last executing test programs: 14m17.960176411s ago: executing program 4 (id=2418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 14m17.912147504s ago: executing program 4 (id=2419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x14, 0x1, 0x5, 0xf}, {0x24, 0x0, 0x7}, {0x6, 0x8, 0x3, 0x7ffffdbd}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) inotify_init() r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x90000004}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 14m16.373560108s ago: executing program 4 (id=2425): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) 14m15.864506909s ago: executing program 4 (id=2428): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, 0x0) 14m15.842229751s ago: executing program 4 (id=2429): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf25000000", @ANYRES32=r1, @ANYBLOB="d45006000200000024001a80200002"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m15.802083744s ago: executing program 4 (id=2431): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountstats\x00') socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x10001}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") 14m0.660649424s ago: executing program 32 (id=2431): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountstats\x00') socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x10001}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") 13.624030284s ago: executing program 3 (id=7170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa00"], 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) 13.615248445s ago: executing program 3 (id=7171): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3}, 0x50) pipe2(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x7, 0x759, 0x49, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 12.513855084s ago: executing program 3 (id=7176): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000004c0)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x60}, 0x1, 0x7}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 11.82125388s ago: executing program 3 (id=7178): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 9.704558153s ago: executing program 1 (id=7186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x67) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") 9.674152525s ago: executing program 3 (id=7188): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x8}, @TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 8.668281336s ago: executing program 3 (id=7189): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r4 = socket$inet6(0xa, 0x3, 0x8000000003c) write$binfmt_script(r4, 0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x0) 6.626151052s ago: executing program 1 (id=7192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) fsmount(0xffffffffffffffff, 0x0, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) 6.313553918s ago: executing program 5 (id=7195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 5.946157508s ago: executing program 0 (id=7196): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f00000004c0)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x60}, 0x1, 0x7}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 5.877097173s ago: executing program 0 (id=7197): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b5", @ANYBLOB], 0x1c}], 0x1}, 0x0) 5.67097875s ago: executing program 1 (id=7198): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountstats\x00') socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x10001}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="dc", 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) 5.352616116s ago: executing program 2 (id=7199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 5.351612256s ago: executing program 5 (id=7200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4041, &(0x7f0000000600), 0x60, 0x50e, &(0x7f0000000bc0)="$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") r4 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read(r6, &(0x7f0000000880)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r7}, 0x18) 5.05207576s ago: executing program 2 (id=7201): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) close(r0) 4.898676362s ago: executing program 2 (id=7202): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000"], 0x1a0}}, 0x0) 4.817110039s ago: executing program 0 (id=7203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) 4.413981842s ago: executing program 5 (id=7204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4041, &(0x7f0000000600), 0x60, 0x50e, &(0x7f0000000bc0)="$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") r6 = socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read(r8, &(0x7f0000000880)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x10, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r9}, 0x18) 3.994895776s ago: executing program 1 (id=7205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3.925588441s ago: executing program 2 (id=7206): syz_emit_ethernet(0x0, 0x0, 0x0) inotify_init1(0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.956677451s ago: executing program 1 (id=7207): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2b, 0x0, @fd_index=0x7, 0x80000001, {}, 0x7}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 1.904364026s ago: executing program 2 (id=7208): add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") 1.876565808s ago: executing program 0 (id=7209): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x21, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x9, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x94d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x5, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000004c0)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x60}, 0x1, 0x7}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 673.340605ms ago: executing program 5 (id=7210): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x21, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x9, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x94d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x5, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f00000004c0)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x60}, 0x1, 0x7}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 590.886382ms ago: executing program 0 (id=7211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 412.023707ms ago: executing program 5 (id=7212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 292.923857ms ago: executing program 0 (id=7213): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'vlan0\x00', 0x8000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000014c0)=ANY=[@ANYBLOB="0180c20000010180c2000003080045f800b0100000000011907800000000000000004e214e20009c9078010000000400000044cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb529ce0c19fb809804c2ff3c5412218cdd247fbc93cfef70c00506d957ea54e7f53d1fdc46c7f32f5461c69dbb12ae33493789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a52e5da89a0ace8e375c5bef000000000d4600"/190], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 190.872495ms ago: executing program 1 (id=7214): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3}, 0x50) pipe2(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.414ms ago: executing program 5 (id=7215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4041, &(0x7f0000000600), 0x60, 0x50e, &(0x7f0000000bc0)="$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") r6 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read(r7, &(0x7f0000000880)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r8}, 0x18) 0s ago: executing program 2 (id=7216): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountstats\x00') socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x10001}, 0x10}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="dc", 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) kernel console output (not intermixed with test programs): illegal pblock 48 (length 1) [ 947.599325][T23667] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 947.608156][T23667] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5585: Failed to acquire dquot type 0 [ 947.629896][T23667] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 947.639456][T23667] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5585: mark_inode_dirty error [ 947.651795][T23667] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 947.662452][T23667] EXT4-fs (loop5): 1 orphan inode deleted [ 947.668655][T23667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.688965][T23675] loop3: detected capacity change from 0 to 256 [ 947.695418][ T3557] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 947.713784][ T3557] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 947.722419][ T3557] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 947.736859][T23667] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 947.779723][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.829783][T23681] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 947.906121][T23692] loop2: detected capacity change from 0 to 512 [ 947.933138][T23692] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 948.008652][T23700] loop3: detected capacity change from 0 to 512 [ 948.066024][T23700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 948.076804][T23700] EXT4-fs (loop3): orphan cleanup on readonly fs [ 948.084493][T23700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5594: bg 0: block 248: padding at end of block bitmap is not set [ 948.099704][T23700] Quota error (device loop3): write_blk: dquota write failed [ 948.107111][T23700] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 948.117067][T23700] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5594: Failed to acquire dquot type 1 [ 948.130247][T23700] EXT4-fs (loop3): 1 truncate cleaned up [ 948.281558][T23700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 948.330837][T23692] EXT4-fs (loop2): 1 truncate cleaned up [ 948.414402][T23692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.429218][T23692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.762054][T23734] bridge0: entered promiscuous mode [ 950.225376][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.234900][ T3467] usb usb8-port1: unable to enumerate USB device [ 950.392202][T23747] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 950.490915][T23755] loop3: detected capacity change from 0 to 128 [ 950.846973][T23763] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5617'. [ 953.054019][T23793] loop2: detected capacity change from 0 to 4096 [ 953.239569][T23793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.384610][T23807] bridge0: port 3(team0) entered disabled state [ 953.391184][T23807] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.398461][T23807] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.409190][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.419010][T23807] bridge0: entered allmulticast mode [ 953.508721][T23814] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 953.689404][T23826] syzkaller0: entered promiscuous mode [ 953.695383][T23826] syzkaller0: entered allmulticast mode [ 954.052611][T23836] loop2: detected capacity change from 0 to 512 [ 954.068042][T23836] EXT4-fs (loop2): orphan cleanup on readonly fs [ 954.076614][T23836] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5634: bg 0: block 248: padding at end of block bitmap is not set [ 954.092358][T23836] Quota error (device loop2): write_blk: dquota write failed [ 954.099789][T23836] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 954.109719][T23836] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5634: Failed to acquire dquot type 1 [ 954.123571][T23836] EXT4-fs (loop2): 1 truncate cleaned up [ 954.131158][T23836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 954.327066][T23844] sctp: [Deprecated]: syz.0.5636 (pid 23844) Use of int in maxseg socket option. [ 954.327066][T23844] Use struct sctp_assoc_value instead [ 954.656046][T23845] syzkaller0: entered promiscuous mode [ 954.662397][T23845] syzkaller0: entered allmulticast mode [ 954.862216][T23854] loop3: detected capacity change from 0 to 2048 [ 954.960346][T23858] loop3: detected capacity change from 0 to 128 [ 954.968963][T23857] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.976083][T23857] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.997705][T23858] bio_check_eod: 3 callbacks suppressed [ 954.997746][T23858] syz.3.5640: attempt to access beyond end of device [ 954.997746][T23858] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 955.029716][T23857] bridge0: entered allmulticast mode [ 955.060975][T23859] bridge_slave_1: left allmulticast mode [ 955.066726][T23859] bridge_slave_1: left promiscuous mode [ 955.072555][T23859] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.095692][T23858] syz.3.5640: attempt to access beyond end of device [ 955.095692][T23858] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 955.119071][T23859] bridge_slave_0: left promiscuous mode [ 955.125281][T23859] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.148407][T23864] syz.3.5640: attempt to access beyond end of device [ 955.148407][T23864] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 955.180564][T23858] syz.3.5640: attempt to access beyond end of device [ 955.180564][T23858] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 955.197150][T23864] syz.3.5640: attempt to access beyond end of device [ 955.197150][T23864] loop3: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 955.211131][T23858] syz.3.5640: attempt to access beyond end of device [ 955.211131][T23858] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 955.268517][T23864] syz.3.5640: attempt to access beyond end of device [ 955.268517][T23864] loop3: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 955.310134][T23858] syz.3.5640: attempt to access beyond end of device [ 955.310134][T23858] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 955.323632][T23858] syz.3.5640: attempt to access beyond end of device [ 955.323632][T23858] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 955.337099][T23858] syz.3.5640: attempt to access beyond end of device [ 955.337099][T23858] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 955.744771][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.754076][ T23] usb usb8-port1: attempt power cycle [ 956.235998][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5648'. [ 956.244907][T23888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5648'. [ 956.298773][T23892] sctp: [Deprecated]: syz.1.5650 (pid 23892) Use of int in maxseg socket option. [ 956.298773][T23892] Use struct sctp_assoc_value instead [ 956.519215][T23907] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5656'. [ 956.583607][T23908] loop2: detected capacity change from 