last executing test programs: 15.321876626s ago: executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x7a}, @ramp={0x0, 0x0, {0x7f}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 15.257257987s ago: executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r0) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x103, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYBLOB="86ba1098ae06506a3e3ae9a706cd6464557e740034fe558c53be9ec0069888ef6015b4faeaa03b7e69e8b31d96c446eed232f273094ddb85790c217573bfe998b9752f664a43ccd846977cf00a157b2ada044c3197d4ede678ca1a867bf0e948616521a9adee1d328bdc8a9e6a94f0562859a57e19a03ce86f84b04499fc56cdc5bde444991cadcfee7e0008d913d6964ccfe436dc73ebdeae5a4d80bf24c9ca3f558d300e6a9133005ccda35149de08ab67ace6add1952e1d4b9a705bd4adf113138f26686e2f9d2e837e0816a3583b5feae3f3f943bf078b0c47a4b55bde81311c1afee43c26659a", @ANYRES32=r5, @ANYRESOCT=r5, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x90) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) io_submit(0x0, 0x5c, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendfile(r0, r4, 0x0, 0x400) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x3, 0x20000000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000240)=[{0x200000000006}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 15.112290119s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800", @ANYRES32=r3], 0x40}}, 0x0) 15.054759318s ago: executing program 0: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d3474ff00e7e5d3c2c983f9d503753f689dc39062ed7d00002758d60034650c032635c1fb47f6aaaa9560863cdd00005200af44868734", 0x4c}], 0x1) (async) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x0, 0x30}, &(0x7f0000000140)=0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0209020002"], 0x10}}, 0x0) 15.03730659s ago: executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x200000000000, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) timer_create(0x8, 0x0, &(0x7f0000044000)) iopl(0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfbff, @none, 0xfff}, 0xe) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x1}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000760000000000000018100000", @ANYRES32=r9, @ANYBLOB="00000000009354009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='rss_stat\x00', r10}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 14.956839233s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000001100)={[{@orlov}, {@errors_remount}, {@noacl}]}, 0x1, 0x7a5, &(0x7f0000002140)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x9) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000b00)=""/193, 0xc1}, {&(0x7f0000000340)=""/27, 0x1b}], 0x8}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000b00)=""/193, 0xc1}, {&(0x7f0000000340)=""/27, 0x1b}], 0x8}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x80) ioctl$BLKPG(r3, 0x80081270, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000fc0)={'netpci0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) ptrace(0x10, 0x1) r5 = inotify_init1(0x0) io_uring_setup(0x0, &(0x7f0000000440)) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000380)) (async) fcntl$getownex(r5, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4205, r6, 0x2, &(0x7f0000000000)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0xfffffffffffffffe, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000045c0)) (async) sched_setscheduler(0x0, 0x0, &(0x7f00000045c0)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000001000)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x4, @remote, 0x80000001}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x80, @loopback, 0x1}], 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000001000)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x4, @remote, 0x80000001}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x80, @loopback, 0x1}], 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14.067418412s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x26040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, 0x0, &(0x7f0000000380)}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x2000400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1018004, &(0x7f0000000100), 0xfe, 0x476, &(0x7f0000000fc0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 13.959110238s ago: executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000cc0)={0x4, 0x0, &(0x7f0000000bc0)=[@register_looper], 0xaf, 0x0, &(0x7f0000000c00)="369d4291100fbf39feae1c8707a137f4a0bbdf2894550bacff065496d88aadc84e6ce5fd05a9edf738148f8fb2c5d792d231bf68032f3044961bd6288c5c7640a7e402c4228a3130bc56e5d5a7b0e40da0134a35ddc1ee9d5c2369378911b524cf96080bd084fbbccf719b75eedae44d1db9860365f9714ef6df8011f1a6d573e6a61a6f2f86b91dd8858b15a4e205855dc1fdc199e1d5507c829431382ff355f98951b5a4fe18c10fc311bfd0d3c0"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xe}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) clock_gettime(0x0, &(0x7f0000000040)) setgid(0x0) 13.900257487s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r0 = socket(0x0, 0x803, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = io_uring_setup(0x5ce2, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x24b}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = dup2(r5, r4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000140)={r7}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000018c0)={r7, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x7f}}, 0x5, 0x6, 0x27, 0x4, 0xc, 0x3, 0x7}, &(0x7f0000001980)=0x9c) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') pread64(r10, &(0x7f0000000880)=""/4096, 0x1000, 0x400000000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc}, 0x48) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r11, 0xc0105502, &(0x7f00000005c0)={0x1, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x34, 0x0, 0x0, 0xffffffff}, {0x34, 0x0, 0x80, 0xe12b}, {0x16}]}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r12 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r12, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000380)=ANY=[], 0xf}}], 0x1, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESOCT=r8, @ANYRESHEX=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) r14 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 13.052540609s ago: executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x200000000000, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0) fallocate(r5, 0x0, 0x0, 0x1000f4) timer_create(0x8, 0x0, &(0x7f0000044000)) iopl(0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfbff, @none, 0xfff}, 0xe) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x1}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000760000000000000018100000", @ANYRES32=r9, @ANYBLOB="00000000009354009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='rss_stat\x00', r10}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 12.953025455s ago: executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000cc0)={0x4, 0x0, &(0x7f0000000bc0)=[@register_looper], 0xaf, 0x0, &(0x7f0000000c00)="369d4291100fbf39feae1c8707a137f4a0bbdf2894550bacff065496d88aadc84e6ce5fd05a9edf738148f8fb2c5d792d231bf68032f3044961bd6288c5c7640a7e402c4228a3130bc56e5d5a7b0e40da0134a35ddc1ee9d5c2369378911b524cf96080bd084fbbccf719b75eedae44d1db9860365f9714ef6df8011f1a6d573e6a61a6f2f86b91dd8858b15a4e205855dc1fdc199e1d5507c829431382ff355f98951b5a4fe18c10fc311bfd0d3c0"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xe}, {0x0, 0xf}}}, 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setgid(0x0) 12.929241639s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffff}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000280)=[{0x4c}, {0x2c}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 6.336744565s ago: executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000095bd98cc2c99fd1e8ab8bc6019d5c41234e1e6c02b4e1a0d68253564ae12c3cfc959460224"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local}, {}, {}, 0x0, 0x3}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e) connect$pppoe(r8, &(0x7f0000000480)={0x18, 0x0, {0x1, @multicast, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x0, {0x0, @empty, 'veth0_to_bond\x00'}}, 0x1e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r6, @ANYRESHEX=r1, @ANYRESOCT=r7, @ANYRESOCT=r8], 0x10}}, 0x0) socket$packet(0x11, 0x0, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000002009000200c13c2531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021100"/16], 0x10}}, 0x0) recvmmsg(r10, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r11 = socket(0x10, 0x2, 0x0) write(r11, &(0x7f0000000000)="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", 0xfc) 5.427068056s ago: executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f00000003c0)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="5763f922081ae50887ede09da114c1daa077f9611f8aa81d1b6fa5f806897377d6aa8524a8b1d8c81597ae6a3411d62b43ead10f470c911e82", 0x39}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f0000000300)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4f3e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d", 0x8d}, {&(0x7f0000000540)="a840c8a67da22f1b2c4e068bb1ad9c499f093b4480b55eb7b9408f5400cc74932ab986ca937640a84378eb6446626516e84b0055936bb61fac109e2624e86903d729b0b10b4f16db7da1fa3aaa808fe333de0c9316c2412cb9ed2d604f8b3fa52416302221487c294ae9dc54783573eb5e7c1027fc39fa60c39afee14fb7cf3e6ef0041470dfd6a4a356a1d7e20a437bcadc7f0b5afa9f9d68bccd88", 0x9c}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ac151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xca}, {&(0x7f00000009c0)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254", 0x74}], 0x6, &(0x7f0000000840)="a6d462c399e20d9d7ab19933a9b3d0e1d617be45eb50440e1e51f20cd773cd1b34e2669a511f6292d81a777376560dc1daae580d2419af", 0x37}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x0, 0x0}, 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001ac0)=@generic={&(0x7f0000001a80)='./file0\x00', 0x0, 0x8}, 0x18) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000002c0)={@mcast1}, &(0x7f0000000300)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)='%pK \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r8}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/savu', 0x0, 0x0) getdents64(r9, &(0x7f00000000c0)=""/192, 0xe182) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x2, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="7f42fcff10000000183300000300000000000000000000009500000000000000004006000800000093860c000400000018220000", @ANYRES32, @ANYBLOB="08924c832c4c2c4b"], &(0x7f0000000740)='syzkaller\x00', 0x91e, 0x1000, &(0x7f0000000a80)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x20, r1, 0x8, &(0x7f0000000780)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x1, 0x3, 0x8}, 0x10, r4, r5, 0x6, &(0x7f0000001bc0)=[r6, 0xffffffffffffffff, r7, r8, r9, r10], &(0x7f0000001c00)=[{0x2, 0x3, 0x4}, {0x4, 0x1, 0xa, 0x2}, {0x2, 0x3, 0x3, 0x1}, {0x2, 0x1, 0x0, 0xc}, {0x2, 0x3, 0x10, 0x2}, {0x2, 0x5, 0x1, 0x8}], 0x10, 0x5}, 0x90) r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r12 = dup3(r3, r11, 0x0) ioctl$MON_IOCG_STATS(r12, 0xc0109207, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x18, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "eb3ffa01d3e709af3cf2e0ac744f24ca"}, @md5sig={0x13, 0x12, "58d74f5d02d8d561f97b2bdb1bc7617f"}, @nop, @nop, @fastopen={0x22, 0x9, "3ca78571da2954"}, @timestamp={0x8, 0xa}, @generic={0x0, 0x4, "d129"}]}}}}}}}}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) 4.575697089s ago: executing program 2: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x7a, 0x2}, @ramp}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) 4.511713758s ago: executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x4001, 0x0) unshare(0x20000400) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) futimesat(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$tmpfs(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x215) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7, 0x0, 0x80000, 0x2020, r0, 0x10001, '\x00', 0x0, r0, 0x0, 0x4, 0x2, 0x200000001000009}, 0x48) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYRES32=r5], 0x14}, 0x1, 0x0, 0x0, 0x24028004}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x140, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x84, 0xe9, 0x40, 0x2, 0x1, 0x382a, 0x800}}, @common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xff, 0x8, "acb044eb252ee071ab74f562febde6482d5003b98f4a5c4e8517b8a537f7"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xd, 0x0, 0x2, 0xfffffeff, '\x00', 'syz0\x00', {0xffffffffffffffd9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x7e1400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000091abfefff0ffffffb7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="000000000700000085000000a500"/24], &(0x7f0000000080)='syzkaller\x00', 0x10, 0x25, &(0x7f0000000180)=""/37, 0x40f00, 0x4, '\x00', r3, 0x25, r0, 0x8, &(0x7f0000000300)={0xd, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0xffffffffffffffff, r4, r8, r0, r0, r0, r0], &(0x7f0000000400)=[{0x4, 0x5, 0xa, 0x4}, {0x0, 0x5, 0x2, 0x1}, {0x6, 0x2, 0x7, 0x4}, {0x4, 0x2}, {0x1, 0x5, 0x1, 0x5}], 0x10, 0x9835}, 0x90) 4.494150301s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create(0x7ffffffe) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x80045432, &(0x7f0000000000)=0x17) 4.477102764s ago: executing program 2: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r5, 0x10d, 0xb1, 0x0, &(0x7f0000000080)) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) ptrace$getenv(0x4204, r1, 0x202, &(0x7f0000000000)) 1.843337574s ago: executing program 4: gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee01, 0x0, r3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x0, 0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f00000006c0)) r6 = geteuid() setresgid(0xee01, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000bc0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)=[{&(0x7f00000004c0)={0xa8, 0x2b, 0x200, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x106, 0x0, 0x0, @pid}, @generic="0f3de61861f04ff991f516c176e9566d6b67e45302c529b38b5a26b1758a6e5d6a4a1cfd76ee8aedc0d2dbb08a13a6f7c0720f2fa4f43a2a9c4c8ad967dd7d57d6ef8b114246262fb2b6fcc162551df40186d08c694aecc7ae81a3cd967a46ecb145bc0d44df76df474383fe17572ffb3c763aa6d34063d224a80c6d9a167e1751dc359cfe2493f4ec91fc", @typed={0x4, 0x59}]}, 0xa8}, {&(0x7f0000000c00)={0x108, 0x3b, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xa9, 0x146, 0x0, 0x1, [@generic="f2da7165c1206b37893ea4c973177873eeb86b56013a3b73c89eabc8b9d49fac2e0e606e9097ef2209f8fd5aa7a0a3e0647db17551d57799b4320ac0a557213de5e844471636aacb2e7615e78db32301a9e64f8b56c0de60ec007112f0a75514324e0d526f251d9b2e6d2d27812d9721cc9579832443ace6c3a97e1ef0bcd21d3460a3c6756c53cc3018a11afc4fcc879eb0a78cd1deda5b9ebad218a1a0b138b6fd7b5d36"]}, @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@loopback}, @generic="015e2871b8e5743a2c10fb9302c451b4f5d5cec904125576d0d3b7fb554d75f9dbede2d1dfb73fc6b0f210877cce3dda2bb80331ed"]}, 0x108}, {&(0x7f0000003200)={0x245c, 0x12, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@generic="7ae9452ef74d51dc60d81a83fb8b4260d2d6db37cb9549233f06bc252a858819a1f2070275dfdc9e8fc0aac72104388054e8cdb78fb88e783468ebd312ff29c795c0aa95dcbecccc628908d208d34537f385c6d8908e6046fc4f30d26dfc2e4db197db946bf50a4d265cfb96bcce6b699ee4f45da9c433b292902053891f92a9439e8aded65da2c5c10db7dc733922f409178ce0d3a4040f2915f8c9172b1f952148975a", @nested={0x20d7, 0x42, 0x0, 0x1, [@generic="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", @typed={0xc, 0xab, 0x0, 0x0, @u64=0x401}, @typed={0x8, 0xa9, 0x0, 