last executing test programs: 2.193878407s ago: executing program 4 (id=5019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xa, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x386, 0x0) 2.095734036s ago: executing program 4 (id=5021): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002280)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000cb00226f3702aaa86458bafa9b484ccaa6d48471020344185017501fc9b1b81fb21b9a23e2cef92c43985eb16168b1d238a27568b7a362c6fd7100face633ad97edd278d53cf29c190f45a0ac07696c8dfbb4a1c5a5739ce7dcdeaa4f6678c82f4056ea6e739ab97c0a6b2f17f15ebd2be346d8477b82a8c4f5f8bd6611db499861c5dfcb4bb666e28e3b5f3a46d6427f39a61d09f5886566b419ec0a96f5a987559d42359d0bce67334af35d65c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000000000000014100000018001700000000000000006574683a62617461647630001894a962a0bec15db6be6fcaad4437373e669f7990270f858cd3a8ea63dce8b16ab894bba96c22821f76ee5b0d3a8acc"], 0x34}}, 0x0) 2.094689246s ago: executing program 1 (id=5022): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x800000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0xd8, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}, @qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0x0, 0xff13, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x0, 0x0, 0x3, 0xbfa9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x8}}, @TCA_NETEM_DELAY_DIST={0xd, 0x2, "bb31dd582025a5bfe0"}]}}}]}, 0xd8}}, 0x0) 2.050514111s ago: executing program 4 (id=5024): syz_open_dev$char_usb(0xc, 0xb4, 0x4) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000028500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.044233551s ago: executing program 1 (id=5025): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x80000000003d55d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="71b2696b7f3705ebf797c92aa36fcea6aca0f3995d8bfb746e5d4daf2c1038482fe570ba9b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) statx(0xffffffffffffffff, 0x0, 0x100, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r4}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2.041921421s ago: executing program 4 (id=5026): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440), 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000240)="ac66", 0x2}], 0x1, 0x5412, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.954708349s ago: executing program 4 (id=5027): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x1, 0x81, 0x4, 0x81}, {0x40a, 0x8, 0xe, 0x401}, {0x7, 0x9, 0x5, 0x6f6}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r5, r0, 0x0) rt_sigtimedwait(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)={r3, r4+60000000}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) write$P9_RLERRORu(r9, &(0x7f00000003c0)=ANY=[], 0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) setrlimit(0x40000000000008, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x2, 0x6, 0x30, @remote, @loopback, 0x8000, 0x80, 0x8, 0x689}}) 1.839751809s ago: executing program 0 (id=5029): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012"], 0x68}}, 0x64000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.707187872s ago: executing program 1 (id=5032): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012"], 0x68}}, 0x64000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.62257877s ago: executing program 0 (id=5033): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000eea4ca0a0a088397002e776d88e3005ee2a92a8dc55a2c8704ea0b61bd69489e0584040c4389355963688e05ceb9cd4fbbbdaff5268bf8f63583d784f1804c2a7280cc48ed5fa5e5f503d853c267ccb9f88f74194fe12e050000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x20000810) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000006a0000000000000003"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab000000000000000005"], 0x1c}}, 0x0) 1.609963861s ago: executing program 0 (id=5034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000004000000ff00008000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x20000600) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) 1.573917744s ago: executing program 2 (id=5035): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r0], 0x1, 0x67e, &(0x7f0000001600)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x34020000) ioctl$SG_IO(r4, 0x2285, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = open$dir(0x0, 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r7, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x5453, 0x0) 1.522280849s ago: executing program 1 (id=5036): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x800000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0xd8, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}, @qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0x0, 0xff13, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x0, 0x0, 0x3, 0xbfa9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x8}}, @TCA_NETEM_DELAY_DIST={0xd, 0x2, "bb31dd582025a5bfe0"}]}}}]}, 0xd8}}, 0x0) 1.497996651s ago: executing program 0 (id=5037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r2 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$getownex(r8, 0x10, &(0x7f0000000300)) 1.497105292s ago: executing program 1 (id=5038): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440), 0x3, 0x42f, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000240)="ac66", 0x2}], 0x1, 0x5412, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.476474263s ago: executing program 3 (id=5039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7070000080000008500000069000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 1.4074089s ago: executing program 2 (id=5040): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000007000000000000007c1e0709f82747456622", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES16, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x4030582a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'ip6gre0\x00', @random='\x00\x00\x00 \x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000002440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000002200000c0000000000fee300760000000f8a49dc75000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) r8 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x1c, &(0x7f0000000000), 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r6}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r9, 0x400454cd, 0x300) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.393399771s ago: executing program 1 (id=5041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x10005) 1.182656221s ago: executing program 4 (id=5042): r0 = syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x151800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000, 0x0) sendfile(r0, r4, &(0x7f0000000700)=0xf, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xff14) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000500)=""/165, 0x29, 0xa5, 0x0, 0xff, 0x10000, @value}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2c883, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r9, @void, @void, @value}, 0x50) r11 = getpid() process_vm_readv(r11, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}, {&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000000)=""/46, 0x2e}], 0x4, &(0x7f0000008640)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.181812141s ago: executing program 0 (id=5043): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 523.765901ms ago: executing program 2 (id=5045): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x20000000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xe53c0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000eea4ca0a0a088397002e776d88e3005ee2a92a8dc55a2c8704ea0b61bd69489e0584040c4389355963688e05ceb9cd4fbbbdaff5268bf8f63583d784f1804c2a7280cc48ed5fa5e5f503d853c267ccb9f88f74194fe12e050000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x20000810) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="183000006a00000000000000030000"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab000000000000000005"], 0x1c}}, 0x0) 453.650968ms ago: executing program 2 (id=5046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 446.663339ms ago: executing program 3 (id=5047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000004000000ff00008000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x20000600) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) 412.324422ms ago: executing program 3 (id=5048): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x800000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0xd8, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}, @qdisc_kind_options=@q_netem={{0xa}, {0x94, 0x2, {{0x0, 0xff13, 0x0, 0x0, 0xfffffffb}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x0, 0x0, 0x3, 0xbfa9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x0, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}, @TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x8}}, @TCA_NETEM_DELAY_DIST={0xd, 0x2, "bb31dd582025a5bfe0"}]}}}]}, 0xd8}}, 0x0) 400.359373ms ago: executing program 2 (id=5049): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000e00)={{}, "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"}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000d40)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") 380.517615ms ago: executing program 3 (id=5050): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 360.019287ms ago: executing program 2 (id=5051): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2a, 0xb3, 0xdf, 0x8, 0x4bb, 0x901, 0x56a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc7, 0xad, 0xd8}}]}}]}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) (fail_nth: 1) 345.455988ms ago: executing program 3 (id=5052): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c8, &(0x7f0000002500)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x28000400) unshare(0x10800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x27c0, 0x3}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20051, r6, 0xce9e1000) ioctl$FS_IOC_RESVSP(r7, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10ff}) write$evdev(r4, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40084503, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) pwrite64(0xffffffffffffffff, &(0x7f0000000c00)="59de209d72724d22a488f3ca7cdcc0e0426328034b0dda327a75a58c6d5ff30951b10c81fbc008ea86ada8df7670a80cb293c223bfb755668776e1163ee48163ca7a884314b9d3cca2da3e2b57dfe23e658082a303de04c88b1da6adce100671f3bf8747aeb934dce829ddacc13729b0531df60a8b5828479b2136df667c01b5d21b2f42e19809ec2c50e68da49fb5c8d9eb9980fafd3712c918a3f5c6c8da57d3c5451487871842cf21d9cbea041aff7558971c8093e9c7befe512d5e6a35eb9185f27564c512f3f06078199b9aa116eee9c049dfad276c4d02aa3c02e395086a339a990f7e290f6f7c1bbe6c4e4a73d7", 0xf1, 0x0) pwrite64(r0, &(0x7f00000001c0)="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", 0x200, 0xffffffff) socket$can_bcm(0x1d, 0x2, 0x2) 130.991178ms ago: executing program 0 (id=5053): r0 = syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x151800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x700, 0x12) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000006c0), 0x10000, 0x0) sendfile(r0, r4, &(0x7f0000000700)=0xf, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth0_vlan\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xff14) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000500)=""/165, 0x29, 0xa5, 0x0, 0xff, 0x10000, @value}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2c883, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r9, @void, @void, @value}, 0x50) r11 = getpid() process_vm_readv(r11, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}, {&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000000)=""/46, 0x2e}], 0x4, &(0x7f0000008640)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 3 (id=5054): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): k 5: comm syz-executor: error -12 reading directory block [ 510.485890][T24190] bridge_slave_1: entered allmulticast mode [ 510.494074][T24190] bridge_slave_1: entered promiscuous mode [ 510.506256][T24228] loop0: detected capacity change from 0 to 128 [ 510.513151][T24228] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 510.525631][T24228] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 510.551774][T23809] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 510.566577][ T3278] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.573669][ T3278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.583818][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.590988][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.613267][T24229] loop4: detected capacity change from 0 to 512 [ 510.620767][T23809] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 510.716360][T24229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.730427][T24229] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.779157][T23541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.779916][T24190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.799537][T24190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.821322][ T3630] bridge_slave_1: left allmulticast mode [ 510.827148][ T3630] bridge_slave_1: left promiscuous mode [ 510.833008][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.841194][ T3630] bridge_slave_0: left allmulticast mode [ 510.846896][ T3630] bridge_slave_0: left promiscuous mode [ 510.852692][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.897890][ T3354] kworker/u8:7: attempt to access beyond end of device [ 510.897890][ T3354] loop3: rw=1, sector=66, nr_sectors = 2 limit=64 [ 510.911088][ T3354] Buffer I/O error on device loop3, logical block 33 [ 510.927247][T23809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.972469][ T3630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.984816][ T3630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.000352][ T3630] bond0 (unregistering): Released all slaves [ 511.049416][T24237] loop4: detected capacity change from 0 to 128 [ 511.059230][T24237] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 511.071488][ T4670] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 511.074777][T24190] team0: Port device team_slave_0 added [ 511.086523][T24237] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 511.119542][T24190] team0: Port device team_slave_1 added [ 511.129030][ T3630] hsr_slave_0: left promiscuous mode [ 511.135212][ T3630] hsr_slave_1: left promiscuous mode [ 511.144609][ T3630] veth1_macvtap: left promiscuous mode [ 511.150173][ T3630] veth0_macvtap: left promiscuous mode [ 511.155751][ T3630] veth1_vlan: left promiscuous mode [ 511.161335][ T3630] veth0_vlan: left promiscuous mode [ 511.174968][T24247] loop0: detected capacity change from 0 to 128 [ 511.181716][T24247] vfat: Unknown parameter '' [ 511.192130][T23541] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 511.242214][T24253] loop0: detected capacity change from 0 to 512 [ 511.250282][T24253] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 511.263511][ T3630] team0 (unregistering): Port device team_slave_1 removed [ 511.265189][T24250] loop4: detected capacity change from 0 to 2048 [ 511.277594][ T3630] team0 (unregistering): Port device team_slave_0 removed [ 511.292890][T24253] EXT4-fs (loop0): 1 truncate cleaned up [ 511.303582][T24253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.337515][T24253] loop0: detected capacity change from 512 to 64 [ 511.345548][T24253] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 511.352103][T24096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.360264][T24253] EXT4-fs (loop0): pa ffff888104c0c620: logic 0, phys. 65, len 64 [ 511.374941][T24253] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 511.383949][T24260] loop4: detected capacity change from 0 to 1024 [ 511.399906][T24260] EXT4-fs: Ignoring removed orlov option [ 511.405632][T24260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.427972][T24190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.435168][T24190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.440685][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.461150][T24190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.477017][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.487753][T24190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.505936][T24190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.509029][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.532035][T24190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.545436][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.567280][T24260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.569771][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.596041][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.616996][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.630677][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.645057][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.651591][T24096] veth0_vlan: entered promiscuous mode [ 511.664357][T22354] EXT4-fs warning (device loop0): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 511.669583][T24096] veth1_vlan: entered promiscuous mode [ 511.719658][T24190] hsr_slave_0: entered promiscuous mode [ 511.726100][T24190] hsr_slave_1: entered promiscuous mode [ 511.732554][T24190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.740295][T24190] Cannot create hsr debugfs directory [ 511.752489][T24096] veth0_macvtap: entered promiscuous mode [ 511.760401][T24096] veth1_macvtap: entered promiscuous mode [ 511.771447][T24096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.781956][T24096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.791918][T24096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.802500][T24096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.813260][T24096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.846434][T24096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.856961][T24096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.866901][T24096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.877356][T24096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.888413][T24096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.909896][T24096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.918671][T24096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.927769][T24096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.936585][T24096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.958094][ T4670] kworker/u8:34: attempt to access beyond end of device [ 511.958094][ T4670] loop0: rw=1, sector=66, nr_sectors = 2 limit=64 [ 511.971394][ T4670] Buffer I/O error on device loop0, logical block 33 [ 511.979798][T22354] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.003437][T24241] chnl_net:caif_netlink_parms(): no params data found [ 512.027969][ T3643] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.080703][T24283] loop1: detected capacity change from 0 to 1024 [ 512.093170][T24283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.111092][ T3643] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.139144][T24241] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.146231][T24241] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.153633][T24241] bridge_slave_0: entered allmulticast mode [ 512.161036][T24241] bridge_slave_0: entered promiscuous mode [ 512.161169][T23541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.169503][T24241] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.183115][T24241] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.191015][T24241] bridge_slave_1: entered allmulticast mode [ 512.197957][T24241] bridge_slave_1: entered promiscuous mode [ 512.219056][ T3643] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.237022][T24241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.252822][T24241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.275095][ T3643] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.299804][T24241] team0: Port device team_slave_0 added [ 512.306404][T24241] team0: Port device team_slave_1 added [ 512.331111][T24306] loop4: detected capacity change from 0 to 512 [ 512.338789][T24306] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 512.349854][T24241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.356835][T24241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.382980][T24241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.394648][T24241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.401758][T24241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.403806][T24306] EXT4-fs (loop4): 1 truncate cleaned up [ 512.427923][T24241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.433813][T24306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.488462][T24306] loop4: detected capacity change from 512 to 64 [ 512.499121][T24306] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 512.513934][T24306] EXT4-fs (loop4): pa ffff888104c0c620: logic 0, phys. 65, len 64 [ 512.521944][T24306] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 512.546032][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.546095][ T3643] bridge_slave_1: left allmulticast mode [ 512.559877][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.565316][ T3643] bridge_slave_1: left promiscuous mode [ 512.578806][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.584136][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.597604][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.619108][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.632664][ T3643] bridge_slave_0: left allmulticast mode [ 512.632751][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.638391][ T3643] bridge_slave_0: left promiscuous mode [ 512.651925][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.657290][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.670921][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.691673][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.705296][T23541] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 512.840824][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.851275][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.862009][ T3643] bond0 (unregistering): Released all slaves [ 512.871771][T24241] hsr_slave_0: entered promiscuous mode [ 512.878108][T24241] hsr_slave_1: entered promiscuous mode [ 512.884068][T24241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.891635][T24241] Cannot create hsr debugfs directory [ 512.899561][T24278] chnl_net:caif_netlink_parms(): no params data found [ 512.922033][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.943116][ T3643] hsr_slave_0: left promiscuous mode [ 512.948981][ T3643] hsr_slave_1: left promiscuous mode [ 512.956577][ T3643] veth1_macvtap: left promiscuous mode [ 512.962440][ T3643] veth0_macvtap: left promiscuous mode [ 512.968053][ T3643] veth1_vlan: left promiscuous mode [ 512.973345][ T3643] veth0_vlan: left promiscuous mode [ 513.031833][T24315] loop1: detected capacity change from 0 to 1024 [ 513.038591][T24315] EXT4-fs: Ignoring removed orlov option [ 513.044367][T24315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.060053][T24315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.072823][ T3630] kworker/u8:16: attempt to access beyond end of device [ 513.072823][ T3630] loop4: rw=1, sector=66, nr_sectors = 2 limit=64 [ 513.086203][ T3630] Buffer I/O error on device loop4, logical block 33 [ 513.093463][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 513.093870][T23541] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.110267][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 513.232960][T24190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 513.242491][T24278] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.249665][T24278] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.257209][T24278] bridge_slave_0: entered allmulticast mode [ 513.263793][T24278] bridge_slave_0: entered promiscuous mode [ 513.270915][T24278] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.278063][T24278] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.285282][T24278] bridge_slave_1: entered allmulticast mode [ 513.292023][T24278] bridge_slave_1: entered promiscuous mode [ 513.302499][T24190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 513.311571][T24190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 513.337220][T24190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 513.347581][T24278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.361758][T24278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.387362][T24278] team0: Port device team_slave_0 added [ 513.403519][T24278] team0: Port device team_slave_1 added [ 513.432940][T24278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.440043][T24278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.466193][T24278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.487813][T24278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.495024][T24278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.521178][T24278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.563239][T24278] hsr_slave_0: entered promiscuous mode [ 513.569462][T24278] hsr_slave_1: entered promiscuous mode [ 513.575397][T24278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.583255][T24278] Cannot create hsr debugfs directory [ 513.627373][ T3643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.655265][T24320] chnl_net:caif_netlink_parms(): no params data found [ 513.681695][ T3643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.723193][T24241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 513.740980][T24190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.750352][ T3643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.762593][T24241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 513.783788][T24320] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.790966][T24320] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.798235][T24320] bridge_slave_0: entered allmulticast mode [ 513.804963][T24320] bridge_slave_0: entered promiscuous mode [ 513.812139][T24241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 513.821674][T24241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 513.829924][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.842732][ T3643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.855934][T24320] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.863268][T24320] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.870865][T24320] bridge_slave_1: entered allmulticast mode [ 513.878033][T24320] bridge_slave_1: entered promiscuous mode [ 513.904073][T24320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.921699][T24190] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.930746][T24320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.934190][T24342] loop1: detected capacity change from 0 to 2048 [ 513.956036][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.963247][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.971121][T24342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.973278][T24320] team0: Port device team_slave_0 added [ 513.991453][T24320] team0: Port device team_slave_1 added [ 514.001628][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.008849][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.012779][T24342] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 514.032833][T24342] EXT4-fs (loop1): Remounting filesystem read-only [ 514.054051][T24241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.068932][T24320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.075900][T24320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.102046][T24320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.120186][T24320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.127238][T24320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.153644][T24320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.170287][ T3643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.191407][T24241] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.207148][ T3354] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.214302][ T3354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.234580][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.241695][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.258267][T24320] hsr_slave_0: entered promiscuous mode [ 514.264794][T24320] hsr_slave_1: entered promiscuous mode [ 514.270842][T24320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.278497][T24320] Cannot