last executing test programs: 7.683404261s ago: executing program 2 (id=774): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{&(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000840)="5d6a6f07360fd268ae3901e88b35030c9c772c19cb7450a070aca842abb472eaaccc0646d026f37df5c7e789567db58209cf", 0x32}, {&(0x7f0000000880)="b23940e748445f1218a1e127e0e0154bb73d0ad0151038dde6997e4db2a70f2224687b20444794be18bc4dee4bece2f6cce9cfd30b1feaea222bab088aafe602381c95f03babf045ddb06f4881", 0x4d}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)="95abcf4ceb85a7209ea88a65fa325c1455ba4454a7f22c6d956dec0a23df13704e0fa117fbfff74b6d98474a46858290fb9e1ec8626f5a47fcbc434e02456292aa75f70fa4c715124f41f57f8e03ed19edecde00c9c03158eac389da7b0e195469b79c3fdf824b7c07a948ef013b7759fac363086dd5ff31020c82d45ae38a75ba4e8d5e4aefdb295671b9bf71d9642cf13fcb4585083b799b1fe8519deda2dbd2e6ec77fbeb65b355b5c77c77ab07f3b357e1dfebec9a6db9033f75dd837f5d4728e61605cf5d7b04f2208edec11211bbfca6e1", 0xd4}], 0x7}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)="20a5be99e973699bac0e79b3e7f6f9c70665e53a0453f27c363c8c8a8805a6e88c4c71b9cb674c9d21b6c875f715db49f5f833dedb919892f98d5ed56f854fbf424d42b05f123ebe55c0e69697da14ba90d6a1fc2757303369c023dea94ea06b6beaee45832a1757867ddb0150a5054cda44f41def5b5e32353bd012826f8f697f4c083b03caa19ff6711c1184a4c4f487526bc671d744b843056506014a17d8b1fb3a850eda78b0486b53037a599f868cd06f5dca16e930df3bb7cc1ff5", 0xbe}], 0x1}}], 0x2, 0x0) 7.649989823s ago: executing program 2 (id=776): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f00000015c0)=""/4096, &(0x7f0000000300)=0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x100}, 0x48) r8 = socket(0x2, 0x3, 0xff) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf32(r8, &(0x7f0000000180)=ANY=[], 0x58) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r9], 0x20}, 0x1, 0x6}, 0x0) 7.297897152s ago: executing program 2 (id=778): socket$kcm(0x10, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) 7.267691135s ago: executing program 2 (id=779): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x100}, 0x48) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r7], 0x20}, 0x1, 0x6}, 0x0) 7.101671458s ago: executing program 2 (id=781): socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4f96, 0xffbffffe, 0xbc1, 0x0, 0xffffffffffffffff, 0xdb, '\x00', 0x0, r0, 0x5, 0x3, 0x1, 0x14}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRESHEX], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f00000003c0)="3fdae754c96d5f670e5572e20af8373e6b83096482f57d096b98ef9356d597f5f2ed4b33d105c9585b9182a44aefc53f5ff3aead6843a1f8b2b31ade715bbff623ff8d4b5cc2000000deff0000007b22e580fab5bf2ba985e4976717806a452f6b70fd25b07ee84c34a1ac604cdfd6846af03361cadad3bd92432815ca7a5be96f9ea0d4592cd4ab5f09d00d66bcadfd3bcb490d867f54cb7cd49e8cb9b523d642e61a94f22c76dda4554c1ce0c1824a8dadcccd9dcb6eb663263e33d1a2de7c7d52d9d80fcca8ba4ff54242ff4c34310ebad88bd509a1690ddd3d7a9f6d584b5fe54354e3", 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000180)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x907090, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r3, r2, 0x0, 0x8000000d) r5 = socket$inet6(0xa, 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0xa, r6, 0x0, &(0x7f0000000140)='ex:') socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x686000, 0x0) ioctl$TCGETS(r7, 0x5401, &(0x7f0000000580)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40a3, &(0x7f00000004c0)={[{@noinit_itable}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0xb8b}}, {@bsdgroups}, {@jqfmt_vfsv1}, {@errors_continue}, {@nolazytime}, {@noacl}, {@noload}, {@prjquota}]}, 0x2, 0x502, &(0x7f0000000ac0)="$eJzs3ElvHMUeAPB/j+3EzvLsl7dmeS/zXkBYIOLYWQ8cCAIpFyQkEArHwXaiECdBsZESy8IGoSCBBMonYLkh8Qk4wQUB4gDiCIgrQoqQLwkc0KCe6TE9mcVLxja2fz9p7Kru6q6q7q6ZrqrpCWDLKqZ/kohdEfFdRPRXo/UJitV/d+ZnRn+ZnxlNolx++uekku72/MxoLWltu51ZZLAQUXgtif1N8p28Pn2xNDExfjWLD00VstCl0vnx8+OXR06dOna07+SJkeMdqWdaptv7Xr5yYO+Z524+OXr25vOff5iWt5ytz9ejaqBxJ93tcuhqWFKMYv2xzLl/6UXfEHbnwknlOBXWrzAsWVd2WfdU2n9/OVNZ1x9PvFpLt209CwmsirSxb29YuvBZNlfOS5LqBsDm0B1La9Nv5t4wgE2h9kF/ez7tqc6MNvaDm2jbD95Ybp2OSoXSet/JXtU13ZUebHGg2jfqWaX8/x4RZ+d+fSd9RdNxCACAzvr4dMSO7L6j9qquKcQ/c+n+ko0KDUTEXyNiT0T8Lbt/+UdEJe2/IuLfuW2SbD6pneJd8cb7n6/7skD+drVj0vu/R7K5rfr7v4X5i4GuLLa7Uv+e5NyFifEj2TEZjJ7taXy4cdcLw2qfPP7N263yL+bu/9JXmn/tXjArx0/ddw3QjZWmSvda75pbr1QO7Gxj/ZPoTmqhiL0RsW8F+0+P2YUHPzjQan1d/dN65uvfm/55q/XOO9APKb8X8UD1/M/FXfWPbN4jqcxPXnpxaPL69MMX8vOTwydPjBwf6o2J8SNDtaui0Rdf3XgqCzZ0IxY//6srPf87ml7/CzOXA0l+vnZy+Xnc+P71ln2alV7/25JnKuHavNS10tTU1eGIbclc4/KRP7a9VuqrS5/Wf/BQ8/a/J+K3d7Pt9kdEehH/JyL+GxEHs7L/LyL+HxGH2tT/s8fue6FVF/LPcP7HlnX+WwUe/TKi+aqui59+1JDxG8Ul1j89/8cqocFsyVhpqnexerUraT5wzwcQAAAANoCDEbErksLhbIxzVxQKhw9H7FwYQZmceujclZcuj1WfERiInkJtpKs/Nx46nI0Np/F0q5FcPF1/tDJuXC6Xy31pPO2/T+xe36rDlrezRftP/dj4SAuw2SxrHq3VE23AhrTyefTOfyEDWFub6Pv8wDK1af9+xQE2uSV//q/WU3DAumnW/mcj7qxDUYA11qz9P7sO5QDWnvE/2Lq0f9iyFn2YFtiUlvSQ/AoCe860SZN0T18szWYlWI3cGwKFqFuSvuPV/QrAQEQtce0Lju13+EMhojMl7OpoTfvqzmmhaZre6EReUVg0TfcyfohhuYFv72nPhTW56pYY2L5YKyjEwsU2WwtMr3bBKo3g/fV7ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiM3wMAAP//RcrNOw==") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xffffffac) 6.819556711s ago: executing program 2 (id=785): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f00000015c0)=""/4096, &(0x7f0000000300)=0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x100}, 0x48) r8 = socket(0x2, 0x3, 0xff) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf32(r8, &(0x7f0000000180)=ANY=[], 0x58) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r9], 0x20}, 0x1, 0x6}, 0x0) 2.880718554s ago: executing program 3 (id=821): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)="8f", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x12, 0x149341) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_BROADCAST={0xa}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) open(0x0, 0x0, 0x0) vmsplice(r4, &(0x7f0000000400)=[{&(0x7f00000012c0)="15", 0x1}], 0x1, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r5, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) 2.747986435s ago: executing program 1 (id=822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) capget(0x0, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@nojournal_checksum}]}, 0xfe, 0x56a, &(0x7f0000000f00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa0}}, 0x1c) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x52da1056}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c00000}]}, 0x80}}, 0x8040804) 2.689265589s ago: executing program 0 (id=824): socket$kcm(0x10, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 2.618340566s ago: executing program 0 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 2.035818223s ago: executing program 3 (id=830): ftruncate(0xffffffffffffffff, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) socket$qrtr(0x2a, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock2(&(0x7f00009b5000/0x4000)=nil, 0x4000, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000010000000800000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001d00"], 0x114}], 0x1}, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003f000000081d2f37c7000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000038005e800400010018000100000000000000000000000000000000000000000008000500000000000800020000000000080007003901000004005e801c005e800800050000000000080005000000000008000900000000000c005e800800090000000000"], 0x8c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c0005001901070000"], 0x398}}, 0x4040040) r5 = socket$inet6(0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth1\x00', 0x10) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.866151297s ago: executing program 1 (id=831): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x100}, 0x48) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r7], 0x20}, 0x1, 0x6}, 0x0) 1.820511391s ago: executing program 1 (id=832): socket(0x0, 0x5, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x110, r0, 0x54b85000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@noblock_validity}, {@dioread_lock}, {@sysvgroups}, {@norecovery}, {@user_xattr}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}], [{@hash}, {@dont_appraise}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x80005, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="310000000408050000000000000f0000000000000600024000000000"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r7 = syz_open_pts(r6, 0x141601) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) 1.692059121s ago: executing program 0 (id=833): ftruncate(0xffffffffffffffff, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) socket$qrtr(0x2a, 0x2, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock2(&(0x7f00009b5000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0xa, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) io_setup(0x9, &(0x7f0000000140)) 1.691713641s ago: executing program 3 (id=834): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{&(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000840)="5d6a6f07360fd268ae3901e88b35030c9c772c19cb7450a070aca842abb472eaaccc0646d026f37df5c7e789567db58209cf", 0x32}, {&(0x7f0000000880)="b23940e748445f1218a1e127e0e0154bb73d0ad0151038dde6997e4db2a70f2224687b20444794be18bc4dee4bece2f6cce9cfd30b1feaea222bab088aafe602381c95f03babf045ddb06f4881", 0x4d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)="95abcf4ceb85a7209ea88a65fa325c1455ba4454a7f22c6d956dec0a23df13704e0fa117fbfff74b6d98474a46858290fb9e1ec8626f5a47fcbc434e02456292aa75f70fa4c715124f41f57f8e03ed19edecde00c9c03158eac389da7b0e195469b79c3fdf824b7c07a948ef013b7759fac363086dd5ff31020c82d45ae38a75ba4e8d5e4aefdb295671b9bf71d9642cf13fcb4585083b799b1fe8519deda2dbd2e6ec77fbeb65b355b5c77c77ab07f3b357e1dfebec9a6db9033f75dd837f5d4728e61605cf5d7b04f2208edec11211bbfca6e1", 0xd4}], 0x8}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)="20a5be99e973699bac0e79b3e7f6f9c70665e53a0453f27c363c8c8a8805a6e88c4c71b9cb674c9d21b6c875f715db49f5f833dedb919892f98d5ed56f854fbf424d42b05f123ebe55c0e69697da14ba90d6a1fc2757303369c023dea94ea06b6beaee45832a1757867ddb0150a5054cda44f41def5b5e32353bd012826f8f697f4c083b03caa19ff6711c1184a4c4f487526bc671d744b843056506014a17d8b1fb3a850eda78b0486b53037a599f868cd06f5dca16e930df3bb7cc1ff5", 0xbe}], 0x1}}], 0x2, 0x0) 1.659736504s ago: executing program 3 (id=835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0xd, 0x0, 0x0}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000300900200000800040000000000"], 0x44}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000e40)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xe}}}, 0x24}}, 0x4) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x8, 0x0, 0x9, 0x5}, 0x10, 0x0, r3, 0x6, &(0x7f00000006c0)=[r5], &(0x7f0000000700)=[{0x3, 0x2, 0x4, 0xa}, {0x4, 0x2, 0x9, 0x5}, {0x5b2b18cf, 0x3, 0x7, 0x9}, {0x2, 0x3, 0xf, 0xc}, {0x2, 0x5, 0x0, 0x6}, {0x2, 0x3, 0xb, 0x2}], 0x10, 0xfffff800}, 0x90) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000000)=0x800, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000880)=ANY=[@ANYRESHEX=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES32=r7], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x1e00, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, r4}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r12, r11, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) recvmsg(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}, 0x0) 1.427117663s ago: executing program 4 (id=836): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x8}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) 1.325213632s ago: executing program 0 (id=837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x10, &(0x7f0000000000), 0xee, 0x495, &(0x7f0000000e40)="$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") setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89801) close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x4040010) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=@gettaction={0x5c, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x5c}}, 0x0) 1.215958141s ago: executing program 4 (id=838): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c5", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r5, 0x11, 0x1, &(0x7f00000015c0)=""/4096, &(0x7f0000000300)=0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x100}, 0x48) r8 = socket(0x2, 0x3, 0xff) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf32(r8, &(0x7f0000000180)=ANY=[], 0x58) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r9], 0x20}, 0x1, 0x6}, 0x0) 1.193473942s ago: executing program 4 (id=839): socket$kcm(0x10, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.174750624s ago: executing program 4 (id=840): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)="8f", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x12, 0x149341) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_BROADCAST={0xa}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000012c0)="15", 0x1}], 0x1, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) 941.539183ms ago: executing program 1 (id=841): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 941.005343ms ago: executing program 1 (id=842): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) capget(0x0, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7e}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@nojournal_checksum}]}, 0xfe, 0x56a, &(0x7f0000000f00)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5bY3Xdoka9ZmSzSfD9z2nHtv8j0n556Tc3MTbgADazz7U4h4NSK+SSKONGwbjnzj+MZ+q49vzGRLEmtrn/2ZRJKvq++f5P8P5ZlXIuLXryNOFZrjVpdX5kvlcrqY5ydqC1cnqssrpy8vlObSufTK1PT02Xemp95/792u1fXNC39//+n9j87eObH63c8Pj95N4lwczrc11mMPbjZmxmM8f01G4ty2HSe7EKyfJL0uALsylPfzkcjGgCMxlPd64P/vq4hYAwZUov/DgKrPA+rn9l06D/7PePThxglQc/2HNz4bif3r50YHV5MtZ0bZ+e5YF+JnMX75497dbInufQ4BsKObtyLizPBw8/iX5ONfC0OdPfeZDvbZHiOP32EEYC/uZ/Oft1rNfwqb859oMf851KLv7kab/t+g8LDFw5JufUqdzf8+aDn/3bxoNTaU515an/ONJJcul9NsbHs5Ik7GyL4s/7TrOWdXH6y129Y4/8uWLH59LpiX4+Hwvq2PmS3VSnupc6NHtyJeazn/TTbbP2nR/tnrcaHDGMfTe6+327Zz/Z+vtZ8i3mjZ/k+uaCVPvz45sX48TNSPimZ/3T7+W7v4va5/1v4Hn17/saTxem312WP8uP+fdNuq0Xpit8f/aPL5lie6XqrVFicjRpNPmtdPPXlsPV/fP6v/yRPb6z+0ZfxrdfwfiIgvOqz/7WO32+7aD+0/+0zt/+yJBx9/+UO7+J21/9vrqZP5mk7Gv04LuJfXDgAAAAAAAPpNISIOR1IobqYLhWJx4/sdx+JgoVyp1k5dqixdmY3138qOxUihfqX7SMP3ISbz78PW81Pb8tMRcTQivh06sJ4vzlTKs72uPAAAAAAAAAAAAAAAAAAAAPSJQ21+/5/5vfVdWEZfbAmB58otv2Fw7dj/u3GnJ6Avef+HwbWr/n+g++UAXjzv/zCgRnpdAKCXvP/D4NL/YXDp/zC49H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqgvnz2fL2urjGzNZfvba8tJ85drp2bQ6X1xYminOVBavFucqlblyWpypLOz0fOVK5erkVCxdn6il1dpEdXnl4kJl6Urt4uWF0lx6MXW3IQAAAAAAAAAAAAAAAAAAAGhWXV6ZL5XL6aKExK4Sw/1RDImGxJ0u9O4eD0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ODfAAAA//98ITX4") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa0}}, 0x1c) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x52da1056}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c00000}]}, 0x80}}, 0x8040804) 802.360674ms ago: executing program 3 (id=843): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x100}, 0x48) r6 = socket(0x2, 0x3, 0xff) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r7], 0x20}, 0x1, 0x6}, 0x0) 802.087024ms ago: executing program 3 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 451.268203ms ago: executing program 0 (id=845): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{&(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000840)="5d6a6f07360fd268ae3901e88b35030c9c772c19cb7450a070aca842abb472eaaccc0646d026f37df5c7e789567db58209cf", 