last executing test programs: 5.370437985s ago: executing program 2 (id=889): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x14}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x99a8, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.089647559s ago: executing program 2 (id=883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) 5.08910293s ago: executing program 0 (id=884): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 5.01806302s ago: executing program 0 (id=885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001300)=""/4118, 0x1016, 0x0) 5.017384731s ago: executing program 2 (id=887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 4.938046012s ago: executing program 2 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 4.903298013s ago: executing program 0 (id=893): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r2, 0x2}, 0x10) 4.850066883s ago: executing program 2 (id=894): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004900000008007300000000000e0001006e657464657673696d0000000f0002006e0002000000000000300000e6050d6b535ebad3f78d76ccd503c7e04b7394c42309f70a4139abbffc992d391390f500000000061caaa42a2897a60362adb193f4dfe17c56c29f152f732f8d49953d70bb709c515819d2e48fcd67a669d895868f1bccf52ec3318bb2c902900067678e25635d9a59e4352c21dc39be229380a7db6a34f488445c4e3e6e54202ae6a70f47c5ad4cd334c8603a4a9422f4a4acc1a888f48465b72c7746a8da054d316aade0abbf291b24b04c5233"], 0x3c}}, 0x0) 4.772716954s ago: executing program 0 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 4.697652566s ago: executing program 0 (id=896): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x14}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x99a8, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.285682722s ago: executing program 2 (id=906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000053040c"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x880) 4.247737303s ago: executing program 32 (id=906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000053040c"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x880) 4.021643336s ago: executing program 0 (id=913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x401}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x54) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="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", 0x649}], 0x1}}], 0x1, 0x24000015) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xe35, 0x4) 4.021440206s ago: executing program 33 (id=913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x401}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x54) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="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", 0x649}], 0x1}}], 0x1, 0x24000015) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xe35, 0x4) 1.601062285s ago: executing program 6 (id=914): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 1.552680266s ago: executing program 6 (id=930): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 1.290977299s ago: executing program 1 (id=937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffff9c, 0x0, 0x0) 1.24172493s ago: executing program 6 (id=939): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) 1.211773171s ago: executing program 1 (id=942): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) open(&(0x7f0000000180)='./cgroup\x00', 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x185e41, 0x22) 1.176632761s ago: executing program 6 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mq_timedreceive(r0, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) 571.508481ms ago: executing program 4 (id=953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffff9c, 0x0, 0x0) 492.363292ms ago: executing program 4 (id=955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 458.757213ms ago: executing program 4 (id=956): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0x2f) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 446.022063ms ago: executing program 3 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000006c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 430.776183ms ago: executing program 5 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRESOCT], 0xffc9) 423.637673ms ago: executing program 4 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000300), &(0x7f00000004c0)}, 0x20) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 408.112043ms ago: executing program 5 (id=960): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x3198, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 330.159305ms ago: executing program 6 (id=961): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000700)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="308af218c507fba195043000030fac571f882167129e3ce9ffb2d4b5e03563b8b8032777302a9b251d128f8ecf8d76d5490ef766de9b3e0ea02211fb", @ANYRES64=0x0, @ANYRES32], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 329.990305ms ago: executing program 1 (id=962): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 329.883805ms ago: executing program 5 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004094}, 0x0) 329.761075ms ago: executing program 3 (id=964): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 329.620465ms ago: executing program 4 (id=965): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 278.477245ms ago: executing program 1 (id=966): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51c, &(0x7f0000002400)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) fsopen(0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2226021, 0x0) 277.697956ms ago: executing program 3 (id=968): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x3}}, 0x2e) 277.563956ms ago: executing program 5 (id=977): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1) write$P9_RLINK(r1, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) 202.130967ms ago: executing program 3 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 143.975278ms ago: executing program 5 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) unshare(0x2a020400) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 125.804028ms ago: executing program 1 (id=971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x100005}, 0x50) 81.123528ms ago: executing program 5 (id=972): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) open(&(0x7f0000000180)='./cgroup\x00', 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x185e41, 0x22) 35.552259ms ago: executing program 1 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mq_timedreceive(r0, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) 23.808089ms ago: executing program 3 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000300), &(0x7f00000004c0)}, 0x20) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 23.56096ms ago: executing program 4 (id=975): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x3198, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 0s ago: executing program 3 (id=976): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x12c) close(r0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c851, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 24.533895][ T29] audit: type=1400 audit(1750815729.145:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.534736][ T3295] cgroup: Unknown subsys name 'net' [ 24.556599][ T29] audit: type=1400 audit(1750815729.145:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.583947][ T29] audit: type=1400 audit(1750815729.175:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.763032][ T3295] cgroup: Unknown subsys name 'cpuset' [ 24.769155][ T3295] cgroup: Unknown subsys name 'rlimit' [ 24.898577][ T29] audit: type=1400 audit(1750815729.505:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.924044][ T29] audit: type=1400 audit(1750815729.505:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.944690][ T29] audit: type=1400 audit(1750815729.505:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.965124][ T29] audit: type=1400 audit(1750815729.505:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.971784][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.985388][ T29] audit: type=1400 audit(1750815729.515:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.018740][ T29] audit: type=1400 audit(1750815729.515:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.042201][ T29] audit: type=1400 audit(1750815729.615:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.081086][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.172321][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 26.246700][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.257421][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.270991][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.288170][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.332242][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.339430][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.346597][ T3306] bridge_slave_0: entered allmulticast mode [ 26.353058][ T3306] bridge_slave_0: entered promiscuous mode [ 26.371546][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.378724][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.385955][ T3306] bridge_slave_1: entered allmulticast mode [ 26.392209][ T3306] bridge_slave_1: entered promiscuous mode [ 26.424716][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.431779][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.438985][ T3307] bridge_slave_0: entered allmulticast mode [ 26.445537][ T3307] bridge_slave_0: entered promiscuous mode [ 26.467070][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.474151][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.481383][ T3307] bridge_slave_1: entered allmulticast mode [ 26.487789][ T3307] bridge_slave_1: entered promiscuous mode [ 26.495424][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.518198][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.525328][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.532521][ T3310] bridge_slave_0: entered allmulticast mode [ 26.539022][ T3310] bridge_slave_0: entered promiscuous mode [ 26.550429][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.567215][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.574398][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.581568][ T3313] bridge_slave_0: entered allmulticast mode [ 26.588004][ T3313] bridge_slave_0: entered promiscuous mode [ 26.594534][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.601591][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.608822][ T3310] bridge_slave_1: entered allmulticast mode [ 26.615331][ T3310] bridge_slave_1: entered promiscuous mode [ 26.629961][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.637042][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.644181][ T3316] bridge_slave_0: entered allmulticast mode [ 26.650536][ T3316] bridge_slave_0: entered promiscuous mode [ 26.658101][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.667416][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.674477][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.681593][ T3313] bridge_slave_1: entered allmulticast mode [ 26.687959][ T3313] bridge_slave_1: entered promiscuous mode [ 26.703625][ T3306] team0: Port device team_slave_0 added [ 26.709369][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.716487][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.723758][ T3316] bridge_slave_1: entered allmulticast mode [ 26.730201][ T3316] bridge_slave_1: entered promiscuous mode [ 26.741593][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.760563][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.770272][ T3306] team0: Port device team_slave_1 added [ 26.790296][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.808575][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.818068][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.825040][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.850959][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.862312][ T3307] team0: Port device team_slave_0 added [ 26.869131][ T3307] team0: Port device team_slave_1 added [ 26.875907][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.889869][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.899330][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.906317][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.932410][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.948441][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.981851][ T3310] team0: Port device team_slave_0 added [ 26.988325][ T3310] team0: Port device team_slave_1 added [ 26.995837][ T3316] team0: Port device team_slave_0 added [ 27.002413][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.009487][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.035474][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.060265][ T3316] team0: Port device team_slave_1 added [ 27.066300][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.073307][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.099219][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.110589][ T3313] team0: Port device team_slave_0 added [ 27.117335][ T3313] team0: Port device team_slave_1 added [ 27.142611][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.149567][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.175474][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.188167][ T3306] hsr_slave_0: entered promiscuous mode [ 27.194209][ T3306] hsr_slave_1: entered promiscuous mode [ 27.205037][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.211992][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.237922][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.258280][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.265333][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.291369][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.311257][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.318282][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.344254][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.356671][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.363634][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.389593][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.414254][ T3307] hsr_slave_0: entered promiscuous mode [ 27.420240][ T3307] hsr_slave_1: entered promiscuous mode [ 27.426123][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.433683][ T3307] Cannot create hsr debugfs directory [ 27.439460][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.446459][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.472403][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.509907][ T3310] hsr_slave_0: entered promiscuous mode [ 27.515884][ T3310] hsr_slave_1: entered promiscuous mode [ 27.521590][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.529196][ T3310] Cannot create hsr debugfs directory [ 27.564406][ T3316] hsr_slave_0: entered promiscuous mode [ 27.570388][ T3316] hsr_slave_1: entered promiscuous mode [ 27.576215][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.583782][ T3316] Cannot create hsr debugfs directory [ 27.596236][ T3313] hsr_slave_0: entered promiscuous mode [ 27.602315][ T3313] hsr_slave_1: entered promiscuous mode [ 27.608255][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.615815][ T3313] Cannot create hsr debugfs directory [ 27.775304][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.787589][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.796384][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.807156][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.829164][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.842577][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.856178][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.864945][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.882201][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.893931][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.907799][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.919669][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.944544][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.957110][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.967828][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.976527][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.006712][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.015423][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.028139][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.036878][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.046338][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.071732][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.088979][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.096067][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.112070][ T2402] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.119160][ T2402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.128987][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.173803][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.183473][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.193992][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.204205][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.211372][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.226634][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.233909][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.246185][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.261439][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.274003][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.281110][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.296733][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.316626][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.323716][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.336183][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.343348][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.354511][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.370597][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.377709][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.397380][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.419135][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.426345][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.437776][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.444870][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.460120][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.520049][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.570632][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.580045][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.593970][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.619479][ T3306] veth0_vlan: entered promiscuous mode [ 28.634600][ T3306] veth1_vlan: entered promiscuous mode [ 28.654425][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.683835][ T3306] veth0_macvtap: entered promiscuous mode [ 28.710451][ T3306] veth1_macvtap: entered promiscuous mode [ 28.731419][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.742032][ T3313] veth0_vlan: entered promiscuous mode [ 28.750382][ T3313] veth1_vlan: entered promiscuous mode [ 28.770646][ T3310] veth0_vlan: entered promiscuous mode [ 28.784883][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.800358][ T3313] veth0_macvtap: entered promiscuous mode [ 28.809073][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.817911][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.826638][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.835437][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.851199][ T3310] veth1_vlan: entered promiscuous mode [ 28.867425][ T3313] veth1_macvtap: entered promiscuous mode [ 28.878298][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.888994][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.911087][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.919986][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.928843][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.937688][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.964534][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.965916][ T3316] veth0_vlan: entered promiscuous mode [ 28.987988][ T3310] veth0_macvtap: entered promiscuous mode [ 29.000679][ T3310] veth1_macvtap: entered promiscuous mode [ 29.009665][ T3316] veth1_vlan: entered promiscuous mode [ 29.018354][ T3307] veth0_vlan: entered promiscuous mode [ 29.035842][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.050310][ T3316] veth0_macvtap: entered promiscuous mode [ 29.060330][ T3307] veth1_vlan: entered promiscuous mode [ 29.075255][ T3316] veth1_macvtap: entered promiscuous mode [ 29.090184][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.111178][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.120047][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.128769][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.137585][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.155141][ T3307] veth0_macvtap: entered promiscuous mode [ 29.166912][ T3307] veth1_macvtap: entered promiscuous mode [ 29.180683][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.196054][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.210538][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.219335][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.228136][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.236933][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.257593][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.292343][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.322014][ T3495] loop2: detected capacity change from 0 to 512 [ 29.322967][ T3490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 29.334497][ T3495] EXT4-fs: Ignoring removed i_version option [ 29.336956][ T3490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 29.347883][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.360405][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.369448][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.378237][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.381366][ T3497] loop0: detected capacity change from 0 to 1024 [ 29.394361][ T3495] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.395740][ T3497] ======================================================= [ 29.395740][ T3497] WARNING: The mand mount option has been deprecated and [ 29.395740][ T3497] and is ignored by this kernel. Remove the mand [ 29.395740][ T3497] option from the mount to silence this warning. [ 29.395740][ T3497] ======================================================= [ 29.456307][ T3495] EXT4-fs (loop2): orphan cleanup on readonly fs [ 29.483489][ T3495] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3: bg 0: block 131: padding at end of block bitmap is not set [ 29.499230][ T3495] EXT4-fs (loop2): Remounting filesystem read-only [ 29.500957][ T3497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.525923][ T3495] EXT4-fs (loop2): 1 truncate cleaned up [ 29.532401][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.544807][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 29.544819][ T29] audit: type=1400 audit(1750815734.125:110): avc: denied { mount } for pid=3496 comm="syz.0.11" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.587696][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.649668][ T29] audit: type=1400 audit(1750815734.255:111): avc: denied { add_name } for pid=3496 comm="syz.0.11" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.670172][ T29] audit: type=1400 audit(1750815734.255:112): avc: denied { create } for pid=3496 comm="syz.0.11" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.690187][ T29] audit: type=1400 audit(1750815734.255:113): avc: denied { read write } for pid=3496 comm="syz.0.11" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.712659][ T29] audit: type=1400 