last executing test programs: 15.593778413s ago: executing program 4 (id=5): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 15.382708444s ago: executing program 4 (id=9): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', r5, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) kexec_load(0x0, 0x6, &(0x7f0000000880)=[{&(0x7f00000002c0)="5e322dfe0a00e60203c49fbaf45808462902ce771586bb7dd3f915efdd5d0250864f975db6b9263c075e9926858086aee1946dc9e98ed00493553a5928e3d8247fd81310124b776c6b330c17a10be765f8d2f3fc372857", 0x57, 0xd969, 0x800}, {&(0x7f0000000340)="c69df137af733186119ed81bbad68fa4faf3094c9196d3fefd8cc9a229cde3ab79529a5603ce70e993106d48c7a2bf51b1343d55e8c856c496414ca9da19998b19a96aec22153bd1d233875aa687d7b21d300eb1af7d28231925199947b62a5ddfc2", 0x62, 0x2e2c, 0x7fffffff}, {&(0x7f00000003c0)="db7ba556f0fd60d3d1aa8029a39d925387dcb41294f43e2dffd143f261dee947daf8c989b9aa189990813ef98f02f96019a67d239dcf00791607766213241f3dc1e3efb55680520c3e9f24d2afbb8b16539c313c64a85a2bcafbac801b881b72fc11fb26e95eb62d31e1c153ea953d121c0f51b98d15f6b881b7939d4c8e4e746c3867e6baa32008501b143be279faaf0eb799d46b7320c500a02a8139e576ed7627c669530ecef0390bda1ae0c9d26290997d4b3ad7f8923f56205417b734a9d57635a8fd5cfdd2d2ca90a0ef69100774ded1d172eb8fc0acd575b669bb58d9889a4703bfa18fa35f10bf5f9287cd96", 0xf0, 0x8, 0x7}, {&(0x7f0000000700)="affe9eeca50a35d0d4edf785a25a8899e227f6ddf11bcdca14c60b87a9c886c8e089756561568ceb5d23483d578a452319f9bad6332567741bb21d186993dd93a9903226012580d4440642de2be0d062d6b79d11ed57e1094bc299f9a951c6b62a9eaa8e03b5b265841bbf443075bbd1a1a4156c21c7f3144076b0fc34942311a0f5ae7ec076", 0x86, 0x4}, {&(0x7f00000007c0)="a0112e0968c540ad10bd72971ed6d7920fdc8eea8c6bbae95aba0a7e7cbac76789977e9d72f6ad744be87c97dac8dbdead36042b8a7371a1cb12ea09a58bcd8dbf4ac44b4ae15e9aa1d04ffa09fb22ceff7ea003dd707812457ef35c87e392d77c07ac9089fccccd155d7aab5d369f635a86911928922138fd8e3bfd931e853228503842a9d9a6b967fe65cd6afd48eb945b3332d9e4", 0x96, 0x10, 0x6}, {&(0x7f0000001740)="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", 0x1000, 0x8, 0x6}], 0x0) clock_getres(0x0, 0x0) 14.903822746s ago: executing program 4 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e", 0x7e}, {&(0x7f0000001480)="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", 0x101}], 0x3) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xa9a8, 0x200) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={'\x00', 0x381, 0x100, 0x8, 0x9bcf, 0x9, r4}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$isdn_base(0x22, 0x3, 0x0) unshare(0x2040400) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$rds(0x15, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "fb0fda000000cc00", "4cb42692506aed242aa8b6f46fcbc0c6", "aa4bc766", "5f3a3962aad66cc0"}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) shutdown(r6, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x3, 0x80000002}, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 14.32756626s ago: executing program 0 (id=26): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 13.975280782s ago: executing program 4 (id=29): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x46a5f7329de31a52, 0x4) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) 13.662115894s ago: executing program 4 (id=33): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) munlockall() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}}, 0x20000804) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0xfffffffa) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 13.606221895s ago: executing program 0 (id=34): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'lo\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 13.193966618s ago: executing program 0 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000d00000a0900010073797a3000000000300002002c00018014000300fc020000378f6ac3bb2a9cd55edb44d200"/91], 0x50}}, 0x4010) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$eJzs3MtvG0UYAPBvN4++m7SURx9QQ0FEFJImLdADh4JA6gUJCQ7lGNJQlaYtaoJEq4oGhMoR8RcARyQkTlw4gYQQcAJxhTtCqlAvLRxQ0Nq7ybqxU8d5GOrfT7IzszvrmW93xx7vZB1A16pkT0nE1oj4NSIGatn6ApXan5vXL0/8df3yRBJzcy//mVTL3bh+eaIoWmy3Jc8MpRHp+0nsbVDv9MVLZ8anpiYv5PmRmbNvjkxfvPTE6bPjpyZPTZ4bO3r0yOHRp58ae3JV4sziurHnnfP7dh9/9aMXJ+bitR8+z9q7NV9fjqNmcMV1VqISc7mFpf3V50dW/Or/LdtK6aS3gw1hWXoiIjtcfdX+PxA9sXDwBuKF9+Yz33aogcCayT6bdixa2pP/Tec/v4A7UaKPQ5cqPvGz77/FYz3HH5127dnsebIa/838UVvTG2n2XXaw9o29p8n2x1ZY/9aIODH798fZIxpehwAAWF1fZ+OfxxuN/9K4p1Ruez6HMhgRByNiZ0TcFRG7IuLuiGrZeyPivmXWX7klv3j88/OmtgJrUTb+eyaf26of/6V5iWQ+t60af1/y+umpyUP5PhmKvg1ZfnSJOr55/pcPm62rlMZ/2SOrvxgL5u34o3dD/TYnx2fGVxBynWvvRuzpbRR/Mj8TkO2B3RGxp43Xz/bZ6cc+25elt29ZvP728S9hFeaZ5j6NeLR2/GfjlvgLSa2mZvOTIxtjavLQSHFWLPbjT1dfKuf7Sum6+De2FtPGdoNtIDv+mxue/3n8RTco5munl1/H1d8+aPqdZvHxT+LEbLlE7fxPS0uy878/eaWa7s+XvT0+M3NhNKI/X1C3fGxh2yJflM/iHzrQuP/vjPjnk3y7vRGRncT3R8QDEbE/b/uDEfFQRBxYIv7vn3v4jaX3UJvn/yrI4j+51PGPGEzK8/VtJHrOfPdVs/pbe/87Uk0N5Utaef9rtYEr2XcAAADwf5FW56CTdLhIly5O7YrN6dT56ZmDlXjr3MnaXPVg9KXFla6B0vXQ0fzacJEfuyV/OCJ2VP/TaFM1PzxxfmpbJwMHqvfq1PX/SNPh4dq635v90wtw51jWPFr57sAvvlz9xgDryv2a0L30f+he+j90L/0fulej/n8l4mYHmgKsM5//0L30f+he+j90L/0futLiW+KLn1tp507/hcTO4yvafM0TcwNr8sqzy9+qZ40ijfKPdjRNJBHRXhWRLl2mv4XaO5ZIb1vmWJu7ZRmJ/XliQ0S0utWVddurnX1fAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWC3/BgAA//+NJdz0") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xffff, 0x7f, 0xfffffffa, 0x0, 0x9}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0xcc11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$selinux_access(r2, &(0x7f0000000cc0)=ANY=[@ANYBLOB='system_u:object_r:cpu_online_t:s0 stem_r:kernel_t:s0 0'], 0x55) 12.504954072s ago: executing program 0 (id=41): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x45f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 12.171378914s ago: executing program 4 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 12.140623214s ago: executing program 32 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 12.003738885s ago: executing program 0 (id=49): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$EVIOCGBITSW(r6, 0x80404525, &(0x7f0000001240)=""/71) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.345938999s ago: executing program 0 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 11.340393739s ago: executing program 33 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 4.048163515s ago: executing program 1 (id=110): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095", @ANYRES8=0x0, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x3, 0x4000}}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000300), &(0x7f0000000040)='%pI4 \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigsuspend(0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f0000000000000000000000000000000000140020"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8001, @private1, 0x3}, {0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, r4, 0x7ff}}, 0x48) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r11, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x30) 3.345518419s ago: executing program 1 (id=115): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'lo\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) 3.24578489s ago: executing program 1 (id=117): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r4 = dup3(r2, r0, 0x80000) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000200)={0x2d, 0x1}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0)}, 0x20) 3.15218147s ago: executing program 1 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000d00000a0900010073797a3000000000300002002c00018014000300fc020000378f6ac3bb2a9cd55edb44d200"/69], 0x50}}, 0x4010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r0, @ANYRES64=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xffff, 0x7f, 0xfffffffa, 0x0, 0x9}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0xcc11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$selinux_access(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB='system_u:object_r:cpu_online_t:s0 stem_r:kernel_t:s0 0'], 0x55) 2.912579682s ago: executing program 1 (id=125): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 2.756710493s ago: executing program 1 (id=128): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, [{0x5, 0x2, "c84800000500e4c408501af78df6"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000001140)={r7, 0x7ff}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001980)=@newchain={0x24, 0x66, 0x601, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xffe0}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x10) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x800) 2.432017575s ago: executing program 2 (id=134): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, [{0x5, 0x2, "c84800000500e4c408501af78df6"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000001140)={r7, 0x7ff}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001980)=@newchain={0x24, 0x66, 0x601, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xffe0}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x10) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x800) 2.334283585s ago: executing program 6 (id=135): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @local}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @broadcast}, 'veth0_to_bond\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001aa0800060001000000f8526497cbae696ea077737389ea4711b28c0b7843a6e981bb5611fa4b6a1e455b7a1eeb8817d561b0c43da1802b8597bb7d0191565136d79b0809c3c41dd53b2950d0e5ca37f716c6a4923cb8dc"], 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$autofs(0xffffffffffffff9c, 0x0, 0x281442, 0x0) 1.976460918s ago: executing program 2 (id=138): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001240)=""/71) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.831182839s ago: executing program 2 (id=140): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000080)={[{@max_dir_size_kb}, {@stripe={'stripe', 0x3d, 0x8}}, {@grpid}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x83, 0x5fe, &(0x7f0000001040)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78kbWaiTP5wO7eu/NaN/76ulp3uzo7QRQWZPZUxpxOCIuJRETbdvGo7lxsrXfw+/uXM4eSTQa//s2iaRVVuz/qPV1f/aURIxGxKdnI35f21jv6q3bV+fqjaZXI6bXllemV2/dPr60PHdl4crCtdkT/zx5auZfsydntyXOIq5z5//7p7dee+kfi5/VjydxOi4OvzIfHXFsl8mYjEetENvLhyLiVJbo8nPZa4oQkpLbwdbUWr+PwxFxKCailueaJmLpzVIbBwxUoxbRACoqMf6hoop5QHFuP4jz4N3swZnmCdDG+Iea743EaH5utO9h0nZm1DzfPbAN9Wd1/HznyHvZI3q8DzG0DfX0sn43Iv7YLf4kb9uB/F2cLP400rbvy9IzETHS+lmkW6x/siO/079/vyb+9n7I4j3d+pqVn91i/WXHD0A13T/TOpCvZ7knx79sZljMf6LL/Ge8y7FrK8o+/vWe/xXH+9H8PfK0Yx6WzXkudH/J4c6Cr944906v+tvnf9kjq7+YC+6EB3cjjnTE/3o+mUse93/Spf+zXS71Wcd/Pv/mXK9tZcffuBdxtOv5z5MrWllqem15pSjruD45vbhUX5hpPnet46NPXvygV/1lx5/1f/SIf7P+z8pW+qzjwwv3lnttG39q/OnXI8nFPDXSKnl5bm3txmzESHK+tUtb+YnN21LsU7xGFv+xv3Yf/5vEn3f0ep/xr/z/6sNe2/ru/w1/VXKPGn22oZcs/vkt9v/bfdbxwws3/9xRNFYkNot/7BljAwAAAAAAgKpJ82uwSTr1OJ2mU1PNNbx/iH1p/frq2t8Wr9+8Nh9xLP9/yOG0uNI90cwnWX629f+wRf5ER/7vEXEwIt6tjeX5qcvX6/NlBw8AAAAAAAAAAAAAAAAAAAC7xP7W+v/iPtXf15rr//uydmjArQMGbpA3mAN2N+Mfqisf/1u9gyuwpzn+Q3UZ/1Bdxj9Ul/EP1WX8Q3UZ/1Bdxj9Ul/EPAAAAAM+lg3+5/2USEev/HssfmZHWtuFSWwYMmjEO1VUruwFAaR5f+rf8Hyqnr/n/j60PBxx8c4ASJN0K88lBY/PBf7/rdwIAAAAAAAAAAAAAA3D0sPX/UFVpfFx2E4CSPMP6fx8dAHucj/6H6nKODzxtFf9orw3W/wMAAAAAAAAAAADAjhnPH0k61boF6Hik6dRUxG8j4kAMJ4tL9YWZiPhdRHxRG/5Nlp8tu9EAAAAAAAAAAAAAAAAAAADwnFm9dfvqXL2+cKM98dOGkuc7UdwFdbe0pz0Ryc5XOhYRuyH2wSSG2kqSiPWs53dFw26sxq5oRpo3o+Q/TAAAAAAAAAAAAAAAAAAAUEFta4+7O/L+DrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbek/v/bz2RPOV1yo4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANibfgkAAP//4DE4gw==") 1.6677014s ago: executing program 3 (id=142): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc8002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800002200000000fe0018110000", @ANYRES32=r5, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x4f, 0x205) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") 1.65355147s ago: executing program 2 (id=143): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000080)={[{@max_dir_size_kb}, {@stripe={'stripe', 0x3d, 0x8}}, {@grpid}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 1.439853621s ago: executing program 2 (id=144): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f00000007c0)}, 0x20) syz_usb_disconnect(r2) 1.425333411s ago: executing program 6 (id=145): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) socket$kcm(0xa, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1.291217942s ago: executing program 6 (id=146): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc8002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800002200000000fe0018110000", @ANYRES32=r5, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x4f, 0x205) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") 887.750624ms ago: executing program 3 (id=149): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @local}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @broadcast}, 'veth0_to_bond\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001aa0800060001000000f8526497cbae696ea077737389ea4711b28c0b7843a6e981bb5611fa4b6a1e455b7a1eeb8817d561b0c43da1802b8597bb7d0191565136d79b0809c3c41dd53b2950d0e5ca37f716c6a4923cb8dc"], 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 792.456415ms ago: executing program 3 (id=151): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000001240)=""/71) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 753.220855ms ago: executing program 5 (id=153): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 673.158326ms ago: executing program 3 (id=154): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xfffff04a}}, './file0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000480)=0x13, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r3}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x559, &(0x7f0000000f80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r7, &(0x7f0000000540)=[{&(0x7f0000000880)=""/147, 0x93}, {0x0}], 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000340), &(0x7f0000000380)=0x4) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 667.947906ms ago: executing program 5 (id=155): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000080)={[{@max_dir_size_kb}, {@stripe={'stripe', 0x3d, 0x8}}, {@grpid}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 582.612116ms ago: executing program 6 (id=156): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x202, 0x0) 555.841937ms ago: executing program 2 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_to_bond\x00', 0x400}) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100037042dbd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c020000000000280012800b00010069703667726500001802028014000600ff020000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) 476.812797ms ago: executing program 6 (id=158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000009bb88d3df2de863582d5cc24dab1000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) fcntl$dupfd(r1, 0x0, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) dup3(r4, r2, 0x80000) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r7, 0x0, 0xfffffffffffffff4}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r9, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) close(r5) 383.514178ms ago: executing program 5 (id=159): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) 208.479349ms ago: executing program 5 (id=160): socket$igmp(0x2, 0x3, 0x2) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000300)={&(0x7f0000001000)={[{&(0x7f0000000180)="4bbaca797a258e2637a16ba61547f74451b3c96db68ac318d92338b09e32197382d3a4859ef8e6c545e590", 0x2b, 0x1}, {&(0x7f00000001c0)="5682e513cda2328553771efdf7fc12d795fccda413c2218629bf4af48ae86c0351a084be1e04c11d3ba19164ef363deb1ffe8b9957d36ae436630cfd10e813defa4b1ccee295003527bbd144734ccae5", 0x50, 0x2}, {&(0x7f0000000240)="d2918df68167c37e6cf276b97ac176c400a96cab4c6b5e22cde59c0c620497f8abf700aa5f3797d09a2de4095f1bc53a28865f46fa3c8de4932fa6d3c2d2d49181367ec7d5a07275587d0154effb20649e80bc3de95d681f771921f9d448926eb52c560725aec601f1acb25a4bf52e33186d804997013468700e2e49e5f4a33630e0993ec258ab4545195918db58a62a41097cb978a80fb8cd22a22edd3f5bd4e3", 0xa1}]}, 0x3, 0x1}, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 138.757679ms ago: executing program 6 (id=161): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000080)={[{@max_dir_size_kb}, {@stripe={'stripe', 0x3d, 0x8}}, {@grpid}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 112.739859ms ago: executing program 3 (id=162): r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0xfffffffffffffee8, 0x800) fcntl$setsig(r0, 0xa, 0x15) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0x2, 0x1, 0x5, 0x25, r1}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @thr={&(0x7f00000002c0)="d098d9a8d4d34df10a764d14a7bc2ad865b03d777ed3476502fd37a1f71a8f778d05016ac8dcec1473e07c8c3a2d4b336255136fd139855af5605dbf4f9455ee72382fcc821d6d31c2e45b8a129527e998943abb0465966058676dc93d933dbe310dd70d7f72607135383a912adcf4d8d485e8562239c89c759e", &(0x7f00000000c0)="66efaef399cbd208f74273f64495f9509296e885148c09abb462ad3e"}}, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x102}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000340)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}, {0x7, 0x10, 0x7, 0x3ff}, {0xc, 0xe9, 0x0, 0x2}]}) eventfd(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = timerfd_create(0x9, 0x80000) timerfd_settime(r7, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095fca0aceba0e389d5bfd8fc15a1bcbcf4682b29f66436a2f921997961dab9349daf25f5c50123139a34b57461f99bfc3fe09bab609f12c42330856d3c2d40bde2121c2517286553ca73ca599751ad70f723a3f8babead72d5435a24b469406bf66fa615bf4a97cf74941a783c59cb778da23d20578064e43585d1482fe05ae0788d8f8a60ec301661a7d16749b31d2388686f322c235dbc1be5183da16f2e94acaf179206eb350d085300"/218, @ANYRESHEX=r1, @ANYRESDEC=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x72, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xefff, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 112.117249ms ago: executing program 5 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 19.02847ms ago: executing program 5 (id=164): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc8002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800002200000000fe0018110000", @ANYRES32=r5, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x4f, 0x205) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") 0s ago: executing program 3 (id=165): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e20, @local}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @broadcast}, 'veth0_to_bond\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001aa0800060001000000f8526497cbae696ea077737389ea4711b28c0b7843a6e981bb5611fa4b6a1e455b7a1eeb8817d561b0c43da1802b8597bb7d0191565136d79b0809c3c41dd53b2950d0e5ca37f716c6a4923cb8dc"], 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 33.147584][ T29] audit: type=1400 audit(1762386590.344:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.170819][ T29] audit: type=1400 audit(1762386590.364:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.171811][ T3305] cgroup: Unknown subsys name 'net' [ 33.199018][ T29] audit: type=1400 audit(1762386590.394:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.373657][ T3305] cgroup: Unknown subsys name 'cpuset' [ 33.380085][ T3305] cgroup: Unknown subsys name 'rlimit' [ 33.551789][ T29] audit: type=1400 audit(1762386590.744:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.577404][ T29] audit: type=1400 audit(1762386590.754:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.593193][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.598099][ T29] audit: type=1400 audit(1762386590.754:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.627069][ T29] audit: type=1400 audit(1762386590.754:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.646500][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.647615][ T29] audit: type=1400 audit(1762386590.754:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.681388][ T29] audit: type=1400 audit(1762386590.754:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.705283][ T29] audit: type=1400 audit(1762386590.804:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.881720][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 34.929713][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 34.974633][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 34.986479][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.053931][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.061308][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.069180][ T3315] bridge_slave_0: entered allmulticast mode [ 35.075737][ T3315] bridge_slave_0: entered promiscuous mode [ 35.082877][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.090125][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.097290][ T3317] bridge_slave_0: entered allmulticast mode [ 35.103884][ T3317] bridge_slave_0: entered promiscuous mode [ 35.119637][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.126853][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.134529][ T3315] bridge_slave_1: entered allmulticast mode [ 35.141051][ T3315] bridge_slave_1: entered promiscuous mode [ 35.147736][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.155097][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.162300][ T3317] bridge_slave_1: entered allmulticast mode [ 35.168960][ T3317] bridge_slave_1: entered promiscuous mode [ 35.175451][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 35.226213][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.236848][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.251446][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.260689][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.267845][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.275224][ T3322] bridge_slave_0: entered allmulticast mode [ 35.281685][ T3322] bridge_slave_0: entered promiscuous mode [ 35.288568][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.295709][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.303355][ T3322] bridge_slave_1: entered allmulticast mode [ 35.309842][ T3322] bridge_slave_1: entered promiscuous mode [ 35.322298][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.369287][ T3315] team0: Port device team_slave_0 added [ 35.376015][ T3315] team0: Port device team_slave_1 added [ 35.386741][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.393931][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.401090][ T3321] bridge_slave_0: entered allmulticast mode [ 35.407602][ T3321] bridge_slave_0: entered promiscuous mode [ 35.414455][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.421639][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.428866][ T3321] bridge_slave_1: entered allmulticast mode [ 35.435389][ T3321] bridge_slave_1: entered promiscuous mode [ 35.442181][ T3317] team0: Port device team_slave_0 added [ 35.456625][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.471192][ T3317] team0: Port device team_slave_1 added [ 35.485437][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.494825][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.501869][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.528116][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.559663][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.566674][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.592956][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.604845][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.633456][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.640425][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.666488][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.678828][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.688063][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.695180][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.702546][ T3324] bridge_slave_0: entered allmulticast mode [ 35.709230][ T3324] bridge_slave_0: entered promiscuous mode [ 35.716156][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.723383][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.730696][ T3324] bridge_slave_1: entered allmulticast mode [ 35.737229][ T3324] bridge_slave_1: entered promiscuous mode [ 35.744542][ T3322] team0: Port device team_slave_0 added [ 35.759843][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.766835][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.793379][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.817234][ T3322] team0: Port device team_slave_1 added [ 35.835965][ T3315] hsr_slave_0: entered promiscuous mode [ 35.842000][ T3315] hsr_slave_1: entered promiscuous mode [ 35.849150][ T3321] team0: Port device team_slave_0 added [ 35.855606][ T3321] team0: Port device team_slave_1 added [ 35.867479][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.903057][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.912593][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.919646][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.945902][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.956958][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.964125][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.990485][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.003653][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.010648][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.036742][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.054706][ T3317] hsr_slave_0: entered promiscuous mode [ 36.060668][ T3317] hsr_slave_1: entered promiscuous mode [ 36.066698][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.072431][ T3317] Cannot create hsr debugfs directory [ 36.096591][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.103638][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.129563][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.160549][ T3321] hsr_slave_0: entered promiscuous mode [ 36.166797][ T3321] hsr_slave_1: entered promiscuous mode [ 36.172848][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.178682][ T3321] Cannot create hsr debugfs directory [ 36.185052][ T3324] team0: Port device team_slave_0 added [ 36.216070][ T3324] team0: Port device team_slave_1 added [ 36.230051][ T3322] hsr_slave_0: entered promiscuous mode [ 36.236273][ T3322] hsr_slave_1: entered promiscuous mode [ 36.242073][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 36.247876][ T3322] Cannot create hsr debugfs directory [ 36.281751][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.288752][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.314841][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.351706][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.358755][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.384764][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.479703][ T3324] hsr_slave_0: entered promiscuous mode [ 36.485923][ T3324] hsr_slave_1: entered promiscuous mode [ 36.491971][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 36.497790][ T3324] Cannot create hsr debugfs directory [ 36.567028][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.584097][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.597781][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.612130][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.634725][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.644080][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.653112][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.662352][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.701137][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.718566][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.733035][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.751017][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.759906][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.772840][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.789623][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.799388][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.825844][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.835016][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.848291][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.857250][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.875060][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.906501][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.925904][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.933190][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.952534][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.963827][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.970987][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.992413][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.006511][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.013887][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.036341][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.043750][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.060899][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.084724][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.096858][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.125589][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.136594][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.144200][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.155079][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.167605][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.186813][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.194434][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.209191][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.216296][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.230757][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.237960][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.246863][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.254510][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.275891][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.283022][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.310088][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.334269][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.399401][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.479266][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.502431][ T3317] veth0_vlan: entered promiscuous mode [ 37.519744][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.537630][ T3317] veth1_vlan: entered promiscuous mode [ 37.555703][ T3315] veth0_vlan: entered promiscuous mode [ 37.576097][ T3315] veth1_vlan: entered promiscuous mode [ 37.586326][ T3317] veth0_macvtap: entered promiscuous mode [ 37.597376][ T3317] veth1_macvtap: entered promiscuous mode [ 37.632376][ T3315] veth0_macvtap: entered promiscuous mode [ 37.652659][ T3315] veth1_macvtap: entered promiscuous mode [ 37.664600][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.683679][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.708349][ T1819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.719353][ T3324] veth0_vlan: entered promiscuous mode [ 37.733786][ T1819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.744058][ T3322] veth0_vlan: entered promiscuous mode [ 37.751713][ T3324] veth1_vlan: entered promiscuous mode [ 37.758481][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.768060][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.779331][ T3322] veth1_vlan: entered promiscuous mode [ 37.791003][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.806840][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.827930][ T1819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.837411][ T3321] veth0_vlan: entered promiscuous mode [ 37.851716][ T1819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.867196][ T1819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.876372][ T1819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.886336][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.893987][ T3324] veth0_macvtap: entered promiscuous mode [ 37.912004][ T3324] veth1_macvtap: entered promiscuous mode [ 37.921133][ T3322] veth0_macvtap: entered promiscuous mode [ 37.935003][ T3321] veth1_vlan: entered promiscuous mode [ 37.952549][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.963161][ T3484] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 37.966899][ T3322] veth1_macvtap: entered promiscuous mode [ 37.981819][ T3484] team0: Port device dummy0 added [ 37.991302][ T3484] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 37.997987][ T3321] veth0_macvtap: entered promiscuous mode [ 38.006108][ T3321] veth1_macvtap: entered promiscuous mode [ 38.014373][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.029333][ T3484] team0: Port device dummy0 removed [ 38.037152][ T3484] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.050486][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.068119][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.075487][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.089623][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.101010][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.113120][ T3487] loop0: detected capacity change from 0 to 512 [ 38.119819][ T3487] ======================================================= [ 38.119819][ T3487] WARNING: The mand mount option has been deprecated and [ 38.119819][ T3487] and is ignored by this kernel. Remove the mand [ 38.119819][ T3487] option from the mount to silence this warning. [ 38.119819][ T3487] ======================================================= [ 38.157852][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.170803][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.179579][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.189890][ T3487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.203360][ T3487] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.206333][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 38.206354][ T29] audit: type=1400 audit(1762386595.404:106): avc: denied { write } for pid=3488 comm="syz.3.6" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.227041][ T3487] EXT4-fs error (device loop0): ext4_init_orphan_info:618: comm syz.0.1: orphan file block 0: bad magic [ 38.252893][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.276518][ T3487] EXT4-fs (loop0): Remounting filesystem read-only [ 38.287991][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.305612][ T3489] hub 5-0:1.0: USB hub found [ 38.310694][ T29] audit: type=1400 audit(1762386595.504:107): avc: denied { create } for pid=3488 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.320789][ T3487] EXT4-fs (loop0): mount failed [ 38.331032][ T29] audit: type=1400 audit(1762386595.504:108): avc: denied { write } for pid=3488 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.352840][ T3489] hub 5-0:1.0: 8 ports detected [ 38.358730][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.372639][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.384933][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.394437][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.412243][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.421958][ T29] audit: type=1400 audit(1762386595.584:109): avc: denied { create } for pid=3493 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.441309][ T29] audit: type=1400 audit(1762386595.594:110): avc: denied { connect } for pid=3493 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.460669][ T29] audit: type=1400 audit(1762386595.614:111): avc: denied { create } for pid=3488 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.491743][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.530452][ T3501] loop3: detected capacity change from 0 to 512 [ 38.543268][ T3501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.560695][ T29] audit: type=1400 audit(1762386595.674:112): avc: denied { setopt } for pid=3488 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.580117][ T29] audit: type=1400 audit(1762386595.674:113): avc: denied { connect } for pid=3488 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.587304][ T3501] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.7: orphan file block 0: bad magic [ 38.599467][ T29] audit: type=1400 audit(1762386595.674:114): avc: denied { name_connect } for pid=3488 comm="syz.3.6" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.632636][ T29] audit: type=1400 audit(1762386595.734:115): avc: denied { create } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.640635][ T3505] loop2: detected capacity change from 0 to 512 [ 38.674214][ T3501] EXT4-fs (loop3): Remounting filesystem read-only [ 38.693144][ T3501] EXT4-fs (loop3): mount failed [ 38.711198][ T3505] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.723081][ T3505] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 38.733240][ T3505] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.8: Corrupt directory, running e2fsck is recommended [ 38.758166][ T3498] loop1: detected capacity change from 0 to 128 [ 38.765410][ T3510] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.9'. [ 38.787229][ T3510] netlink: zone id is out of range [ 38.792507][ T3510] netlink: zone id is out of range [ 38.799541][ T3501] loop3: detected capacity change from 0 to 512 [ 38.807753][ T3514] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 38.816620][ T3498] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 38.816646][ T3505] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 38.829287][ T3510] netlink: zone id is out of range [ 38.840452][ T3505] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.8: corrupted in-inode xattr: invalid ea_ino [ 38.845598][ T3510] netlink: zone id is out of range [ 38.854138][ T3505] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8: couldn't read orphan inode 15 (err -117) [ 38.871763][ T3505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.883752][ T3514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.886757][ T3510] netlink: zone id is out of range [ 38.896509][ T3510] netlink: zone id is out of range [ 38.910475][ T3510] netlink: set zone limit has 8 unknown bytes [ 38.910581][ T3501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.966704][ T3510] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9'. [ 38.977262][ T3501] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.004725][ T3510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9'. [ 39.014087][ T3501] EXT4-fs (loop3): 1 truncate cleaned up [ 39.014213][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.020230][ T3501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.038849][ T3520] loop1: detected capacity change from 0 to 1024 [ 39.055425][ T3510] netem: change failed [ 39.088952][ T3501] EXT4-fs error (device loop3): __ext4_iget:5443: inode #12: block 2: comm syz.3.7: invalid block [ 39.100585][ T3501] EXT4-fs (loop3): Remounting filesystem read-only [ 39.135039][ T3520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.163679][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.175254][ T3524] loop2: detected capacity change from 0 to 1024 [ 39.194585][ T3524] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 39.227234][ T3520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.236758][ T3520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.252897][ T3524] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 39.263990][ T3524] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.274329][ T3524] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.13: Invalid inode table block 0 in block_group 0 [ 39.292048][ T3524] EXT4-fs (loop2): Remounting filesystem read-only [ 39.301701][ T3524] EXT4-fs (loop2): 1 truncate cleaned up [ 39.303692][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.318317][ T3524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.378843][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.398294][ T3543] bond1: entered promiscuous mode [ 39.403798][ T3543] bond1: entered allmulticast mode [ 39.404072][ T3547] loop1: detected capacity change from 0 to 512 [ 39.426516][ T3543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.456216][ T3547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.472018][ T3547] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.18: orphan file block 0: bad magic [ 39.485630][ T3543] bond1 (unregistering): Released all slaves [ 39.493673][ T3547] EXT4-fs (loop1): Remounting filesystem read-only [ 39.503727][ T3547] EXT4-fs (loop1): mount failed [ 39.616099][ T3562] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 39.633762][ T3564] bridge0: entered promiscuous mode [ 39.787585][ T3569] loop0: detected capacity change from 0 to 128 [ 39.798762][ T3571] loop1: detected capacity change from 0 to 512 [ 39.814389][ T3571] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 39.826004][ T3571] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 39.836444][ T3571] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.27: Corrupt directory, running e2fsck is recommended [ 39.852879][ T3571] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 39.872939][ T3571] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.27: corrupted in-inode xattr: invalid ea_ino [ 39.901356][ T3569] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.929176][ T3571] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.27: couldn't read orphan inode 15 (err -117) [ 39.968878][ T3571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.003070][ T3569] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.075015][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.136826][ T3577] loop4: detected capacity change from 0 to 1024 [ 40.263361][ T3549] syz.3.17 (3549) used greatest stack depth: 10464 bytes left [ 40.277350][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.307746][ T3577] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 40.375687][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 40.463530][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 40.523530][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.543560][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 40.565808][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 40.707913][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 40.744081][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 40.783812][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 40.819745][ T3597] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.827430][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 40.882256][ T3599] loop0: detected capacity change from 0 to 512 [ 40.883170][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 40.925718][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 40.953538][ T3602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'. [ 40.967740][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 40.992392][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 41.005849][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 41.064277][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 41.086664][ T3599] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.098639][ T3599] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 41.109173][ T3599] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.37: Corrupt directory, running e2fsck is recommended [ 41.143145][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 41.166973][ T3597] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.190795][ T3605] netlink: 'syz.1.38': attribute type 10 has an invalid length. [ 41.203363][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 41.213271][ T3596] Zero length message leads to an empty skb [ 41.222980][ T3599] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 41.227674][ T3605] team0: Port device dummy0 added [ 41.231281][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 41.249010][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 41.255047][ T3599] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.37: corrupted in-inode xattr: invalid ea_ino [ 41.282184][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 41.297527][ T3597] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.309353][ T3599] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.37: couldn't read orphan inode 15 (err -117) [ 41.315719][ T3605] netlink: 'syz.1.38': attribute type 10 has an invalid length. [ 41.324274][ T3599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.342661][ T3605] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 41.354981][ T3605] team0: Failed to send options change via netlink (err -105) [ 41.363062][ T3605] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 41.372664][ T3605] team0: Port device dummy0 removed [ 41.382479][ T3605] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.400236][ T3597] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.434468][ T3605] syz.1.38 (3605) used greatest stack depth: 9840 bytes left [ 41.460585][ T111] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.479821][ T1850] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.516596][ T1850] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.531485][ T3611] loop1: detected capacity change from 0 to 1024 [ 41.545726][ T1850] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.563577][ T3611] EXT4-fs: Ignoring removed orlov option [ 41.578733][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.612597][ T3533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.622293][ T3611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.729010][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.751583][ T3617] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 41.780778][ T3619] loop1: detected capacity change from 0 to 512 [ 41.806768][ T3621] loop0: detected capacity change from 0 to 512 [ 41.820875][ T3619] EXT4-fs: Ignoring removed bh option [ 41.835043][ T3621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.869919][ T3619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 41.906101][ T111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.954018][ T3621] EXT4-fs (loop0): 1 truncate cleaned up [ 41.960077][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.013193][ T3619] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.051174][ T111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.087396][ T3637] loop3: detected capacity change from 0 to 512 [ 42.109622][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 42.127957][ T3637] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.48: bad orphan inode 11862016 [ 42.163794][ T111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.202238][ T3637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.246065][ T3637] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.327932][ T111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.401424][ T3647] syzkaller1: entered promiscuous mode [ 42.407103][ T3647] syzkaller1: entered allmulticast mode [ 42.441296][ T3552] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.464056][ T3657] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.505472][ T3627] chnl_net:caif_netlink_parms(): no params data found [ 42.523042][ T3654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.531655][ T3654] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 42.558087][ T3659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 42.564920][ T3659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 42.573193][ T3659] vhci_hcd vhci_hcd.0: Device attached [ 42.597673][ T3661] vhci_hcd: connection closed [ 42.597940][ T314] vhci_hcd: stop threads [ 42.607255][ T314] vhci_hcd: release socket [ 42.611713][ T314] vhci_hcd: disconnect device [ 42.628836][ T111] bridge_slave_1: left allmulticast mode [ 42.634682][ T111] bridge_slave_1: left promiscuous mode [ 42.640548][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.658202][ T111] bridge_slave_0: left allmulticast mode [ 42.663998][ T111] bridge_slave_0: left promiscuous mode [ 42.669689][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.738571][ T3675] loop1: detected capacity change from 0 to 1024 [ 42.765132][ T3675] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 42.789792][ T3675] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 42.807013][ T3675] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.814551][ T3675] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.54: Invalid inode table block 0 in block_group 0 [ 42.827656][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.827735][ T3675] EXT4-fs (loop1): Remounting filesystem read-only [ 42.843353][ T3675] EXT4-fs (loop1): 1 truncate cleaned up [ 42.849374][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.859134][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.859739][ T111] bond0 (unregistering): Released all slaves [ 42.898044][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.919252][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.926476][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.937345][ T3627] bridge_slave_0: entered allmulticast mode [ 42.944594][ T3627] bridge_slave_0: entered promiscuous mode [ 42.952570][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.960045][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.967842][ T3627] bridge_slave_1: entered allmulticast mode [ 42.974802][ T3627] bridge_slave_1: entered promiscuous mode [ 42.998931][ T111] hsr_slave_0: left promiscuous mode [ 43.008919][ T111] hsr_slave_1: left promiscuous mode [ 43.022664][ T111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.030548][ T111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.048651][ T111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.056226][ T111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.056437][ T3694] loop1: detected capacity change from 0 to 8192 [ 43.076263][ T3694] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.089273][ T111] veth1_macvtap: left promiscuous mode [ 43.107421][ T111] veth0_macvtap: left promiscuous mode [ 43.117322][ T111] veth1_vlan: left promiscuous mode [ 43.123628][ T111] veth0_vlan: left promiscuous mode [ 43.225915][ T111] team0 (unregistering): Port device team_slave_1 removed [ 43.243164][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 43.243179][ T29] audit: type=1400 audit(1762386600.444:444): avc: denied { mount } for pid=3713 comm="syz.2.58" name="/" dev="ramfs" ino=5339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 43.243255][ T111] team0 (unregistering): Port device team_slave_0 removed [ 43.250967][ T29] audit: type=1400 audit(1762386600.444:445): avc: denied { ioctl } for pid=3713 comm="syz.2.58" path="socket:[5340]" dev="sockfs" ino=5340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.311898][ T29] audit: type=1400 audit(1762386600.494:446): avc: denied { bind } for pid=3713 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.331755][ T29] audit: type=1400 audit(1762386600.494:447): avc: denied { write } for pid=3713 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.354577][ T3627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.382360][ T3627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.425218][ T29] audit: type=1326 audit(1762386600.624:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b609f6c9 code=0x7ffc0000 [ 43.449918][ T29] audit: type=1326 audit(1762386600.634:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe1b609f6c9 code=0x7ffc0000 [ 43.473990][ T29] audit: type=1326 audit(1762386600.634:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b609f6c9 code=0x7ffc0000 [ 43.497777][ T29] audit: type=1326 audit(1762386600.634:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3715 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b609f6c9 code=0x7ffc0000 [ 43.541356][ T3627] team0: Port device team_slave_0 added [ 43.557425][ T3627] team0: Port device team_slave_1 added [ 43.617003][ T3627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.624601][ T3627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.650980][ T3627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.671380][ T3627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.678449][ T3627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.704698][ T3627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.725959][ T3718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.746509][ T3685] chnl_net:caif_netlink_parms(): no params data found [ 43.779285][ T3627] hsr_slave_0: entered promiscuous mode [ 43.785899][ T3627] hsr_slave_1: entered promiscuous mode [ 43.791940][ T3627] debugfs: 'hsr0' already exists in 'hsr' [ 43.798252][ T3627] Cannot create hsr debugfs directory [ 43.820318][ T3718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.865920][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.873352][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.880833][ T3685] bridge_slave_0: entered allmulticast mode [ 43.887717][ T3685] bridge_slave_0: entered promiscuous mode [ 43.908896][ T3718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.920942][ T3685] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.928250][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.935455][ T3685] bridge_slave_1: entered allmulticast mode [ 43.942167][ T3685] bridge_slave_1: entered promiscuous mode [ 43.961861][ T111] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.983609][ T3685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.995347][ T3685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.010000][ T3718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.044884][ T3685] team0: Port device team_slave_0 added [ 44.056561][ T3685] team0: Port device team_slave_1 added [ 44.066458][ T111] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.103184][ T3685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.110276][ T3685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.136440][ T3685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.168101][ T111] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.188748][ T3685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.196100][ T3685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.236624][ T3685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.251211][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.259830][ T3627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.279857][ T3627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.290584][ T1819] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.307198][ T1819] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.322542][ T111] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.344564][ T3627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.360648][ T1819] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.375411][ T3627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.395027][ T3685] hsr_slave_0: entered promiscuous mode [ 44.401643][ T3685] hsr_slave_1: entered promiscuous mode [ 44.407769][ T3685] debugfs: 'hsr0' already exists in 'hsr' [ 44.413709][ T3685] Cannot create hsr debugfs directory [ 44.434664][ T29] audit: type=1326 audit(1762386601.624:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b609f6c9 code=0x7ffc0000 [ 44.459031][ T29] audit: type=1326 audit(1762386601.634:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.1.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe1b609f6c9 code=0x7ffc0000 [ 44.520224][ T111] bridge_slave_1: left allmulticast mode [ 44.525998][ T111] bridge_slave_1: left promiscuous mode [ 44.531790][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.540738][ T111] bridge_slave_0: left allmulticast mode [ 44.546778][ T111] bridge_slave_0: left promiscuous mode [ 44.552948][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.646118][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.656170][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.666369][ T111] bond0 (unregistering): Released all slaves [ 44.675826][ T111] bond1 (unregistering): Released all slaves [ 44.740132][ T111] hsr_slave_0: left promiscuous mode [ 44.746494][ T111] hsr_slave_1: left promiscuous mode [ 44.752244][ T111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.759850][ T111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.768001][ T111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.775567][ T111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.786841][ T111] veth1_macvtap: left promiscuous mode [ 44.792411][ T111] veth0_macvtap: left promiscuous mode [ 44.798307][ T111] veth1_vlan: left promiscuous mode [ 44.803876][ T111] veth0_vlan: left promiscuous mode [ 44.900370][ T111] team0 (unregistering): Port device team_slave_1 removed [ 44.910194][ T111] team0 (unregistering): Port device team_slave_0 removed [ 44.951387][ T3627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.972005][ T3627] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.987660][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.994902][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.004706][ T3685] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 45.015049][ T3685] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 45.024716][ T3685] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 45.035388][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.042660][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.059586][ T3685] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 45.091732][ T3796] loop2: detected capacity change from 0 to 512 [ 45.114744][ T3796] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.126759][ T3796] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 45.137066][ T3796] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.64: Corrupt directory, running e2fsck is recommended [ 45.142951][ T3685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.166000][ T3685] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.178619][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.185792][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.209853][ T3796] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 45.221043][ T1850] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.228172][ T1850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.232877][ T3796] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.64: corrupted in-inode xattr: invalid ea_ino [ 45.252137][ T3796] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.64: couldn't read orphan inode 15 (err -117) [ 45.267929][ T3685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.278672][ T3685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.292055][ T3796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.370161][ T3627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.378694][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.450771][ T3829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.66'. [ 45.464610][ T3829] netem: change failed [ 45.481475][ T3685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.585978][ T3842] loop2: detected capacity change from 0 to 512 [ 45.600746][ T3842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 45.621396][ T3842] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.644893][ T3842] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.67: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 45.656715][ T3627] veth0_vlan: entered promiscuous mode [ 45.671414][ T3842] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.67: couldn't read orphan inode 13 (err -117) [ 45.685552][ T3842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.701442][ T3627] veth1_vlan: entered promiscuous mode [ 45.717744][ T3627] veth0_macvtap: entered promiscuous mode [ 45.727092][ T3627] veth1_macvtap: entered promiscuous mode [ 45.736546][ T3842] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 45.747524][ T3842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 45.754485][ T3627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.767093][ T3627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.785766][ T111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.798614][ T3842] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.815120][ T111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.816645][ T3842] ext4 filesystem being remounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.839732][ T111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.864147][ T3842] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.67: bg 0: block 248: padding at end of block bitmap is not set [ 45.880212][ T111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.899645][ T3842] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.67: Failed to acquire dquot type 1 [ 45.955686][ T3685] veth0_vlan: entered promiscuous mode [ 45.963426][ T3842] syz.2.67 (3842) used greatest stack depth: 9472 bytes left [ 45.965485][ T3685] veth1_vlan: entered promiscuous mode [ 46.000804][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.005862][ T3881] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.68'. [ 46.028253][ T3685] veth0_macvtap: entered promiscuous mode [ 46.034478][ T3881] netlink: zone id is out of range [ 46.039625][ T3881] netlink: zone id is out of range [ 46.047255][ T3685] veth1_macvtap: entered