0 to 128 [ 959.045137][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5662'. [ 959.054157][T23928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5662'. [ 959.501128][T23936] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 959.520254][T23940] sctp: [Deprecated]: syz.0.5665 (pid 23940) Use of int in maxseg socket option. [ 959.520254][T23940] Use struct sctp_assoc_value instead [ 959.593659][T23941] loop2: detected capacity change from 0 to 512 [ 959.627996][T23941] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 959.661576][T23941] EXT4-fs (loop2): 1 truncate cleaned up [ 959.672823][T23941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.702317][T23941] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.823744][T23960] loop3: detected capacity change from 0 to 128 [ 959.902173][T23958] team0: left allmulticast mode [ 959.907069][T23958] team_slave_0: left allmulticast mode [ 959.912590][T23958] team_slave_1: left allmulticast mode [ 959.918121][T23958] team0: left promiscuous mode [ 959.922946][T23958] team_slave_0: left promiscuous mode [ 959.928459][T23958] team_slave_1: left promiscuous mode [ 959.934264][T23958] bridge0: port 3(team0) entered disabled state [ 959.945092][T23958] bridge_slave_1: left allmulticast mode [ 959.950849][T23958] bridge_slave_1: left promiscuous mode [ 959.956520][T23958] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.966408][T23958] bridge_slave_0: left promiscuous mode [ 959.972277][T23958] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.980654][T23972] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 959.987185][T23972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 959.994977][T23972] vhci_hcd vhci_hcd.0: Device attached [ 960.001185][ T23] usb usb8-port1: unable to enumerate USB device [ 960.012879][T23973] vhci_hcd: connection closed [ 960.022488][ T144] bio_check_eod: 94 callbacks suppressed [ 960.022627][ T144] kworker/u8:5: attempt to access beyond end of device [ 960.022627][ T144] loop3: rw=1, sector=305, nr_sectors = 8 limit=128 [ 960.050670][ T3557] vhci_hcd: stop threads [ 960.054925][ T3557] vhci_hcd: release socket [ 960.059487][ T3557] vhci_hcd: disconnect device [ 960.650463][T23993] sctp: [Deprecated]: syz.0.5678 (pid 23993) Use of int in maxseg socket option. [ 960.650463][T23993] Use struct sctp_assoc_value instead [ 960.843535][T24005] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 961.067423][T24025] loop3: detected capacity change from 0 to 512 [ 961.097140][T24025] EXT4-fs (loop3): orphan cleanup on readonly fs [ 961.117575][T24025] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5684: bg 0: block 248: padding at end of block bitmap is not set [ 961.220939][T24025] Quota error (device loop3): write_blk: dquota write failed [ 961.228380][T24025] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 961.238314][T24025] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5684: Failed to acquire dquot type 1 [ 961.259256][T24025] EXT4-fs (loop3): 1 truncate cleaned up [ 961.266079][T24025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 963.083337][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.242088][T24052] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 963.322274][T24061] loop3: detected capacity change from 0 to 512 [ 963.332807][T24061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 963.376311][T24061] EXT4-fs (loop3): 1 truncate cleaned up [ 963.389786][T24061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.417303][T24061] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.581329][T24076] loop3: detected capacity change from 0 to 4096 [ 963.620575][T24076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.656396][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.741541][T24082] syzkaller0: entered promiscuous mode [ 963.747468][T24082] syzkaller0: entered allmulticast mode [ 963.920113][ T36] usb usb8-port1: attempt power cycle [ 964.694803][T24100] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 964.701340][T24100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 964.708957][T24100] vhci_hcd vhci_hcd.0: Device attached [ 964.829523][T24101] vhci_hcd: connection closed [ 964.832465][ T109] vhci_hcd: stop threads [ 964.841662][ T109] vhci_hcd: release socket [ 964.846077][ T109] vhci_hcd: disconnect device [ 966.155940][ T36] usb usb8-port1: unable to enumerate USB device [ 966.202254][T24116] loop5: detected capacity change from 0 to 1024 [ 966.253195][T24116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.298110][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.423754][T24126] loop2: detected capacity change from 0 to 512 [ 967.773636][T24127] loop3: detected capacity change from 0 to 512 [ 969.380461][T24126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 969.389113][T24126] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 969.389154][T24126] EXT4-fs: failed to create workqueue [ 969.400674][T24127] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 969.404086][T24127] EXT4-fs: failed to create workqueue [ 969.404094][T24126] EXT4-fs (loop2): mount failed [ 969.413566][T24127] EXT4-fs (loop3): mount failed [ 970.090122][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5719'. [ 970.099140][T24139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5719'. [ 970.117212][T24138] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 970.123927][T24138] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 970.131502][T24138] vhci_hcd vhci_hcd.0: Device attached [ 970.166171][T24143] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 970.172821][T24143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 970.180387][T24143] vhci_hcd vhci_hcd.0: Device attached [ 970.199087][T24147] loop3: detected capacity change from 0 to 512 [ 970.209720][T24144] vhci_hcd: connection closed [ 970.210081][ T3557] vhci_hcd: stop threads [ 970.219133][ T3557] vhci_hcd: release socket [ 970.223600][ T3557] vhci_hcd: disconnect device [ 970.228521][T24141] vhci_hcd: connection closed [ 970.238986][T24147] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 970.241014][ T109] vhci_hcd: stop threads [ 970.256427][ T109] vhci_hcd: release socket [ 970.261055][ T109] vhci_hcd: disconnect device [ 970.266573][T24147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 970.276130][T24147] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5721: corrupted in-inode xattr: e_value size too large [ 970.293777][T24147] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5721: couldn't read orphan inode 15 (err -117) [ 970.306697][T24147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.218174][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.381527][T24165] loop2: detected capacity change from 0 to 1024 [ 971.454358][T24165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.466543][T24170] loop3: detected capacity change from 0 to 512 [ 971.484360][T24170] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 971.522009][T24170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 971.532010][T24170] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5727: corrupted in-inode xattr: e_value size too large [ 971.546468][T24170] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5727: couldn't read orphan inode 15 (err -117) [ 971.559326][T24170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 971.906403][T13445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.916808][T13445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.014293][T13445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.024666][T13445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.174414][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.255002][T13445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.265401][T13445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.659914][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.025107][T24195] syzkaller0: entered promiscuous mode [ 973.030651][T24195] syzkaller0: entered allmulticast mode [ 973.045724][T13445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.056064][T13445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.269730][T24178] chnl_net:caif_netlink_parms(): no params data found [ 973.322035][T13445] tipc: Disabling bearer [ 973.327363][T13445] tipc: Left network mode [ 973.355798][T13445] hsr_slave_0: left promiscuous mode [ 973.363745][T13445] hsr_slave_1: left promiscuous mode [ 973.370223][T13445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.377652][T13445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.402340][T13445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.409967][T13445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.429566][T13445] veth1_macvtap: left promiscuous mode [ 973.439531][T13445] veth0_macvtap: left promiscuous mode [ 973.565478][T24207] loop3: detected capacity change from 0 to 512 [ 973.585550][T13445] veth1_vlan: left promiscuous mode [ 973.594812][T24207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 973.871652][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5731'. [ 973.880744][T24214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5731'. [ 973.915791][T13445] veth0_vlan: left promiscuous mode [ 973.962972][T24207] EXT4-fs (loop3): orphan cleanup on readonly fs [ 973.984726][T24207] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5732: bg 0: block 248: padding at end of block bitmap is not set [ 974.017838][T24207] Quota error (device loop3): write_blk: dquota write failed [ 974.025316][T24207] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 974.035302][T24207] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5732: Failed to acquire dquot type 1 [ 974.049403][T24207] EXT4-fs (loop3): 1 truncate cleaned up [ 974.060950][T24207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 974.093910][T13445] team0 (unregistering): Port device team_slave_1 removed [ 974.107712][T13445] team0 (unregistering): Port device team_slave_0 removed [ 974.166325][T24178] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.173491][T24178] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.182667][T24178] bridge_slave_0: entered allmulticast mode [ 974.190892][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.202494][T24178] bridge_slave_0: entered promiscuous mode [ 974.209901][T24178] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.217039][T24178] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.236985][T24178] bridge_slave_1: entered allmulticast mode [ 974.287962][T24178] bridge_slave_1: entered promiscuous mode [ 974.940008][T24178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.953315][T24178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.009342][T24178] team0: Port device team_slave_0 added [ 975.036465][T24178] team0: Port device team_slave_1 added [ 975.067728][T24178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.074783][T24178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.100723][T24178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.117155][T24242] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5745'. [ 975.126654][T24178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.133734][T24178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.159790][T24178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.213029][T24178] hsr_slave_0: entered promiscuous mode [ 975.219267][T24178] hsr_slave_1: entered promiscuous mode [ 975.235422][T24178] debugfs: 'hsr0' already exists in 'hsr' [ 975.241494][T24178] Cannot create hsr debugfs directory [ 975.348958][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5747'. [ 975.357962][T24248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5747'. [ 975.424286][T24251] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 975.430858][T24251] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 975.438305][T24251] vhci_hcd vhci_hcd.0: Device attached [ 975.452570][T24254] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 975.459116][T24254] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 975.466725][T24254] vhci_hcd vhci_hcd.0: Device attached [ 975.490201][T24252] vhci_hcd: connection closed [ 975.490170][T24255] vhci_hcd: connection closed [ 975.495410][ T12] vhci_hcd: stop threads [ 975.504633][ T12] vhci_hcd: release socket [ 975.509051][ T12] vhci_hcd: disconnect device [ 975.517891][ T12] vhci_hcd: stop threads [ 975.522191][ T12] vhci_hcd: release socket [ 975.526596][ T12] vhci_hcd: disconnect device [ 975.784806][T24178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 975.793534][T24178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 975.802781][T24178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 975.811543][T24178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 975.844161][T24178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.859005][T24178] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.869789][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.876903][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.888265][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.895387][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.954733][T24178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.036836][T24178] veth0_vlan: entered promiscuous mode [ 976.046648][T24178] veth1_vlan: entered promiscuous mode [ 976.067807][T24178] veth0_macvtap: entered promiscuous mode [ 976.080200][T24178] veth1_macvtap: entered promiscuous mode [ 976.102490][T24178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.123622][T24283] loop5: detected capacity change from 0 to 2048 [ 976.141943][T24178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.180491][ T174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.199093][ T174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.209000][ T174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.228785][ T174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.437848][ T36] usb usb8-port1: attempt power cycle [ 976.544966][T24303] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5759'. [ 976.765765][T24324] loop3: detected capacity change from 0 to 2048 [ 976.843696][T24328] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5766'. [ 977.029218][T24339] sctp: [Deprecated]: syz.3.5771 (pid 24339) Use of int in maxseg socket option. [ 977.029218][T24339] Use struct sctp_assoc_value instead [ 977.157990][T24349] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5775'. [ 977.215033][T24354] loop3: detected capacity change from 0 to 512 [ 977.239544][T24354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 977.255957][T24354] EXT4-fs (loop3): orphan cleanup on readonly fs [ 977.274873][T24354] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5776: bg 0: block 248: padding at end of block bitmap is not set [ 977.289957][T24354] Quota error (device loop3): write_blk: dquota write failed [ 