x620 [ 899.953110][T25378] vfs_get_tree+0x92/0x320 [ 899.958076][T25378] path_mount+0x7d0/0x23d0 [ 899.963012][T25378] __x64_sys_mount+0x293/0x310 [ 899.968297][T25378] do_syscall_64+0x115/0x870 [ 899.973425][T25378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.979851][T25378] [ 899.979851][T25378] other info that might help us debug this: [ 899.979851][T25378] [ 899.990064][T25378] Possible unsafe locking scenario: [ 899.990064][T25378] [ 899.997504][T25378] CPU0 CPU1 [ 900.002856][T25378] ---- ---- [ 900.008213][T25378] lock(&ei->xattr_sem); [ 900.012563][T25378] lock(&sbi->s_writepages_rwsem); [ 900.020284][T25378] lock(&ei->xattr_sem); [ 900.027133][T25378] rlock(&sbi->s_writepages_rwsem); [ 900.032419][T25378] [ 900.032419][T25378] *** DEADLOCK *** [ 900.032419][T25378] [ 900.040547][T25378] 3 locks held by syz.5.6062/25378: [ 900.045732][T25378] #0: ffff88807ee5e0d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: sget_fc+0x3c8/0x1d80 [ 900.055637][T25378] #1: ffff88807ee5e640 (sb_internal){++++}-{0:0}, at: evict+0x3c2/0xad0 [ 900.064204][T25378] #2: ffff888052761ce0 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x5db/0x880 [ 900.074525][T25378] [ 900.074525][T25378] stack backtrace: [ 900.080405][T25378] CPU: 1 UID: 0 PID: 25378 Comm: syz.5.6062 Not tainted syzkaller #0 PREEMPT(full) [ 900.080445][T25378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 900.080471][T25378] Call Trace: [ 900.080483][T25378] [ 900.080496][T25378] dump_stack_lvl+0x100/0x190 [ 900.080534][T25378] print_circular_bug.cold+0x178/0x1c7 [ 900.080592][T25378] check_noncircular+0x146/0x160 [ 900.080626][T25378] ? __lock_acquire+0x49f/0x1a40 [ 900.080699][T25378] check_prev_add+0xeb/0xe60 [ 900.080740][T25378] __lock_acquire+0x136c/0x1a40 [ 900.080787][T25378] lock_acquire+0x1b9/0x370 [ 900.080824][T25378] ? do_writepages+0x278/0x600 [ 900.080857][T25378] ? __pfx___might_resched+0x10/0x10 [ 900.080900][T25378] ext4_writepages+0x21d/0x750 [ 900.080950][T25378] ? do_writepages+0x278/0x600 [ 900.080980][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.081023][T25378] ? __pfx_ext4_writepages+0x10/0x10 [ 900.081074][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.081127][T25378] ? do_writepages+0x4b5/0x600 [ 900.081158][T25378] ? do_writepages+0x4b5/0x600 [ 900.081187][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.081229][T25378] ? __pfx_ext4_writepages+0x10/0x10 [ 900.081281][T25378] do_writepages+0x278/0x600 [ 900.081314][T25378] ? __pfx_do_writepages+0x10/0x10 [ 900.081345][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.081386][T25378] ? mark_held_locks+0x40/0x70 [ 900.081426][T25378] __writeback_single_inode+0x164/0x1300 [ 900.081479][T25378] ? find_held_lock+0x2b/0x80 [ 900.081531][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.081573][T25378] ? __pfx___writeback_single_inode+0x10/0x10 [ 900.081620][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.081661][T25378] ? do_raw_spin_unlock+0x145/0x1e0 [ 900.081707][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.081751][T25378] writeback_single_inode+0x51c/0xfc0 [ 900.081798][T25378] ? evict+0x3c2/0xad0 [ 900.081833][T25378] write_inode_now+0x174/0x1f0 [ 900.081877][T25378] ? __x64_sys_mount+0x293/0x310 [ 900.081911][T25378] ? __pfx_write_inode_now+0x10/0x10 [ 900.081982][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.082022][T25378] ? find_held_lock+0x2b/0x80 [ 900.082073][T25378] ? iput.part.0+0x61d/0x1050 [ 900.082108][T25378] ? iput.part.0+0x61d/0x1050 [ 900.082142][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.082189][T25378] iput.part.0+0x62a/0x1050 [ 900.082229][T25378] iput+0x35/0x40 [ 900.082262][T25378] ext4_xattr_block_set+0x6f7/0x3660 [ 900.082306][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.082349][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.082395][T25378] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 900.082441][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.082487][T25378] ? xattr_find_entry+0x240/0x2e0 [ 900.082528][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.082569][T25378] ? ext4_xattr_block_find+0x59/0x430 [ 900.082612][T25378] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 900.082673][T25378] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 900.082724][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.082765][T25378] ? dquot_initialize_needed+0x183/0x2a0 [ 900.082817][T25378] __ext4_expand_extra_isize+0x346/0x480 [ 900.082861][T25378] __ext4_mark_inode_dirty+0x668/0x880 [ 900.082915][T25378] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 