last executing test programs: 8.074812897s ago: executing program 1 (id=131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10, 0x0) write$cgroup_pressure(r2, &(0x7f00000000c0)={'some', 0x20, 0xf, 0x20, 0x8}, 0x2f) sendmmsg$unix(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="18", 0xfe37}], 0x1}}], 0x1, 0x0) 7.809109389s ago: executing program 1 (id=136): socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000818090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) 7.757401399s ago: executing program 1 (id=138): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000c80000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 7.69976322s ago: executing program 1 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x3) 7.67894626s ago: executing program 1 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) close_range(r3, r4, 0x0) 7.499492561s ago: executing program 1 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 7.499332661s ago: executing program 32 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000180)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1.311168191s ago: executing program 0 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.299636661s ago: executing program 2 (id=303): r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) r3 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r3, r3, 0x0) 1.265507591s ago: executing program 2 (id=304): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fb", 0x2}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000280)="87", 0x1}, {&(0x7f0000000b00)="57ed", 0x2}], 0x8}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}], 0x1}}], 0x4, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.163568462s ago: executing program 2 (id=307): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 1.119077172s ago: executing program 2 (id=309): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) 1.043602292s ago: executing program 2 (id=313): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f0000000340)='O', 0x1) sendfile(r1, r0, 0x0, 0x40003) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) 1.001245553s ago: executing program 4 (id=314): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280)="8e", 0x1) 975.739103ms ago: executing program 0 (id=316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) 898.094704ms ago: executing program 5 (id=319): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getitimer(0x1, &(0x7f0000000080)) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) 895.061984ms ago: executing program 4 (id=320): r0 = socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 850.512694ms ago: executing program 4 (id=321): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xcc3d, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 813.496494ms ago: executing program 0 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 774.168725ms ago: executing program 0 (id=323): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) write(r3, &(0x7f0000003300)="ac", 0x1) write(r1, 0x0, 0x0) 773.107804ms ago: executing program 3 (id=324): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 755.189045ms ago: executing program 5 (id=325): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x80}, 0x18) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0xa85, 0xf) 712.195325ms ago: executing program 5 (id=326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 705.122045ms ago: executing program 3 (id=327): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000080)='./bus\x00', 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) 671.854645ms ago: executing program 5 (id=328): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 643.173925ms ago: executing program 4 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) close_range(r2, 0xffffffffffffffff, 0xff00000000000000) 579.953426ms ago: executing program 0 (id=330): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0xfffffc1d) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 544.896736ms ago: executing program 4 (id=331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 448.151487ms ago: executing program 3 (id=332): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 337.340857ms ago: executing program 3 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 276.183108ms ago: executing program 3 (id=334): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000039}) 263.068398ms ago: executing program 4 (id=335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x20040010) 262.523488ms ago: executing program 0 (id=345): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r2, &(0x7f0000000140)=""/68, 0x44) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 191.046308ms ago: executing program 3 (id=336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200000, &(0x7f00000008c0)={[{@noinit_itable}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x571, &(0x7f00000009c0)="$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") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r2, 0x0, 0x0, 0x1001f0) fallocate(r2, 0x3, 0xf00, 0x10000) 56.175209ms ago: executing program 2 (id=337): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x80}, 0x18) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0xa85, 0xf) 30.171669ms ago: executing program 5 (id=348): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 0s ago: executing program 5 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x5, 0x0, 0x7995}, 0x8, 0x20000000, 0x0, 0x48000000, 0x3, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 25.309104][ T29] audit: type=1400 audit(1762263605.602:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.332009][ T29] audit: type=1400 audit(1762263605.622:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.332660][ T3303] cgroup: Unknown subsys name 'net' [ 25.359590][ T29] audit: type=1400 audit(1762263605.652:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.487751][ T3303] cgroup: Unknown subsys name 'cpuset' [ 25.493768][ T3303] cgroup: Unknown subsys name 'rlimit' [ 25.623467][ T29] audit: type=1400 audit(1762263605.912:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.646748][ T29] audit: type=1400 audit(1762263605.912:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.667192][ T29] audit: type=1400 audit(1762263605.912:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.684778][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.687580][ T29] audit: type=1400 audit(1762263605.912:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.716419][ T29] audit: type=1400 audit(1762263605.922:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.741181][ T29] audit: type=1400 audit(1762263605.922:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.757048][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.764361][ T29] audit: type=1400 audit(1762263605.992:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.862352][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.903712][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 26.923807][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 26.939924][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.975740][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.982817][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.990050][ T3314] bridge_slave_0: entered allmulticast mode [ 26.996413][ T3314] bridge_slave_0: entered promiscuous mode [ 27.006505][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.013617][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.020948][ T3314] bridge_slave_1: entered allmulticast mode [ 27.027141][ T3314] bridge_slave_1: entered promiscuous mode [ 27.075312][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.092362][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.099420][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.106541][ T3319] bridge_slave_0: entered allmulticast mode [ 27.113034][ T3319] bridge_slave_0: entered promiscuous mode [ 27.119556][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.126585][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.133763][ T3319] bridge_slave_1: entered allmulticast mode [ 27.140041][ T3319] bridge_slave_1: entered promiscuous mode [ 27.148662][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.179066][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.186130][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.193416][ T3321] bridge_slave_0: entered allmulticast mode [ 27.199706][ T3321] bridge_slave_0: entered promiscuous mode [ 27.207778][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.214877][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.221986][ T3321] bridge_slave_1: entered allmulticast mode [ 27.228233][ T3321] bridge_slave_1: entered promiscuous mode [ 27.250128][ T3314] team0: Port device team_slave_0 added [ 27.260982][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.274692][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.281759][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.288899][ T3315] bridge_slave_0: entered allmulticast mode [ 27.295437][ T3315] bridge_slave_0: entered promiscuous mode [ 27.301714][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.310948][ T3314] team0: Port device team_slave_1 added [ 27.317709][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.332633][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.342803][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.351920][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.358957][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.366197][ T3315] bridge_slave_1: entered allmulticast mode [ 27.372592][ T3315] bridge_slave_1: entered promiscuous mode [ 27.410347][ T3319] team0: Port device team_slave_0 added [ 27.425115][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.436590][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.443543][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.469437][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.480800][ T3319] team0: Port device team_slave_1 added [ 27.487037][ T3321] team0: Port device team_slave_0 added [ 27.493626][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.504579][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.511520][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.537469][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.553653][ T3321] team0: Port device team_slave_1 added [ 27.594008][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.600972][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.626876][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.642357][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.649350][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.675252][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.686498][ T3315] team0: Port device team_slave_0 added [ 27.697919][ T3314] hsr_slave_0: entered promiscuous mode [ 27.703782][ T3314] hsr_slave_1: entered promiscuous mode [ 27.710002][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.716965][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.742888][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.756152][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.763127][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.789044][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.800283][ T3315] team0: Port device team_slave_1 added [ 27.806080][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.813172][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.820340][ T3313] bridge_slave_0: entered allmulticast mode [ 27.826624][ T3313] bridge_slave_0: entered promiscuous mode [ 27.833230][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.840300][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.847505][ T3313] bridge_slave_1: entered allmulticast mode [ 27.853744][ T3313] bridge_slave_1: entered promiscuous mode [ 27.897137][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.910739][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.917712][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.943661][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.961185][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.971936][ T3321] hsr_slave_0: entered promiscuous mode [ 27.977860][ T3321] hsr_slave_1: entered promiscuous mode [ 27.983524][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 27.989241][ T3321] Cannot create hsr debugfs directory [ 28.004249][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.011201][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.037220][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.056738][ T3319] hsr_slave_0: entered promiscuous mode [ 28.062675][ T3319] hsr_slave_1: entered promiscuous mode [ 28.068493][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 28.074187][ T3319] Cannot create hsr debugfs directory [ 28.086958][ T3313] team0: Port device team_slave_0 added [ 28.110697][ T3313] team0: Port device team_slave_1 added [ 28.145727][ T3315] hsr_slave_0: entered promiscuous mode [ 28.151621][ T3315] hsr_slave_1: entered promiscuous mode [ 28.157326][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 28.163041][ T3315] Cannot create hsr debugfs directory [ 28.185788][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.192739][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.218685][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.238601][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.245575][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.271459][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.351718][ T3313] hsr_slave_0: entered promiscuous mode [ 28.357866][ T3313] hsr_slave_1: entered promiscuous mode [ 28.363622][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.369344][ T3313] Cannot create hsr debugfs directory [ 28.420764][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.428996][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.440931][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.451264][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.492861][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.501663][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.511048][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.526153][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.550800][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.559741][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.577128][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.587481][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.608635][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.618265][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.626901][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.635476][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.656966][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.679297][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.687770][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.696348][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.706394][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.721895][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.732600][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.745537][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.752609][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.766363][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.773410][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.784604][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.802413][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.809463][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.818479][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.825504][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.882347][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.892732][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.931063][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.941060][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.963932][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.972639][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.981393][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.994831][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.013381][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.020417][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.029261][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.036322][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.044843][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.051930][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.065752][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.072803][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.081848][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.113704][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.158199][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.165270][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.185465][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.192519][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.222079][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.239520][ T3314] veth0_vlan: entered promiscuous mode [ 29.258835][ T3314] veth1_vlan: entered promiscuous mode [ 29.272949][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.292927][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.312739][ T3321] veth0_vlan: entered promiscuous mode [ 29.340039][ T3321] veth1_vlan: entered promiscuous mode [ 29.353663][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.366776][ T3314] veth0_macvtap: entered promiscuous mode [ 29.380518][ T3314] veth1_macvtap: entered promiscuous mode [ 29.389164][ T3321] veth0_macvtap: entered promiscuous mode [ 29.405552][ T3321] veth1_macvtap: entered promiscuous mode [ 29.424480][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.433475][ T3315] veth0_vlan: entered promiscuous mode [ 29.441097][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.450780][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.458798][ T3315] veth1_vlan: entered promiscuous mode [ 29.471724][ T412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.493984][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.503638][ T412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.518516][ T3315] veth0_macvtap: entered promiscuous mode [ 29.531513][ T3315] veth1_macvtap: entered promiscuous mode [ 29.545702][ T412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.564183][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.583219][ T3319] veth0_vlan: entered promiscuous mode [ 29.593471][ T412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.602420][ T412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.611821][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.631076][ T3313] veth0_vlan: entered promiscuous mode [ 29.638375][ T3319] veth1_vlan: entered promiscuous mode [ 29.644450][ T412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.656213][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.678486][ T3313] veth1_vlan: entered promiscuous mode [ 29.694117][ T412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.703643][ T3319] veth0_macvtap: entered promiscuous mode [ 29.720672][ T412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.736801][ T3313] veth0_macvtap: entered promiscuous mode [ 29.744360][ T3319] veth1_macvtap: entered promiscuous mode [ 29.756375][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.783245][ T412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.794074][ T3313] veth1_macvtap: entered promiscuous mode [ 29.809938][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.822697][ T412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.836927][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.861376][ T412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.891476][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.903542][ T412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.913886][ T3500] loop3: detected capacity change from 0 to 1024 [ 29.927965][ T3500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.953080][ T412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.988255][ T3500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.001852][ T268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.018891][ T268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.028303][ T268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.037024][ T268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.037089][ T268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.037123][ T268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.037375][ T268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.039276][ T3513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.065011][ T3513] loop4: detected capacity change from 0 to 4096 [ 30.128143][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.242601][ T3525] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 30.296323][ T3525] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 30.332067][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 30.332080][ T29] audit: type=1400 audit(1762263610.622:169): avc: denied { create } for pid=3534 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 30.364740][ T3535] netlink: 64 bytes leftover after parsing attributes in process `syz.4.21'. [ 30.374339][ T29] audit: type=1400 audit(1762263610.652:170): avc: denied { write } for pid=3534 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.394201][ T29] audit: type=1400 audit(1762263610.652:171): avc: denied { nlmsg_write } for pid=3534 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.447611][ T29] audit: type=1400 audit(1762263610.732:172): avc: denied { ioctl } for pid=3538 comm="syz.0.23" path="socket:[3964]" dev="sockfs" ino=3964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.514542][ T29] audit: type=1400 audit(1762263610.782:173): avc: denied { read } for pid=3541 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 30.533798][ T29] audit: type=1400 audit(1762263610.802:174): avc: denied { read } for pid=3536 comm="+}[@" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.556313][ T29] audit: type=1400 audit(1762263610.802:175): avc: denied { open } for pid=3536 comm="+}[@" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.579801][ T29] audit: type=1400 audit(1762263610.852:176): avc: denied { create } for pid=3548 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.600336][ T29] audit: type=1400 audit(1762263610.852:177): avc: denied { write } for pid=3548 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.620588][ T29] audit: type=1400 audit(1762263610.912:178): avc: denied { read write } for pid=3544 comm="syz.4.26" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.699468][ T3560] loop0: detected capacity change from 0 to 164 [ 30.726296][ T41] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 30.735358][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 30.762486][ T3565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3565 comm=syz.2.33 [ 30.774929][ T3562] hsr_slave_0: left promiscuous mode [ 30.781103][ T3562] hsr_slave_1: left promiscuous mode [ 30.967685][ T3589] capability: warning: `syz.2.37' uses deprecated v2 capabilities in a way that may be insecure [ 31.332570][ T3598] loop1: detected capacity change from 0 to 1024 [ 31.342219][ T3598] EXT4-fs: Ignoring removed orlov option [ 31.364896][ T3600] netlink: 32 bytes leftover after parsing attributes in process `syz.4.42'. [ 31.391357][ T3598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.445542][ T3608] mmap: syz.2.45 (3608) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.472443][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.593586][ T3627] vlan2: entered allmulticast mode [ 31.731053][ T3641] hub 1-0:1.0: USB hub found [ 31.735793][ T3641] hub 1-0:1.0: 8 ports detected [ 31.744103][ T3645] loop4: detected capacity change from 0 to 512 [ 31.761184][ T3647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 31.806027][ T3645] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.842693][ T3645] EXT4-fs (loop4): mount failed [ 31.902167][ C0] hrtimer: interrupt took 28688 ns [ 31.932461][ T3662] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 31.967747][ T3662] netlink: 'syz.4.69': attribute type 10 has an invalid length. [ 31.975404][ T3662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.69'. [ 32.014556][ T3662] dummy0: entered promiscuous mode [ 32.070694][ T3670] loop0: detected capacity change from 0 to 1024 [ 32.110967][ T3670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.155072][ T3670] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 32.204324][ T3670] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 32.216681][ T3670] EXT4-fs (loop0): This should not happen!! Data will be lost [ 32.216681][ T3670] [ 32.226355][ T3670] EXT4-fs (loop0): Total free blocks count 0 [ 32.232360][ T3670] EXT4-fs (loop0): Free/Dirty block details [ 32.238287][ T3670] EXT4-fs (loop0): free_blocks=68451041280 [ 32.244077][ T3670] EXT4-fs (loop0): dirty_blocks=80 [ 32.249239][ T3670] EXT4-fs (loop0): Block reservation details [ 32.255335][ T3670] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 32.275091][ T3683] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 32.308807][ T3683] SELinux: failed to load policy [ 32.329638][ T3670] syz.0.73 (3670) used greatest stack depth: 9880 bytes left [ 32.383770][ T1848] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 68 with error 28 [ 32.790672][ T3711] Driver unsupported XDP return value 0 on prog (id 81) dev N/A, expect packet loss! [ 32.805824][ T3714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3714 comm=syz.0.91 [ 32.992197][ T3730] loop4: detected capacity change from 0 to 1024 [ 33.014639][ T3730] EXT4-fs: Ignoring removed orlov option [ 33.038323][ T3730] ext4: Unknown parameter 'uid>00000000000000000000' [ 33.064401][ T3730] loop4: detected capacity change from 0 to 512 [ 33.088996][ T3742] syz.1.103 uses obsolete (PF_INET,SOCK_PACKET) [ 33.099228][ T3730] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.113588][ T3730] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.98: error while reading EA inode 32 err=-116 [ 33.127561][ T3730] EXT4-fs (loop4): Remounting filesystem read-only [ 33.134320][ T3730] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.147399][ T3730] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 33.157850][ T3730] EXT4-fs (loop4): 1 orphan inode deleted [ 33.165401][ T3730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.178506][ T3730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.451044][ T1039] IPVS: starting estimator thread 0... [ 33.532000][ T3803] netlink: 'syz.1.128': attribute type 3 has an invalid length. [ 33.541884][ T3793] IPVS: using max 2256 ests per chain, 112800 per kthread [ 33.596485][ T3381] IPVS: starting estimator thread 0... [ 33.687057][ T3818] GUP no longer grows the stack in syz.3.133 (3818): 200000004000-20000000a000 (200000002000) [ 33.697512][ T3818] CPU: 0 UID: 0 PID: 3818 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.697538][ T3818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.697550][ T3818] Call Trace: [ 33.697556][ T3818] [ 33.697563][ T3818] __dump_stack+0x1d/0x30 [ 33.697584][ T3818] dump_stack_lvl+0xe8/0x140 [ 33.697603][ T3818] dump_stack+0x15/0x1b [ 33.697644][ T3818] __get_user_pages+0x1968/0x1ed0 [ 33.697676][ T3818] get_user_pages_remote+0x1d5/0x6c0 [ 33.697716][ T3818] __access_remote_vm+0x15c/0x590 [ 33.697746][ T3818] access_remote_vm+0x32/0x40 [ 33.697770][ T3818] proc_pid_cmdline_read+0x32b/0x6c0 [ 33.697800][ T3818] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 33.697901][ T3818] vfs_readv+0x3fb/0x690 [ 33.697993][ T3818] __x64_sys_preadv+0xfd/0x1c0 [ 33.698042][ T3818] x64_sys_call+0x282e/0x3000 [ 33.698064][ T3818] do_syscall_64+0xd2/0x200 [ 33.698082][ T3818] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.698109][ T3818] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 33.698139][ T3818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.698219][ T3818] RIP: 0033:0x7f829c7bf6c9 [ 33.698233][ T3818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.698250][ T3818] RSP: 002b:00007f829b21f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 33.698357][ T3818] RAX: ffffffffffffffda RBX: 00007f829ca15fa0 RCX: 00007f829c7bf6c9 [ 33.698370][ T3818] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 33.698382][ T3818] RBP: 00007f829c841f91 R08: 0000000000000000 R09: 0000000000000000 [ 33.698393][ T3818] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 33.698405][ T3818] R13: 00007f829ca16038 R14: 00007f829ca15fa0 R15: 00007ffd4ace9db8 [ 33.698423][ T3818] [ 33.698796][ T3812] IPVS: using max 2112 ests per chain, 105600 per kthread [ 33.890026][ T3826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 33.903375][ T3826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 33.999901][ T3840] netlink: 7 bytes leftover after parsing attributes in process `syz.3.144'. [ 34.138385][ T268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.215067][ T268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.292676][ T268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.404590][ T268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.651466][ T268] bridge_slave_1: left allmulticast mode [ 34.657125][ T268] bridge_slave_1: left promiscuous mode [ 34.663498][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.676846][ T3915] loop3: detected capacity change from 0 to 128 [ 34.684888][ T268] bridge_slave_0: left allmulticast mode [ 34.690571][ T268] bridge_slave_0: left promiscuous mode [ 34.696257][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.703804][ T3915] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.750975][ T3915] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.817258][ T1017] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.852037][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 34.948969][ T268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.981506][ T268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.000937][ T268] bond0 (unregistering): Released all slaves [ 35.076953][ T268] hsr_slave_0: left promiscuous mode [ 35.085235][ T268] hsr_slave_1: left promiscuous mode [ 35.097661][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.105058][ T268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.171553][ T268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.179028][ T268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.191476][ T268] veth1_macvtap: left promiscuous mode [ 35.196972][ T268] veth0_macvtap: left promiscuous mode [ 35.202664][ T268] veth1_vlan: left promiscuous mode [ 35.208016][ T268] veth0_vlan: left promiscuous mode [ 35.304929][ T268] team0 (unregistering): Port device team_slave_1 removed [ 35.312727][ T3973] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.351871][ T268] team0 (unregistering): Port device team_slave_0 removed [ 35.402346][ T3870] chnl_net:caif_netlink_parms(): no params data found [ 35.486767][ T3870] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.493837][ T3870] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.512762][ T3870] bridge_slave_0: entered allmulticast mode [ 35.543920][ T3870] bridge_slave_0: entered promiscuous mode [ 35.559824][ T3870] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.566899][ T3870] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.575171][ T3870] bridge_slave_1: entered allmulticast mode [ 35.581895][ T3870] bridge_slave_1: entered promiscuous mode [ 35.730180][ T3997] loop0: detected capacity change from 0 to 512 [ 35.754883][ T3997] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.186: error while reading EA inode 32 err=-116 [ 35.793548][ T3997] EXT4-fs (loop0): Remounting filesystem read-only [ 35.821368][ T3997] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.834408][ T3997] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 35.856384][ T3870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.857716][ T3997] EXT4-fs (loop0): 1 orphan inode deleted [ 35.872951][ T3997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.877127][ T3870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.905300][ T3870] team0: Port device team_slave_0 added [ 35.911627][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 35.911640][ T29] audit: type=1400 audit(1762263616.192:428): avc: denied { firmware_load } for pid=4000 comm="syz.2.187" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 35.958410][ T3870] team0: Port device team_slave_1 added [ 35.991621][ T3870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.998583][ T3870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.024498][ T3870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.035520][ T268] IPVS: stop unused estimator thread 0... [ 36.041086][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.042304][ T3870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.057114][ T3870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.083050][ T3870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.149975][ T4010] ======================================================= [ 36.149975][ T4010] WARNING: The mand mount option has been deprecated and [ 36.149975][ T4010] and is ignored by this kernel. Remove the mand [ 36.149975][ T4010] option from the mount to silence this warning. [ 36.149975][ T4010] ======================================================= [ 36.202666][ T29] audit: type=1400 audit(1762263616.482:429): avc: denied { append } for pid=4009 comm="syz.2.191" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 36.226038][ T29] audit: type=1400 audit(1762263616.492:430): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.249045][ T3870] hsr_slave_0: entered promiscuous mode [ 36.255231][ T3870] hsr_slave_1: entered promiscuous mode [ 36.327567][ T4023] __nla_validate_parse: 1 callbacks suppressed [ 36.327581][ T4023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 36.342560][ T4023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 36.387800][ T29] audit: type=1400 audit(1762263616.642:431): avc: denied { shutdown } for pid=4011 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.426138][ T4028] loop4: detected capacity change from 0 to 1024 [ 36.453494][ T4028] EXT4-fs: Ignoring removed bh option [ 36.489172][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.523726][ T4028] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.195: Allocating blocks 385-513 which overlap fs metadata [ 36.549350][ T3870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.574999][ T3870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.577122][ T4028] EXT4-fs (loop4): pa ffff888104c31070: logic 16, phys. 129, len 24 [ 36.589828][ T4028] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 36.601577][ T3870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.617840][ T29] audit: type=1400 audit(1762263616.862:432): avc: denied { append } for pid=4024 comm="syz.4.195" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.645408][ T3870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.652547][ T29] audit: type=1400 audit(1762263616.932:433): avc: denied { ioctl } for pid=4049 comm="syz.3.200" path="socket:[5730]" dev="sockfs" ino=5730 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.727107][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.759525][ T29] audit: type=1326 audit(1762263617.052:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c7bf6c9 code=0x7ffc0000 [ 36.766531][ T4061] loop3: detected capacity change from 0 to 1024 [ 36.827476][ T29] audit: type=1326 audit(1762263617.052:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f829c7bf6c9 code=0x7ffc0000 [ 36.843525][ T3870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.850794][ T29] audit: type=1326 audit(1762263617.052:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c7bf6c9 code=0x7ffc0000 [ 36.880583][ T29] audit: type=1326 audit(1762263617.052:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829c7bf6c9 code=0x7ffc0000 [ 36.936213][ T4061] EXT4-fs: inline encryption not supported [ 36.942126][ T4061] EXT4-fs: Ignoring removed i_version option [ 36.943801][ T3870] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.968353][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.975551][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.985155][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.992346][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.015875][ T3870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.026229][ T3870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.047598][ T4061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.137200][ T3870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.213477][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.376209][ T3870] veth0_vlan: entered promiscuous mode [ 37.386483][ T3870] veth1_vlan: entered promiscuous mode [ 37.401710][ T3870] veth0_macvtap: entered promiscuous mode [ 37.409107][ T3870] veth1_macvtap: entered promiscuous mode [ 37.422511][ T3870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.433208][ T3870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.444340][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.453306][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.464160][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.478184][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.626242][ T4141] syz.0.227 (4141) used greatest stack depth: 9256 bytes left [ 37.640413][ T4139] SELinux: failed to load policy [ 37.646095][ T4139] SELinux: failed to load policy [ 37.681148][ T4147] netlink: 56 bytes leftover after parsing attributes in process `syz.0.229'. [ 37.731990][ T4152] netlink: 'syz.5.230': attribute type 4 has an invalid length. [ 37.750426][ T4152] netlink: 'syz.5.230': attribute type 4 has an invalid length. [ 37.972706][ T4168] loop0: detected capacity change from 0 to 512 [ 37.990193][ T4168] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.005619][ T4168] EXT4-fs (loop0): mount failed [ 38.131489][ T4186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.142645][ T4186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.274549][ T4193] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 38.282358][ T4193] SELinux: failed to load policy [ 38.334319][ T4202] loop0: detected capacity change from 0 to 512 [ 38.344504][ T4200] loop4: detected capacity change from 0 to 1024 [ 38.354474][ T4200] EXT4-fs: Ignoring removed orlov option [ 38.362321][ T4202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.375961][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.390216][ T4202] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.407749][ T4200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.420857][ T4202] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.252: corrupted xattr block 6: invalid header [ 38.441657][ T4202] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 38.464255][ T4202] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.252: corrupted xattr block 6: invalid header [ 38.480125][ T4202] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 38.487925][ T4210] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.252: corrupted xattr block 6: invalid header [ 38.510306][ T4212] vhci_hcd: invalid port number 255 [ 38.515527][ T4212] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 38.534156][ T4210] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 38.547390][ T4202] EXT4-fs error (device loop0): ext4_xattr_block_find:1874: inode #12: comm syz.0.252: corrupted xattr block 6: invalid header [ 38.574541][ T4210] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.252: corrupted xattr block 6: invalid header [ 38.656103][ T4210] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 38.666675][ T4210] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.252: corrupted xattr block 6: invalid header [ 38.697610][ T4210] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 38.709304][ T4210] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.252: corrupted xattr block 6: invalid header [ 38.722579][ T4210] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 38.733084][ T4210] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.252: corrupted xattr block 6: invalid header [ 38.801775][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.877121][ T4232] netlink: 96 bytes leftover after parsing attributes in process `syz.2.263'. [ 38.919693][ T4237] netlink: 64 bytes leftover