audit(1750815734.255:114): avc: denied { open } for pid=3496 comm="syz.0.11" path="/5/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.769142][ T29] audit: type=1400 audit(1750815734.345:115): avc: denied { allowed } for pid=3514 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 29.788291][ T29] audit: type=1400 audit(1750815734.345:116): avc: denied { create } for pid=3514 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.809235][ T29] audit: type=1400 audit(1750815734.345:117): avc: denied { map } for pid=3514 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.833061][ T29] audit: type=1400 audit(1750815734.345:118): avc: denied { read write } for pid=3514 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.867121][ T3497] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.11: Allocating blocks 449-513 which overlap fs metadata [ 29.889740][ T3496] EXT4-fs (loop0): pa ffff888106a72070: logic 48, phys. 177, len 21 [ 29.897821][ T3496] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 29.908222][ T29] audit: type=1400 audit(1750815734.495:119): avc: denied { create } for pid=3521 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.955583][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.011617][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 30.016744][ T3535] loop1: detected capacity change from 0 to 512 [ 30.020639][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 30.027266][ T3535] EXT4-fs: Ignoring removed i_version option [ 30.104377][ T3535] EXT4-fs (loop1): orphan cleanup on readonly fs [ 30.123943][ T3535] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.24: bg 0: block 131: padding at end of block bitmap is not set [ 30.142205][ T3535] EXT4-fs (loop1): Remounting filesystem read-only [ 30.149123][ T3535] EXT4-fs (loop1): 1 truncate cleaned up [ 30.155219][ T3535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 30.198550][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.229085][ T3559] loop2: detected capacity change from 0 to 1024 [ 30.275834][ T3559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.349279][ T3559] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.32: Allocating blocks 449-513 which overlap fs metadata [ 30.390270][ T3558] EXT4-fs (loop2): pa ffff888106a720e0: logic 48, phys. 177, len 21 [ 30.398490][ T3558] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 30.481527][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.568487][ T3597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 30.577306][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 30.601596][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 30.610406][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 30.722211][ T3619] loop1: detected capacity change from 0 to 1024 [ 30.761668][ T3619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.853251][ T3619] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.53: Allocating blocks 449-513 which overlap fs metadata [ 30.927985][ T3618] EXT4-fs (loop1): pa ffff888106a99070: logic 48, phys. 177, len 21 [ 30.936118][ T3618] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 30.966862][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 30.975753][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 31.018820][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.197657][ T3679] loop4: detected capacity change from 0 to 1024 [ 31.240752][ T3679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.258089][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.265602][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.273216][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.280879][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.288363][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.292321][ T3679] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.79: Allocating blocks 449-513 which overlap fs metadata [ 31.295823][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.295849][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.324398][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.331797][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.339234][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.346675][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.354103][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.361550][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.368985][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.376788][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.384389][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.388574][ T3677] EXT4-fs (loop4): pa ffff888106a990e0: logic 48, phys. 177, len 21 [ 31.391768][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.399812][ T3677] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 31.417218][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.424791][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.432334][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.439770][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.447184][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.454670][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.462133][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.469600][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.477067][ T3700] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì44§/@®qæžkøp [ 31.477077][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.477182][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.501889][ T3491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 31.504005][ T3702] loop3: detected capacity change from 0 to 1024 [ 31.510182][ T3491] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 31.531809][ T3679] syz.4.79 (3679) used greatest stack depth: 10640 bytes left [ 31.540538][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.551982][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.576342][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.673068][ T3719] syz.0.97 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.742848][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.750328][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.757787][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.766662][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.774098][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.781577][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.789070][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.796647][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.804086][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.811590][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.819049][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.826488][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.834055][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.841466][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.849248][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.856809][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.864304][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.869802][ T3732] loop3: detected capacity change from 0 to 1024 [ 31.871685][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.885550][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.893002][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.894754][ T3707] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 31.894754][ T3707] program syz.4.93 not setting count and/or reply_len properly [ 31.900378][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.900404][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.919906][ T3734] loop0: detected capacity change from 0 to 1024 [ 31.924345][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.945641][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.948308][ T3734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.953164][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.972543][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.979967][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.987455][ T3491] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.995578][ T3491] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 31.997726][ T3732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.041884][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.055966][ T3740] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì44§/@®qæžkøp [ 32.066353][ T3732] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.101: Allocating blocks 449-513 which overlap fs metadata [ 32.101197][ T3730] EXT4-fs (loop3): pa ffff888106a72000: logic 48, phys. 177, len 21 [ 32.109303][ T3730] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 32.153651][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.213794][ T3762] loop0: detected capacity change from 0 to 256 [ 32.225262][ T3762] FAT-fs (loop0): bogus number of FAT sectors [ 32.231378][ T3762] FAT-fs (loop0): Can't find a valid FAT filesystem [ 32.244911][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.252413][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.260049][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.268240][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.275783][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.283218][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.290646][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.298081][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.305691][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.313211][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.320826][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.328291][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.335765][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.343238][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.350915][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.358374][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.365818][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.373233][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.380671][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.388089][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.395506][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.402984][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.410360][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.417785][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.425183][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.432629][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.440018][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.447453][ T3396] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 32.455541][ T3396] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 32.488413][ T3775] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì44§/@®qæžkøp [ 32.530605][ T3779] loop3: detected capacity change from 0 to 1024 [ 32.548982][ T3779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.614625][ T3779] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.124: Allocating blocks 449-513 which overlap fs metadata [ 32.636184][ T3778] EXT4-fs (loop3): pa ffff888106a720e0: logic 48, phys. 177, len 21 [ 32.644252][ T3778] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 32.664560][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.738488][ T3812] loop3: detected capacity change from 0 to 256 [ 32.747653][ T3812] FAT-fs (loop3): bogus number of FAT sectors [ 32.753871][ T3812] FAT-fs (loop3): Can't find a valid FAT filesystem [ 32.915191][ T3806] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 32.915191][ T3806] program syz.0.134 not setting count and/or reply_len properly [ 33.156166][ T3866] xt_hashlimit: max too large, truncated to 1048576 [ 33.268978][ T3872] loop1: detected capacity change from 0 to 2048 [ 33.557543][ T3899] xt_hashlimit: max too large, truncated to 1048576 [ 33.806323][ T3914] loop2: detected capacity change from 0 to 2048 [ 33.984492][ T3928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.033856][ T3921] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 34.033856][ T3921] program syz.1.187 not setting count and/or reply_len properly [ 34.330788][ T3948] loop3: detected capacity change from 0 to 512 [ 34.379194][ T3948] EXT4-fs (loop3): too many log groups per flexible block group [ 34.387104][ T3948] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 34.476414][ T3948] EXT4-fs (loop3): mount failed [ 34.743398][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 34.743411][ T29] audit: type=1326 audit(1750815739.355:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 34.819732][ T29] audit: type=1326 audit(1750815739.385:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 34.843494][ T29] audit: type=1326 audit(1750815739.385:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 34.866963][ T29] audit: type=1326 audit(1750815739.385:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 34.890262][ T29] audit: type=1326 audit(1750815739.385:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 34.913579][ T29] audit: type=1326 audit(1750815739.385:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 34.936958][ T29] audit: type=1326 audit(1750815739.385:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 34.960299][ T29] audit: type=1326 audit(1750815739.385:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 34.983661][ T29] audit: type=1326 audit(1750815739.385:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 35.007651][ T29] audit: type=1326 audit(1750815739.385:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fad9959e929 code=0x7ffc0000 [ 35.334376][ T4000] loop4: detected capacity change from 0 to 512 [ 35.381780][ T4000] EXT4-fs (loop4): too many log groups per flexible block group [ 35.389614][ T4000] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 35.398278][ T4000] EXT4-fs (loop4): mount failed [ 35.413794][ T3985] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 35.413794][ T3985] program syz.3.216 not setting count and/or reply_len properly [ 35.894999][ T4030] loop1: detected capacity change from 0 to 512 [ 35.933567][ T4030] EXT4-fs (loop1): too many log groups per flexible block group [ 35.941400][ T4030] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 35.962628][ T4030] EXT4-fs (loop1): mount failed [ 36.051493][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881198c2400: rx timeout, send abort [ 36.059975][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8881198c2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 36.279779][ T4063] netlink: 'syz.3.249': attribute type 29 has an invalid length. [ 36.323297][ T4063] netlink: 'syz.3.249': attribute type 29 has an invalid length. [ 36.343516][ T4063] __nla_validate_parse: 6 callbacks suppressed [ 36.343530][ T4063] netlink: 500 bytes leftover after parsing attributes in process `syz.3.249'. [ 36.520508][ T4064] loop1: detected capacity change from 0 to 8192 [ 36.626038][ T4089] netlink: 'syz.0.263': attribute type 29 has an invalid length. [ 36.635415][ T4089] netlink: 'syz.0.263': attribute type 29 has an invalid length. [ 36.644285][ T4089] netlink: 500 bytes leftover after parsing attributes in process `syz.0.263'. [ 36.769004][ T4102] loop1: detected capacity change from 0 to 1024 [ 36.809568][ T4102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.822381][ T4102] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.822598][ T1063] IPVS: starting estimator thread 0... [ 36.912976][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.922978][ T4113] loop2: detected capacity change from 0 to 8192 [ 36.952827][ T4111] IPVS: using max 2784 ests per chain, 139200 per kthread [ 37.135282][ T4130] SELinux: Context Ü is not valid (left unmapped). [ 37.535771][ T10] IPVS: starting estimator thread 0... [ 37.556990][ T4143] loop0: detected capacity change from 0 to 1024 [ 37.574013][ T4143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.586423][ T4143] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.627492][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.636508][ T4141] IPVS: using max 2880 ests per chain, 144000 per kthread [ 37.757665][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8881198b3400: rx timeout, send abort [ 37.766045][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8881198b3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.212142][ T4194] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4194 comm=syz.4.307 [ 38.224564][ T4194] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4194 comm=syz.4.307 [ 39.057180][ T4231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.315'. [ 39.066180][ T4231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 39.266214][ T4240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.329'. [ 39.275187][ T4240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 39.311255][ T4244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4244 comm=syz.0.319 [ 39.323851][ T4244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4244 comm=syz.0.319 [ 39.354643][ T4248] capability: warning: `syz.0.321' uses deprecated v2 capabilities in a way that may be insecure [ 39.466750][ T4251] loop3: detected capacity change from 0 to 512 [ 39.481049][ T4251] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.324: Parent and EA inode have the same ino 15 [ 39.495099][ T4251] EXT4-fs (loop3): Remounting filesystem read-only [ 39.506127][ T4251] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.519192][ T4251] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 39.530118][ T4251] EXT4-fs (loop3): 1 orphan inode deleted [ 39.536345][ T4251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.549785][ T4251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.690056][ T4269] IPv6: Can't replace route, no match found [ 39.834053][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 39.834067][ T29] audit: type=1400 audit(1750815744.445:484): avc: denied { name_bind } for pid=4276 comm="syz.1.335" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.861862][ T29] audit: type=1400 audit(1750815744.445:485): avc: denied { node_bind } for pid=4276 comm="syz.1.335" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 39.897077][ T29] audit: type=1400 audit(1750815744.505:486): avc: denied { create } for pid=4280 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.942413][ T29] audit: type=1400 audit(1750815744.525:487): avc: denied { create } for pid=4280 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.962770][ T29] audit: type=1400 audit(1750815744.525:488): avc: denied { ioctl } for pid=4280 comm="syz.4.337" path="socket:[7403]" dev="sockfs" ino=7403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.988184][ T29] audit: type=1400 audit(1750815744.525:489): avc: denied { bind } for pid=4280 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.007677][ T29] audit: type=1400 audit(1750815744.525:490): avc: denied { setopt } for pid=4280 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.027296][ T29] audit: type=1400 audit(1750815744.525:491): avc: denied { write } for pid=4280 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.063826][ T4289] loop1: detected capacity change from 0 to 512 [ 40.076803][ T4289] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.342: Parent and EA inode have the same ino 15 [ 40.089453][ T4289] EXT4-fs (loop1): Remounting filesystem read-only [ 40.097488][ T4289] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 40.107930][ T4289] EXT4-fs (loop1): 1 orphan inode deleted [ 40.114366][ T4289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.133082][ T4289] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.177236][ T4297] IPv6: Can't replace route, no match found [ 40.267702][ T4307] raw_sendmsg: syz.4.349 forgot to set AF_INET. Fix it! [ 40.274794][ T29] audit: type=1400 audit(1750815744.875:492): avc: denied { create } for pid=4306 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.294395][ T29] audit: type=1400 audit(1750815744.875:493): avc: denied { setopt } for pid=4306 comm="syz.4.349" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.485574][ T4324] loop2: detected capacity change from 0 to 512 [ 40.504424][ T4324] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.357: Parent and EA inode have the same ino 15 [ 40.522560][ T4324] EXT4-fs (loop2): Remounting filesystem read-only [ 40.535613][ T4324] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 40.560841][ T4331] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.565398][ T4324] EXT4-fs (loop2): 1 orphan inode deleted [ 40.578692][ T4324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.592043][ T4324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.619080][ T4337] loop1: detected capacity change from 0 to 128 [ 40.675851][ T4339] infiniband syz2: set active [ 40.680595][ T4339] infiniband syz2: added veth0_to_bond [ 40.692988][ T4339] RDS/IB: syz2: added [ 40.697030][ T4339] smc: adding ib device syz2 with port count 1 [ 40.704354][ T4339] smc: ib device syz2 port 1 has pnetid [ 40.712225][ T4344] syz.1.362: attempt to access beyond end of device [ 40.712225][ T4344] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 40.772463][ T4344] syz.1.362: attempt to access beyond end of device [ 40.772463][ T4344] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 40.830207][ T4344] syz.1.362: attempt to access beyond end of device [ 40.830207][ T4344] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 40.863077][ T4344] syz.1.362: attempt to access beyond end of device [ 40.863077][ T4344] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 40.882742][ T4344] syz.1.362: attempt to access beyond end of device [ 40.882742][ T4344] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 40.906322][ T4344] syz.1.362: attempt to access beyond end of device [ 40.906322][ T4344] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 40.936646][ T4344] syz.1.362: attempt to access beyond end of device [ 40.936646][ T4344] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 40.950161][ T4344] syz.1.362: attempt to access beyond end of device [ 40.950161][ T4344] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 40.963876][ T4344] syz.1.362: attempt to access beyond end of device [ 40.963876][ T4344] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 40.980498][ T4344] syz.1.362: attempt to access beyond end of device [ 40.980498][ T4344] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 40.986038][ T4339] syz.3.363 (4339) used greatest stack depth: 10616 bytes left [ 41.046616][ T4355] loop1: detected capacity change from 0 to 256 [ 41.193499][ T4374] loop4: detected capacity change from 0 to 512 [ 41.206685][ T4374] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.377: Parent and EA inode have the same ino 15 [ 41.219271][ T4374] EXT4-fs (loop4): Remounting filesystem read-only [ 41.228850][ T4374] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 41.239248][ T4374] EXT4-fs (loop4): 1 orphan inode deleted [ 41.245550][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.258422][ T4374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.295092][ T4379] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 41.340102][ T4383] loop3: detected capacity change from 0 to 128 [ 41.380634][ T4387] process 'syz.4.383' launched './file1' with NULL argv: empty string added [ 41.426467][ T4392] loop4: detected capacity change from 0 to 256 [ 41.471783][ T4398] loop4: detected capacity change from 0 to 128 [ 41.472307][ T4396] loop3: detected capacity change from 0 to 512 [ 41.478713][ T4398] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.488432][ T4396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.496758][ T4398] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.509418][ T4396] EXT4-fs (loop3): 1 truncate cleaned up [ 41.521612][ T4396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.572896][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.931319][ T4407] loop0: detected capacity change from 0 to 512 [ 41.932409][ T4408] loop4: detected capacity change from 0 to 512 [ 41.946797][ T4408] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.958872][ T4407] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.391: Parent and EA inode have the same ino 15 [ 41.981272][ T4408] EXT4-fs (loop4): 1 truncate cleaned up [ 41.989626][ T4408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.010208][ T4407] EXT4-fs (loop0): Remounting filesystem read-only [ 42.053482][ T4407] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 42.083692][ T4407] EXT4-fs (loop0): 1 orphan inode deleted [ 42.089872][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.094206][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.131176][ T4407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.144753][ T4423] loop3: detected capacity change from 0 to 128 [ 42.151502][ T4423] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.166387][ T4424] loop2: detected capacity change from 0 to 128 [ 42.210243][ T4423] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.274652][ T4442] loop1: detected capacity change from 0 to 512 [ 42.293042][ T4442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.320227][ T4442] EXT4-fs (loop1): 1 truncate cleaned up [ 42.355131][ T4442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.467058][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.483947][ T4466] loop2: detected capacity change from 0 to 128 [ 42.497027][ T4464] loop0: detected capacity change from 0 to 512 [ 42.501671][ T4466] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.522067][ T4468] loop4: detected capacity change from 0 to 1024 [ 42.533566][ T4466] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.553699][ T4464] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.416: Parent and EA inode have the same ino 15 [ 42.567334][ T4464] EXT4-fs (loop0): Remounting filesystem read-only [ 42.576724][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.580589][ T4464] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 42.603173][ T4464] EXT4-fs (loop0): 1 orphan inode deleted [ 42.609434][ T4464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.628586][ T4464] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.732080][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.799252][ T4487] loop3: detected capacity change from 0 to 1024 [ 42.807171][ T4491] loop0: detected capacity change from 0 to 128 [ 42.844783][ T4487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.866233][ T4504] $Hÿ: renamed from bond0 (while UP) [ 42.883646][ T4504] $Hÿ: entered promiscuous mode [ 42.888776][ T4504] bond_slave_0: entered promiscuous mode [ 42.894510][ T4504] bond_slave_1: entered promiscuous mode [ 42.939854][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.013344][ T4518] loop1: detected capacity change from 0 to 128 [ 43.020282][ T4518] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.037764][ T4520] loop0: detected capacity change from 0 to 512 [ 43.040822][ T4518] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.064180][ T4524] loop3: detected capacity change from 0 to 164 [ 43.087674][ T4520] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.441: Parent and EA inode have the same ino 15 [ 43.121875][ T4531] loop2: detected capacity change from 0 to 1024 [ 43.163754][ T4520] EXT4-fs (loop0): Remounting filesystem read-only [ 43.187754][ T4520] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 43.190718][ T4531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.198112][ T4520] EXT4-fs (loop0): 1 orphan inode deleted [ 43.222346][ T4520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.275205][ T4520] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.280392][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.299246][ T4547] loop4: detected capacity change from 0 to 128 [ 43.301345][ T4545] $Hÿ: renamed from bond0 (while UP) [ 43.314531][ T4545] $Hÿ: entered promiscuous mode [ 43.319631][ T4545] bond_slave_0: entered promiscuous mode [ 43.325523][ T4545] bond_slave_1: entered promiscuous mode [ 43.426835][ T4560] loop1: detected capacity change from 0 to 512 [ 43.466602][ T4564] loop3: detected capacity change from 0 to 512 [ 43.485384][ T4560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.501074][ T4567] loop0: detected capacity change from 0 to 164 [ 43.508767][ T4560] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.523583][ T4564] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.470: Parent and EA inode have the same ino 15 [ 43.540894][ T4564] EXT4-fs (loop3): Remounting filesystem read-only [ 43.550839][ T4573] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 43.565119][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.573568][ T4564] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 43.585197][ T4564] EXT4-fs (loop3): 1 orphan inode deleted [ 43.591083][ T2306] Buffer I/O error on dev loop4, logical block 552, lost async page write [ 43.591341][ T4564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.643035][ T4564] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.665007][ T4579] loop1: detected capacity change from 0 to 1024 [ 43.691285][ T4579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.716234][ T4591] openvswitch: netlink: Message has 6 unknown bytes. [ 43.759383][ T4596] loop3: detected capacity change from 0 to 128 [ 43.788675][ T4601] loop4: detected capacity change from 0 to 512 [ 43.815397][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.874624][ T4611] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 43.885634][ T4601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.917993][ T4601] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.953960][ T4622] openvswitch: netlink: Message has 6 unknown bytes. [ 44.013671][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.065574][ T4633] loop0: detected capacity change from 0 to 1024 [ 44.098236][ T4633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.174224][ T4657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 44.200703][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.269928][ T4670] loop0: detected capacity change from 0 to 1024 [ 44.306320][ T4670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.365030][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 44.388513][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 44.399879][ T4692] Zero length message leads to an empty skb [ 44.429028][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.449484][ T4700] loop4: detected capacity change from 0 to 1024 [ 44.488330][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 44.496107][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.503912][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.507895][ T4709] +}[@ uses obsolete (PF_INET,SOCK_PACKET) [ 44.511799][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.525392][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.533120][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.540846][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.541804][ T4700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.548550][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.568453][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.576142][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.583951][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.591613][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.599321][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.607245][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.614982][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.622754][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.630580][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.638300][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.646171][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.653904][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.661553][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.669295][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.677055][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.684952][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.692645][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.700539][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.703477][ T4724] loop2: detected capacity change from 0 to 128 [ 44.708330][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.722390][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.730202][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.737929][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.745619][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 44.756396][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.785910][ T9] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 44.808775][ T4729] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 44.830763][ T4729] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 44.900742][ T4741] loop3: detected capacity change from 0 to 1024 [ 44.925635][ T4741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.956949][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 44.956964][ T29] audit: type=1326 audit(1750815749.565:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.019343][ T29] audit: type=1326 audit(1750815749.615:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.042628][ T29] audit: type=1326 audit(1750815749.615:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.065879][ T29] audit: type=1326 audit(1750815749.615:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4748 comm="syz.1.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.118287][ T29] audit: type=1326 audit(1750815749.705:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.118978][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.141585][ T29] audit: type=1326 audit(1750815749.705:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.174043][ T29] audit: type=1326 audit(1750815749.705:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.197377][ T29] audit: type=1326 audit(1750815749.705:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.220702][ T29] audit: type=1326 audit(1750815749.715:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.244114][ T29] audit: type=1326 audit(1750815749.715:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4752 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac7e7be929 code=0x7ffc0000 [ 45.246859][ T4762] netlink: 'syz.4.549': attribute type 4 has an invalid length. [ 45.329993][ T4762] netlink: 'syz.4.549': attribute type 4 has an invalid length. [ 45.475072][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.482412][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.492805][ T4770] $Hÿ: left promiscuous mode [ 45.497610][ T4770] bond_slave_0: left promiscuous mode [ 45.503218][ T4770] bond_slave_1: left promiscuous mode [ 45.555098][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.576065][ T4770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.655341][ T4770] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.664379][ T4770] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.673275][ T4770] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.682235][ T4770] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.696277][ T4779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 46.660583][ T4841] loop0: detected capacity change from 0 to 128 [ 46.700014][ T4827] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.707359][ T4827] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.736488][ T4827] $Hÿ: left promiscuous mode [ 46.741322][ T4827] bond_slave_0: left promiscuous mode [ 46.747035][ T4827] bond_slave_1: left promiscuous mode [ 46.787304][ T4827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.797665][ T4827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.828611][ T4827] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.837917][ T4827] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.847019][ T4827] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.856132][ T4827] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.358964][ T4879] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 47.471857][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.479292][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.584244][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.594068][ T4885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.621511][ T4885] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.630858][ T4885] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.639990][ T4885] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.649071][ T4885] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.732605][ T4885] syz.4.601 (4885) used greatest stack depth: 10408 bytes left [ 47.797536][ T4909] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 47.839088][ T4916] loop4: detected capacity change from 0 to 128 [ 48.768623][ T4917] syz.2.612 (4917) used greatest stack depth: 9960 bytes left [ 49.008841][ T4900] syz.2.612 (4900) used greatest stack depth: 6824 bytes left [ 49.025076][ T4971] Illegal XDP return value 4294967274 on prog (id 468) dev N/A, expect packet loss! [ 49.097008][ T4979] loop1: detected capacity change from 0 to 128 [ 49.561767][ T5022] SELinux: policydb version 0 does not match my version range 15-34 [ 49.591299][ T5022] SELinux: failed to load policy [ 49.774959][ T5034] SELinux: policydb version 0 does not match my version range 15-34 [ 49.793872][ T5034] SELinux: failed to load policy [ 49.975306][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 49.975348][ T29] audit: type=1400 audit(1750815754.585:742): avc: denied { name_bind } for pid=5046 comm="syz.2.676" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.003246][ T29] audit: type=1400 audit(1750815754.585:743): avc: denied { node_bind } for pid=5046 comm="syz.2.676" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.132787][ T29] audit: type=1400 audit(1750815754.645:744): avc: denied { mounton } for pid=5046 comm="syz.2.676" path="/122/file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.155343][ T29] audit: type=1400 audit(1750815754.645:745): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.175222][ T29] audit: type=1400 audit(1750815754.685:746): avc: denied { audit_write } for pid=5054 comm="syz.1.678" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.196198][ T29] audit: type=1107 audit(1750815754.685:747): pid=5054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 50.247177][ T5061] SELinux: policydb version 0 does not match my version range 15-34 [ 50.251584][ T29] audit: type=1400 audit(1750815754.825:748): avc: denied { name_bind } for pid=5059 comm="syz.4.682" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 50.262698][ T5061] SELinux: failed to load policy [ 50.395635][ T29] audit: type=1400 audit(1750815755.005:749): avc: denied { watch watch_reads } for pid=5072 comm="syz.1.688" path="/137" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.418497][ T29] audit: type=1400 audit(1750815755.005:750): avc: denied { tracepoint } for pid=5072 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 50.520351][ T29] audit: type=1400 audit(1750815755.125:751): avc: denied { execmem } for pid=5074 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.557818][ T5080] loop3: detected capacity change from 0 to 128 [ 50.808975][ T5051] 9pnet_fd: p9_fd_create_tcp (5051): problem connecting socket to 127.0.0.1 [ 50.851323][ T5089] loop1: detected capacity change from 0 to 128 [ 50.881016][ T5093] SELinux: policydb version 0 does not match my version range 15-34 [ 50.899243][ T5089] FAT-fs (loop1): Directory bread(block 162) failed [ 50.909025][ T5089] FAT-fs (loop1): Directory bread(block 163) failed [ 50.924218][ T5093] SELinux: failed to load policy [ 50.934839][ T5089] FAT-fs (loop1): Directory bread(block 164) failed [ 50.957359][ T5089] FAT-fs (loop1): Directory bread(block 165) failed [ 50.987371][ T5089] FAT-fs (loop1): Directory bread(block 166) failed [ 51.013430][ T5089] FAT-fs (loop1): Directory bread(block 167) failed [ 51.042755][ T5089] FAT-fs (loop1): Directory bread(block 168) failed [ 51.063722][ T5089] FAT-fs (loop1): Directory bread(block 169) failed [ 51.091749][ T5089] FAT-fs (loop1): Directory bread(block 162) failed [ 51.108185][ T5089] FAT-fs (loop1): Directory bread(block 163) failed [ 51.123414][ T5089] bio_check_eod: 667 callbacks suppressed [ 51.123427][ T5089] syz.1.694: attempt to access beyond end of device [ 51.123427][ T5089] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 51.164289][ T5089] syz.1.694: attempt to access beyond end of device [ 51.164289][ T5089] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 51.538583][ T5105] loop2: detected capacity change from 0 to 128 [ 51.548709][ T5105] FAT-fs (loop2): Directory bread(block 162) failed [ 51.556224][ T5105] FAT-fs (loop2): Directory bread(block 163) failed [ 51.565453][ T5105] FAT-fs (loop2): Directory bread(block 164) failed [ 51.572212][ T5105] FAT-fs (loop2): Directory bread(block 165) failed [ 51.592337][ T5105] FAT-fs (loop2): Directory bread(block 166) failed [ 51.605504][ T5105] FAT-fs (loop2): Directory bread(block 167) failed [ 51.614477][ T5105] FAT-fs (loop2): Directory bread(block 168) failed [ 51.621445][ T5105] FAT-fs (loop2): Directory bread(block 169) failed [ 51.653477][ T5105] FAT-fs (loop2): Directory bread(block 162) failed [ 51.660105][ T5105] FAT-fs (loop2): Directory bread(block 163) failed [ 51.676155][ T5105] syz.2.713: attempt to access beyond end of device [ 51.676155][ T5105] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 51.692256][ T5105] syz.2.713: attempt to access beyond end of device [ 51.692256][ T5105] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 51.770282][ T5129] loop3: detected capacity change from 0 to 512 [ 51.778198][ T5129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.779348][ T5081] syz.0.700 (5081) used greatest stack depth: 5904 bytes left [ 51.791120][ T5129] EXT4-fs (loop3): 1 truncate cleaned up [ 51.802027][ T5129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.815207][ T5129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.899041][ T5137] loop0: detected capacity change from 0 to 128 [ 52.405755][ T5153] loop3: detected capacity change from 0 to 128 [ 52.423208][ T5153] FAT-fs (loop3): Directory bread(block 162) failed [ 52.430203][ T5153] FAT-fs (loop3): Directory bread(block 163) failed [ 52.437522][ T5153] FAT-fs (loop3): Directory bread(block 164) failed [ 52.444377][ T5153] FAT-fs (loop3): Directory bread(block 165) failed [ 52.451245][ T5153] FAT-fs (loop3): Directory bread(block 166) failed [ 52.463056][ T5153] FAT-fs (loop3): Directory bread(block 167) failed [ 52.469882][ T5153] FAT-fs (loop3): Directory bread(block 168) failed [ 52.477057][ T5153] FAT-fs (loop3): Directory bread(block 169) failed [ 52.511002][ T5153] FAT-fs (loop3): Directory bread(block 162) failed [ 52.524838][ T5120] 9pnet_fd: p9_fd_create_tcp (5120): problem connecting socket to 127.0.0.1 [ 52.542620][ T5153] FAT-fs (loop3): Directory bread(block 163) failed [ 52.550267][ T5153] syz.3.723: attempt to access beyond end of device [ 52.550267][ T5153] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 52.564489][ T5153] syz.3.723: attempt to access beyond end of device [ 52.564489][ T5153] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 52.659361][ T5162] loop2: detected capacity change from 0 to 512 [ 52.698909][ T5162] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.755831][ T5162] EXT4-fs (loop2): 1 truncate cleaned up [ 52.762063][ T5162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.779625][ T5162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.953652][ T5183] loop0: detected capacity change from 0 to 128 [ 52.962576][ T5183] FAT-fs (loop0): Directory bread(block 162) failed [ 52.971561][ T5183] FAT-fs (loop0): Directory bread(block 163) failed [ 53.032599][ T5183] FAT-fs (loop0): Directory bread(block 164) failed [ 53.033899][ T5156] syz.1.725 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 53.040500][ T5183] FAT-fs (loop0): Directory bread(block 165) failed [ 53.049059][ T5156] CPU: 1 UID: 0 PID: 5156 Comm: syz.1.725 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 53.049162][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.049175][ T5156] Call Trace: [ 53.049182][ T5156] [ 53.049191][ T5156] __dump_stack+0x1d/0x30 [ 53.049212][ T5156] dump_stack_lvl+0xe8/0x140 [ 53.049232][ T5156] dump_stack+0x15/0x1b [ 53.049248][ T5156] dump_header+0x81/0x220 [ 53.049346][ T5156] oom_kill_process+0x334/0x3f0 [ 53.049393][ T5156] out_of_memory+0x979/0xb80 [ 53.049454][ T5156] try_charge_memcg+0x5e6/0x9e0 [ 53.049482][ T5156] charge_memcg+0x51/0xc0 [ 53.049514][ T5156] __mem_cgroup_charge+0x28/0xb0 [ 53.049558][ T5156] shmem_get_folio_gfp+0x470/0xd60 [ 53.049616][ T5156] shmem_fallocate+0x57c/0x840 [ 53.049644][ T5156] vfs_fallocate+0x410/0x450 [ 53.049666][ T5156] __x64_sys_fallocate+0x7a/0xd0 [ 53.049728][ T5156] x64_sys_call+0x2b88/0x2fb0 [ 53.049772][ T5156] do_syscall_64+0xd2/0x200 [ 53.049790][ T5156] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.049816][ T5156] ? clear_bhb_loop+0x40/0x90 [ 53.049837][ T5156] ? clear_bhb_loop+0x40/0x90 [ 53.049859][ T5156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.049917][ T5156] RIP: 0033:0x7fac7e7be929 [ 53.049938][ T5156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.049955][ T5156] RSP: 002b:00007fac7ce06038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 53.049974][ T5156] RAX: ffffffffffffffda RBX: 00007fac7e9e6080 RCX: 00007fac7e7be929 [ 53.049987][ T5156] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000005 [ 53.050034][ T5156] RBP: 00007fac7e840b39 R08: 0000000000000000 R09: 0000000000000000 [ 53.050046][ T5156] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000000 [ 53.050058][ T5156] R13: 0000000000000000 R14: 00007fac7e9e6080 R15: 00007fff842c58a8 [ 53.050090][ T5156] [ 53.050096][ T5156] memory: usage 307200kB, limit 307200kB, failcnt 1131 [ 53.083498][ T5183] FAT-fs (loop0): Directory bread(block 166) failed [ 53.084318][ T5156] memory+swap: usage 334144kB, limit 9007199254740988kB, failcnt 0 [ 53.088733][ T5183] FAT-fs (loop0): Directory bread(block 167) failed [ 53.093250][ T5156] kmem: usage 238424kB, limit 9007199254740988kB, failcnt 0 [ 53.093266][ T5156] Memory cgroup stats for /syz1: [ 53.093957][ T5156] cache 70164480 [ 53.113016][ T5183] FAT-fs (loop0): Directory bread(block 168) failed [ 53.116171][ T5156] rss 262144 [ 53.123711][ T5183] FAT-fs (loop0): Directory bread(block 169) failed [ 53.125511][ T5156] shmem 70037504 [ 53.168037][ T5183] FAT-fs (loop0): Directory bread(block 162) failed [ 53.170010][ T5156] mapped_file 126976 [ 53.170020][ T5156] dirty 8192 [ 53.170026][ T5156] writeback 118784 [ 53.176998][ T5183] FAT-fs (loop0): Directory bread(block 163) failed [ 53.180333][ T5156] workingset_refault_anon 0 [ 53.180342][ T5156] workingset_refault_file 0 [ 53.180349][ T5156] swap 27590656 [ 53.180355][ T5156] swapcached 0 [ 53.180362][ T5156] pgpgin 37504 [ 53.224983][ T5183] syz.0.737: attempt to access beyond end of device [ 53.224983][ T5183] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 53.232806][ T5156] pgpgout 20310 [ 53.232817][ T5156] pgfault 20853 [ 53.232833][ T5156] pgmajfault 3 [ 53.245326][ T5183] syz.0.737: attempt to access beyond end of device [ 53.245326][ T5183] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 53.248808][ T5156] inactive_anon 25976832 [ 53.400382][ T5156] active_anon 44322816 [ 53.404489][ T5156] inactive_file 126976 [ 53.408561][ T5156] active_file 0 [ 53.412024][ T5156] unevictable 0 [ 53.415675][ T5156] hierarchical_memory_limit 314572800 [ 53.421059][ T5156] hierarchical_memsw_limit 9223372036854771712 [ 53.427251][ T5156] total_cache 70164480 [ 53.431325][ T5156] total_rss 262144 [ 53.435271][ T5156] total_shmem 70037504 [ 53.439330][ T5156] total_mapped_file 126976 [ 53.443790][ T5156] total_dirty 8192 [ 53.447502][ T5156] total_writeback 118784 [ 53.451737][ T5156] total_workingset_refault_anon 0 [ 53.456825][ T5156] total_workingset_refault_file 0 [ 53.461846][ T5156] total_swap 27590656 [ 53.465894][ T5156] total_swapcached 0 [ 53.469784][ T5156] total_pgpgin 37504 [ 53.473727][ T5156] total_pgpgout 20310 [ 53.477742][ T5156] total_pgfault 20853 [ 53.481723][ T5156] total_pgmajfault 3 [ 53.485733][ T5156] total_inactive_anon 25976832 [ 53.490497][ T5156] total_active_anon 44322816 [ 53.495125][ T5156] total_inactive_file 126976 [ 53.495517][ T5155] syz.1.725 (5155) used greatest stack depth: 5880 bytes left [ 53.499779][ T5156] total_active_file 0 [ 53.499787][ T5156] total_unevictable 0 [ 53.499794][ T5156] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.725,pid=5154,uid=0 [ 53.529807][ T5156] Memory cgroup out of memory: Killed process 5156 (syz.1.725) total-vm:95800kB, anon-rss:1064kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 53.715364][ T5215] loop1: detected capacity change from 0 to 128 [ 54.046352][ T3382] kernel write not supported for file bpf-prog (pid: 3382 comm: kworker/1:3) [ 54.531796][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 54.658932][ T5288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.783'. [ 54.822009][ T5240] syz.4.760 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 54.833034][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: syz.4.760 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 54.833062][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.833075][ T5240] Call Trace: [ 54.833082][ T5240] [ 54.833090][ T5240] __dump_stack+0x1d/0x30 [ 54.833132][ T5240] dump_stack_lvl+0xe8/0x140 [ 54.833152][ T5240] dump_stack+0x15/0x1b [ 54.833170][ T5240] dump_header+0x81/0x220 [ 54.833229][ T5240] oom_kill_process+0x334/0x3f0 [ 54.833257][ T5240] out_of_memory+0x979/0xb80 [ 54.833288][ T5240] try_charge_memcg+0x5e6/0x9e0 [ 54.833312][ T5240] charge_memcg+0x51/0xc0 [ 54.833396][ T5240] __mem_cgroup_charge+0x28/0xb0 [ 54.833424][ T5240] filemap_add_folio+0x4e/0x1b0 [ 54.833455][ T5240] __filemap_get_folio+0x31e/0x6b0 [ 54.833486][ T5240] filemap_fault+0x41d/0xb40 [ 54.833554][ T5240] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 54.833655][ T5240] ? __rcu_read_lock+0x37/0x50 [ 54.833742][ T5240] __do_fault+0xb9/0x200 [ 54.833766][ T5240] handle_mm_fault+0xd69/0x2be0 [ 54.833822][ T5240] ? mas_walk+0xf2/0x120 [ 54.833852][ T5240] do_user_addr_fault+0x636/0x1090 [ 54.833879][ T5240] ? __flush_smp_call_function_queue+0x643/0x8e0 [ 54.833959][ T5240] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 54.834012][ T5240] exc_page_fault+0x62/0xa0 [ 54.834035][ T5240] asm_exc_page_fault+0x26/0x30 [ 54.834052][ T5240] RIP: 0033:0x7f58ec71f3e6 [ 54.834065][ T5240] Code: 07 0f 87 54 fe ff ff e9 47 fe ff ff 4c 89 fe 48 89 df e8 3d 74 fe ff 48 8b 43 38 44 01 7b 28 4c 29 f8 41 83 e4 06 48 89 43 38 00 00 0f 84 35 fe ff ff b8 01 00 00 00 0f 1f 40 00 48 8b 53 38 [ 54.834079][ T5240] RSP: 002b:00007ffe34527c70 EFLAGS: 00010202 [ 54.834092][ T5240] RAX: 0000001b32b165d0 RBX: 00007f58ed595720 RCX: ffffffff85618a8c [ 54.834113][ T5240] RDX: 0000001b32520220 RSI: 0000000000000004 RDI: 00007f58ed595720 [ 54.834129][ T5240] RBP: 000000000000055b R08: 00007f58ebeaf080 R09: 00007f58eca52000 [ 54.834139][ T5240] R10: 00007f58ebeaf008 R11: 0000000000000001 R12: 0000000000000004 [ 54.834149][ T5240] R13: 00007f58eca66038 R14: 0000000000002ad8 R15: 0000000000000004 [ 54.834161][ T5240] ? xa_load+0xac/0xe0 [ 54.834249][ T5240] [ 54.834256][ T5240] memory: usage 307200kB, limit 307200kB, failcnt 244 [ 54.842896][ T3382] kernel write not supported for file bpf-prog (pid: 3382 comm: kworker/1:3) [ 54.846657][ T5240] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 55.070137][ T5240] kmem: usage 274068kB, limit 9007199254740988kB, failcnt 0 [ 55.077433][ T5240] Memory cgroup stats for /syz4: [ 55.077751][ T5240] cache 33558528 [ 55.086366][ T5240] rss 368640 [ 55.089637][ T5240] shmem 33558528 [ 55.093353][ T5240] mapped_file 0 [ 55.096938][ T5240] dirty 0 [ 55.099873][ T5240] writeback 0 [ 55.103226][ T5240] workingset_refault_anon 0 [ 55.107867][ T5240] workingset_refault_file 91 [ 55.112524][ T5240] swap 0 [ 55.115399][ T5240] swapcached 0 [ 55.118770][ T5240] pgpgin 18830 [ 55.122146][ T5240] pgpgout 10547 [ 55.125650][ T5240] pgfault 20864 [ 55.129232][ T5240] pgmajfault 9 [ 55.132648][ T5240] inactive_anon 32522240 [ 55.136946][ T5240] active_anon 1404928 [ 55.140938][ T5240] inactive_file 0 [ 55.144653][ T5240] active_file 0 [ 55.148213][ T5240] unevictable 0 [ 55.151668][ T5240] hierarchical_memory_limit 314572800 [ 55.157073][ T5240] hierarchical_memsw_limit 9223372036854771712 [ 55.163296][ T5240] total_cache 33558528 [ 55.167351][ T5240] total_rss 368640 [ 55.171047][ T5240] total_shmem 33558528 [ 55.175133][ T5240] total_mapped_file 0 [ 55.179140][ T5240] total_dirty 0 [ 55.182654][ T5240] total_writeback 0 [ 55.186524][ T5240] total_workingset_refault_anon 0 [ 55.191523][ T5240] total_workingset_refault_file 91 [ 55.196651][ T5240] total_swap 0 [ 55.200098][ T5240] total_swapcached 0 [ 55.204048][ T5240] total_pgpgin 18830 [ 55.207931][ T5240] total_pgpgout 10547 [ 55.211907][ T5240] total_pgfault 20864 [ 55.215961][ T5240] total_pgmajfault 9 [ 55.219858][ T5240] total_inactive_anon 32522240 [ 55.224631][ T5240] total_active_anon 1404928 [ 55.229192][ T5240] total_inactive_file 0 [ 55.233369][ T5240] total_active_file 0 [ 55.237365][ T5240] total_unevictable 0 [ 55.241325][ T5240] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.760,pid=5240,uid=0 [ 55.255875][ T5240] Memory cgroup out of memory: Killed process 5240 (syz.4.760) total-vm:95800kB, anon-rss:1064kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 55.293402][ T5317] loop0: detected capacity change from 0 to 128 [ 55.472657][ T5320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 55.514555][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 55.514569][ T29] audit: type=1400 audit(1750815760.125:849): avc: denied { read } for pid=5323 comm="syz.4.801" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.544127][ T29] audit: type=1400 audit(1750815760.125:850): avc: denied { open } for pid=5323 comm="syz.4.801" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.569687][ T5324] sd 0:0:1:0: device reset [ 55.574551][ T29] audit: type=1400 audit(1750815760.185:851): avc: denied { ioctl } for pid=5323 comm="syz.4.801" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.749774][ T5332] sd 0:0:1:0: device reset [ 55.774441][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 55.920560][ T5347] 9pnet: p9_errstr2errno: server reported unknown error þLì²¼ O€ [ 56.002160][ T5350] syz.2.810 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 56.011965][ T5350] CPU: 0 UID: 0 PID: 5350 Comm: syz.2.810 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 56.012012][ T5350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.012025][ T5350] Call Trace: [ 56.012032][ T5350] [ 56.012038][ T5350] __dump_stack+0x1d/0x30 [ 56.012059][ T5350] dump_stack_lvl+0xe8/0x140 [ 56.012080][ T5350] dump_stack+0x15/0x1b [ 56.012095][ T5350] dump_header+0x81/0x220 [ 56.012140][ T5350] oom_kill_process+0x334/0x3f0 [ 56.012185][ T5350] out_of_memory+0x979/0xb80 [ 56.012213][ T5350] try_charge_memcg+0x5e6/0x9e0 [ 56.012249][ T5350] charge_memcg+0x51/0xc0 [ 56.012288][ T5350] __mem_cgroup_charge+0x28/0xb0 [ 56.012350][ T5350] shmem_get_folio_gfp+0x470/0xd60 [ 56.012395][ T5350] shmem_fallocate+0x57c/0x840 [ 56.012423][ T5350] vfs_fallocate+0x410/0x450 [ 56.012442][ T5350] __x64_sys_fallocate+0x7a/0xd0 [ 56.012463][ T5350] x64_sys_call+0x2b88/0x2fb0 [ 56.012512][ T5350] do_syscall_64+0xd2/0x200 [ 56.012530][ T5350] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.012555][ T5350] ? clear_bhb_loop+0x40/0x90 [ 56.012575][ T5350] ? clear_bhb_loop+0x40/0x90 [ 56.012597][ T5350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.012653][ T5350] RIP: 0033:0x7fca3809e929 [ 56.012667][ T5350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.012683][ T5350] RSP: 002b:00007fca366e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 56.012703][ T5350] RAX: ffffffffffffffda RBX: 00007fca382c6080 RCX: 00007fca3809e929 [ 56.012717][ T5350] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000005 [ 56.012731][ T5350] RBP: 00007fca38120b39 R08: 0000000000000000 R09: 0000000000000000 [ 56.012744][ T5350] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000000 [ 56.012805][ T5350] R13: 0000000000000000 R14: 00007fca382c6080 R15: 00007fffc02a41c8 [ 56.012820][ T5350] [ 56.207487][ T5350] memory: usage 307196kB, limit 307200kB, failcnt 1586 [ 56.214626][ T5350] memory+swap: usage 326924kB, limit 9007199254740988kB, failcnt 0 [ 56.222555][ T5350] kmem: usage 254824kB, limit 9007199254740988kB, failcnt 0 [ 56.229902][ T5350] Memory cgroup stats for /syz2: [ 56.260837][ T5350] cache 53321728 [ 56.269429][ T5350] rss 421888 [ 56.272972][ T5350] shmem 53190656 [ 56.276655][ T5350] mapped_file 65536 [ 56.280643][ T29] audit: type=1400 audit(1750815760.885:852): avc: denied { bind } for pid=5357 comm="syz.3.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.280668][ T29] audit: type=1400 audit(1750815760.885:853): avc: denied { name_bind } for pid=5357 comm="syz.3.826" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.299761][ T5350] dirty 0 [ 56.299770][ T5350] writeback 0 [ 56.321355][ T29] audit: type=1400 audit(1750815760.885:854): avc: denied { node_bind } for pid=5357 comm="syz.3.826" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 56.324313][ T5350] workingset_refault_anon 5 [ 56.353595][ T5350] workingset_refault_file 49 [ 56.358252][ T5350] swap 20201472 [ 56.361714][ T5350] swapcached 12288 [ 56.365458][ T5350] pgpgin 45060 [ 56.368832][ T5350] pgpgout 31936 [ 56.372326][ T5350] pgfault 23075 [ 56.375805][ T5350] pgmajfault 7 [ 56.379171][ T5350] inactive_anon 3670016 [ 56.383432][ T5350] active_anon 49954816 [ 56.387488][ T5350] inactive_file 8192 [ 56.391368][ T5350] active_file 122880 [ 56.395333][ T5350] unevictable 0 [ 56.398838][ T5350] hierarchical_memory_limit 314572800 [ 56.404228][ T5350] hierarchical_memsw_limit 9223372036854771712 [ 56.410372][ T5350] total_cache 53321728 [ 56.414471][ T5350] total_rss 421888 [ 56.418199][ T5350] total_shmem 53190656 [ 56.422260][ T5350] total_mapped_file 65536 [ 56.426596][ T5350] total_dirty 0 [ 56.430049][ T5350] total_writeback 0 [ 56.433915][ T5350] total_workingset_refault_anon 5 [ 56.439006][ T5350] total_workingset_refault_file 49 [ 56.444128][ T5350] total_swap 20201472 [ 56.448138][ T5350] total_swapcached 12288 [ 56.452366][ T5350] total_pgpgin 45060 [ 56.456268][ T5350] total_pgpgout 31936 [ 56.460297][ T5350] total_pgfault 23075 [ 56.464333][ T5350] total_pgmajfault 7 [ 56.468224][ T5350] total_inactive_anon 3670016 [ 56.472909][ T5350] total_active_anon 49954816 [ 56.477495][ T5350] total_inactive_file 8192 [ 56.481923][ T5350] total_active_file 122880 [ 56.486425][ T5350] total_unevictable 0 [ 56.490509][ T5350] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.810,pid=5344,uid=0 [ 56.505098][ T5350] Memory cgroup out of memory: Killed process 5344 (syz.2.810) total-vm:95800kB, anon-rss:1044kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 56.583706][ T5365] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 56.595424][ T29] audit: type=1400 audit(1750815761.195:855): avc: denied { cpu } for pid=5363 comm="syz.3.