last executing test programs: 2m30.727383699s ago: executing program 1 (id=1657): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) 2m30.681783462s ago: executing program 1 (id=1659): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) 2m30.633853624s ago: executing program 0 (id=1660): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/63, 0x3f}], 0x1) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m30.633422444s ago: executing program 1 (id=1661): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 2m30.632641394s ago: executing program 1 (id=1663): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) unshare(0x8040080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'macvtap0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) io_setup(0x20, &(0x7f0000001140)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = gettid() futex(&(0x7f000000cffc)=0x1, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpriority(0x1, 0x1, 0x3ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_emit_ethernet(0x82, &(0x7f00000038c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x4c, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "000001", 0x0, 0x88, 0x0, @private0, @loopback, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "9b54245e2c2b09e4b6f4d719"}}}}}}}, 0x0) io_uring_enter(r0, 0x1629, 0x2adc, 0x18, &(0x7f0000000000)={[0x3]}, 0x8) 2m30.396585999s ago: executing program 4 (id=1672): syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x1b, 0xff, 0x34, 0x10, 0x61d, 0xc160, 0xb874, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x20, 0xd0, 0x8, [{{0x9, 0x4, 0xd3, 0x7, 0x1, 0x37, 0xc5, 0x4a, 0x0, [], [{{0x9, 0x5, 0x9, 0x3, 0x3df, 0x5, 0x3c, 0x7}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2m30.292361507s ago: executing program 3 (id=1675): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m30.222738755s ago: executing program 3 (id=1676): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x1e, 0x25, 0x40, 0x45e, 0xf4, 0xd551, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xe9, 0xbe}}]}}]}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) 2m29.864389153s ago: executing program 4 (id=1682): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000440)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2m29.79920336s ago: executing program 0 (id=1685): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x7, 0x0, 0x80}, 0x14) 2m29.798029101s ago: executing program 4 (id=1686): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 2m29.776722166s ago: executing program 0 (id=1687): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) 2m29.639305314s ago: executing program 0 (id=1691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m29.639090234s ago: executing program 3 (id=1693): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000500)={0x1d, r1, 0x8, {0x2}, 0x3}, 0x18, &(0x7f0000000940)={0x0}, 0x2}, 0x20060800) 2m29.638889054s ago: executing program 3 (id=1694): mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) utime(&(0x7f0000000000)='./file0\x00', 0x0) 2m29.630757926s ago: executing program 4 (id=1695): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000d040000002000000000000000", @ANYRES32=0x0, @ANYBLOB="08100100000000001c0012800c0001006d6163766c616e000c0002800600020092"], 0x48}}, 0x0) 2m29.625576727s ago: executing program 1 (id=1696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000700000000000000000000008500000087000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.607728672s ago: executing program 3 (id=1697): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 2m29.600654364s ago: executing program 0 (id=1698): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x7, 0x0, 0x80}, 0x14) 2m29.551778417s ago: executing program 4 (id=1699): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 2m29.333346936s ago: executing program 0 (id=1700): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) 2m29.332978627s ago: executing program 4 (id=1701): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x8) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '}\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 2m29.332723766s ago: executing program 32 (id=1700): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) 2m29.332626276s ago: executing program 33 (id=1701): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x8) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '}\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 2m29.308809833s ago: executing program 1 (id=1704): socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) 2m29.308445123s ago: executing program 34 (id=1704): socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_open(&(0x7f00005a1ffb)='e\xeeQ\x92o', 0x42, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) 2m29.09957222s ago: executing program 3 (id=1705): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000500)={0x1d, r1, 0x8, {0x2}, 0x3}, 0x18, &(0x7f0000000940)={0x0}, 0x2}, 0x20060800) 2m29.09937038s ago: executing program 35 (id=1705): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000500)={0x1d, r1, 0x8, {0x2}, 0x3}, 0x18, &(0x7f0000000940)={0x0}, 0x2}, 0x20060800) 3.433792271s ago: executing program 2 (id=4714): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x28}}], 0x1, 0x0) r3 = gettid() epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000020305e0ff0000c40e254cfe01080001000106036ca23144ce2cfe2d483f05498ebd26f6e5b7ff35b45e8c763b5f6430627d532cfb044707dc40ffe07a5f78aec9918b"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4}, 0x18) setreuid(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4bc, &(0x7f00000018c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES16=r2], 0x3b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000ffff000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='ext4_request_inode\x00', r8}, 0x18) recvmsg$unix(r0, &(0x7f0000000ec0)={&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/235, 0xeb}, {&(0x7f0000000b80)=""/160, 0xa0}, {&(0x7f0000000c40)=""/177, 0xb1}, {&(0x7f0000000d00)=""/251, 0xfb}], 0x4, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r3) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) 2.742597178s ago: executing program 6 (id=4724): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@grpid}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x577}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") 2.499947483s ago: executing program 2 (id=4731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(0x0, 0x0) 1.967516077s ago: executing program 6 (id=4733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x39, 0x1, @tid=r0}, &(0x7f0000000280)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x0, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x72, r10}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x11) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x1000}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(0x0, 0x0) 1.781927438s ago: executing program 5 (id=4734): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.719846975s ago: executing program 5 (id=4737): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8971, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.709710057s ago: executing program 8 (id=4738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.66000504s ago: executing program 8 (id=4739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000540)={[0x80]}, 0x8, 0x80000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/141, 0x8d}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000240)=""/105, 0x69}], 0x1, 0x0) io_setup(0x7, &(0x7f00000002c0)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@can_delroute={0x14, 0x19, 0x1}, 0x14}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) write(r1, &(0x7f0000000300)="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", 0xfc4c) 1.600489427s ago: executing program 2 (id=4740): mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x118823, 0x0) 1.584733911s ago: executing program 2 (id=4741): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2e, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2040cc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xfd, 0x1c9, &(0x7f0000001280)="$eJzs3bFu01AUBuATUxKHqRsSAskSC1MFPEERKhLCEhIoA0wgtSwNQqKLYWkfgwfkAVCnLMiotVtTw5BYig3p9y05zu+be+6Qmyy5eXf34+H+p6MP329/izQdRbIbu7EYxXYkceEkAIBNsijL+FFWhu4FAOjHEp//P3tuCQBYs9dv3r54kud7r7IsjTg9KWbFrHqs8mfP872H2bntZtRpUcxuXOaPsvZ3h7P8Ztyq88fV+OxqPo4H96v8LHv6Mm/lk9hf79IBAAAAAAAAAAAAAAAAAAAAAGAw9yK78NfzfXZ22vm0zqur384Hap3fsxV3turL5nig8riPRQEAAAAAAAAAAAAAAAAAAMB/5ujL18P38/nB56aYRMTVZ1YpRvULdxqeTKvBnWdfuUjO5xr3MpeiryL7N9qYd3sXHIwjYl2NLcqyXOrmZo+YDLIzAQAAAAAAAAAAAAAAAADA9dP86PfPLB2iIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYQPP//x2K44hY4ubLyaaDLhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAN9isAAP//+mEx/Q==") mkdir(&(0x7f0000000140)='./control\x00', 0x0) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') (async) rmdir(&(0x7f0000000100)='./control\x00') pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) 1.260356629s ago: executing program 2 (id=4742): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x28}}], 0x1, 0x0) r3 = gettid() epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000020305e0ff0000c40e254cfe01080001000106036ca23144ce2cfe2d483f05498ebd26f6e5b7ff35b45e8c763b5f6430627d532cfb044707dc40ffe07a5f78aec9918b"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4}, 0x18) setreuid(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4bc, &(0x7f00000018c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES16=r2], 0x3b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000ffff000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='ext4_request_inode\x00', r8}, 0x18) recvmsg$unix(r0, &(0x7f0000000ec0)={&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/235, 0xeb}, {&(0x7f0000000b80)=""/160, 0xa0}, {&(0x7f0000000c40)=""/177, 0xb1}, {&(0x7f0000000d00)=""/251, 0xfb}], 0x4, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r3) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4) 1.259416689s ago: executing program 8 (id=4743): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'macvtap0\x00', {0x8001}, 0xe08}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x158000, 0x5e) sendfile(r2, r3, 0x0, 0x1000000000004) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x180, 0x180, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0xffffffff, 0xffffffff, 'sit0\x00', 'gretap0\x00', {}, {}, 0x5c, 0x6, 0x8}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3a537b450c25a0d9e65fb2a76c2f5b27fa25ae06f96d2e05b07e54af9b51"}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bridge0\x00', 'team0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffe]}}}, {{@ip={@dev, @private, 0x0, 0x0, 'caif0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x4], 0x2}, {0x0, [0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 1.241770224s ago: executing program 8 (id=4744): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1000, 0x0) splice(r2, 0x0, r6, 0x0, 0x7, 0x1) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r10, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) accept4(r7, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r11, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.21944245s ago: executing program 5 (id=4745): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) (async) setreuid(0x0, 0xee00) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="58000000140019234083598082e59a49e8ae", 0x12}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="838bbba9b3581ace34845af25f49f2c9106e2a82b5de50edd4488596fa361687d38e5e4eb4eb184d5ab1415537e4026db1b6b2e3f3315303bb0e3fbdd5a92e3a219974b9939bd812b2984c204e433c23bce412b5b8149ba2f9db5158ae74ae5b7fc4d98c6648d74bc1e0cdc734129b13b15399c0151660c817ff52bf826a38c0bbf135defcdf0537eac249b637be962d9cbd46503c10d275db85bb1735e2602c5dbb6946202b71b5e33f9b60beefbfa7825eb71565175f4c7410cd013e031ad0111d9e09489c93"]) 1.084472397s ago: executing program 5 (id=4746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.03445528s ago: executing program 6 (id=4747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000340)={0x9, 0x4}, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='wake_reaper\x00', r0, 0x0, 0x8}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 824.598847ms ago: executing program 7 (id=4748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 644.598666ms ago: executing program 7 (id=4749): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 500.513125ms ago: executing program 6 (id=4750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 498.447735ms ago: executing program 7 (id=4751): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x28}}], 0x1, 0x0) r3 = gettid() epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000020305e0ff0000c40e254cfe01080001000106036ca23144ce2cfe2d483f05498ebd26f6e5b7ff35b45e8c763b5f6430627d532cfb044707dc40ffe07a5f78aec9918b"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4}, 0x18) setreuid(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4bc, &(0x7f00000018c0)="$eJzs3EtsVFUfAPD/nU5pgY+PfnyIgqhFNDYaWygoLNzgI3GBiREXumz6IJVCDa2JECIlMbg0JO6NS7cu3KpbVyZucWliSIhhA7gac2fubefZF9MZYH6/ZOg5d86dc/5zz7lz5p65BNCzhtN/koj/RMTNiNhdydYWGK78uXfnyuT9O1cmY6lUOvN3Ui53N81n8v12ZpmRQkThy6TuBSsWLl0+NzE3N30xy48tnv90bOHS5Vdnz0+cnT47fWH85Mnjx46eeH38tY0H1aS+NK67B76YP7j/3Y9vvDdZzLcPZn+r42iX4Rhu1pSyF9tdWZftqkonxS42hA3pi4j0cPWXx//u6ItieRvw+CuVSqWB1k8vlepda9gCPLKS6HYLgO7IP+jT77/5o0NTj4fC7VOVL0Bp3PeyR+WZYhSyMv1132/baTAiPlr659v0EVt0HQIAoNrPp/KZYP38rxD7qsr9N1tDGYqI/0XEnoj4f0TsjYgnIspln4yIp+pefzgiSqvUP1yXb5z/FG49UIBrSOd/b2RrW7Xzv3z2F0N9WW5XRD5hnj6SvScj0T8wMzs3fXSVOn55+/evWz03XDX/Sx9p/flcMGvHrWLdBbqpicWJTQdc5/a1iAPF+viTYkQS+TJOEhH7I+LABl53qCo9+/L3B5cz/bXl1o6/rNR0Ha0N60yl7yJeqhz/pag5/is1JquvT44Nxtz0kbGZpNIrGv362/X3W9W/Zvw//lm/yzsnfjrzoGEvS4//jqr+H/n67Ur8Q0lEsrxeu7DxOq7/8VXL7zTr6/9Xa/ZJ+/+25MNyelu27fOJxcWLRyO2Jacbt4+v7Jvn8/Jp/COHm4//Pdk+6TvxdESknfiZiHg2Ip7L2n4oIp6PiMPNgsv7+psvfLL5+LdWGv9U0/NfzfFfWa9fOJ0nLq030Xfu0M37LU4e6zv+x8upkWxL8/NfUnOKqGrFW6s1sA1vIQAAADz0ClH+7X9hdDldKIyOVq4B7Y0dhbn5hcVXZuY/uzBVuUdgKPoLM7Nz5StdlevB/Ul+/XOoKj9elz+WXTf+pm97OT86OT831e3gocftLI/5pGH8p/5yIwA8/tyvBb1rrfG/70aHGgJ0nM9/6F1V43+pRZElv5SBx1Pzz//+jrcD6Lxm4//qJvYBHi0lYxl6mvEPvasYHyynC11tCdBpPv+hJ63/Lv7NJEoDzZ8ajMbCMbg1zdjepK6uJNKZVVdq376ZvfL/TaFlmSis9TrFmj42EI1l+qIrx+LsvrZ3/lL2W/l2N/WH1cdpPl3fgjeqs+chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArfJvAAAA//9A/tYQ") bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES16=r2], 0x3b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='ext4_request_inode\x00', r7}, 0x18) recvmsg$unix(r0, &(0x7f0000000ec0)={&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000c40)=""/177, 0xb1}, {&(0x7f0000000d00)=""/251, 0xfb}], 0x3, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40) 484.243629ms ago: executing program 6 (id=4752): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000c00)="480000001400190d7ebdeb75fd0d8c562c84d8c033950ebd9cfc02e18dffd8d076e0ed7a80ffe0090f0000870d001b12537f005603ca00000f7f8900c3730f0000200000008b1071", 0x48}], 0x1) 388.539325ms ago: executing program 8 (id=4753): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 385.619026ms ago: executing program 7 (id=4754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x80}}, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x27000000) 357.405794ms ago: executing program 7 (id=4755): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 342.856887ms ago: executing program 2 (id=4756): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 288.139352ms ago: executing program 8 (id=4757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) r2 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000020000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/18, 0x201000, 0x1000}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0x63d}}, {@max_batch_time}, {@prjquota}, {@mblk_io_submit}, {@nomblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@debug}]}, 0xfe, 