0x0, @fd}, @generic="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", @generic="60dde4bdb11dc985478010b55dca660beef5cb38f7f6c0e2f2ed3e45cf263a89d68793f18c1af3a37f46ec03fe1505cad6aca359634e568950096e7208d09d9bf4e771fa991774a5469ca9e4d2f1e4a4ebb182456db39dea8419195c56de637cf4e4f6b5c15a194a1d39d8a6f561c72132f7aa00c5432e4c0af450210a43228b92e4616b4adef4a4dd658195f187e9dae9ad77dbb9cb569a71f442149bed31be1fdb3575364fcba0b5b719573475d3e454ad0b38941e2789420db320ab88e5"]}, @nested={0x249, 0x90, 0x0, 0x1, [@generic="1cfa488c2006d4121f1789633105319a82d2c91370e2b515f11a1989eb2302a831373f4f61ee686a50dca3c9fa9f49a5dd01167723545e69dcd274e1d07883dd850a8948cddc98a1a86fa41a845994726294ef7eb7883e10968c83d9f145122606724d46ab729d46b6476d9e4c05a2ff9781672dde", @generic="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", @generic="42076dc6a0ff55e443a057b6ceee78d7051e3b2dcdf80f83da2fb18bae8cdba4d9ccc2bd156bcd7ad66e004e6fd9c16529fd8972bf4bf700"/69, @typed={0xc, 0xb4, 0x0, 0x0, @u64=0x7b9ae1c8}, @generic="608c3aa4fee5b03586a7ae7b9ec5a0600513ea2ee90b5469c6501d829bab9909840b0cb63631f35ecb64cb3301bb7085737c5000589403546deb0a0f80255196d2b7495ef5cb416b9d054583011fde1d7eff762161a0ab4562d66b48dfd23285da1b5614c34eebf408e519eeee8d794aa634eded51fda05d02aba124ea911f890a57"]}, @nested={0x83, 0xe2, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @uid}, @generic="f87f9a214e96120bd9542db052ff51b40f517461f163209a49e9c9b615f6aa5fe1010f5adf5cc3040d818be74e7328d2f5543f67c6992d086b29ea0b7120af2d38d5c2b6661dd2e1ab6153a625ab1ddf5eae264ab84dd55b6942d1e93e6382e09d78bbd19aaf64959860770a93c4a1194de1bac33f8404"]}]}, 0x245c}, {&(0x7f0000000b00)={0x1c, 0x32, 0x20, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0xa8}]}, 0x1c}], 0x4, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r5, r5, r5]}}], 0x40, 0x44}, 0x8005) setgroups(0x4, &(0x7f0000000000)=[0xee01, 0x0, r3, 0x0]) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002e40)='oom_adj\x00') pwritev(r7, &(0x7f0000000480)=[{&(0x7f00000031c0)='0', 0x1}], 0x1, 0x0, 0x0) 1.441622556s ago: executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000001c0)={&(0x7f00000003c0)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="5763f922081ae50887ede09da114c1daa077f9611f8aa81d1b6fa5f806897377d6aa8524a8b1d8c81597ae6a3411d62b43ead10f470c911e82", 0x39}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f0000000300)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4f3e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d", 0x8d}, {&(0x7f0000000540)="a840c8a67da22f1b2c4e068bb1ad9c499f093b4480b55eb7b9408f5400cc74932ab986ca937640a84378eb6446626516e84b0055936bb61fac109e2624e86903d729b0b10b4f16db7da1fa3aaa808fe333de0c9316c2412cb9ed2d604f8b3fa52416302221487c294ae9dc54783573eb5e7c1027fc39fa60c39afee14fb7cf3e6ef0041470dfd6a4a356a1d7e20a437bcadc7f0b5afa9f9d68bccd88", 0x9c}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ac151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xca}, {&(0x7f00000009c0)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254", 0x74}], 0x6, &(0x7f0000000840)="a6d462c399e20d9d7ab19933a9b3d0e1d617be45eb50440e1e51f20cd773cd1b34e2669a511f6292d81a777376560dc1daae580d2419af271bdd485f32ddaa3679178bcbe6ff6f5d5d758535afbe2a930342", 0x52}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x0, 0x0}, 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001ac0)=@generic={&(0x7f0000001a80)='./file0\x00', 0x0, 0x8}, 0x18) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='\a'], 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000002c0)={@mcast1}, &(0x7f0000000300)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)='%pK \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r8}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/savu', 0x0, 0x0) getdents64(r9, &(0x7f00000000c0)=""/192, 0xe182) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x2, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="7f42fcff10000000183300000300000000000000000000009500000000000000004006000800000093860c000400000018220000", @ANYRES32, @ANYBLOB="08924c832c4c2c4b"], &(0x7f0000000740)='syzkaller\x00', 0x91e, 0x1000, &(0x7f0000000a80)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x20, r1, 0x8, &(0x7f0000000780)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x1, 0x3, 0x8}, 0x10, r4, r5, 0x6, &(0x7f0000001bc0)=[r6, 0xffffffffffffffff, r7, r8, r9, r10], &(0x7f0000001c00)=[{0x2, 0x3, 0x4}, {0x4, 0x1, 0xa, 0x2}, {0x2, 0x3, 0x3, 0x1}, {0x2, 0x1, 0x0, 0xc}, {0x2, 0x3, 0x10, 0x2}, {0x2, 0x5, 0x1, 0x8}], 0x10, 0x5}, 0x90) r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r12 = dup3(r3, r11, 0x0) ioctl$MON_IOCG_STATS(r12, 0xc0109207, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x18, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "eb3ffa01d3e709af3cf2e0ac744f24ca"}, @md5sig={0x13, 0x12, "58d74f5d02d8d561f97b2bdb1bc7617f"}, @nop, @nop, @fastopen={0x22, 0x9, "3ca78571da2954"}, @timestamp={0x8, 0xa}, @generic={0x0, 0x4, "d129"}]}}}}}}}}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) 968.67065ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008", @ANYRES32], 0x4c}}, 0x0) 958.010101ms ago: executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0xfffffffffffffcd5) r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "6d9fa59d2b0d1d8957d68108d781c98325e3606d6959dcacf917b50c3deb41d47bfc9b53d4f1bbaad52df1ad4563c5a36f831f52a7291b61fd478de38f92dae8"}, 0x48, 0xffffffffffffffff) keyctl$update(0x1d, r0, &(0x7f0000000180)="b1e5cb9559d7e1b6af51c176019ec4d1da94c9effbc65a692a530b4603228d0e", 0x20) (async) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "82c13fdf616a951a39e7d678ef13a9293e474d4e692388c45b33c7f37a962b7787cfd614838b28aa30b5956cc5e41fb45a83743752287b7f32383924be3fe794"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r3}) (async) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000540)=[{&(0x7f0000000300)="4670969fb60bbf054a66304750962e", 0xf}, {&(0x7f0000000340)="73c74c72917d4b", 0x7}, {&(0x7f0000000380)="601cabd7e378e3e60f912653e53e1c347884436ca3863baed896053ac37fe88b7eff841fb9200c5b09171384fd1bcf06d1ee", 0x32}, {&(0x7f00000003c0)="64a11e7f5cac906b29e759f14ce3b2c3f0cc0be35d2f3a50e30619ac84193f865fd147c6f990d600b321675f9703df5c959de4e7640dc19ea5aa0b26e3475bb60357b99b7b139d064a294a8aeb732bbc5159dd82bfaaebf3638e777a1fe882fbbcb0ea56875642843141b39864890149f5a6d27059917b5fe8edffe4bafa400af21d43880b71795edd4d0b0a59068e777bb2066f8d47bc2507fc444f20ea325b1d7c0214c7b4b406623e66e523fba3243ffbcd1635e79d3255e7e9eddf938ea0353202f89b646ddc44a71a8e653642bfa09e44d2de7a242d", 0xd8}, {&(0x7f00000004c0)="8cc30c380a10e6b8e864f12248ec8d519bada35485a71b31bf246706072a45eec9c8dec45a9ae2cd3619f3b91fde8474951116151ab0158e0be03ec5082556b763ae4cbc4d8cefdd50bfb0730b9a28fd2bb23acdb83e45332329239bb7d5adfc43c5cac7cdfd1c4bb5dda608a80f40f1e4", 0x71}], 0x5, r3) gettid() getpid() (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001c6000/0x14000)=nil, &(0x7f00008ad000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) open$dir(&(0x7f00000005c0)='./file0/file0\x00', 0x2000, 0x5) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x1, 0x8, 0x1000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0xf}, 0x48) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) r6 = inotify_init1(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) (async) inotify_add_watch(r6, &(0x7f00000001c0)='./file0\x00', 0xe) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000000)) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) write$9p(r5, &(0x7f0000001400)="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", 0x600) (async) chown(0x0, 0x0, 0xee01) (async) getgid() 892.265372ms ago: executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) prlimit64(r1, 0x4, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) syz_open_procfs(0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioperm(0x0, 0x2, 0x2) clock_nanosleep(0x0, 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x59b5, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 569.138432ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="2400000018002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 467.942647ms ago: executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRES32], 0x20}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac000000120008002abd7000fddbdf25238081024e214e21090000000300000001000000080000000300000001000000000000005a0e0000", @ANYRES32, @ANYBLOB="010000000600000080000000040000005d00010048f9b473c099c727a9a5518e19149177a904e21089c228dcfb707e4833baa5e88a1bbeb9e9628aa156ec69344d0ed66eac8c40ae6114d6d35699acd56ab23a11be9a3e0660fd4713fbe93369a4dd4b9a39d53b0f7002e7a1000000"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0xd307b4df3b48c90c, &(0x7f0000000200)=0x4) unlink(0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) 338.846608ms ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000a16001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 328.080839ms ago: executing program 3: r0 = socket(0x15, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2000000000000140, &(0x7f0000000000)=ANY=[@ANYBLOB="18000078cb000000000000000000000097b00000000000006fc200011c000000950000000008"], 0x0}, 0x90) r3 = syz_io_uring_setup(0x2705, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0x0, 0x10}, &(0x7f0000000100), &(0x7f0000001440)) r4 = io_uring_setup(0x624f, &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="080001"], 0x20}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x18, 0x20000000, r5) getsockopt$nfc_llcp(r0, 0x114, 0x2721, 0x0, 0x20000008) r7 = socket$inet(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x0) r9 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0xff80}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000480)={r10, 0x3ba}, &(0x7f00000004c0)=0x8) sendto(r9, &(0x7f0000000140)="06a8cf0ebc316a0c135b540c23a19c8e66da7e5c1b9184fc677125bee6462232ca4b3c5300e38cc52f394b853e7b3f8433b09e56e7e47f2106d72e7ad8d34dfab5d9a837f469ab055f86cfe626b12a5d521f27e6b10b73", 0x57, 0x40000, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 245.587532ms ago: executing program 3: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000095bd98cc2c99fd1e8ab8bc6019d5c41234e1e6c02b4e1a0d68253564ae12c3cfc9594602243882010a794613e87a86c08d616cffaf943754546523bbd73f3889a85b7570"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local}, {}, {}, 0x0, 0x3}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x0, {0x1, @empty, 'gre0\x00'}}, 0x1e) connect$pppoe(r8, &(0x7f0000000480)={0x18, 0x0, {0x1, @multicast, 'dummy0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0x0, {0x0, @empty, 'veth0_to_bond\x00'}}, 0x1e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r6, @ANYRESHEX=r1, @ANYRESOCT=r7, @ANYRESOCT=r8], 0x10}}, 0x0) socket$packet(0x11, 0x0, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000002009000200c13c2531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021100"/16], 0x10}}, 0x0) recvmmsg(r10, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r11 = socket(0x10, 0x2, 0x0) write(r11, &(0x7f0000000000)="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", 0xfc) 30.136026ms ago: executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x94050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) 0s ago: executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2b9, &(0x7f0000000ac0)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300), 0x16) r4 = dup3(r3, r1, 0x0) sendfile(r3, r2, 0x0, 0x8038) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x23, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, &(0x7f0000000080), 0x41000, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r3, r1, r4, r3, r4], 0x0, 0x10, 0xfff}, 0x90) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='memory_localevents']) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffff00000000, 0xff02}, 0x0, r8}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r1, r2, 0x0, 0xef84) kernel console output (not intermixed with test programs): ss (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1958.698100][T12386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1958.711729][T12386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1958.722130][T12604] Cannot find add_set index 0 as target [ 1958.732149][T14260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.739260][T14260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1958.789163][T12604] usb usb8: usbfs: process 12604 (syz-executor.1) did not claim interface 0 before use [ 1958.883153][T14260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.890279][T14260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1958.910696][ T29] audit: type=1326 audit(1718780501.141:349661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f216e99df29 code=0x0 [ 1958.943190][T12386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.952138][T12386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.960887][T12386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1958.969653][T12386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.020278][T12679] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1959.062444][T12464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1959.072880][T12464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1959.173473][T12464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1959.407084][T12712] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1959.437418][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.447948][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.457878][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.468479][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.478410][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.488902][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.499006][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.509738][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.520115][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.530581][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.540643][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.551097][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.565819][T12464] veth0_vlan: entered promiscuous mode [ 1959.574679][T12464] veth1_vlan: entered promiscuous mode [ 1959.586928][T12718] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1959.599950][T12464] veth0_macvtap: entered promiscuous mode [ 1959.612362][T12464] veth1_macvtap: entered promiscuous mode [ 1959.626180][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.636781][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.646747][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.657226][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.667268][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.677914][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.687800][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.698247][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.708066][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1959.718503][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.731018][T12464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1959.746700][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.757261][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.767346][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.777872][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.787784][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.798298][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.808144][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.818694][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.828552][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.839037][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.848857][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1959.859353][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1959.871424][T12464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1959.885217][T12464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.893958][T12464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.902714][T12464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.911564][T12464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1959.923460][T12727] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1960.007687][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1960.017154][T12732] tc_dump_action: action bad kind [ 1960.183802][T12748] loop0: detected capacity change from 0 to 512 [ 1960.195740][T12748] EXT4-fs (loop0): invalid inodes per group: 1 [ 1960.195740][T12748] [ 1960.253558][T12755] Cannot find add_set index 0 as target [ 1960.277189][T12755] usb usb8: usbfs: process 12755 (syz-executor.4) did not claim interface 0 before use [ 1960.289550][ T29] audit: type=1326 audit(1718780502.531:349662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12754 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0f06e4f29 code=0x0 [ 1960.318858][T12762] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1960.329568][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1960.359154][T12764] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1960.478543][T12774] loop3: detected capacity change from 0 to 512 [ 1960.511290][T12774] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: iget: special inode unallocated [ 1960.524731][T12774] EXT4-fs (loop3): get root inode failed [ 1960.530417][T12774] EXT4-fs (loop3): mount failed [ 1960.619242][T12798] loop3: detected capacity change from 0 to 512 [ 1960.627799][T12798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1960.651365][T12798] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 209 vs 220 free clusters [ 1960.669445][T12802] __nla_validate_parse: 1 callbacks suppressed [ 1960.669462][T12802] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1960.686539][T12798] EXT4-fs (loop3): 1 truncate cleaned up [ 1960.692492][T12798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1960.705995][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1960.715387][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1960.800088][ T29] audit: type=1326 audit(1718780503.041:349663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12805 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a5069ff29 code=0x0 [ 1961.270517][ T29] audit: type=1326 audit(1718780503.511:349664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12815 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0f06e4f29 code=0x0 [ 1961.321734][T12319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1961.391087][ T29] audit: type=1326 audit(1718780503.631:349665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a09911f29 code=0x7ffc0000 [ 1961.417250][ T29] audit: type=1326 audit(1718780503.631:349666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a09911f29 code=0x7ffc0000 [ 1961.441520][ T29] audit: type=1326 audit(1718780503.661:349667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1a09911f29 code=0x7ffc0000 [ 1961.465767][ T29] audit: type=1326 audit(1718780503.661:349668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a09911f29 code=0x7ffc0000 [ 1961.489951][ T29] audit: type=1326 audit(1718780503.661:349669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a09911f29 code=0x7ffc0000 [ 1961.514467][ T29] audit: type=1326 audit(1718780503.661:349670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a09911f29 code=0x7ffc0000 [ 1961.538759][ T29] audit: type=1326 audit(1718780503.661:349671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a09911f29 code=0x7ffc0000 [ 1961.562946][ T29] audit: type=1326 audit(1718780503.661:349672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12818 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a09911f29 code=0x7ffc0000 [ 1961.614645][T12831] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1961.624081][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1961.633518][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1961.679921][T12835] Cannot find add_set index 0 as target [ 1961.697749][T12835] usb usb8: usbfs: process 12835 (syz-executor.0) did not claim interface 0 before use [ 1961.775206][T12847] loop2: detected capacity change from 0 to 512 [ 1961.793463][T12847] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 1961.808490][T12847] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 1961.825109][T12847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1961.842296][T12847] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1961.876155][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1962.014583][T12860] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1962.116815][T12868] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1962.126522][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1962.135986][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1962.185742][T12876] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 1962.185742][T12876] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 1962.185742][T12876] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 1962.185742][T12876] csum(0x350e2a11 start=10769 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 1962.185742][T12876] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 1962.185742][T12876] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 1962.185742][T12876] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 1962.235635][T12876] dev name=veth0 feat=0x000061164fdd19e9 [ 1962.241274][T12876] skb linear: 00000000: 45 02 29 89 b7 1a 00 00 0f 2f 2a fa ac 14 14 18 [ 1962.249891][T12876] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 1962.258419][T12876] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 1962.266984][T12876] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 1962.275493][T12876] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 1962.283980][T12876] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 1962.292532][T12876] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.301131][T12876] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.309801][T12876] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.318327][T12876] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.326845][T12876] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.335407][T12876] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.344050][T12876] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.352615][T12876] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.353026][T12879] loop3: detected capacity change from 0 to 4096 [ 1962.361122][T12876] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.361139][T12876] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.376134][T12879] EXT4-fs (loop3): invalid inodes per group: 0 [ 1962.376134][T12879] [ 1962.384478][T12876] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1962.384498][T12876] ------------[ cut here ]------------ [ 1962.384503][T12876] offset (10633) >= skb_headlen() (10633) [ 1962.385071][T12876] WARNING: CPU: 1 PID: 12876 at net/core/dev.c:3325 skb_checksum_help+0x3bd/0x450 [ 1962.421752][T12876] Modules linked in: [ 1962.425637][T12876] CPU: 1 PID: 12876 Comm: syz-executor.3 Tainted: G W 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0 [ 1962.437682][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1962.447741][T12876] RIP: 0010:skb_checksum_help+0x3bd/0x450 [ 1962.453524][T12876] Code: b9 4d 60 fd 41 8b 5d 00 48 8b 6c 24 08 48 89 ef e8 a8 4d 60 fd 2b 5d 00 48 c7 c7 8b 5b e1 85 44 89 e6 89 da e8 c4 f7 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 c3 fe ff ff e8 00 ce 48 fd 48 c7 c7 [ 1962.473181][T12876] RSP: 0018:ffffc90001227410 EFLAGS: 00010246 [ 1962.479276][T12876] RAX: 4ff70708119ce600 RBX: 0000000000002989 RCX: 0000000000040000 [ 1962.487252][T12876] RDX: ffffc90001b71000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1962.495238][T12876] RBP: ffff88815ded3374 R08: ffffffff81110bd7 R09: 0000000000000000 [ 1962.503212][T12876] R10: 0001ffffffffffff R11: 0001c90001227300 R12: 0000000000002989 [ 1962.511258][T12876] R13: ffff88815ded3370 R14: ffff88815ded3300 R15: 0000000000000000 [ 1962.519303][T12876] FS: 00007f1a08c8c6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 1962.528259][T12876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1962.534885][T12876] CR2: 000000002000e000 CR3: 000000013356a000 CR4: 00000000003506f0 [ 1962.542871][T12876] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1962.550924][T12876] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1962.558984][T12876] Call Trace: [ 1962.562373][T12876] [ 1962.565332][T12876] ? __warn+0x13c/0x350 [ 1962.569553][T12876] ? report_bug+0x315/0x420 [ 1962.574093][T12876] ? skb_checksum_help+0x3bd/0x450 [ 1962.579218][T12876] ? handle_bug+0x3e/0x70 [ 1962.583609][T12876] ? exc_invalid_op+0x1a/0x50 [ 1962.588357][T12876] ? asm_exc_invalid_op+0x1a/0x20 [ 1962.593395][T12876] ? __warn_printk+0x167/0x1b0 [ 1962.598311][T12876] ? skb_checksum_help+0x3bd/0x450 [ 1962.603443][T12876] ip_do_fragment+0xdb/0xd00 [ 1962.608399][T12876] ? __folio_put+0x114/0x150 [ 1962.612981][T12876] ? free_large_kmalloc+0x8c/0xb0 [ 1962.618016][T12876] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 1962.623534][T12876] ? __pfx_ip_finish_output2+0x10/0x10 [ 1962.629058][T12876] ip_fragment+0xd2/0x140 [ 1962.633408][T12876] ip_finish_output+0x1c4/0x2a0 [ 1962.638266][T12876] ip_output+0xab/0x170 [ 1962.642435][T12876] ? __pfx_ip_finish_output+0x10/0x10 [ 1962.647805][T12876] ? __pfx_ip_output+0x10/0x10 [ 1962.652572][T12876] ip_local_out+0xab/0xd0 [ 1962.656921][T12876] iptunnel_xmit+0x33f/0x460 [ 1962.661501][T12876] ip_tunnel_xmit+0x1685/0x1740 [ 1962.666358][T12876] ipgre_xmit+0x5f4/0x6d0 [ 1962.670695][T12876] dev_hard_start_xmit+0x119/0x3f0 [ 1962.675859][T12876] __dev_queue_xmit+0xf83/0x1e50 [ 1962.680870][T12876] ? __dev_queue_xmit+0x161/0x1e50 [ 1962.686049][T12876] packet_xmit+0x4b/0x1e0 [ 1962.690461][T12876] packet_sendmsg+0x2ae1/0x3320 [ 1962.695312][T12876] ? selinux_socket_sendmsg+0x182/0x1b0 [ 1962.700890][T12876] ? __pfx_packet_sendmsg+0x10/0x10 [ 1962.706116][T12876] __sock_sendmsg+0x140/0x180 [ 1962.710783][T12876] ____sys_sendmsg+0x312/0x410 [ 1962.715554][T12876] __sys_sendmsg+0x1e9/0x280 [ 1962.720147][T12876] ? futex_wait+0x18e/0x1c0 [ 1962.724735][T12876] __x64_sys_sendmsg+0x46/0x50 [ 1962.729535][T12876] x64_sys_call+0xb25/0x2d70 [ 1962.734239][T12876] do_syscall_64+0xc9/0x1c0 [ 1962.738931][T12876] ? clear_bhb_loop+0x55/0xb0 [ 1962.743594][T12876] ? clear_bhb_loop+0x55/0xb0 [ 1962.748287][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1962.754165][T12876] RIP: 0033:0x7f1a09911f29 [ 1962.758578][T12876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1962.778333][T12876] RSP: 002b:00007f1a08c8c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1962.786930][T12876] RAX: ffffffffffffffda RBX: 00007f1a09a48f80 RCX: 00007f1a09911f29 [ 1962.794914][T12876] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 1962.802939][T12876] RBP: 00007f1a09981074 R08: 0000000000000000 R09: 0000000000000000 [ 1962.810914][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1962.818905][T12876] R13: 000000000000000b R14: 00007f1a09a48f80 R15: 00007ffefe112058 [ 1962.826971][T12876] [ 1962.829970][T12876] ---[ end trace 0000000000000000 ]--- [ 1962.921986][T12889] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1963.115912][T12904] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1963.486269][T12953] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1963.499276][T12953] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1963.530305][T12954] loop1: detected capacity change from 0 to 2048 [ 1963.559068][T12959] loop2: detected capacity change from 0 to 736 [ 1963.575801][T12959] iso9660: Bad value for 'mode' [ 1963.655931][T12959] loop2: detected capacity change from 0 to 512 [ 1963.665875][T12959] EXT4-fs: Ignoring removed i_version option [ 1963.671950][T12959] EXT4-fs: Ignoring removed nobh option [ 1963.690081][T12959] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1963.736261][T12959] EXT4-fs (loop2): 1 truncate cleaned up [ 1963.751967][T12959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1964.313936][T13045] loop4: detected capacity change from 0 to 2048 [ 1964.378774][T13045] GPT:first_usable_lbas don't match. [ 1964.384106][T13045] GPT:34 != 290 [ 1964.387577][T13045] GPT: Use GNU Parted to correct GPT errors. [ 1964.393653][T13045] loop4: p1 p2 p3 [ 1964.433360][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1964.589598][T13059] loop0: detected capacity change from 0 to 1764 [ 1964.929663][T13081] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1965.318199][T13101] loop2: detected capacity change from 0 to 736 [ 1965.327664][T13101] iso9660: Bad value for 'mode' [ 1965.356133][T13111] Cannot find add_set index 0 as target [ 1965.367161][T13101] loop2: detected capacity change from 0 to 512 [ 1965.374855][T13101] EXT4-fs: Ignoring removed i_version option [ 1965.381111][T13101] EXT4-fs: Ignoring removed nobh option [ 1965.382721][T13111] usb usb8: usbfs: process 13111 (syz-executor.0) did not claim interface 0 before use [ 1965.395162][T13101] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1965.416309][T13101] EXT4-fs (loop2): 1 truncate cleaned up [ 1965.431923][T13101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1965.511188][T13126] loop1: detected capacity change from 0 to 256 [ 1965.771628][T13137] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1965.915135][T13140] loop1: detected capacity change from 0 to 512 [ 1965.943936][T13140] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 1965.960217][T13140] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 1965.973319][T13140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1965.992372][T13140] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1966.027203][T11915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1966.098736][T13152] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1966.127686][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1966.146710][ T3105] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 1966.156961][ T3105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.187594][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1966.187609][ T29] audit: type=1326 audit(1718780508.431:349710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.217941][ T29] audit: type=1326 audit(1718780508.431:349712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.242164][ T29] audit: type=1326 audit(1718780508.431:349711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.266473][ T29] audit: type=1326 audit(1718780508.431:349713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.290780][ T29] audit: type=1326 audit(1718780508.431:349714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.315226][ T29] audit: type=1326 audit(1718780508.431:349715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.339710][ T29] audit: type=1326 audit(1718780508.431:349716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.364000][ T29] audit: type=1326 audit(1718780508.431:349717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.395212][T13142] chnl_net:caif_netlink_parms(): no params data found [ 1966.430068][ T29] audit: type=1326 audit(1718780508.491:349718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.454342][ T29] audit: type=1326 audit(1718780508.491:349719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1966.495237][T13156] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1966.516395][ T3105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.572982][T13142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.580137][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.580241][T13177] loop2: detected capacity change from 0 to 512 [ 1966.588994][T13142] bridge_slave_0: entered allmulticast mode [ 1966.600137][T13142] bridge_slave_0: entered promiscuous mode [ 1966.609355][T13142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.610374][T13179] loop4: detected capacity change from 0 to 1768 [ 1966.616492][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.631752][T13142] bridge_slave_1: entered allmulticast mode [ 1966.638521][T13142] bridge_slave_1: entered promiscuous mode [ 1966.682475][ T3105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.701193][T13142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1966.710914][T13177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1966.725869][T13142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1966.734450][T13177] ext4 filesystem being mounted at /root/syzkaller-testdir3723839088/syzkaller.xTJEsh/40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1966.756396][ T3105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.779163][T13142] team0: Port device team_slave_0 added [ 1966.785923][T13142] team0: Port device team_slave_1 added [ 1966.814272][T13142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1966.821265][T13142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1966.847544][T13142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1966.859814][T13142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1966.866855][T13142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1966.876174][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1966.892734][T13142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1966.942465][T13142] hsr_slave_0: entered promiscuous mode [ 1966.954897][T13142] hsr_slave_1: entered promiscuous mode [ 1966.961357][T13142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1966.976328][T13142] Cannot create hsr debugfs directory [ 1967.042360][ T3105] bridge_slave_1: left allmulticast mode [ 1967.048078][ T3105] bridge_slave_1: left promiscuous mode [ 1967.053760][ T3105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.088030][ T3105] bridge_slave_0: left allmulticast mode [ 1967.093735][ T3105] bridge_slave_0: left promiscuous mode [ 1967.099548][ T3105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.150414][T13195] loop4: detected capacity change from 0 to 736 [ 1967.158432][T13195] iso9660: Bad value for 'mode' [ 1967.204202][T13195] loop4: detected capacity change from 0 to 512 [ 1967.228164][T13195] EXT4-fs: Ignoring removed i_version option [ 1967.234238][T13195] EXT4-fs: Ignoring removed nobh option [ 1967.241118][T13200] Cannot find add_set index 0 as target [ 1967.255815][T13200] usb usb8: usbfs: process 13200 (syz-executor.0) did not claim interface 0 before use [ 1967.271575][T13195] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1967.294464][T13195] EXT4-fs (loop4): 1 truncate cleaned up [ 1967.300530][T13195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1967.327166][ T3105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1967.347022][ T3105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1967.390173][ T3105] bond0 (unregistering): Released all slaves [ 1967.496770][ T3105] hsr_slave_0: left promiscuous mode [ 1967.502794][ T3105] hsr_slave_1: left promiscuous mode [ 1967.508692][ T3105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1967.516163][ T3105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1967.523889][ T3105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1967.531328][ T3105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1967.546563][ T3105] veth1_macvtap: left promiscuous mode [ 1967.552123][ T3105] veth0_macvtap: left promiscuous mode [ 1967.557779][ T3105] veth1_vlan: left promiscuous mode [ 1967.563095][ T3105] veth0_vlan: left promiscuous mode [ 1967.684782][ T3105] team0 (unregistering): Port device team_slave_1 removed [ 1967.697822][ T3105] team0 (unregistering): Port device team_slave_0 removed [ 1967.761199][T13227] loop1: detected capacity change from 0 to 512 [ 1967.770749][T13227] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 1967.796925][T13227] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 1967.811292][T13227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1967.838916][T13227] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1967.887712][T11915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1968.034969][T12464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1968.075812][T13245] loop1: detected capacity change from 0 to 1024 [ 1968.083316][T13245] ext4: Unknown parameter 'fowner' [ 1968.105801][T13142] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1968.117980][T13142] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1968.131793][T13142] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1968.148288][T13142] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1968.157660][T13253] loop0: detected capacity change from 0 to 1024 [ 1968.175164][T13253] EXT4-fs: quotafile must be on filesystem root [ 1968.194998][T13258] __nla_validate_parse: 6 callbacks suppressed [ 1968.195014][T13258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1968.214047][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1968.224070][T13142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.233479][T13255] loop2: detected capacity change from 0 to 512 [ 1968.239731][T13142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.257608][T13255] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1968.269379][T13255] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 1968.279764][T13255] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 1968.297662][T13264] loop0: detected capacity change from 0 to 512 [ 1968.308099][ T3183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.315174][ T3183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.325413][T13255] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1968.335272][T13264] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 1968.346171][ T3183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.351640][T13255] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 1968.356842][ T3183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1968.371993][T13264] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 1968.390292][T13264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1968.402713][T13255] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 1968.416454][T13264] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1968.429752][T13255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1968.480868][T12386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1968.512843][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1968.527538][T13142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1968.586665][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1968.606296][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1968.655361][T13142] veth0_vlan: entered promiscuous mode [ 1968.668360][T13142] veth1_vlan: entered promiscuous mode [ 1968.691166][T13142] veth0_macvtap: entered promiscuous mode [ 1968.705950][T13142] veth1_macvtap: entered promiscuous mode [ 1968.731547][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1968.742089][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.751968][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1968.762475][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.772475][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1968.783054][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.792920][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1968.803398][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.813248][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1968.823711][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.846371][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1968.856965][T13142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1968.867359][T13298] loop0: detected capacity change from 0 to 512 [ 1968.877234][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.887749][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.897713][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.908182][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.918005][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.928420][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.938249][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.948947][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.958844][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.969293][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1968.979126][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1968.989570][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1969.001863][T13142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1969.004624][T13298] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1969.010731][T13142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.020603][T13298] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 1969.029400][T13142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.039390][T13298] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 1969.048232][T13142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.070294][T13142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.097000][T13298] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1969.113950][T13298] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 1969.175066][T13298] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 1969.215219][T13298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1969.245949][T13327] loop3: detected capacity change from 0 to 512 [ 1969.301325][T12386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1969.301702][T13327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1969.327290][T13327] ext4 filesystem being mounted at /root/syzkaller-testdir4132013233/syzkaller.pLyQMm/2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1969.373204][T13142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1969.390532][T13333] loop4: detected capacity change from 0 to 512 [ 1969.428185][T13333] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 256 (level 2) [ 1969.456162][T13333] EXT4-fs (loop4): 2 truncates cleaned up [ 1969.466920][T13333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1969.512953][T12464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1969.597761][T13356] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1969.673271][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1969.683067][T13365] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1969.711210][T13368] loop3: detected capacity change from 0 to 736 [ 1969.718508][T13368] iso9660: Bad value for 'mode' [ 1969.735996][T13365] delete_channel: no stack [ 1969.767994][T13368] loop3: detected capacity change from 0 to 512 [ 1969.775695][T13368] EXT4-fs: Ignoring removed i_version option [ 1969.781726][T13368] EXT4-fs: Ignoring removed nobh option [ 1969.789094][T13368] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1969.803132][T13368] EXT4-fs (loop3): 1 truncate cleaned up [ 1969.810687][T13368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1969.842366][T13381] loop4: detected capacity change from 0 to 512 [ 1969.854096][T13381] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 256 (level 2) [ 1969.868217][T13381] EXT4-fs (loop4): 2 truncates cleaned up [ 1969.874125][T13381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1969.893044][T12464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1970.113664][T13396] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1970.198953][T13401] loop4: detected capacity change from 0 to 1024 [ 1970.207256][T13401] ext4: Unknown parameter 'fowner' [ 1970.305505][T13414] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1970.392514][T13419] loop4: detected capacity change from 0 to 512 [ 1970.400472][T13419] EXT4-fs: Ignoring removed i_version option [ 1970.417165][T13419] EXT4-fs error (device loop4): ext4_quota_enable:7034: comm syz-executor.4: inode #2097152: comm syz-executor.4: iget: illegal inode # [ 1970.432058][T13419] EXT4-fs error (device loop4): ext4_quota_enable:7037: comm syz-executor.4: Bad quota inode: 2097152, type: 2 [ 1970.446310][T13419] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1970.459484][T13423] Cannot find add_set index 0 as target [ 1970.461899][T13419] EXT4-fs (loop4): mount failed [ 1970.477799][T13423] usb usb8: usbfs: process 13423 (syz-executor.0) did not claim interface 0 before use [ 1970.542162][T13419] loop4: detected capacity change from 0 to 8192 [ 1970.630605][T13433] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1970.743808][T13442] loop2: detected capacity change from 0 to 1024 [ 1970.755502][T13442] ext4: Unknown parameter 'fowner' [ 1971.164012][T13489] loop4: detected capacity change from 0 to 1024 [ 1971.174962][T13489] ext4: Unknown parameter 'fowner' [ 1971.298196][T13510] loop0: detected capacity change from 0 to 256 [ 1971.306472][T13510] FAT-fs (loop0): count of clusters too big (1049598) [ 1971.313332][T13510] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1971.328919][T13512] Cannot find add_set index 0 as target [ 1971.342570][T13512] usb usb8: usbfs: process 13512 (syz-executor.2) did not claim interface 0 before use [ 1971.353274][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 1971.353287][ T29] audit: type=1326 audit(1718780513.601:349849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13511 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x0 [ 1971.441457][T13514] loop0: detected capacity change from 0 to 512 [ 1971.449100][T13514] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1971.459282][T13514] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 1971.468276][T13514] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1971.476322][T13514] System zones: 0-2, 18-18, 34-34 [ 1971.481769][T13514] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 15 [ 1971.493303][T13514] ext4_test_bit(bit=14, block=18) = 1 [ 1971.498705][T13514] is_bad_inode(inode)=0 [ 1971.502862][T13514] NEXT_ORPHAN(inode)=2264924160 [ 1971.508012][T13514] max_ino=32 [ 1971.511225][T13514] i_nlink=0 [ 1971.514966][T13514] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1971.529775][T13514] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 80: padding at end of block bitmap is not set [ 1971.545809][T13514] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1971.555283][T13514] EXT4-fs mount: 1 callbacks suppressed [ 1971.555302][T13514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1971.699798][T12386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1971.990410][T13536] loop1: detected capacity change from 0 to 1024 [ 1972.005879][T13536] ext4: Unknown parameter 'fowner' [ 1972.135951][T13546] Cannot find add_set index 0 as target [ 1972.149681][T13546] usb usb8: usbfs: process 13546 (syz-executor.1) did not claim interface 0 before use [ 1972.214432][ T29] audit: type=1326 audit(1718780514.431:349850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13545 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f216e99df29 code=0x0 [ 1972.335575][T13569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1972.342974][T13569] IPv6: NLM_F_CREATE should be set when creating new route [ 1972.516902][T13579] loop4: detected capacity change from 0 to 1024 [ 1972.524128][T13579] ext4: Unknown parameter 'fowner' [ 1972.575719][T13586] loop2: detected