977.297379][T24354] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 977.307315][T24354] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5776: Failed to acquire dquot type 1 [ 977.327044][T24354] EXT4-fs (loop3): 1 truncate cleaned up [ 977.344287][T24354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 977.385274][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.403891][T24385] netlink: 'syz.5.5785': attribute type 10 has an invalid length. [ 978.493372][T24386] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5785'. [ 978.506583][T24386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.516658][T24386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.527235][T24386] bond0 (unregistering): Released all slaves [ 978.560435][ T29] audit: type=1400 audit(1754676419.706:4307): avc: denied { write } for pid=24390 comm="syz.3.5787" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 978.584483][ T29] audit: type=1400 audit(1754676419.706:4308): avc: denied { open } for pid=24390 comm="syz.3.5787" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 978.608908][ T29] audit: type=1400 audit(1754676419.706:4309): avc: denied { ioctl } for pid=24390 comm="syz.3.5787" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 978.983748][T24397] loop3: detected capacity change from 0 to 512 [ 979.008610][T24397] EXT4-fs (loop3): orphan cleanup on readonly fs [ 979.016480][T24397] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5788: bg 0: block 248: padding at end of block bitmap is not set [ 979.035429][T24397] Quota error (device loop3): write_blk: dquota write failed [ 979.042869][T24397] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 979.052871][T24397] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5788: Failed to acquire dquot type 1 [ 979.067283][T24397] EXT4-fs (loop3): 1 truncate cleaned up [ 979.074018][T24397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 979.388631][ T36] usb usb8-port1: unable to enumerate USB device [ 980.370877][T24414] bridge0: entered promiscuous mode [ 980.852052][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.941369][T24417] loop0: detected capacity change from 0 to 1024 [ 981.216206][T24419] loop2: detected capacity change from 0 to 2048 [ 981.234520][T24417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.291732][T24429] loop3: detected capacity change from 0 to 256 [ 981.930171][T24429] vlan1: entered allmulticast mode [ 982.798105][T24178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.112807][T24447] syzkaller0: entered promiscuous mode [ 983.118328][T24447] syzkaller0: entered allmulticast mode [ 984.500310][T24453] loop5: detected capacity change from 0 to 512 [ 984.525605][T24453] EXT4-fs (loop5): orphan cleanup on readonly fs [ 984.533461][T24453] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5804: bg 0: block 248: padding at end of block bitmap is not set [ 984.548952][T24453] Quota error (device loop5): write_blk: dquota write failed [ 984.556404][T24453] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 984.566359][T24453] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5804: Failed to acquire dquot type 1 [ 984.579310][T24453] EXT4-fs (loop5): 1 truncate cleaned up [ 984.586349][T24453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 985.048706][T24465] tipc: Started in network mode [ 985.054169][T24465] tipc: Node identity e28e6bf3bf89, cluster identity 4711 [ 985.061460][T24465] tipc: Enabled bearer , priority 0 [ 985.102229][T24467] tipc: Resetting bearer [ 985.141979][T24464] tipc: Disabling bearer [ 985.220672][T24471] loop3: detected capacity change from 0 to 1024 [ 985.648040][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.671859][T24471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.697186][T24475] loop5: detected capacity change from 0 to 512 [ 985.730345][T24475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 985.765593][T24475] EXT4-fs (loop5): orphan cleanup on readonly fs [ 985.793740][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.804774][T24475] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5810: bg 0: block 248: padding at end of block bitmap is not set [ 985.869901][T24475] Quota error (device loop5): write_blk: dquota write failed [ 985.877363][T24475] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 985.887328][T24475] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5810: Failed to acquire dquot type 1 [ 985.905082][T24482] loop0: detected capacity change from 0 to 512 [ 985.913620][T24482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 985.969244][T24482] EXT4-fs (loop0): orphan cleanup on readonly fs [ 985.978958][T24482] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5811: bg 0: block 248: padding at end of block bitmap is not set [ 985.994621][T24482] Quota error (device loop0): write_blk: dquota write failed [ 986.002075][T24482] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 986.012056][T24482] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5811: Failed to acquire dquot type 1 [ 986.025407][T24482] EXT4-fs (loop0): 1 truncate cleaned up [ 986.245450][T24482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 986.262798][T24475] EXT4-fs (loop5): 1 truncate cleaned up [ 986.297119][T24475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 986.347764][T24489] loop3: detected capacity change from 0 to 1024 [ 986.400532][T24489] EXT4-fs: Ignoring removed bh option [ 986.428364][T24489] EXT4-fs: inline encryption not supported [ 986.463980][T24489] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 986.499366][T24489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 986.573518][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.598101][T24489] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.5812: lblock 2 mapped to illegal pblock 2 (length 1) [ 986.640806][T24489] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 986.649798][T24489] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.5812: lblock 0 mapped to illegal pblock 48 (length 1) [ 986.665303][T24489] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 986.674131][T24489] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5812: Failed to acquire dquot type 0 [ 986.692008][T24489] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 986.723661][T24489] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.5812: mark_inode_dirty error [ 986.954609][T24489] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 986.995224][T24489] EXT4-fs (loop3): 1 orphan inode deleted [ 987.024066][T24489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.416815][T24178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.430042][ T12] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 987.478251][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 987.486961][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 987.515693][T24489] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 987.627310][T24501] loop0: detected capacity change from 0 to 512 [ 987.694740][T24501] EXT4-fs (loop0): orphan cleanup on readonly fs [ 987.719024][T24501] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5817: bg 0: block 248: padding at end of block bitmap is not set [ 987.884704][T24501] Quota error (device loop0): write_blk: dquota write failed [ 987.892231][T24501] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5817: Failed to acquire dquot type 1 [ 987.905534][T24501] EXT4-fs (loop0): 1 truncate cleaned up [ 987.914222][T24501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 988.543803][T24510] bridge0: port 3(team0) entered blocking state [ 988.551183][T24510] bridge0: port 3(team0) entered disabled state [ 988.559620][T24510] team0: entered allmulticast mode [ 988.565339][T24510] team_slave_0: entered allmulticast mode [ 988.571461][T24510] team_slave_1: entered allmulticast mode [ 988.588254][T24510] team0: entered promiscuous mode [ 988.593754][T24510] team_slave_0: entered promiscuous mode [ 988.600043][T24510] team_slave_1: entered promiscuous mode [ 988.612721][T24510] bridge0: port 3(team0) entered blocking state [ 988.619272][T24510] bridge0: port 3(team0) entered forwarding state [ 988.804042][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.821977][T24516] team0: left allmulticast mode [ 988.826869][T24516] team_slave_0: left allmulticast mode [ 988.832470][T24516] team_slave_1: left allmulticast mode [ 988.837960][T24516] team0: left promiscuous mode [ 988.842747][T24516] team_slave_0: left promiscuous mode [ 988.848237][T24516] team_slave_1: left promiscuous mode [ 988.854026][T24516] bridge0: port 3(team0) entered disabled state [ 988.951820][T24516] bridge_slave_1: left allmulticast mode [ 988.957590][T24516] bridge_slave_1: left promiscuous mode [ 988.963333][T24516] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.980887][T24516] bridge_slave_0: left promiscuous mode [ 988.986612][T24516] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.073040][T24523] loop2: detected capacity change from 0 to 1024 [ 989.084629][T24519] tipc: Started in network mode [ 989.089584][T24519] tipc: Node identity b20d1206c394, cluster identity 4711 [ 989.096783][T24519] tipc: Enabled bearer , priority 0 [ 989.124322][T24518] tipc: Resetting bearer [ 989.134568][T24517] tipc: Disabling bearer [ 989.287183][T24523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.760674][T24533] loop3: detected capacity change from 0 to 2048 [ 989.822598][T24535] loop3: detected capacity change from 0 to 128 [ 989.979310][T24178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.992061][T24535] syz.3.5827: attempt to access beyond end of device [ 989.992061][T24535] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 990.005716][T24535] syz.3.5827: attempt to access beyond end of device [ 990.005716][T24535] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 990.025030][T24535] syz.3.5827: attempt to access beyond end of device [ 990.025030][T24535] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 990.041525][T24535] syz.3.5827: attempt to access beyond end of device [ 990.041525][T24535] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 990.055124][T24535] syz.3.5827: attempt to access beyond end of device [ 990.055124][T24535] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 990.082756][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.092585][T24535] syz.3.5827: attempt to access beyond end of device [ 990.092585][T24535] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 990.123014][T24535] syz.3.5827: attempt to access beyond end of device [ 990.123014][T24535] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 990.149792][T24535] syz.3.5827: attempt to access beyond end of device [ 990.149792][T24535] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 990.171150][T24535] syz.3.5827: attempt to access beyond end of device [ 990.171150][T24535] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 990.284699][T24558] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 990.409752][T24568] loop3: detected capacity change from 0 to 2048 [ 990.434892][T24569] loop2: detected capacity change from 0 to 512 [ 990.473713][T24569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 990.827456][T24569] EXT4-fs (loop2): 1 truncate cleaned up [ 990.869094][T24569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.888027][T24569] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.997622][T24582] loop5: detected capacity change from 0 to 512 [ 991.118861][T24582] EXT4-fs (loop5): orphan cleanup on readonly fs [ 991.127998][T24582] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5840: bg 0: block 248: padding at end of block bitmap is not set [ 991.172639][T24582] __quota_error: 1 callbacks suppressed [ 991.178706][T24582] Quota error (device loop5): write_blk: dquota write failed [ 991.186163][T24582] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 991.196545][T24582] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5840: Failed to acquire dquot type 1 [ 991.240485][T24582] EXT4-fs (loop5): 1 truncate cleaned up [ 991.252219][T24582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 992.969567][T24597] loop0: detected capacity change from 0 to 512 [ 992.977073][T24597] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 992.989862][T24597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 992.998480][T24597] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.5845: corrupted in-inode xattr: e_value size too large [ 993.014181][T24597] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.5845: couldn't read orphan inode 15 (err -117) [ 993.031037][T24596] sctp: [Deprecated]: syz.2.5844 (pid 24596) Use of int in maxseg socket option. [ 993.031037][T24596] Use struct sctp_assoc_value instead [ 993.047387][T24597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 993.495145][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.079722][T24178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.353685][T24612] syzkaller0: entered promiscuous mode [ 994.359355][T24612] syzkaller0: entered allmulticast mode [ 994.855506][T24628] loop5: detected capacity change from 0 to 128 [ 996.251201][T24641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 996.257969][T24641] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 996.266633][T24641] vhci_hcd vhci_hcd.0: Device attached [ 996.326073][T24646] sctp: [Deprecated]: syz.1.5859 (pid 24646) Use of int in maxseg socket option. [ 996.326073][T24646] Use struct sctp_assoc_value instead [ 996.377205][T24648] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 996.383759][T24648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 996.391377][T24648] vhci_hcd vhci_hcd.0: Device attached [ 996.456454][T24649] vhci_hcd: connection closed [ 996.456726][T24642] vhci_hcd: connection closed [ 996.461635][ T3410] vhci_hcd: vhci_device speed not set [ 996.471945][ T31] vhci_hcd: stop threads [ 996.476343][ T31] vhci_hcd: release socket [ 996.480780][ T31] vhci_hcd: disconnect device [ 996.507605][ T31] vhci_hcd: stop threads [ 996.511991][ T31] vhci_hcd: release socket [ 996.516419][ T31] vhci_hcd: disconnect device [ 996.580286][ T3410] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 996.589681][ T3410] usb 5-1: enqueue for inactive port 0 [ 996.608510][ T3410] usb 5-1: enqueue for inactive port 0 [ 996.639039][ T3410] usb 5-1: enqueue for inactive port 0 [ 996.720293][ T3410] vhci_hcd: vhci_device speed not set [ 997.404332][T24678] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5870'. [ 997.539397][T24689] loop5: detected capacity change from 0 to 128 [ 997.639509][T24689] syz.5.5871: attempt to access beyond end of device [ 997.639509][T24689] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 997.676372][T24689] syz.5.5871: attempt to access beyond end of device [ 997.676372][T24689] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 997.700090][T24689] syz.5.5871: attempt to access beyond end of device [ 997.700090][T24689] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 997.732514][T24689] syz.5.5871: attempt to access beyond end of device [ 997.732514][T24689] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 997.790836][T24689] syz.5.5871: attempt to access beyond end of device [ 997.790836][T24689] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 997.809548][T24694] syzkaller0: entered promiscuous mode [ 997.815629][T24694] syzkaller0: entered allmulticast mode [ 997.823007][T24689] syz.5.5871: attempt to access beyond end of device [ 997.823007][T24689] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 997.837162][T24689] syz.5.5871: attempt to access beyond end of device [ 997.837162][T24689] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 997.857079][T24689] syz.5.5871: attempt to access beyond end of device [ 997.857079][T24689] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 997.872083][T24689] syz.5.5871: attempt to access beyond end of device [ 997.872083][T24689] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 997.886138][T24689] syz.5.5871: attempt to access beyond end of device [ 997.886138][T24689] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 997.930357][T24701] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 997.937019][T24701] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 997.944691][T24701] vhci_hcd vhci_hcd.0: Device attached [ 997.958644][T24701] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 997.965185][T24701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 997.972773][T24701] vhci_hcd vhci_hcd.0: Device attached [ 997.984076][T24706] vhci_hcd: connection closed [ 997.987356][T24702] vhci_hcd: connection closed [ 997.992372][ T31] vhci_hcd: stop threads [ 998.001525][ T31] vhci_hcd: release socket [ 998.006031][ T31] vhci_hcd: disconnect device [ 998.030381][ T31] vhci_hcd: stop threads [ 998.034669][ T31] vhci_hcd: release socket [ 998.039584][ T31] vhci_hcd: disconnect device [ 998.277911][T24722] loop2: detected capacity change from 0 to 512 [ 998.341048][T24722] EXT4-fs (loop2): orphan cleanup on readonly fs [ 998.348704][T24722] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5882: bg 0: block 248: padding at end of block bitmap is not set [ 998.364917][T24722] Quota error (device loop2): write_blk: dquota write failed [ 998.372443][T24722] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 998.382394][T24722] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5882: Failed to acquire dquot type 1 [ 998.398987][T24722] EXT4-fs (loop2): 1 truncate cleaned up [ 998.405824][T24722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 998.523893][T24725] loop5: detected capacity change from 0 to 512 [ 998.972676][T24725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 999.183923][T24725] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.706183][T24742] vlan1: entered allmulticast mode [ 1000.342774][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.560545][T24744] syzkaller0: entered promiscuous mode [ 1000.566334][T24744] syzkaller0: entered allmulticast mode [ 1001.137194][T24749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.144478][T24749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.176582][T24749] bridge0: entered allmulticast mode [ 1001.186707][ T29] audit: type=1400 audit(1754676442.336:4310): avc: denied { create } for pid=24756 comm="syz.2.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1001.215179][T24749] bridge_slave_1: left allmulticast mode [ 1001.220913][T24749] bridge_slave_1: left promiscuous mode [ 1001.226689][T24749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.236879][T24749] bridge_slave_0: left allmulticast mode [ 1001.242887][T24749] bridge_slave_0: left promiscuous mode [ 1001.248680][T24749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.338725][T24758] syzkaller0: entered promiscuous mode [ 1001.344540][T24758] syzkaller0: entered allmulticast mode [ 1001.508609][T24772] loop3: detected capacity change from 0 to 2048 [ 1001.675817][ T29] audit: type=1400 audit(1754676442.826:4311): avc: denied { write } for pid=24776 comm="syz.3.5899" name="cgroup.subtree_control" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1001.935065][ T29] audit: type=1400 audit(1754676442.856:4312): avc: denied { open } for pid=24776 comm="syz.3.5899" path="" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1002.002047][T24789] loop3: detected capacity change from 0 to 1024 [ 1002.010766][T24789] EXT4-fs: Ignoring removed bh option [ 1002.038980][T24789] EXT4-fs: inline encryption not supported [ 1002.046672][T24789] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1002.058172][T24789] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1002.206488][T24789] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.5901: lblock 2 mapped to illegal pblock 2 (length 1) [ 1002.221847][T24789] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1002.230098][T24789] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.5901: lblock 0 mapped to illegal pblock 48 (length 1) [ 1002.245836][T24789] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1002.254694][T24789] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5901: Failed to acquire dquot type 0 [ 1002.415950][T24789] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1002.428105][T24789] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.5901: mark_inode_dirty error [ 1002.439823][T24789] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1002.450312][T24789] EXT4-fs (loop3): 1 orphan inode deleted [ 1002.456839][T24789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.701012][T24797] syzkaller0: entered promiscuous mode [ 1002.706707][T24797] syzkaller0: entered allmulticast mode [ 1002.804062][T24799] vlan2: entered allmulticast mode [ 1002.809264][T24799] bridge_slave_0: entered allmulticast mode [ 1003.270440][ T174] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1003.305814][ T174] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1003.314299][ T174] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 1003.382342][T24806] loop2: detected capacity change from 0 to 512 [ 1004.468556][T24789] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1004.496415][T24806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1004.509287][T24806] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.921725][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1004.945123][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.015965][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1005.323851][T24845] loop3: detected capacity change from 0 to 512 [ 1005.396733][T24845] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1005.411049][T24845] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5915: bg 0: block 248: padding at end of block bitmap is not set [ 1005.466113][T24845] Quota error (device loop3): write_blk: dquota write failed [ 1005.473633][T24845] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1005.483585][T24845] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5915: Failed to acquire dquot type 1 [ 1005.511310][T24845] EXT4-fs (loop3): 1 truncate cleaned up [ 1005.556217][T24845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1006.469911][T24861] loop0: detected capacity change from 0 to 128 [ 1006.517189][T24861] bio_check_eod: 84 callbacks suppressed [ 1006.517208][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.517208][T24861] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1006.650310][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.650310][T24861] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1006.750641][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.750641][T24861] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 1006.764642][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.764642][T24861] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1006.778449][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.778449][T24861] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1006.791945][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.791945][T24861] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1006.805975][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.805975][T24861] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1006.819555][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.819555][T24861] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1006.847254][T24861] syz.0.5924: attempt to access beyond end of device [ 1006.847254][T24861] loop0: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 1006.902373][T24869] loop5: detected capacity change from 0 to 2048 [ 1006.963052][T24871] syz.0.5924: attempt to access beyond end of device [ 1006.963052][T24871] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 1006.979646][T24873] tipc: Enabling of bearer rejected, failed to enable media [ 1007.178859][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.458626][T24895] loop5: detected capacity change from 0 to 512 [ 1007.467275][T24895] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1007.479393][T24895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 1007.487612][T24895] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.5933: corrupted in-inode xattr: e_value size too large [ 1007.503357][T24895] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5933: couldn't read orphan inode 15 (err -117) [ 1007.522135][T24895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.637770][T24903] loop0: detected capacity change from 0 to 128 [ 1008.414355][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.623927][T24919] tipc: Enabling of bearer rejected, failed to enable media [ 1009.233056][T24921] loop3: detected capacity change from 0 to 512 [ 1009.254167][T24921] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1009.262186][T24921] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5938: bg 0: block 248: padding at end of block bitmap is not set [ 1009.277138][T24921] Quota error (device loop3): write_blk: dquota write failed [ 1009.284645][T24921] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1009.294593][T24921] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5938: Failed to acquire dquot type 1 [ 1009.308055][T24921] EXT4-fs (loop3): 1 truncate cleaned up [ 1009.314847][T24921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1010.351730][T24942] loop0: detected capacity change from 0 to 512 [ 1010.366313][T24942] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1010.452165][T24942] EXT4-fs (loop0): 1 truncate cleaned up [ 1010.476990][T24942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.560725][T24942] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.009832][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.304095][T24980] tipc: Enabling of bearer rejected, failed to enable media [ 1011.332672][T24979] loop2: detected capacity change from 0 to 512 [ 1011.402326][T24979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1011.503850][T24979] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1011.567412][T24979] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5954: bg 0: block 248: padding at end of block bitmap is not set [ 1011.616221][T24979] Quota error (device loop2): write_blk: dquota write failed [ 1011.623784][T24979] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1011.633743][T24979] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5954: Failed to acquire dquot type 1 [ 1011.663130][T24979] EXT4-fs (loop2): 1 truncate cleaned up [ 1011.669384][T24979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1011.719199][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.312869][T25017] loop2: detected capacity change from 0 to 2048 [ 1013.027569][T25038] loop3: detected capacity change from 0 to 1024 [ 1013.109915][T25038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.157859][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.266613][T25053] loop2: detected capacity change from 0 to 2048 [ 1013.313495][T25049] syzkaller0: entered promiscuous mode [ 1013.319383][T25049] syzkaller0: entered allmulticast mode [ 1013.330302][T25056] loop3: detected capacity change from 0 to 512 [ 1013.642454][ T3410] usb usb8-port1: attempt power cycle [ 1013.769171][T25056] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1013.776837][T25056] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5973: bg 0: block 248: padding at end of block bitmap is not set [ 1013.794547][T25056] Quota error (device loop3): write_blk: dquota write failed [ 1013.802045][T25056] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1013.812166][T25056] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5973: Failed to acquire dquot type 1 [ 1013.842087][T25056] EXT4-fs (loop3): 1 truncate cleaned up [ 1013.854677][T25056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1014.264544][T25068] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1014.271246][T25068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1014.278834][T25068] vhci_hcd vhci_hcd.0: Device attached [ 1014.379838][T25068] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 1014.386579][T25068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1014.394213][T25068] vhci_hcd vhci_hcd.0: Device attached [ 1014.452212][T25073] vhci_hcd: connection closed [ 1014.452367][ T3557] vhci_hcd: stop threads [ 1014.461448][ T3557] vhci_hcd: release socket [ 1014.465852][ T3557] vhci_hcd: disconnect device [ 1014.470576][T16177] vhci_hcd: vhci_device speed not set [ 1014.479720][T25069] vhci_hcd: connection closed [ 1014.508509][ T3557] vhci_hcd: stop threads [ 1014.517574][ T3557] vhci_hcd: release socket [ 1014.522132][ T3557] vhci_hcd: disconnect device [ 1014.541422][T16177] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 1014.548894][T16177] usb 11-1: enqueue for inactive port 0 [ 1014.566818][T16177] usb 11-1: enqueue for inactive port 0 [ 1014.583912][T16177] usb 11-1: enqueue for inactive port 0 [ 1014.670248][T16177] vhci_hcd: vhci_device speed not set [ 1015.028565][T25085] loop5: detected capacity change from 0 to 1024 [ 1015.072907][T25085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1015.187419][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.211352][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.283371][T25093] loop3: detected capacity change from 0 to 128 [ 1015.318028][T25093] bio_check_eod: 1175 callbacks suppressed [ 1015.318047][T25093] syz.3.5986: attempt to access beyond end of device [ 1015.318047][T25093] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1015.366081][T25093] syz.3.5986: attempt to access beyond end of device [ 1015.366081][T25093] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1015.383213][T25093] syz.3.5986: attempt to access beyond end of device [ 