create hsr debugfs directory [ 514.280381][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.300441][ T3643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.346682][ T3643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.441560][ T3643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.459576][T24190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.484311][T24241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.524695][T24278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 514.542168][T24278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 514.551129][T24278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 514.570083][T24278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 514.631097][ T3643] bridge_slave_1: left allmulticast mode [ 514.636894][ T3643] bridge_slave_1: left promiscuous mode [ 514.642709][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.659846][ T3643] bridge_slave_0: left allmulticast mode [ 514.665626][ T3643] bridge_slave_0: left promiscuous mode [ 514.671413][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.682035][ T3643] bridge_slave_1: left allmulticast mode [ 514.687754][ T3643] bridge_slave_1: left promiscuous mode [ 514.693475][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.702902][ T3643] bridge_slave_0: left allmulticast mode [ 514.708725][ T3643] bridge_slave_0: left promiscuous mode [ 514.714466][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.724654][T24362] loop1: detected capacity change from 0 to 128 [ 514.733159][T24362] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 514.747019][T24362] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 514.809021][T24096] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 514.982523][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.993509][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.004216][ T3643] bond0 (unregistering): Released all slaves [ 515.020869][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.032059][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.043087][ T3643] bond0 (unregistering): Released all slaves [ 515.054009][T24190] veth0_vlan: entered promiscuous mode [ 515.063450][T24190] veth1_vlan: entered promiscuous mode [ 515.077039][T24383] loop1: detected capacity change from 0 to 512 [ 515.085340][T24383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 515.100157][T24383] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.4823: bad orphan inode 131083 [ 515.112112][T24383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.130468][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 515.130487][ T29] audit: type=1400 audit(1727219471.276:25045): avc: denied { write } for pid=24380 comm="syz.1.4823" name="raw" dev="proc" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 515.248557][T24241] veth0_vlan: entered promiscuous mode [ 515.255945][T24190] veth0_macvtap: entered promiscuous mode [ 515.284940][ T3643] hsr_slave_0: left promiscuous mode [ 515.290889][ T3643] hsr_slave_1: left promiscuous mode [ 515.299763][ T3643] hsr_slave_0: left promiscuous mode [ 515.305438][ T3643] hsr_slave_1: left promiscuous mode [ 515.314960][ T3643] veth1_macvtap: left promiscuous mode [ 515.320585][ T3643] veth0_macvtap: left promiscuous mode [ 515.326085][ T3643] veth1_vlan: left promiscuous mode [ 515.331407][ T3643] veth0_vlan: left promiscuous mode [ 515.337685][ T3643] veth1_macvtap: left promiscuous mode [ 515.343229][ T3643] veth0_macvtap: left promiscuous mode [ 515.348797][ T3643] veth1_vlan: left promiscuous mode [ 515.354035][ T3643] veth0_vlan: left promiscuous mode [ 515.480659][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 515.491365][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 515.558407][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 515.569657][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 515.613574][T24241] veth1_vlan: entered promiscuous mode [ 515.620201][T24190] veth1_macvtap: entered promiscuous mode [ 515.633130][T24278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.648806][T24190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.659291][T24190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.669197][T24190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.679704][T24190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.689539][T24190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.699974][T24190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.710779][T24190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.723119][T24241] veth0_macvtap: entered promiscuous mode [ 515.733445][T24278] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.755907][T24278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.766315][T24278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.779457][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.782085][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.795585][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.804707][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.811873][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.812564][ T29] audit: type=1326 audit(1727219471.956:25046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 515.838391][T24190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.853290][T24190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.854486][T24387] loop1: detected capacity change from 0 to 1024 [ 515.863141][T24190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.871913][T24387] EXT4-fs: Ignoring removed orlov option [ 515.880217][T24190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.885661][T24387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 515.895524][T24190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.912693][T24190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.919142][ T29] audit: type=1326 audit(1727219471.986:25047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 515.925687][T24190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.946183][ T29] audit: type=1326 audit(1727219471.986:25048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 515.977240][ T29] audit: type=1326 audit(1727219471.986:25049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 515.991669][T24387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.001016][ T29] audit: type=1326 audit(1727219471.986:25050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 516.036475][ T29] audit: type=1326 audit(1727219471.986:25051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 516.060206][ T29] audit: type=1326 audit(1727219471.986:25052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 516.083825][ T29] audit: type=1326 audit(1727219471.986:25053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 516.107734][ T29] audit: type=1326 audit(1727219471.986:25054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24386 comm="syz.1.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c39cfdef9 code=0x7ffc0000 [ 516.133119][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.148689][T24241] veth1_macvtap: entered promiscuous mode [ 516.172336][T24190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.181141][T24190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.190039][T24190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.198866][T24190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.214034][T24241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.224551][T24241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.234405][T24241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.244897][T24241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.254938][T24241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.265542][T24241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.275398][T24241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.286205][T24241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.297302][T24241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.306178][T24241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.316673][T24241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.326552][T24241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.337006][T24241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.346866][T24241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.357420][T24241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.367295][T24241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.377887][T24241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.390057][T24241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.404238][T24401] tipc: Started in network mode [ 516.409200][T24401] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 516.416359][T24401] tipc: Enabled bearer , priority 0 [ 516.427206][T24241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.436111][T24241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.444892][T24241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.453616][T24241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.481671][T24278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.518704][T24320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 516.537364][T24320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 516.554333][T24320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 516.563537][T24320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 516.652754][T24420] loop2: detected capacity change from 0 to 1024 [ 516.656021][T24320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.662309][T24420] EXT4-fs: Ignoring removed orlov option [ 516.671612][T24420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 516.690242][T24320] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.697932][T24278] veth0_vlan: entered promiscuous mode [ 516.706708][T24278] veth1_vlan: entered promiscuous mode [ 516.735363][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.738173][T24420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.742475][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.764132][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.771375][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.787851][T24427] tipc: Started in network mode [ 516.792791][T24427] tipc: Node identity ac14140f, cluster identity 4711 [ 516.799865][T24427] tipc: New replicast peer: 255.255.255.255 [ 516.805956][T24427] tipc: Enabled bearer , priority 10 [ 516.814215][T24320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.844783][T24278] veth0_macvtap: entered promiscuous mode [ 516.856561][T24278] veth1_macvtap: entered promiscuous mode [ 516.873337][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.883954][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.891422][T24437] loop3: detected capacity change from 0 to 128 [ 516.893875][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.910944][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.920919][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.931528][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.941452][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.951956][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.961831][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.972310][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.985336][T24278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.998785][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.009353][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.019281][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.029757][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.039588][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.050201][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.060043][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.070486][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.080428][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.090942][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.101850][T24278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.112398][T24278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.121291][T24278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.130109][T24278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.138964][T24278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.159832][T24443] loop3: detected capacity change from 0 to 512 [ 517.168034][T24443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 517.171687][T24320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.181444][T24443] EXT4-fs (loop3): 1 truncate cleaned up [ 517.190954][T24443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.250696][T24443] loop3: detected capacity change from 512 to 64 [ 517.263013][T24443] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 517.277781][T24443] EXT4-fs (loop3): pa ffff888104c0c5b0: logic 0, phys. 65, len 64 [ 517.278216][T24456] loop0: detected capacity change from 0 to 128 [ 517.285673][T24443] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 517.314004][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.344248][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.366967][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.385283][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.401087][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.428561][T24320] veth0_vlan: entered promiscuous mode [ 517.438440][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4843'. [ 517.440404][T24320] veth1_vlan: entered promiscuous mode [ 517.450323][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4843'. [ 517.459883][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.473376][T24320] veth0_macvtap: entered promiscuous mode [ 517.475587][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.492171][T24320] veth1_macvtap: entered promiscuous mode [ 517.494791][T24190] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.509814][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.510811][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.520441][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.533839][ T3338] tipc: Node number set to 8432298 [ 517.543621][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.558745][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.559293][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.572738][T24241] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 