last executing test programs: 769.114793ms ago: executing program 0 (id=257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 706.782889ms ago: executing program 0 (id=261): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 650.117765ms ago: executing program 0 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 613.068869ms ago: executing program 4 (id=267): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="330520000a00160006007ef52f555f2ab34eb67eab0800004000000000997bea54fefe7117599e7dae76f98691ffb71675553f", 0x925, 0x801, &(0x7f00000005c0)={0x11, 0xf5, r1, 0x1, 0x5f}, 0x14) 550.026205ms ago: executing program 1 (id=268): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) 517.451978ms ago: executing program 4 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x2004, &(0x7f0000000680)) 472.408703ms ago: executing program 4 (id=272): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x2, 0x9, 0xffff, 0x401, 0xc10f258}, 0x14) 450.356345ms ago: executing program 1 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r1, &(0x7f0000000040)='\x00', 0x1, 0x1300) 428.557927ms ago: executing program 4 (id=274): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r2, 0x25, 0xc, @void}, 0x10) 417.949408ms ago: executing program 3 (id=275): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) 411.963889ms ago: executing program 0 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x2, 0x7, 0x2, 0xffffffffffffffff, 0x3ff}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 396.86536ms ago: executing program 1 (id=278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x2, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 351.566865ms ago: executing program 0 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) 342.091796ms ago: executing program 1 (id=281): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 339.537136ms ago: executing program 3 (id=282): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}], 0x1, 0x0) 334.422587ms ago: executing program 4 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r2, @ANYBLOB="1f0001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 269.326313ms ago: executing program 4 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 268.114883ms ago: executing program 1 (id=285): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x3, 0xe56, 0x1, 0x3ca}}) 227.835817ms ago: executing program 2 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mq_unlink(0x0) 219.133248ms ago: executing program 0 (id=287): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@journal_dev={'journal_dev', 0x3d, 0x2}}, {}, {@sysvgroups}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@debug}, {@nogrpid}, {}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 203.375839ms ago: executing program 1 (id=288): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) syz_usbip_server_init(0x1) 190.659931ms ago: executing program 3 (id=289): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private=0xa010100}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 177.864812ms ago: executing program 2 (id=290): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 114.896758ms ago: executing program 2 (id=291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={0x0, 0xa490}, 0x8) 69.683923ms ago: executing program 3 (id=292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_robust_list(&(0x7f0000000400)={0x0, 0x9}, 0x18) 63.945693ms ago: executing program 2 (id=293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x7}}, 0x2241c2) 40.554966ms ago: executing program 3 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f) pwritev2(r0, &(0x7f0000000640)=[{&(0x7f0000000a00)="1a134c", 0x3}], 0x1, 0x6, 0x2, 0x2e) 27.936967ms ago: executing program 2 (id=295): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) 1.306329ms ago: executing program 3 (id=296): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914"], 0xd8}}, 0x80) 0s ago: executing program 2 (id=297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 34.841251][ T29] audit: type=1400 audit(1760544792.841:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.865331][ T29] audit: type=1400 audit(1760544792.871:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.866611][ T3302] cgroup: Unknown subsys name 'net' [ 34.893457][ T29] audit: type=1400 audit(1760544792.891:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.025778][ T3302] cgroup: Unknown subsys name 'cpuset' [ 35.032103][ T3302] cgroup: Unknown subsys name 'rlimit' [ 35.164910][ T29] audit: type=1400 audit(1760544793.161:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.192714][ T29] audit: type=1400 audit(1760544793.171:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.214150][ T29] audit: type=1400 audit(1760544793.171:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.235353][ T29] audit: type=1400 audit(1760544793.171:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.244447][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.256557][ T29] audit: type=1400 audit(1760544793.171:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.291576][ T29] audit: type=1400 audit(1760544793.171:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.317680][ T29] audit: type=1400 audit(1760544793.271:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.356572][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.479912][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.524677][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.563781][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.571177][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.578462][ T3322] bridge_slave_0: entered allmulticast mode [ 36.585103][ T3322] bridge_slave_0: entered promiscuous mode [ 