after parsing attributes in process `syz.2.264'. [ 38.962118][ T4241] process 'syz.4.266' launched './file1' with NULL argv: empty string added [ 39.040686][ T4246] SELinux: failed to load policy [ 39.092533][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 39.101381][ T4252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 39.419083][ T4264] loop2: detected capacity change from 0 to 164 [ 39.434092][ T4264] : attempt to access beyond end of device [ 39.434092][ T4264] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 39.447383][ T4264] : attempt to access beyond end of device [ 39.447383][ T4264] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.494708][ T4266] loop2: detected capacity change from 0 to 1024 [ 39.508771][ T4266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.535878][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.706057][ T4280] SELinux: Context : is not valid (left unmapped). [ 39.764495][ T4283] atomic_op ffff888104b84528 conn xmit_atomic 0000000000000000 [ 39.816652][ T4291] uprobe: syz.0.288:4291 failed to unregister, leaking uprobe [ 39.828010][ T4289] loop3: detected capacity change from 0 to 2048 [ 39.836104][ T4291] uprobe: syz.0.288:4291 failed to unregister, leaking uprobe [ 39.864102][ T4289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.961961][ T3314] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 40.000689][ T3314] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 40.024661][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.586942][ T3004] udevd[3004]: worker [3504] terminated by signal 33 (Unknown signal 33) [ 40.610100][ T3004] udevd[3004]: worker [3504] failed while handling '/devices/virtual/block/loop3' [ 40.704998][ T4351] loop2: detected capacity change from 0 to 8192 [ 40.717630][ T4359] loop3: detected capacity change from 0 to 1024 [ 40.724749][ T4359] EXT4-fs: Ignoring removed bh option [ 40.779697][ T4359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.814588][ T4359] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm +}[@: Allocating blocks 385-513 which overlap fs metadata [ 40.834015][ T4358] EXT4-fs (loop3): pa ffff8881071f0070: logic 16, phys. 129, len 24 [ 40.842118][ T4358] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 40.889355][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.123566][ T4395] bridge_slave_0: left allmulticast mode [ 41.129283][ T4395] bridge_slave_0: left promiscuous mode [ 41.135100][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.146414][ T4395] bridge_slave_1: left allmulticast mode [ 41.152151][ T4395] bridge_slave_1: left promiscuous mode [ 41.157855][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.168559][ T4395] bond0: (slave bond_slave_0): Releasing backup interface [ 41.179133][ T4395] bond0: (slave bond_slave_1): Releasing backup interface [ 41.192714][ T4395] team0: Port device team_slave_0 removed [ 41.201727][ T4395] team0: Port device team_slave_1 removed [ 41.215121][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.216207][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 41.216219][ T29] audit: type=1400 audit(1762264134.508:636): avc: denied { create } for pid=4399 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 41.222918][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.257726][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.265125][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.275021][ T29] audit: type=1400 audit(1762264134.548:637): avc: denied { sys_admin } for pid=4399 comm="syz.3.332" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 41.300361][ T4395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 41.358201][ T4398] netlink: 96 bytes leftover after parsing attributes in process `syz.4.331'. [ 41.400404][ T29] audit: type=1400 audit(1762264134.688:638): avc: denied { read write } for pid=4405 comm="syz.3.334" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.423459][ T29] audit: type=1400 audit(1762264134.688:639): avc: denied { open } for pid=4405 comm="syz.3.334" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.479328][ T29] audit: type=1326 audit(1762264134.768:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538144f6c9 code=0x7ffc0000 [ 41.489729][ T4411] loop3: detected capacity change from 0 to 1024 [ 41.502550][ T29] audit: type=1326 audit(1762264134.768:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538144f6c9 code=0x7ffc0000 [ 41.532176][ T29] audit: type=1326 audit(1762264134.768:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f538144f6c9 code=0x7ffc0000 [ 41.555442][ T29] audit: type=1326 audit(1762264134.768:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538144f6c9 code=0x7ffc0000 [ 41.578743][ T29] audit: type=1326 audit(1762264134.768:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538144f6c9 code=0x7ffc0000 [ 41.601984][ T29] audit: type=1326 audit(1762264134.768:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4409 comm="syz.0.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f538144f6c9 code=0x7ffc0000 [ 41.629382][ T4411] EXT4-fs: Ignoring removed orlov option [ 41.635185][ T4411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.679827][ T4411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.700919][ T3906] ================================================================== [ 41.709002][ T3906] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink [ 41.716117][ T3906] [ 41.718431][ T3906] write to 0xffff88810420a9a4 of 4 bytes by task 3306 on cpu 1: [ 41.726044][ T3906] shmem_symlink+0x387/0x3d0 [ 41.730625][ T3906] vfs_symlink+0xd4/0x1e0 [ 41.734946][ T3906] do_symlinkat+0xc7/0x3c0 [ 41.739355][ T3906] __x64_sys_symlink+0x50/0x60 [ 41.744114][ T3906] x64_sys_call+0x23d0/0x3000 [ 41.748784][ T3906] do_syscall_64+0xd2/0x200 [ 41.753274][ T3906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.759153][ T3906] [ 41.761465][ T3906] read to 0xffff88810420a9a4 of 4 bytes by task 3906 on cpu 0: [ 41.768991][ T3906] fill_mg_cmtime+0x5b/0x260 [ 41.773581][ T3906] generic_fillattr+0x24a/0x340 [ 41.778427][ T3906] shmem_getattr+0x181/0x200 [ 41.783009][ T3906] vfs_getattr_nosec+0x146/0x1e0 [ 41.787942][ T3906] vfs_statx+0x113/0x390 [ 41.792180][ T3906] vfs_fstatat+0x115/0x170 [ 41.796593][ T3906] __se_sys_newfstatat+0x55/0x260 [ 41.801616][ T3906] __x64_sys_newfstatat+0x55/0x70 [ 41.806640][ T3906] x64_sys_call+0x135a/0x3000 [ 41.811308][ T3906] do_syscall_64+0xd2/0x200 [ 41.815800][ T3906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.821682][ T3906] [ 41.823988][ T3906] value changed: 0x3b7edc86 -> 0x00397565 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 41.829685][ T3906] [ 41.831991][ T3906] Reported by Kernel Concurrency Sanitizer on: [ 41.838125][ T3906] CPU: 0 UID: 0 PID: 3906 