1015.383213][T25093] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 1015.425087][T25098] syz.3.5986: attempt to access beyond end of device [ 1015.425087][T25098] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 1015.448874][T25093] syz.3.5986: attempt to access beyond end of device [ 1015.448874][T25093] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1015.458881][T25098] syz.3.5986: attempt to access beyond end of device [ 1015.458881][T25098] loop3: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 1015.503007][T25093] syz.3.5986: attempt to access beyond end of device [ 1015.503007][T25093] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1015.504438][T25098] syz.3.5986: attempt to access beyond end of device [ 1015.504438][T25098] loop3: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 1015.547036][T25093] syz.3.5986: attempt to access beyond end of device [ 1015.547036][T25093] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1015.568650][T25098] syz.3.5986: attempt to access beyond end of device [ 1015.568650][T25098] loop3: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 1015.620479][ T3410] usb usb8-port1: unable to enumerate USB device [ 1015.631442][T25107] loop3: detected capacity change from 0 to 2048 [ 1015.954724][T25119] syzkaller0: entered promiscuous mode [ 1015.960642][T25119] syzkaller0: entered allmulticast mode [ 1016.198539][T25125] loop5: detected capacity change from 0 to 512 [ 1017.508457][T25125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1017.521062][T25125] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1017.581689][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1017.616863][T25135] loop3: detected capacity change from 0 to 2048 [ 1017.672335][T25135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1017.807444][T25144] loop5: detected capacity change from 0 to 512 [ 1017.869509][T25146] loop2: detected capacity change from 0 to 1024 [ 1017.907041][T25144] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1017.920975][T25144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5997: bg 0: block 248: padding at end of block bitmap is not set [ 1017.936474][T25144] Quota error (device loop5): write_blk: dquota write failed [ 1017.943936][T25144] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1017.953942][T25144] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5997: Failed to acquire dquot type 1 [ 1017.966790][T25144] EXT4-fs (loop5): 1 truncate cleaned up [ 1017.974488][T25144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1017.997682][T25146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.138736][ T109] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.288128][ T109] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.429520][T13352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.462537][ T109] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.595990][ T109] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.739549][T25161] loop2: detected capacity change from 0 to 128 [ 1019.227912][T25166] loop0: detected capacity change from 0 to 512 [ 1019.249647][T25166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1019.311595][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.322847][T25166] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1019.330895][T25166] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6001: bg 0: block 248: padding at end of block bitmap is not set [ 1019.346338][T25166] Quota error (device loop0): write_blk: dquota write failed [ 1019.353793][T25166] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1019.363712][T25166] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6001: Failed to acquire dquot type 1 [ 1019.378636][T25166] EXT4-fs (loop0): 1 truncate cleaned up [ 1019.386838][T25166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1019.557120][T25138] chnl_net:caif_netlink_parms(): no params data found [ 1019.644821][ T109] tipc: Left network mode [ 1019.683437][ T109] hsr_slave_0: left promiscuous mode [ 1019.713339][ T109] hsr_slave_1: left promiscuous mode [ 1019.740564][ T109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.747979][ T109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.787899][ T109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.795410][ T109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.824131][ T109] veth1_macvtap: left promiscuous mode [ 1019.829625][ T109] veth0_macvtap: left promiscuous mode [ 1019.855463][ T109] veth1_vlan: left promiscuous mode [ 1019.870449][ T109] veth0_vlan: left promiscuous mode [ 1020.005011][ T109] team0 (unregistering): Port device team_slave_1 removed [ 1020.026970][ T109] team0 (unregistering): Port device team_slave_0 removed [ 1020.127487][T25138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.134689][T25138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.162532][T25138] bridge_slave_0: entered allmulticast mode [ 1020.176160][T25138] bridge_slave_0: entered promiscuous mode [ 1020.192223][T25138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.200549][T25138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.217983][T25138] bridge_slave_1: entered allmulticast mode [ 1020.233948][T25138] bridge_slave_1: entered promiscuous mode [ 1020.273787][T25138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.296441][T25138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.347897][T25138] team0: Port device team_slave_0 added [ 1020.357682][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.370796][T25138] team0: Port device team_slave_1 added [ 1020.389471][T25138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.396538][T25138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.422726][T25138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.435663][T25138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.442744][T25138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.469215][T25138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.499939][T25138] hsr_slave_0: entered promiscuous mode [ 1020.507516][T25138] hsr_slave_1: entered promiscuous mode [ 1020.513828][T25138] debugfs: 'hsr0' already exists in 'hsr' [ 1020.519664][T25138] Cannot create hsr debugfs directory [ 1020.544260][T24178] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.589465][T25185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1020.691916][T25185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1020.791821][T25195] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1020.798411][T25195] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1020.805881][T25195] vhci_hcd vhci_hcd.0: Device attached [ 1020.817738][T25195] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 1020.824268][T25195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1020.831835][T25195] vhci_hcd vhci_hcd.0: Device attached [ 1020.839351][T25203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6011'. [ 1020.849609][T25203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6011'. [ 1020.873342][T25200] vhci_hcd: connection closed [ 1020.873506][T25198] vhci_hcd: connection closed [ 1020.878375][ T109] vhci_hcd: stop threads [ 1020.887438][ T109] vhci_hcd: release socket [ 1020.891977][ T109] vhci_hcd: disconnect device [ 1020.896858][ T109] vhci_hcd: stop threads [ 1020.901197][ T109] vhci_hcd: release socket [ 1020.905822][ T109] vhci_hcd: disconnect device [ 1020.976118][T25205] syzkaller0: entered promiscuous mode [ 1020.982161][T25205] syzkaller0: entered allmulticast mode [ 1020.989743][T25211] loop5: detected capacity change from 0 to 2048 [ 1021.051719][T25211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1021.152442][T25138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1021.201830][T25138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1021.263232][T25138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1021.275028][T25138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1021.344211][T25138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.373169][T25138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.395589][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.402756][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.451862][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.457010][T25233] loop2: detected capacity change from 0 to 2048 [ 1021.459131][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.557014][T25138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.701764][T25138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.771148][T25250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6020'. [ 1021.850819][T25250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6020'. [ 1021.926761][T25138] veth0_vlan: entered promiscuous mode [ 1021.942879][T25138] veth1_vlan: entered promiscuous mode [ 1021.966331][T25138] veth0_macvtap: entered promiscuous mode [ 1021.988592][T25138] veth1_macvtap: entered promiscuous mode [ 1022.022839][T25138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.048607][T25138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.105306][ T144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.142561][ T144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.180921][ T109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.189909][ T109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.403637][T25268] syzkaller0: entered promiscuous mode [ 1022.409457][T25268] syzkaller0: entered allmulticast mode [ 1022.539557][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.761107][T25281] tipc: Enabling of bearer rejected, failed to enable media [ 1023.237884][T25293] loop5: detected capacity change from 0 to 512 [ 1023.244516][T25293] EXT4-fs: Ignoring removed oldalloc option [ 1023.251379][T25293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1023.301648][T25293] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1023.322835][T25293] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 1023.332469][T25293] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1023.342394][T25293] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6028: Failed to acquire dquot type 1 [ 1023.357258][T25293] EXT4-fs (loop5): 1 truncate cleaned up [ 1023.364384][T25293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1024.804564][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6033'. [ 1024.851314][T25306] vlan2: entered promiscuous mode [ 1024.856390][T25306] gretap0: entered promiscuous mode [ 1024.983009][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.027966][T25312] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6035'. [ 1025.051148][T25312] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6035'. [ 1025.133199][T25316] tipc: Enabling of bearer rejected, failed to enable media [ 1025.500541][ T3410] usb usb8-port1: attempt power cycle [ 1026.208253][T25364] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1026.250942][T25368] tipc: Enabled bearer , priority 0 [ 1026.259423][T25368] tipc: Resetting bearer [ 1026.273066][T25372] loop5: detected capacity change from 0 to 512 [ 1026.280313][T25372] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1026.291395][T25367] tipc: Disabling bearer [ 1026.317577][T25372] EXT4-fs (loop5): 1 truncate cleaned up [ 1026.334762][T25372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.358140][T25372] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.617691][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.734943][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.794019][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.853886][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1026.910030][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.924960][T25377] chnl_net:caif_netlink_parms(): no params data found [ 1026.964363][T25377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.971531][T25377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.008988][T25377] bridge_slave_0: entered allmulticast mode [ 1027.015645][T25377] bridge_slave_0: entered promiscuous mode [ 1027.022557][T25377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.029736][T25377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.037688][T25377] bridge_slave_1: entered allmulticast mode [ 1027.044342][T25377] bridge_slave_1: entered promiscuous mode [ 1027.064294][T25377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.078051][T25377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.098018][T25377] team0: Port device team_slave_0 added [ 1027.106681][T25377] team0: Port device team_slave_1 added [ 1027.149180][T25377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.156185][T25377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.182242][T25377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.617312][T25377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.624323][T25377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.650324][T25377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.667143][T25428] loop5: detected capacity change from 0 to 128 [ 1027.684365][T25428] bio_check_eod: 1248 callbacks suppressed [ 1027.684384][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.684384][T25428] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1027.716360][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.716360][T25428] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1027.732424][ T144] tipc: Left network mode [ 1027.838238][ T3410] usb usb8-port1: unable to enumerate USB device [ 1027.863087][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.863087][T25428] loop5: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 1027.876913][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.876913][T25428] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1027.890797][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.890797][T25428] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1027.891135][ T144] hsr_slave_0: left promiscuous mode [ 1027.904518][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.904518][T25428] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1027.923336][ T144] hsr_slave_1: left promiscuous mode [ 1027.923586][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.923586][T25428] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1027.929275][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.949991][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.961339][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.961339][T25428] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1027.975583][T25428] syz.5.6070: attempt to access beyond end of device [ 1027.975583][T25428] loop5: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 1027.976474][T25431] syz.5.6070: attempt to access beyond end of device [ 1027.976474][T25431] loop5: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 1028.003037][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.010645][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.022656][ T144] veth1_macvtap: left promiscuous mode [ 1028.028335][ T144] veth0_macvtap: left promiscuous mode [ 1028.034227][ T144] veth1_vlan: left promiscuous mode [ 1028.039635][ T144] veth0_vlan: left promiscuous mode [ 1028.108901][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1028.119126][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1028.293877][T25436] netlink: 592 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1028.312599][T25377] hsr_slave_0: entered promiscuous mode [ 1028.329061][T25377] hsr_slave_1: entered promiscuous mode [ 1028.339084][T25377] debugfs: 'hsr0' already exists in 'hsr' [ 1028.344978][T25377] Cannot create hsr debugfs directory [ 1028.404526][T25439] loop3: detected capacity change from 0 to 2048 [ 1028.664109][T25455] loop3: detected capacity change from 0 to 128 [ 1029.183668][T25377] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1029.256852][T25377] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1029.268534][T25461] loop5: detected capacity change from 0 to 512 [ 1029.348004][T25377] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1029.359075][T25461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1029.387835][T25377] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1029.399643][T25461] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1029.418282][T25461] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6081: bg 0: block 248: padding at end of block bitmap is not set [ 1029.544955][T25461] Quota error (device loop5): write_blk: dquota write failed [ 1029.552621][T25461] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1029.562703][T25461] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6081: Failed to acquire dquot type 1 [ 1029.603081][T25377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.634804][T25377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.651318][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.658485][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.677954][T25461] EXT4-fs (loop5): 1 truncate cleaned up [ 1029.688108][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.695221][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.748077][T25377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1029.758498][T25377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.103859][T25377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.138864][T25461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1030.172884][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.232954][T25493] bridge0: port 3(team0) entered disabled state [ 1030.239469][T25493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.246768][T25493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.296032][T25493] bridge0: entered allmulticast mode [ 1030.305734][T25377] veth0_vlan: entered promiscuous mode [ 1030.321278][T25496] team0: left allmulticast mode [ 1030.326165][T25496] team_slave_0: left allmulticast mode [ 1030.331754][T25496] team_slave_1: left allmulticast mode [ 1030.337223][T25496] team0: left promiscuous mode [ 1030.342159][T25496] team_slave_0: left promiscuous mode [ 1030.347756][T25496] team_slave_1: left promiscuous mode [ 1030.353562][T25496] bridge0: port 3(team0) entered disabled state [ 1030.423359][T25496] bridge_slave_1: left allmulticast mode [ 1030.429311][T25496] bridge_slave_1: left promiscuous mode [ 1030.435105][T25496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.513739][T25496] bridge_slave_0: left allmulticast mode [ 1030.519429][T25496] bridge_slave_0: left promiscuous mode [ 1030.525200][T25496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.585947][T25377] veth1_vlan: entered promiscuous mode [ 1030.609377][T25377] veth0_macvtap: entered promiscuous mode [ 1030.629125][T25377] veth1_macvtap: entered promiscuous mode [ 1030.716002][T25377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.770145][T25377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.807169][T13445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.860471][T13445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.894368][T13445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.939242][T13445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.167785][T25518] loop2: detected capacity change from 0 to 512 [ 1031.174532][T25518] EXT4-fs: Ignoring removed oldalloc option [ 1031.182719][T25518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1031.191901][T25518] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1031.199044][T25518] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 1031.208646][T25518] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1031.218173][T25518] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6093: Failed to acquire dquot type 1 [ 1031.232131][T25518] EXT4-fs (loop2): 1 truncate cleaned up [ 1031.238371][T25518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1031.265541][T25512] syzkaller0: entered promiscuous mode [ 1031.271413][T25512] syzkaller0: entered allmulticast mode [ 1031.549077][T25531] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1031.682192][T25537] loop5: detected capacity change from 0 to 512 [ 1031.741899][T25537] journal_path: Non-blockdev passed as './bus' [ 1031.748090][T25537] EXT4-fs: error: could not find journal device path [ 1031.864553][T25542] loop5: detected capacity change from 0 to 512 [ 1031.871981][T25542] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1031.881762][T25542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 1031.895389][T25542] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.6098: corrupted in-inode xattr: e_value size too large [ 1031.909915][T25542] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6098: couldn't read orphan inode 15 (err -117) [ 1031.940691][T25542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.962829][T25377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.763711][T25559] loop3: detected capacity change from 0 to 128 [ 1032.774564][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.799675][T25559] bio_check_eod: 11732 callbacks suppressed [ 1032.799692][T25559] syz.3.6103: attempt to access beyond end of device [ 1032.799692][T25559] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1032.824711][T25559] syz.3.6103: attempt to access beyond end of device [ 1032.824711][T25559] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1032.838212][T25559] syz.3.6103: attempt to access beyond end of device [ 1032.838212][T25559] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 1032.852045][T25559] syz.3.6103: attempt to access beyond end of device [ 1032.852045][T25559] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1032.934226][T25559] syz.3.6103: attempt to access beyond end of device [ 1032.934226][T25559] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1033.000044][T25569] syz.3.6103: attempt to access beyond end of device [ 1033.000044][T25569] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 1033.020576][T25559] syz.3.6103: attempt to access beyond end of device [ 1033.020576][T25559] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1033.066461][T25569] syz.3.6103: attempt to access beyond end of device [ 1033.066461][T25569] loop3: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 1033.119098][T25559] syz.3.6103: attempt to access beyond end of device [ 1033.119098][T25559] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1033.152258][T25569] syz.3.6103: attempt to access beyond end of device [ 1033.152258][T25569] loop3: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 1033.511949][T25585] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1033.518538][T25585] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1033.526027][T25585] vhci_hcd vhci_hcd.0: Device attached [ 1033.565382][T25590] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1033.572007][T25590] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1033.579585][T25590] vhci_hcd vhci_hcd.0: Device attached [ 1033.585248][T25581] loop5: detected capacity change from 0 to 256 [ 1033.592103][T25581] msdos: Bad value for 'time_offset' [ 1033.642842][T25586] vhci_hcd: connection closed [ 1033.643092][ T1809] vhci_hcd: stop threads [ 1033.643154][T25591] vhci_hcd: connection closed [ 1033.647932][ T1809] vhci_hcd: release socket [ 1033.647950][ T1809] vhci_hcd: disconnect device [ 1033.678910][ T1809] vhci_hcd: stop threads [ 1033.683236][ T1809] vhci_hcd: release socket [ 1033.687655][ T1809] vhci_hcd: disconnect device [ 1033.710253][ T10] vhci_hcd: vhci_device speed not set [ 1033.786002][T25597] loop2: detected capacity change from 0 to 2048 [ 1035.512801][T25605] loop2: detected capacity change from 0 to 512 [ 1035.561997][T25605] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1035.569572][T25605] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6115: bg 0: block 248: padding at end of block bitmap is not set [ 1035.586042][T25605] Quota error (device loop2): write_blk: dquota write failed [ 1035.593560][T25605] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1035.603617][T25605] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6115: Failed to acquire dquot type 1 [ 1035.617110][T25605] EXT4-fs (loop2): 1 truncate cleaned up [ 1035.656578][T25610] sctp: [Deprecated]: syz.0.6117 (pid 25610) Use of int in maxseg socket option. [ 1035.656578][T25610] Use struct sctp_assoc_value instead [ 1035.864230][T25605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1036.955327][T25377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.177489][T25649] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6128'. [ 1038.861363][T25677] loop5: detected capacity change from 0 to 512 [ 1038.879349][T25677] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1038.887050][T25677] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6134: bg 0: block 248: padding at end of block bitmap is not set [ 1038.902416][T25677] Quota error (device loop5): write_blk: dquota write failed [ 1038.909890][T25677] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1038.919828][T25677] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6134: Failed to acquire dquot type 1 [ 1038.932539][T25677] EXT4-fs (loop5): 1 truncate cleaned up [ 1038.939645][T25677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1039.755777][T25701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6142'. [ 1039.764723][T25701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6142'. [ 1039.781023][T25701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6142'. [ 1039.952294][T25710] loop3: detected capacity change from 0 to 512 [ 1039.959353][T25710] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1039.980925][T25710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 1039.989544][T25710] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.6146: corrupted in-inode xattr: e_value size too large [ 1040.722812][T25714] loop2: detected capacity change from 0 to 512 [ 1040.926771][T25716] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1040.936442][T25710] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6146: couldn't read orphan inode 15 (err -117) [ 1041.556485][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.586350][T25714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1041.598832][T25710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.748879][T25714] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1041.760013][T25714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6144: bg 0: block 248: padding at end of block bitmap is not set [ 1041.776356][T25714] Quota error (device loop2): write_blk: dquota write failed [ 1041.783777][T25714] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1041.793706][T25714] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6144: Failed to acquire dquot type 1 [ 1041.816411][T25714] EXT4-fs (loop2): 1 truncate cleaned up [ 1041.829128][T25714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1042.565590][T25724] loop5: detected capacity change from 0 to 512 [ 1042.700068][T15843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.717483][T25377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.727997][T25724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1042.746695][T25724] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1042.754173][T25724] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6148: bg 0: block 248: padding at end of block bitmap is not set [ 1042.769675][T25724] Quota error (device loop5): write_blk: dquota write failed [ 1042.777158][T25724] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1042.787124][T25724] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6148: Failed to acquire dquot type 1 [ 1042.803015][T25724] EXT4-fs (loop5): 1 truncate cleaned up [ 1042.822169][T25737] loop2: detected capacity change from 0 to 512 [ 1042.835874][T25737] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1042.845813][T25724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1042.859166][T25737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 1042.867354][T25737] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.6151: corrupted in-inode xattr: e_value size too large [ 1042.881940][T25737] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6151: couldn't read orphan inode 15 (err -117) [ 1042.895244][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6152'. [ 1042.904369][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6152'. [ 1042.914633][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.924250][T25737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1042.931947][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6152'. [ 1043.738809][T25377] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.885285][T25758] syzkaller0: entered promiscuous mode [ 1043.891922][T25758] syzkaller0: entered allmulticast mode [ 1044.077050][T25772] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1044.489250][T25787] vlan2: entered allmulticast mode [ 1044.494450][T25787] bridge_slave_0: entered allmulticast mode [ 1044.529399][T25786] loop2: detected capacity change from 0 to 512 [ 1044.620325][T25786] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1045.410013][T25786] EXT4-fs (loop2): 1 truncate cleaned up [ 1045.418828][T25786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1046.443107][T25786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.746707][T25803] syzkaller0: entered promiscuous mode [ 1046.752815][T25803] syzkaller0: entered allmulticast mode [ 1047.185513][T25821] syzkaller0: entered promiscuous mode [ 1047.191540][T25821] syzkaller0: entered allmulticast mode [ 1048.103290][T25836] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1048.109857][T25836] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1048.117389][T25836] vhci_hcd vhci_hcd.0: Device attached [ 