promiscuous mode [ 46.067355][ T3881] netlink: zone id is out of range [ 46.080795][ T3881] netlink: zone id is out of range [ 46.088820][ T3685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.092653][ T3887] netlink: 14 bytes leftover after parsing attributes in process `syz.5.68'. [ 46.100651][ T3881] netlink: zone id is out of range [ 46.129119][ T3685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.138884][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 46.149207][ T3881] netlink: zone id is out of range [ 46.176489][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.212596][ T3895] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 46.228490][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.230621][ T3881] netlink: set zone limit has 8 unknown bytes [ 46.265572][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.285669][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.370992][ T3901] loop2: detected capacity change from 0 to 1024 [ 46.407057][ T3901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.435917][ T3912] loop5: detected capacity change from 0 to 1024 [ 46.439258][ T3901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 46.451219][ T3901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 46.460405][ T3912] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.493422][ T3912] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 46.528869][ T3912] EXT4-fs (loop5): orphan cleanup on readonly fs [ 46.537579][ T3918] loop6: detected capacity change from 0 to 512 [ 46.550184][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.559543][ T3918] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 46.581977][ T3912] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.73: Failed to acquire dquot type 0 [ 46.594513][ T3918] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.74: orphan file block 0: bad magic [ 46.607271][ T3918] EXT4-fs (loop6): Remounting filesystem read-only [ 46.614047][ T3912] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.73: Failed to acquire dquot type 0 [ 46.630258][ T3918] EXT4-fs (loop6): mount failed [ 46.647882][ T3912] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.73: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.663396][ T3912] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.73: Failed to acquire dquot type 0 [ 46.692346][ T3912] EXT4-fs (loop5): 1 orphan inode deleted [ 46.712547][ T3912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.718416][ T3933] loop2: detected capacity change from 0 to 512 [ 46.752178][ T3933] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.763389][ T3627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.768284][ T3937] loop6: detected capacity change from 0 to 512 [ 46.788651][ T3937] EXT4-fs: Ignoring removed bh option [ 46.799010][ T3933] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.79: orphan file block 0: bad magic [ 46.816086][ T3942] loop5: detected capacity change from 0 to 512 [ 46.827100][ T3942] EXT4-fs: Ignoring removed bh option [ 46.833306][ T3941] loop3: detected capacity change from 0 to 1024 [ 46.839697][ T3933] EXT4-fs (loop2): Remounting filesystem read-only [ 46.840143][ T3937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 46.859947][ T3933] EXT4-fs (loop2): mount failed [ 46.868897][ T3937] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.883049][ T3941] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 46.904967][ T3941] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 46.908273][ T3942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 46.920237][ T3941] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.932998][ T3942] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.933079][ T3685] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 46.953759][ T3941] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.83: Invalid inode table block 0 in block_group 0 [ 46.967841][ T3941] EXT4-fs (loop3): Remounting filesystem read-only [ 46.975773][ T3941] EXT4-fs (loop3): 1 truncate cleaned up [ 46.983533][ T3941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.026021][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.026925][ T3627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 47.058824][ T3952] netlink: 'syz.6.84': attribute type 13 has an invalid length. [ 47.130292][ T3958] loop2: detected capacity change from 0 to 512 [ 47.137487][ T3952] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.144975][ T3952] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.160387][ T3958] EXT4-fs: Ignoring removed bh option [ 47.184238][ T3958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 47.199143][ T3958] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.214536][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.228821][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.233020][ T3967] loop5: detected capacity change from 0 to 512 [ 47.245064][ T3967] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.256864][ T3967] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 47.267205][ T3967] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.90: Corrupt directory, running e2fsck is recommended [ 47.280948][ T3967] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 47.289544][ T3967] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.90: corrupted in-inode xattr: invalid ea_ino [ 47.321154][ T3967] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.90: couldn't read orphan inode 15 (err -117) [ 47.343943][ T3967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.378782][ T111] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.383988][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 47.404975][ T3627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.416563][ T111] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.428298][ T111] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.438444][ T111] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.499327][ T3974] loop5: detected capacity change from 0 to 1024 [ 47.526663][ T3974] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 47.544222][ T3974] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 47.563065][ T3974] EXT4-fs (loop5): orphan cleanup on readonly fs [ 47.569966][ T3974] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.92: Invalid inode table block 0 in block_group 0 [ 47.618123][ T3974] EXT4-fs (loop5): Remounting filesystem read-only [ 47.624855][ T3974] EXT4-fs (loop5): 1 truncate cleaned up [ 47.631227][ T3983] loop2: detected capacity change from 0 to 512 [ 47.638185][ T3983] EXT4-fs: Ignoring removed bh option [ 47.651996][ T3974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.742507][ T3976] IPv6: Can't replace route, no match found [ 47.753339][ T3976] loop3: detected capacity change from 0 to 512 [ 47.754799][ T3983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 47.760496][ T3627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.781910][ T3983] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.799549][ T3993] loop6: detected capacity change from 0 to 512 [ 47.821272][ T3993] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 47.835170][ T3976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.857429][ T3976] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.869112][ T3993] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.101: orphan file block 0: bad magic [ 47.890982][ T3976] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.93: corrupted xattr block 6: invalid header [ 47.904699][ T3993] EXT4-fs (loop6): Remounting filesystem read-only [ 47.922602][ T3993] EXT4-fs (loop6): mount failed [ 47.928822][ T3976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 47.938637][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 47.947756][ T3976] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.93: corrupted xattr block 6: invalid header [ 47.989239][ T3976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 48.006862][ T3976] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.93: corrupted xattr block 6: invalid header [ 48.027723][ T4003] loop5: detected capacity change from 0 to 1024 [ 48.040572][ T3976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 48.067032][ T3976] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.93: corrupted xattr block 6: invalid header [ 48.081067][ T3976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 48.091856][ T3976] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.93: corrupted xattr block 6: invalid header [ 48.105327][ T3976] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 48.115515][ T3976] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #12: comm syz.3.93: corrupted xattr block 6: invalid header [ 48.174029][ T4003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.196410][ T4003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.103'. [ 48.205484][ T4003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.103'. [ 48.265506][ T3627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.351246][ T4000] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.430306][ T4020] pimreg: entered allmulticast mode [ 48.444141][ T4020] pimreg: left allmulticast mode [ 48.467122][ T4000] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.531878][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.105'. [ 48.541267][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.105'. [ 48.550900][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 48.550916][ T29] audit: type=1400 audit(1762386605.724:557): avc: denied { getopt } for pid=4018 comm="syz.5.105" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.609938][ T4000] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.729796][ T4000] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.742047][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.866876][ T312] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.900938][ T312] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.000955][ T312] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.017765][ T29] audit: type=1326 audit(1762386606.214:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.060491][ T312] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.068874][ T29] audit: type=1326 audit(1762386606.244:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.092540][ T29] audit: type=1326 audit(1762386606.244:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.116628][ T29] audit: type=1326 audit(1762386606.244:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.140251][ T29] audit: type=1326 audit(1762386606.244:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.163831][ T29] audit: type=1326 audit(1762386606.244:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.187495][ T29] audit: type=1326 audit(1762386606.244:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.211405][ T29] audit: type=1326 audit(1762386606.244:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.234773][ T29] audit: type=1326 audit(1762386606.244:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4026 comm="syz.3.