517.582318][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.606132][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.615989][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.626523][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.636436][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.646903][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.656759][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.667236][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.680267][T24320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.699371][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.709937][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.719908][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.730564][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.740517][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.750991][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.760882][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.771412][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.781275][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.791819][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.801721][T24320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.803298][T24481] loop2: detected capacity change from 0 to 1024 [ 517.812210][T24320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.814858][T24320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.825071][T24481] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 517.830514][T24320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.853432][T24320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.862289][T24320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.871063][T24320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.886091][T24481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.917536][ T3341] tipc: Node number set to 2886997007 [ 518.004811][T24490] loop4: detected capacity change from 0 to 512 [ 518.030447][T24490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.045227][T24490] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.072754][T24320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.124393][T24496] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 518.157073][T24499] loop4: detected capacity change from 0 to 1024 [ 518.164175][T24499] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 518.176522][T24499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.311640][T24504] loop0: detected capacity change from 0 to 1024 [ 518.329532][T24504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.384559][T24502] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 518.400340][T24502] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 518.412940][T24502] EXT4-fs (loop0): This should not happen!! Data will be lost [ 518.412940][T24502] [ 518.422734][T24502] EXT4-fs (loop0): Total free blocks count 0 [ 518.428908][T24502] EXT4-fs (loop0): Free/Dirty block details [ 518.434826][T24502] EXT4-fs (loop0): free_blocks=68451041280 [ 518.440799][T24502] EXT4-fs (loop0): dirty_blocks=16 [ 518.445942][T24502] EXT4-fs (loop0): Block reservation details [ 518.452237][T24502] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 518.459305][T24504] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 518.509189][T24508] loop1: detected capacity change from 0 to 1024 [ 518.526522][T24508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.539057][T24508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.622264][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.681219][T24513] Cannot find set identified by id 0 to match [ 518.693902][T24513] loop1: detected capacity change from 0 to 512 [ 518.704160][T24513] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 518.704287][T24190] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.731291][T24513] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.4857: invalid indirect mapped block 83886080 (level 1) [ 518.766984][T24518] Cannot find set identified by id 0 to match [ 518.775770][T24513] EXT4-fs (loop1): Remounting filesystem read-only [ 518.782711][T24513] EXT4-fs (loop1): 1 orphan inode deleted [ 518.788543][T24513] EXT4-fs (loop1): 1 truncate cleaned up [ 518.794713][T24513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.802111][T24518] loop2: detected capacity change from 0 to 512 [ 518.809923][T24513] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 518.814790][T24518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 518.835001][T24522] loop0: detected capacity change from 0 to 512 [ 518.845111][T24513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.845155][T24518] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.4858: invalid indirect mapped block 83886080 (level 1) [ 518.861847][T24522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.869752][T24518] EXT4-fs (loop2): Remounting filesystem read-only [ 518.887529][T24518] EXT4-fs (loop2): 1 orphan inode deleted [ 518.893359][T24518] EXT4-fs (loop2): 1 truncate cleaned up [ 518.900738][T24518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.912985][T24518] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 518.920413][T24522] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.938927][T24518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.950115][T24527] FAULT_INJECTION: forcing a failure. [ 518.950115][T24527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.963929][T24527] CPU: 0 UID: 0 PID: 24527 Comm: syz.1.4861 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 518.974377][T24527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 518.984511][T24527] Call Trace: [ 518.987811][T24527] [ 518.990841][T24527] dump_stack_lvl+0xf2/0x150 [ 518.995476][T24527] dump_stack+0x15/0x20 [ 518.999671][T24527] should_fail_ex+0x223/0x230 [ 519.004473][T24527] should_fail+0xb/0x10 [ 519.008681][T24527] should_fail_usercopy+0x1a/0x20 [ 519.013758][T24527] _copy_from_user+0x1e/0xd0 [ 519.018438][T24527] copy_msghdr_from_user+0x54/0x2a0 [ 519.023687][T24527] __sys_sendmsg+0x171/0x270 [ 519.028427][T24527] __x64_sys_sendmsg+0x46/0x50 [ 519.033225][T24527] x64_sys_call+0x2689/0x2d60 [ 519.037984][T24527] do_syscall_64+0xc9/0x1c0 [ 519.042527][T24527] ? clear_bhb_loop+0x55/0xb0 [ 519.047276][T24527] ? clear_bhb_loop+0x55/0xb0 [ 519.052073][T24527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.057975][T24527] RIP: 0033:0x7f7c39cfdef9 [ 519.062500][T24527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.082355][T24527] RSP: 002b:00007f7c38971038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.090774][T24527] RAX: ffffffffffffffda RBX: 00007f7c39eb5f80 RCX: 00007f7c39cfdef9 [ 519.098780][T24527] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 519.106838][T24527] RBP: 00007f7c38971090 R08: 0000000000000000 R09: 0000000000000000 [ 519.114811][T24527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.122784][T24527] R13: 0000000000000000 R14: 00007f7c39eb5f80 R15: 00007ffdb91dd778 [ 519.130774][T24527] [ 519.156093][T24320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.180309][T24278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.182908][T24529] loop2: detected capacity change from 0 to 128 [ 519.199462][T24529] vfat: Unknown parameter '' [ 519.206886][T24532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4864'. [ 519.243080][T24538] loop0: detected capacity change from 0 to 1024 [ 519.276185][T24542] loop1: detected capacity change from 0 to 1024 [ 519.285469][T24546] loop2: detected capacity change from 0 to 256 [ 519.292918][T24542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 519.300046][T24546] FAT-fs (loop2): Directory bread(block 1285) failed [ 519.309730][T24546] FAT-fs (loop2): Directory bread(block 1285) failed [ 519.316800][T24550] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4871'. [ 519.316859][T24546] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 519.334943][T24542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.337277][T24546] FAT-fs (loop2): Directory bread(block 1285) failed [ 519.354415][T24546] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 519.363333][T24546] FAT-fs (loop2): Directory bread(block 1285) failed [ 519.377220][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.379626][T24555] loop0: detected capacity change from 0 to 1024 [ 519.405928][T24555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.452205][T24570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.459761][T24570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.467469][T24570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.474638][ T4670] kworker/u8:34: attempt to access beyond end of device [ 519.474638][ T4670] loop3: rw=1, sector=66, nr_sectors = 2 limit=64 [ 519.474895][T24570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.488348][ T4670] Buffer I/O error on device loop3, logical block 33 [ 519.503694][T24241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.513393][T24570] tipc: Resetting bearer [ 519.524396][T24570] tipc: Disabling bearer [ 519.541269][ T5156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.612723][T24590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4877'. [ 519.629606][ T5156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.674392][T24602] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4879'. [ 519.707083][ T5156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.723821][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4880'. [ 519.759248][T24609] loop1: detected capacity change from 0 to 256 [ 519.769298][ T5156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.856371][ T5156] bridge_slave_1: left allmulticast mode [ 519.862175][ T5156] bridge_slave_1: left promiscuous mode [ 519.868024][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.882041][ T5156] bridge_slave_0: left allmulticast mode [ 519.887832][ T5156] bridge_slave_0: left promiscuous mode [ 519.893566][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.921810][T24629] loop1: detected capacity change from 0 to 128 [ 519.933236][T24629] vfat: Unknown parameter '' [ 519.971190][T24633] loop1: detected capacity change from 0 to 512 [ 519.985888][T24633] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 519.996849][T24633] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 520.005561][T24633] EXT4-fs (loop1): 1 truncate cleaned up [ 520.013116][T24633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.031143][ T5156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.042861][ T5156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.054731][ T5156] bond0 (unregistering): Released all slaves [ 520.064073][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.098613][T24592] chnl_net:caif_netlink_parms(): no params data found [ 520.190669][ T5156] tipc: Disabling bearer [ 520.195934][ T5156] tipc: Left network mode [ 520.214059][T24649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4883'. [ 520.224266][T24278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.233423][T24687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4885'. [ 520.272584][T24690] loop1: detected capacity change from 0 to 512 [ 520.279431][ T5156] hsr_slave_0: left promiscuous mode [ 520.313899][ T5156] hsr_slave_1: left promiscuous mode [ 520.328049][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.328650][T24690] __quota_error: 221 callbacks suppressed [ 520.328663][T24690] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 520.335626][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.355057][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.395571][T24701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4888'. [ 520.406822][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.414378][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.416154][T24690] EXT4-fs (loop1): mount failed [ 520.429949][ T5156] veth1_macvtap: left promiscuous mode [ 520.435536][ T5156] veth0_macvtap: left promiscuous mode [ 520.441280][ T5156] veth1_vlan: left promiscuous mode [ 520.446524][ T5156] veth0_vlan: left promiscuous mode [ 520.473133][T24690] loop1: detected capacity change from 0 to 512 [ 520.498185][T24690] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 520.517910][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.546947][T24690] EXT4-fs (loop1): mount failed [ 520.564273][T24690] loop1: detected capacity change from 0 to 512 [ 520.591990][T24690] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 520.609512][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.624622][T24690] EXT4-fs (loop1): mount failed [ 520.624883][ T5156] team0 (unregistering): Port device team_slave_1 removed [ 520.641059][ T29] audit: type=1326 audit(1727219476.786:25276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm="syz.2.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 520.642347][T24690] loop1: detected capacity change from 0 to 512 [ 520.668492][ T29] audit: type=1326 audit(1727219476.816:25277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm="syz.2.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 520.694636][ T29] audit: type=1326 audit(1727219476.816:25278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm="syz.2.