36.592631][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.599937][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.607383][ T3322] bridge_slave_1: entered allmulticast mode [ 36.614354][ T3322] bridge_slave_1: entered promiscuous mode [ 36.652083][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.676593][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.698815][ T3322] team0: Port device team_slave_0 added [ 36.719709][ T3322] team0: Port device team_slave_1 added [ 36.737634][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.744729][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.752013][ T3312] bridge_slave_0: entered allmulticast mode [ 36.758538][ T3312] bridge_slave_0: entered promiscuous mode [ 36.788314][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.795482][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.802672][ T3312] bridge_slave_1: entered allmulticast mode [ 36.809477][ T3312] bridge_slave_1: entered promiscuous mode [ 36.828315][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.835338][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.861570][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.875229][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.882398][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.909166][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.922475][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.933111][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.945381][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.968381][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.982347][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.026089][ T3322] hsr_slave_0: entered promiscuous mode [ 37.032304][ T3322] hsr_slave_1: entered promiscuous mode [ 37.058393][ T3312] team0: Port device team_slave_0 added [ 37.077343][ T3312] team0: Port device team_slave_1 added [ 37.094474][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.102026][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.109463][ T3314] bridge_slave_0: entered allmulticast mode [ 37.116008][ T3314] bridge_slave_0: entered promiscuous mode [ 37.138281][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.145588][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.153119][ T3314] bridge_slave_1: entered allmulticast mode [ 37.159783][ T3314] bridge_slave_1: entered promiscuous mode [ 37.188716][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.196049][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.222901][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.246532][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.253959][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.261336][ T3320] bridge_slave_0: entered allmulticast mode [ 37.267966][ T3320] bridge_slave_0: entered promiscuous mode [ 37.280128][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.287265][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.313710][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.329299][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.337666][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.346188][ T3316] bridge_slave_0: entered allmulticast mode [ 37.352966][ T3316] bridge_slave_0: entered promiscuous mode [ 37.360831][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.368125][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.375485][ T3320] bridge_slave_1: entered allmulticast mode [ 37.382026][ T3320] bridge_slave_1: entered promiscuous mode [ 37.390055][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.401184][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.412871][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.420103][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.427511][ T3316] bridge_slave_1: entered allmulticast mode [ 37.434068][ T3316] bridge_slave_1: entered promiscuous mode [ 37.479965][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.489881][ T3314] team0: Port device team_slave_0 added [ 37.496725][ T3314] team0: Port device team_slave_1 added [ 37.510834][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.534573][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.546158][ T3312] hsr_slave_0: entered promiscuous mode [ 37.552177][ T3312] hsr_slave_1: entered promiscuous mode [ 37.558177][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.563921][ T3312] Cannot create hsr debugfs directory [ 37.570666][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.600479][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.607607][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.634506][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.662611][ T3320] team0: Port device team_slave_0 added [ 37.674320][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.681542][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.707666][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.724030][ T3320] team0: Port device team_slave_1 added [ 37.730983][ T3316] team0: Port device team_slave_0 added [ 37.740304][ T3316] team0: Port device team_slave_1 added [ 37.780212][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.787394][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.813714][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.839253][ T3314] hsr_slave_0: entered promiscuous mode [ 37.845741][ T3314] hsr_slave_1: entered promiscuous mode [ 37.851912][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.857698][ T3314] Cannot create hsr debugfs directory [ 37.865995][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.873404][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.899524][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.910813][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.917872][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.944504][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.970776][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.978066][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.004653][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.048548][ T3316] hsr_slave_0: entered promiscuous mode [ 38.054863][ T3316] hsr_slave_1: entered promiscuous mode [ 38.061397][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.067860][ T3316] Cannot create hsr debugfs directory [ 38.107156][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.129136][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.140322][ T3320] hsr_slave_0: entered promiscuous mode [ 38.146654][ T3320] hsr_slave_1: entered promiscuous mode [ 38.152569][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 38.158409][ T3320] Cannot create hsr debugfs directory [ 38.178145][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.189703][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.281976][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.291570][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.310491][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.321883][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.353266][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.365998][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.382033][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.398972][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.427922][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.446900][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.458425][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.467768][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.477012][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.488727][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.498144][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.507483][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.545366][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.561603][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.574105][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.609294][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.616591][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.629429][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.636577][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.646961][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.655942][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.670673][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.677882][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.698241][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.713997][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.721263][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.730804][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.737977][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.750338][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.757554][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.787429][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.801432][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.817795][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.833029][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.840249][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.851543][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.859016][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.890877][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.902678][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.922916][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.930217][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.957452][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.965637][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.005768][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.034637][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.061569][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.079027][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.106892][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.176061][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.226159][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.257952][ T3322] veth0_vlan: entered promiscuous mode [ 39.278872][ T3322] veth1_vlan: entered promiscuous mode [ 39.320319][ T3312] veth0_vlan: entered promiscuous mode [ 39.344537][ T3314] veth0_vlan: entered promiscuous mode [ 39.354386][ T3322] veth0_macvtap: entered promiscuous mode [ 39.363417][ T3322] veth1_macvtap: entered promiscuous mode [ 39.374033][ T3314] veth1_vlan: entered promiscuous mode [ 39.393354][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.401844][ T3312] veth1_vlan: entered promiscuous mode [ 39.416623][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.441932][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.454291][ T3320] veth0_vlan: entered promiscuous mode [ 39.461136][ T3314] veth0_macvtap: entered promiscuous mode [ 39.479380][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.490633][ T3320] veth1_vlan: entered promiscuous mode [ 39.497550][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.507319][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.519303][ T3314] veth1_macvtap: entered promiscuous mode [ 39.537313][ T3316] veth0_vlan: entered promiscuous mode [ 39.548560][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.563791][ T3316] veth1_vlan: entered promiscuous mode [ 39.572246][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.584249][ T3312] veth0_macvtap: entered promiscuous mode [ 39.593852][ T3312] veth1_macvtap: entered promiscuous mode [ 39.612413][ T329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.623984][ T3316] veth0_macvtap: entered promiscuous mode [ 39.640140][ T329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649673][ T329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.659497][ T329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.670235][ T3320] veth0_macvtap: entered promiscuous mode [ 39.679946][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.680464][ T3316] veth1_macvtap: entered promiscuous mode [ 39.706471][ T3320] veth1_macvtap: entered promiscuous mode [ 39.724222][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.732996][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.748754][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.759437][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.768489][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.778278][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.795094][ T329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.831617][ T329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845957][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 39.845973][ T29] audit: type=1400 audit(1760544797.851:93): avc: denied { prog_load } for pid=3483 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.871361][ T29] audit: type=1400 audit(1760544797.851:94): avc: denied { bpf } for pid=3483 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.891875][ T29] audit: type=1400 audit(1760544797.851:95): avc: denied { perfmon } for pid=3483 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.916777][ T29] audit: type=1400 audit(1760544797.861:96): avc: denied { prog_run } for pid=3483 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.940876][ T329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.967294][ T329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.001396][ T329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.051670][ T329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.053112][ T29] audit: type=1400 audit(1760544798.051:97): avc: denied { read write } for pid=3488 comm="syz.4.5" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.066414][ T329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.084608][ T29] audit: type=1400 audit(1760544798.051:98): avc: denied { open } for pid=3488 comm="syz.4.5" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.120204][ T329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.129718][ T329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.140142][ T329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.149328][ T329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.158906][ T329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.184510][ T29] audit: type=1400 audit(1760544798.181:99): avc: denied { open } for pid=3491 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.203983][ T29] audit: type=1400 audit(1760544798.181:100): avc: denied { kernel } for pid=3491 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.254644][ T3482] loop1: detected capacity change from 0 to 32768 [ 40.299068][ T29] audit: type=1400 audit(1760544798.271:101): avc: denied { mounton } for pid=3493 comm="syz.2.6" path="/1/bus" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.321879][ T29] audit: type=1400 audit(1760544798.301:102): avc: denied { map_create } for pid=3500 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.511336][ T3519] loop2: detected capacity change from 0 to 512 [ 40.533970][ T3519] EXT4-fs: dax option not supported [ 40.696169][ T3543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.706127][ T3543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.759481][ T3550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'. [ 40.768397][ T3550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'. [ 40.977911][ T3568] macvtap0: refused to change device tx_queue_len [ 41.268182][ T3578] netlink: 'syz.4.47': attribute type 13 has an invalid length. [ 41.418288][ T3578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.480486][ T3586] syz.2.48 (3586) used greatest stack depth: 8808 bytes left [ 41.750242][ T3607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 41.800426][ T3613] 9pnet: Could not find request transport: f [ 41.874377][ T3611] loop4: detected capacity change from 0 to 8192 [ 41.965361][ T3624] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 41.973868][ T3624] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 42.019125][ T3562] kexec: Could not allocate control_code_buffer [ 42.289499][ T3663] netlink: 'syz.1.86': attribute type 5 has an invalid length. [ 42.524975][ T3677] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 42.683764][ T3685] unsupported nla_type 52263 [ 42.791159][ T3690] loop0: detected capacity change from 0 to 512 [ 42.828174][ T3691] loop1: detected capacity change from 0 to 2048 [ 42.860718][ T3690] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 42.912460][ T3698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'. [ 42.926122][ T3690] EXT4-fs (loop0): mount failed [ 42.935646][ T3306] loop1: p2 p3 p7 [ 43.002585][ T3702] loop4: detected capacity change from 0 to 128 [ 43.018069][ T3704] loop7: detected capacity change from 0 to 7 [ 43.030248][ T3702] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 43.047841][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.057331][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 43.066198][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.075519][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 43.083740][ T3704] loop7: unable to read partition table [ 43.091098][ T3704] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 43.114259][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.123503][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 