0x478, &(0x7f0000002680)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r4, 0xc17a) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$sock_SIOCDELRT(r4, 0x890c, 0x0) socket(0x26, 0x6, 0x400014ac) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000100000000000000000000000000000009b"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x800097ab, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 182.190201ms ago: executing program 6 (id=4758): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xbb, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa3a86dd6997def500850601fc020000000000000000000000000001fc010000000000000000000000000000000004c96600000033000641680000004e244e21", @ANYRES32, @ANYRES32, @ANYBLOB="6000000690780005fe06e2d4c3d900fe12f9899c0e5d104f5931790e76cdf544dc13125cf0bc77000df84270995647a1e7c2e3fe07f98992ca52030bd2d0d625aa6851386bfe06e2d4c3d900685110d00000000000000000fe85f316169ae7c64fdd60b16b11754d2eb4b388657ff59119576f45e7a45c098cc75a74cf7f88b602b0353bc64003e7775d04ec61d8e39a0014b3da2ded5115f01229cdac447c36b79b225a89b38c0687f3b13092598e2a6f45bf58e10621065b8259b9e99ddbd2c5117390a72d840e"], &(0x7f0000000040)={0x1, 0x2, [0xab1, 0xd, 0xb2b, 0x315]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xecf9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d6163766c616e300000000000000000"], 0x34}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) set_robust_list(&(0x7f00000003c0)={0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 180.607911ms ago: executing program 5 (id=4759): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x696a, &(0x7f0000000340)={0x0, 0x7828, 0x2, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 114.624869ms ago: executing program 5 (id=4760): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000004c0)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, {0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x9}, 0x6}, r2, 0x8}}, 0x48) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e00), 0x1, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000180)={r9, 0x7}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r7, 0x1, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x64040, 0x0) 0s ago: executing program 7 (id=4761): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x28}}], 0x1, 0x0) gettid() epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4}, 0x18) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4bc, &(0x7f00000018c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000ffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='ext4_request_inode\x00', r4}, 0x18) recvmsg$unix(r0, &(0x7f0000000ec0)={&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/235, 0xeb}, {&(0x7f0000000b80)=""/160, 0xa0}, {&(0x7f0000000c40)=""/177, 0xb1}, {&(0x7f0000000d00)=""/251, 0xfb}], 0x4, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40) kernel console output (not intermixed with test programs): handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.716390][T14563] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 210.740148][T14571] netlink: 'syz.7.4344': attribute type 10 has an invalid length. [ 210.748332][T14571] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4344'. [ 210.773247][T14571] team0: entered promiscuous mode [ 210.778439][T14571] team_slave_0: entered promiscuous mode [ 210.784182][T14571] team_slave_1: entered promiscuous mode [ 210.797928][T14571] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.805402][T14571] batman_adv: batadv0: Interface activated: team0 [ 210.812003][T14571] batman_adv: batadv0: Interface deactivated: team0 [ 210.818699][T14571] batman_adv: batadv0: Removing interface: team0 [ 210.827613][T14571] bridge0: port 4(team0) entered blocking state [ 210.833987][T14571] bridge0: port 4(team0) entered disabled state [ 210.840445][T14571] team0: entered allmulticast mode [ 210.845600][T14571] team_slave_0: entered allmulticast mode [ 210.851434][T14571] team_slave_1: entered allmulticast mode [ 210.861755][T14571] bridge0: port 4(team0) entered blocking state [ 210.868114][T14571] bridge0: port 4(team0) entered forwarding state [ 210.880066][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4345'. [ 210.889162][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4345'. [ 210.902605][T14573] hub 6-0:1.0: USB hub found [ 210.908847][T14573] hub 6-0:1.0: 8 ports detected [ 211.011834][T14590] loop6: detected capacity change from 0 to 512 [ 211.031009][T14590] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.037756][T14590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.047908][T14590] EXT4-fs: quotafile must be on filesystem root [ 211.093695][T14602] hub 6-0:1.0: USB hub found [ 211.099266][T14601] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4358'. [ 211.101220][T14602] hub 6-0:1.0: 8 ports detected [ 211.320059][T14609] loop7: detected capacity change from 0 to 512 [ 211.376594][T14609] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4361: bg 0: block 393: padding at end of block bitmap is not set [ 211.482466][T14615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4364'. [ 211.540491][T14609] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 211.551626][T14609] EXT4-fs (loop7): 2 truncates cleaned up [ 211.561255][T14609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.576180][T14609] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.577924][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4364'. [ 211.594218][T14619] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4365'. [ 211.618512][T14615] bond1 (unregistering): Released all slaves [ 211.630340][T14619] bond1 (unregistering): Released all slaves [ 211.691740][T14623] loop2: detected capacity change from 0 to 512 [ 211.701770][T14623] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4366: bg 0: block 393: padding at end of block bitmap is not set [ 211.718289][T14623] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 211.729650][T14623] EXT4-fs (loop2): 2 truncates cleaned up [ 211.735909][T14623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.750752][T14623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.781214][T14630] netlink: 'syz.6.4369': attribute type 10 has an invalid length. [ 211.816177][T14630] bridge0: port 3(team0) entered disabled state [ 211.829391][T14630] team0: left allmulticast mode [ 211.834337][T14630] team_slave_0: left allmulticast mode [ 211.840660][T14630] team_slave_1: left allmulticast mode [ 211.846237][T14630] team0: left promiscuous mode [ 211.851074][T14630] team_slave_0: left promiscuous mode [ 211.857101][T14630] team_slave_1: left promiscuous mode [ 211.862798][T14630] bridge0: port 3(team0) entered disabled state [ 211.873717][T14630] batman_adv: batadv0: Adding interface: team0 [ 211.880134][T14630] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.881672][T14637] loop2: detected capacity change from 0 to 512 [ 211.906322][T14630] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 211.934071][T14639] netlink: 'syz.6.4369': attribute type 10 has an invalid length. [ 211.935322][T14637] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4372: bg 0: block 393: padding at end of block bitmap is not set [ 211.948412][T14639] team0: entered promiscuous mode [ 211.962136][T14639] team_slave_0: entered promiscuous mode [ 211.965923][T14637] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 211.968111][T14639] team_slave_1: entered promiscuous mode [ 211.983539][T14637] EXT4-fs (loop2): 2 truncates cleaned up [ 211.990338][T14637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.004331][T14639] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.011544][T14637] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.011597][T14639] batman_adv: batadv0: Interface activated: team0 [ 212.027198][T14639] batman_adv: batadv0: Interface deactivated: team0 [ 212.033945][T14639] batman_adv: batadv0: Removing interface: team0 [ 212.042387][T14639] bridge0: port 3(team0) entered blocking state [ 212.048742][T14639] bridge0: port 3(team0) entered disabled state [ 212.056046][T14639] team0: entered allmulticast mode [ 212.062499][T14639] team_slave_0: entered allmulticast mode [ 212.070536][T14639] team_slave_1: entered allmulticast mode [ 212.092897][T14639] bridge0: port 3(team0) entered blocking state [ 212.099371][T14639] bridge0: port 3(team0) entered forwarding state [ 212.376882][T14664] hub 6-0:1.0: USB hub found [ 212.381830][T14664] hub 6-0:1.0: 8 ports detected [ 213.090196][T14669] loop6: detected capacity change from 0 to 512 [ 213.108530][T14670] loop5: detected capacity change from 0 to 512 [ 213.115979][T14669] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.122556][T14669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.131830][T14670] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.138357][T14670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.170679][T14669] EXT4-fs: quotafile must be on filesystem root [ 213.179328][T14670] EXT4-fs: quotafile must be on filesystem root [ 213.670670][T14699] loop8: detected capacity change from 0 to 512 [ 213.699757][T14699] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.706500][T14699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.763506][T14699] EXT4-fs: quotafile must be on filesystem root [ 213.976047][T14714] netlink: 'syz.6.4394': attribute type 10 has an invalid length. [ 213.986227][T14714] bridge0: port 3(team0) entered disabled state [ 213.993694][T14714] team0: left allmulticast mode [ 213.998704][T14714] team_slave_0: left allmulticast mode [ 214.004285][T14714] team_slave_1: left allmulticast mode [ 214.009873][T14714] team0: left promiscuous mode [ 214.014735][T14714] team_slave_0: left promiscuous mode [ 214.020305][T14714] team_slave_1: left promiscuous mode [ 214.025889][T14714] bridge0: port 3(team0) entered disabled state [ 214.034448][T14714] batman_adv: batadv0: Adding interface: team0 [ 214.040760][T14714] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.043553][T14715] loop5: detected capacity change from 0 to 512 [ 214.065923][T14714] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 214.083081][T14715] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.088327][T14716] netlink: 'syz.6.4394': attribute type 10 has an invalid length. [ 214.090359][T14715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.099512][T14716] team0: entered promiscuous mode [ 214.108481][T14715] EXT4-fs: quotafile must be on filesystem root [ 214.109075][T14716] team_slave_0: entered promiscuous mode [ 214.121247][T14716] team_slave_1: entered promiscuous mode [ 214.130427][T14716] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.139938][T14716] batman_adv: batadv0: Interface activated: team0 [ 214.146507][T14716] batman_adv: batadv0: Interface deactivated: team0 [ 214.153213][T14716] batman_adv: batadv0: Removing interface: team0 [ 214.160520][T14716] bridge0: port 3(team0) entered blocking state [ 214.166989][T14716] bridge0: port 3(team0) entered disabled state [ 214.167333][T14716] team0: entered allmulticast mode [ 214.167353][T14716] team_slave_0: entered allmulticast mode [ 214.167385][T14716] team_slave_1: entered allmulticast mode [ 214.168198][T14716] bridge0: port 3(team0) entered blocking state [ 214.197561][T14716] bridge0: port 3(team0) entered forwarding state [ 214.360814][T14729] netlink: 'syz.8.4400': attribute type 10 has an invalid length. [ 214.363693][T14731] loop2: detected capacity change from 0 to 512 [ 214.375431][T14731] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.382707][T14731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.389655][T14731] EXT4-fs: quotafile must be on filesystem root [ 214.469717][T14729] team0: left allmulticast mode [ 214.474661][T14729] team_slave_0: left allmulticast mode [ 214.480242][T14729] team_slave_1: left allmulticast mode [ 214.485723][T14729] team0: left promiscuous mode [ 214.490575][T14729] team_slave_0: left promiscuous mode [ 214.496267][T14729] team_slave_1: left promiscuous mode [ 214.502624][T14729] bridge0: port 4(team0) entered disabled state [ 214.554736][T14740] loop7: detected capacity change from 0 to 512 [ 214.706198][T14740] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4402: bg 0: block 393: padding at end of block bitmap is not set [ 214.774977][T14740] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 214.808639][T14729] batman_adv: batadv0: Adding interface: team0 [ 214.814974][T14729] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.840931][T14729] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 214.854383][T14740] EXT4-fs (loop7): 2 truncates cleaned up [ 214.860628][T14740] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.879973][T14740] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.902176][T14747] loop8: detected capacity change from 0 to 512 [ 214.937173][T14747] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4404: bg 0: block 393: padding at end of block bitmap is not set [ 214.976524][T14747] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 214.992258][T14752] loop7: detected capacity change from 0 to 512 [ 214.994545][T14747] EXT4-fs (loop8): 2 truncates cleaned up [ 215.005104][T14747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.005735][T14754] loop5: detected capacity change from 0 to 512 [ 215.022495][T14747] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.043234][T14752] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4407: bg 0: block 393: padding at end of block bitmap is not set [ 215.064070][T14752] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 215.073509][T14752] EXT4-fs (loop7): 2 truncates cleaned up [ 215.087803][T14752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.103272][T14752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.155379][T14754] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4406: bg 0: block 393: padding at end of block bitmap is not set [ 215.174020][T14754] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 215.185805][T14754] EXT4-fs (loop5): 2 truncates cleaned up [ 215.192163][T14754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.231585][T14765] loop6: detected capacity change from 0 to 512 [ 215.345569][T14754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.422400][T14765] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4411: bg 0: block 393: padding at end of block bitmap is not set [ 215.452863][T14765] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 215.481729][T14773] netlink: 'syz.7.4414': attribute type 10 has an invalid length. [ 215.491081][T14765] EXT4-fs (loop6): 2 truncates cleaned up [ 215.501107][T14765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.519262][T14773] bridge0: port 4(team0) entered disabled state [ 215.529550][T14765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.549807][T14773] team0: left allmulticast mode [ 215.554837][T14773] team_slave_0: left allmulticast mode [ 215.561245][T14773] team_slave_1: left allmulticast mode [ 215.566794][T14773] team0: left promiscuous mode [ 215.571664][T14773] team_slave_0: left promiscuous mode [ 215.577326][T14773] team_slave_1: left promiscuous mode [ 215.582866][T14773] bridge0: port 4(team0) entered disabled state [ 215.597751][T14773] batman_adv: batadv0: Adding interface: team0 [ 215.604058][T14773] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.630162][T14773] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 215.695169][T14775] netlink: 'syz.7.4415': attribute type 10 has an invalid length. [ 215.761908][T14782] __nla_validate_parse: 30 callbacks suppressed [ 215.761927][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 215.777277][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 215.790199][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 215.846446][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 215.855601][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 215.913774][T14791] loop6: detected capacity change from 0 to 512 [ 215.924576][T14793] netlink: 'syz.2.4422': attribute type 10 has an