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 520.695209][ T5156] team0 (unregistering): Port device team_slave_0 removed [ 520.718245][ T29] audit: type=1326 audit(1727219476.816:25279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm="syz.2.4885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 520.729335][T24690] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 520.763600][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.778713][T24690] EXT4-fs (loop1): mount failed [ 520.788894][T24690] loop1: detected capacity change from 0 to 512 [ 520.806800][T24690] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 520.817279][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.833715][T24690] EXT4-fs (loop1): mount failed [ 520.842981][T24690] loop1: detected capacity change from 0 to 512 [ 520.871243][T24690] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 520.888031][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 520.904194][T24690] EXT4-fs (loop1): mount failed [ 520.905557][T24592] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.916245][T24592] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.921775][T24690] loop1: detected capacity change from 0 to 512 [ 520.923684][T24592] bridge_slave_0: entered allmulticast mode [ 520.936152][T24592] bridge_slave_0: entered promiscuous mode [ 520.943346][T24592] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.950477][T24592] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.957740][T24592] bridge_slave_1: entered allmulticast mode [ 520.964279][T24592] bridge_slave_1: entered promiscuous mode [ 520.984642][T24592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.999118][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.001835][T24592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.029994][T24690] EXT4-fs (loop1): mount failed [ 521.038417][T24735] loop0: detected capacity change from 0 to 1024 [ 521.048122][T24735] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 521.057884][T24739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.065336][T24739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.070866][T24690] loop1: detected capacity change from 0 to 512 [ 521.075809][T24735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.092078][T24739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.099617][T24739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.113701][T24592] team0: Port device team_slave_0 added [ 521.121106][T24592] team0: Port device team_slave_1 added [ 521.127337][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.146873][T24690] EXT4-fs (loop1): mount failed [ 521.158535][T24690] loop1: detected capacity change from 0 to 512 [ 521.167087][T24592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.174173][T24592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.200316][T24592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.210795][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.211810][T24690] EXT4-fs (loop1): mount failed [ 521.231185][T24592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.238380][T24592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.264444][T24592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.281689][T24690] loop1: detected capacity change from 0 to 512 [ 521.301466][T24592] hsr_slave_0: entered promiscuous mode [ 521.315511][T24592] hsr_slave_1: entered promiscuous mode [ 521.320035][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.336479][T24690] EXT4-fs (loop1): mount failed [ 521.341367][T24592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.341386][T24592] Cannot create hsr debugfs directory [ 521.361004][T24690] loop1: detected capacity change from 0 to 512 [ 521.400507][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.442674][T24757] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 521.443185][T24690] EXT4-fs (loop1): mount failed [ 521.481378][T24690] loop1: detected capacity change from 0 to 512 [ 521.499087][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.549014][T24690] EXT4-fs (loop1): mount failed [ 521.552018][T24764] loop4: detected capacity change from 0 to 512 [ 521.561293][T24764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 521.564784][T24690] loop1: detected capacity change from 0 to 512 [ 521.581980][T24764] EXT4-fs (loop4): 1 truncate cleaned up [ 521.588414][T24764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.601852][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.620068][T24764] 9pnet_fd: Insufficient options for proto=fd [ 521.633521][T24690] EXT4-fs (loop1): mount failed [ 521.643112][T24690] loop1: detected capacity change from 0 to 512 [ 521.656179][T24320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.668017][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.682966][T24690] EXT4-fs (loop1): mount failed [ 521.692015][T24690] loop1: detected capacity change from 0 to 512 [ 521.709480][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.723736][T24592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 521.731274][T24690] EXT4-fs (loop1): mount failed [ 521.739679][T24592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.742804][T24690] loop1: detected capacity change from 0 to 512 [ 521.755529][T24592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.763949][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.764436][T24592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.789557][T24690] EXT4-fs (loop1): mount failed [ 521.799387][T24592] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.806482][T24592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.813850][T24592] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.820945][T24592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.825718][T24690] loop1: detected capacity change from 0 to 512 [ 521.855675][T24278] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.856337][T24592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.875648][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.884783][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 521.885155][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.909373][T24690] EXT4-fs (loop1): mount failed [ 521.911078][T24780] FAULT_INJECTION: forcing a failure. [ 521.911078][T24780] name failslab, interval 1, probability 0, space 0, times 0 [ 521.926952][T24780] CPU: 0 UID: 0 PID: 24780 Comm: syz.0.4905 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 521.937399][T24780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 521.947484][T24780] Call Trace: [ 521.950833][T24780] [ 521.953763][T24780] dump_stack_lvl+0xf2/0x150 [ 521.958394][T24780] dump_stack+0x15/0x20 [ 521.962565][T24780] should_fail_ex+0x223/0x230 [ 521.967280][T24780] ? getname_flags+0x81/0x3b0 [ 521.972070][T24780] should_failslab+0x8f/0xb0 [ 521.976686][T24780] kmem_cache_alloc_noprof+0x4c/0x290 [ 521.982117][T24780] getname_flags+0x81/0x3b0 [ 521.986631][T24780] user_path_at+0x26/0x110 [ 521.991111][T24780] __se_sys_mount+0x248/0x2d0 [ 521.995842][T24780] __x64_sys_mount+0x67/0x80 [ 522.000458][T24780] x64_sys_call+0x203e/0x2d60 [ 522.005151][T24780] do_syscall_64+0xc9/0x1c0 [ 522.009684][T24780] ? clear_bhb_loop+0x55/0xb0 [ 522.014363][T24780] ? clear_bhb_loop+0x55/0xb0 [ 522.019060][T24780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.025010][T24780] RIP: 0033:0x7f3c2da3def9 [ 522.029538][T24780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.049164][T24780] RSP: 002b:00007f3c2c6b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 522.057654][T24780] RAX: ffffffffffffffda RBX: 00007f3c2dbf5f80 RCX: 00007f3c2da3def9 [ 522.065623][T24780] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 522.073595][T24780] RBP: 00007f3c2c6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 522.081587][T24780] R10: 0000000001970024 R11: 0000000000000246 R12: 0000000000000001 [ 522.089576][T24780] R13: 0000000000000000 R14: 00007f3c2dbf5f80 R15: 00007ffe4de2b768 [ 522.097684][T24780] [ 522.109346][T24690] loop1: detected capacity change from 0 to 512 [ 522.120590][T24782] loop2: detected capacity change from 0 to 128 [ 522.132595][T24592] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.151823][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.158980][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.170041][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.177157][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.178111][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 522.195895][T24592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.209935][T24592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.230537][T24690] EXT4-fs (loop1): mount failed [ 522.280811][T24592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.321469][T24690] loop1: detected capacity change from 0 to 512 [ 522.358380][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 522.440005][T24592] veth0_vlan: entered promiscuous mode [ 522.450881][T24592] veth1_vlan: entered promiscuous mode [ 522.467172][T24592] veth0_macvtap: entered promiscuous mode [ 522.475967][T24813] loop2: detected capacity change from 0 to 128 [ 522.482694][T24813] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 522.506407][T24690] EXT4-fs (loop1): mount failed [ 522.511755][T24813] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.542177][T24592] veth1_macvtap: entered promiscuous mode [ 522.559916][T24815] FAULT_INJECTION: forcing a failure. [ 522.559916][T24815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.573160][T24815] CPU: 0 UID: 0 PID: 24815 Comm: syz.4.4911 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 522.583674][T24815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 522.593740][T24815] Call Trace: [ 522.597027][T24815] [ 522.599964][T24815] dump_stack_lvl+0xf2/0x150 [ 522.604578][T24815] dump_stack+0x15/0x20 [ 522.608757][T24815] should_fail_ex+0x223/0x230 [ 522.613500][T24815] should_fail+0xb/0x10 [ 522.617690][T24815] should_fail_usercopy+0x1a/0x20 [ 522.622874][T24815] _copy_from_user+0x1e/0xd0 [ 522.627483][T24815] __sys_bpf+0x14e/0x7a0 [ 522.631745][T24815] __x64_sys_bpf+0x43/0x50 [ 522.636244][T24815] x64_sys_call+0x2625/0x2d60 [ 522.640948][T24815] do_syscall_64+0xc9/0x1c0 [ 522.645471][T24815] ? clear_bhb_loop+0x55/0xb0 [ 522.650234][T24815] ? clear_bhb_loop+0x55/0xb0 [ 522.654987][T24815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.660906][T24815] RIP: 0033:0x7ff4da35def9 [ 522.665334][T24815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.666712][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.685034][T24815] RSP: 002b:00007ff4d8fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.685061][T24815] RAX: ffffffffffffffda RBX: 00007ff4da515f80 RCX: 00007ff4da35def9 [ 522.695756][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.703933][T24815] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 522.703952][T24815] RBP: 00007ff4d8fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 522.703967][T24815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.703981][T24815] R13: 0000000000000000 R14: 00007ff4da515f80 R15: 00007ffc6cdf77d8 [ 522.704083][T24815] [ 522.712039][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.734068][T24690] loop1: detected capacity change from 0 to 512 [ 522.737847][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.737872][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.737887][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.804405][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.814863][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.826856][T24592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.838116][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.848754][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.854115][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 522.858584][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.858604][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.858664][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.879919][T24822] loop4: detected capacity change from 0 to 1024 [ 522.884198][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.895973][T24822] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 522.904514][T24592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.940197][T24592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.952328][T24690] EXT4-fs (loop1): mount failed [ 522.953493][T24592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.967096][T24592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.967910][T24824] loop0: detected capacity change from 0 to 256 [ 522.975965][T24592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.988012][T24822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.990972][T24592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.012328][T24592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.030537][T24690] loop1: detected capacity change from 0 to 512 [ 523.055022][T24824] FAT-fs (loop0): IO charset cp1250 not found [ 523.066542][T24690] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 523.090044][ T3624] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 523.109797][T24690] EXT4-fs (loop1): mount failed [ 523.265200][T24842] loop1: detected capacity change from 0 to 1024 [ 523.282292][T24842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 523.313106][T24850] siw: device registration error -23 [ 523.321153][T24850] __nla_validate_parse: 1 callbacks suppressed [ 523.321172][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4921'. [ 523.338188][T24842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.347052][T24849] loop2: detected capacity change from 0 to 512 [ 523.375696][T24096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.402437][T24849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.415073][T24849] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.460983][T24864] loop3: detected capacity change from 0 to 512 [ 523.479223][T24864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 523.498195][T24866] loop2: detected capacity change from 0 to 512 [ 523.505722][T24866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 523.515585][T24862] 9pnet_fd: Insufficient options for proto=fd [ 523.522995][T24866] EXT4-fs (loop2): 1 truncate cleaned up [ 523.530216][T24864] EXT4-fs (loop3): 1 truncate cleaned up [ 523.681148][T24873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.688820][T24873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.698518][T24873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.706022][T24873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.785754][T24881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4932'. [ 523.904833][T24892] loop1: detected capacity change from 0 to 512 [ 523.931119][T24892] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.033749][T24904] loop1: detected capacity change from 0 to 512 [ 524.045320][T24904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 524.118895][T24910] FAULT_INJECTION: forcing a failure. [ 524.118895][T24910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.132044][T24910] CPU: 1 UID: 0 PID: 24910 Comm: syz.2.4941 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 524.142500][T24910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 