0x32}, {&(0x7f0000000880)="b23940e748445f1218a1e127e0e0154bb73d0ad0151038dde6997e4db2a70f2224687b20444794be18bc4dee4bece2f6cce9cfd30b1feaea222bab088aafe602381c95f03babf045ddb06f4881", 0x4d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)="95abcf4ceb85a7209ea88a65fa325c1455ba4454a7f22c6d956dec0a23df13704e0fa117fbfff74b6d98474a46858290fb9e1ec8626f5a47fcbc434e02456292aa75f70fa4c715124f41f57f8e03ed19edecde00c9c03158eac389da7b0e195469b79c3fdf824b7c07a948ef013b7759fac363086dd5ff31020c82d45ae38a75ba4e8d5e4aefdb295671b9bf71d9642cf13fcb4585083b799b1fe8519deda2dbd2e6ec77fbeb65b355b5c77c77ab07f3b357e1dfebec9a6db9033f75dd837f5d4728e61605cf5d7b04f2208edec11211bbfca6e1", 0xd4}], 0x8}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e80)="20a5be99e973699bac0e79b3e7f6f9c70665e53a0453f27c363c8c8a8805a6e88c4c71b9cb674c9d21b6c875f715db49f5f833dedb919892f98d5ed56f854fbf424d42b05f123ebe55c0e69697da14ba90d6a1fc2757303369c023dea94ea06b6beaee45832a1757867ddb0150a5054cda44f41def5b5e32353bd012826f8f697f4c083b03caa19ff6711c1184a4c4f487526bc671d744b843056506014a17d8b1fb3a850eda78b0486b53037a599f868cd06f5dca16e930df3bb7cc1ff5", 0xbe}], 0x1}}], 0x2, 0x0) 433.187634ms ago: executing program 0 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 322.884004ms ago: executing program 4 (id=847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0xd, 0x0, 0x0}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)}], 0x1) socket(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x0, @random="0000a85d4f76"}, 0x1c, {0x2, 0x4e22, @loopback}, 'veth0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) (fail_nth: 2) 43.244096ms ago: executing program 1 (id=848): socket$inet(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1}, 0x90) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='task_rename\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$P9_RREADDIR(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(0x0, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000311, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) gettid() keyctl$clear(0x7, 0x0) keyctl$set_timeout(0xf, 0x0, 0x71e) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000b00)="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", &(0x7f00000001c0)="723390f3697ba96c8807b370b941468a760e3c2f82bf41d68b1c9553e4bcb36cae55a55538745faba10938691312862f2d318a0c260b9f5549ce2dec99aad1b0c4805a69b708cd9a68c3bd6661e598106131beeeb34dc444c0be4aeb080ea4c548736e6902b51f392d8e395a99f2b8749397099b3fda16db85a81d0c"}}, &(0x7f0000bbdffc)) 0s ago: executing program 4 (id=849): semget(0x1, 0x1, 0x1e3) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x228, 0xc8, 0xb8, 0x228, 0x2804, 0x338, 0x2e8, 0x2e8, 0x338, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x1d0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) r0 = socket(0x2, 0x80805, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, 0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0x6) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000008, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_PTRACER(0x18, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x3}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) gettid() (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r8, &(0x7f0000000100)=""/148, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kernel console output (not intermixed with test programs): is not up; please bring it up to get a fully working HSR network [ 129.025678][ C0] eth0: bad gso: type: 1, size: 1408 [ 129.043564][ C0] eth0: bad gso: type: 1, size: 1408 [ 129.052260][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.062792][ T3113] hsr_slave_0: left promiscuous mode [ 129.072535][ T4174] 9pnet_fd: Insufficient options for proto=fd [ 129.078815][ T3113] hsr_slave_1: left promiscuous mode [ 129.086443][ T3113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.090117][ C0] eth0: bad gso: type: 1, size: 1408 [ 129.093853][ T3113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.108891][ T3113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.116398][ T3113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.134661][ T3113] hsr_slave_0: left promiscuous mode [ 129.140655][ T3113] hsr_slave_1: left promiscuous mode [ 129.149029][ T3113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.156918][ T3113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.168352][ T3113] hsr_slave_0: left promiscuous mode [ 129.170637][ T4183] loop3: detected capacity change from 0 to 1024 [ 129.180247][ T3113] hsr_slave_1: left promiscuous mode [ 129.186308][ T4183] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 129.194584][ T4183] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 129.194641][ T3113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.205493][ T4183] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 129.205608][ T4183] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.233321][ T3113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.233608][ T4183] journal_load_superblock: Cannot read journal superblock [ 129.247669][ T4183] EXT4-fs (loop3): Could not load journal inode [ 129.257152][ T3113] veth1_macvtap: left promiscuous mode [ 129.262660][ T3113] veth0_macvtap: left promiscuous mode [ 129.268206][ T3113] veth1_vlan: left promiscuous mode [ 129.271832][ T4183] loop3: detected capacity change from 0 to 2048 [ 129.273541][ T3113] veth0_vlan: left promiscuous mode [ 129.287145][ T4183] EXT4-fs: dax option not supported [ 129.392113][ T3113] team0 (unregistering): Port device team_slave_1 removed [ 129.404149][ T3113] team0 (unregistering): Port device team_slave_0 removed [ 129.465977][ T3113] team0 (unregistering): Port device team_slave_1 removed [ 129.476106][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.486796][ T3113] team0 (unregistering): Port device team_slave_0 removed [ 129.549443][ T3113] team0 (unregistering): Port device team_slave_1 removed [ 129.561844][ T3113] team0 (unregistering): Port device team_slave_0 removed [ 129.650372][ T3912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.723173][ T4195] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 129.737983][ T4195] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 129.766847][ T4199] loop0: detected capacity change from 0 to 512 [ 129.776698][ T3912] veth0_vlan: entered promiscuous mode [ 129.778546][ T4199] EXT4-fs (loop0): invalid journal inode [ 129.788185][ T3912] veth1_vlan: entered promiscuous mode [ 129.809278][ T3912] veth0_macvtap: entered promiscuous mode [ 129.817001][ T3912] veth1_macvtap: entered promiscuous mode [ 129.828749][ T3912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.839359][ T3912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.849292][ T3912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.859752][ T3912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.869625][ T3912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.880187][ T3912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.890064][ T3912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.900540][ T3912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.911622][ T3912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.922085][ T3912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.932571][ T3912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.942583][ T3912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.953035][ T3912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.962904][ T3912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.973368][ T3912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.983229][ T3912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.993697][ T3912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.005307][ T3912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.017176][ T3912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.025955][ T3912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.034689][ T3912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.043364][ T3912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.386906][ T4209] loop3: detected capacity change from 0 to 1024 [ 130.534463][ T4209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.648748][ T4214] 9pnet_fd: Insufficient options for proto=fd [ 130.724175][ T4222] loop0: detected capacity change from 0 to 1024 [ 130.731084][ T4222] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 130.739564][ T4222] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.750499][ T4222] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 130.762340][ T4222] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.773222][ T4222] journal_load_superblock: Cannot read journal superblock [ 130.780464][ T4222] EXT4-fs (loop0): Could not load journal inode [ 130.805411][ T4222] loop0: detected capacity change from 0 to 2048 [ 130.816244][ T4222] EXT4-fs: dax option not supported [ 131.003135][ T4230] netlink: 'syz.1.147': attribute type 10 has an invalid length. [ 131.026850][ T4234] netlink: 'syz.0.149': attribute type 10 has an invalid length. [ 131.113207][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.123033][ T4238] loop0: detected capacity change from 0 to 512 [ 131.134056][ T4238] EXT4-fs (loop0): invalid journal inode [ 131.142557][ T4241] 9pnet_fd: Insufficient options for proto=fd [ 131.181306][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.222105][ T4249] loop3: detected capacity change from 0 to 1024 [ 131.238120][ T4249] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 131.251275][ T4249] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 131.262223][ T4249] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 131.272344][ T4249] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.285920][ T4249] journal_load_superblock: Cannot read journal superblock [ 131.293131][ T4249] EXT4-fs (loop3): Could not load journal inode [ 131.317393][ T4249] loop3: detected capacity change from 0 to 2048 [ 131.324522][ T4249] EXT4-fs: dax option not supported [ 131.520592][ T4263] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 131.877825][ T4271] loop3: detected capacity change from 0 to 1024 [ 132.000632][ T4271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.179410][ T4277] 9pnet_fd: Insufficient options for proto=fd [ 132.242912][ T4285] loop1: detected capacity change from 0 to 1024 [ 132.250081][ T4285] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 132.263748][ T4285] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.274899][ T4285] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 132.292371][ T4285] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 132.305560][ T4285] journal_load_superblock: Cannot read journal superblock [ 132.312706][ T4285] EXT4-fs (loop1): Could not load journal inode [ 132.321067][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.347997][ T4285] loop1: detected capacity change from 0 to 2048 [ 132.355906][ T4285] EXT4-fs: dax option not supported [ 132.368527][ T4287] bridge_slave_0 (unregistering): left allmulticast mode [ 132.375607][ T4287] bridge_slave_0 (unregistering): left promiscuous mode [ 132.382789][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.404638][ T4293] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 132.463142][ T4287] syz.4.170 (4287) used greatest stack depth: 10672 bytes left [ 132.570151][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.581563][ T4304] 9pnet_fd: Insufficient options for proto=fd [ 132.603749][ T4306] loop3: detected capacity change from 0 to 512 [ 132.608230][ T4309] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 132.614126][ T4306] EXT4-fs (loop3): invalid journal inode [ 132.731341][ T4319] loop4: detected capacity change from 0 to 1024 [ 132.745694][ T4322] netlink: 'syz.0.185': attribute type 10 has an invalid length. [ 132.747481][ T4319] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 132.765303][ T4319] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.776242][ T4319] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 132.788115][ T4319] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 132.799172][ T4319] journal_load_superblock: Cannot read journal superblock [ 132.806425][ T4319] EXT4-fs (loop4): Could not load journal inode [ 132.836336][ T4319] loop4: detected capacity change from 0 to 2048 [ 132.842898][ T4319] EXT4-fs: dax option not supported [ 132.848936][ T4319] tipc: Can't bind to reserved service type 0 [ 133.079774][ T4333] loop4: detected capacity change from 0 to 1024 [ 133.231843][ T4333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.248138][ T4343] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 133.263059][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.342162][ T4352] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 133.372467][ T4356] loop1: detected capacity change from 0 to 1024 [ 133.379716][ T4356] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 133.404027][ T4356] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 133.414968][ T4356] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 133.426021][ T4356] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 133.441490][ T4356] journal_load_superblock: Cannot read journal superblock [ 133.448741][ T4356] EXT4-fs (loop1): Could not load journal inode [ 133.558405][ T4356] loop1: detected capacity change from 0 to 2048 [ 133.581483][ T4356] EXT4-fs: dax option not supported [ 133.792270][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.814269][ T4362] chnl_net:caif_netlink_parms(): no params data found [ 133.852355][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.859509][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.877119][ T4362] bridge_slave_0: entered allmulticast mode [ 133.883807][ T4362] bridge_slave_0: entered promiscuous mode [ 133.891322][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.898458][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.907598][ T4362] bridge_slave_1: entered allmulticast mode [ 133.914361][ T4362] bridge_slave_1: entered promiscuous mode [ 133.936986][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.947749][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.969668][ T4362] team0: Port device team_slave_0 added [ 133.976735][ T4362] team0: Port device team_slave_1 added [ 133.993707][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.000723][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.026680][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.038963][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.045942][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.072062][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.085360][ T4393] netlink: 'syz.2.208': attribute type 10 has an invalid length. [ 134.103823][ T4394] loop4: detected capacity change from 0 to 1024 [ 134.138222][ T4393] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 134.171483][ T4362] hsr_slave_0: entered promiscuous mode [ 134.179226][ T4362] hsr_slave_1: entered promiscuous mode [ 134.187693][ T4394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.360952][ T4404] loop1: detected capacity change from 0 to 512 [ 134.371506][ T4404] EXT4-fs (loop1): invalid journal inode [ 134.392240][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.407288][ T4402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.426134][ T4402] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 