43.136129][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.145353][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 43.154435][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.163642][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 43.174118][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.183413][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 43.193562][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 43.202846][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 43.239231][ T3702] FAT-fs (loop4): FAT read failed (blocknr 128) [ 43.327310][ T3691] loop1: p2 p3 p7 [ 43.354341][ T3712] netlink: 56 bytes leftover after parsing attributes in process `syz.2.105'. [ 43.363379][ T3712] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 43.380350][ T3705] Invalid logical block size (6) [ 43.487657][ T3721] random: crng reseeded on system resumption [ 43.533636][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 43.537220][ T3715] udevd[3715]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 43.555708][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 43.753549][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 43.845507][ T3765] loop4: detected capacity change from 0 to 128 [ 43.885718][ T3765] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.911986][ T3765] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.969771][ T3774] loop2: detected capacity change from 0 to 1024 [ 43.993704][ T3774] ======================================================= [ 43.993704][ T3774] WARNING: The mand mount option has been deprecated and [ 43.993704][ T3774] and is ignored by this kernel. Remove the mand [ 43.993704][ T3774] option from the mount to silence this warning. [ 43.993704][ T3774] ======================================================= [ 44.080080][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.142119][ T3774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.238263][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.746402][ T3853] loop1: detected capacity change from 0 to 512 [ 44.781560][ T3853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.818208][ T3853] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.863407][ T3853] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.162: lblock 23 mapped to illegal pblock 18 (length 1) [ 44.880557][ T3864] loop3: detected capacity change from 0 to 128 [ 44.891132][ T3853] EXT4-fs (loop1): Remounting filesystem read-only [ 44.902001][ T3864] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.915785][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 44.915803][ T29] audit: type=1400 audit(1760544802.921:257): avc: denied { setattr } for pid=3852 comm="syz.1.162" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.968718][ T3864] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.002483][ T3867] loop4: detected capacity change from 0 to 128 [ 45.013259][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.022921][ T3867] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.058274][ T3867] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.074463][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.124312][ T3869] loop1: detected capacity change from 0 to 2048 [ 45.143082][ T557] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.169137][ T3879] loop3: detected capacity change from 0 to 256 [ 45.227534][ T29] audit: type=1400 audit(1760544803.221:258): avc: denied { mount } for pid=3877 comm="syz.3.170" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.249801][ T29] audit: type=1400 audit(1760544803.221:259): avc: denied { read write } for pid=3877 comm="syz.3.170" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.273967][ T29] audit: type=1400 audit(1760544803.221:260): avc: denied { open } for pid=3877 comm="syz.3.170" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.349394][ T29] audit: type=1400 audit(1760544803.301:261): avc: denied { map_create } for pid=3884 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.368914][ T29] audit: type=1400 audit(1760544803.301:262): avc: denied { map_read map_write } for pid=3884 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.388748][ T29] audit: type=1400 audit(1760544803.301:263): avc: denied { prog_load } for pid=3884 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.408368][ T29] audit: type=1400 audit(1760544803.301:264): avc: denied { bpf } for pid=3884 comm="syz.0.177" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.429180][ T29] audit: type=1400 audit(1760544803.301:265): avc: denied { perfmon } for pid=3884 comm="syz.0.177" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.450322][ T29] audit: type=1400 audit(1760544803.301:266): avc: denied { prog_run } for pid=3884 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.523390][ T3897] program syz.3.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.694362][ T3912] loop0: detected capacity change from 0 to 512 [ 45.728016][ T3912] EXT4-fs (loop0): 1 truncate cleaned up [ 45.741704][ T3912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.806272][ T3912] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.188: invalid indirect mapped block 234881024 (level 0) [ 45.857857][ T3922] netlink: 27 bytes leftover after parsing attributes in process `syz.1.192'. [ 45.915438][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.935830][ T3926] lo speed is unknown, defaulting to 1000 [ 45.954078][ T3926] lo speed is unknown, defaulting to 1000 [ 45.960448][ T3926] lo speed is unknown, defaulting to 1000 [ 45.982748][ T3928] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.196'. [ 45.992130][ T3928] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 46.055457][ T3926] infiniband sz1: set active [ 46.060249][ T3926] infiniband