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5742a3f6c9 code=0x7ffc0000 [ 49.362864][ T4027] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.107'. [ 49.416903][ T4027] netlink: zone id is out of range [ 49.422079][ T4027] netlink: zone id is out of range [ 49.484139][ T4027] netlink: zone id is out of range [ 49.538374][ T4027] netem: change failed [ 50.401666][ T4052] loop5: detected capacity change from 0 to 128 [ 50.470925][ T4050] syz.5.113: attempt to access beyond end of device [ 50.470925][ T4050] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 50.503250][ T4050] syz.5.113: attempt to access beyond end of device [ 50.503250][ T4050] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 50.517013][ T4050] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 50.543488][ T4050] syz.5.113: attempt to access beyond end of device [ 50.543488][ T4050] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 50.557154][ T4050] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 50.566836][ T4050] syz.5.113: attempt to access beyond end of device [ 50.566836][ T4050] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 50.610422][ T4050] syz.5.113: attempt to access beyond end of device [ 50.610422][ T4050] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 50.624394][ T4050] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 50.642837][ T4050] syz.5.113: attempt to access beyond end of device [ 50.642837][ T4050] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 50.656363][ T4050] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 50.673424][ T4050] syz.5.113: attempt to access beyond end of device [ 50.673424][ T4050] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 50.707136][ T4050] syz.5.113: attempt to access beyond end of device [ 50.707136][ T4050] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 50.720880][ T4050] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 50.732878][ T4050] syz.5.113: attempt to access beyond end of device [ 50.732878][ T4050] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 50.746596][ T4050] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 50.760103][ T4050] syz.5.113: attempt to access beyond end of device [ 50.760103][ T4050] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 50.774719][ T4050] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 50.784057][ T4050] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 50.794792][ T4050] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 50.813330][ T4050] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 50.938454][ T4061] loop1: detected capacity change from 0 to 512 [ 50.966750][ T4061] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.978432][ T4061] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 50.989309][ T4061] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.119: Corrupt directory, running e2fsck is recommended [ 51.013087][ T4061] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 51.034128][ T4061] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.119: corrupted in-inode xattr: invalid ea_ino [ 51.065656][ T4061] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.119: couldn't read orphan inode 15 (err -117) [ 51.107442][ T4061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.130481][ T4073] __nla_validate_parse: 5 callbacks suppressed [ 51.130499][ T4073] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.123'. [ 51.154514][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.161837][ T4073] net_ratelimit: 4 callbacks suppressed [ 51.161862][ T4073] netlink: zone id is out of range [ 51.175300][ T4073] netlink: zone id is out of range [ 51.189681][ T4073] netlink: zone id is out of range [ 51.196766][ T4073] netlink: zone id is out of range [ 51.217132][ T4073] netlink: zone id is out of range [ 51.225998][ T4082] loop6: detected capacity change from 0 to 512 [ 51.233082][ T4073] netlink: zone id is out of range [ 51.238160][ T4082] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 51.256565][ T4082] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.126: orphan file block 0: bad magic [ 51.271570][ T4084] netlink: 14 bytes leftover after parsing attributes in process `syz.3.123'. [ 51.273225][ T4073] netlink: set zone limit has 8 unknown bytes [ 51.291772][ T4082] EXT4-fs (loop6): Remounting filesystem read-only [ 51.323070][ T4082] EXT4-fs (loop6): mount failed [ 51.333839][ T4073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.123'. [ 51.343281][ T4073] netem: change failed [ 51.399300][ T4096] loop6: detected capacity change from 0 to 512 [ 51.413509][ T4096] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 51.432547][ T4096] EXT4-fs error (device loop6): ext4_init_orphan_info:618: comm syz.6.130: orphan file block 0: bad magic [ 51.453171][ T4096] EXT4-fs (loop6): Remounting filesystem read-only [ 51.472227][ T4096] EXT4-fs (loop6): mount failed [ 51.509800][ T4101] loop3: detected capacity change from 0 to 1024 [ 51.532085][ T4101] EXT4-fs: Ignoring removed oldalloc option [ 51.538630][ T4101] EXT4-fs: Ignoring removed bh option [ 51.600634][ T4101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.765875][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.776575][ T4088] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.786872][ T4135] loop6: detected capacity change from 0 to 1024 [ 51.810548][ T4135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.845813][ T4088] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.858881][ T4140] loop3: detected capacity change from 0 to 512 [ 51.866602][ T4140] EXT4-fs: Ignoring removed bh option [ 51.878210][ T4135] netlink: 16 bytes leftover after parsing attributes in process `syz.6.135'. [ 51.887213][ T4135] netlink: 16 bytes leftover after parsing attributes in process `syz.6.135'. [ 51.905533][ T4088] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.906501][ T4140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 51.929084][ T4140] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.970898][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 51.981738][ T4088] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.010691][ T4147] loop3: detected capacity change from 0 to 1024 [ 52.036394][ T4147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.077345][ T4147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 52.086502][ T4147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 52.101683][ T4151] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 52.117612][ T4151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.127072][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.138219][ T4151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.149452][ T4151] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 52.174555][ T4151] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 52.247968][ T4156] loop2: detected capacity change from 0 to 1024 [ 52.261525][ T4158] loop3: detected capacity change from 0 to 512 [ 52.269256][ T4158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.280945][ T4156] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 52.291900][ T4158] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.141: orphan file block 0: bad magic [ 52.305202][ T4156] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 52.314031][ T4156] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.314074][ T4158] EXT4-fs (loop3): Remounting filesystem read-only [ 52.321827][ T4156] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.140: Invalid inode table block 0 in block_group 0 [ 52.331958][ T4158] EXT4-fs (loop3): mount failed [ 52.343514][ T4156] EXT4-fs (loop2): Remounting filesystem read-only [ 52.354499][ T4156] EXT4-fs (loop2): 1 truncate cleaned up [ 52.365928][ T4156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.406369][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.449580][ T4165] loop2: detected capacity change from 0 to 1024 [ 52.452392][ T4163] loop3: detected capacity change from 0 to 1024 [ 52.465425][ T4165] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 52.476179][ T4163] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.477092][ T4165] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 52.487864][ T4163] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 52.495554][ T4165] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.505222][ T4163] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.510542][ T4165] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.143: Invalid inode table block 0 in block_group 0 [ 52.518469][ T4163] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.142: Failed to acquire dquot type 0 [ 52.529514][ T4165] EXT4-fs (loop2): Remounting filesystem read-only [ 52.542519][ T4163] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.142: Failed to acquire dquot type 0 [ 52.549515][ T4165] EXT4-fs (loop2): 1 truncate cleaned up [ 52.560309][ T4163] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.142: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.566030][ T4165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.579618][ T4163] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.142: Failed to acquire dquot type 0 [ 52.612805][ T4163] EXT4-fs (loop3): 1 orphan inode deleted [ 52.619575][ T4163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.620183][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.644705][ T3685] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.675765][ T4171] loop6: detected capacity change from 0 to 128 [ 52.696737][ T4171] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.709641][ T4171] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.769177][ T3685] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.823658][ T4176] loop6: detected capacity change from 0 to 1024 [ 52.831438][ T4176] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.842571][ T4176] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 52.851078][ T4176] EXT4-fs (loop6): orphan cleanup on readonly fs [ 52.858737][ T4176] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.146: Failed to acquire dquot type 0 [ 52.870741][ T4176] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.146: Failed to acquire dquot type 0 [ 52.882956][ T4176] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.146: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.897623][ T4176] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.146: Failed to acquire dquot type 0 [ 52.909301][ T4176] EXT4-fs (loop6): 1 orphan inode deleted [ 52.926527][ T4179] loop5: detected capacity change from 0 to 1024 [ 52.947888][ T4179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.147'. [ 52.957014][ T4179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.147'. [ 52.999926][ T4183] loop5: detected capacity change from 0 to 512 [ 53.014955][ T4183] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 53.024350][ T4183] EXT4-fs (loop5): orphan cleanup on readonly fs [ 53.033484][ T4183] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.148: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 53.052420][ T4183] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.148: couldn't read orphan inode 13 (err -117) [ 53.067314][ T4183] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 53.077276][ T4183] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 53.093881][ T4183] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 53.102450][ T4183] ext4 filesystem being remounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.115567][ T4183] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.148: bg 0: block 248: padding at end of block bitmap is not set [ 53.131896][ T4183] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.148: Failed to acquire dquot type 1 [ 53.190653][ T4189] loop3: detected capacity change from 0 to 1024 [ 53.213833][ T4191] loop5: detected capacity change from 0 to 1024 [ 53.220985][ T4191] EXT4-fs: Ignoring removed oldalloc option [ 53.227100][ T4191] EXT4-fs: Ignoring removed bh option [ 53.242211][ T4189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 53.306374][ T4197] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 53.326109][ T4201] loop5: detected capacity change from 0 to 512 [ 53.333520][ T4201] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.344772][ T4201] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.153: orphan file block 0: bad magic [ 53.357324][ T4201] EXT4-fs (loop5): Remounting filesystem read-only [ 53.364008][ T4201] EXT4-fs (loop5): mount failed [ 53.409280][ T4204] loop3: detected capacity change from 0 to 512 [ 53.416480][ T4206] loop5: detected capacity change from 0 to 1024 [ 53.430911][ T4206] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 53.439873][ T4204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 53.449572][ T4204] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.456855][ T4204] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.154: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 53.476519][ T4206] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 53.485787][ T4204] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.154: couldn't read orphan inode 13 (err -117) [ 53.503237][ T4206] EXT4-fs (loop5): orphan cleanup on readonly fs [ 53.519864][ T4206] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.155: Invalid inode table block 0 in block_group 0 [ 53.549797][ T4206] EXT4-fs (loop5): Remounting filesystem read-only [ 53.556481][ T4206] __quota_error: 270 callbacks suppressed [ 53.556496][ T4206] Quota error (device loop5): write_blk: dquota write failed [ 53.569955][ T4206] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 53.580248][ T4204] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 53.591012][ T4204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 53.600946][ T29] audit: type=1400 audit(1762386610.794:819): avc: denied { write } for pid=4214 comm="syz.6.158" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.624217][ T29] audit: type=1400 audit(1762386610.794:820): avc: denied { open } for pid=4214 comm="syz.6.158" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.650332][ T4206] EXT4-fs (loop5): 1 truncate cleaned up [ 53.662638][ T4217] mmap: syz.6.158 (4217) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.687637][ T29] audit: type=1326 audit(1762386610.884:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1ab7f6c9 code=0x7ffc0000 [ 53.711504][ T29] audit: type=1326 audit(1762386610.884:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1ab7f6c9 code=0x7ffc0000 [ 53.735289][ T4204] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 53.735692][ T29] audit: type=1400 audit(1762386610.914:823): avc: denied { ioctl } for pid=4214 comm="syz.6.158" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.768581][ T29] audit: type=1326 audit(1762386610.914:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4c1ab7f6c9 code=0x7ffc0000 [ 53.792328][ T29] audit: type=1326 audit(1762386610.914:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1ab7f6c9 code=0x7ffc0000 [ 53.796614][ T4204] ext4 filesystem being remounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.815900][ T29] audit: type=1326 audit(1762386610.914:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.5.