134.441873][ T4402] bond0 (unregistering): Released all slaves [ 134.476570][ T4362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.538667][ T4362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.574931][ T4362] bond0: (slave netdevsim1): Releasing backup interface [ 134.587762][ T4362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.654728][ T4407] loop3: detected capacity change from 0 to 1024 [ 134.655316][ T4362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.666557][ T4407] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 134.680492][ T4407] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.691509][ T4407] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 134.701825][ T4407] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 134.712397][ T4407] journal_load_superblock: Cannot read journal superblock [ 134.719651][ T4407] EXT4-fs (loop3): Could not load journal inode [ 134.751996][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.761441][ T4362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.775438][ T4362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.781307][ T4407] loop3: detected capacity change from 0 to 2048 [ 134.790959][ T4407] EXT4-fs: dax option not supported [ 134.795115][ T4362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.823490][ T4409] hsr_slave_1 (unregistering): left promiscuous mode [ 134.831452][ T4362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.882102][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.897141][ T4362] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.908600][ T3139] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.915721][ T3139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.930101][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.937205][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.996896][ T4362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.047375][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.091549][ T4425] loop4: detected capacity change from 0 to 1024 [ 135.136349][ T4425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.180169][ T4435] netlink: 'syz.3.219': attribute type 10 has an invalid length. [ 135.190026][ T4362] veth0_vlan: entered promiscuous mode [ 135.203001][ T4362] veth1_vlan: entered promiscuous mode [ 135.269788][ T4362] veth0_macvtap: entered promiscuous mode [ 135.287328][ T4362] veth1_macvtap: entered promiscuous mode [ 135.323231][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.333754][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.343933][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.354728][ C0] eth0: bad gso: type: 1, size: 1408 [ 135.360030][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.369950][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.380476][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.390384][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.400822][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.411028][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.421567][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.444759][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.453034][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.463516][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.473366][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.483938][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.493909][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.504470][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.514286][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.524763][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.534602][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.545032][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.558820][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.571712][ T4362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.580522][ T4362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.589229][ T4362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.598042][ T4362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.784996][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.820895][ T4452] loop0: detected capacity change from 0 to 1024 [ 135.827791][ T4452] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 135.836159][ T4452] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.847210][ T4452] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 135.856960][ T4452] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.867612][ T4452] journal_load_superblock: Cannot read journal superblock [ 135.874793][ T4452] EXT4-fs (loop0): Could not load journal inode [ 135.893696][ T4452] loop0: detected capacity change from 0 to 2048 [ 135.900358][ T4452] EXT4-fs: dax option not supported [ 135.995214][ T55] bridge_slave_1: left allmulticast mode [ 136.000896][ T55] bridge_slave_1: left promiscuous mode [ 136.006677][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.015539][ T55] bridge_slave_0: left allmulticast mode [ 136.021188][ T55] bridge_slave_0: left promiscuous mode [ 136.026958][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.141090][ T4471] loop1: detected capacity change from 0 to 512 [ 136.148775][ T4471] EXT4-fs (loop1): invalid journal inode [ 136.156671][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.167886][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.179706][ T55] bond0 (unregistering): Released all slaves [ 136.201887][ T4468] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 136.390910][ T4482] loop4: detected capacity change from 0 to 1024 [ 136.401978][ T4482] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 136.421124][ T55] hsr_slave_0: left promiscuous mode [ 136.433110][ T55] hsr_slave_1: left promiscuous mode [ 136.440264][ T4482] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 136.451236][ T4482] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 136.470087][ T4483] loop0: detected capacity change from 0 to 1024 [ 136.498380][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.505907][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.543625][ T4483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.583029][ T4488] loop2: detected capacity change from 0 to 1024 [ 136.591442][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.599167][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.607895][ T4482] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 136.635360][ T4482] journal_load_superblock: Cannot read journal superblock [ 136.642674][ T4482] EXT4-fs (loop4): Could not load journal inode [ 136.674988][ T55] veth1_macvtap: left promiscuous mode [ 136.680541][ T55] veth0_macvtap: left promiscuous mode [ 136.686100][ T55] veth1_vlan: left promiscuous mode [ 136.691302][ T55] veth0_vlan: left promiscuous mode [ 136.764925][ T4488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.798572][ T4482] loop4: detected capacity change from 0 to 2048 [ 136.847517][ T4482] EXT4-fs: dax option not supported [ 137.018976][ T55] team0 (unregistering): Port device team_slave_1 removed [ 137.032599][ T55] team0 (unregistering): Port device team_slave_0 removed [ 137.151073][ T4362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.438806][ T3912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.465275][ T4516] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 137.511351][ T4520] loop4: detected capacity change from 0 to 1024 [ 137.520598][ T4520] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 137.529055][ T4520] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 137.539990][ T4520] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 137.549708][ T4520] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 137.560463][ T4520] journal_load_superblock: Cannot read journal superblock [ 137.567667][ T4520] EXT4-fs (loop4): Could not load journal inode [ 137.609496][ T4520] loop4: detected capacity change from 0 to 2048 [ 137.616377][ T4520] EXT4-fs: dax option not supported [ 137.751706][ T4532] loop4: detected capacity change from 0 to 512 [ 137.758823][ T4532] EXT4-fs (loop4): invalid journal inode [ 137.776460][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.837639][ T4535] loop3: detected capacity change from 0 to 1024 [ 137.856053][ T4535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.356194][ T4545] loop1: detected capacity change from 0 to 1024 [ 138.366136][ T4545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.524659][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.654075][ T4555] netlink: 'syz.2.260': attribute type 10 has an invalid length. [ 138.740205][ T4561] loop3: detected capacity change from 0 to 1024 [ 138.748443][ T4561] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 138.758663][ T4561] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 138.769727][ T4561] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 138.780847][ T4561] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 138.791831][ T4561] journal_load_superblock: Cannot read journal superblock [ 138.799085][ T4561] EXT4-fs (loop3): Could not load journal inode [ 138.838838][ T4561] loop3: detected capacity change from 0 to 2048 [ 138.847411][ T4565] 9pnet: Could not find request transport: fd0x0000000000000003 [ 138.855902][ T4561] EXT4-fs: dax option not supported [ 139.031968][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.100079][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.173771][ T4583] netlink: 'syz.1.272': attribute type 10 has an invalid length. [ 139.196008][ T4585] loop1: detected capacity change from 0 to 512 [ 139.203263][ T4585] EXT4-fs (loop1): invalid journal inode [ 139.266928][ T4586] loop4: detected capacity change from 0 to 1024 [ 139.287756][ T4586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.852014][ T4598] 9pnet: Could not find request transport: fd0x0000000000000003 [ 139.941654][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.952209][ T4604] loop2: detected capacity change from 0 to 1024 [ 139.960729][ T4604] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 139.979550][ T4604] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 139.990514][ T4604] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 140.000816][ T4604] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 140.007625][ T4612] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 140.061781][ T4604] journal_load_superblock: Cannot read journal superblock [ 140.069096][ T4604] EXT4-fs (loop2): Could not load journal inode [ 140.117968][ T4601] loop2: detected capacity change from 0 to 2048 [ 140.125776][ T4601] EXT4-fs: dax option not supported [ 140.284731][ T4621] loop3: detected capacity change from 0 to 1024 [ 140.385622][ T4621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.576670][ T4634] 9pnet: Could not find request transport: fd0x0000000000000003 [ 140.798858][ T4639] loop1: detected capacity change from 0 to 1024 [ 140.887867][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.926151][ T4639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.174682][ T4650] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 141.191216][ T4655] loop3: detected capacity change from 0 to 512 [ 141.205524][ T4654] loop0: detected capacity change from 0 to 1024 [ 141.216306][ T4654] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 141.230606][ T4655] EXT4-fs (loop3): invalid journal inode [ 141.239452][ T4657] 8021q: VLANs not supported on ipvlan0 [ 141.256653][ T4654] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 141.267585][ T4654] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 141.294820][ T4654] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 141.309112][ T4654] journal_load_superblock: Cannot read journal superblock [ 141.316539][ T4654] EXT4-fs (loop0): Could not load journal inode [ 141.358357][ T4663] 9pnet_fd: Insufficient options for proto=fd [ 141.368154][ T4654] loop0: detected capacity change from 0 to 2048 [ 141.380759][ T4654] EXT4-fs: dax option not supported [ 141.490235][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.607861][ T4676] loop2: detected capacity change from 0 to 1024 [ 141.650082][ T4676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.799479][ T4689] netlink: 'syz.0.309': attribute type 10 has an invalid length. [ 141.822358][ T4689] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 141.933555][ T4694] bond0: (slave bond_slave_1): Releasing backup interface [ 142.108882][ T4698] 9pnet_fd: Insufficient options for proto=fd [ 142.125624][ C0] eth0: bad gso: type: 1, size: 1408 [ 142.138873][ T4700] loop3: detected capacity change from 0 to 1024 [ 142.153644][ T4700] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 142.163056][ T4700] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 142.174016][ T4700] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 142.183759][ T4700] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.196000][ T4700] journal_load_superblock: Cannot read journal superblock [ 142.203159][ T4700] EXT4-fs (loop3): Could not load journal inode [ 142.210126][ T4696] team0: Port device team_slave_0 removed [ 142.228661][ T4700] loop3: detected capacity change from 0 to 2048 [ 142.235436][ T4700] EXT4-fs: dax option not supported [ 142.282359][ T3912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.333633][ T4710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.426090][ T4710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.436441][ T4716] netlink: 'syz.1.321': attribute type 10 has an invalid length. [ 142.571825][ T4719] loop2: detected capacity change from 0 to 1024 [ 142.651096][ T4723] loop4: detected capacity change from 0 to 512 [ 142.684042][ T4719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.749772][ T4727] 9pnet_fd: Insufficient options for proto=fd [ 142.772262][ T4723] EXT4-fs (loop4): invalid journal inode [ 142.838896][ T4733] loop3: detected capacity change from 0 to 1024 [ 142.853176][ T4733] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 142.868365][ T4733] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 142.879309][ T4733] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 142.893759][ T4733] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.907207][ T4733] journal_load_superblock: Cannot read journal superblock [ 142.914565][ T4733] EXT4-fs (loop3): Could not load journal inode [ 143.030399][ T4733] loop3: detected capacity change from 0 to 2048 [ 143.037254][ T4733] EXT4-fs: dax option not supported [ 143.162554][ T4747] loop1: detected capacity change from 0 to 1024 [ 143.169065][ T4749] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 143.195963][ T3912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.207534][ T4747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.498379][ C0] eth0: bad gso: type: 1, size: 1408 [ 143.505420][ T4765] 9pnet_fd: Insufficient options for proto=fd [ 143.653093][ T4775] loop4: detected capacity change from 0 to 1024 [ 143.662135][ T4775] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 143.690531][ T4775] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 143.701544][ T4775] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 143.712704][ T4775] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 143.723735][ T4775] journal_load_superblock: Cannot read journal superblock [ 143.730986][ T4775] EXT4-fs (loop4): Could not load journal inode [ 143.776562][ T4775] loop4: detected capacity change from 0 