900.082977][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.083018][T25378] ? __ext4_journal_start_sb+0x1ce/0x670 [ 900.083066][T25378] ? ext4_evict_inode+0x6b7/0x1960 [ 900.083120][T25378] ext4_evict_inode+0x835/0x1960 [ 900.083175][T25378] ? __pfx_ext4_evict_inode+0x10/0x10 [ 900.083226][T25378] ? evict+0x37e/0xad0 [ 900.083258][T25378] ? evict+0x37e/0xad0 [ 900.083289][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.083334][T25378] ? __pfx_ext4_evict_inode+0x10/0x10 [ 900.083386][T25378] evict+0x3c2/0xad0 [ 900.083421][T25378] ? __pfx_evict+0x10/0x10 [ 900.083454][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.083504][T25378] ? iput.part.0+0x981/0x1050 [ 900.083538][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.083584][T25378] iput.part.0+0x989/0x1050 [ 900.083625][T25378] iput+0x35/0x40 [ 900.083657][T25378] ext4_orphan_cleanup+0x71e/0x11e0 [ 900.083719][T25378] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 900.083778][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.083818][T25378] ? ext4_register_li_request+0xef/0xa00 [ 900.083870][T25378] ext4_fill_super+0x917f/0xb470 [ 900.083922][T25378] ? __pfx_ext4_fill_super+0x10/0x10 [ 900.083956][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084002][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084043][T25378] ? sb_set_blocksize+0x1fe/0x290 [ 900.084092][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084133][T25378] ? setup_bdev_super+0x425/0x730 [ 900.084175][T25378] get_tree_bdev_flags+0x38c/0x620 [ 900.084219][T25378] ? __pfx_ext4_fill_super+0x10/0x10 [ 900.084255][T25378] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 900.084300][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084344][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084384][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084425][T25378] ? security_capable+0x80/0x260 [ 900.084460][T25378] vfs_get_tree+0x92/0x320 [ 900.084500][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084542][T25378] path_mount+0x7d0/0x23d0 [ 900.084580][T25378] ? __pfx_path_mount+0x10/0x10 [ 900.084611][T25378] ? lockdep_hardirqs_on+0x78/0x100 [ 900.084661][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084704][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084744][T25378] ? kmem_cache_free+0x127/0x6b0 [ 900.084800][T25378] ? __x64_sys_mount+0x293/0x310 [ 900.084832][T25378] __x64_sys_mount+0x293/0x310 [ 900.084867][T25378] ? __pfx___x64_sys_mount+0x10/0x10 [ 900.084904][T25378] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.084949][T25378] do_syscall_64+0x115/0x870 [ 900.085002][T25378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.085038][T25378] RIP: 0033:0x7f362879f34a [ 900.085063][T25378] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.085097][T25378] RSP: 002b:00007f3629642e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 900.085129][T25378] RAX: ffffffffffffffda RBX: 00007f3629642ee0 RCX: 00007f362879f34a [ 900.085152][T25378] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f3629642ea0 [ 900.085175][T25378] RBP: 0000200000000240 R08: 00007f3629642ee0 R09: 0000000000000000 [ 900.085197][T25378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 900.085219][T25378] R13: 00007f3629642ea0 R14: 000000000000047a R15: 000000000000002c [ 900.085253][T25378] [ 900.758176][T25390] loop1: detected capacity change from 0 to 1024 [ 900.862213][T25390] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 900.875590][T25378] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.6062: iget: bad extra_isize 90 (inode size 256) [ 900.927306][T25378] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 900.928192][T25390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 900.937409][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 900.937439][ C0] EXT4-fs (loop5): initial error at time 1786482408: ext4_xattr_inode_iget:441: inode 11 [ 900.937492][ C0] EXT4-fs (loop5): last error at time 1786482408: ext4_xattr_inode_iget:441: inode 11 [ 900.949832][T25378] EXT4-fs (loop5): Remounting filesystem read-only [ 900.996242][T25378] EXT4-fs warning (device loop5): ext4_evict_inode:269: couldn't mark inode dirty (err -30) [ 901.017219][T25378] EXT4-fs (loop5): 1 orphan inode deleted [ 901.035733][T25378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.064024][T25378] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.154524][T18280] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.923656][T25383] syzkaller0: entered promiscuous mode [ 901.929178][T25383] syzkaller0: entered allmulticast mode