524.152589][T24910] Call Trace: [ 524.155885][T24910] [ 524.158834][T24910] dump_stack_lvl+0xf2/0x150 [ 524.163465][T24910] dump_stack+0x15/0x20 [ 524.167724][T24910] should_fail_ex+0x223/0x230 [ 524.172456][T24910] should_fail+0xb/0x10 [ 524.176646][T24910] should_fail_usercopy+0x1a/0x20 [ 524.177728][T24904] EXT4-fs (loop1): 1 truncate cleaned up [ 524.181739][T24910] _copy_from_user+0x1e/0xd0 [ 524.181767][T24910] copy_msghdr_from_user+0x54/0x2a0 [ 524.197449][T24910] __sys_sendmsg+0x171/0x270 [ 524.202142][T24910] __x64_sys_sendmsg+0x46/0x50 [ 524.206941][T24910] x64_sys_call+0x2689/0x2d60 [ 524.211715][T24910] do_syscall_64+0xc9/0x1c0 [ 524.216286][T24910] ? clear_bhb_loop+0x55/0xb0 [ 524.221065][T24910] ? clear_bhb_loop+0x55/0xb0 [ 524.225782][T24910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.231744][T24910] RIP: 0033:0x7f9d3001def9 [ 524.236296][T24910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.256127][T24910] RSP: 002b:00007f9d2ec91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.264633][T24910] RAX: ffffffffffffffda RBX: 00007f9d301d5f80 RCX: 00007f9d3001def9 [ 524.272637][T24910] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 524.280611][T24910] RBP: 00007f9d2ec91090 R08: 0000000000000000 R09: 0000000000000000 [ 524.288631][T24910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.296645][T24910] R13: 0000000000000000 R14: 00007f9d301d5f80 R15: 00007fff121be3e8 [ 524.304638][T24910] [ 524.327198][T24913] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 524.336644][T24096] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 524.392344][T24096] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 524.448356][T24921] FAULT_INJECTION: forcing a failure. [ 524.448356][T24921] name failslab, interval 1, probability 0, space 0, times 0 [ 524.461062][T24921] CPU: 0 UID: 0 PID: 24921 Comm: syz.4.4946 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 524.471497][T24921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 524.481575][T24921] Call Trace: [ 524.484862][T24921] [ 524.487818][T24921] dump_stack_lvl+0xf2/0x150 [ 524.492476][T24921] dump_stack+0x15/0x20 [ 524.496709][T24921] should_fail_ex+0x223/0x230 [ 524.501417][T24921] ? copy_splice_read+0xc7/0x5d0 [ 524.506378][T24921] should_failslab+0x8f/0xb0 [ 524.511046][T24921] __kmalloc_noprof+0xa5/0x370 [ 524.515835][T24921] copy_splice_read+0xc7/0x5d0 [ 524.520736][T24921] ? file_has_perm+0x329/0x370 [ 524.525535][T24921] sock_splice_read+0xac/0xb0 [ 524.530513][T24921] ? __pfx_sock_splice_read+0x10/0x10 [ 524.536053][T24921] splice_file_to_pipe+0x237/0x390 [ 524.541192][T24921] do_splice+0xc8b/0x1120 [ 524.545567][T24921] ? _raw_spin_unlock+0x26/0x50 [ 524.550508][T24921] ? htab_map_delete_elem+0x2f6/0x3d0 [ 524.555902][T24921] ? __fget_files+0x1d4/0x210 [ 524.560757][T24921] __se_sys_splice+0x24c/0x390 [ 524.565537][T24921] __x64_sys_splice+0x78/0x90 [ 524.570253][T24921] x64_sys_call+0x2945/0x2d60 [ 524.574964][T24921] do_syscall_64+0xc9/0x1c0 [ 524.579629][T24921] ? clear_bhb_loop+0x55/0xb0 [ 524.584325][T24921] ? clear_bhb_loop+0x55/0xb0 [ 524.589056][T24921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.595018][T24921] RIP: 0033:0x7ff4da35def9 [ 524.599890][T24921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.619525][T24921] RSP: 002b:00007ff4d8fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 524.627975][T24921] RAX: ffffffffffffffda RBX: 00007ff4da515f80 RCX: 00007ff4da35def9 [ 524.636064][T24921] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 524.644138][T24921] RBP: 00007ff4d8fd1090 R08: 0000000000000080 R09: 0000000000000000 [ 524.652122][T24921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.660324][T24921] R13: 0000000000000000 R14: 00007ff4da515f80 R15: 00007ffc6cdf77d8 [ 524.668314][T24921] [ 524.693369][T24096] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 524.716171][T24096] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 524.737244][T24096] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 524.760076][T24096] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 524.807826][T24096] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 524.858178][T24096] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 524.892127][T24929] loop4: detected capacity change from 0 to 512 [ 524.900224][T24096] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 524.925420][T24929] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 524.936340][T24096] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 524.988534][T24929] EXT4-fs (loop4): 1 truncate cleaned up [ 525.031341][T24929] 9pnet_fd: Insufficient options for proto=fd [ 525.040434][T24924] loop2: detected capacity change from 0 to 512 [ 525.080685][T24924] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.092462][T24935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4951'. [ 525.117591][T24935] loop4: detected capacity change from 0 to 256 [ 525.150710][T24938] loop2: detected capacity change from 0 to 128 [ 525.203182][ T3646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.242579][T24941] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 525.261270][ T3646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.301504][T24945] tipc: Enabling of bearer rejected, failed to enable media [ 525.371547][ T3646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.396622][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 525.396640][ T29] audit: type=1326 audit(1727219481.536:25294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.440990][ T3646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.451780][ T29] audit: type=1326 audit(1727219481.536:25295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.475538][ T29] audit: type=1326 audit(1727219481.536:25296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.499442][ T29] audit: type=1326 audit(1727219481.536:25297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.523079][ T29] audit: type=1326 audit(1727219481.536:25298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.546925][ T29] audit: type=1326 audit(1727219481.536:25299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.570742][ T29] audit: type=1326 audit(1727219481.536:25300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.594361][ T29] audit: type=1326 audit(1727219481.536:25301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.618020][ T29] audit: type=1326 audit(1727219481.536:25302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.641707][ T29] audit: type=1326 audit(1727219481.536:25303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24954 comm="syz.2.4958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d3001def9 code=0x7ffc0000 [ 525.685375][T24963] loop4: detected capacity change from 0 to 512 [ 525.708751][T24963] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 525.744997][T24963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 525.771695][T24963] EXT4-fs (loop4): orphan cleanup on readonly fs [ 525.791874][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4962'. [ 525.802585][T24963] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4960: bg 0: block 361: padding at end of block bitmap is not set [ 525.838503][ T3646] bridge_slave_1: left allmulticast mode [ 525.844196][ T3646] bridge_slave_1: left promiscuous mode [ 525.849941][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.860304][T24976] loop0: detected capacity change from 0 to 256 [ 525.872649][T24963] EXT4-fs (loop4): Remounting filesystem read-only [ 525.881339][ T3646] bridge_slave_0: left allmulticast mode [ 525.887130][ T3646] bridge_slave_0: left promiscuous mode [ 525.892801][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.918802][T24963] EXT4-fs (loop4): 1 truncate cleaned up [ 525.925034][T24963] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 526.073096][ T3646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.083176][T24981] FAULT_INJECTION: forcing a failure. [ 526.083176][T24981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.096452][T24981] CPU: 1 UID: 0 PID: 24981 Comm: syz.0.4963 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 526.106962][T24981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 526.117045][T24981] Call Trace: [ 526.120341][T24981] [ 526.123290][T24981] dump_stack_lvl+0xf2/0x150 [ 526.127985][T24981] dump_stack+0x15/0x20 [ 526.132192][T24981] should_fail_ex+0x223/0x230 [ 526.136879][T24981] should_fail+0xb/0x10 [ 526.141068][T24981] should_fail_usercopy+0x1a/0x20 [ 526.146134][T24981] _copy_from_user+0x1e/0xd0 [ 526.150725][T24981] copy_msghdr_from_user+0x54/0x2a0 [ 526.156011][T24981] __sys_sendmmsg+0x21a/0x500 [ 526.160810][T24981] ? trace_sys_enter+0x65/0xa0 [ 526.165805][T24981] __x64_sys_sendmmsg+0x57/0x70 [ 526.170663][T24981] x64_sys_call+0xa49/0x2d60 [ 526.175319][T24981] do_syscall_64+0xc9/0x1c0 [ 526.179894][T24981] ? clear_bhb_loop+0x55/0xb0 [ 526.181323][T24986] loop2: detected capacity change from 0 to 512 [ 526.184625][T24981] ? clear_bhb_loop+0x55/0xb0 [ 526.193002][T24986] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 526.195516][T24981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.207027][T24986] EXT4-fs (loop2): 1 truncate cleaned up [ 526.211215][T24981] RIP: 0033:0x7f3c2da3def9 [ 526.211239][T24981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.211262][T24981] RSP: 002b:00007f3c2c6b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 526.211283][T24981] RAX: ffffffffffffffda RBX: 00007f3c2dbf5f80 RCX: 00007f3c2da3def9 [ 526.211299][T24981] RDX: 040000000000003a RSI: 0000000020001b00 RDI: 0000000000000003 [ 526.266335][T24981] RBP: 00007f3c2c6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 526.274358][T24981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.282348][T24981] R13: 0000000000000000 R14: 00007f3c2dbf5f80 R15: 00007ffe4de2b768 [ 526.290427][T24981] [ 526.295034][ T3646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.306156][ T3646] bond0 (unregistering): Released all slaves [ 526.320095][T24985] 9pnet_fd: Insufficient options for proto=fd [ 526.343632][T24990] netlink: 'syz.0.4966': attribute type 1 has an invalid length. [ 526.356785][T24990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.367417][T24946] chnl_net:caif_netlink_parms(): no params data found [ 526.378622][ T3646] tipc: Left network mode [ 526.379248][T24990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4966'. [ 526.395118][T24990] vlan2: entered promiscuous mode [ 526.400229][T24990] bond1: entered promiscuous mode [ 526.405458][T24990] vlan2: entered allmulticast mode [ 526.410666][T24990] bond1: entered allmulticast mode [ 526.420486][T24994] IPv6: Can't replace route, no match found [ 526.444485][ T3646] hsr_slave_0: left promiscuous mode [ 526.453619][T24997] FAULT_INJECTION: forcing a failure. [ 526.453619][T24997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.466767][T24997] CPU: 1 UID: 0 PID: 24997 Comm: syz.0.4968 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 526.467464][T25000] loop4: detected capacity change from 0 to 128 [ 526.477263][T24997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 526.477283][T24997] Call Trace: [ 526.477292][T24997] [ 526.484003][T25000] vfat: Unknown parameter '' [ 526.493609][T24997] dump_stack_lvl+0xf2/0x150 [ 526.493647][T24997] dump_stack+0x15/0x20 [ 526.493700][T24997] should_fail_ex+0x223/0x230 [ 526.518242][T24997] should_fail+0xb/0x10 [ 526.522434][T24997] should_fail_usercopy+0x1a/0x20 [ 526.527516][T24997] _copy_from_user+0x1e/0xd0 [ 526.532133][T24997] copy_msghdr_from_user+0x54/0x2a0 [ 526.537454][T24997] __sys_sendmmsg+0x21a/0x500 [ 526.542263][T24997] ? trace_sys_enter+0x65/0xa0 [ 526.547081][T24997] __x64_sys_sendmmsg+0x57/0x70 [ 526.552032][T24997] x64_sys_call+0xa49/0x2d60 [ 526.556675][T24997] do_syscall_64+0xc9/0x1c0 [ 526.561222][T24997] ? clear_bhb_loop+0x55/0xb0 [ 526.565915][T24997] ? clear_bhb_loop+0x55/0xb0 [ 526.570647][T24997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.576571][T24997] RIP: 0033:0x7f3c2da3def9 [ 526.581035][T24997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.600731][T24997] RSP: 002b:00007f3c2c6b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 526.609216][T24997] RAX: ffffffffffffffda RBX: 00007f3c2dbf5f80 RCX: 00007f3c2da3def9 [ 526.617266][T24997] RDX: 040000000000003a RSI: 0000000020001b00 RDI: 0000000000000006 [ 526.625331][T24997] RBP: 00007f3c2c6b1090 R08: 0000000000000000 R09: 0000000000000000 [ 526.633306][T24997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.641297][T24997] R13: 0000000000000000 R14: 00007f3c2dbf5f80 R15: 00007ffe4de2b768 [ 526.649290][T24997] [ 526.652368][ T3646] hsr_slave_1: left promiscuous mode [ 526.667233][ T3646] veth1_macvtap: left promiscuous mode [ 526.672909][ T3646] veth0_macvtap: left promiscuous mode [ 526.678607][ T3646] veth1_vlan: left promiscuous mode [ 526.683921][ T3646] veth0_vlan: left promiscuous mode [ 526.724224][T25011] loop0: detected capacity change from 0 to 1024 [ 526.731068][T25011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 526.778172][T25016] program syz.0.4976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.788135][ T3646] team0 (unregistering): Port device team_slave_1 removed [ 526.800840][ T3646] team0 (unregistering): Port device team_slave_0 removed [ 526.840943][T25005] tipc: Enabling of bearer rejected, failed to enable media [ 526.872664][T25027] loop4: detected capacity change from 0 to 128 [ 526.895015][T25027] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20001 [ 526.902548][T24946] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.909665][T24946] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.921833][T25031] FAULT_INJECTION: forcing a failure. [ 526.921833][T25031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.927065][T24946] bridge_slave_0: entered allmulticast mode [ 526.935010][T25031] CPU: 0 UID: 0 PID: 25031 Comm: syz.2.4980 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 526.944521][T24946] bridge_slave_0: entered promiscuous mode [ 526.951436][T25031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 526.951472][T25031] Call Trace: [ 526.951479][T25031] [ 526.951488][T25031] dump_stack_lvl+0xf2/0x150 [ 526.958681][T24946] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.967355][T25031] dump_stack+0x15/0x20 [ 526.970791][T24946] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.973582][T25031] should_fail_ex+0x223/0x230 [ 526.978387][T24946] bridge_slave_1: entered allmulticast mode [ 526.985171][T25031] should_fail+0xb/0x10 [ 526.992610][T24946] bridge_slave_1: entered promiscuous mode [ 526.996335][T25031] should_fail_usercopy+0x1a/0x20 [ 527.022145][T25031] _copy_from_user+0x1e/0xd0 [ 527.026803][T25031] copy_msghdr_from_user+0x54/0x2a0 [ 527.032071][T25031] __sys_sendmsg+0x171/0x270 [ 527.036721][T25031] __x64_sys_sendmsg+0x46/0x50 [ 527.041545][T25031] x64_sys_call+0x2689/0x2d60 [ 527.046322][T25031] do_syscall_64+0xc9/0x1c0 [ 527.050872][T25031] ? clear_bhb_loop+0x55/0xb0 [ 527.055556][T25031] ? clear_bhb_loop+0x55/0xb0 [ 527.060256][T25031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.066224][T25031] RIP: 0033:0x7f9d3001def9 [ 527.070670][T25031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.090312][T25031] RSP: 002b:00007f9d2ec91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.098803][T25031] RAX: ffffffffffffffda RBX: 00007f9d301d5f80 RCX: 00007f9d3001def9 [ 527.106865][T25031] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 527.114997][T25031] RBP: 00007f9d2ec91090 R08: 0000000000000000 R09: 0000000000000000 [ 527.123073][T25031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.131052][T25031] R13: 0000000000000000 R14: 00007f9d301d5f80 R15: 00007fff121be3e8 [ 527.139084][T25031] [ 527.157986][T25033] loop4: detected capacity change from 0 to 128 [ 527.159701][T24946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.164563][T25033] vfat: Unknown parameter '' [ 527.177384][T24946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.204332][T24946] team0: Port device team_slave_0 added [ 527.212890][T24946] team0: Port device team_slave_1 added [ 527.232453][T24946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.239770][T24946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.266128][T24946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.278220][T24946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.285278][T24946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.311443][T24946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.322398][T25044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25044 comm=syz.2.4985 [ 527.328666][T25043] loop4: detected capacity change from 0 to 512 [ 527.347460][T25044] ipip0: entered promiscuous mode [ 527.356118][T25041] loop2: detected capacity change from 0 to 256 [ 527.359717][T25043] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.377247][T24946] hsr_slave_0: entered promiscuous mode [ 527.383975][T24946] hsr_slave_1: entered promiscuous mode [ 527.391787][T24946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.395111][T25041] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 527.399743][T24946] Cannot create hsr debugfs directory [ 527.409759][T25041] FAT-fs (loop2): Filesystem has been set read-only [ 527.422882][T25041] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 527.455707][T25048] tipc: Started in network mode [ 527.460702][T25048] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 527.467980][T25048] tipc: Enabled bearer , priority 0 [ 527.527686][T25055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4990'. [ 527.549832][T25057] loop3: detected capacity change from 0 to 512 [ 527.556597][T25057] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 527.575747][T25057] EXT4-fs (loop3): 1 truncate cleaned up [ 527.589751][T25057] 9pnet_fd: Insufficient options for proto=fd [ 527.678444][T25068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4996'. [ 527.734413][T25071] loop0: detected capacity change from 0 to 1024 [ 527.753962][T25071] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 527.789587][T25075] tipc: Enabling of bearer rejected, failed to enable media [ 527.800450][T24946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 527.846273][T24946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 527.864790][T24946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 527.879397][T24946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 527.920870][T24946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.932556][T24946] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.949874][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.957069][ T3646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.969674][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.976796][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.996921][T25079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.004672][T25079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.014738][T25079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.022347][T25079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.033753][T25079] tipc: Resetting bearer [ 528.044633][T25079] tipc: Disabling bearer [ 528.172430][T24946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.203138][T25107] loop2: detected capacity change from 0 to 1024 [ 528.210593][T25107] EXT4-fs: Ignoring removed orlov option [ 528.216402][T25107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 528.216664][T25105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5010'. [ 528.241666][T24946] veth0_vlan: entered promiscuous mode [ 528.249888][T24946] veth1_vlan: entered promiscuous mode [ 528.270456][T24946] veth0_macvtap: entered promiscuous mode [ 528.279144][T24946] veth1_macvtap: entered promiscuous mode [ 528.290183][T24946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.300710][T24946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.310728][T24946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.321286][T24946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.331170][T24946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.341641][T24946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.352840][T24946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.361389][T24946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.371877][T24946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.381738][T24946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.392434][T24946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.402306][T24946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.412846][T24946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.423554][T24946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.484058][T24946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.493043][T24946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.501834][T24946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.510637][T24946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.714650][T25128] FAULT_INJECTION: forcing a failure. [ 528.714650][T25128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.727868][T25128] CPU: 1 UID: 0 PID: 25128 Comm: syz.1.5013 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 528.738561][T25128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 528.748643][T25128] Call Trace: [ 528.751956][T25128] [ 528.754901][T25128] dump_stack_lvl+0xf2/0x150 [ 528.759573][T25128] dump_stack+0x15/0x20 [ 528.763771][T25128] should_fail_ex+0x223/0x230 [ 528.768503][T25128] should_fail+0xb/0x10 [ 528.772701][T25128] should_fail_usercopy+0x1a/0x20 [ 528.777799][T25128] _copy_from_user+0x1e/0xd0 [ 528.782514][T25128] __sys_bpf+0x14e/0x7a0 [ 528.786930][T25128] __x64_sys_bpf+0x43/0x50 [ 528.791423][T25128] x64_sys_call+0x2625/0x2d60 [ 528.796132][T25128] do_syscall_64+0xc9/0x1c0 [ 528.800729][T25128] ? clear_bhb_loop+0x55/0xb0 [ 528.805475][T25128] ? clear_bhb_loop+0x55/0xb0 [ 528.810276][T25128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.816213][T25128] RIP: 0033:0x7f834febdef9 [ 528.820651][T25128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.840374][T25128] RSP: 002b:00007f834eb31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.848891][T25128] RAX: ffffffffffffffda RBX: 00007f8350075f80 RCX: 00007f834febdef9 [ 528.856885][T25128] RDX: 0000000000000094 RSI: 0000000020002580 RDI: 0000000000000005 [ 528.864870][T25128] RBP: 00007f834eb31090 R08: 0000000000000000 R09: 0000000000000000 [ 528.872862][T25128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.880880][T25128] R13: 0000000000000001 R14: 00007f8350075f80 R15: 00007fff621bd208 [ 528.888882][T25128] [ 528.904207][T25133] 9pnet_fd: Insufficient options for proto=fd [ 528.996525][T25142] Cannot find set identified by id 0 to match [ 529.018009][T25139] siw: device registration error -23 [ 529.024347][T25139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5018'. [ 529.044028][T25142] loop2: detected capacity change from 0 to 512 [ 529.055509][T25142] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 529.081181][T25148] tipc: Enabling of bearer rejected, failed to enable media [ 529.104884][T25142] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5017: invalid indirect mapped block 83886080 (level 1) [ 529.129828][T25142] EXT4-fs (loop2): Remounting filesystem read-only [ 529.136589][T25142] EXT4-fs (loop2): 1 orphan inode deleted [ 529.142399][T25142] EXT4-fs (loop2): 1 truncate cleaned up [ 529.151488][T25161] loop4: detected capacity change from 0 to 512 [ 529.158815][T25161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 529.170144][T25142] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 529.177872][T25161] EXT4-fs (loop4): 1 truncate cleaned up [ 529.209990][T25158] loop1: detected capacity change from 0 to 512 [ 529.220876][T24320] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 529.256395][T24320] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 529.279634][T24320] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 529.292073][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5029'. [ 529.302470][T24320] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 529.310025][T25175] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5029'. [ 529.310842][T25158] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.333731][T24320] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 529.371047][T24320] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 529.373809][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5029'. [ 529.399829][T25175] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5029'. [ 529.402334][T24320] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 529.436555][T25180] loop2: detected capacity change from 0 to 512 [ 529.442857][T24320] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 529.443157][T24320] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /48/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 529.464733][T25180] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 529.498402][T24320] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 529.521182][T25186] siw: device registration error -23 [ 529.527184][T25180] EXT4-fs (loop2): 1 truncate cleaned up [ 529.537449][T25186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5033'. [ 529.551677][T25180] 9pnet_fd: Insufficient options for proto=fd [ 529.561259][T25190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 529.570253][T25190] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5032'. [ 529.589782][T25190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 529.598822][T25190] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5032'. [ 529.643290][T25196] loop2: detected capacity change from 0 to 164 [ 529.684069][T25201] loop0: detected capacity change from 0 to 1024 [ 529.694128][T25203] loop1: detected capacity change from 0 to 512 [ 529.701718][T25203] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 529.724054][T25203] EXT4-fs (loop1): 1 truncate cleaned up [ 529.726252][T25205] loop3: detected capacity change from 0 to 1024 [ 529.740929][T25201] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 529.752804][T25205] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 529.761182][T25208] loop2: detected capacity change from 0 to 128 [ 529.776962][T24946] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 529.799725][T25208] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 529.800357][T24946] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 529.853355][T24946] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 529.877007][T24946] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 529.900342][T24946] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 529.946607][T25214] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 529.952938][T24946] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 529.973193][T25214] dvmrp1: linktype set to 768 [ 529.999249][T24946] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 530.053091][T25221] loop0: detected capacity change from 0 to 1024 [ 530.096231][T24946] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 530.122295][T25221] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 530.131955][T24946] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /8/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 530.176637][T24946] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 530.249022][T25220] chnl_net:caif_netlink_parms(): no params data found [ 530.321978][T25220] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.329190][T25220] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.336516][T25220] bridge_slave_0: entered allmulticast mode [ 530.343151][T25220] bridge_slave_0: entered promiscuous mode [ 530.350262][T25220] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.357469][T25220] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.364763][T25220] bridge_slave_1: entered allmulticast mode [ 530.371419][T25220] bridge_slave_1: entered promiscuous mode [ 530.405305][T25220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.418015][T25220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.452176][T25220] team0: Port device team_slave_0 added [ 530.460072][T25220] team0: Port device team_slave_1 added [ 530.485381][T25220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.492484][T25220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.518578][T25220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.530895][T25220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.537943][T25220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.563930][T25220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.602424][T25220] hsr_slave_0: entered promiscuous mode [ 530.611746][T25220] hsr_slave_1: entered promiscuous mode [ 530.622870][T25220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.631456][T25220] Cannot create hsr debugfs directory [ 530.675738][T25238] siw: device registration error -23 [ 530.758364][T25220] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.782306][T25247] loop2: detected capacity change from 0 to 1024 [ 530.789531][T25247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.813061][T25220] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.826159][T25252] loop3: detected capacity change from 0 to 256 [ 530.844571][T25254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.857930][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 530.857947][ T29] audit: type=1400 audit(1727219487.006:25553): avc: denied { write } for pid=25251 comm="syz.3.5052" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 530.887967][T25254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.896362][ T29] audit: type=1400 audit(1727219487.006:25554): avc: denied { map } for pid=25251 comm="syz.3.5052" path="socket:[120588]" dev="sockfs" ino=120588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.921067][ T29] audit: type=1400 audit(1727219487.006:25555): avc: denied { read } for pid=25251 comm="syz.3.5052" path="socket:[120588]" dev="sockfs" ino=120588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.960885][T25220] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.973338][T25256] FAULT_INJECTION: forcing a failure. [ 530.973338][T25256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.986506][T25256] CPU: 0 UID: 0 PID: 25256 Comm: syz.2.5051 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 530.997015][T25256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 531.007194][T25256] Call Trace: [ 531.010554][T25256] [ 531.013551][T25256] dump_stack_lvl+0xf2/0x150 [ 531.018186][T25256] dump_stack+0x15/0x20 [ 531.022426][T25256] should_fail_ex+0x223/0x230 [ 531.027355][T25256] should_fail+0xb/0x10 [ 531.031639][T25256] should_fail_usercopy+0x1a/0x20 [ 531.036714][T25256] _copy_from_user+0x1e/0xd0 [ 531.041342][T25256] copy_msghdr_from_user+0x54/0x2a0 [ 531.046641][T25256] __sys_sendmsg+0x171/0x270 [ 531.051278][T25256] __x64_sys_sendmsg+0x46/0x50 [ 531.056045][T25256] x64_sys_call+0x2689/0x2d60 [ 531.060810][T25256] do_syscall_64+0xc9/0x1c0 [ 531.065382][T25256] ? clear_bhb_loop+0x55/0xb0 [ 531.070061][T25256] ? clear_bhb_loop+0x55/0xb0 [ 531.074876][T25256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.080823][T25256] RIP: 0033:0x7f9d3001def9 [ 531.085235][T25256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.104848][T25256] RSP: 002b:00007f9d2ec70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.113269][T25256] RAX: ffffffffffffffda RBX: 00007f9d301d6058 RCX: 00007f9d3001def9 [ 531.121250][T25256] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000006 [ 531.129222][T25256] RBP: 00007f9d2ec70090 R08: 0000000000000000 R09: 0000000000000000 [ 531.137188][T25256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.145206][T25256] R13: 0000000000000000 R14: 00007f9d301d6058 R15: 00007fff121be3e8 [ 531.153183][T25256] [ 531.183828][T25261] loop3: detected capacity change from 0 to 1024 [ 531.190863][T25261] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 531.219989][T25220] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.255457][T25263] syz.0.5053: attempt to access beyond end of device [ 531.255457][T25263] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 531.295317][T25220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 531.307928][T25220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 531.323116][T25220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 531.336119][T25220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 531.397899][T25220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.411592][T25220] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.433280][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.440443][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.451792][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.458990][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.480526][T25220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.491018][T25220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.586175][T25220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.728101][T25264] ================================================================== [ 531.736250][T25264] BUG: KCSAN: data-race in __mark_inode_dirty / generic_buffers_fsync_noflush [ 531.745172][T25264] [ 531.747509][T25264] write to 0xffff888104e1cf38 of 4 bytes by task 25261 on cpu 1: [ 531.755857][T25264] __mark_inode_dirty+0x24e/0x7e0 [ 531.760929][T25264] touch_atime+0x230/0x350 [ 531.765371][T25264] filemap_splice_read+0x8a5/0x910 [ 531.770520][T25264] ext4_file_splice_read+0x8f/0xb0 [ 531.775664][T25264] splice_direct_to_actor+0x269/0x670 [ 531.781066][T25264] do_splice_direct+0xd7/0x150 [ 531.785862][T25264] do_sendfile+0x39b/0x970 [ 531.790311][T25264] __x64_sys_sendfile64+0x110/0x150 [ 531.795541][T25264] x64_sys_call+0xed5/0x2d60 [ 531.800164][T25264] do_syscall_64+0xc9/0x1c0 [ 531.804735][T25264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.810649][T25264] [ 531.812976][T25264] read to 0xffff888104e1cf38 of 4 bytes by task 25264 on cpu 0: [ 531.820670][T25264] generic_buffers_fsync_noflush+0x83/0x120 [ 531.826610][T25264] ext4_sync_file+0x1ff/0x6c0 [ 531.831333][T25264] vfs_fsync_range+0x116/0x130 [ 531.836132][T25264] ext4_buffered_write_iter+0x326/0x370 [ 531.841738][T25264] ext4_file_write_iter+0x293/0xe10 [ 531.846975][T25264] iter_file_splice_write+0x5f1/0x980 [ 531.852387][T25264] direct_splice_actor+0x160/0x2c0 [ 531.857514][T25264] splice_direct_to_actor+0x302/0x670 [ 531.862919][T25264] do_splice_direct+0xd7/0x150 [ 531.867721][T25264] do_sendfile+0x39b/0x970 [ 531.872164][T25264] __x64_sys_sendfile64+0x110/0x150 [ 531.877392][T25264] x64_sys_call+0xed5/0x2d60 [ 531.882018][T25264] do_syscall_64+0xc9/0x1c0 [ 531.886556][T25264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.892496][T25264] [ 531.894834][T25264] value changed: 0x00000000 -> 0x00000028 [ 531.900570][T25264] [ 531.902895][T25264] Reported by Kernel Concurrency Sanitizer on: [ 531.909057][T25264] CPU: 0 UID: 0 PID: 25264 Comm: syz.3.5054 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 531.919483][T25264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 531.929546][T25264] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 531.957354][ T29] audit: type=1400 audit(1727219488.096:25556): avc: denied { write } for pid=3249 comm="syz-executor" path="pipe:[1732]" dev="pipefs" ino=1732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 532.027483][ T29] audit: type=1400 audit(1727219488.136:25557): avc: denied { read } for pid=2946 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 532.049804][ T29] audit: type=1400 audit(1727219488.136:25558): avc: denied { search } for pid=2946 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.071752][ T29] audit: type=1400 audit(1727219488.136:25559): avc: denied { append } for pid=2946 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.094207][ T29] audit: type=1400 audit(1727219488.136:25560): avc: denied { open } for pid=2946 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.116889][ T29] audit: type=1400 audit(1727219488.136:25561): avc: denied { getattr } for pid=2946 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.325840][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.410904][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.460899][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.531124][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.590367][ T56] bridge_slave_1: left allmulticast mode [ 532.596129][ T56] bridge_slave_1: left promiscuous mode [ 532.601923][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.609963][ T56] bridge_slave_0: left allmulticast mode [ 532.615674][ T56] bridge_slave_0: left promiscuous mode [ 532.621390][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.657788][ T56] bond1: left allmulticast mode [ 532.662836][ T56] bond1: left promiscuous mode [ 532.801192][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.812407][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.823403][ T56] bond0 (unregistering): Released all slaves [ 532.834112][ T56] bond1 (unregistering): Released all slaves [ 532.891905][ T56] hsr_slave_0: left promiscuous mode [ 532.897698][ T56] hsr_slave_1: left promiscuous mode [ 532.903369][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.910819][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.918774][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.926186][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.936126][ T56] veth1_macvtap: left promiscuous mode [ 532.941667][ T56] veth0_macvtap: left promiscuous mode [ 532.947222][ T56] veth1_vlan: left promiscuous mode [ 532.952516][ T56] veth0_vlan: left promiscuous mode [ 533.034483][ T56] team0 (unregistering): Port device team_slave_1 removed [ 533.044770][ T56] team0 (unregistering): Port device team_slave_0 removed [ 533.542701][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.611091][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.661124][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.730622][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.792123][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.861044][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.910531][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.980413][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.043204][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.100413][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.161180][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.210857][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.270748][ T56] bridge_slave_1: left allmulticast mode [ 534.276502][ T56] bridge_slave_1: left promiscuous mode [ 534.282255][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.290414][ T56] bridge_slave_0: left allmulticast mode [ 534.296159][ T56] bridge_slave_0: left promiscuous mode [ 534.301983][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.310469][ T56] bridge_slave_1: left allmulticast mode [ 534.316138][ T56] bridge_slave_1: left promiscuous mode [ 534.321883][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.329553][ T56] bridge_slave_0: left allmulticast mode [ 534.335245][ T56] bridge_slave_0: left promiscuous mode [ 534.341096][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.349461][ T56] bridge_slave_1: left allmulticast mode [ 534.355108][ T56] bridge_slave_1: left promiscuous mode [ 534.360978][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.368895][ T56] bridge_slave_0: left allmulticast mode [ 534.374572][ T56] bridge_slave_0: left promiscuous mode [ 534.380314][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.690156][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.700850][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.711304][ T56] bond0 (unregistering): Released all slaves [ 534.720932][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.731351][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.741492][ T56] bond0 (unregistering): Released all slaves [ 534.750917][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.761549][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.771786][ T56] bond0 (unregistering): Released all slaves [ 534.844506][ T56] hsr_slave_0: left promiscuous mode [ 534.850348][ T56] hsr_slave_1: left promiscuous mode [ 534.856182][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.863693][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.871458][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.878921][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.888126][ T56] hsr_slave_0: left promiscuous mode [ 534.893743][ T56] hsr_slave_1: left promiscuous mode [ 534.901406][ T56] hsr_slave_0: left promiscuous mode [ 534.907178][ T56] hsr_slave_1: left promiscuous mode [ 534.917579][ T56] veth1_macvtap: left promiscuous mode [ 534.923208][ T56] veth0_macvtap: left promiscuous mode [ 534.928738][ T56] veth1_vlan: left promiscuous mode [ 534.934048][ T56] veth0_vlan: left promiscuous mode [ 534.939947][ T56] veth1_macvtap: left promiscuous mode [ 534.945446][ T56] veth0_macvtap: left promiscuous mode [ 534.951009][ T56] veth1_vlan: left promiscuous mode [ 534.956229][ T56] veth0_vlan: left promiscuous mode [ 534.962013][ T56] veth1_macvtap: left promiscuous mode [ 534.967597][ T56] veth0_macvtap: left promiscuous mode [ 534.973087][ T56] veth1_vlan: left promiscuous mode [ 534.978311][ T56] veth0_vlan: left promiscuous mode [ 535.141973][ T56] team0 (unregistering): Port device team_slave_1 removed [ 535.153153][ T56] team0 (unregistering): Port device team_slave_0 removed [ 535.213350][ T56] team0 (unregistering): Port device team_slave_1 removed [ 535.224027][ T56] team0 (unregistering): Port device team_slave_0 removed [ 535.284582][ T56] team0 (unregistering): Port device team_slave_1 removed [ 535.294867][ T56] team0 (unregistering): Port device team_slave_0 removed [ 536.150431][ T56] bridge_slave_1: left allmulticast mode [ 536.156125][ T56] bridge_slave_1: left promiscuous mode [ 536.161857][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.169579][ T56] bridge_slave_0: left allmulticast mode [ 536.175271][ T56] bridge_slave_0: left promiscuous mode [ 536.180968][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.250593][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.261039][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.271014][ T56] bond0 (unregistering): Released all slaves [ 536.341122][ T56] hsr_slave_0: left promiscuous mode [ 536.346827][ T56] hsr_slave_1: left promiscuous mode [ 536.352531][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.360204][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.418706][ T56] team0 (unregistering): Port device team_slave_1 removed [ 536.428606][ T56] team0 (unregistering): Port device team_slave_0 removed