1048.142200][T25836] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 1048.148820][T25836] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1048.156489][T25836] vhci_hcd vhci_hcd.0: Device attached [ 1048.185999][T25837] vhci_hcd: connection closed [ 1048.186227][ T174] vhci_hcd: stop threads [ 1048.186237][T25839] vhci_hcd: connection closed [ 1048.195247][ T174] vhci_hcd: release socket [ 1048.204446][ T174] vhci_hcd: disconnect device [ 1048.270839][ T174] vhci_hcd: stop threads [ 1048.275324][ T174] vhci_hcd: release socket [ 1048.279813][ T174] vhci_hcd: disconnect device [ 1048.484846][T25846] vlan2: entered allmulticast mode [ 1048.558388][T25848] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1050.250428][T25904] sctp: [Deprecated]: syz.1.6198 (pid 25904) Use of int in maxseg socket option. [ 1050.250428][T25904] Use struct sctp_assoc_value instead [ 1050.808376][T25921] vlan2: entered allmulticast mode [ 1051.785953][T25948] sctp: [Deprecated]: syz.1.6214 (pid 25948) Use of int in maxseg socket option. [ 1051.785953][T25948] Use struct sctp_assoc_value instead [ 1052.264138][T25961] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1055.353436][ T29] audit: type=1400 audit(1754676496.506:4313): avc: denied { create } for pid=26004 comm="syz.3.6230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1055.380923][T26005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1055.401377][T26005] 8021q: VLANs not supported on caif0 [ 1055.713052][T26030] netlink: 'syz.0.6241': attribute type 10 has an invalid length. [ 1055.761826][T26030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6241'. [ 1055.778633][T26030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.789743][T26030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.799960][T26030] bond0 (unregistering): Released all slaves [ 1056.004081][T26046] loop5: detected capacity change from 0 to 512 [ 1056.015237][T26046] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1056.025680][T26046] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6245: bg 0: block 248: padding at end of block bitmap is not set [ 1056.042137][T26046] Quota error (device loop5): write_blk: dquota write failed [ 1056.049519][T26046] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1056.059548][T26046] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6245: Failed to acquire dquot type 1 [ 1056.076987][T26046] EXT4-fs (loop5): 1 truncate cleaned up [ 1056.083871][T26046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1057.978953][T22448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.513029][T26085] vlan2: entered allmulticast mode [ 1060.165808][T26113] syzkaller0: entered promiscuous mode [ 1060.171896][T26113] syzkaller0: entered allmulticast mode [ 1062.411043][T26179] vlan2: entered allmulticast mode [ 1064.886087][T26205] sctp: [Deprecated]: syz.0.6300 (pid 26205) Use of int in maxseg socket option. [ 1064.886087][T26205] Use struct sctp_assoc_value instead [ 1066.074274][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6304'. [ 1066.083251][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6304'. [ 1066.134455][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6304'. [ 1067.782784][T26254] sctp: [Deprecated]: syz.0.6316 (pid 26254) Use of int in maxseg socket option. [ 1067.782784][T26254] Use struct sctp_assoc_value instead [ 1068.065027][T26257] syzkaller0: entered promiscuous mode [ 1068.071019][T26257] syzkaller0: entered allmulticast mode [ 1068.496632][T26277] bridge0: port 3(team0) entered blocking state [ 1068.503525][T26277] bridge0: port 3(team0) entered disabled state [ 1068.510955][T26277] team0: entered allmulticast mode [ 1068.516312][T26277] team_slave_0: entered allmulticast mode [ 1068.522783][T26277] team_slave_1: entered allmulticast mode [ 1068.542832][T26277] team0: entered promiscuous mode [ 1068.548184][T26277] team_slave_0: entered promiscuous mode [ 1068.555195][T26277] team_slave_1: entered promiscuous mode [ 1068.617428][T26277] bridge0: port 3(team0) entered blocking state [ 1068.624131][T26277] bridge0: port 3(team0) entered forwarding state [ 1068.768268][T26290] netlink: 'syz.5.6327': attribute type 10 has an invalid length. [ 1068.828052][T26290] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6327'. [ 1069.209746][T26299] sctp: [Deprecated]: syz.5.6331 (pid 26299) Use of int in maxseg socket option. [ 1069.209746][T26299] Use struct sctp_assoc_value instead [ 1070.027537][T26314] syzkaller0: entered promiscuous mode [ 1070.033469][T26314] syzkaller0: entered allmulticast mode [ 1070.330526][T26330] syzkaller0: entered promiscuous mode [ 1070.336151][T26330] syzkaller0: entered allmulticast mode [ 1071.102382][T26347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1071.133031][T26347] vlan2: entered promiscuous mode [ 1071.138111][T26347] batadv0: entered promiscuous mode [ 1071.238050][T26353] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1072.222804][T26399] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1072.841210][T26420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6371'. [ 1072.853959][T26420] vlan1: entered promiscuous mode [ 1072.859020][T26420] batadv0: entered promiscuous mode [ 1073.819173][T26457] syzkaller0: entered promiscuous mode [ 1073.824766][T26457] syzkaller0: entered allmulticast mode [ 1073.987055][T26470] vlan2: entered allmulticast mode [ 1074.197610][T26474] sctp: [Deprecated]: syz.5.6391 (pid 26474) Use of int in maxseg socket option. [ 1074.197610][T26474] Use struct sctp_assoc_value instead [ 1075.215394][T26497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.222618][T26497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.257308][T26497] bridge0: entered allmulticast mode [ 1075.279171][T26498] bridge_slave_1: left allmulticast mode [ 1075.284933][T26498] bridge_slave_1: left promiscuous mode [ 1075.290765][T26498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.311957][T26498] bridge_slave_0: left promiscuous mode [ 1075.317705][T26498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.563136][T26510] sctp: [Deprecated]: syz.0.6404 (pid 26510) Use of int in maxseg socket option. [ 1075.563136][T26510] Use struct sctp_assoc_value instead [ 1076.209849][T26525] syzkaller0: entered promiscuous mode [ 1076.215780][T26525] syzkaller0: entered allmulticast mode [ 1076.714722][T26553] vlan2: entered allmulticast mode [ 1076.737103][T26555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26555 comm=syz.2.6420 [ 1077.495187][T26585] vlan2: entered allmulticast mode [ 1077.687247][T26592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26592 comm=syz.1.6435 [ 1078.528507][T26623] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1078.979545][T26636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6451'. [ 1079.322365][T26655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1079.523469][T26663] syzkaller0: entered promiscuous mode [ 1079.529428][T26663] syzkaller0: entered allmulticast mode [ 1079.819859][T26677] bridge0: port 3(team0) entered disabled state [ 1079.826336][T26677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.833565][T26677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.841060][T26677] bridge0: entered allmulticast mode [ 1079.849907][T26677] team0: left allmulticast mode [ 1079.854909][T26677] team_slave_0: left allmulticast mode [ 1079.860616][T26677] team_slave_1: left allmulticast mode [ 1079.866101][T26677] team0: left promiscuous mode [ 1079.870973][T26677] team_slave_0: left promiscuous mode [ 1079.876638][T26677] team_slave_1: left promiscuous mode [ 1079.882638][T26677] bridge0: port 3(team0) entered disabled state [ 1079.891389][T26677] bridge_slave_1: left allmulticast mode [ 1079.897044][T26677] bridge_slave_1: left promiscuous mode [ 1079.902856][T26677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.910616][T26677] bridge_slave_0: left allmulticast mode [ 1079.916241][T26677] bridge_slave_0: left promiscuous mode [ 1079.922002][T26677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.003118][T26702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.018479][T26702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.052802][ T109] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.088058][ T109] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.108609][ T109] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.135947][ T109] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.820335][T26749] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6492'. [ 1083.435050][T26763] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1084.333939][T26778] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1086.416648][T26803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6511'. [ 1086.543141][T26819] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1086.873834][T26828] syzkaller0: entered promiscuous mode [ 1086.879752][T26828] syzkaller0: entered allmulticast mode [ 1088.440387][ T29] audit: type=1400 audit(1754676529.586:4314): avc: denied { ioctl } for pid=26874 comm="syz.0.6533" path="socket:[80751]" dev="sockfs" ino=80751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1088.651596][T26879] syzkaller0: entered promiscuous mode [ 1088.657576][T26879] syzkaller0: entered allmulticast mode [ 1089.754732][T26892] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1091.919941][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6560'. [ 1091.928938][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6560'. [ 1091.971654][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6560'. [ 1092.391174][ T29] audit: type=1400 audit(1754676533.546:4315): avc: denied { setopt } for pid=26971 comm="syz.0.6562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1092.911237][T26986] syzkaller0: entered promiscuous mode [ 1092.917085][T26986] syzkaller0: entered allmulticast mode [ 1092.947789][T26990] tipc: Enabling of bearer rejected, failed to enable media [ 1092.957004][T26990] syzkaller0: entered promiscuous mode [ 1092.962630][T26990] syzkaller0: entered allmulticast mode [ 1094.246776][T27027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6579'. [ 1094.255816][T27027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6579'. [ 1094.339224][T27032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6580'. [ 1094.348409][T27032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6580'. [ 1094.489243][T27036] syzkaller0: entered promiscuous mode [ 1094.495200][T27036] syzkaller0: entered allmulticast mode [ 1094.613953][T27050] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1094.682893][T27055] vlan3: entered allmulticast mode [ 1096.017257][T27102] vlan3: entered allmulticast mode [ 1098.981318][ T174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.035038][ T174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.194497][ T174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.224340][T27195] chnl_net:caif_netlink_parms(): no params data found [ 1099.344185][ T174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.604717][T27195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.611913][T27195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.747481][T27195] bridge_slave_0: entered allmulticast mode [ 1099.796658][T27195] bridge_slave_0: entered promiscuous mode [ 1099.846963][T27228] tipc: Enabling of bearer rejected, failed to enable media [ 1100.067719][T27195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.074868][T27195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.113271][T27195] bridge_slave_1: entered allmulticast mode [ 1100.137395][T27195] bridge_slave_1: entered promiscuous mode [ 1100.354264][T27221] syzkaller0: entered promiscuous mode [ 1100.359840][T27221] syzkaller0: entered allmulticast mode [ 1100.424541][ T174] tipc: Left network mode [ 1100.432002][T27195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.472116][ T174] hsr_slave_0: left promiscuous mode [ 1100.482724][ T174] hsr_slave_1: left promiscuous mode [ 1100.502687][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.510233][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.623001][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.630502][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.647261][ T174] veth1_macvtap: left promiscuous mode [ 1100.653835][ T174] veth0_macvtap: left promiscuous mode [ 1100.659374][ T174] veth1_vlan: left promiscuous mode [ 1100.665475][ T174] veth0_vlan: left promiscuous mode [ 1102.658339][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1102.695953][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1102.810974][T27195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.896003][T27195] team0: Port device team_slave_0 added [ 1102.919139][T27195] team0: Port device team_slave_1 added [ 1102.972182][T27195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.979159][T27195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.005209][T27195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.148239][T27195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.155425][T27195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.181344][T27195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.298027][T27195] hsr_slave_0: entered promiscuous mode [ 1103.305389][T27195] hsr_slave_1: entered promiscuous mode [ 1103.331623][T27195] debugfs: 'hsr0' already exists in 'hsr' [ 1103.337481][T27195] Cannot create hsr debugfs directory [ 1103.807670][T27195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1103.844320][T27195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1103.854239][T27195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1103.888330][T27195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1104.002517][T27195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.043934][T27195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.079984][T13445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.087089][T13445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.139297][T27195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1104.149841][T27195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.222277][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.229501][T13445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.305177][T27195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.455295][T27195] veth0_vlan: entered promiscuous mode [ 1104.473071][T27195] veth1_vlan: entered promiscuous mode [ 1104.505054][T27195] veth0_macvtap: entered promiscuous mode [ 1104.523052][T27195] veth1_macvtap: entered promiscuous mode [ 1104.545914][T27195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.565304][T27195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.587479][T13445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.610347][T13445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.636094][T13445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.681339][T13445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.546076][T27351] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1106.861244][T27361] syzkaller0: entered promiscuous mode [ 1106.866891][T27361] syzkaller0: entered allmulticast mode [ 1108.511822][ T29] audit: type=1326 audit(1754676549.656:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.1.