capacity change from 0 to 512 [ 1972.583432][T13586] EXT4-fs: Ignoring removed i_version option [ 1972.596376][T13586] EXT4-fs error (device loop2): ext4_quota_enable:7034: comm syz-executor.2: inode #2097152: comm syz-executor.2: iget: illegal inode # [ 1972.611243][T13586] EXT4-fs error (device loop2): ext4_quota_enable:7037: comm syz-executor.2: Bad quota inode: 2097152, type: 2 [ 1972.623678][T13586] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1972.639601][T13586] EXT4-fs (loop2): mount failed [ 1972.761374][T13603] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1972.787319][T13586] loop2: detected capacity change from 0 to 8192 [ 1972.870934][T13609] 9pnet_fd: Insufficient options for proto=fd [ 1973.186402][T13632] loop0: detected capacity change from 0 to 256 [ 1973.201013][T13634] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1973.212629][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1973.245598][T13638] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1973.287605][T13642] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 202) [ 1973.295750][T13642] FAT-fs (loop0): Filesystem has been set read-only [ 1973.419815][T13651] loop0: detected capacity change from 0 to 1024 [ 1973.440934][T13651] ext4: Unknown parameter 'fowner' [ 1973.527500][T13660] loop2: detected capacity change from 0 to 512 [ 1973.557881][T13660] EXT4-fs: Ignoring removed i_version option [ 1973.610784][T13660] EXT4-fs error (device loop2): ext4_quota_enable:7034: comm syz-executor.2: inode #2097152: comm syz-executor.2: iget: illegal inode # [ 1973.631527][T13660] EXT4-fs error (device loop2): ext4_quota_enable:7037: comm syz-executor.2: Bad quota inode: 2097152, type: 2 [ 1973.644734][T13660] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1973.676882][T13660] EXT4-fs (loop2): mount failed [ 1973.791400][ T29] audit: type=1326 audit(1718780516.031:349851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1973.791467][T13660] loop2: detected capacity change from 0 to 8192 [ 1973.822099][ T29] audit: type=1326 audit(1718780516.031:349852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1973.846476][ T29] audit: type=1326 audit(1718780516.031:349853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1973.870835][ T29] audit: type=1326 audit(1718780516.031:349854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1973.895171][ T29] audit: type=1326 audit(1718780516.031:349855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1973.920695][ T29] audit: type=1326 audit(1718780516.171:349856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1973.944917][ T29] audit: type=1326 audit(1718780516.171:349857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1973.969344][ T29] audit: type=1326 audit(1718780516.171:349858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1974.164654][ T5107] hid-generic 0000:0000:0000.0058: item fetching failed at offset 0/1 [ 1974.183256][ T5107] hid-generic 0000:0000:0000.0058: probe with driver hid-generic failed with error -22 [ 1974.420950][T13693] loop4: detected capacity change from 0 to 512 [ 1974.438090][T13690] loop2: detected capacity change from 0 to 1024 [ 1974.445365][T13693] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1974.445853][T13690] ext4: Unknown parameter 'fowner' [ 1974.470469][T13693] EXT4-fs (loop4): Remounting filesystem read-only [ 1974.477725][T13693] EXT4-fs (loop4): 1 truncate cleaned up [ 1974.483929][T13693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1974.497959][T13693] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 1974.508405][T13693] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1974.769045][T13730] loop1: detected capacity change from 0 to 512 [ 1974.776970][T13730] EXT4-fs: Ignoring removed i_version option [ 1974.801479][T13730] EXT4-fs error (device loop1): ext4_quota_enable:7034: comm syz-executor.1: inode #2097152: comm syz-executor.1: iget: illegal inode # [ 1974.824717][T13736] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1974.832183][T13730] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz-executor.1: Bad quota inode: 2097152, type: 2 [ 1974.856568][T13730] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1974.872193][T13730] EXT4-fs (loop1): mount failed [ 1974.960402][T13730] loop1: detected capacity change from 0 to 8192 [ 1975.235723][T13753] loop1: detected capacity change from 0 to 1024 [ 1975.243344][T13753] EXT4-fs: Ignoring removed orlov option [ 1975.249317][T13753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1975.276903][T13753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1975.330952][T11915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1975.360652][T13758] loop0: detected capacity change from 0 to 1024 [ 1975.619188][T13781] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1975.642236][T13786] loop1: detected capacity change from 0 to 512 [ 1975.655556][T13786] EXT4-fs: Ignoring removed i_version option [ 1975.659480][T13784] loop0: detected capacity change from 0 to 1024 [ 1975.670789][T13784] ext4: Unknown parameter 'fowner' [ 1975.678234][T13786] EXT4-fs error (device loop1): ext4_quota_enable:7034: comm syz-executor.1: inode #2097152: comm syz-executor.1: iget: illegal inode # [ 1975.694507][T13786] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz-executor.1: Bad quota inode: 2097152, type: 2 [ 1975.709244][T13786] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1975.725467][T13786] EXT4-fs (loop1): mount failed [ 1975.779480][T13802] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1975.821362][T13786] loop1: detected capacity change from 0 to 8192 [ 1975.866281][T13812] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1975.888228][T13812] loop3: detected capacity change from 0 to 512 [ 1975.911774][T13812] EXT4-fs error (device loop3): __ext4_iget:4906: inode #15: block 1803188595: comm syz-executor.3: invalid block [ 1975.942922][T13812] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 1975.954854][T13818] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1975.965943][T13812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1976.025587][T13142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1976.119433][T13827] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1976.129822][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1976.139215][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1976.430414][T13867] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1976.458955][T13857] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1976.523770][T13869] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1976.533450][T13869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1976.542768][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1976.595723][T13876] loop1: detected capacity change from 0 to 512 [ 1976.603528][T13876] EXT4-fs: Ignoring removed i_version option [ 1976.628045][T13876] EXT4-fs error (device loop1): ext4_quota_enable:7034: comm syz-executor.1: inode #2097152: comm syz-executor.1: iget: illegal inode # [ 1976.643818][T13876] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz-executor.1: Bad quota inode: 2097152, type: 2 [ 1976.659279][T13876] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1976.660945][T13887] loop0: detected capacity change from 0 to 128 [ 1976.674821][T13876] EXT4-fs (loop1): mount failed [ 1976.748879][T13893] loop0: detected capacity change from 0 to 512 [ 1976.763628][T13876] loop1: detected capacity change from 0 to 8192 [ 1976.772326][T13893] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz-executor.0: iget: special inode unallocated [ 1976.786426][T13893] EXT4-fs (loop0): get root inode failed [ 1976.792081][T13893] EXT4-fs (loop0): mount failed [ 1976.839643][T13898] infiniband syz2: set active [ 1976.844450][T13898] infiniband syz2: added team_slave_1 [ 1976.862148][T13898] RDS/IB: syz2: added [ 1976.872911][T13898] smc: adding ib device syz2 with port count 1 [ 1976.889561][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1976.913394][T13898] smc: ib device syz2 port 1 has pnetid [ 1976.936207][T13900] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1976.976829][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1976.976843][ T29] audit: type=1326 audit(1718780519.221:349867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13897 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0f06e4f29 code=0x0 [ 1977.311104][T13919] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1977.353125][T13923] loop0: detected capacity change from 0 to 512 [ 1977.379451][T13923] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: e_value size too large [ 1977.404662][T13923] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 1977.417570][T13923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1977.439004][T13923] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1977.457382][T12386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1977.512004][T13934] loop0: detected capacity change from 0 to 512 [ 1977.523147][T13934] EXT4-fs: Ignoring removed i_version option [ 1977.558815][T13934] EXT4-fs error (device loop0): ext4_quota_enable:7034: comm syz-executor.0: inode #2097152: comm syz-executor.0: iget: illegal inode # [ 1977.573122][T13934] EXT4-fs error (device loop0): ext4_quota_enable:7037: comm syz-executor.0: Bad quota inode: 2097152, type: 2 [ 1977.587084][T13934] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1977.602669][T13934] EXT4-fs (loop0): mount failed [ 1977.688589][T13949] macvlan2: entered promiscuous mode [ 1977.694158][T13949] vlan1: entered promiscuous mode [ 1977.702130][T13949] team0: Port device macvlan2 added [ 1977.703096][T13934] loop0: detected capacity change from 0 to 8192 [ 1977.803146][T13953] loop3: detected capacity change from 0 to 512 [ 1977.831105][T13953] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: e_value size too large [ 1977.864559][T13953] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 1977.878528][T13953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1977.896498][T13953] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1977.930172][T13142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1978.053658][ T3105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.157798][ T3105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.228641][ T3105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.243907][T13981] loop3: detected capacity change from 0 to 512 [ 1978.269078][T13981] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: e_value size too large [ 1978.295811][T13981] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 1978.319268][ T3105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1978.330659][T13981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1978.365141][T13981] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1978.408634][T13990] loop1: detected capacity change from 0 to 512 [ 1978.420282][T13990] EXT4-fs: Ignoring removed i_version option [ 1978.426893][T13142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1978.456100][T13990] EXT4-fs error (device loop1): ext4_quota_enable:7034: comm syz-executor.1: inode #2097152: comm syz-executor.1: iget: illegal inode # [ 1978.471715][T13990] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz-executor.1: Bad quota inode: 2097152, type: 2 [ 1978.488956][T13990] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1978.505672][T13990] EXT4-fs (loop1): mount failed [ 1978.582442][ T3105] bridge_slave_1: left allmulticast mode [ 1978.588207][ T3105] bridge_slave_1: left promiscuous mode [ 1978.593878][ T3105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.604590][ T3105] bridge_slave_0: left allmulticast mode [ 1978.610317][ T3105] bridge_slave_0: left promiscuous mode [ 1978.616085][ T3105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.676719][T13990] loop1: detected capacity change from 0 to 8192 [ 1978.700869][T14006] loop3: detected capacity change from 0 to 512 [ 1978.726587][T14006] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1978.741724][ T3105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1978.753914][ T3105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1978.764613][ T3105] bond0 (unregistering): Released all slaves [ 1978.808112][T13973] chnl_net:caif_netlink_parms(): no params data found [ 1978.858638][T13973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.865876][T13973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.886858][T13973] bridge_slave_0: entered allmulticast mode [ 1978.904504][T13973] bridge_slave_0: entered promiscuous mode [ 1978.914591][T13973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.921682][T13973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.930144][T13973] bridge_slave_1: entered allmulticast mode [ 1978.945577][T13973] bridge_slave_1: entered promiscuous mode [ 1978.958593][ T3105] hsr_slave_0: left promiscuous mode [ 1978.964438][ T3105] hsr_slave_1: left promiscuous mode [ 1978.970159][ T3105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1978.977664][ T3105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1978.985507][ T3105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1978.992920][ T3105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1979.006968][ T3105] veth1_macvtap: left promiscuous mode [ 1979.012476][ T3105] veth0_macvtap: left promiscuous mode [ 1979.018124][ T3105] veth1_vlan: left promiscuous mode [ 1979.023409][ T3105] veth0_vlan: left promiscuous mode [ 1979.057652][T14028] loop2: detected capacity change from 0 to 512 [ 1979.082477][ T3105] infiniband syz2: set down [ 1979.083581][T14028] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 1979.118379][T14028] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 1979.157581][T14028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1979.179006][ T3105] team0 (unregistering): Port device team_slave_1 removed [ 1979.189822][ T3089] smc: removing ib device syz2 [ 1979.195850][ T3105] team0 (unregistering): Port device team_slave_0 removed [ 1979.203146][T14028] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1979.256823][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1979.275515][T13973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1979.309460][T13973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1979.382245][T13973] team0: Port device team_slave_0 added [ 1979.400682][T13973] team0: Port device team_slave_1 added [ 1979.463775][T13973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1979.470782][T13973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1979.497096][T13973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1979.516600][T13973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1979.523618][T13973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1979.549620][T13973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1979.574770][T13142] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1979.584156][T14043] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1979.619405][T13973] hsr_slave_0: entered promiscuous mode [ 1979.632714][T13973] hsr_slave_1: entered promiscuous mode [ 1979.653619][T13973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1979.674469][ T29] audit: type=1326 audit(1718780521.871:349868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5069ff29 code=0x7ffc0000 [ 1979.698813][ T29] audit: type=1326 audit(1718780521.871:349869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a5069ff29 code=0x7ffc0000 [ 1979.723135][T13973] Cannot create hsr debugfs directory [ 1979.749160][T14050] hugetlbfs: Bad value '-' for mount option 'nr_inodes' [ 1979.749160][T14050] [ 1979.774373][ T29] audit: type=1326 