invalid length. [ 215.937078][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 215.954923][T14791] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4421: bg 0: block 393: padding at end of block bitmap is not set [ 215.971326][T14791] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 215.971420][T14793] bridge0: port 3(team0) entered disabled state [ 215.982062][T14791] EXT4-fs (loop6): 2 truncates cleaned up [ 215.993124][T14791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.007014][T14791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.027217][T14793] team0: left allmulticast mode [ 216.032179][T14793] team_slave_0: left allmulticast mode [ 216.037741][T14793] team_slave_1: left allmulticast mode [ 216.043232][T14793] team0: left promiscuous mode [ 216.048738][T14793] team_slave_0: left promiscuous mode [ 216.054246][T14793] team_slave_1: left promiscuous mode [ 216.059967][T14793] bridge0: port 3(team0) entered disabled state [ 216.111389][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 216.120497][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 216.133632][T14793] batman_adv: batadv0: Adding interface: team0 [ 216.140616][T14793] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.153348][T14782] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4418'. [ 216.165957][T14793] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 216.201486][T14796] netlink: 'syz.2.4422': attribute type 10 has an invalid length. [ 216.210031][T14796] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4422'. [ 216.234595][T14796] team0: entered promiscuous mode [ 216.239817][T14796] team_slave_0: entered promiscuous mode [ 216.245638][T14796] team_slave_1: entered promiscuous mode [ 216.260153][T14785] hub 6-0:1.0: USB hub found [ 216.268993][T14805] loop6: detected capacity change from 0 to 512 [ 216.270821][T14785] hub 6-0:1.0: 8 ports detected [ 216.281468][T14796] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.289231][T14796] batman_adv: batadv0: Interface activated: team0 [ 216.295829][T14796] batman_adv: batadv0: Interface deactivated: team0 [ 216.302611][T14796] batman_adv: batadv0: Removing interface: team0 [ 216.319695][T14796] bridge0: port 3(team0) entered blocking state [ 216.326042][T14796] bridge0: port 3(team0) entered disabled state [ 216.334462][T14805] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4424: bg 0: block 393: padding at end of block bitmap is not set [ 216.335939][T14796] team0: entered allmulticast mode [ 216.354705][T14796] team_slave_0: entered allmulticast mode [ 216.360522][T14796] team_slave_1: entered allmulticast mode [ 216.368949][T14796] bridge0: port 3(team0) entered blocking state [ 216.375286][T14796] bridge0: port 3(team0) entered forwarding state [ 216.382910][T14805] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 216.392227][T14805] EXT4-fs (loop6): 2 truncates cleaned up [ 216.398747][T14805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.426444][T14805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.669937][T14815] netlink: 'syz.5.4426': attribute type 10 has an invalid length. [ 216.682699][T14815] netlink: 'syz.5.4426': attribute type 10 has an invalid length. [ 216.700994][T14815] team0: entered promiscuous mode [ 216.706116][T14815] team_slave_0: entered promiscuous mode [ 216.712098][T14815] team_slave_1: entered promiscuous mode [ 216.725269][T14815] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.745986][T14815] batman_adv: batadv0: Interface activated: team0 [ 216.752601][T14815] batman_adv: batadv0: Interface deactivated: team0 [ 216.759458][T14815] batman_adv: batadv0: Removing interface: team0 [ 216.786971][T14815] bridge0: port 4(team0) entered blocking state [ 216.793484][T14815] bridge0: port 4(team0) entered disabled state [ 216.806783][T14815] team0: entered allmulticast mode [ 216.812021][T14815] team_slave_0: entered allmulticast mode [ 216.817874][T14815] team_slave_1: entered allmulticast mode [ 216.837564][T14815] bridge0: port 4(team0) entered blocking state [ 216.843999][T14815] bridge0: port 4(team0) entered forwarding state [ 216.940473][T14817] loop5: detected capacity change from 0 to 512 [ 216.963217][T14817] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4427: bg 0: block 393: padding at end of block bitmap is not set [ 217.013566][T14817] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 217.032683][T14817] EXT4-fs (loop5): 2 truncates cleaned up [ 217.049877][T14817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.064229][T14817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.085745][T14821] netlink: 'syz.8.4428': attribute type 10 has an invalid length. [ 217.123426][T14821] netlink: 'syz.8.4428': attribute type 10 has an invalid length. [ 217.148200][T14821] team0: entered promiscuous mode [ 217.153337][T14821] team_slave_0: entered promiscuous mode [ 217.159750][T14821] team_slave_1: entered promiscuous mode [ 217.191597][T14821] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.198718][T14821] batman_adv: batadv0: Interface activated: team0 [ 217.205326][T14821] batman_adv: batadv0: Interface deactivated: team0 [ 217.212066][T14821] batman_adv: batadv0: Removing interface: team0 [ 217.251654][T14821] bridge0: port 4(team0) entered blocking state [ 217.258173][T14821] bridge0: port 4(team0) entered disabled state [ 217.266947][T14821] team0: entered allmulticast mode [ 217.272117][T14821] team_slave_0: entered allmulticast mode [ 217.277910][T14821] team_slave_1: entered allmulticast mode [ 217.291177][T14823] netlink: 'syz.6.4429': attribute type 10 has an invalid length. [ 217.310348][T14823] bridge0: port 3(team0) entered disabled state [ 217.320107][T14823] team0: left allmulticast mode [ 217.325023][T14823] team_slave_0: left allmulticast mode [ 217.330606][T14823] team_slave_1: left allmulticast mode [ 217.336132][T14823] team0: left promiscuous mode [ 217.341704][T14823] team_slave_0: left promiscuous mode [ 217.347175][T14823] team_slave_1: left promiscuous mode [ 217.352829][T14823] bridge0: port 3(team0) entered disabled state [ 217.363844][T14823] batman_adv: batadv0: Adding interface: team0 [ 217.370465][T14823] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.395732][T14823] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 217.412600][T14826] netlink: 'syz.6.4429': attribute type 10 has an invalid length. [ 217.424878][T14826] team0: entered promiscuous mode [ 217.430009][T14826] team_slave_0: entered promiscuous mode [ 217.435794][T14826] team_slave_1: entered promiscuous mode [ 217.447085][T14826] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.448915][T14836] loop2: detected capacity change from 0 to 512 [ 217.454347][T14826] batman_adv: batadv0: Interface activated: team0 [ 217.461898][T14836] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.466851][T14826] batman_adv: batadv0: Interface deactivated: team0 [ 217.473402][T14836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.480331][T14826] batman_adv: batadv0: Removing interface: team0 [ 217.490317][T14836] EXT4-fs: quotafile must be on filesystem root [ 217.502905][T14826] bridge0: port 3(team0) entered blocking state [ 217.509351][T14826] bridge0: port 3(team0) entered disabled state [ 217.517689][T14826] team0: entered allmulticast mode [ 217.522953][T14826] team_slave_0: entered allmulticast mode [ 217.528774][T14826] team_slave_1: entered allmulticast mode [ 217.535749][T14826] bridge0: port 3(team0) entered blocking state [ 217.542262][T14826] bridge0: port 3(team0) entered forwarding state [ 217.553199][T14825] netlink: 'syz.5.4430': attribute type 10 has an invalid length. [ 217.564499][T14825] bridge0: port 4(team0) entered disabled state [ 217.571735][T14825] team0: left allmulticast mode [ 217.576865][T14825] team_slave_0: left allmulticast mode [ 217.582375][T14825] team_slave_1: left allmulticast mode [ 217.587983][T14825] team0: left promiscuous mode [ 217.592799][T14825] team_slave_0: left promiscuous mode [ 217.598315][T14825] team_slave_1: left promiscuous mode [ 217.603908][T14825] bridge0: port 4(team0) entered disabled state [ 217.615020][T14825] batman_adv: batadv0: Adding interface: team0 [ 217.621274][T14825] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.646841][T14825] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 217.666437][T14846] bridge0: port 3(team0) entered disabled state [ 217.678928][T14846] team0: left allmulticast mode [ 217.683851][T14846] team_slave_0: left allmulticast mode [ 217.689576][T14846] team_slave_1: left allmulticast mode [ 217.695115][T14846] team0: left promiscuous mode [ 217.699927][T14846] team_slave_0: left promiscuous mode [ 217.705371][T14846] team_slave_1: left promiscuous mode [ 217.710930][T14846] bridge0: port 3(team0) entered disabled state [ 217.713110][T14851] loop7: detected capacity change from 0 to 512 [ 217.730127][T14851] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4440: bg 0: block 393: padding at end of block bitmap is not set [ 217.748578][T14846] batman_adv: batadv0: Adding interface: team0 [ 217.754864][T14846] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.763777][T14851] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 217.780112][T14846] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 217.801765][T14854] team0: entered promiscuous mode [ 217.806960][T14854] team_slave_0: entered promiscuous mode [ 217.812751][T14854] team_slave_1: entered promiscuous mode [ 217.816945][T14851] EXT4-fs (loop7): 2 truncates cleaned up [ 217.827890][T14854] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.834983][T14854] batman_adv: batadv0: Interface activated: team0 [ 217.841520][T14854] batman_adv: batadv0: Interface deactivated: team0 [ 217.848274][T14854] batman_adv: batadv0: Removing interface: team0 [ 217.867211][T14851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.884624][T14854] bridge0: port 3(team0) entered blocking state [ 217.888733][T14851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.890966][T14854] bridge0: port 3(team0) entered disabled state [ 217.906547][T14854] team0: entered allmulticast mode [ 217.911792][T14854] team_slave_0: entered allmulticast mode [ 217.917565][T14854] team_slave_1: entered allmulticast mode [ 217.928125][T14854] bridge0: port 3(team0) entered blocking state [ 217.934522][T14854] bridge0: port 3(team0) entered forwarding state [ 217.945689][ T7672] bridge0: port 3(syz_tun) entered disabled state [ 217.982036][ T7672] syz_tun (unregistering): left allmulticast mode [ 217.988603][ T7672] syz_tun (unregistering): left promiscuous mode [ 217.995363][ T7672] bridge0: port 3(syz_tun) entered disabled state [ 218.091590][T14879] loop6: detected capacity change from 0 to 512 [ 218.103402][ T5038] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.144878][T14879] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4447: bg 0: block 393: padding at end of block bitmap is not set [ 218.165338][ T5038] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.185584][T14879] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 218.198771][T14879] EXT4-fs (loop6): 2 truncates cleaned up [ 218.208660][T14879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.222116][T14879] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.232475][ T5038] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.303394][ T5038] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 218.312638][ T5038] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.356264][T14859] chnl_net:caif_netlink_parms(): no params data found [ 218.422981][T14900] bridge0: port 3(team0) entered disabled state [ 218.430461][T14900] team0: left allmulticast mode [ 218.435428][T14900] team_slave_0: left allmulticast mode [ 218.440992][T14900] team_slave_1: left allmulticast mode [ 218.446486][T14900] team0: left promiscuous mode [ 218.451307][T14900] team_slave_0: left promiscuous mode [ 218.457005][T14900] team_slave_1: left promiscuous mode [ 218.462620][T14900] bridge0: port 3(team0) entered disabled state [ 218.470391][T14900] batman_adv: batadv0: Adding interface: team0 [ 218.476733][T14900] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.502232][T14900] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 218.529222][T14904] team0: entered promiscuous mode [ 218.534367][T14904] team_slave_0: entered promiscuous mode [ 218.541569][T14904] team_slave_1: entered promiscuous mode [ 218.570590][T14904] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.580512][T14904] batman_adv: batadv0: Interface activated: team0 [ 218.587196][T14904] batman_adv: batadv0: Interface deactivated: team0 [ 218.593928][T14904] batman_adv: batadv0: Removing interface: team0 [ 218.603970][T14904] bridge0: port 4(team0) entered blocking state [ 218.610416][T14904] bridge0: port 4(team0) entered disabled state [ 218.617454][T14904] team0: entered allmulticast mode [ 218.622618][T14904] team_slave_0: entered allmulticast mode [ 218.629229][T14904] team_slave_1: entered allmulticast mode [ 218.636492][T14904] bridge0: port 4(team0) entered blocking state [ 218.642826][T14904] bridge0: port 4(team0) entered forwarding state [ 218.649591][T14905] team0: entered promiscuous mode [ 218.654686][T14905] team_slave_0: entered promiscuous mode [ 218.660488][T14905] team_slave_1: entered promiscuous mode [ 218.675623][T14905] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.687338][T14905] batman_adv: batadv0: Interface activated: team0 [ 218.693997][T14905] batman_adv: batadv0: Interface deactivated: team0 [ 218.700856][T14905] batman_adv: batadv0: Removing interface: team0 [ 218.720216][T14905] bridge0: port 3(team0) entered blocking state [ 218.726654][T14905] bridge0: port 3(team0) entered disabled state [ 218.745996][T14905] team0: entered allmulticast mode [ 218.752052][T14905] team_slave_0: entered allmulticast mode [ 218.757910][T14905] team_slave_1: entered allmulticast mode [ 218.777454][T14905] bridge0: port 3(team0) entered blocking state [ 218.783831][T14905] bridge0: port 3(team0) entered forwarding state [ 218.797674][T14859] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.804801][T14859] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.807527][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 218.807541][ T29] audit: type=1326 audit(1731115881.709:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 218.816778][T14859] bridge_slave_0: entered allmulticast mode [ 218.818220][ T29] audit: type=1326 audit(1731115881.709:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 218.865104][T14859] bridge_slave_0: entered promiscuous mode [ 218.872636][ T29] audit: type=1326 audit(1731115881.709:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 218.902085][ T29] audit: type=1326 audit(1731115881.709:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 218.925776][ T29] audit: type=1326 audit(1731115881.709:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 218.950398][ T29] audit: type=1326 audit(1731115881.709:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 218.957940][T14859] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.974012][ T29] audit: type=1326 audit(1731115881.709:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 218.981280][T14859] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.992129][T14859] bridge_slave_1: entered allmulticast mode [ 219.005428][ T29] audit: type=1326 audit(1731115881.709:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 219.043765][ T29] audit: type=1326 audit(1731115881.719:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 219.059485][T14859] bridge_slave_1: entered promiscuous mode [ 219.068241][ T29] audit: type=1326 audit(1731115881.719:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14912 comm="syz.7.