to 2048 [ 143.785501][ T4775] EXT4-fs: dax option not supported [ 143.859183][ T4782] netlink: 'syz.4.346': attribute type 10 has an invalid length. [ 143.904790][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.955363][ T4788] loop1: detected capacity change from 0 to 512 [ 143.963080][ T4788] EXT4-fs (loop1): invalid journal inode [ 143.977773][ T4789] loop2: detected capacity change from 0 to 1024 [ 144.064427][ T4789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.222818][ T4798] 9pnet_fd: Insufficient options for proto=fd [ 144.389966][ T4814] netlink: 'syz.0.358': attribute type 10 has an invalid length. [ 144.406568][ T4816] loop4: detected capacity change from 0 to 1024 [ 144.414221][ T4816] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 144.422909][ T4816] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 144.434248][ T4816] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 144.444361][ T4816] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 144.456203][ T4816] journal_load_superblock: Cannot read journal superblock [ 144.463364][ T4816] EXT4-fs (loop4): Could not load journal inode [ 144.544359][ T4816] loop4: detected capacity change from 0 to 2048 [ 144.552055][ T4816] EXT4-fs: dax option not supported [ 144.659675][ T3912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.678219][ T4825] loop0: detected capacity change from 0 to 1024 [ 144.698846][ T4828] 9pnet_fd: Insufficient options for proto=fd [ 144.799584][ T4825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.886261][ C0] eth0: bad gso: type: 1, size: 1408 [ 144.982394][ T4849] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 145.051825][ T4853] loop1: detected capacity change from 0 to 1024 [ 145.073655][ T4853] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 145.091452][ T4853] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 145.102564][ T4853] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 145.115526][ T4851] syz.4.371 (4851) used greatest stack depth: 10584 bytes left [ 145.130225][ T4853] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 145.147154][ T4853] journal_load_superblock: Cannot read journal superblock [ 145.154499][ T4853] EXT4-fs (loop1): Could not load journal inode [ 145.187884][ T4853] loop1: detected capacity change from 0 to 2048 [ 145.197833][ T4853] EXT4-fs: dax option not supported [ 145.349910][ T4859] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 145.376336][ T4362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.454086][ T4869] loop4: detected capacity change from 0 to 1024 [ 145.476025][ T4869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.630434][ T4874] loop0: detected capacity change from 0 to 512 [ 145.651231][ T4874] EXT4-fs (loop0): invalid journal inode [ 145.686005][ T4880] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 145.813315][ T4889] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 145.828439][ T4891] loop1: detected capacity change from 0 to 1024 [ 145.837321][ T4891] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 145.853220][ T4891] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 145.864269][ T4891] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 145.876545][ T4891] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 145.887253][ T4891] journal_load_superblock: Cannot read journal superblock [ 145.894419][ T4891] EXT4-fs (loop1): Could not load journal inode [ 145.936944][ T4891] loop1: detected capacity change from 0 to 2048 [ 145.945615][ T4891] EXT4-fs: dax option not supported [ 146.042949][ T4899] loop2: detected capacity change from 0 to 1024 [ 146.094763][ T4904] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 146.105635][ T4899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.145732][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.186066][ T4913] netlink: 48 bytes leftover after parsing attributes in process `syz.4.393'. [ 146.280407][ T4915] netlink: 'syz.4.396': attribute type 10 has an invalid length. [ 146.497976][ C0] eth0: bad gso: type: 1, size: 1408 [ 146.535435][ T4931] loop0: detected capacity change from 0 to 1024 [ 146.544150][ T4931] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 146.556689][ T4931] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 146.567729][ T4931] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 146.577470][ T4931] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 146.577722][ T4935] netlink: 'syz.4.404': attribute type 10 has an invalid length. [ 146.588555][ T4931] journal_load_superblock: Cannot read journal superblock [ 146.602689][ T4931] EXT4-fs (loop0): Could not load journal inode [ 146.626262][ T4931] loop0: detected capacity change from 0 to 2048 [ 146.632928][ T4931] EXT4-fs: dax option not supported [ 146.714926][ T3912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.744299][ T4951] loop2: detected capacity change from 0 to 512 [ 146.753568][ T4951] EXT4-fs (loop2): invalid journal inode [ 146.759847][ T4946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.409'. [ 146.794625][ T4954] loop0: detected capacity change from 0 to 1024 [ 146.806603][ T4954] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 146.818399][ T4954] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 146.829423][ T4954] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 146.866083][ T4954] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 146.877700][ T4954] journal_load_superblock: Cannot read journal superblock [ 146.884859][ T4954] EXT4-fs (loop0): Could not load journal inode [ 146.951581][ T4966] loop3: detected capacity change from 0 to 1024 [ 146.958654][ T4954] loop0: detected capacity change from 0 to 2048 [ 146.961636][ T4966] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 146.976182][ T4954] EXT4-fs: dax option not supported [ 146.984133][ T4966] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 146.995086][ T4966] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 147.010779][ T4966] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.060159][ T4966] journal_load_superblock: Cannot read journal superblock [ 147.067351][ T4966] EXT4-fs (loop3): Could not load journal inode [ 147.090302][ T4966] loop3: detected capacity change from 0 to 2048 [ 147.097058][ T4966] EXT4-fs: dax option not supported [ 147.169082][ T4978] netlink: 48 bytes leftover after parsing attributes in process `syz.1.423'. [ 147.277280][ T4988] loop0: detected capacity change from 0 to 1024 [ 147.305259][ T4988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.634831][ T5009] loop1: detected capacity change from 0 to 1024 [ 147.673302][ T5009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.720826][ C0] eth0: bad gso: type: 1, size: 1408 [ 147.752034][ T5016] netlink: 48 bytes leftover after parsing attributes in process `syz.2.435'. [ 147.832812][ T5018] loop2: detected capacity change from 0 to 1024 [ 147.849218][ T5018] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 147.880441][ T5018] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 147.891391][ T5018] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 147.923229][ T5018] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.947445][ T5018] journal_load_superblock: Cannot read journal superblock [ 147.954697][ T5018] EXT4-fs (loop2): Could not load journal inode [ 148.014691][ T4362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.043600][ T5018] loop2: detected capacity change from 0 to 2048 [ 148.053212][ T5018] EXT4-fs: dax option not supported [ 148.183406][ T5030] loop4: detected capacity change from 0 to 1024 [ 148.191994][ T5030] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 148.204882][ T5030] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.215912][ T5030] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 148.232814][ T5030] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 148.258818][ T5030] journal_load_superblock: Cannot read journal superblock [ 148.266081][ T5030] EXT4-fs (loop4): Could not load journal inode [ 148.287274][ T5035] validate_nla: 6 callbacks suppressed [ 148.287289][ T5035] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 148.306294][ T5037] loop2: detected capacity change from 0 to 512 [ 148.325463][ T5037] EXT4-fs (loop2): invalid journal inode [ 148.395073][ T5030] loop4: detected capacity change from 0 to 2048 [ 148.402091][ T5030] EXT4-fs: dax option not supported [ 148.471185][ T5045] netlink: 48 bytes leftover after parsing attributes in process `syz.0.447'. [ 148.583262][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.649851][ T5056] loop1: detected capacity change from 0 to 1024 [ 148.657396][ T5056] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 148.665739][ T5056] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.676710][ T5056] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 148.686450][ T5056] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 148.697261][ T5056] journal_load_superblock: Cannot read journal superblock [ 148.704465][ T5056] EXT4-fs (loop1): Could not load journal inode [ 148.734597][ T5056] loop1: detected capacity change from 0 to 2048 [ 148.742488][ T5056] EXT4-fs: dax option not supported [ 148.762544][ T5058] loop4: detected capacity change from 0 to 1024 [ 148.786390][ T5058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.824677][ T5066] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 148.968806][ T5076] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 148.977290][ T5076] bond0: (slave netdevsim1): Releasing backup interface [ 148.987535][ T5076] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 148.996842][ T5076] team0: Failed to send options change via netlink (err -105) [ 149.004366][ T5076] team0: Port device netdevsim1 added [ 149.066961][ T5080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.460'. [ 149.084600][ T29] audit: type=1400 audit(1721769089.539:227): avc: denied { unlink } for pid=2768 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.131874][ T5082] loop1: detected capacity change from 0 to 1024 [ 149.147461][ T5082] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 149.158049][ T5082] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.169002][ T5082] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 149.181397][ T5082] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 149.192187][ T5082] journal_load_superblock: Cannot read journal superblock [ 149.199346][ T5082] EXT4-fs (loop1): Could not load journal inode [ 149.248706][ T5082] loop1: detected capacity change from 0 to 2048 [ 149.300616][ T5084] loop2: detected capacity change from 0 to 1024 [ 149.319817][ T5082] EXT4-fs: dax option not supported [ 149.335148][ T5084] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 149.344349][ C0] eth0: bad gso: type: 1, size: 1408 [ 149.365692][ T5084] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.376649][ T5084] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 149.391134][ T5084] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 149.413082][ T5084] journal_load_superblock: Cannot read journal superblock [ 149.420588][ T5084] EXT4-fs (loop2): Could not load journal inode [ 149.445395][ T5084] loop2: detected capacity change from 0 to 2048 [ 149.453424][ T5084] EXT4-fs: dax option not supported [ 149.545410][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.556760][ T5095] loop3: detected capacity change from 0 to 1024 [ 149.588263][ T5095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.709720][ T5105] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 149.739005][ T5105] team0: Port device netdevsim1 added [ 149.783751][ T5110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 149.784111][ T5114] loop2: detected capacity change from 0 to 512 [ 149.814013][ T5114] EXT4-fs (loop2): invalid journal inode [ 149.874743][ T5121] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 149.927555][ T5121] team0: Port device netdevsim1 removed [ 149.939629][ T5124] loop0: detected capacity change from 0 to 1024 [ 149.951571][ T5121] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 149.967968][ T5124] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 149.994932][ T5124] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.005955][ T5124] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 150.052130][ T5124] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.081612][ T5124] journal_load_superblock: Cannot read journal superblock [ 150.088896][ T5124] EXT4-fs (loop0): Could not load journal inode [ 150.184344][ T5124] loop0: detected capacity change from 0 to 2048 [ 150.190968][ T5124] EXT4-fs: dax option not supported [ 150.312151][ T5133] loop1: detected capacity change from 0 to 1024 [ 150.355488][ T5133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.410619][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.560705][ T5144] netlink: 'syz.0.483': attribute type 10 has an invalid length. [ 150.569109][ T5144] bond0: (slave netdevsim1): Releasing backup interface [ 150.577482][ T5144] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 150.586626][ T5144] team0: Failed to send options change via netlink (err -105) [ 150.594223][ T5144] team0: Port device netdevsim1 added [ 150.741109][ C0] eth0: bad gso: type: 1, size: 1408 [ 150.753259][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 150.801638][ T5162] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 150.810849][ T5161] loop2: detected capacity change from 0 to 1024 [ 150.819667][ T5161] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 150.836316][ T5162] team0: Port device netdevsim1 removed [ 150.843975][ T5161] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.854995][ T5161] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 150.866838][ T5162] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 150.896025][ T5161] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.921584][ T5161] journal_load_superblock: Cannot read journal superblock [ 150.928913][ T5161] EXT4-fs (loop2): Could not load journal inode [ 151.012414][ T5172] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 151.042906][ T5161] loop2: detected capacity change from 0 to 2048 [ 151.052055][ T5172] team0: Port device netdevsim1 added [ 151.058910][ T5161] EXT4-fs: dax option not supported [ 151.230492][ T5183] loop4: detected capacity change from 0 to 512 [ 151.243109][ T5181] loop0: detected capacity change from 0 to 1024 [ 151.252275][ T5183] EXT4-fs (loop4): invalid journal inode [ 151.282209][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.325265][ T5181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.387820][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 151.463316][ T5199] netlink: 'syz.3.504': attribute type 10 has an invalid length. [ 151.488960][ T5203] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 151.497602][ T5203] bond0: (slave netdevsim1): Releasing backup interface [ 151.519158][ T5203] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 151.529323][ T5203] team0: Failed to send options change via netlink (err -105) [ 151.536822][ T5203] team0: Port device netdevsim1 added [ 151.590488][ T5207] loop1: detected capacity change from 0 to 1024 [ 151.609948][ T5207] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 151.618602][ T5207] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.629934][ T5207] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 151.642016][ T5207] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 