audit(1718780521.981:349870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14049 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1979.798773][ T29] audit: type=1326 audit(1718780521.981:349871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14049 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1979.822977][ T29] audit: type=1326 audit(1718780521.981:349872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14049 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1979.847497][ T29] audit: type=1326 audit(1718780521.981:349873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14049 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1979.872051][ T29] audit: type=1326 audit(1718780521.981:349874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14049 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1979.896325][ T29] audit: type=1326 audit(1718780521.981:349875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14049 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1979.920551][ T29] audit: type=1326 audit(1718780521.981:349876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14049 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1980.158117][T14066] loop3: detected capacity change from 0 to 512 [ 1980.165721][T14066] EXT4-fs: Ignoring removed i_version option [ 1980.186705][T14066] EXT4-fs error (device loop3): ext4_quota_enable:7034: comm syz-executor.3: inode #2097152: comm syz-executor.3: iget: illegal inode # [ 1980.213233][T14066] EXT4-fs error (device loop3): ext4_quota_enable:7037: comm syz-executor.3: Bad quota inode: 2097152, type: 2 [ 1980.229428][T14068] __nla_validate_parse: 3 callbacks suppressed [ 1980.229489][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1980.229597][T14066] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1980.261748][T14066] EXT4-fs (loop3): mount failed [ 1980.286180][T13973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1980.308484][T13973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1980.326594][T13973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1980.339096][T13973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1980.411155][T14066] loop3: detected capacity change from 0 to 8192 [ 1980.441185][T13973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1980.470767][T13973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1980.490876][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.498112][ T5115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1980.527420][T31536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.534614][T31536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1980.586414][T13973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1980.597118][T13973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1980.711786][T13973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1980.895268][T14102] hugetlbfs: Bad value '-' for mount option 'nr_inodes' [ 1980.895268][T14102] [ 1980.948036][T14123] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1980.975462][T13973] veth0_vlan: entered promiscuous mode [ 1980.992743][T13973] veth1_vlan: entered promiscuous mode [ 1981.030935][T13973] veth0_macvtap: entered promiscuous mode [ 1981.048817][T14130] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1981.059796][T13973] veth1_macvtap: entered promiscuous mode [ 1981.089096][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1981.099860][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.110192][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1981.120886][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.130770][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1981.141432][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.151355][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1981.161950][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.171768][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1981.182290][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.197580][T13973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1981.221704][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1981.232252][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.242185][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1981.252836][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.260017][T14120] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1981.262871][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1981.282809][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.292639][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1981.303279][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.313118][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1981.323554][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.333382][T13973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1981.343802][T13973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.377669][T13973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1981.397430][T14144] netlink: 'syz-executor.3': attribute type 28 has an invalid length. [ 1981.412224][T13973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.421041][T13973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.429820][T13973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.438667][T13973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.568927][T14157] hugetlbfs: Bad value '-' for mount option 'nr_inodes' [ 1981.568927][T14157] [ 1981.798917][T14174] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1981.886888][T14184] tmpfs: Bad value for 'nr_inodes' [ 1981.910764][T14188] loop1: detected capacity change from 0 to 1024 [ 1981.922653][T14188] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (4096), stripe is disabled [ 1981.936622][T14188] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1981.946263][T14188] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1981.955837][T14188] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 1981.980127][T14188] EXT4-fs (loop1): Remounting filesystem read-only [ 1981.986725][T14188] __quota_error: 143 callbacks suppressed [ 1981.986738][T14188] Quota error (device loop1): write_blk: dquota write failed [ 1981.999877][T14188] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1982.010486][ T29] audit: type=1326 audit(1718780524.251:350020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1982.040072][T14208] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1982.048732][ T29] audit: type=1326 audit(1718780524.251:350021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1982.072975][ T29] audit: type=1326 audit(1718780524.251:350022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1982.114400][ T29] audit: type=1326 audit(1718780524.341:350023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1982.120643][T14188] EXT4-fs (loop1): 1 truncate cleaned up [ 1982.138694][ T29] audit: type=1326 audit(1718780524.341:350024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1982.159203][T14188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1982.168842][ T29] audit: type=1326 audit(1718780524.341:350025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14200 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1982.184172][T14188] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 1982.212682][ T29] audit: type=1326 audit(1718780524.451:350026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1982.215130][T14188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1982.236993][ T29] audit: type=1326 audit(1718780524.451:350027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14211 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b38452f29 code=0x7ffc0000 [ 1982.303021][T14188] loop1: detected capacity change from 0 to 1024 [ 1982.318418][T14188] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1982.328526][T14188] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1982.340635][T14188] jbd2_journal_init_inode: Cannot locate journal superblock [ 1982.348122][T14188] EXT4-fs (loop1): Could not load journal inode [ 1982.423592][T14188] loop1: detected capacity change from 0 to 256 [ 1982.501890][T14224] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1982.696360][T14244] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1982.728528][T14246] loop4: detected capacity change from 0 to 2048 [ 1982.744648][T14246] EXT4-fs (loop4): can't mount with commit=116, fs mounted w/o journal [ 1982.898785][T14251] loop0: detected capacity change from 0 to 512 [ 1982.905342][T14249] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1982.913574][T14251] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1983.037102][T14258] veth0_vlan: left promiscuous mode [ 1983.042397][T14258] veth0_vlan: entered allmulticast mode [ 1983.066727][T14258] veth0_vlan: entered promiscuous mode [ 1983.093341][T14264] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1983.351585][T14275] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1983.372980][T14277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=14277 comm=syz-executor.2 [ 1983.399516][T14279] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1983.409075][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1983.732279][T12386] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1983.766477][T14289] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1983.863105][T14291] loop0: detected capacity change from 0 to 8192 [ 1983.879814][T14291] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 1983.888757][T14291] FAT-fs (loop0): Filesystem has been set read-only [ 1983.895695][T14291] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 1983.903959][T14291] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 2068) [ 1984.070694][T14304] usb usb8: usbfs: process 14304 (syz-executor.0) did not claim interface 0 before use [ 1984.159172][T14329] loop4: detected capacity change from 0 to 512 [ 1984.168450][T14329] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 1984.183223][T14329] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 1984.197508][T14329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1984.213690][T14329] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1984.247052][T13973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1984.312390][T14333] loop4: detected capacity change from 0 to 1024 [ 1984.322920][T14333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1984.996214][T14355] xt_connbytes: Forcing CT accounting to be enabled [ 1985.007233][T14355] loop3: detected capacity change from 0 to 128 [ 1985.092064][T14358] pim6reg1: entered promiscuous mode [ 1985.147404][T13973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1985.227476][T14362] loop4: detected capacity change from 0 to 512 [ 1985.234616][T14362] EXT4-fs: Invalid commit interval -2147483648, must be smaller than 21474836 [ 1985.289870][T14362] loop4: detected capacity change from 0 to 2048 [ 1985.409198][T14374] usb usb8: usbfs: process 14374 (syz-executor.4) did not claim interface 0 before use [ 1985.861800][T14378] loop0: detected capacity change from 0 to 512 [ 1985.869174][T14378] EXT4-fs: Ignoring removed i_version option [ 1985.885517][T14378] EXT4-fs error (device loop0): ext4_quota_enable:7034: comm syz-executor.0: inode #2097152: comm syz-executor.0: iget: illegal inode # [ 1985.900109][T14378] EXT4-fs error (device loop0): ext4_quota_enable:7037: comm syz-executor.0: Bad quota inode: 2097152, type: 2 [ 1985.912178][T14378] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1985.927473][T14378] EXT4-fs (loop0): mount failed [ 1986.002071][T14378] loop0: detected capacity change from 0 to 8192 [ 1986.195431][T14390] __nla_validate_parse: 11 callbacks suppressed [ 1986.195445][T14390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1986.261526][T14397] xt_connbytes: Forcing CT accounting to be enabled [ 1986.264025][T14400] loop3: detected capacity change from 0 to 2048 [ 1986.282390][T14397] loop1: detected capacity change from 0 to 128 [ 1986.290391][T14402] xt_hashlimit: invalid interval [ 1986.296457][T14400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1986.339874][T14408] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1986.342165][T14400] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1986.391617][T14400] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 1986.403955][T14400] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1986.403955][T14400] [ 1986.413633][T14400] EXT4-fs (loop3): Total free blocks count 0 [ 1986.419627][T14400] EXT4-fs (loop3): Free/Dirty block details [ 1986.425553][T14400] EXT4-fs (loop3): free_blocks=2415919104 [ 1986.431287][T14400] EXT4-fs (loop3): dirty_blocks=48 [ 1986.436412][T14400] EXT4-fs (loop3): Block reservation details [ 1986.442386][T14400] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 1986.539441][ T3097] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 1986.590439][T14422] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1986.610596][T14425] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1986.610627][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1986.610641][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1986.679052][T14429] usb usb8: usbfs: process 14429 (syz-executor.2) did not claim interface 0 before use [ 1986.808048][T14438] loop0: detected capacity change from 0 to 2048 [ 1986.827047][T14438] EXT4-fs: Ignoring removed orlov option [ 1986.844369][T14438] ext4: Unknown parameter 'noacl' [ 1986.891412][T14438] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1986.899843][T14438] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1986.908655][T14438] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1986.917229][T14441] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1987.046938][T14451] loop1: detected capacity change from 0 to 512 [ 1987.054143][T14451] EXT4-fs: Ignoring removed i_version option [ 1987.065886][T14451] EXT4-fs error (device loop1): ext4_quota_enable:7034: comm syz-executor.1: inode #2097152: comm syz-executor.1: iget: illegal inode # [ 1987.080188][T14451] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz-executor.1: Bad quota inode: 2097152, type: 2 [ 1987.092392][T14451] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1987.108135][T14451] EXT4-fs (loop1): mount failed [ 1987.196636][T14451] loop1: detected capacity change from 0 to 8192 [ 1987.223975][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 1987.223989][ T29] audit: type=1326 audit(1718780529.461:350095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.254564][ T29] audit: type=1326 audit(1718780529.461:350096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.279051][ T29] audit: type=1326 audit(1718780529.471:350097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.303419][ T29] audit: type=1326 audit(1718780529.471:350098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.327641][ T29] audit: type=1326 audit(1718780529.471:350099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.351847][ T29] audit: type=1326 audit(1718780529.471:350100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.375949][ T29] audit: type=1326 audit(1718780529.471:350101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.400388][ T29] audit: type=1326 audit(1718780529.471:350102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.424663][ T29] audit: type=1326 audit(1718780529.471:350103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.448876][ T29] audit: type=1326 audit(1718780529.471:350104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14462 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 1987.514038][T14468] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1987.523656][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1987.533075][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1987.567829][T14475] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1987.661203][T14483] loop1: detected capacity change from 0 to 512 [ 1987.671421][T14483] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 1987.686338][T14483] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 1987.706009][T14483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1987.709566][T14491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1987.733523][T14483] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1987.750545][T11915] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1987.829442][T14496] usb usb8: usbfs: process 14496 (syz-executor.1) did not claim interface 0 before use [ 1988.480383][T14510] loop3: detected capacity change from 0 to 512 [ 1988.488194][T14510] EXT4-fs: Ignoring removed i_version option [ 1988.505713][T14510] EXT4-fs error (device loop3): ext4_quota_enable:7034: comm syz-executor.3: inode #2097152: comm syz-executor.3: iget: illegal inode # [ 1988.519882][T14510] EXT4-fs error (device loop3): ext4_quota_enable:7037: comm syz-executor.3: Bad quota inode: 2097152, type: 2 [ 1988.531826][T14510] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1988.548458][T14510] EXT4-fs (loop3): mount failed [ 1988.572164][T14515] loop2: detected capacity change from 0 to 128 [ 1988.579932][T14515] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 1988.630923][T14510] loop3: detected capacity change from 0 to 8192 [ 1989.066227][T14548] usb usb8: usbfs: process 14548 (syz-executor.3) did not claim interface 0 before use [ 1989.154898][T14551] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1989.165577][T14551] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1989.172336][T14551] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1989.197986][T14551] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1989.369238][T14563] loop4: detected capacity change from 0 to 164 [ 1989.382787][T14563] hsr0: entered promiscuous mode [ 1989.388697][T14563] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1989.484462][T14567] loop4: detected capacity change from 0 to 512 [ 1989.491758][T14567] EXT4-fs: Ignoring removed i_version option [ 1989.506737][T14567] EXT4-fs error (device loop4): ext4_quota_enable:7034: comm syz-executor.4: inode #2097152: comm syz-executor.4: iget: illegal inode # [ 1989.522338][T14567] EXT4-fs error (device loop4): ext4_quota_enable:7037: comm syz-executor.4: Bad quota inode: 2097152, type: 2 [ 1989.534718][T14567] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=2, err=-117, ino=2097152). Please run e2fsck to fix. [ 1989.550115][T14567] EXT4-fs (loop4): mount failed [ 1989.631020][T14567] loop4: detected capacity change from 0 to 8192 [ 1990.025628][T14615] usb usb8: usbfs: process 14615 (syz-executor.4) did not claim interface 0 before use [ 1990.220143][T14643] loop3: detected capacity change from 0 to 512 [ 1990.237061][T14643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1990.249762][T14643] ext4 filesystem being mounted at /root/syzkaller-testdir4132013233/syzkaller.pLyQMm/107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1990.331875][T13142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1991.091147][T14649] syz-executor.3 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1991.105960][T14649] CPU: 0 PID: 14649 Comm: syz-executor.3 Tainted: G W 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0 [ 1991.117944][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1991.128034][T14649] Call Trace: [ 1991.131327][T14649] [ 1991.134261][T14649] dump_stack_lvl+0xf2/0x150 [ 1991.139045][T14649] dump_stack+0x15/0x20 [ 1991.139071][T14649] dump_header+0x83/0x2d0 [ 1991.139160][T14649] oom_kill_process+0x33e/0x4c0 [ 1991.139182][T14649] out_of_memory+0x9af/0xbe0 [ 1991.139202][T14649] mem_cgroup_out_of_memory+0x13e/0x190 [ 1991.139233][T14649] try_charge_memcg+0x745/0xcd0 [ 1991.139259][T14649] ? get_page_from_freelist+0x1a2a/0x1a70 [ 1991.139338][T14649] obj_cgroup_charge_pages+0xbd/0x1d0 [ 1991.139377][T14649] ? _raw_spin_unlock+0x26/0x50 [ 1991.139414][T14649] __memcg_kmem_charge_page+0x9d/0x170 [ 1991.139443][T14649] __alloc_pages_noprof+0x1bc/0x360 [ 1991.139466][T14649] alloc_pages_mpol_noprof+0xec/0x1e0 [ 1991.139495][T14649] alloc_pages_noprof+0xe1/0x100 [ 1991.139525][T14649] __vmalloc_node_range_noprof+0x719/0xef0 [ 1991.139558][T14649] kvmalloc_node_noprof+0x121/0x170 [ 1991.139582][T14649] ? ip_set_alloc+0x1f/0x30 [ 1991.139614][T14649] ip_set_alloc+0x1f/0x30 [ 1991.139637][T14649] hash_netiface_create+0x273/0x730 [ 1991.139678][T14649] ? __nla_parse+0x40/0x60 [ 1991.139764][T14649] ? __pfx_hash_netiface_create+0x10/0x10 [ 1991.139788][T14649] ip_set_create+0x359/0x8a0 [ 1991.139814][T14649] ? memchr+0x1/0x50 [ 1991.139880][T14649] ? __nla_parse+0x40/0x60 [ 1991.139900][T14649] nfnetlink_rcv_msg+0x4a9/0x570 [ 1991.139939][T14649] netlink_rcv_skb+0x12c/0x230 [ 1991.139967][T14649] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1991.139995][T14649] nfnetlink_rcv+0x16c/0x15b0 [ 1991.140092][T14649] ? kmem_cache_free+0xd8/0x280 [ 1991.140118][T14649] ? nlmon_xmit+0x51/0x60 [ 1991.140150][T14649] ? __kfree_skb+0x102/0x150 [ 1991.140167][T14649] ? consume_skb+0x57/0x180 [ 1991.140187][T14649] ? nlmon_xmit+0x51/0x60 [ 1991.140295][T14649] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 1991.140315][T14649] ? __dev_queue_xmit+0xb21/0x1e50 [ 1991.140338][T14649] ? ref_tracker_free+0x3a5/0x410 [ 1991.140422][T14649] ? __netlink_deliver_tap+0x495/0x4c0 [ 1991.140495][T14649] netlink_unicast+0x58d/0x660 [ 1991.140521][T14649] netlink_sendmsg+0x5ca/0x6e0 [ 1991.140551][T14649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1991.140657][T14649] __sock_sendmsg+0x140/0x180 [ 1991.140689][T14649] ____sys_sendmsg+0x312/0x410 [ 1991.140713][T14649] __sys_sendmsg+0x1e9/0x280 [ 1991.140732][T14649] ? futex_wait+0x18e/0x1c0 [ 1991.140806][T14649] __x64_sys_sendmsg+0x46/0x50 [ 1991.140888][T14649] x64_sys_call+0xb25/0x2d70 [ 1991.140915][T14649] do_syscall_64+0xc9/0x1c0 [ 1991.140944][T14649] ? clear_bhb_loop+0x55/0xb0 [ 1991.140965][T14649] ? clear_bhb_loop+0x55/0xb0 [ 1991.141058][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.141082][T14649] RIP: 0033:0x7f9b38452f29 [ 1991.141099][T14649] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1991.141117][T14649] RSP: 002b:00007f9b377cd0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1991.141138][T14649] RAX: ffffffffffffffda RBX: 00007f9b38589f80 RCX: 00007f9b38452f29 [ 1991.141182][T14649] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 1991.141195][T14649] RBP: 00007f9b384c2074 R08: 0000000000000000 R09: 0000000000000000 [ 1991.141206][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1991.141218][T14649] R13: 000000000000000b R14: 00007f9b38589f80 R15: 00007ffca2e0d628 [ 1991.141235][T14649] [ 1991.141316][T14649] memory: usage 307200kB, limit 307200kB, failcnt 9053 [ 1991.141329][T14649] memory+swap: usage 307764kB, limit 9007199254740988kB, failcnt 0 [ 1991.141341][T14649] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 1991.141409][T14649] Memory cgroup stats for /syz3: [ 1991.141588][T14649] cache 8192 [ 1991.141594][T14649] rss 0 [ 1991.141637][T14649] shmem 0 [ 1991.141643][T14649] mapped_file 0 [ 1991.141650][T14649] dirty 4096 [ 1991.141657][T14649] writeback 4096 [ 1991.141664][T14649] workingset_refault_anon 3705 [ 1991.141672][T14649] workingset_refault_file 402 [ 1991.141680][T14649] swap 577536 [ 1991.141687][T14649] swapcached 8192 [ 1991.141694][T14649] pgpgin 2417144 [ 1991.141701][T14649] pgpgout 2417140 [ 1991.141708][T14649] pgfault 2958829 [ 1991.141715][T14649] pgmajfault 1173 [ 1991.141723][T14649] inactive_anon 0 [ 1991.141729][T14649] active_anon 0 [ 1991.141736][T14649] inactive_file 0 [ 1991.141770][T14649] active_file 8192 [ 1991.141776][T14649] unevictable 0 [ 1991.141782][T14649] hierarchical_memory_limit 314572800 [ 1991.141790][T14649] hierarchical_memsw_limit 9223372036854771712 [ 1991.141798][T14649] total_cache 8192 [ 1991.141804][T14649] total_rss 0 [ 1991.141810][T14649] total_shmem 0 [ 1991.141816][T14649] total_mapped_file 0 [ 1991.141822][T14649] total_dirty 4096 [ 1991.141828][T14649] total_writeback 4096 [ 1991.141835][T14649] total_workingset_refault_anon 3705 [ 1991.141850][T14649] total_workingset_refault_file 402 [ 1991.141923][T14649] total_swap 577536 [ 1991.141929][T14649] total_swapcached 8192 [ 1991.141935][T14649] total_pgpgin 2417145 [ 1991.141942][T14649] total_pgpgout 2417141 [ 1991.141949][T14649] total_pgfault 2958835 [ 1991.617599][T14649] total_pgmajfault 1173 [ 1991.621730][T14649] total_inactive_anon 0 [ 1991.625899][T14649] total_active_anon 0 [ 1991.629879][T14649] total_inactive_file 0 [ 1991.634021][T14649] total_active_file 8192 [ 1991.638261][T14649] total_unevictable 0 [ 1991.642219][T14649] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14648,uid=0 [ 1991.657452][T14649] Memory cgroup out of memory: Killed process 14648 (syz-executor.3) total-vm:46440kB, anon-rss:420kB, file-rss:8984kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1991.856232][T14681] usb usb8: usbfs: process 14681 (syz-executor.4) did not claim interface 0 before use [ 1991.918821][T14684] loop3: detected capacity change from 0 to 512 [ 1991.927490][T14684] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1992.653762][T14692] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1992.761168][T13142] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1993.150719][ T3105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.273869][ T3105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.327433][ T3105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.378799][ T3105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.511654][ T3105] bridge_slave_1: left allmulticast mode [ 1993.513496][T13973] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1993.517465][ T3105] bridge_slave_1: left promiscuous mode [ 1993.528456][T13973] CPU: 0 PID: 13973 Comm: syz-executor.4 Tainted: G W 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0 [ 1993.534033][ T3105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.545906][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1993.545920][T13973] Call Trace: [ 1993.545927][T13973] [ 1993.545935][T13973] dump_stack_lvl+0xf2/0x150 [ 1993.573822][T13973] dump_stack+0x15/0x20 [ 1993.577976][T13973] dump_header+0x83/0x2d0 [ 1993.582312][T13973] oom_kill_process+0x33e/0x4c0 [ 1993.587152][T13973] out_of_memory+0x9af/0xbe0 [ 1993.591738][T13973] mem_cgroup_out_of_memory+0x13e/0x190 [ 1993.597330][T13973] try_charge_memcg+0x745/0xcd0 [ 1993.602178][T13973] ? _raw_spin_unlock+0x26/0x50 [ 1993.607055][T13973] ? radix_tree_lookup+0xf9/0x150 [ 1993.612088][T13973] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 1993.618153][T13973] __read_swap_cache_async+0x2b9/0x520 [ 1993.623614][T13973] swap_cluster_readahead+0x380/0x3f0 [ 1993.629026][T13973] swapin_readahead+0xe2/0x7a0 [ 1993.633835][T13973] ? __filemap_get_folio+0x420/0x5b0 [ 1993.639122][T13973] ? swap_cache_get_folio+0x6e/0x210 [ 1993.644469][T13973] do_swap_page+0x3bc/0x1840 [ 1993.649109][T13973] ? __rcu_read_lock+0x36/0x50 [ 1993.653874][T13973] handle_mm_fault+0x809/0x2a80 [ 1993.658725][T13973] exc_page_fault+0x296/0x650 [ 1993.663394][T13973] asm_exc_page_fault+0x26/0x30 [ 1993.668269][T13973] RIP: 0010:__get_user_8+0x11/0x20 [ 1993.673451][T13973] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 1993.693066][T13973] RSP: 0018:ffffc90000e43e38 EFLAGS: 00050202 [ 1993.699122][T13973] RAX: 000055557e744da8 RBX: ffffc90000e43e40 RCX: ffffffff814b1b04 [ 1993.707145][T13973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88815de75c70 [ 1993.715104][T13973] RBP: ffffc90000e43ef0 R08: 000188815de75c77 R09: 0000000000000000 [ 1993.723066][T13973] R10: 0001ffffffffffff R11: 0000000000003b13 R12: ffff88815de75280 [ 1993.731027][T13973] R13: ffff88815de75c70 R14: ffffc90000e43f58 R15: ffffc90000e43fd8 [ 1993.739057][T13973] ? __rseq_handle_notify_resume+0xb4/0xc00 [ 1993.744955][T13973] __rseq_handle_notify_resume+0xc8/0xc00 [ 1993.750696][T13973] ? mem_cgroup_handle_over_high+0x2d/0x1d0 [ 1993.756592][T13973] syscall_exit_to_user_mode+0x90/0x130 [ 1993.762139][T13973] do_syscall_64+0xd6/0x1c0 [ 1993.766638][T13973] ? clear_bhb_loop+0x55/0xb0 [ 1993.771308][T13973] ? clear_bhb_loop+0x55/0xb0 [ 1993.776070][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.782004][T13973] RIP: 0033:0x7fb7d39142f3 [ 1993.786409][T13973] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 0e fc 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 1993.806098][T13973] RSP: 002b:00007fff3dc3f278 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 1993.814500][T13973] RAX: 0000000000000000 RBX: 000000000000008e RCX: 00007fb7d39142f3 [ 1993.823012][T13973] RDX: 00007fff3dc3f290 RSI: 0000000000000000 RDI: 0000000000000000 [ 1993.831045][T13973] RBP: 00007fff3dc3f30c R08: 000000001c8218bc R09: 7fffffffffffffff [ 1993.839008][T13973] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 1993.846977][T13973] R13: 00000000001e6864 R14: 00000000001e685a R15: 0000000000000006 [ 1993.855013][T13973] [ 1993.858147][T13973] memory: usage 307200kB, limit 307200kB, failcnt 7505 [ 1993.865394][T13973] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 1993.873355][T13973] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1993.880813][T13973] Memory cgroup stats for /syz4: [ 1993.880945][T13973] cache 4096 [ 1993.889158][T13973] rss 0 [ 1993.891899][T13973] shmem 0 [ 1993.894863][T13973] mapped_file 0 [ 1993.898335][T13973] dirty 0 [ 1993.901312][T13973] writeback 0 [ 1993.904885][T13973] workingset_refault_anon 4963 [ 1993.909686][T13973] workingset_refault_file 399 [ 1993.914493][T13973] swap 700416 [ 1993.917770][T13973] swapcached 4096 [ 1993.921432][T13973] pgpgin 2726132 [ 1993.924987][T13973] pgpgout 2726130 [ 1993.928671][T13973] pgfault 3154348 [ 1993.932510][T13973] pgmajfault 1707 [ 1993.936158][T13973] inactive_anon 4096 [ 1993.940053][T13973] active_anon 0 [ 1993.943539][T13973] inactive_file 4096 [ 1993.947467][T13973] active_file 0 [ 1993.950722][T14732] __nla_validate_parse: 8 callbacks suppressed [ 1993.950736][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1993.950906][T13973] unevictable 0 [ 1993.950915][T13973] hierarchical_memory_limit 314572800 [ 1993.959729][T14732] loop2: detected capacity change from 0 to 512 [ 1993.966383][T13973] hierarchical_memsw_limit 9223372036854771712 [ 1993.966394][T13973] total_cache 4096 [ 1993.966401][T13973] total_rss 0 [ 1993.986247][T14732] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1993.987591][T13973] total_shmem 0 [ 1993.991307][T14732] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 1993.994570][T13973] total_mapped_file 0 [ 1993.994580][T13973] total_dirty 0 [ 1994.006033][T14732] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 1994.009464][T13973] total_writeback 0 [ 1994.009474][T13973] total_workingset_refault_anon 4963 [ 1994.025705][T14732] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1994.027008][T13973] total_workingset_refault_file 399 [ 1994.040523][T14732] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 1994.044149][T13973] total_swap 700416 [ 1994.044158][T13973] total_swapcached 4096 [ 1994.050865][T14732] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 1994.057476][T13973] total_pgpgin 2726133 [ 1994.057486][T13973] total_pgpgout 2726131 [ 1994.063020][T14732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1994.076304][T13973] total_pgfault 3154351 [ 1994.076313][T13973] total_pgmajfault 1707 [ 1994.125629][T13973] total_inactive_anon 4096 [ 