sz1: added lo [ 46.064797][ T3393] lo speed is unknown, defaulting to 1000 [ 46.097356][ T3926] RDS/IB: sz1: added [ 46.106779][ T3926] lo speed is unknown, defaulting to 1000 [ 46.209118][ T3926] lo speed is unknown, defaulting to 1000 [ 46.263300][ T3926] lo speed is unknown, defaulting to 1000 [ 46.296377][ T3926] lo speed is unknown, defaulting to 1000 [ 46.359721][ T3926] lo speed is unknown, defaulting to 1000 [ 46.425472][ T3960] loop4: detected capacity change from 0 to 512 [ 46.437843][ T3960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.451162][ T3960] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.535302][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.669151][ T3990] netlink: 1 bytes leftover after parsing attributes in process `syz.3.223'. [ 46.680493][ T3991] Illegal XDP return value 4294967294 on prog (id 105) dev N/A, expect packet loss! [ 46.896663][ T4015] random: crng reseeded on system resumption [ 47.068851][ T4035] loop3: detected capacity change from 0 to 512 [ 47.099147][ T4035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.115149][ T4035] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.182838][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 47.183614][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.191810][ T4044] netlink: 348 bytes leftover after parsing attributes in process `syz.1.248'. [ 47.191849][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 47.191865][ T4044] netlink: 348 bytes leftover after parsing attributes in process `syz.1.248'. [ 47.260482][ T4049] futex_wake_op: syz.3.249 tries to shift op by -1; fix this program [ 47.269339][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 47.422447][ T4069] delete_channel: no stack [ 47.450165][ T4071] veth0: entered promiscuous mode [ 47.455944][ T4070] veth0: left promiscuous mode [ 47.492234][ T4075] loop7: detected capacity change from 0 to 7 [ 47.504680][ T4080] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 47.504680][ T4080] program syz.3.266 not setting count and/or reply_len properly [ 47.525980][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.535296][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.543255][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.552444][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.565072][ T4075] loop7: unable to read partition table [ 47.570899][ T4075] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 47.585013][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 47.594270][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 47.806403][ T4108] loop2: detected capacity change from 0 to 512 [ 47.818963][ T4108] journal_path: Non-blockdev passed as './bus' [ 47.825307][ T4108] EXT4-fs: error: could not find journal device path [ 47.937023][ T4125] loop0: detected capacity change from 0 to 1024 [ 47.958240][ T4125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c118, mo2=0002] [ 47.975173][ T4127] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 47.981850][ T4127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.987684][ T4125] System zones: 0-1, 3-12 [ 47.989643][ T4127] vhci_hcd vhci_hcd.0: Device attached [ 48.002658][ T4125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.009811][ T4132] vhci_hcd: connection closed [ 48.027808][ T12] vhci_hcd: stop threads [ 48.036026][ T4138] sctp: [Deprecated]: syz.2.291 (pid 4138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.036026][ T4138] Use struct sctp_sack_info instead [ 48.037086][ T12] vhci_hcd: release socket [ 48.057864][ T12] vhci_hcd: disconnect device [ 48.175942][ T4125] ================================================================== [ 48.184081][ T4125] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 48.191574][ T4125] [ 48.193920][ T4125] read-write to 0xffff8881069bdd90 of 8 bytes by task 3444 on cpu 0: [ 48.202000][ T4125] __xa_clear_mark+0xf5/0x1e0 [ 48.206717][ T4125] __folio_end_writeback+0xf7/0x3b0 [ 48.211943][ T4125] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 48.218240][ T4125] folio_end_writeback+0x1c/0x70 [ 48.223275][ T4125] ext4_finish_bio+0x459/0x8c0 [ 48.228415][ T4125] ext4_release_io_end+0x9f/0x1f0 [ 48.233468][ T4125] ext4_end_io_end+0x18d/0x240 [ 48.238260][ T4125] ext4_end_io_rsv_work+0x151/0x1e0 [ 48.243488][ T4125] process_scheduled_works+0x4ce/0x9d0 [ 48.249000][ T4125] worker_thread+0x582/0x770 [ 48.253684][ T4125] kthread+0x489/0x510 [ 48.257788][ T4125] ret_from_fork+0x122/0x1b0 [ 48.262405][ T4125] ret_from_fork_asm+0x1a/0x30 [ 48.267182][ T4125] [ 48.269531][ T4125] read to 0xffff8881069bdd90 of 8 bytes by task 4125 on cpu 1: [ 48.277610][ T4125] xas_find_marked+0x218/0x620 [ 48.282478][ T4125] find_get_entry+0x5d/0x380 [ 48.287098][ T4125] filemap_get_folios_tag+0x13b/0x210 [ 48.292615][ T4125] filemap_fdatawait_keep_errors+0x6c/0x180 [ 48.298809][ T4125] sync_inodes_sb+0x39c/0x440 [ 48.303706][ T4125] sync_inodes_one_sb+0x3d/0x50 [ 48.308582][ T4125] __iterate_supers+0x110/0x220 [ 48.313548][ T4125] iterate_supers+0x1f/0x30 [ 48.318087][ T4125] ksys_sync+0x5c/0xe0 [ 48.322234][ T4125] __ia32_sys_sync+0xe/0x20 [ 48.326761][ T4125] x64_sys_call+0x2d1f/0x3000 [ 48.331508][ T4125] do_syscall_64+0xd2/0x200 [ 48.336046][ T4125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.341966][ T4125] [ 48.344298][ T4125] value changed: 0xffffffffff800000 -> 0xfffffffc00000000 [ 48.351421][ T4125] [ 48.353853][ T4125] Reported by Kernel Concurrency Sanitizer on: [ 48.360112][ T4125] CPU: 1 UID: 0 PID: 4125 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.369758][ T4125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.379846][ T4125] ================================================================== [ 48.426366][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.