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81d5c9e719 code=0x7ffc0000 [ 219.150710][T14859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.168023][ T5038] bridge_slave_1: left allmulticast mode [ 219.173722][ T5038] bridge_slave_1: left promiscuous mode [ 219.179513][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.274348][ T5038] bridge_slave_0: left allmulticast mode [ 219.280090][ T5038] bridge_slave_0: left promiscuous mode [ 219.285787][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.226830][ T5038] ip6gretap0 (unregistering): left promiscuous mode [ 220.856460][T14940] loop7: detected capacity change from 0 to 512 [ 220.886225][T14940] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.892815][T14940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.923798][T14940] EXT4-fs: quotafile must be on filesystem root [ 220.969693][T14943] loop2: detected capacity change from 0 to 512 [ 220.978240][T14943] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4464: bg 0: block 393: padding at end of block bitmap is not set [ 220.993555][T14943] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 221.002769][T14943] EXT4-fs (loop2): 2 truncates cleaned up [ 221.009195][T14943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.030757][T14943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.140700][ T5038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.151608][ T5038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.161857][ T5038] bond0 (unregistering): Released all slaves [ 221.171703][T14859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.186556][T14930] validate_nla: 6 callbacks suppressed [ 221.186571][T14930] netlink: 'syz.8.4461': attribute type 10 has an invalid length. [ 221.203904][T14930] team0: left allmulticast mode [ 221.208864][T14930] team_slave_0: left allmulticast mode [ 221.214367][T14930] team_slave_1: left allmulticast mode [ 221.219895][T14930] team0: left promiscuous mode [ 221.224784][T14930] team_slave_0: left promiscuous mode [ 221.230848][T14930] team_slave_1: left promiscuous mode [ 221.236508][T14930] bridge0: port 4(team0) entered disabled state [ 221.243768][T14930] batman_adv: batadv0: Adding interface: team0 [ 221.249980][T14930] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.276099][T14930] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 221.286320][T14934] netlink: 'syz.6.4460': attribute type 10 has an invalid length. [ 221.297405][T14934] bridge0: port 3(team0) entered disabled state [ 221.304583][T14934] team0: left allmulticast mode [ 221.309571][T14934] team_slave_0: left allmulticast mode [ 221.315174][T14934] team_slave_1: left allmulticast mode [ 221.320700][T14934] team0: left promiscuous mode [ 221.325636][T14934] team_slave_0: left promiscuous mode [ 221.331278][T14934] team_slave_1: left promiscuous mode [ 221.336869][T14934] bridge0: port 3(team0) entered disabled state [ 221.344197][T14934] batman_adv: batadv0: Adding interface: team0 [ 221.350500][T14934] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.376041][T14934] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 221.389331][T14937] netlink: 'syz.6.4460': attribute type 10 has an invalid length. [ 221.397258][T14937] __nla_validate_parse: 51 callbacks suppressed [ 221.397270][T14937] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4460'. [ 221.412628][T14937] team0: entered promiscuous mode [ 221.417731][T14937] team_slave_0: entered promiscuous mode [ 221.423505][T14937] team_slave_1: entered promiscuous mode [ 221.430307][T14937] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.437422][T14937] batman_adv: batadv0: Interface activated: team0 [ 221.443902][T14937] batman_adv: batadv0: Interface deactivated: team0 [ 221.450949][T14937] batman_adv: batadv0: Removing interface: team0 [ 221.457975][T14937] bridge0: port 3(team0) entered blocking state [ 221.464274][T14937] bridge0: port 3(team0) entered disabled state [ 221.470700][T14937] team0: entered allmulticast mode [ 221.475921][T14937] team_slave_0: entered allmulticast mode [ 221.481719][T14937] team_slave_1: entered allmulticast mode [ 221.488363][T14937] bridge0: port 3(team0) entered blocking state [ 221.494782][T14937] bridge0: port 3(team0) entered forwarding state [ 221.502052][T14938] netlink: 'syz.8.4461': attribute type 10 has an invalid length. [ 221.510718][T14938] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4461'. [ 221.520162][T14938] team0: entered promiscuous mode [ 221.525518][T14938] team_slave_0: entered promiscuous mode [ 221.531283][T14938] team_slave_1: entered promiscuous mode [ 221.538849][T14938] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.545838][T14938] batman_adv: batadv0: Interface activated: team0 [ 221.552507][T14938] batman_adv: batadv0: Interface deactivated: team0 [ 221.559185][T14938] batman_adv: batadv0: Removing interface: team0 [ 221.566187][T14938] bridge0: port 4(team0) entered blocking state [ 221.573319][T14938] bridge0: port 4(team0) entered disabled state [ 221.579788][T14938] team0: entered allmulticast mode [ 221.584937][T14938] team_slave_0: entered allmulticast mode [ 221.590761][T14938] team_slave_1: entered allmulticast mode [ 221.598267][T14947] netlink: 'syz.7.4465': attribute type 10 has an invalid length. [ 221.607916][T14947] bridge0: port 4(team0) entered disabled state [ 221.619320][T14947] team0: left allmulticast mode [ 221.624291][T14947] team_slave_0: left allmulticast mode [ 221.630608][T14947] team_slave_1: left allmulticast mode [ 221.636251][T14947] team0: left promiscuous mode [ 221.641178][T14947] team_slave_0: left promiscuous mode [ 221.646668][T14947] team_slave_1: left promiscuous mode [ 221.652216][T14947] bridge0: port 4(team0) entered disabled state [ 221.660275][T14947] batman_adv: batadv0: Adding interface: team0 [ 221.666491][T14947] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.692650][T14947] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 221.702780][T14951] netlink: 'syz.7.4465': attribute type 10 has an invalid length. [ 221.710767][T14951] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4465'. [ 221.720384][T14951] team0: entered promiscuous mode [ 221.725497][T14951] team_slave_0: entered promiscuous mode [ 221.731380][T14951] team_slave_1: entered promiscuous mode [ 221.738411][T14951] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.745562][T14951] batman_adv: batadv0: Interface activated: team0 [ 221.752737][T14951] batman_adv: batadv0: Interface deactivated: team0 [ 221.759450][T14951] batman_adv: batadv0: Removing interface: team0 [ 221.766464][T14951] bridge0: port 4(team0) entered blocking state [ 221.772810][T14951] bridge0: port 4(team0) entered disabled state [ 221.779912][T14951] team0: entered allmulticast mode [ 221.785123][T14951] team_slave_0: entered allmulticast mode [ 221.791018][T14951] team_slave_1: entered allmulticast mode [ 221.797557][T14951] bridge0: port 4(team0) entered blocking state [ 221.803825][T14951] bridge0: port 4(team0) entered forwarding state [ 221.821022][ T5038] hsr_slave_0: left promiscuous mode [ 221.828958][ T5038] hsr_slave_1: left promiscuous mode [ 221.842808][ T5038] batman_adv: batadv0: Removing interface: team0 [ 221.855342][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.862928][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.873566][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.881134][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.891154][ T5038] veth1_macvtap: left promiscuous mode [ 221.896785][ T5038] veth0_macvtap: left promiscuous mode [ 221.902359][ T5038] veth1_vlan: left promiscuous mode [ 221.907683][ T5038] veth0_vlan: left promiscuous mode [ 221.985939][ T5038] team0 (unregistering): Port device team_slave_1 removed [ 221.996852][ T5038] team0 (unregistering): Port device team_slave_0 removed [ 222.038075][T14961] netlink: 'syz.8.4470': attribute type 10 has an invalid length. [ 222.050280][T14961] team0: left allmulticast mode [ 222.055314][T14961] team_slave_0: left allmulticast mode [ 222.060919][T14961] team_slave_1: left allmulticast mode [ 222.066418][T14961] team0: left promiscuous mode [ 222.071261][T14961] team_slave_0: left promiscuous mode [ 222.076879][T14961] team_slave_1: left promiscuous mode [ 222.082508][T14961] bridge0: port 4(team0) entered disabled state [ 222.094596][T14961] batman_adv: batadv0: Adding interface: team0 [ 222.100862][T14961] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.126158][T14961] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 222.232983][T14859] team0: Port device team_slave_0 added [ 222.240208][T14859] team0: Port device team_slave_1 added [ 222.264285][T14859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.271403][T14859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.298231][T14859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.363036][T14986] hub 6-0:1.0: USB hub found [ 222.368210][T14986] hub 6-0:1.0: 8 ports detected [ 222.452475][T14859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.459581][T14859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.486190][T14859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.666571][T14991] hub 6-0:1.0: USB hub found [ 222.671345][T14991] hub 6-0:1.0: 8 ports detected [ 222.864008][T14859] hsr_slave_0: entered promiscuous mode [ 222.867073][T14997] loop2: detected capacity change from 0 to 512 [ 222.872368][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4484'. [ 222.876256][T14997] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.885105][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4484'. [ 222.891478][T14997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.891546][T14997] EXT4-fs: quotafile must be on filesystem root [ 222.914262][T14859] hsr_slave_1: entered promiscuous mode [ 222.918566][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4484'. [ 222.958013][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4484'. [ 222.967103][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4484'. [ 222.986418][T14999] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4484'. [ 223.005055][T15006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4487'. [ 223.080960][T15015] netlink: 'syz.7.4489': attribute type 10 has an invalid length. [ 223.092655][T15015] bridge0: port 4(team0) entered disabled state [ 223.126814][T15015] team0: left allmulticast mode [ 223.131759][T15015] team_slave_0: left allmulticast mode [ 223.134599][T15019] loop2: detected capacity change from 0 to 512 [ 223.138004][T15015] team_slave_1: left allmulticast mode [ 223.146915][T15019] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.149092][T15015] team0: left promiscuous mode [ 223.155612][T15019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.160294][T15015] team_slave_0: left promiscuous mode [ 223.173315][T15015] team_slave_1: left promiscuous mode [ 223.179258][T15015] bridge0: port 4(team0) entered disabled state [ 223.179496][T15019] EXT4-fs: quotafile must be on filesystem root [ 223.201251][T15015] batman_adv: batadv0: Adding interface: team0 [ 223.207561][T15015] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.232777][T15015] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 223.279956][T15021] netlink: 'syz.7.4489': attribute type 10 has an invalid length. [ 223.297021][T15021] team0: entered promiscuous mode [ 223.302116][T15021] team_slave_0: entered promiscuous mode [ 223.307890][T15021] team_slave_1: entered promiscuous mode [ 223.324902][T15021] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.340090][T15021] batman_adv: batadv0: Interface activated: team0 [ 223.347441][T15021] batman_adv: batadv0: Interface deactivated: team0 [ 223.354123][T15021] batman_adv: batadv0: Removing interface: team0 [ 223.378013][T15021] bridge0: port 4(team0) entered blocking state [ 223.384420][T15021] bridge0: port 4(team0) entered disabled state [ 223.391218][T15021] team0: entered allmulticast mode [ 223.396381][T15021] team_slave_0: entered allmulticast mode [ 223.402196][T15021] team_slave_1: entered allmulticast mode [ 223.409830][T15021] bridge0: port 4(team0) entered blocking state [ 223.416413][T15021] bridge0: port 4(team0) entered forwarding state [ 223.464694][T15026] netlink: 'syz.2.4491': attribute type 10 has an invalid length. [ 223.481289][T15026] bridge0: port 3(team0) entered disabled state [ 223.503999][T15026] team0: left allmulticast mode [ 223.509027][T15026] team_slave_0: left allmulticast mode [ 223.514637][T15026] team_slave_1: left allmulticast mode [ 223.520184][T15026] team0: left promiscuous mode [ 223.525028][T15026] team_slave_0: left promiscuous mode [ 223.530560][T15026] team_slave_1: left promiscuous mode [ 223.536227][T15026] bridge0: port 3(team0) entered disabled state [ 223.588519][T15026] batman_adv: batadv0: Adding interface: team0 [ 223.594733][T15026] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.620107][T15026] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 223.649860][T15025] team0: entered promiscuous mode [ 223.654956][T15025] team_slave_0: entered promiscuous mode [ 223.662325][T15025] team_slave_1: entered promiscuous mode [ 223.671619][T15025] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.679173][T15025] batman_adv: batadv0: Interface activated: team0 [ 223.685756][T15025] batman_adv: batadv0: Interface deactivated: team0 [ 223.692830][T15025] batman_adv: batadv0: Removing interface: team0 [ 223.702588][T15025] bridge0: port 3(team0) entered blocking state [ 223.709054][T15025] bridge0: port 3(team0) entered disabled state [ 223.715600][T15025] team0: entered allmulticast mode [ 223.720900][T15025] team_slave_0: entered allmulticast mode [ 223.726674][T15025] team_slave_1: entered allmulticast mode [ 223.735230][T15025] bridge0: port 3(team0) entered blocking state [ 223.741616][T15025] bridge0: port 3(team0) entered forwarding state [ 223.835296][T15034] hub 6-0:1.0: USB hub found [ 223.862829][T15034] hub 6-0:1.0: 8 ports detected [ 224.104077][T14859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.120779][T14859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.136692][T14859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.152801][T14859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.170570][T15045] hub 6-0:1.0: USB hub found [ 224.175528][T15045] hub 6-0:1.0: 8 ports detected [ 224.280441][T14859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.302388][T14859] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.350697][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.357982][ T1726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.415159][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.422491][ T1726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.615266][T14859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.705614][T15058] bridge0: port 3(team0) entered disabled state [ 224.713706][T15058] team0: left allmulticast mode [ 224.718810][T15058] team_slave_0: left allmulticast mode [ 224.724338][T15058] team_slave_1: left allmulticast mode [ 224.729892][T15058] team0: left promiscuous mode [ 224.734680][T15058] team_slave_0: left promiscuous mode [ 224.740190][T15058] team_slave_1: left promiscuous mode [ 224.745907][T15058] bridge0: port 3(team0) entered disabled state [ 224.810868][T15058] batman_adv: batadv0: Adding interface: team0 [ 224.817155][T15058] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.842574][T15058] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 224.883447][T15063] loop8: detected capacity change from 0 to 512 [ 224.965386][T15070] bridge0: port 4(team0) entered disabled state [ 224.985583][T15070] team0: left allmulticast mode [ 224.990744][T15070] team_slave_0: left allmulticast mode [ 224.996310][T15070] team_slave_1: left allmulticast mode [ 224.997541][T15063] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4502: bg 0: block 393: padding at end of block bitmap is not set [ 225.002673][T15070] team0: left promiscuous mode [ 225.021551][T15070] team_slave_0: left promiscuous mode [ 225.027026][T15063] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 225.027621][T15063] EXT4-fs (loop8): 2 truncates cleaned up [ 225.028271][T15063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.036734][T15070] team_slave_1: left promiscuous mode [ 225.047284][T15063] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.054891][T15070] bridge0: port 4(team0) entered disabled state [ 225.095264][T15070] batman_adv: batadv0: Adding interface: team0 [ 225.102348][T15070] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.128526][T15070] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 225.140383][T15075] team0: entered promiscuous mode [ 225.145496][T15075] team_slave_0: entered promiscuous mode [ 225.151355][T15075] team_slave_1: entered promiscuous mode [ 225.165117][T15075] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.173137][T15075] batman_adv: batadv0: Interface activated: team0 [ 225.179947][T15075] batman_adv: batadv0: Interface deactivated: team0 [ 225.186637][T15075] batman_adv: batadv0: Removing interface: team0 [ 225.209543][T15075] bridge0: port 4(team0) entered blocking state [ 225.215936][T15075] bridge0: port 4(team0) entered disabled state [ 225.222716][T15075] team0: entered allmulticast mode [ 225.228030][T15075] team_slave_0: entered allmulticast mode [ 225.234037][T15075] team_slave_1: entered allmulticast mode [ 225.240891][T15075] bridge0: port 4(team0) entered blocking state [ 225.247256][T15075] bridge0: port 4(team0) entered forwarding state [ 225.264873][T15077] bridge0: port 3(team0) entered disabled state [ 225.273369][T15077] team0: left allmulticast mode [ 225.278410][T15077] team_slave_0: left allmulticast mode [ 225.283949][T15077] team_slave_1: left allmulticast mode [ 225.289489][T15077] team0: left promiscuous mode [ 225.294277][T15077] team_slave_0: left promiscuous mode [ 225.299749][T15077] team_slave_1: left promiscuous mode [ 225.305347][T15077] bridge0: port 3(team0) entered disabled state [ 225.313802][T15077] batman_adv: batadv0: Adding interface: team0 [ 225.320175][T15077] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.345431][T15077] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 225.366343][T15089] loop6: detected capacity change from 0 to 512 [ 225.382248][T15089] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.388770][T15089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.404263][T15082] team0: entered promiscuous mode [ 225.409432][T15082] team_slave_0: entered promiscuous mode [ 225.409871][T15089] EXT4-fs: quotafile must be on filesystem root [ 225.415224][T15082] team_slave_1: entered promiscuous mode [ 225.437807][T15082] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.465648][T15082] batman_adv: batadv0: Interface activated: team0 [ 225.472318][T15082] batman_adv: batadv0: Interface deactivated: team0 [ 225.479041][T15082] batman_adv: batadv0: Removing interface: team0 [ 225.491086][T15082] bridge0: port 3(team0) entered blocking state [ 225.497673][T15082] bridge0: port 3(team0) entered disabled state [ 225.506254][T15082] team0: entered allmulticast mode [ 225.511571][T15082] team_slave_0: entered allmulticast mode [ 225.517830][T15082] team_slave_1: entered allmulticast mode [ 225.538782][T15082] bridge0: port 3(team0) entered blocking state [ 225.545214][T15082] bridge0: port 3(team0) entered forwarding state [ 225.763059][T14859] veth0_vlan: entered promiscuous mode [ 225.773005][T14859] veth1_vlan: entered promiscuous mode [ 225.791445][T14859] veth0_macvtap: entered promiscuous mode [ 225.801488][T14859] veth1_macvtap: entered promiscuous mode [ 225.818891][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.829612][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.839458][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.850051][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.859921][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.870498][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.880379][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.890898][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.900889][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.911417][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.921432][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.931882][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.947921][T15111] hub 6-0:1.0: USB hub found [ 225.952854][T15111] hub 6-0:1.0: 8 ports detected [ 225.978684][T14859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.994817][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.005515][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.015499][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.025986][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.035835][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.046374][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.056249][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.066848][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.076741][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.087186][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.097059][T14859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.107559][T14859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.129442][T14859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.143155][T14859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.152824][T14859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.161573][T14859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.170397][T14859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.214501][T15116] validate_nla: 7 callbacks suppressed [ 226.214519][T15116] netlink: 'syz.8.4515': attribute type 10 has an invalid length. [ 226.231164][T15116] netlink: 'syz.8.4515': attribute type 10 has an invalid length. [ 226.240012][T15116] team0: entered promiscuous mode [ 226.245134][T15116] team_slave_0: entered promiscuous mode [ 226.251167][T15116] team_slave_1: entered promiscuous mode [ 226.258426][T15116] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.265717][T15116] batman_adv: batadv0: Interface activated: team0 [ 226.273221][T15116] batman_adv: batadv0: Interface deactivated: team0 [ 226.279940][T15116] batman_adv: batadv0: Removing interface: team0 [ 226.288049][T15116] bridge0: port 4(team0) entered blocking state [ 226.294371][T15116] bridge0: port 4(team0) entered disabled state [ 226.305645][T15116] team0: entered allmulticast mode [ 226.310897][T15116] team_slave_0: entered allmulticast mode [ 226.316685][T15116] team_slave_1: entered allmulticast mode [ 226.381489][T15130] loop6: detected capacity change from 0 to 512 [ 226.404943][T15130] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.411574][T15130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 226.423020][T15130] EXT4-fs: quotafile must be on filesystem root [ 226.472674][T15136] hub 6-0:1.0: USB hub found [ 226.477871][T15136] hub 6-0:1.0: 8 ports detected [ 226.615388][T15132] netlink: 'syz.5.4520': attribute type 10 has an invalid length. [ 226.676779][T15132] batman_adv: batadv0: Adding interface: team0 [ 226.683198][T15132] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.709422][T15132] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 226.794856][T15144] netlink: 'syz.5.4520': attribute type 10 has an invalid length. [ 226.803694][T15144] __nla_validate_parse: 20 callbacks suppressed [ 226.803710][T15144] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4520'. [ 226.845619][T15146] loop8: detected capacity change from 0 to 512 [ 226.861811][T15146] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4524: bg 0: block 393: padding at end of block bitmap is not set [ 226.878817][T15146] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 226.894467][T15144] team0: entered promiscuous mode [ 226.899610][T15144] team_slave_0: entered promiscuous mode [ 226.905391][T15144] team_slave_1: entered promiscuous mode [ 226.914490][T15146] EXT4-fs (loop8): 2 truncates cleaned up [ 226.924318][T15144] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.933738][T15144] batman_adv: batadv0: Interface activated: team0 [ 226.940454][T15144] batman_adv: batadv0: Interface deactivated: team0 [ 226.947933][T15144] batman_adv: batadv0: Removing interface: team0 [ 226.954997][T15144] bridge0: port 3(team0) entered blocking state [ 226.961515][T15144] bridge0: port 3(team0) entered disabled state [ 226.968279][T15144] team0: entered allmulticast mode [ 226.973493][T15144] team_slave_0: entered allmulticast mode [ 226.979368][T15144] team_slave_1: entered allmulticast mode [ 226.986580][T15144] bridge0: port 3(team0) entered blocking state [ 226.992981][T15144] bridge0: port 3(team0) entered forwarding state [ 227.096568][T15156] netlink: 'syz.5.4527': attribute type 10 has an invalid length. [ 227.120318][T15156] bridge0: port 3(team0) entered disabled state [ 227.130434][T15156] team0: left allmulticast mode [ 227.135343][T15156] team_slave_0: left allmulticast mode [ 227.141029][T15156] team_slave_1: left allmulticast mode [ 227.146509][T15156] team0: left promiscuous mode [ 227.151408][T15156] team_slave_0: left promiscuous mode [ 227.156908][T15156] team_slave_1: left promiscuous mode [ 227.162443][T15156] bridge0: port 3(team0) entered disabled state [ 227.172266][T15156] batman_adv: batadv0: Adding interface: team0 [ 227.179697][T15156] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.189827][T15158] loop2: detected capacity change from 0 to 512 [ 227.206851][T15156] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 227.226518][T15158] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4529: bg 0: block 393: padding at end of block bitmap is not set [ 227.241966][T15162] netlink: 'syz.6.4528': attribute type 10 has an invalid length. [ 227.250591][T15162] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4528'. [ 227.257944][T15158] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 227.269114][T15158] EXT4-fs (loop2): 2 truncates cleaned up [ 227.276047][T15162] team0: entered promiscuous mode [ 227.281886][T15162] team_slave_0: entered promiscuous mode [ 227.287754][T15162] team_slave_1: entered promiscuous mode [ 227.294636][T15162] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.301979][T15162] batman_adv: batadv0: Interface activated: team0 [ 227.309211][T15162] batman_adv: batadv0: Interface deactivated: team0 [ 227.316046][T15162] batman_adv: batadv0: Removing interface: team0 [ 227.324052][T15162] bridge0: port 3(team0) entered blocking state [ 227.330493][T15162] bridge0: port 3(team0) entered disabled state [ 227.344304][T15162] team0: entered allmulticast mode [ 227.349519][T15162] team_slave_0: entered allmulticast mode [ 227.355330][T15162] team_slave_1: entered allmulticast mode [ 227.368005][T15162] bridge0: port 3(team0) entered blocking state [ 227.374485][T15162] bridge0: port 3(team0) entered forwarding state [ 227.381456][T15160] netlink: 'syz.6.4528': attribute type 10 has an invalid length. [ 227.393394][T15160] bridge0: port 3(team0) entered disabled state [ 227.400683][T15160] team0: left allmulticast mode [ 227.405557][T15160] team_slave_0: left allmulticast mode [ 227.411102][T15160] team_slave_1: left allmulticast mode [ 227.416784][T15160] team0: left promiscuous mode [ 227.421573][T15160] team_slave_0: left promiscuous mode [ 227.427353][T15160] team_slave_1: left promiscuous mode [ 227.432916][T15160] bridge0: port 3(team0) entered disabled state [ 227.440266][T15160] batman_adv: batadv0: Adding interface: team0 [ 227.446448][T15160] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.471825][T15160] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 227.483222][T15164] netlink: 'syz.5.4530': attribute type 10 has an invalid length. [ 227.491368][T15168] netlink: 'syz.2.4532': attribute type 10 has an invalid length. [ 227.504014][T15168] bridge0: port 3(team0) entered disabled state [ 227.514733][T15168] team0: left allmulticast mode [ 227.520464][T15168] team_slave_0: left allmulticast mode [ 227.526158][T15168] team_slave_1: left allmulticast mode [ 227.531875][T15168] team0: left promiscuous mode [ 227.536787][T15168] team_slave_0: left promiscuous mode [ 227.542444][T15168] team_slave_1: left promiscuous mode [ 227.548761][T15168] bridge0: port 3(team0) entered disabled state [ 227.556461][T15168] batman_adv: batadv0: Adding interface: team0 [ 227.559417][T15172] loop6: detected capacity change from 0 to 512 [ 227.562764][T15168] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.595081][T15168] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 227.601726][T15172] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4534: bg 0: block 393: padding at end of block bitmap is not set [ 227.637764][T15172] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 227.652006][T15172] EXT4-fs (loop6): 2 truncates cleaned up [ 227.667682][T15176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4535'. [ 227.677720][T15176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4535'. [ 227.687291][T15176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4535'. [ 227.700312][T15178] netlink: 'syz.7.4536': attribute type 10 has an invalid length. [ 227.745088][T15178] bridge0: port 4(team0) entered disabled state [ 227.753109][T15178] team0: left allmulticast mode [ 227.754130][T15180] loop2: detected capacity change from 0 to 512 [ 227.758051][T15178] team_slave_0: left allmulticast mode [ 227.758112][T15178] team_slave_1: left allmulticast mode [ 227.775531][T15178] team0: left promiscuous mode [ 227.780401][T15178] team_slave_0: left promiscuous mode [ 227.785997][T15178] team_slave_1: left promiscuous mode [ 227.791626][T15178] bridge0: port 4(team0) entered disabled state [ 227.801043][T15176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4535'. [ 227.810150][T15176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4535'. [ 227.820364][T15178] batman_adv: batadv0: Adding interface: team0 [ 227.823291][T15191] loop8: detected capacity change from 0 to 512 [ 227.826568][T15178] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.837400][T15176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4535'. [ 227.858065][T15178] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 227.864892][T15189] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4536'. [ 227.882384][T15180] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4538: bg 0: block 393: padding at end of block bitmap is not set [ 227.896914][T15189] team0: entered promiscuous mode [ 227.907072][T15189] team_slave_0: entered promiscuous mode [ 227.912831][T15189] team_slave_1: entered promiscuous mode [ 227.919638][T15189] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.920262][T15191] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4540: bg 0: block 393: padding at end of block bitmap is not set [ 227.926912][T15189] batman_adv: batadv0: Interface activated: team0 [ 227.943073][T15194] loop6: detected capacity change from 0 to 512 [ 227.947204][T15189] batman_adv: batadv0: Interface deactivated: team0 [ 227.947238][T15189] batman_adv: batadv0: Removing interface: team0 [ 227.969719][T15189] bridge0: port 4(team0) entered blocking state [ 227.976095][T15189] bridge0: port 4(team0) entered disabled state [ 227.984429][T15189] team0: entered allmulticast mode [ 227.987852][T15180] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 227.989731][T15189] team_slave_0: entered allmulticast mode [ 228.004243][T15189] team_slave_1: entered allmulticast mode [ 228.015083][T15191] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 228.017319][T15180] EXT4-fs (loop2): 2 truncates cleaned up [ 228.030758][T15189] bridge0: port 4(team0) entered blocking state [ 228.037103][T15189] bridge0: port 4(team0) entered forwarding state [ 228.044104][T15194] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.050804][T15194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.053869][T15191] EXT4-fs (loop8): 2 truncates cleaned up [ 228.058096][T15194] EXT4-fs: quotafile must be on filesystem root [ 228.087957][T15176] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4535'. [ 228.140223][T15201] loop2: detected