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd04febe9 code=0x7ffc0000 [ 1108.580138][ T29] audit: type=1326 audit(1754676549.696:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.1.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f1fd04febe9 code=0x7ffc0000 [ 1108.603828][ T29] audit: type=1326 audit(1754676549.696:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.1.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd04febe9 code=0x7ffc0000 [ 1108.627421][ T29] audit: type=1326 audit(1754676549.696:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.1.6664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd04febe9 code=0x7ffc0000 [ 1108.957329][T27385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6667'. [ 1109.638395][ T29] audit: type=1326 audit(1754676550.786:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51211eebe9 code=0x7ffc0000 [ 1109.662054][ T29] audit: type=1326 audit(1754676550.786:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51211eebe9 code=0x7ffc0000 [ 1109.685825][ T29] audit: type=1326 audit(1754676550.786:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f51211eebe9 code=0x7ffc0000 [ 1109.709436][ T29] audit: type=1326 audit(1754676550.786:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51211eebe9 code=0x7ffc0000 [ 1109.733276][ T29] audit: type=1326 audit(1754676550.786:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27403 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51211eebe9 code=0x7ffc0000 [ 1110.423447][T27422] syzkaller0: entered promiscuous mode [ 1110.428964][T27422] syzkaller0: entered allmulticast mode [ 1112.645361][T27467] syzkaller0: entered promiscuous mode [ 1112.651255][T27467] syzkaller0: entered allmulticast mode [ 1112.766659][ T29] audit: type=1326 audit(1754676553.916:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.2.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac819ebe9 code=0x7ffc0000 [ 1112.948180][T27482] syzkaller0: entered promiscuous mode [ 1112.953869][T27482] syzkaller0: entered allmulticast mode [ 1113.969745][T27503] vlan2: entered allmulticast mode [ 1114.222774][T27511] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6705'. [ 1114.275777][T27506] syzkaller0: entered promiscuous mode [ 1114.281867][T27506] syzkaller0: entered allmulticast mode [ 1117.271030][T11906] usb usb8-port1: attempt power cycle [ 1117.449262][T27546] vlan2: entered allmulticast mode [ 1117.943352][T27559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6719'. [ 1119.431885][T11906] usb usb8-port1: unable to enumerate USB device [ 1120.440251][T27599] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6730'. [ 1121.527884][T27618] vlan2: entered allmulticast mode [ 1121.871365][ T36] usb usb8-port1: attempt power cycle [ 1124.861280][ T36] usb usb8-port1: unable to enumerate USB device [ 1125.596263][T27648] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6744'. [ 1125.971416][T27660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.978884][T27660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.990269][T27660] bridge0: entered allmulticast mode [ 1126.005266][T27660] bridge_slave_1: left allmulticast mode [ 1126.011055][T27660] bridge_slave_1: left promiscuous mode [ 1126.016730][T27660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.080366][T27660] bridge_slave_0: left promiscuous mode [ 1126.086255][T27660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.506333][T27676] vlan2: entered allmulticast mode [ 1128.118625][T27692] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1130.029161][ T3410] usb usb8-port1: attempt power cycle [ 1130.926179][T27742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6768'. [ 1131.137106][T27748] syzkaller0: entered promiscuous mode [ 1131.142640][T27748] syzkaller0: entered allmulticast mode [ 1132.304271][ T3410] usb usb8-port1: unable to enumerate USB device [ 1134.471330][T27785] sctp: [Deprecated]: syz.1.6781 (pid 27785) Use of int in maxseg socket option. [ 1134.471330][T27785] Use struct sctp_assoc_value instead [ 1134.736348][T27782] syzkaller0: entered promiscuous mode [ 1134.742339][T27782] syzkaller0: entered allmulticast mode [ 1138.070519][T27819] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6789'. [ 1138.140098][ C1] sched: DL replenish lagged too much [ 1138.166500][T27823] syzkaller0: entered promiscuous mode [ 1138.172088][T27823] syzkaller0: entered allmulticast mode [ 1138.182428][T27825] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6792'. [ 1138.457530][T27831] syzkaller0: entered promiscuous mode [ 1138.463409][T27831] syzkaller0: entered allmulticast mode [ 1141.277069][T11906] usb usb8-port1: attempt power cycle [ 1143.914981][T27866] vlan2: entered allmulticast mode [ 1144.940511][T11906] usb usb8-port1: unable to enumerate USB device [ 1149.152788][T27933] vlan2: entered allmulticast mode [ 1149.264655][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1149.264672][ T29] audit: type=1400 audit(1754676590.406:4329): avc: denied { bind } for pid=27946 comm="syz.3.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1149.291253][ T29] audit: type=1400 audit(1754676590.406:4330): avc: denied { setopt } for pid=27946 comm="syz.3.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1156.213427][T28053] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6861'. [ 1156.264912][T28057] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1157.281624][T28076] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6866'. [ 1158.661634][T16177] usb usb8-port1: attempt power cycle [ 1160.178624][T28104] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6874'. [ 1161.120357][T16177] usb usb8-port1: unable to enumerate USB device [ 1164.631612][T28168] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1168.431337][T28230] vlan2: entered allmulticast mode [ 1168.458161][T28232] tipc: Enabled bearer , priority 0 [ 1168.543959][T28232] syzkaller0: entered promiscuous mode [ 1168.549601][T28232] syzkaller0: entered allmulticast mode [ 1168.614864][T28232] tipc: Resetting bearer [ 1168.675923][T28231] tipc: Resetting bearer [ 1168.725839][T28231] tipc: Disabling bearer [ 1169.993310][T16177] usb usb8-port1: attempt power cycle [ 1171.532088][T28280] vlan2: entered allmulticast mode [ 1171.537251][T28280] bridge_slave_0: entered allmulticast mode [ 1171.749859][T28286] tipc: Enabled bearer , priority 0 [ 1171.758096][T28286] syzkaller0: entered promiscuous mode [ 1171.763818][T28286] syzkaller0: entered allmulticast mode [ 1171.836764][T28286] tipc: Resetting bearer [ 1171.860342][T16177] usb usb8-port1: unable to enumerate USB device [ 1171.866847][T28284] tipc: Resetting bearer [ 1171.878633][T28284] tipc: Disabling bearer [ 1173.309708][T28321] vlan2: entered allmulticast mode [ 1173.604423][T28331] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1176.323643][T28365] vlan2: entered allmulticast mode [ 1178.243536][T28406] vlan2: entered allmulticast mode [ 1179.340412][ T3385] usb usb8-port1: attempt power cycle [ 1179.656593][T28434] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6970'. [ 1179.908388][T28442] tipc: Enabled bearer , priority 0 [ 1180.081757][T28445] syzkaller0: entered promiscuous mode [ 1180.087310][T28445] syzkaller0: entered allmulticast mode [ 1180.098773][T28442] tipc: Resetting bearer [ 1180.106672][T28440] tipc: Resetting bearer [ 1180.115028][T28440] tipc: Disabling bearer [ 1181.320294][ T3385] usb usb8-port1: unable to enumerate USB device [ 1182.138391][T28489] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1186.594312][T28562] syzkaller0: entered promiscuous mode [ 1186.600261][T28562] syzkaller0: entered allmulticast mode [ 1189.080330][ T3385] usb usb8-port1: attempt power cycle [ 1189.284184][T28597] syzkaller0: entered promiscuous mode [ 1189.289900][T28597] syzkaller0: entered allmulticast mode [ 1191.174057][T28634] tipc: Enabled bearer , priority 0 [ 1191.215853][T28634] syzkaller0: entered promiscuous mode [ 1191.221457][T28634] syzkaller0: entered allmulticast mode [ 1191.298181][T28636] tipc: Resetting bearer [ 1191.342116][T28633] tipc: Resetting bearer [ 1191.367640][T28633] tipc: Disabling bearer [ 1192.780496][ T3385] usb usb8-port1: unable to enumerate USB device [ 1194.097425][T28677] vlan2: entered allmulticast mode [ 1196.180329][ T3410] usb usb8-port1: attempt power cycle [ 1196.233059][T28714] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1196.348797][T28725] vlan3: entered allmulticast mode [ 1196.462799][T28728] tipc: Enabled bearer , priority 0 [ 1196.514009][T28729] syzkaller0: entered promiscuous mode [ 1196.519509][T28729] syzkaller0: entered allmulticast mode [ 1196.564069][T28728] tipc: Resetting bearer [ 1196.578475][T28727] tipc: Resetting bearer [ 1196.608689][T28727] tipc: Disabling bearer [ 1197.032004][T28741] sctp: [Deprecated]: syz.0.7068 (pid 28741) Use of int in maxseg socket option. [ 1197.032004][T28741] Use struct sctp_assoc_value instead [ 1197.906746][T28758] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1198.179492][ T3410] usb usb8-port1: unable to enumerate USB device [ 1199.784315][T28801] pim6reg1: entered promiscuous mode [ 1199.789685][T28801] pim6reg1: entered allmulticast mode [ 1199.996665][T28808] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7088'. [ 1200.548206][T28822] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1200.996994][T28824] syzkaller0: entered promiscuous mode [ 1201.004100][T28824] syzkaller0: entered allmulticast mode [ 1203.119082][T28865] netlink: 208 bytes leftover after parsing attributes in process `syz.0.7102'. [ 1204.276633][T28882] syzkaller0: entered promiscuous mode [ 1204.282360][T28882] syzkaller0: entered allmulticast mode [ 1204.647561][T28889] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1204.787437][T28899] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1206.337159][T28944] sctp: [Deprecated]: syz.0.7124 (pid 28944) Use of int in maxseg socket option. [ 1206.337159][T28944] Use struct sctp_assoc_value instead [ 1206.365002][T28938] syzkaller0: entered promiscuous mode [ 1206.371201][T28938] syzkaller0: entered allmulticast mode [ 1206.387798][T28943] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1206.706088][T28972] vlan3: entered allmulticast mode [ 1207.212063][T28983] syzkaller0: entered promiscuous mode [ 1207.217963][T28983] syzkaller0: entered allmulticast mode [ 1207.474652][T28995] syzkaller0: entered promiscuous mode [ 1207.480434][T28995] syzkaller0: entered allmulticast mode [ 1207.593881][T28997] syzkaller0: entered promiscuous mode [ 1207.608192][T28997] syzkaller0: entered allmulticast mode [ 1208.141929][T29022] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7145'. [ 1210.564875][T29060] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7157'. [ 1211.901727][T29087] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1212.858141][T29115] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1216.316483][T29166] tipc: Started in network mode [ 1216.321805][T29166] tipc: Node identity fe981da76847, cluster identity 4711 [ 1216.329254][T29166] tipc: Enabled bearer , priority 0 [ 1216.390225][T29167] syzkaller0: entered promiscuous mode [ 1216.395721][T29167] syzkaller0: entered allmulticast mode [ 1216.438982][T29166] tipc: Resetting bearer [ 1216.459725][T29165] tipc: Resetting bearer [ 1216.479356][T29165] tipc: Disabling bearer [ 1216.851924][T29180] vlan2: entered allmulticast mode [ 1221.665409][T29238] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7202'. [ 1222.043854][T29240] syzkaller0: entered promiscuous mode [ 1222.049673][T29240] syzkaller0: entered allmulticast mode [ 1224.611788][T29260] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1224.618383][T29260] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1224.625990][T29260] vhci_hcd vhci_hcd.0: Device attached [ 1225.601518][T29261] vhci_hcd: connection closed [ 1225.612388][ T174] vhci_hcd: stop threads [ 1225.621486][ T174] vhci_hcd: release socket [ 1225.625921][ T174] vhci_hcd: disconnect device [ 1225.880270][T29260] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1225.886874][T29260] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1225.894415][T29260] vhci_hcd vhci_hcd.0: Device attached [ 1225.922796][T29268] vhci_hcd: connection closed [ 1226.245508][T29298] sctp: [Deprecated]: syz.0.7213 (pid 29298) Use of int in maxseg socket option. [ 1226.245508][T29298] Use struct sctp_assoc_value instead [ 1226.513299][T16591] vhci_hcd: vhci_device speed not set [ 1226.528608][ T174] vhci_hcd: stop threads [ 1226.528747][ T2981] ================================================================== [ 1226.533012][ T174] vhci_hcd: release socket [ 1226.540944][ T2981] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1226.545424][ T174] vhci_hcd: disconnect device [ 1226.552407][ T2981] [ 1226.552415][ T2981] write to 0xffffffff868f24a0 of 8 bytes by task 174 on cpu 0: [ 1226.552432][ T2981] prb_reserve+0x6f5/0xaf0 [ 1226.552460][ T2981] vprintk_store+0x56d/0x860 [ 1226.575910][ T2981] vprintk_emit+0x178/0x650 [ 1226.580409][ T2981] vprintk_default+0x26/0x30 [ 1226.584994][ T2981] vprintk+0x1d/0x30 [ 1226.588882][ T2981] _printk+0x79/0xa0 [ 1226.592775][ T2981] vhci_shutdown_connection+0xc1/0x1f0 [ 1226.598231][ T2981] event_handler+0x187/0x340 [ 1226.602908][ T2981] process_scheduled_works+0x4ce/0x9d0 [ 1226.608546][ T2981] worker_thread+0x582/0x770 [ 1226.613189][ T2981] kthread+0x486/0x510 [ 1226.617249][ T2981] ret_from_fork+0xda/0x150 [ 1226.621741][ T2981] ret_from_fork_asm+0x1a/0x30 [ 1226.626495][ T2981] [ 1226.628830][ T2981] read to 0xffffffff868f24a0 of 8 bytes by task 2981 on cpu 1: [ 1226.636360][ T2981] _prb_read_valid+0x1c4/0x920 [ 1226.641124][ T2981] prb_read_valid+0x3c/0x60 [ 1226.645628][ T2981] syslog_print+0x23a/0x540 [ 1226.650136][ T2981] do_syslog+0x52b/0x7e0 [ 1226.654382][ T2981] __x64_sys_syslog+0x41/0x50 [ 1226.659066][ T2981] x64_sys_call+0x2f36/0x2ff0 [ 1226.663735][ T2981] do_syscall_64+0xd2/0x200 [ 1226.668231][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.674116][ T2981] [ 1226.676424][ T2981] value changed: 0x0000000000000000 -> 0x0000000000003072 [ 1226.683514][ T2981] [ 1226.685828][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 1226.691974][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: klogd Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 1226.703611][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1226.713676][ T2981] ==================================================================