151.652960][ T5207] journal_load_superblock: Cannot read journal superblock [ 151.660153][ T5207] EXT4-fs (loop1): Could not load journal inode [ 151.707749][ T5207] loop1: detected capacity change from 0 to 2048 [ 151.715599][ T5207] EXT4-fs: dax option not supported [ 151.995624][ T4362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.024402][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 152.066299][ T5227] team0: Port device netdevsim1 removed [ 152.097871][ T5232] team0: Port device netdevsim1 added [ 152.152689][ C0] eth0: bad gso: type: 1, size: 1408 [ 152.158343][ C0] eth0: bad gso: type: 1, size: 1408 [ 152.174034][ T5243] loop2: detected capacity change from 0 to 1024 [ 152.187182][ T5243] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 152.212369][ T5243] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.223362][ T5243] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 152.235103][ T5243] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 152.268301][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'. [ 152.272748][ T5243] journal_load_superblock: Cannot read journal superblock [ 152.284338][ T5243] EXT4-fs (loop2): Could not load journal inode [ 152.326392][ T5243] loop2: detected capacity change from 0 to 2048 [ 152.332976][ T5243] EXT4-fs: dax option not supported [ 152.400822][ T5263] loop2: detected capacity change from 0 to 512 [ 152.407959][ T5263] EXT4-fs (loop2): invalid journal inode [ 152.538739][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 152.590122][ T5278] loop1: detected capacity change from 0 to 1024 [ 152.597398][ T5278] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 152.605724][ T5278] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.617141][ T5278] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 152.626935][ T5278] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 152.637944][ T5278] journal_load_superblock: Cannot read journal superblock [ 152.645140][ T5278] EXT4-fs (loop1): Could not load journal inode [ 152.678852][ T5278] loop1: detected capacity change from 0 to 2048 [ 152.685678][ T5278] EXT4-fs: dax option not supported [ 152.763368][ T5290] loop1: detected capacity change from 0 to 1024 [ 152.775437][ T5290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.796194][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.840850][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 152.959445][ T5307] bond0: (slave netdevsim1): Releasing backup interface [ 152.969470][ T5307] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 152.978862][ T5307] team0: Failed to send options change via netlink (err -105) [ 152.986369][ T5307] team0: Port device netdevsim1 added [ 153.061072][ T5314] loop3: detected capacity change from 0 to 1024 [ 153.062584][ T5319] loop4: detected capacity change from 0 to 1024 [ 153.077291][ T5314] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 153.089962][ T5314] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.100951][ T5314] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 153.111572][ T5314] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 153.112165][ T5319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.123533][ T5314] journal_load_superblock: Cannot read journal superblock [ 153.141637][ T5314] EXT4-fs (loop3): Could not load journal inode [ 153.163501][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.197407][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 153.202074][ T5314] loop3: detected capacity change from 0 to 2048 [ 153.224975][ T5314] EXT4-fs: dax option not supported [ 153.282326][ C0] eth0: bad gso: type: 1, size: 1408 [ 153.295500][ T5338] validate_nla: 6 callbacks suppressed [ 153.295511][ T5338] netlink: 'syz.2.566': attribute type 10 has an invalid length. [ 153.309938][ C0] eth0: bad gso: type: 1, size: 1408 [ 153.317291][ T5338] team0: Port device netdevsim1 removed [ 153.426731][ T5352] loop3: detected capacity change from 0 to 1024 [ 153.436446][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 153.446078][ T5352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.484457][ T5361] loop4: detected capacity change from 0 to 512 [ 153.492166][ T5361] EXT4-fs (loop4): invalid journal inode [ 153.501862][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.538930][ T5364] loop3: detected capacity change from 0 to 1024 [ 153.547624][ T5364] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 153.563315][ T5364] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.574272][ T5364] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 153.585336][ T5364] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 153.596332][ T5364] journal_load_superblock: Cannot read journal superblock [ 153.603509][ T5364] EXT4-fs (loop3): Could not load journal inode [ 153.622998][ T5364] loop3: detected capacity change from 0 to 2048 [ 153.629621][ T5364] EXT4-fs: dax option not supported [ 153.666584][ T5367] netlink: 'syz.3.577': attribute type 10 has an invalid length. [ 153.717410][ T5373] netlink: 'syz.3.580': attribute type 10 has an invalid length. [ 153.727380][ T5373] team0: Port device netdevsim1 removed [ 153.735609][ T5373] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 153.817151][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 153.945469][ T5392] loop0: detected capacity change from 0 to 1024 [ 153.956027][ T5392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.001937][ T4362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.021791][ T5398] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 154.032546][ T5398] bond0: (slave netdevsim1): Releasing backup interface [ 154.040983][ T5398] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 154.050369][ T5398] team0: Failed to send options change via netlink (err -105) [ 154.057862][ T5398] team0: Port device netdevsim1 added [ 154.083114][ T5400] loop1: detected capacity change from 0 to 1024 [ 154.095239][ T5400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.122362][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.238014][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 154.255405][ T5417] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 154.271113][ T5417] team0: Port device netdevsim1 removed [ 154.280506][ T5417] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 154.311953][ T5426] netlink: 'syz.1.600': attribute type 10 has an invalid length. [ 154.327729][ T5426] bond0: (slave netdevsim1): Releasing backup interface [ 154.337228][ T5426] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 154.347429][ T5426] team0: Failed to send options change via netlink (err -105) [ 154.355151][ T5426] team0: Port device netdevsim1 added [ 154.361415][ C0] eth0: bad gso: type: 1, size: 1408 [ 154.457401][ T5429] loop4: detected capacity change from 0 to 1024 [ 154.537373][ T5439] loop4: detected capacity change from 0 to 1024 [ 154.612947][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 154.653572][ T29] audit: type=1400 audit(1721769095.099:228): avc: denied { mount } for pid=5452 comm="syz.3.609" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 154.678550][ T5453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5453 comm=syz.3.609 [ 154.704006][ T5457] loop4: detected capacity change from 0 to 512 [ 154.711066][ T5457] EXT4-fs (loop4): invalid journal inode [ 154.725671][ T29] audit: type=1400 audit(1721769095.179:229): avc: denied { unmount } for pid=3659 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 154.755423][ T5459] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 154.785849][ T5461] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 154.794253][ T5461] bond0: (slave netdevsim1): Releasing backup interface [ 154.802720][ T5461] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 154.812022][ T5461] team0: Failed to send options change via netlink (err -105) [ 154.819529][ T5461] team0: Port device netdevsim1 added [ 154.839187][ T5464] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 154.850142][ T5464] team0: Port device netdevsim1 removed [ 154.857575][ T5464] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 154.950634][ T5466] loop3: detected capacity change from 0 to 1024 [ 155.038212][ T5477] loop3: detected capacity change from 0 to 1024 [ 155.126826][ T5491] loop0: detected capacity change from 0 to 128 [ 155.162568][ T5491] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.171131][ T5495] netlink: 'syz.2.624': attribute type 10 has an invalid length. [ 155.202838][ T5495] team0: Port device netdevsim1 added [ 155.213644][ T29] audit: type=1400 audit(1721769095.659:230): avc: denied { create } for pid=5490 comm="syz.0.623" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 155.271287][ T29] audit: type=1400 audit(1721769095.659:231): avc: denied { remove_name } for pid=5490 comm="syz.0.623" name="file0" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.293862][ T29] audit: type=1400 audit(1721769095.659:232): avc: denied { rmdir } for pid=5490 comm="syz.0.623" name="file0" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 155.325448][ T5500] team0: Port device netdevsim1 removed [ 155.416467][ T29] audit: type=1400 audit(1721769095.869:233): avc: denied { search } for pid=5490 comm="syz.0.623" name="/" dev="configfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 155.465131][ T5508] loop2: detected capacity change from 0 to 1024 [ 155.597485][ C0] eth0: bad gso: type: 1, size: 1408 [ 155.966005][ T5531] bond0: (slave netdevsim1): Releasing backup interface [ 155.985341][ T5531] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 155.994677][ T5531] team0: Failed to send options change via netlink (err -105) [ 156.002152][ T5531] team0: Port device netdevsim1 added [ 156.039078][ T5535] team0: Port device netdevsim1 removed [ 156.048137][ T5535] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 156.168744][ T5542] loop3: detected capacity change from 0 to 1024 [ 156.250037][ T5552] loop3: detected capacity change from 0 to 512 [ 156.259562][ T5552] EXT4-fs (loop3): invalid journal inode [ 156.425384][ T5562] loop2: detected capacity change from 0 to 256 [ 156.433316][ T29] audit: type=1400 audit(1721769096.879:234): avc: denied { mount } for pid=5561 comm="syz.2.648" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 156.486031][ T5566] team0: Port device netdevsim1 removed [ 156.552127][ T29] audit: type=1400 audit(1721769096.999:235): avc: denied { unmount } for pid=3912 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 156.591515][ T5574] loop2: detected capacity change from 0 to 1024 [ 156.598418][ T5574] EXT4-fs: Ignoring removed orlov option [ 156.619989][ T29] audit: type=1400 audit(1721769097.069:236): avc: denied { setattr } for pid=5572 comm="syz.2.653" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.762798][ T5580] loop2: detected capacity change from 0 to 1024 [ 156.842625][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 157.043435][ T5593] chnl_net:caif_netlink_parms(): no params data found [ 157.073706][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.081487][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.090690][ T5593] bridge_slave_0: entered allmulticast mode [ 157.097393][ T5593] bridge_slave_0: entered promiscuous mode [ 157.104439][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.111491][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.118818][ T5593] bridge_slave_1: entered allmulticast mode [ 157.125369][ T5593] bridge_slave_1: entered promiscuous mode [ 157.147796][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.159257][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.180860][ T5593] team0: Port device team_slave_0 added [ 157.187960][ T5593] team0: Port device team_slave_1 added [ 157.196975][ C0] eth0: bad gso: type: 1, size: 1408 [ 157.211949][ T5616] loop1: detected capacity change from 0 to 256 [ 157.219594][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.226671][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.252649][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.258771][ T29] audit: type=1400 audit(1721769097.709:237): avc: denied { map } for pid=5615 comm="syz.1.664" path="socket:[13304]" dev="sockfs" ino=13304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.264201][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.294243][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.294308][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.345843][ T5593] hsr_slave_0: entered promiscuous mode [ 157.352605][ T5593] hsr_slave_1: entered promiscuous mode [ 157.358830][ T5593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.367496][ T5593] Cannot create hsr debugfs directory [ 157.397235][ T5622] loop3: detected capacity change from 0 to 1764 [ 157.435034][ T5622] iso9660: Unknown parameter '1844674407370955161500000000000000000000$' [ 157.470287][ T5593] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.565075][ T5593] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.590302][ T5627] loop4: detected capacity change from 0 to 1024 [ 157.616498][ T5627] EXT4-fs mount: 18 callbacks suppressed [ 157.616514][ T5627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.732721][ T5593] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.805577][ T5593] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.834735][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 157.844434][ T5640] bond0: (slave netdevsim1): Releasing backup interface [ 157.852672][ T5640] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 157.861879][ T5640] team0: Failed to send options change via netlink (err -105) [ 157.869452][ T5640] team0: Port device netdevsim1 added [ 157.916957][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.919963][ T5645] loop3: detected capacity change from 0 to 512 [ 157.932896][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.940309][ T5645] EXT4-fs (loop3): invalid journal inode [ 157.948934][ T5648] team0: Port device netdevsim1 removed [ 157.959997][ T5648] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 157.969104][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.985664][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.039067][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.053620][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.077641][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.084761][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.104064][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.111145][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.185867][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.250089][ T5650] chnl_net:caif_netlink_parms(): no params data found [ 158.271231][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.313218][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.320353][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.329484][ T5650] bridge_slave_0: entered allmulticast mode [ 158.336415][ T5650] bridge_slave_0: entered promiscuous mode [ 158.343525][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.350779][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.360753][ T5650] bridge_slave_1: entered allmulticast mode [ 158.367524][ T5650] bridge_slave_1: entered promiscuous mode [ 158.386562][ T5593] veth0_vlan: entered promiscuous mode [ 158.403333][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.413751][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.424071][ T5593] veth1_vlan: entered promiscuous mode [ 158.441767][ T5650] team0: Port device team_slave_0 added [ 158.448381][ T5650] team0: Port device team_slave_1 added [ 158.463669][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.470799][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.496740][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.508212][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.515249][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.541160][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.570325][ T5593] veth0_macvtap: entered promiscuous mode [ 158.590066][ T5650] hsr_slave_0: entered promiscuous mode [ 158.597124][ T5650] hsr_slave_1: entered promiscuous mode [ 158.603349][ T5650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.611521][ T5650] Cannot create hsr debugfs directory [ 158.618386][ T5593] veth1_macvtap: entered promiscuous mode [ 158.633501][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.644123][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.654053][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.664534][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.674386][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.684911][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.694736][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.705160][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.715072][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.725496][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.736626][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.745295][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.755829][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.765873][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.776641][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.786522][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.797123][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.807019][ T5593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.817564][ T5593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.867033][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.892515][ T5689] validate_nla: 11 callbacks suppressed [ 158.892528][ T5689] netlink: 'syz.3.680': attribute type 10 has an invalid length. [ 158.918253][ C0] eth0: bad gso: type: 1, size: 1408 [ 158.926229][ T5691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 158.942142][ T5593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.950923][ T5593] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.959902][ T5593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.968696][ T5593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.016928][ T5650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.271787][ T5707] loop3: detected capacity change from 0 to 1024 [ 159.300027][ T5650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.311961][ T5707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.378179][ T5650] bond0: (slave netdevsim1): Releasing backup interface [ 159.391985][ T5650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.438568][ T5650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.576036][ T5650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.584625][ T5650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.593383][ T5650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.602150][ T5650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.655262][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.662899][ T5713] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 159.674119][ T5713] team0: Port device netdevsim1 removed [ 159.681967][ T5713] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 159.700487][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.711494][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.718679][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.731608][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 159.731622][ T29] audit: type=1400 audit(1721769100.179:247): avc: denied { read } for pid=5716 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 159.742143][ T5650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.767350][ T5650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.779850][ T3165] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.780047][ T29] audit: type=1400 audit(1721769100.229:248): avc: denied { create } for pid=5716 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.786942][ T3165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.814640][ T29] audit: type=1400 audit(1721769100.239:249): avc: denied { write } for pid=5716 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.855602][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.902903][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.929733][ T5729] loop3: detected capacity change from 0 to 512 [ 159.944351][ T5729] EXT4-fs (loop3): invalid journal inode [ 159.958631][ T5732] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 159.978891][ T5732] team0: Failed to send options change via netlink (err -105) [ 159.986473][ T5732] team0: Port device netdevsim1 added [ 160.000431][ T4061] bridge_slave_1: left allmulticast mode [ 160.006136][ T4061] bridge_slave_1: left promiscuous mode [ 160.011812][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.039579][ T4061] bridge_slave_0: left allmulticast mode [ 160.045312][ T4061] bridge_slave_0: left promiscuous mode [ 160.051069][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.141019][ T5744] loop1: detected capacity change from 0 to 256 [ 160.150942][ T5744] FAULT_INJECTION: forcing a failure. [ 160.150942][ T5744] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.164101][ T5744] CPU: 0 UID: 0 PID: 5744 Comm: syz.1.695 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 160.174335][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 160.184385][ T5744] Call Trace: [ 160.187656][ T5744] [ 160.190584][ T5744] dump_stack_lvl+0xf2/0x150 [ 160.195204][ T5744] dump_stack+0x15/0x20 [ 160.199392][ T5744] should_fail_ex+0x229/0x230 [ 160.204092][ T5744] should_fail+0xb/0x10 [ 160.208305][ T5744] should_fail_usercopy+0x1a/0x20 [ 160.213314][ T5744] strncpy_from_user+0x25/0x270 [ 160.218145][ T5744] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 160.223779][ T5744] getname_flags+0xb0/0x3b0 [ 160.228341][ T5744] getname+0x17/0x20 [ 160.232217][ T5744] do_sys_openat2+0x67/0x120 [ 160.236856][ T5744] __x64_sys_openat+0xf3/0x120 [ 160.241749][ T5744] x64_sys_call+0x1ac/0x2e00 [ 160.246378][ T5744] do_syscall_64+0xc9/0x1c0 [ 160.250898][ T5744] ? clear_bhb_loop+0x55/0xb0 [ 160.255559][ T5744] ? clear_bhb_loop+0x55/0xb0 [ 160.260210][ T5744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.266230][ T5744] RIP: 0033:0x7f7ecb7d5f19 [ 160.270619][ T5744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.290214][ T5744] RSP: 002b:00007f7eca457048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 160.298713][ T5744] RAX: ffffffffffffffda RBX: 00007f7ecb965f60 RCX: 00007f7ecb7d5f19 [ 160.306750][ T5744] RDX: 000000000000275a RSI: 0000000020000080 RDI: ffffffffffffff9c [ 160.314699][ T5744] RBP: 00007f7eca4570a0 R08: 0000000000000000 R09: 0000000000000000 [ 160.322647][ T5744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.330610][ T5744] R13: 000000000000000b R14: 00007f7ecb965f60 R15: 00007fff1cce69e8 [ 160.338575][ T5744] [ 160.363414][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'. [ 160.363879][ T29] audit: type=1400 audit(1721769100.809:250): avc: denied { setopt } for pid=5746 comm="syz.1.696" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.395350][ T29] audit: type=1400 audit(1721769100.829:251): avc: denied { connect } for pid=5746 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.467325][ T5750] netlink: 'syz.1.697': attribute type 10 has an invalid length. [ 160.481343][ T5650] veth0_vlan: entered promiscuous mode [ 160.494614][ T5650] veth1_vlan: entered promiscuous mode [ 160.525722][ T5650] veth0_macvtap: entered promiscuous mode [ 160.533608][ T5650] veth1_macvtap: entered promiscuous mode [ 160.544761][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.555443][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.565575][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.576459][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.586419][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.596941][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.606781][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.617327][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.627155][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.637706][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.647597][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.658088][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.669808][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.681514][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.691997][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.701833][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.712278][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.722143][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.732564][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.743089][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.754051][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.764221][ T5650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.775191][ T5650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.788170][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.796060][ T5758] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 160.816074][ T5650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.824937][ T5650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.833913][ T5650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.842901][ T5650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.911399][ T4061] hsr_slave_0: left promiscuous mode [ 160.918303][ T4061] hsr_slave_1: left promiscuous mode [ 160.931082][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.938971][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.013081][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.020616][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.037910][ T5770] loop3: detected capacity change from 0 to 1024 [ 161.083734][ T4061] veth1_macvtap: left promiscuous mode [ 161.089314][ T4061] veth0_macvtap: left promiscuous mode [ 161.094883][ T4061] veth1_vlan: left promiscuous mode [ 161.100085][ T4061] veth0_vlan: left promiscuous mode [ 161.106523][ T5770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.139489][ T5778] loop4: detected capacity change from 0 to 512 [ 161.156930][ T5778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 161.171470][ T5778] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.205423][ T29] audit: type=1400 audit(1721769101.659:252): avc: denied { create } for pid=5777 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.246901][ T5778] syz.4.704 (5778) used greatest stack depth: 10288 bytes left [ 161.256090][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 161.291947][ T29] audit: type=1400 audit(1721769101.739:253): avc: denied { read write } for pid=5783 comm="syz.4.706" name="rdma_cm" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.315518][ T29] audit: type=1400 audit(1721769101.749:254): avc: denied { open } for pid=5783 comm="syz.4.706" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.339910][ T29] audit: type=1400 audit(1721769101.769:255): avc: denied { getopt } for pid=5785 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 161.346261][ C0] eth0: bad gso: type: 1, size: 1408 [ 161.359348][ T29] audit: type=1400 audit(1721769101.769:256): avc: denied { create } for pid=5785 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.385156][ T4061] team0 (unregistering): Port device team_slave_1 removed [ 161.387243][ T5786] loop4: detected capacity change from 0 to 128 [ 161.399080][ T4061] team0 (unregistering): Port device team_slave_0 removed [ 161.399285][ T5786] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 161.430629][ T5786] FAT-fs (loop4): FAT read failed (blocknr 128) [ 161.448380][ T5786] FAT-fs (loop4): FAT read failed (blocknr 128) [ 161.497153][ T5790] netlink: 'syz.4.708': attribute type 10 has an invalid length. [ 161.510014][ T5792] loop1: detected capacity change from 0 to 512 [ 161.519257][ T5794] netlink: 'syz.4.711': attribute type 10 has an invalid length. [ 161.524416][ T5792] EXT4-fs (loop1): invalid journal inode [ 161.545612][ T5794] team0: Port device netdevsim1 added [ 161.682235][ T5807] loop0: detected capacity change from 0 to 128 [ 161.712510][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.815060][ T4061] bridge_slave_1: left allmulticast mode [ 161.820701][ T4061] bridge_slave_1: left promiscuous mode [ 161.826510][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.834439][ T4061] bridge_slave_0: left allmulticast mode [ 161.840100][ T4061] bridge_slave_0: left promiscuous mode [ 161.845767][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.926196][ T4061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.936371][ T4061] bond0 (unregistering): Released all slaves [ 161.966597][ T5821] netlink: 'syz.3.721': attribute type 10 has an invalid length. [ 161.975078][ T5821] team0: Port device netdevsim1 removed [ 161.982450][ T5821] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 161.998019][ C0] eth0: bad gso: type: 1, size: 1408 [ 162.004448][ C0] eth0: bad gso: type: 1, size: 1408 [ 162.025051][ T5825] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 162.036353][ T5825] bond0: (slave netdevsim1): Releasing backup interface [ 162.044943][ T5825] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 162.057747][ T5825] team0: Failed to send options change via netlink (err -105) [ 162.065335][ T5825] team0: Port device netdevsim1 added [ 162.073582][ T4061] hsr_slave_0: left promiscuous mode [ 162.081189][ T4061] hsr_slave_1: left promiscuous mode [ 162.087369][ T4061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.094821][ T4061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.108105][ T4061] veth1_macvtap: left promiscuous mode [ 162.113631][ T4061] veth0_macvtap: left promiscuous mode [ 162.119336][ T4061] veth1_vlan: left promiscuous mode [ 162.124601][ T4061] veth0_vlan: left promiscuous mode [ 162.166058][ T5836] FAULT_INJECTION: forcing a failure. [ 162.166058][ T5836] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 162.179423][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz.3.728 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 162.189687][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.199755][ T5836] Call Trace: [ 162.203023][ T5836] [ 162.205947][ T5836] dump_stack_lvl+0xf2/0x150 [ 162.210570][ T5836] dump_stack+0x15/0x20 [ 162.214861][ T5836] should_fail_ex+0x229/0x230 [ 162.219611][ T5836] should_fail_alloc_page+0xfd/0x110 [ 162.223001][ C0] eth0: bad gso: type: 1, size: 1408 [ 162.224904][ T5836] __alloc_pages_noprof+0x109/0x360 [ 162.224936][ T5836] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 162.240805][ T5836] alloc_pages_noprof+0xe1/0x100 [ 162.245839][ T5836] get_zeroed_page_noprof+0x17/0x40 [ 162.251109][ T5836] mon_bin_ioctl+0x44a/0x910 [ 162.255710][ T5836] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 162.260883][ T5836] __se_sys_ioctl+0xd3/0x150 [ 162.265474][ T5836] __x64_sys_ioctl+0x43/0x50 [ 162.270052][ T5836] x64_sys_call+0x1688/0x2e00 [ 162.274720][ T5836] do_syscall_64+0xc9/0x1c0 [ 162.279273][ T5836] ? clear_bhb_loop+0x55/0xb0 [ 162.283962][ T5836] ? clear_bhb_loop+0x55/0xb0 [ 162.288683][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.294599][ T5836] RIP: 0033:0x7f30b1845f19 [ 162.299159][ T5836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.318834][ T5836] RSP: 002b:00007f30b04c7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.327233][ T5836] RAX: ffffffffffffffda RBX: 00007f30b19d5f60 RCX: 00007f30b1845f19 [ 162.335261][ T5836] RDX: 00000000000b70ae RSI: 0000000000009204 RDI: 0000000000000003 [ 162.343219][ T5836] RBP: 00007f30b04c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.351245][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.359207][ T5836] R13: 000000000000000b R14: 00007f30b19d5f60 R15: 00007ffce3c22dc8 [ 162.367214][ T5836] [ 162.423024][ T4061] team0 (unregistering): Port device team_slave_1 removed [ 162.519719][ T5843] loop1: detected capacity change from 0 to 128 [ 162.599696][ T5844] loop3: detected capacity change from 0 to 1024 [ 162.614897][ T5844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.667557][ C0] eth0: bad gso: type: 1, size: 1408 [ 162.685576][ T5849] loop1: detected capacity change from 0 to 512 [ 162.694640][ T5851] netlink: 'syz.0.733': attribute type 10 has an invalid length. [ 162.715848][ T5849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.738378][ T5851] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 162.757336][ T5849] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.802103][ T5855] bond0: (slave netdevsim1): Releasing backup interface [ 162.811774][ T5855] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 162.820969][ T5855] team0: Failed to send options change via netlink (err -105) [ 162.828538][ T5855] team0: Port device netdevsim1 added [ 163.271997][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.518587][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.538326][ T5878] loop1: detected capacity change from 0 to 512 [ 163.545911][ T5878] EXT4-fs (loop1): invalid journal inode [ 164.207945][ T5881] loop3: detected capacity change from 0 to 128 [ 164.261930][ T5885] validate_nla: 1 callbacks suppressed [ 164.261940][ T5885] netlink: 'syz.4.745': attribute type 10 has an invalid length. [ 164.285838][ C0] eth0: bad gso: type: 1, size: 1408 [ 164.403562][ T5892] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 164.453950][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.749'. [ 164.467877][ T5900] loop4: detected capacity change from 0 to 1024 [ 164.485711][ T5900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.503744][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.749'. [ 165.183395][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.196446][ T5917] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 165.220480][ T5919] loop2: detected capacity change from 0 to 164 [ 165.225131][ T5921] loop4: detected capacity change from 0 to 128 [ 165.233495][ T5919] Unable to read rock-ridge attributes [ 165.242451][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 165.242464][ T29] audit: type=1400 audit(1721769105.689:290): avc: denied { mount } for pid=5918 comm="syz.2.757" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 165.309673][ T5923] loop4: detected capacity change from 0 to 512 [ 165.317882][ T5923] EXT4-fs (loop4): invalid journal inode [ 165.429726][ T29] audit: type=1400 audit(1721769105.879:291): avc: denied { bind } for pid=5918 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.441952][ T5931] loop1: detected capacity change from 0 to 512 [ 165.465754][ T5931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.479099][ T5931] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.491425][ T5931] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.760: corrupted inode contents [ 165.504042][ T5931] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz.1.760: mark_inode_dirty error [ 165.515643][ T5931] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.760: corrupted inode contents [ 165.525595][ T29] audit: type=1400 audit(1721769105.969:292): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 165.553571][ T5931] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.760: mark_inode_dirty error [ 165.605592][ T5937] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 165.629340][ T29] audit: type=1400 audit(1721769106.079:293): avc: denied { create } for pid=5930 comm="syz.1.760" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.629992][ T5938] vhci_hcd: invalid port number 32 [ 165.650288][ T29] audit: type=1400 audit(1721769106.079:294): avc: denied { append } for pid=5930 comm="syz.1.760" name="001" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.180079][ T5955] loop3: detected capacity change from 0 to 1024 [ 166.196552][ T5955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.234812][ T5959] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 166.380141][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.415379][ T5961] bridge_slave_1 (unregistering): left allmulticast mode [ 166.422590][ T5961] bridge_slave_1 (unregistering): left promiscuous mode [ 166.429600][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.441913][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.524986][ T5972] loop0: detected capacity change from 0 to 764 [ 166.586487][ T5979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5979 comm=syz.2.776 [ 166.602295][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.612845][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.622750][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.633178][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.642996][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.653510][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.663346][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.673791][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.683700][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.694163][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.711164][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.795968][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.915944][ T5983] netlink: 'syz.2.778': attribute type 10 has an invalid length. [ 166.926679][ T3659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.027831][ T5986] hsr_slave_0 (unregistering): left promiscuous mode [ 167.046738][ T5991] loop3: detected capacity change from 0 to 512 [ 167.053797][ T5991] EXT4-fs (loop3): invalid journal inode [ 167.144037][ T5993] loop2: detected capacity change from 0 to 512 [ 167.216909][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.249977][ T5993] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.269812][ T29] audit: type=1400 audit(1721769107.719:295): avc: denied { read write } for pid=5992 comm="syz.2.781" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.292518][ T29] audit: type=1400 audit(1721769107.719:296): avc: denied { open } for pid=5992 comm="syz.2.781" path="/16/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.321241][ T6000] loop4: detected capacity change from 0 to 1024 [ 167.339183][ T6000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.347603][ T29] audit: type=1400 audit(1721769107.769:297): avc: denied { mounton } for pid=5992 comm="syz.2.781" path="/16/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.374092][ T29] audit: type=1400 audit(1721769107.769:298): avc: denied { mounton } for pid=5992 comm="syz.2.781" path="/16/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 167.397360][ T29] audit: type=1400 audit(1721769107.829:299): avc: denied { rmdir } for pid=5593 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.397541][ T6000] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 167.433407][ T5593] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /16/bus/file0/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.486467][ T6010] loop0: detected capacity change from 0 to 1024 [ 167.493020][ T6010] EXT4-fs: Ignoring removed nobh option [ 167.507177][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.525185][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.594027][ T6010] loop0: detected capacity change from 1024 to 0 [ 167.601911][ T6010] syz.0.786: attempt to access beyond end of device [ 167.601911][ T6010] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 167.630852][ T6010] syz.0.786: attempt to access beyond end of device [ 167.630852][ T6010] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 167.649175][ T6010] syz.0.786: attempt to access beyond end of device [ 167.649175][ T6010] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 167.662579][ T6010] syz.0.786: attempt to access beyond end of device [ 167.662579][ T6010] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 167.677068][ T6010] syz.0.786: attempt to access beyond end of device [ 167.677068][ T6010] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 167.690508][ T6010] syz.0.786: attempt to access beyond end of device [ 167.690508][ T6010] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 167.703947][ T6010] syz.0.786: attempt to access beyond end of device [ 167.703947][ T6010] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 167.717291][ T6010] syz.0.786: attempt to access beyond end of device [ 167.717291][ T6010] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 167.734522][ T6017] loop4: detected capacity change from 0 to 1024 [ 167.741275][ T6010] syz.0.786: attempt to access beyond end of device [ 167.741275][ T6010] loop0: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 167.754933][ T6010] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #18: block 9: comm syz.0.786: unable to read itable block [ 167.767710][ T6010] syz.0.786: attempt to access beyond end of device [ 167.767710][ T6010] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 167.780859][ T6010] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 167.790650][ T6017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.803947][ T6010] EXT4-fs (loop0): I/O error while writing superblock [ 167.810748][ T6010] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 167.819838][ T6010] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 167.828245][ T6010] EXT4-fs (loop0): I/O error while writing superblock [ 167.835106][ T6010] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #18: comm syz.0.786: mark_inode_dirty error [ 167.846426][ T6010] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 167.854704][ T6010] EXT4-fs (loop0): I/O error while writing superblock [ 167.861854][ T6009] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #18: block 9: comm syz.0.786: unable to read itable block [ 167.875471][ T6009] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 167.883797][ T6009] EXT4-fs (loop0): I/O error while writing superblock [ 167.890668][ T6009] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 167.936385][ T6009] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 167.943628][ T6021] netlink: 'syz.3.789': attribute type 10 has an invalid length. [ 167.944894][ T6009] EXT4-fs (loop0): I/O error while writing superblock [ 167.959374][ T6009] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #18: comm syz.0.786: mark_inode_dirty error [ 167.971124][ T6009] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 167.979546][ T6009] EXT4-fs (loop0): I/O error while writing superblock [ 167.987245][ T6009] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #18: block 9: comm syz.0.786: unable to read itable block [ 168.000364][ T6009] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 168.008786][ T6009] EXT4-fs (loop0): I/O error while writing superblock [ 168.017343][ T6010] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #18: block 9: comm syz.0.786: unable to read itable block [ 168.030020][ T6010] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 168.038364][ T6010] EXT4-fs (loop0): I/O error while writing superblock [ 168.045140][ T6010] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 168.053834][ T6010] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 168.062198][ T6010] EXT4-fs (loop0): I/O error while writing superblock [ 168.069045][ T6010] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #18: comm syz.0.786: mark_inode_dirty error [ 168.080322][ T6010] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 168.279449][ T6033] netlink: 'syz.1.794': attribute type 10 has an invalid length. [ 168.304771][ T6035] loop1: detected capacity change from 0 to 512 [ 168.314619][ T6035] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.795: corrupted in-inode xattr: invalid ea_ino [ 168.333202][ T6035] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.795: couldn't read orphan inode 12 (err -117) [ 168.346880][ T6035] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.370329][ T3739] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 168.474942][ T3541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.648879][ T6060] loop4: detected capacity change from 0 to 512 [ 168.658220][ T6060] EXT4-fs (loop4): invalid journal inode [ 168.747587][ T6046] chnl_net:caif_netlink_parms(): no params data found [ 168.808902][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.816015][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.824521][ T6046] bridge_slave_0: entered allmulticast mode [ 168.830826][ T6046] bridge_slave_0: entered promiscuous mode [ 168.839301][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.846473][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.854077][ T6046] bridge_slave_1: entered allmulticast mode [ 168.861189][ T6046] bridge_slave_1: entered promiscuous mode [ 168.879709][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.891107][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.910542][ T6046] team0: Port device team_slave_0 added [ 168.918231][ T6046] team0: Port device team_slave_1 added [ 168.935317][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.942299][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.968244][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.981326][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.988290][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.014332][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.034702][ T6068] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 169.079512][ T6046] hsr_slave_0: entered promiscuous mode [ 169.085584][ T6046] hsr_slave_1: entered promiscuous mode [ 169.167035][ T6046] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.208866][ T6046] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.293710][ T6078] netlink: 'syz.1.805': attribute type 10 has an invalid length. [ 169.315434][ T6046] team0: Port device netdevsim1 removed [ 169.322635][ T6046] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.347116][ T6082] loop1: detected capacity change from 0 to 128 [ 169.355526][ T6082] vfat: Unknown parameter '0x0000000000000000ÿÿÿÿÿÿ' [ 169.387031][ T6082] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 169.411638][ T6046] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.547006][ T50] bridge_slave_0: left allmulticast mode [ 169.552711][ T50] bridge_slave_0: left promiscuous mode [ 169.558517][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.571262][ T6085] loop1: detected capacity change from 0 to 1024 [ 169.585843][ T6085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.688247][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.698905][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.710368][ T50] bond0 (unregistering): Released all slaves [ 169.748063][ T6046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.846719][ T6046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.856468][ T6046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.865349][ T6046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.886724][ T50] hsr_slave_0: left promiscuous mode [ 169.892917][ T50] hsr_slave_1: left promiscuous mode [ 169.902174][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.909628][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.918418][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.926004][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.936853][ T50] veth1_macvtap: left promiscuous mode [ 169.942334][ T50] veth0_macvtap: left promiscuous mode [ 169.947858][ T50] veth1_vlan: left promiscuous mode [ 169.953220][ T50] veth0_vlan: left promiscuous mode [ 170.039835][ T50] team0 (unregistering): Port device team_slave_1 removed [ 170.051574][ T50] team0 (unregistering): Port device team_slave_0 removed [ 170.110581][ T6096] FAULT_INJECTION: forcing a failure. [ 170.110581][ T6096] name failslab, interval 1, probability 0, space 0, times 0 [ 170.123244][ T6096] CPU: 0 UID: 0 PID: 6096 Comm: syz.3.811 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 170.133572][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 170.143617][ T6096] Call Trace: [ 170.146904][ T6096] [ 170.149827][ T6096] dump_stack_lvl+0xf2/0x150 [ 170.154414][ T6096] dump_stack+0x15/0x20 [ 170.158607][ T6096] should_fail_ex+0x229/0x230 [ 170.163341][ T6096] ? __alloc_skb+0x10b/0x310 [ 170.167926][ T6096] should_failslab+0x8f/0xb0 [ 170.172638][ T6096] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 170.178456][ T6096] __alloc_skb+0x10b/0x310 [ 170.182887][ T6096] netlink_alloc_large_skb+0xad/0xe0 [ 170.184977][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.188233][ T6096] netlink_sendmsg+0x3b4/0x6e0 [ 170.199597][ T6096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.204903][ T6096] __sock_sendmsg+0x140/0x180 [ 170.209628][ T6096] ____sys_sendmsg+0x312/0x410 [ 170.213177][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.214481][ T6096] __sys_sendmsg+0x1e9/0x280 [ 170.225656][ T6096] __x64_sys_sendmsg+0x46/0x50 [ 170.230657][ T6096] x64_sys_call+0x26f8/0x2e00 [ 170.234595][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.235350][ T6096] do_syscall_64+0xc9/0x1c0 [ 170.242388][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.246811][ T6096] ? clear_bhb_loop+0x55/0xb0 [ 170.246834][ T6096] ? clear_bhb_loop+0x55/0xb0 [ 170.263399][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.269310][ T6096] RIP: 0033:0x7f30b1845f19 [ 170.273721][ T6096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.293330][ T6096] RSP: 002b:00007f30b04c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.301797][ T6096] RAX: ffffffffffffffda RBX: 00007f30b19d5f60 RCX: 00007f30b1845f19 [ 170.309765][ T6096] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 [ 170.315844][ T6046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.317723][ T6096] RBP: 00007f30b04c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.317738][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.328087][ T6046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.335967][ T6096] R13: 000000000000000b R14: 00007f30b19d5f60 R15: 00007ffce3c22dc8 [ 170.362208][ T6096] [ 170.376116][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.383259][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.393298][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.425897][ T6098] netlink: 'syz.1.812': attribute type 10 has an invalid length. [ 170.437051][ T6098] bond0: (slave netdevsim1): Releasing backup interface [ 170.459612][ T6098] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 170.469423][ T6098] team0: Failed to send options change via netlink (err -105) [ 170.476931][ T6098] team0: Port device netdevsim1 added [ 170.509939][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.704085][ T6046] veth0_vlan: entered promiscuous mode [ 170.711559][ T6118] netlink: 'syz.4.816': attribute type 10 has an invalid length. [ 170.721351][ T6118] team0: Port device netdevsim1 removed [ 170.745862][ T6046] veth1_vlan: entered promiscuous mode [ 170.780409][ T6046] veth0_macvtap: entered promiscuous mode [ 170.796567][ T6046] veth1_macvtap: entered promiscuous mode [ 170.819121][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.829640][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.839707][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.850318][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.860176][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.870664][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.880586][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 170.880597][ T29] audit: type=1400 audit(1721769111.329:408): avc: denied { bind } for pid=6122 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.881887][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.886778][ T29] audit: type=1400 audit(1721769111.329:409): avc: denied { setopt } for pid=6122 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.941065][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.951542][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.961432][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.971908][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.978956][ T6127] loop4: detected capacity change from 0 to 512 [ 170.981764][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.998467][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.000717][ T6119] FAULT_INJECTION: forcing a failure. [ 171.000717][ T6119] name failslab, interval 1, probability 0, space 0, times 0 [ 171.008339][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.021007][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.1.814 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 171.031409][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.041626][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 171.041638][ T6119] Call Trace: [ 171.041647][ T6119] [ 171.052931][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.061606][ T6119] dump_stack_lvl+0xf2/0x150 [ 171.066274][ T6046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.067892][ T6119] dump_stack+0x15/0x20 [ 171.075162][ T6046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.079615][ T6119] should_fail_ex+0x229/0x230 [ 171.088382][ T6046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.092394][ T6119] ? percpu_ref_init+0x96/0x240 [ 171.101043][ T6046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.105671][ T6119] should_failslab+0x8f/0xb0 [ 171.132635][ T6119] __kmalloc_cache_noprof+0x4b/0x2a0 [ 171.137960][ T6119] ? __pfx_free_ioctx_users+0x10/0x10 [ 171.143430][ T6119] percpu_ref_init+0x96/0x240 [ 171.148104][ T6119] ioctx_alloc+0x1b8/0x4c0 [ 171.152592][ T6119] __se_sys_io_setup+0x6b/0x1b0 [ 171.157435][ T6119] __x64_sys_io_setup+0x31/0x40 [ 171.162277][ T6119] x64_sys_call+0x2b30/0x2e00 [ 171.167008][ T6119] do_syscall_64+0xc9/0x1c0 [ 171.171495][ T6119] ? clear_bhb_loop+0x55/0xb0 [ 171.176160][ T6119] ? clear_bhb_loop+0x55/0xb0 [ 171.180887][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.186820][ T6119] RIP: 0033:0x7f7ecb7d5f19 [ 171.191217][ T6119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.210873][ T6119] RSP: 002b:00007f7eca436048 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 171.219347][ T6119] RAX: ffffffffffffffda RBX: 00007f7ecb966038 RCX: 00007f7ecb7d5f19 [ 171.227304][ T6119] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000009 [ 171.235294][ T6119] RBP: 00007f7eca4360a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.243247][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.251201][ T6119] R13: 000000000000006e R14: 00007f7ecb966038 R15: 00007fff1cce69e8 [ 171.259164][ T6119] [ 171.268453][ T6127] EXT4-fs (loop4): invalid journal inode [ 171.378193][ T29] audit: type=1400 audit(1721769111.829:410): avc: denied { mount } for pid=6046 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.550241][ T6143] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 171.566418][ T6143] team0: Failed to send options change via netlink (err -105) [ 171.573962][ T6143] team0: Port device netdevsim1 added [ 171.617447][ T6144] loop1: detected capacity change from 0 to 1024 [ 171.688782][ T6144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.353234][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.400186][ T6161] netlink: 868 bytes leftover after parsing attributes in process `syz.3.830'. [ 172.452291][ T6167] loop1: detected capacity change from 0 to 1024 [ 172.473832][ T6167] EXT4-fs: Ignoring removed orlov option [ 172.479594][ T6167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.486285][ T6167] ext4: Unknown parameter 'hash' [ 172.552548][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 172.582106][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 172.898870][ T6186] loop0: detected capacity change from 0 to 512 [ 172.913259][ T6186] EXT4-fs (loop0): invalid journal inode [ 172.922626][ T6181] ebtables: ebtables: counters copy to user failed while replacing table [ 172.980090][ T6189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.838'. [ 173.423604][ T6200] loop1: detected capacity change from 0 to 1024 [ 173.497557][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.872135][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.914220][ T6214] FAULT_INJECTION: forcing a failure. [ 173.914220][ T6214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.927347][ T6214] CPU: 0 UID: 0 PID: 6214 Comm: syz.4.847 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 173.937648][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 173.947690][ T6214] Call Trace: [ 173.950953][ T6214] [ 173.953880][ T6214] dump_stack_lvl+0xf2/0x150 [ 173.958541][ T6214] dump_stack+0x15/0x20 [ 173.962783][ T6214] should_fail_ex+0x229/0x230 [ 173.967472][ T6214] should_fail+0xb/0x10 [ 173.971716][ T6214] should_fail_usercopy+0x1a/0x20 [ 173.976762][ T6214] _copy_to_user+0x1e/0xa0 [ 173.981184][ T6214] simple_read_from_buffer+0xa0/0x110 [ 173.986585][ T6214] proc_fail_nth_read+0xfc/0x140 [ 173.991541][ T6214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.997167][ T6214] vfs_read+0x1a2/0x6e0 [ 174.001809][ T6214] ? __rcu_read_unlock+0x4e/0x70 [ 174.006800][ T6214] ? __fget_files+0x1da/0x210 [ 174.011506][ T6214] ksys_read+0xeb/0x1b0 [ 174.015702][ T6214] __x64_sys_read+0x42/0x50 [ 174.020223][ T6214] x64_sys_call+0x2a36/0x2e00 [ 174.024903][ T6214] do_syscall_64+0xc9/0x1c0 [ 174.029728][ T6214] ? clear_bhb_loop+0x55/0xb0 [ 174.034441][ T6214] ? clear_bhb_loop+0x55/0xb0 [ 174.039118][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.045127][ T6214] RIP: 0033:0x7ff6e54249fc [ 174.049544][ T6214] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 174.069209][ T6214] RSP: 002b:00007ff6e40a7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.077616][ T6214] RAX: ffffffffffffffda RBX: 00007ff6e55b5f60 RCX: 00007ff6e54249fc [ 174.085733][ T6214] RDX: 000000000000000f RSI: 00007ff6e40a70b0 RDI: 0000000000000009 [ 174.093697][ T6214] RBP: 00007ff6e40a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.101656][ T6214] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 174.109656][ T6214] R13: 000000000000000b R14: 00007ff6e55b5f60 R15: 00007ffc29eae2f8 [ 174.117616][ T6214] [ 174.171986][ T6211] ================================================================== [ 174.180170][ T6211] BUG: KCSAN: data-race in mptcp_subflow_get_send / tcp_rearm_rto [ 174.187993][ T6211] [ 174.190300][ T6211] write to 0xffff8881140294d2 of 1 bytes by interrupt on cpu 0: [ 174.197921][ T6211] tcp_rearm_rto+0x8b/0x200 [ 174.202426][ T6211] tcp_ack+0x2717/0x2f70 [ 174.206662][ T6211] tcp_rcv_established+0x46b/0xef0 [ 174.211778][ T6211] tcp_v4_do_rcv+0x662/0x740 [ 174.216360][ T6211] tcp_v4_rcv+0x1b13/0x1ed0 [ 174.220866][ T6211] ip_protocol_deliver_rcu+0x36d/0x720 [ 174.226345][ T6211] ip_local_deliver_finish+0x17d/0x210 [ 174.231804][ T6211] ip_local_deliver+0xec/0x1d0 [ 174.236576][ T6211] ip_rcv_finish+0x193/0x1b0 [ 174.241166][ T6211] ip_rcv+0x64/0x140 [ 174.245064][ T6211] __netif_receive_skb+0x10a/0x280 [ 174.250171][ T6211] process_backlog+0x22e/0x440 [ 174.254931][ T6211] __napi_poll+0x63/0x3c0 [ 174.259259][ T6211] net_rx_action+0x3a1/0x7f0 [ 174.263850][ T6211] handle_softirqs+0xc3/0x280 [ 174.268528][ T6211] do_softirq+0x5e/0x90 [ 174.272787][ T6211] __local_bh_enable_ip+0x6e/0x70 [ 174.277806][ T6211] _raw_spin_unlock_bh+0x36/0x40 [ 174.282737][ T6211] mptcp_recvmsg+0x851/0x16a0 [ 174.287427][ T6211] inet_recvmsg+0x171/0x290 [ 174.291928][ T6211] sock_recvmsg+0xfe/0x170 [ 174.296339][ T6211] __sys_recvfrom+0x16b/0x230 [ 174.301005][ T6211] __x64_sys_recvfrom+0x78/0x90 [ 174.305850][ T6211] x64_sys_call+0x17e2/0x2e00 [ 174.310605][ T6211] do_syscall_64+0xc9/0x1c0 [ 174.315093][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.320983][ T6211] [ 174.323288][ T6211] read to 0xffff8881140294d2 of 1 bytes by task 6211 on cpu 1: [ 174.330824][ T6211] mptcp_subflow_get_send+0x182/0x7b0 [ 174.336184][ T6211] mptcp_sched_get_send+0x218/0x2e0 [ 174.341384][ T6211] __mptcp_push_pending+0x100/0x4e0 [ 174.346580][ T6211] mptcp_sendmsg+0xa70/0xe60 [ 174.351169][ T6211] inet6_sendmsg+0xc5/0xd0 [ 174.355578][ T6211] __sock_sendmsg+0x8b/0x180 [ 174.360157][ T6211] ____sys_sendmsg+0x312/0x410 [ 174.364912][ T6211] __sys_sendmsg+0x1e9/0x280 [ 174.369493][ T6211] __x64_sys_sendmsg+0x46/0x50 [ 174.374249][ T6211] x64_sys_call+0x26f8/0x2e00 [ 174.378916][ T6211] do_syscall_64+0xc9/0x1c0 [ 174.383405][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.389308][ T6211] [ 174.391616][ T6211] value changed: 0x05 -> 0x00 [ 174.396269][ T6211] [ 174.398585][ T6211] Reported by Kernel Concurrency Sanitizer on: [ 174.404713][ T6211] CPU: 1 UID: 0 PID: 6211 Comm: syz.0.846 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 174.414944][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 174.424987][ T6211] ================================================================== [ 174.505972][ T3739] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.562917][ T29] audit: type=1326 audit(1721769115.009:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecb7d5f19 code=0x7ffc0000 [ 174.590748][ T29] audit: type=1326 audit(1721769115.009:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7ecb7d5f19 code=0x7ffc0000 [ 174.613985][ T29] audit: type=1326 audit(1721769115.009:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecb7d5f19 code=0x7ffc0000 [ 174.637237][ T29] audit: type=1326 audit(1721769115.009:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecb7d5f19 code=0x7ffc0000 [ 174.660500][ T29] audit: type=1326 audit(1721769115.009:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ecb7d5f19 code=0x7ffc0000 [ 174.683776][ T29] audit: type=1326 audit(1721769115.009:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecb7d5f19 code=0x7ffc0000 [ 174.706971][ T29] audit: type=1326 audit(1721769115.009:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ecb7d5f19 code=0x7ffc0000