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.847394][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.857444][ T3906] ================================================================== [ 41.969078][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.019819][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.142849][ T4410] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.154442][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.199197][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.284834][ T31] bridge_slave_1: left allmulticast mode [ 42.290553][ T31] bridge_slave_1: left promiscuous mode [ 42.296258][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.304073][ T31] bridge_slave_0: left allmulticast mode [ 42.309711][ T31] bridge_slave_0: left promiscuous mode [ 42.315352][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.388816][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.398320][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.407782][ T31] bond0 (unregistering): Released all slaves [ 42.444368][ T31] hsr_slave_0: left promiscuous mode [ 42.449983][ T31] hsr_slave_1: left promiscuous mode [ 42.455563][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.462962][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.470586][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.478008][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.490070][ T31] veth1_macvtap: left promiscuous mode [ 42.495554][ T31] veth0_macvtap: left promiscuous mode [ 42.503333][ T31] veth1_vlan: left promiscuous mode [ 42.508722][ T31] veth0_vlan: left promiscuous mode [ 42.563341][ T31] team0 (unregistering): Port device team_slave_1 removed [ 42.574896][ T31] team0 (unregistering): Port device team_slave_0 removed [ 42.822011][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.870524][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.929259][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.999327][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.057741][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.100465][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.170326][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.210362][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.284612][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.319925][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.370291][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.410209][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.478825][ T31] bridge_slave_1: left allmulticast mode [ 43.484473][ T31] bridge_slave_1: left promiscuous mode [ 43.490227][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.498236][ T31] bridge_slave_0: left allmulticast mode [ 43.503870][ T31] bridge_slave_0: left promiscuous mode [ 43.509720][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.523255][ T31] bridge_slave_1: left allmulticast mode [ 43.529026][ T31] bridge_slave_1: left promiscuous mode [ 43.534705][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.542467][ T31] bridge_slave_0: left allmulticast mode [ 43.548114][ T31] bridge_slave_0: left promiscuous mode [ 43.553737][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.649827][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.659591][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.668782][ T31] bond0 (unregistering): Released all slaves [ 43.768602][ T31] bond0 (unregistering): Released all slaves [ 43.819207][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.828599][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.838082][ T31] bond0 (unregistering): Released all slaves [ 43.884840][ T31] hsr_slave_0: left promiscuous mode [ 43.890479][ T31] hsr_slave_1: left promiscuous mode [ 43.896064][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.903479][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.911141][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.918551][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.928793][ T31] hsr_slave_0: left promiscuous mode [ 43.934443][ T31] hsr_slave_1: left promiscuous mode [ 43.942042][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.949456][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.956904][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.964306][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.977120][ T31] veth1_macvtap: left promiscuous mode [ 43.982638][ T31] veth0_macvtap: left promiscuous mode [ 43.988191][ T31] veth1_vlan: left promiscuous mode [ 43.993373][ T31] veth0_vlan: left promiscuous mode [ 43.999076][ T31] veth1_macvtap: left promiscuous mode [ 44.004547][ T31] veth0_macvtap: left promiscuous mode [ 44.010131][ T31] veth1_vlan: left promiscuous mode [ 44.015325][ T31] veth0_vlan: left promiscuous mode [ 44.021108][ T31] veth1_macvtap: left promiscuous mode [ 44.026545][ T31] veth0_macvtap: left promiscuous mode [ 44.032111][ T31] veth1_vlan: left promiscuous mode [ 44.037403][ T31] veth0_vlan: left promiscuous mode [ 44.135976][ T31] team0 (unregistering): Port device team_slave_1 removed [ 44.145431][ T31] team0 (unregistering): Port device team_slave_0 removed [ 44.227370][ T31] team0 (unregistering): Port device team_slave_1 removed [ 44.236607][ T31] team0 (unregistering): Port device team_slave_0 removed [ 44.804332][ T31] IPVS: stop unused estimator thread 0... [ 44.859923][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.920399][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.979445][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.039298][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.108143][ T31] bridge_slave_1: left allmulticast mode [ 45.113789][ T31] bridge_slave_1: left promiscuous mode [ 45.119410][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.127047][ T31] bridge_slave_0: left promiscuous mode [ 45.132680][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.200269][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.209868][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.219095][ T31] bond0 (unregistering): Released all slaves [ 45.252252][ T31] hsr_slave_0: left promiscuous mode [ 45.258006][ T31] hsr_slave_1: left promiscuous mode [ 45.263630][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.271033][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.278797][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.286187][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.296592][ T31] veth1_macvtap: left promiscuous mode [ 45.302195][ T31] veth0_macvtap: left promiscuous mode [ 45.307850][ T31] veth1_vlan: left promiscuous mode [ 45.313149][ T31] veth0_vlan: left promiscuous mode [ 45.366816][ T31] team0 (unregistering): Port device team_slave_1 removed [ 45.376492][ T31] team0 (unregistering): Port device team_slave_0 removed