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1ab7f6c9 code=0x7ffc0000 [ 53.850452][ T4211] loop2: detected capacity change from 0 to 128 [ 53.877760][ T4224] loop5: detected capacity change from 0 to 1024 [ 53.890868][ T4224] EXT4-fs: Ignoring removed oldalloc option [ 53.897199][ T4224] EXT4-fs: Ignoring removed bh option [ 53.960194][ T4228] loop6: detected capacity change from 0 to 1024 [ 53.967827][ T4228] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 53.979746][ T4228] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 53.990619][ T4228] EXT4-fs (loop6): orphan cleanup on readonly fs [ 54.009004][ T4228] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.161: Invalid inode table block 0 in block_group 0 [ 54.031237][ T4233] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 54.050570][ T4228] EXT4-fs (loop6): Remounting filesystem read-only [ 54.073523][ T4228] EXT4-fs (loop6): 1 truncate cleaned up [ 54.080452][ T4237] loop3: detected capacity change from 0 to 1024 [ 54.097976][ T3531] ================================================================== [ 54.106274][ T3531] BUG: KCSAN: data-race in set_nlink / set_nlink [ 54.113008][ T3531] [ 54.115367][ T3531] read to 0xffff8881071655f0 of 4 bytes by task 3006 on cpu 1: [ 54.122953][ T3531] set_nlink+0x29/0xb0 [ 54.127146][ T3531] kernfs_iop_permission+0x1e2/0x220 [ 54.132573][ T3531] inode_permission+0x1ca/0x310 [ 54.137473][ T3531] link_path_walk+0x162/0x900 [ 54.142257][ T3531] path_lookupat+0x63/0x2a0 [ 54.146892][ T3531] filename_lookup+0x147/0x340 [ 54.151873][ T3531] vfs_statx+0x9d/0x390 [ 54.156177][ T3531] vfs_fstatat+0x115/0x170 [ 54.160712][ T3531] __se_sys_newfstatat+0x55/0x260 [ 54.166171][ T3531] __x64_sys_newfstatat+0x55/0x70 [ 54.171743][ T3531] x64_sys_call+0x135a/0x3000 [ 54.176481][ T3531] do_syscall_64+0xd2/0x200 [ 54.181719][ T3531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.188442][ T3531] [ 54.190782][ T3531] write to 0xffff8881071655f0 of 4 bytes by task 3531 on cpu 0: [ 54.199150][ T3531] set_nlink+0x99/0xb0 [ 54.203251][ T3531] kernfs_iop_permission+0x1e2/0x220 [ 54.209085][ T3531] inode_permission+0x1ca/0x310 [ 54.214072][ T3531] link_path_walk+0x162/0x900 [ 54.218785][ T3531] path_openat+0x1de/0x2170 [ 54.223360][ T3531] do_filp_open+0x109/0x230 [ 54.227971][ T3531] do_sys_openat2+0xa6/0x110 [ 54.232585][ T3531] __x64_sys_openat+0xf2/0x120 [ 54.237480][ T3531] x64_sys_call+0x2eab/0x3000 [ 54.242348][ T3531] do_syscall_64+0xd2/0x200 [ 54.246886][ T3531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.252962][ T3531] [ 54.255538][ T3531] value changed: 0x00000008 -> 0x00000009 [ 54.261375][ T3531] [ 54.263714][ T3531] Reported by Kernel Concurrency Sanitizer on: [ 54.270439][ T3531] CPU: 0 UID: 0 PID: 3531 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.280033][ T3531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.290739][ T3531] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 54.386483][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.408186][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.455373][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.476453][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.764650][ T1850] bridge_slave_1: left allmulticast mode [ 54.770730][ T1850] bridge_slave_1: left promiscuous mode [ 54.776742][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.784897][ T1850] bridge_slave_0: left allmulticast mode [ 54.791036][ T1850] bridge_slave_0: left promiscuous mode [ 54.796844][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.835297][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.845453][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.855387][ T1850] bond0 (unregistering): Released all slaves [ 54.947519][ T1850] hsr_slave_0: left promiscuous mode [ 54.953434][ T1850] hsr_slave_1: left promiscuous mode [ 54.959314][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.967324][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.000252][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 55.009728][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 55.408255][ T1850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.485857][ T1850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.535529][ T1850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.595505][ T1850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.665643][ T1850] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.725531][ T1850] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.816283][ T1850] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.876112][ T1850] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.951190][ T1850] bridge_slave_1: left allmulticast mode [ 55.956989][ T1850] bridge_slave_1: left promiscuous mode [ 55.962941][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.971177][ T1850] bridge_slave_0: left allmulticast mode [ 55.977319][ T1850] bridge_slave_0: left promiscuous mode [ 55.983317][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.993489][ T1850] bridge_slave_1: left allmulticast mode [ 55.999350][ T1850] bridge_slave_1: left promiscuous mode [ 56.005351][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.013693][ T1850] bridge_slave_0: left allmulticast mode [ 56.019649][ T1850] bridge_slave_0: left promiscuous mode [ 56.025520][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.134758][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.145816][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.155721][ T1850] bond0 (unregistering): Released all slaves [ 56.165826][ T1850] bond1 (unregistering): Released all slaves [ 56.235515][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.246425][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.256838][ T1850] bond0 (unregistering): Released all slaves [ 56.265633][ T36] infiniband syb2: ib_query_port failed (-19) [ 56.329990][ T1850] hsr_slave_0: left promiscuous mode [ 56.335970][ T1850] hsr_slave_1: left promiscuous mode [ 56.341857][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.349839][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.358256][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.365919][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.376100][ T1850] hsr_slave_0: left promiscuous mode [ 56.381977][ T1850] hsr_slave_1: left promiscuous mode [ 56.390896][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.398423][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.406293][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.413755][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.426948][ T1850] veth1_macvtap: left promiscuous mode [ 56.432623][ T1850] veth0_macvtap: left promiscuous mode [ 56.438345][ T1850] veth1_vlan: left promiscuous mode [ 56.443837][ T1850] veth0_vlan: left promiscuous mode [ 56.449513][ T1850] veth1_macvtap: left promiscuous mode [ 56.455584][ T1850] veth0_macvtap: left promiscuous mode [ 56.461190][ T1850] veth1_vlan: left promiscuous mode [ 56.466705][ T1850] veth0_vlan: left promiscuous mode [ 56.566439][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 56.575992][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 56.630866][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 56.640242][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 57.135251][ T1850] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.204568][ T1850] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.254547][ T1850] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.314521][ T1850] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.435337][ T1850] bridge_slave_1: left allmulticast mode [ 57.441209][ T1850] bridge_slave_1: left promiscuous mode [ 57.447037][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.455680][ T1850] bridge_slave_0: left allmulticast mode [ 57.461590][ T1850] bridge_slave_0: left promiscuous mode [ 57.467421][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.565186][ T1850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.575337][ T1850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.585201][ T1850] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 57.593801][ T1850] bond0 (unregistering): Released all slaves [ 57.637496][ T1850] hsr_slave_0: left promiscuous mode [ 57.643567][ T1850] hsr_slave_1: left promiscuous mode [ 57.649326][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.656830][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.666124][ T1850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.673640][ T1850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.684409][ T1850] veth1_macvtap: left promiscuous mode [ 57.689953][ T1850] veth0_macvtap: left promiscuous mode [ 57.696084][ T1850] veth1_vlan: left promiscuous mode [ 57.701404][ T1850] veth0_vlan: left promiscuous mode [ 57.767326][ T1850] team0 (unregistering): Port device team_slave_1 removed [ 57.777322][ T1850] team0 (unregistering): Port device team_slave_0 removed [ 58.646868][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.705309][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.784394][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.824039][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.919134][ T31] bridge_slave_1: left allmulticast mode [ 58.925193][ T31] bridge_slave_1: left promiscuous mode [ 58.931056][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.939650][ T31] bridge_slave_0: left allmulticast mode [ 58.945486][ T31] bridge_slave_0: left promiscuous mode [ 58.951627][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.064835][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.075142][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.085277][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 59.094342][ T31] bond0 (unregistering): Released all slaves [ 59.177635][ T31] hsr_slave_0: left promiscuous mode [ 59.184068][ T31] hsr_slave_1: left promiscuous mode [ 59.189782][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.198449][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.206709][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.214459][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.223530][ T31] veth1_macvtap: left promiscuous mode [ 59.229141][ T31] veth0_macvtap: left promiscuous mode [ 59.234878][ T31] veth1_vlan: left promiscuous mode [ 59.240224][ T31] veth0_vlan: left promiscuous mode [ 59.302488][ T31] team0 (unregistering): Port device team_slave_1 removed [ 59.312339][ T31] team0 (unregistering): Port device team_slave_0 removed