1994.126545][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1994.126557][ T29] audit: type=1326 audit(1718780536.361:350165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.130040][T13973] total_active_anon 0 [ 1994.130050][T13973] total_inactive_file 4096 [ 1994.130057][T13973] total_active_file 0 [ 1994.136119][ T29] audit: type=1326 audit(1718780536.361:350166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.160275][T13973] total_unevictable 0 [ 1994.160286][T13973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1994.164255][ T29] audit: type=1326 audit(1718780536.361:350167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.168664][T13973] ,cpuset= [ 1994.172596][ T29] audit: type=1326 audit(1718780536.361:350168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.196796][T13973] syz4,mems_allowed=0 [ 1994.200755][ T29] audit: type=1326 audit(1718780536.361:350169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.207586][T13973] ,oom_memcg=/syz4,task_memcg= [ 1994.231812][ T29] audit: type=1326 audit(1718780536.361:350170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.234828][T13973] /syz4,task=syz-executor.4,pid=14707,uid=0 [ 1994.258969][ T29] audit: type=1326 audit(1718780536.361:350171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.262939][T13973] Memory cgroup out of memory: Killed process 14707 (syz-executor.4) total-vm:46440kB, anon-rss:424kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 1994.287132][ T29] audit: type=1326 audit(1718780536.361:350172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.387889][ T29] audit: type=1326 audit(1718780536.361:350173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.412186][ T29] audit: type=1326 audit(1718780536.361:350174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa3ad91f29 code=0x7ffc0000 [ 1994.437829][ T3105] bridge_slave_0: left allmulticast mode [ 1994.443475][ T3105] bridge_slave_0: left promiscuous mode [ 1994.449146][ T3105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.472993][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1994.535454][T14736] loop2: detected capacity change from 0 to 512 [ 1994.544236][T14736] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1994.567515][ T3105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1994.579663][ T3105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1994.591435][ T3105] bond0 (unregistering): Released all slaves [ 1994.605280][T14714] chnl_net:caif_netlink_parms(): no params data found [ 1994.650539][T14714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.657765][T14714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.665086][T14714] bridge_slave_0: entered allmulticast mode [ 1994.671643][T14714] bridge_slave_0: entered promiscuous mode [ 1994.678646][T14714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.685938][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.693173][T14714] bridge_slave_1: entered allmulticast mode [ 1994.699607][T14714] bridge_slave_1: entered promiscuous mode [ 1994.717509][ T3105] hsr_slave_0: left promiscuous mode [ 1994.724370][ T3105] hsr_slave_1: left promiscuous mode [ 1994.730650][ T3105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1994.738160][ T3105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1994.743933][T14751] loop4: detected capacity change from 0 to 1024 [ 1994.752128][ T3105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1994.759658][ T3105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1994.766185][T14751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1994.781036][ T3105] vlan1: left promiscuous mode [ 1994.786100][ T3105] veth1_macvtap: left promiscuous mode [ 1994.791589][ T3105] veth0_macvtap: left promiscuous mode [ 1994.797124][ T3105] veth1_vlan: left promiscuous mode [ 1994.802416][ T3105] veth0_vlan: left promiscuous mode [ 1994.808728][T13973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1994.869382][ T3105] team0 (unregistering): Port device macvlan2 removed [ 1994.915263][ T3105] team0 (unregistering): Port device team_slave_1 removed [ 1994.926724][ T3105] team0 (unregistering): Port device team_slave_0 removed [ 1994.962715][T14714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1994.973230][T14714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.992720][T14714] team0: Port device team_slave_0 added [ 1994.999438][T14714] team0: Port device team_slave_1 added [ 1995.014980][T14714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.022014][T14714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.048166][T14714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1995.059292][T14714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1995.066247][T14714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.092319][T14714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1995.119248][T14714] hsr_slave_0: entered promiscuous mode [ 1995.125773][T14714] hsr_slave_1: entered promiscuous mode [ 1995.131572][T14714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1995.139128][T14714] Cannot create hsr debugfs directory [ 1995.356627][T14714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1995.365347][T14714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1995.373269][T12391] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1995.374994][T14714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1995.393006][T14714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1995.406689][T14714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.413993][T14714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1995.421267][T14714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.428562][T14714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1995.460053][T14714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1995.470789][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.478963][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.492223][T14714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1995.501748][T14765] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1995.502740][T16916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.516975][T16916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1995.528015][T25995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.535156][T25995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1995.595438][T14714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1995.657315][T14714] veth0_vlan: entered promiscuous mode [ 1995.666272][T14714] veth1_vlan: entered promiscuous mode [ 1995.681439][T14714] veth0_macvtap: entered promiscuous mode [ 1995.689121][T14714] veth1_macvtap: entered promiscuous mode [ 1995.698811][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.709471][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.719298][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.729717][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.739727][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.750142][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.759955][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.770540][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.780424][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1995.790928][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.801837][T14714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1995.810056][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.820508][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.830375][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.840863][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.850793][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.861243][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.871174][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.881618][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.891492][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.901946][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.911878][T14714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1995.922344][T14714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1995.933607][T14714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1995.944222][T14777] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1995.957075][T14714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.965916][T14714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.974685][T14714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1995.983585][T14714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1996.005196][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1996.018425][T14779] loop4: detected capacity change from 0 to 512 [ 1996.035154][T14779] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1996.046763][T14779] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 1996.057030][T14779] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 1996.084556][T14779] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1996.093104][T14779] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 1996.107345][T14779] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 1996.121352][T14779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1996.159764][T13973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1996.300297][T14801] loop2: detected capacity change from 0 to 512 [ 1996.313559][T14801] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1996.314130][T14804] loop3: detected capacity change from 0 to 736 [ 1996.334005][T14804] iso9660: Bad value for 'mode' [ 1996.402020][T14804] loop3: detected capacity change from 0 to 512 [ 1996.519283][T14804] EXT4-fs: Ignoring removed i_version option [ 1996.525371][T14804] EXT4-fs: Ignoring removed nobh option [ 1996.532056][T14804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1996.548024][T14804] EXT4-fs (loop3): 1 truncate cleaned up [ 1996.554125][T14804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1996.806845][T14840] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1997.133511][T12391] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1997.174513][T14714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1997.746152][T14872] loop4: detected capacity change from 0 to 512 [ 1997.755528][T14872] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 1997.769346][T14872] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 1997.782927][T14872] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1997.801090][T14872] EXT4-fs error (device loop4): dx_make_map:1327: inode #2: block 255: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 1997.820696][T14872] EXT4-fs error (device loop4) in do_split:2091: Corrupt filesystem [ 1997.831109][T14872] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 255: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=1024, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 1998.545810][T13973] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1998.629215][T14889] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1998.653938][T14891] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1998.889826][T14896] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1999.420823][T14909] loop3: detected capacity change from 0 to 1024 [ 1999.430544][T14909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1999.454818][T14714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1999.672258][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 1999.672274][ T29] audit: type=1326 audit(1718780541.911:350344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62178bbf29 code=0x7ffc0000 [ 1999.705378][ T29] audit: type=1326 audit(1718780541.911:350345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62178bbf29 code=0x7ffc0000 [ 1999.729890][ T29] audit: type=1326 audit(1718780541.931:350346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62178bbf29 code=0x7ffc0000 [ 1999.754107][ T29] audit: type=1326 audit(1718780541.931:350347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62178bbf29 code=0x7ffc0000 [ 1999.778292][ T29] audit: type=1326 audit(1718780541.931:350348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62178bbf29 code=0x7ffc0000 [ 1999.802587][ T29] audit: type=1326 audit(1718780541.931:350349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f62178bbf29 code=0x7ffc0000 [ 1999.827223][ T29] audit: type=1326 audit(1718780541.931:350350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14918 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62178bbf29 code=0x7ffc0000 [ 1999.859874][T14925] loop3: detected capacity change from 0 to 128 [ 1999.925030][T14928] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 2000.251282][T14933] loop3: detected capacity change from 0 to 128 [ 2000.301052][T14935] loop3: detected capacity change from 0 to 512 [ 2000.310325][T14935] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2000.758881][ T29] audit: type=1326 audit(1718780543.001:350351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 2000.784400][ T29] audit: type=1326 audit(1718780543.001:350352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 2000.808707][ T29] audit: type=1326 audit(1718780543.011:350353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7d38e8f29 code=0x7ffc0000 [ 2001.140754][T14714] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 2001.217610][T14953] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 2001.225719][T14953] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2001.574741][T14966] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2001.715218][T14970] loop4: detected capacity change from 0 to 128 [ 2001.778921][T14971] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 2001.969727][T14971] ================================================================== [ 2001.977933][T14971] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 2001.985844][T14971] [ 2001.988164][T14971] write to 0xffff8881072437c0 of 8 bytes by task 14970 on cpu 1: [ 2001.995901][T14971] __mark_inode_dirty+0x256/0x7e0 [ 2002.000925][T14971] fat_update_time+0x1fe/0x210 [ 2002.005667][T14971] touch_atime+0x14f/0x350 [ 2002.010063][T14971] filemap_splice_read+0x8b0/0x920 [ 2002.015153][T14971] splice_direct_to_actor+0x26c/0x670 [ 2002.020508][T14971] do_splice_direct+0xd7/0x150 [ 2002.025263][T14971] do_sendfile+0x3ab/0x960 [ 2002.029663][T14971] __x64_sys_sendfile64+0x110/0x150 [ 2002.034845][T14971] x64_sys_call+0x2c9f/0x2d70 [ 2002.039514][T14971] do_syscall_64+0xc9/0x1c0 [ 2002.044012][T14971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.049892][T14971] [ 2002.052195][T14971] read to 0xffff8881072437c0 of 8 bytes by task 14971 on cpu 0: [ 2002.059827][T14971] __mark_inode_dirty+0x58/0x7e0 [ 2002.064839][T14971] fat_update_time+0x1fe/0x210 [ 2002.069604][T14971] touch_atime+0x14f/0x350 [ 2002.074004][T14971] filemap_splice_read+0x8b0/0x920 [ 2002.079096][T14971] splice_direct_to_actor+0x26c/0x670 [ 2002.084454][T14971] do_splice_direct+0xd7/0x150 [ 2002.089197][T14971] do_sendfile+0x3ab/0x960 [ 2002.093588][T14971] __x64_sys_sendfile64+0x110/0x150 [ 2002.098769][T14971] x64_sys_call+0x2c9f/0x2d70 [ 2002.103434][T14971] do_syscall_64+0xc9/0x1c0 [ 2002.107925][T14971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.113886][T14971] 2024/06/19 07:02:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 2002.116187][T14971] value changed: 0x0000000000000000 -> 0x0000000000000007 [ 2002.123272][T14971] [ 2002.125572][T14971] Reported by Kernel Concurrency Sanitizer on: [ 2002.131782][T14971] CPU: 0 PID: 14971 Comm: syz-executor.4 Tainted: G W 6.10.0-rc4-syzkaller-00045-g92e5605a199e #0 [ 2002.143732][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2002.153764][T14971] ==================================================================