capacity change from 0 to 512 [ 228.151061][T15201] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4541: bg 0: block 393: padding at end of block bitmap is not set [ 228.179803][T15201] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 228.192865][T15201] EXT4-fs (loop2): 2 truncates cleaned up [ 228.290337][T15208] hub 6-0:1.0: USB hub found [ 228.308845][T15208] hub 6-0:1.0: 8 ports detected [ 228.326555][T15214] team0: left allmulticast mode [ 228.331607][T15214] team_slave_0: left allmulticast mode [ 228.337911][T15214] team_slave_1: left allmulticast mode [ 228.343467][T15214] team0: left promiscuous mode [ 228.348328][T15214] team_slave_0: left promiscuous mode [ 228.353937][T15214] team_slave_1: left promiscuous mode [ 228.359817][T15214] bridge0: port 4(team0) entered disabled state [ 228.381553][T15214] batman_adv: batadv0: Adding interface: team0 [ 228.387828][T15214] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.413057][T15214] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 228.424066][T15220] team0: entered promiscuous mode [ 228.429198][T15220] team_slave_0: entered promiscuous mode [ 228.435076][T15220] team_slave_1: entered promiscuous mode [ 228.448728][T15220] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.456313][T15220] batman_adv: batadv0: Interface activated: team0 [ 228.462983][T15220] batman_adv: batadv0: Interface deactivated: team0 [ 228.469647][T15220] batman_adv: batadv0: Removing interface: team0 [ 228.477970][T15220] bridge0: port 4(team0) entered blocking state [ 228.484310][T15220] bridge0: port 4(team0) entered disabled state [ 228.494165][T15220] team0: entered allmulticast mode [ 228.499453][T15220] team_slave_0: entered allmulticast mode [ 228.505360][T15220] team_slave_1: entered allmulticast mode [ 228.595754][T15239] loop5: detected capacity change from 0 to 512 [ 228.732147][T15239] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4556: bg 0: block 393: padding at end of block bitmap is not set [ 228.747486][T15239] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 228.756947][T15239] EXT4-fs (loop5): 2 truncates cleaned up [ 228.763366][T15239] EXT4-fs mount: 12 callbacks suppressed [ 228.763381][T15239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.792676][T15248] hub 6-0:1.0: USB hub found [ 228.798221][T15248] hub 6-0:1.0: 8 ports detected [ 228.819434][T15250] hub 6-0:1.0: USB hub found [ 228.825431][T15250] hub 6-0:1.0: 8 ports detected [ 228.909262][T15239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.237794][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 229.237812][ T29] audit: type=1326 audit(1731115892.159:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1500de719 code=0x7ffc0000 [ 229.287426][ T29] audit: type=1326 audit(1731115892.189:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1500dd0b0 code=0x7ffc0000 [ 229.311149][ T29] audit: type=1326 audit(1731115892.189:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd1500dff47 code=0x7ffc0000 [ 229.334774][ T29] audit: type=1326 audit(1731115892.189:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1500de719 code=0x7ffc0000 [ 229.358461][ T29] audit: type=1326 audit(1731115892.189:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd1500dff47 code=0x7ffc0000 [ 229.382102][ T29] audit: type=1326 audit(1731115892.189:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd1500dd3aa code=0x7ffc0000 [ 229.405550][ T29] audit: type=1326 audit(1731115892.189:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1500de719 code=0x7ffc0000 [ 229.429783][ T29] audit: type=1326 audit(1731115892.189:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.4566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1500de719 code=0x7ffc0000 [ 229.508924][T15271] loop7: detected capacity change from 0 to 512 [ 229.516243][T15271] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.522784][T15271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.536763][T15271] EXT4-fs: quotafile must be on filesystem root [ 229.620866][T15286] team0: entered promiscuous mode [ 229.626159][T15286] team_slave_0: entered promiscuous mode [ 229.632035][T15286] team_slave_1: entered promiscuous mode [ 229.641067][T15286] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.648243][T15286] batman_adv: batadv0: Interface activated: team0 [ 229.654900][T15286] batman_adv: batadv0: Interface deactivated: team0 [ 229.662209][T15286] batman_adv: batadv0: Removing interface: team0 [ 229.902493][T15286] bridge0: port 3(team0) entered blocking state [ 229.908953][T15286] bridge0: port 3(team0) entered disabled state [ 230.029677][T15286] team0: entered allmulticast mode [ 230.034942][T15286] team_slave_0: entered allmulticast mode [ 230.041721][T15286] team_slave_1: entered allmulticast mode [ 230.062828][T15286] bridge0: port 3(team0) entered blocking state [ 230.069301][T15286] bridge0: port 3(team0) entered forwarding state [ 230.211917][T15309] hub 6-0:1.0: USB hub found [ 230.216874][T15309] hub 6-0:1.0: 8 ports detected [ 230.272679][T15310] loop6: detected capacity change from 0 to 512 [ 230.886090][T15310] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.892726][T15310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.899982][T15310] EXT4-fs: quotafile must be on filesystem root [ 231.170414][T15326] loop7: detected capacity change from 0 to 512 [ 231.212750][T15326] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.219525][T15326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.232505][T15326] EXT4-fs: quotafile must be on filesystem root [ 231.426337][T15352] loop8: detected capacity change from 0 to 512 [ 231.452587][T15352] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4595: bg 0: block 393: padding at end of block bitmap is not set [ 231.468902][T15352] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 231.504916][T15352] EXT4-fs (loop8): 2 truncates cleaned up [ 231.515714][T15352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.551702][T15360] hub 6-0:1.0: USB hub found [ 231.580494][T15360] hub 6-0:1.0: 8 ports detected [ 231.598664][T15352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.380704][T15391] __nla_validate_parse: 25 callbacks suppressed [ 232.380737][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4607'. [ 232.396301][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4607'. [ 232.405441][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4607'. [ 232.448462][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4608'. [ 232.457554][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4608'. [ 232.476876][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4608'. [ 232.516568][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4608'. [ 232.524248][T15400] loop5: detected capacity change from 0 to 512 [ 232.525662][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4608'. [ 232.526545][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4608'. [ 232.565491][T15400] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4610: bg 0: block 393: padding at end of block bitmap is not set [ 232.584072][T15400] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 232.599472][T15400] EXT4-fs (loop5): 2 truncates cleaned up [ 232.609615][T15394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4608'. [ 232.609756][T15400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.638442][T15400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.738510][T15407] loop5: detected capacity change from 0 to 512 [ 232.779591][T15407] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4611: bg 0: block 393: padding at end of block bitmap is not set [ 232.838618][T15417] validate_nla: 6 callbacks suppressed [ 232.838669][T15417] netlink: 'syz.8.4615': attribute type 10 has an invalid length. [ 232.847685][T15407] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 232.887658][T15407] EXT4-fs (loop5): 2 truncates cleaned up [ 232.905347][T15407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.926832][T15407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.044019][T15429] netlink: 'syz.6.4619': attribute type 10 has an invalid length. [ 233.056207][T15429] bridge0: port 3(team0) entered disabled state [ 233.088743][T15431] loop2: detected capacity change from 0 to 512 [ 233.095815][T15431] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.102551][T15431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.110280][T15431] EXT4-fs: quotafile must be on filesystem root [ 233.135665][T15429] team0: left allmulticast mode [ 233.140823][T15429] team_slave_0: left allmulticast mode [ 233.146644][T15429] team_slave_1: left allmulticast mode [ 233.152312][T15429] team0: left promiscuous mode [ 233.157168][T15429] team_slave_0: left promiscuous mode [ 233.162884][T15429] team_slave_1: left promiscuous mode [ 233.168572][T15429] bridge0: port 3(team0) entered disabled state [ 233.219421][T15437] hub 6-0:1.0: USB hub found [ 233.261812][T15437] hub 6-0:1.0: 8 ports detected [ 233.679305][T15429] batman_adv: batadv0: Adding interface: team0 [ 233.685549][T15429] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.710741][T15429] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 233.726978][T15446] hub 6-0:1.0: USB hub found [ 233.731802][T15446] hub 6-0:1.0: 8 ports detected [ 233.765577][T15432] netlink: 'syz.6.4619': attribute type 10 has an invalid length. [ 233.774255][T15432] team0: entered promiscuous mode [ 233.779407][T15432] team_slave_0: entered promiscuous mode [ 233.785198][T15432] team_slave_1: entered promiscuous mode [ 233.802816][T15432] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.811970][T15432] batman_adv: batadv0: Interface activated: team0 [ 233.818527][T15432] batman_adv: batadv0: Interface deactivated: team0 [ 233.825242][T15432] batman_adv: batadv0: Removing interface: team0 [ 233.837574][T15432] bridge0: port 3(team0) entered blocking state [ 233.843904][T15432] bridge0: port 3(team0) entered disabled state [ 233.852139][T15432] team0: entered allmulticast mode [ 233.857360][T15432] team_slave_0: entered allmulticast mode [ 233.863125][T15432] team_slave_1: entered allmulticast mode [ 233.876337][T15432] bridge0: port 3(team0) entered blocking state [ 233.882816][T15432] bridge0: port 3(team0) entered forwarding state [ 234.144249][T15459] netlink: 'syz.6.4629': attribute type 10 has an invalid length. [ 234.452379][T15484] hub 6-0:1.0: USB hub found [ 234.457492][T15484] hub 6-0:1.0: 8 ports detected [ 234.666953][T15490] loop6: detected capacity change from 0 to 512 [ 234.726543][T15490] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.733281][T15490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.760735][T15490] EXT4-fs: quotafile must be on filesystem root [ 235.101811][T15505] loop2: detected capacity change from 0 to 512 [ 235.138196][T15507] netlink: 'syz.7.4643': attribute type 10 has an invalid length. [ 235.177345][T15507] bridge0: port 4(team0) entered disabled state [ 235.187365][T15505] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4642: bg 0: block 393: padding at end of block bitmap is not set [ 235.203101][T15507] team0: left allmulticast mode [ 235.208039][T15507] team_slave_0: left allmulticast mode [ 235.213532][T15507] team_slave_1: left allmulticast mode [ 235.219216][T15507] team0: left promiscuous mode [ 235.219858][T15505] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 235.224012][T15507] team_slave_0: left promiscuous mode [ 235.224089][T15507] team_slave_1: left promiscuous mode [ 235.244464][T15507] bridge0: port 4(team0) entered disabled state [ 235.269335][T15507] batman_adv: batadv0: Adding interface: team0 [ 235.275654][T15507] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.301565][T15507] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 235.322954][T15505] EXT4-fs (loop2): 2 truncates cleaned up [ 235.354442][T15505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.383292][T15517] netlink: 'syz.6.4645': attribute type 10 has an invalid length. [ 235.388174][T15505] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.411971][T15517] bridge0: port 3(team0) entered disabled state [ 235.421472][T15517] team0: left allmulticast mode [ 235.426505][T15517] team_slave_0: left allmulticast mode [ 235.432826][T15517] team_slave_1: left allmulticast mode [ 235.438417][T15517] team0: left promiscuous mode [ 235.443287][T15517] team_slave_0: left promiscuous mode [ 235.448816][T15517] team_slave_1: left promiscuous mode [ 235.454503][T15517] bridge0: port 3(team0) entered disabled state [ 235.482513][T15517] batman_adv: batadv0: Adding interface: team0 [ 235.489548][T15517] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.514783][T15517] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 235.527662][T15511] netlink: 'syz.7.4643': attribute type 10 has an invalid length. [ 235.536487][T15522] loop5: detected capacity change from 0 to 512 [ 235.539786][T15511] team0: entered promiscuous mode [ 235.547874][T15511] team_slave_0: entered promiscuous mode [ 235.553648][T15511] team_slave_1: entered promiscuous mode [ 235.564577][ T29] audit: type=1326 audit(1731115898.469:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.578216][T15511] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.588455][ T29] audit: type=1326 audit(1731115898.469:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.606083][T15511] batman_adv: batadv0: Interface activated: team0 [ 235.618686][ T29] audit: type=1326 audit(1731115898.469:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.618767][ T29] audit: type=1326 audit(1731115898.469:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.618799][ T29] audit: type=1326 audit(1731115898.469:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.618830][ T29] audit: type=1326 audit(1731115898.469:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.618912][ T29] audit: type=1326 audit(1731115898.469:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.618944][ T29] audit: type=1326 audit(1731115898.469:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.619039][ T29] audit: type=1326 audit(1731115898.469:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f19daeee719 code=0x7ffc0000 [ 235.619076][ T29] audit: type=1326 audit(1731115898.469:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15523 comm="syz.2.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19daf20805 code=0x7ffc0000 [ 235.669468][T15522] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4647: bg 0: block 393: padding at end of block bitmap is not set [ 235.674022][T15511] batman_adv: batadv0: Interface deactivated: team0 [ 235.758549][T15522] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 235.770713][T15511] batman_adv: batadv0: Removing interface: team0 [ 235.803951][T15534] loop8: detected capacity change from 0 to 512 [ 235.821875][T15522] EXT4-fs (loop5): 2 truncates cleaned up [ 235.845248][T15534] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4652: bg 0: block 393: padding at end of block bitmap is not set [ 235.847756][T15522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.853851][T15511] bridge0: port 4(team0) entered blocking state [ 235.860709][T15522] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.865025][T15511] bridge0: port 4(team0) entered disabled state [ 235.880236][T15534] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 235.894521][T15511] team0: entered allmulticast mode [ 235.898883][T15534] EXT4-fs (loop8): 2 truncates cleaned up [ 235.907357][T15511] team_slave_0: entered allmulticast mode [ 235.907404][T15511] team_slave_1: entered allmulticast mode [ 235.910524][T15511] bridge0: port 4(team0) entered blocking state [ 235.915057][T15534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.923036][T15511] bridge0: port 4(team0) entered forwarding state [ 235.934283][T15534] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.252595][T15553] hub 6-0:1.0: USB hub found [ 236.257696][T15553] hub 6-0:1.0: 8 ports detected [ 236.487330][T15565] netlink: 'syz.6.4661': attribute type 10 has an invalid length. [ 236.550417][T15568] netlink: 'syz.6.4661': attribute type 10 has an invalid length. [ 236.560255][T15568] team0: entered promiscuous mode [ 236.563362][T15560] loop8: detected capacity change from 0 to 512 [ 236.565319][T15568] team_slave_0: entered promiscuous mode [ 236.565399][T15568] team_slave_1: entered promiscuous mode [ 236.585480][T15568] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.592552][T15560] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.599089][T15560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.616068][T15560] EXT4-fs: quotafile must be on filesystem root [ 236.628209][T15568] batman_adv: batadv0: Interface activated: team0 [ 236.634774][T15568] batman_adv: batadv0: Interface deactivated: team0 [ 236.641573][T15568] batman_adv: batadv0: Removing interface: team0 [ 236.666809][T15568] bridge0: port 3(team0) entered blocking state [ 236.673153][T15568] bridge0: port 3(team0) entered disabled state [ 236.679844][T15568] team0: entered allmulticast mode [ 236.684997][T15568] team_slave_0: entered allmulticast mode [ 236.691472][T15568] team_slave_1: entered allmulticast mode [ 236.700450][T15568] bridge0: port 3(team0) entered blocking state [ 236.706810][T15568] bridge0: port 3(team0) entered forwarding state [ 237.036311][T15585] loop5: detected capacity change from 0 to 512 [ 237.196506][T15585] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4668: bg 0: block 393: padding at end of block bitmap is not set [ 237.258515][T15585] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 237.273161][T15585] EXT4-fs (loop5): 2 truncates cleaned up [ 237.281585][T15595] netlink: 'syz.8.4672': attribute type 10 has an invalid length. [ 237.282252][T15585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.304505][T15585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.323265][T15595] team0: left allmulticast mode [ 237.328297][T15595] team_slave_0: left allmulticast mode [ 237.333968][T15595] team_slave_1: left allmulticast mode [ 237.339986][T15595] team0: left promiscuous mode [ 237.344837][T15595] team_slave_0: left promiscuous mode [ 237.351102][T15595] team_slave_1: left promiscuous mode [ 237.356889][T15595] bridge0: port 4(team0) entered disabled state [ 237.388095][T15595] batman_adv: batadv0: Adding interface: team0 [ 237.394390][T15595] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.419862][T15595] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 237.438541][T15598] __nla_validate_parse: 37 callbacks suppressed [ 237.438565][T15598] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4672'. [ 237.481509][T15598] team0: entered promiscuous mode [ 237.486725][T15598] team_slave_0: entered promiscuous mode [ 237.492641][T15598] team_slave_1: entered promiscuous mode [ 237.499956][T15598] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.507251][T15598] batman_adv: batadv0: Interface activated: team0 [ 237.513847][T15598] batman_adv: batadv0: Interface deactivated: team0 [ 237.518593][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 237.520702][T15598] batman_adv: batadv0: Removing interface: team0 [ 237.530261][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 237.549532][T15598] bridge0: port 4(team0) entered blocking state [ 237.555992][T15598] bridge0: port 4(team0) entered disabled state [ 237.564625][T15598] team0: entered allmulticast mode [ 237.569928][T15598] team_slave_0: entered allmulticast mode [ 237.575785][T15598] team_slave_1: entered allmulticast mode [ 237.586674][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 237.618073][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 237.627345][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 237.649339][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 237.912928][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 237.922029][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 237.958469][T15603] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4676'. [ 238.303730][T15627] validate_nla: 1 callbacks suppressed [ 238.303749][T15627] netlink: 'syz.2.4681': attribute type 10 has an invalid length. [ 238.320417][T15627] netlink: 'syz.2.4681': attribute type 10 has an invalid length. [ 238.328863][T15627] team0: entered promiscuous mode [ 238.333951][T15627] team_slave_0: entered promiscuous mode [ 238.339717][T15627] team_slave_1: entered promiscuous mode [ 238.348580][T15627] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.355931][T15627] batman_adv: batadv0: Interface activated: team0 [ 238.362593][T15627] batman_adv: batadv0: Interface deactivated: team0 [ 238.369297][T15627] batman_adv: batadv0: Removing interface: team0 [ 238.384158][T15627] bridge0: port 3(team0) entered blocking state [ 238.390619][T15627] bridge0: port 3(team0) entered disabled state [ 238.423902][T15627] team0: entered allmulticast mode [ 238.429736][T15627] team_slave_0: entered allmulticast mode [ 238.435666][T15627] team_slave_1: entered allmulticast mode [ 238.467847][T15627] bridge0: port 3(team0) entered blocking state [ 238.474611][T15627] bridge0: port 3(team0) entered forwarding state [ 238.532171][T15639] netlink: 'syz.8.4687': attribute type 10 has an invalid length. [ 238.544831][T15637] loop5: detected capacity change from 0 to 512 [ 238.558921][T15637] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4686: bg 0: block 393: padding at end of block bitmap is not set [ 238.573895][T15639] team0: left allmulticast mode [ 238.579540][T15639] team_slave_0: left allmulticast mode [ 238.585050][T15639] team_slave_1: left allmulticast mode [ 238.590896][T15639] team0: left promiscuous mode [ 238.595701][T15639] team_slave_0: left promiscuous mode [ 238.597081][T15637] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 238.601455][T15639] team_slave_1: left promiscuous mode [ 238.615840][T15637] EXT4-fs (loop5): 2 truncates cleaned up [ 238.616492][T15639] bridge0: port 4(team0) entered disabled state [ 238.626763][T15637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.641846][T15637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.659690][T15639] batman_adv: batadv0: Adding interface: team0 [ 238.666022][T15639] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.691447][T15639] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 238.724093][T15646] netlink: 'syz.8.4687': attribute type 10 has an invalid length. [ 238.743636][T15646] team0: entered promiscuous mode [ 238.748859][T15646] team_slave_0: entered promiscuous mode [ 238.754754][T15646] team_slave_1: entered promiscuous mode [ 238.764072][T15646] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.771389][T15646] batman_adv: batadv0: Interface activated: team0 [ 238.777985][T15646] batman_adv: batadv0: Interface deactivated: team0 [ 238.784750][T15646] batman_adv: batadv0: Removing interface: team0 [ 238.843198][T15646] bridge0: port 4(team0) entered blocking state [ 238.849756][T15646] bridge0: port 4(team0) entered disabled state [ 238.858605][T15646] team0: entered allmulticast mode [ 238.863774][T15646] team_slave_0: entered allmulticast mode [ 238.869713][T15646] team_slave_1: entered allmulticast mode [ 238.961640][T15655] hub 6-0:1.0: USB hub found [ 238.967317][T15655] hub 6-0:1.0: 8 ports detected [ 239.139461][T15662] loop6: detected capacity change from 0 to 512 [ 239.210364][T15662] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4695: bg 0: block 393: padding at end of block bitmap is not set [ 239.251312][T15662] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 239.260853][T15662] EXT4-fs (loop6): 2 truncates cleaned up [ 239.276918][T15662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.301224][T15662] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.361309][T15675] loop2: detected capacity change from 0 to 512 [ 239.388641][T15675] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4700: bg 0: block 393: padding at end of block bitmap is not set [ 239.395243][T15680] netlink: 'syz.8.4702': attribute type 10 has an invalid length. [ 239.403484][T15675] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 239.428122][T15675] EXT4-fs (loop2): 2 truncates cleaned up [ 239.434464][T15675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.450031][T15675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.459502][T15680] team0: left allmulticast mode [ 239.464481][T15680] team_slave_0: left allmulticast mode [ 239.465618][T15687] FAULT_INJECTION: forcing a failure. [ 239.465618][T15687] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 239.470058][T15680] team_slave_1: left allmulticast mode [ 239.470078][T15680] team0: left promiscuous mode [ 239.483895][T15687] CPU: 1 UID: 0 PID: 15687 Comm: syz.7.4705 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 239.488754][T15680] team_slave_0: left promiscuous mode [ 239.493509][T15687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.504430][T15680] team_slave_1: left promiscuous mode [ 239.509703][T15687] Call Trace: [ 239.509724][T15687] [ 239.509735][T15687] dump_stack_lvl+0xf2/0x150 [ 239.520244][T15680] bridge0: port 4(team0) entered disabled state [ 239.525417][T15687] dump_stack+0x15/0x20 [ 239.546947][T15687] should_fail_ex+0x223/0x230 [ 239.551685][T15687] should_fail+0xb/0x10 [ 239.555859][T15687] should_fail_usercopy+0x1a/0x20 [ 239.560913][T15687] _copy_from_user+0x1e/0xb0 [ 239.565570][T15687] copy_msghdr_from_user+0x54/0x2a0 [ 239.570864][T15687] __sys_sendmsg+0x171/0x270 [ 239.575501][T15687] __x64_sys_sendmsg+0x46/0x50 [ 239.580295][T15687] x64_sys_call+0x2689/0x2d60 [ 239.585134][T15687] do_syscall_64+0xc9/0x1c0 [ 239.589840][T15687] ? clear_bhb_loop+0x55/0xb0 [ 239.594585][T15687] ? clear_bhb_loop+0x55/0xb0 [ 239.599455][T15687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.605409][T15687] RIP: 0033:0x7f81d5c9e719 [ 239.609852][T15687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.629593][T15687] RSP: 002b:00007f81d4911038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.638059][T15687] RAX: ffffffffffffffda RBX: 00007f81d5e55f80 RCX: 00007f81d5c9e719 [ 239.646071][T15687] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 239.654067][T15687] RBP: 00007f81d4911090 R08: 0000000000000000 R09: 0000000000000000 [ 239.662110][T15687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.670168][T15687] R13: 0000000000000000 R14: 00007f81d5e55f80 R15: 00007ffdbd87c168 [ 239.678270][T15687] [ 239.684805][T15680] batman_adv: batadv0: Adding interface: team0 [ 239.691295][T15680] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.716585][T15680] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 239.854958][T15696] loop5: detected capacity change from 0 to 4096 [ 239.870079][T15705] netlink: 'syz.2.4713': attribute type 10 has an invalid length. [ 239.876236][T15707] loop8: detected capacity change from 0 to 1024 [ 239.879845][T15696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.893742][T15705] bridge0: port 3(team0) entered disabled state [ 239.903837][T15705] team0: left allmulticast mode [ 239.908633][T15707] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 239.908863][T15705] team_slave_0: left allmulticast mode [ 239.925461][T15705] team_slave_1: left allmulticast mode [ 239.931065][T15705] team0: left promiscuous mode [ 239.931716][T15696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.935894][T15705] team_slave_0: left promiscuous mode [ 239.935968][T15705] team_slave_1: left promiscuous mode [ 239.952682][T15696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.954710][T15705] bridge0: port 3(team0) entered disabled state [ 239.961362][T15707] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 239.972243][T15709] loop6: detected capacity change from 0 to 512 [ 239.990884][T15709] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.997484][T15709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.004268][T15707] EXT4-fs (loop8): orphan cleanup on readonly fs [ 240.011601][T15709] EXT4-fs: quotafile must be on filesystem root [ 240.020732][T15707] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4712: Invalid block bitmap block 0 in block_group 0 [ 240.037604][T15696] loop5: detected capacity change from 0 to 512 [ 240.051161][T15707] EXT4-fs error (device loop8): ext4_acquire_dquot:6879: comm syz.8.4712: Failed to acquire dquot type 0 [ 240.054781][T15696] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4708: bg 0: block 35: padding at end of block bitmap is not set [ 240.064442][T15705] batman_adv: batadv0: Adding interface: team0 [ 240.079612][T15696] EXT4-fs (loop5): Remounting filesystem read-only [ 240.083829][T15705] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.090554][T15696] EXT4-fs (loop5): 1 truncate cleaned up [ 240.116406][T15705] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 240.122043][T15696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.131466][T15707] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.4712: Freeing blocks not in datazone - block = 0, count = 4096 [ 240.145701][T15696] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 240.164960][T15696] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.172658][T15707] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4712: Invalid inode bitmap blk 0 in block_group 0 [ 240.186889][ T1726] EXT4-fs error (device loop8): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 0 [ 240.187747][T15707] EXT4-fs error (device loop8) in ext4_free_inode:360: Corrupt filesystem [ 240.198653][T15711] netlink: 'syz.2.4713': attribute type 10 has an invalid length. [ 240.198765][T15711] team0: entered promiscuous mode [ 240.198783][T15711] team_slave_0: entered promiscuous mode [ 240.198941][T15711] team_slave_1: entered promiscuous mode [ 240.200003][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.220769][T15707] EXT4-fs (loop8): 1 orphan inode deleted [ 240.228053][T15711] batman_adv: batadv0: Interface activated: team0 [ 240.242776][T15707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.244607][T15711] batman_adv: batadv0: Interface deactivated: team0 [ 240.270215][T15711] batman_adv: batadv0: Removing interface: team0 [ 240.279764][T15711] bridge0: port 3(team0) entered blocking state [ 240.286072][T15711] bridge0: port 3(team0) entered disabled state [ 240.292499][T15711] team0: entered allmulticast mode [ 240.297858][T15711] team_slave_0: entered allmulticast mode [ 240.303686][T15711] team_slave_1: entered allmulticast mode [ 240.310515][T15711] bridge0: port 3(team0) entered blocking state [ 240.316839][T15711] bridge0: port 3(team0) entered forwarding state [ 240.323546][T15707] netlink: 'syz.8.4712': attribute type 6 has an invalid length. [ 240.341411][T15707] syz.8.4712 (15707) used greatest stack depth: 9648 bytes left [ 240.361933][ T7639] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.365039][T15718] loop2: detected capacity change from 0 to 512 [ 240.398028][T15718] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4714: bg 0: block 393: padding at end of block bitmap is not set [ 240.413874][T15718] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 240.423833][T15718] EXT4-fs (loop2): 2 truncates cleaned up [ 240.430259][T15718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.445928][T15718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.481315][T15731] FAULT_INJECTION: forcing a failure. [ 240.481315][T15731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.494673][T15731] CPU: 0 UID: 0 PID: 15731 Comm: syz.5.4718 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 240.505494][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.515617][T15731] Call Trace: [ 240.518903][T15731] [ 240.521881][T15731] dump_stack_lvl+0xf2/0x150 [ 240.527044][T15731] dump_stack+0x15/0x20 [ 240.531225][T15731] should_fail_ex+0x223/0x230 [ 240.536131][T15731] should_fail+0xb/0x10 [ 240.540387][T15731] should_fail_usercopy+0x1a/0x20 [ 240.545439][T15731] _copy_from_user+0x1e/0xb0 [ 240.550233][T15731] copy_msghdr_from_user+0x54/0x2a0 [ 240.555563][T15731] __sys_sendmsg+0x171/0x270 [ 240.560185][T15731] __x64_sys_sendmsg+0x46/0x50 [ 240.564974][T15731] x64_sys_call+0x2689/0x2d60 [ 240.569722][T15731] do_syscall_64+0xc9/0x1c0 [ 240.574257][T15731] ? clear_bhb_loop+0x55/0xb0 [ 240.578955][T15731] ? clear_bhb_loop+0x55/0xb0 [ 240.583647][T15731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.589685][T15731] RIP: 0033:0x7fd1500de719 [ 240.594110][T15731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.613967][T15731] RSP: 002b:00007fd14ed51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.622481][T15731] RAX: ffffffffffffffda RBX: 00007fd150295f80 RCX: 00007fd1500de719 [ 240.630609][T15731] RDX: 0000000000000000 RSI: 0000000020002340 RDI: 0000000000000003 [ 240.639206][T15731] RBP: 00007fd14ed51090 R08: 0000000000000000 R09: 0000000000000000 [ 240.647336][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.655320][T15731] R13: 0000000000000000 R14: 00007fd150295f80 R15: 00007ffd814cda78 [ 240.663470][T15731] [ 240.686920][T15735] netlink: 'syz.7.4719': attribute type 10 has an invalid length. [ 240.701652][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 240.701701][ T29] audit: type=1400 audit(1731115903.619:3438): avc: denied { watch watch_reads } for pid=15736 comm="syz.5.4720" path="/41/file1" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.720693][T15735] bridge0: port 4(team0) entered disabled state [ 240.740228][ T29] audit: type=1400 audit(1731115903.619:3439): avc: denied { execute_no_trans } for pid=15736 comm="syz.5.4720" path="/41/file1" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.771091][T15735] team0: left allmulticast mode [ 240.776067][T15735] team_slave_0: left allmulticast mode [ 240.779123][T15742] FAULT_INJECTION: forcing a failure. [ 240.779123][T15742] name failslab, interval 1, probability 0, space 0, times 1 [ 240.781711][T15735] team_slave_1: left allmulticast mode [ 240.794288][T15742] CPU: 0 UID: 0 PID: 15742 Comm: syz.6.4722 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 240.800436][T15735] team0: left promiscuous mode [ 240.810435][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.810453][T15742] Call Trace: [ 240.810460][T15742] [ 240.810470][T15742] dump_stack_lvl+0xf2/0x150 [ 240.815240][T15735] team_slave_0: left promiscuous mode [ 240.825291][T15742] dump_stack+0x15/0x20 [ 240.825322][T15742] should_fail_ex+0x223/0x230 [ 240.825426][T15742] ? getname_flags+0x81/0x3b0 [ 240.825454][T15742] should_failslab+0x8f/0xb0 [ 240.825482][T15742] kmem_cache_alloc_noprof+0x4c/0x290 [ 240.825520][T15742] getname_flags+0x81/0x3b0 [ 240.829837][T15735] team_slave_1: left promiscuous mode [ 240.831734][T15742] getname_uflags+0x24/0x30 [ 240.836667][T15735] bridge0: port 4(team0) entered disabled state [ 240.841862][T15742] __x64_sys_execveat+0x5e/0x90 [ 240.891358][T15742] x64_sys_call+0x8ae/0x2d60 [ 240.896137][T15742] do_syscall_64+0xc9/0x1c0 [ 240.900722][T15742] ? clear_bhb_loop+0x55/0xb0 [ 240.905432][T15742] ? clear_bhb_loop+0x55/0xb0 [ 240.910174][T15742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.916099][T15742] RIP: 0033:0x7f664063e719 [ 240.920830][T15742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.940608][T15742] RSP: 002b:00007f663f2b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 240.949040][T15742] RAX: ffffffffffffffda RBX: 00007f66407f5f80 RCX: 00007f664063e719 [ 240.957123][T15742] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 240.965104][T15742] RBP: 00007f663f2b1090 R08: 0000000000000000 R09: 0000000000000000 [ 240.973141][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.981292][T15742] R13: 0000000000000000 R14: 00007f66407f5f80 R15: 00007ffd5f7c5f48 [ 240.989380][T15742] [ 240.995290][T15735] batman_adv: batadv0: Adding interface: team0 [ 241.001546][T15735] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.027457][T15735] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 241.077060][T15746] loop6: detected capacity change from 0 to 1024 [ 241.100148][T15746] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.130223][T15746] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 241.141662][T15746] EXT4-fs (loop6): orphan cleanup on readonly fs [ 241.154476][T15746] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5780: Corrupt filesystem [ 241.177993][T15746] EXT4-fs (loop6): Remounting filesystem read-only [ 241.187063][T15746] Quota error (device loop6): write_blk: dquota write failed [ 241.194878][T15746] Quota error (device loop6): write_blk: dquota write failed [ 241.202341][T15746] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 241.215970][T15746] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 241.225156][T15746] EXT4-fs (loop6): 1 orphan inode deleted [ 241.237205][T15746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 241.252166][T15746] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 241.259873][T15746] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.427902][T15765] FAULT_INJECTION: forcing a failure. [ 241.427902][T15765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.441174][T15765] CPU: 1 UID: 0 PID: 15765 Comm: syz.5.4729 Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 241.451961][T15765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.462032][T15765] Call Trace: [ 241.465407][T15765] [ 241.468347][T15765] dump_stack_lvl+0xf2/0x150 [ 241.473032][T15765] dump_stack+0x15/0x20 [ 241.477224][T15765] should_fail_ex+0x223/0x230 [ 241.481944][T15765] should_fail+0xb/0x10 [ 241.486238][T15765] should_fail_usercopy+0x1a/0x20 [ 241.491284][T15765] _copy_to_user+0x20/0xa0 [ 241.495720][T15765] simple_read_from_buffer+0xa0/0x110 [ 241.501166][T15765] proc_fail_nth_read+0xf9/0x140 [ 241.506201][T15765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.511767][T15765] vfs_read+0x1a2/0x700 [ 241.515956][T15765] ? __fget_files+0x1d4/0x210 [ 241.520662][T15765] ksys_read+0xeb/0x1b0 [ 241.524899][T15765] __x64_sys_read+0x42/0x50 [ 241.529447][T15765] x64_sys_call+0x27d3/0x2d60 [ 241.534278][T15765] do_syscall_64+0xc9/0x1c0 [ 241.538821][T15765] ? clear_bhb_loop+0x55/0xb0 [ 241.543604][T15765] ? clear_bhb_loop+0x55/0xb0 [ 241.548321][T15765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.554274][T15765] RIP: 0033:0x7fd1500dd15c [ 241.558715][T15765] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 241.578393][T15765] RSP: 002b:00007fd14ed0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.587080][T15765] RAX: ffffffffffffffda RBX: 00007fd150296130 RCX: 00007fd1500dd15c [ 241.595072][T15765] RDX: 000000000000000f RSI: 00007fd14ed0f0a0 RDI: 0000000000000008 [ 241.603065][T15765] RBP: 00007fd14ed0f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.611050][T15765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.619060][T15765] R13: 0000000000000000 R14: 00007fd150296130 R15: 00007ffd814cda78 [ 241.627103][T15765] [ 242.087329][T15789] netlink: 'syz.5.4737': attribute type 10 has an invalid length. [ 242.105224][T15789] team0: entered promiscuous mode [ 242.110366][T15789] team_slave_0: entered promiscuous mode [ 242.116142][T15789] team_slave_1: entered promiscuous mode [ 242.170335][T15789] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.190363][ T29] audit: type=1400 audit(1731115905.099:3440): avc: denied { remount } for pid=15793 comm="syz.2.4740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.219507][T15789] batman_adv: batadv0: Interface activated: team0 [ 242.226327][T15789] batman_adv: batadv0: Interface deactivated: team0 [ 242.233044][T15789] batman_adv: batadv0: Removing interface: team0 [ 242.252513][ T29] audit: type=1326 audit(1731115905.159:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.8.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab463e719 code=0x7ffc0000 [ 242.276101][ T29] audit: type=1326 audit(1731115905.159:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.8.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab463e719 code=0x7ffc0000 [ 242.300680][ T29] audit: type=1326 audit(1731115905.159:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.8.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f3ab463e719 code=0x7ffc0000 [ 242.344267][T15797] loop2: detected capacity change from 0 to 256 [ 242.399080][T15789] bridge0: port 3(team0) entered blocking state [ 242.405443][T15789] bridge0: port 3(team0) entered disabled state [ 242.420792][T15789] team0: entered allmulticast mode [ 242.425994][T15789] team_slave_0: entered allmulticast mode [ 242.431832][T15789] team_slave_1: entered allmulticast mode [ 242.456237][T15789] bridge0: port 3(team0) entered blocking state [ 242.462743][T15789] bridge0: port 3(team0) entered forwarding state [ 242.559261][T15803] loop2: detected capacity change from 0 to 512 [ 242.568196][T15803] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4742: bg 0: block 393: padding at end of block bitmap is not set [ 242.608301][T15809] program syz.5.4745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.619749][T15803] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 242.636423][T15803] EXT4-fs (loop2): 2 truncates cleaned up [ 242.675125][T15803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.710103][T15803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.942971][T15818] hub 6-0:1.0: USB hub found [ 242.948606][T15818] hub 6-0:1.0: 8 ports detected [ 243.298397][T15829] loop7: detected capacity change from 0 to 512 [ 243.311327][T15829] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4751: bg 0: block 393: padding at end of block bitmap is not set [ 243.326246][T15829] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 243.337150][T15829] EXT4-fs (loop7): 2 truncates cleaned up [ 243.343412][T15829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.358474][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.473680][T15844] validate_nla: 1 callbacks suppressed [ 243.473698][T15844] netlink: 'syz.7.4755': attribute type 10 has an invalid length. [ 243.487991][T15841] netlink: 'syz.2.4756': attribute type 10 has an invalid length. [ 243.501195][T15841] bridge0: port 3(team0) entered disabled state [ 243.508327][T15841] team0: left allmulticast mode [ 243.513236][T15841] team_slave_0: left allmulticast mode [ 243.518852][T15841] team_slave_1: left allmulticast mode [ 243.524334][T15841] team0: left promiscuous mode [ 243.529163][T15841] team_slave_0: left promiscuous mode [ 243.534673][T15841] team_slave_1: left promiscuous mode [ 243.540373][T15841] bridge0: port 3(team0) entered disabled state [ 243.560169][T15841] batman_adv: batadv0: Adding interface: team0 [ 243.566487][T15841] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.592591][T15841] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 243.607623][T15844] netlink: 'syz.7.4755': attribute type 10 has an invalid length. [ 243.615508][T15844] __nla_validate_parse: 6 callbacks suppressed [ 243.615523][T15844] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4755'. [ 243.632276][T15844] team0: entered promiscuous mode [ 243.637451][T15844] team_slave_0: entered promiscuous mode [ 243.643343][T15844] team_slave_1: entered promiscuous mode [ 243.649723][T15851] loop8: detected capacity change from 0 to 512 [ 243.658021][T15844] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.665192][T15844] batman_adv: batadv0: Interface activated: team0 [ 243.671826][T15844] batman_adv: batadv0: Interface deactivated: team0 [ 243.678605][T15844] batman_adv: batadv0: Removing interface: team0 [ 243.689167][T15851] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.695647][T15851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.705033][T15851] EXT4-fs: quotafile must be on filesystem root [ 243.716270][T15844] bridge0: port 4(team0) entered blocking state [ 243.722763][T15844] bridge0: port 4(team0) entered disabled state [ 243.729291][T15844] team0: entered allmulticast mode [ 243.734662][T15844] team_slave_0: entered allmulticast mode [ 243.740586][T15844] team_slave_1: entered allmulticast mode [ 243.748816][T15844] bridge0: port 4(team0) entered blocking state [ 243.755145][T15844] bridge0: port 4(team0) entered forwarding state [ 243.762159][T15845] netlink: 'syz.2.4756': attribute type 10 has an invalid length. [ 243.770846][T15845] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4756'. [ 243.788140][T15845] team0: entered promiscuous mode [ 243.793238][T15845] team_slave_0: entered promiscuous mode [ 243.799054][T15845] team_slave_1: entered promiscuous mode [ 243.804479][T15860] loop7: detected capacity change from 0 to 512 [ 243.808001][T15845] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.824146][T15845] batman_adv: batadv0: Interface activated: team0 [ 243.830735][T15845] batman_adv: batadv0: Interface deactivated: team0 [ 243.830828][ T3006] ================================================================== [ 243.837393][T15845] batman_adv: batadv0: Removing interface: team0 [ 243.845436][ T3006] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 243.858785][ T3006] [ 243.861130][ T3006] write to 0xffffffff86696770 of 8 bytes by task 15845 on cpu 0: [ 243.868867][ T3006] prb_reserve+0x740/0xb60 [ 243.873321][ T3006] vprintk_store+0x53f/0x810 [ 243.878051][ T3006] vprintk_emit+0x15e/0x680 [ 243.882711][ T3006] vprintk_default+0x26/0x30 [ 243.887438][ T3006] vprintk+0x75/0x80 [ 243.891358][ T3006] _printk+0x7a/0xa0 [ 243.895278][ T3006] batadv_hardif_disable_interface+0xbf/0xa90 [ 243.901390][ T3006] batadv_softif_slave_del+0x5e/0xd0 [ 243.907326][ T3006] do_setlink+0x9c6/0x2490 [ 243.911782][ T3006] rtnl_newlink+0x11a3/0x1690 [ 243.916497][ T3006] rtnetlink_rcv_msg+0x6aa/0x710 [ 243.921476][ T3006] netlink_rcv_skb+0x12c/0x230 [ 243.926358][ T3006] rtnetlink_rcv+0x1c/0x30 [ 243.930800][ T3006] netlink_unicast+0x599/0x670 [ 243.935627][ T3006] netlink_sendmsg+0x5cc/0x6e0 [ 243.940418][ T3006] __sock_sendmsg+0x140/0x180 [ 243.945139][ T3006] ____sys_sendmsg+0x312/0x410 [ 243.949962][ T3006] __sys_sendmsg+0x1d9/0x270 [ 243.954585][ T3006] __x64_sys_sendmsg+0x46/0x50 [ 243.959466][ T3006] x64_sys_call+0x2689/0x2d60 [ 243.964172][ T3006] do_syscall_64+0xc9/0x1c0 [ 243.968717][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.974792][ T3006] [ 243.977225][ T3006] read to 0xffffffff86696770 of 8 bytes by task 3006 on cpu 1: [ 243.984797][ T3006] _prb_read_valid+0x1ec/0xba0 [ 243.989670][ T3006] prb_read_valid+0x3d/0x60 [ 243.994209][ T3006] syslog_print+0x26f/0x760 [ 243.998760][ T3006] do_syslog+0x397/0x7e0 [ 244.003040][ T3006] __x64_sys_syslog+0x43/0x50 [ 244.007745][ T3006] x64_sys_call+0x1677/0x2d60 [ 244.012513][ T3006] do_syscall_64+0xc9/0x1c0 [ 244.017050][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.022987][ T3006] [ 244.025322][ T3006] value changed: 0x000000000000006e -> 0x0000000000000000 [ 244.028617][T15860] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4761: bg 0: block 393: padding at end of block bitmap is not set [ 244.032513][ T3006] [ 244.032520][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 244.032531][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: klogd Not tainted 6.12.0-rc6-syzkaller-00192-gf1dce1f09380 #0 [ 244.060320][T15860] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 244.065471][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.065491][ T3006] ================================================================== [ 244.092880][T15845] bridge0: port 3(team0) entered blocking state [ 244.099232][T15845] bridge0: port 3(team0) entered disabled state [ 244.105703][T15845] team0: entered allmulticast mode [ 244.110896][T15845] team_slave_0: entered allmulticast mode [ 244.114980][T15860] EXT4-fs (loop7): 2 truncates cleaned up [ 244.116707][T15845] team_slave_1: entered allmulticast mode [ 244.117691][T15845] bridge0: port 3(team0) entered blocking state [ 244.126141][T15860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.129024][T15845] bridge0: port 3(team0) entered forwarding state [ 244.145747][T15860] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.