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 56.614648][ T5365] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 56.631255][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 56.750076][ T5378] loop3: detected capacity change from 0 to 128 [ 56.759665][ T5380] 9pnet: p9_errstr2errno: server reported unknown error þLì²¼ O€ [ 56.868672][ T5393] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 56.893140][ T29] audit: type=1400 audit(1750815761.505:856): avc: denied { map } for pid=5394 comm="syz.0.834" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.918110][ T29] audit: type=1400 audit(1750815761.505:857): avc: denied { read write } for pid=5394 comm="syz.0.834" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.976576][ T29] audit: type=1400 audit(1750815761.585:858): avc: denied { read } for pid=5394 comm="syz.0.834" path="socket:[10382]" dev="sockfs" ino=10382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.935535][ T5506] loop1: detected capacity change from 0 to 128 [ 58.288886][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 58.410200][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 59.520833][ T5613] loop4: detected capacity change from 0 to 128 [ 59.718860][ T5467] bridge_slave_1: left allmulticast mode [ 59.724667][ T5467] bridge_slave_1: left promiscuous mode [ 59.730401][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.767547][ T5467] bridge_slave_0: left allmulticast mode [ 59.773318][ T5467] bridge_slave_0: left promiscuous mode [ 59.779038][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.925356][ T5467] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.934945][ T5467] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.944405][ T5467] $Hÿ (unregistering): Released all slaves [ 59.989620][ T5644] xt_connbytes: Forcing CT accounting to be enabled [ 59.999160][ T5644] Cannot find add_set index 0 as target [ 60.074847][ T5467] hsr_slave_0: left promiscuous mode [ 60.087373][ T5467] hsr_slave_1: left promiscuous mode [ 60.093452][ T5467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.101086][ T5467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.169268][ T5467] team0 (unregistering): Port device team_slave_1 removed [ 60.181635][ T5467] team0 (unregistering): Port device team_slave_0 removed [ 60.566385][ T5620] chnl_net:caif_netlink_parms(): no params data found [ 60.598122][ T5634] chnl_net:caif_netlink_parms(): no params data found [ 60.605696][ T5467] IPVS: stop unused estimator thread 0... [ 60.674170][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.681326][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.695329][ T5620] bridge_slave_0: entered allmulticast mode [ 60.703361][ T5620] bridge_slave_0: entered promiscuous mode [ 60.722941][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.730081][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.742397][ T5620] bridge_slave_1: entered allmulticast mode [ 60.750116][ T5620] bridge_slave_1: entered promiscuous mode [ 60.786294][ T5681] xt_connbytes: Forcing CT accounting to be enabled [ 60.795170][ T5681] Cannot find add_set index 0 as target [ 60.795602][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.837833][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.844994][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.856241][ T5634] bridge_slave_0: entered allmulticast mode [ 60.862916][ T5634] bridge_slave_0: entered promiscuous mode [ 60.870563][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.882288][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.889407][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.898713][ T5634] bridge_slave_1: entered allmulticast mode [ 60.905632][ T5634] bridge_slave_1: entered promiscuous mode [ 60.927109][ T5620] team0: Port device team_slave_0 added [ 60.936783][ T5620] team0: Port device team_slave_1 added [ 60.978043][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.985409][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.011613][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.024917][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.034531][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.041483][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.067543][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.083579][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.108034][ T5634] team0: Port device team_slave_0 added [ 61.119291][ T5634] team0: Port device team_slave_1 added [ 61.126983][ T5620] hsr_slave_0: entered promiscuous mode [ 61.133156][ T5620] hsr_slave_1: entered promiscuous mode [ 61.138876][ T5620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.146483][ T5620] Cannot create hsr debugfs directory [ 61.162213][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.169226][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.195368][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.210327][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.217369][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.243380][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.279438][ T5634] hsr_slave_0: entered promiscuous mode [ 61.285545][ T5634] hsr_slave_1: entered promiscuous mode [ 61.291267][ T5634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.298840][ T5634] Cannot create hsr debugfs directory [ 61.374184][ T5620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.382982][ T5620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.391544][ T5620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.402001][ T5620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.419746][ T5634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 61.429116][ T5634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 61.437749][ T5634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 61.446589][ T5634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 61.492437][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.504895][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.513903][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.524534][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.531779][ T5470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.540222][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.547292][ T5470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.558743][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.570210][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.577301][ T5470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.589651][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.596795][ T5470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.665328][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.687292][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.792054][ T5620] veth0_vlan: entered promiscuous mode [ 61.806193][ T5620] veth1_vlan: entered promiscuous mode [ 61.813145][ T5634] veth0_vlan: entered promiscuous mode [ 61.821791][ T5634] veth1_vlan: entered promiscuous mode [ 61.838030][ T5620] veth0_macvtap: entered promiscuous mode [ 61.846305][ T5620] veth1_macvtap: entered promiscuous mode [ 61.857621][ T5634] veth0_macvtap: entered promiscuous mode [ 61.866319][ T5634] veth1_macvtap: entered promiscuous mode [ 61.874864][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.887739][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.896639][ T5620] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.905622][ T5620] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.914500][ T5620] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.923271][ T5620] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.936335][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.951132][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 61.951221][ T29] audit: type=1400 audit(1750815766.565:954): avc: denied { mounton } for pid=5620 comm="syz-executor" path="/root/syzkaller.qe1vK3/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.956620][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.963816][ T29] audit: type=1400 audit(1750815766.565:955): avc: denied { mount } for pid=5620 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.987817][ T5634] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.988838][ T29] audit: type=1400 audit(1750815766.565:956): avc: denied { mount } for pid=5620 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.010788][ T5634] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.019454][ T29] audit: type=1400 audit(1750815766.565:957): avc: denied { mounton } for pid=5620 comm="syz-executor" path="/root/syzkaller.qe1vK3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.041249][ T5634] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.049895][ T29] audit: type=1400 audit(1750815766.565:958): avc: denied { mounton } for pid=5620 comm="syz-executor" path="/root/syzkaller.qe1vK3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.076488][ T5634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.121570][ T29] audit: type=1400 audit(1750815766.565:959): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.142073][ T29] audit: type=1400 audit(1750815766.595:960): avc: denied { mounton } for pid=5620 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.164936][ T29] audit: type=1400 audit(1750815766.595:961): avc: denied { mount } for pid=5620 comm="syz-executor" name="/" dev="gadgetfs" ino=4131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.221809][ T29] audit: type=1400 audit(1750815766.825:962): avc: denied { create } for pid=5738 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.269116][ T5740] IPVS: stopping master sync thread 5743 ... [ 62.274457][ T5747] loop5: detected capacity change from 0 to 128 [ 62.275441][ T5743] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 62.302976][ T29] audit: type=1326 audit(1750815766.855:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.5.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc4f3558e7 code=0x7ffc0000 [ 62.601407][ T5764] xt_connbytes: Forcing CT accounting to be enabled [ 62.612281][ T5764] Cannot find add_set index 0 as target [ 63.179274][ T5782] IPVS: Error connecting to the multicast addr [ 63.225689][ T5789] loop3: detected capacity change from 0 to 512 [ 63.245357][ T5789] EXT4-fs (loop3): 1 orphan inode deleted [ 63.251661][ T5789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.264374][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 63.276103][ T5789] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.302235][ T5789] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.344494][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.497043][ T5815] IPVS: Error connecting to the multicast addr [ 63.500675][ T5820] loop6: detected capacity change from 0 to 128 [ 63.527174][ C1] hrtimer: interrupt took 27912 ns [ 63.546464][ T5825] loop1: detected capacity change from 0 to 512 [ 63.574687][ T5825] EXT4-fs (loop1): 1 orphan inode deleted [ 63.580921][ T5825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.594961][ T5422] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 1 [ 63.608179][ T5825] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.627698][ T5825] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.658199][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 63.686287][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.129551][ T41] ================================================================== [ 64.137639][ T41] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 64.147098][ T41] [ 64.149406][ T41] write to 0xffff888109c1b7f2 of 3 bytes by task 5829 on cpu 1: [ 64.157019][ T41] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 64.162900][ T41] generic_perform_write+0x2c2/0x490 [ 64.168190][ T41] __generic_file_write_iter+0x9e/0x120 [ 64.173718][ T41] generic_file_write_iter+0x8d/0x2f0 [ 64.179072][ T41] iter_file_splice_write+0x5ef/0x970 [ 64.184433][ T41] direct_splice_actor+0x153/0x2a0 [ 64.189533][ T41] splice_direct_to_actor+0x30f/0x680 [ 64.194899][ T41] do_splice_direct+0xda/0x150 [ 64.199840][ T41] do_sendfile+0x380/0x650 [ 64.204239][ T41] __x64_sys_sendfile64+0x105/0x150 [ 64.209422][ T41] x64_sys_call+0xb39/0x2fb0 [ 64.213998][ T41] do_syscall_64+0xd2/0x200 [ 64.218492][ T41] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.224388][ T41] [ 64.226699][ T41] read to 0xffff888109c1b600 of 512 bytes by task 41 on cpu 0: [ 64.234222][ T41] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 64.240101][ T41] generic_perform_write+0x2c2/0x490 [ 64.245387][ T41] shmem_file_write_iter+0xc5/0xf0 [ 64.250489][ T41] lo_rw_aio+0x6ea/0x7a0 [ 64.254716][ T41] loop_process_work+0x52d/0xa60 [ 64.259639][ T41] loop_workfn+0x31/0x40 [ 64.263872][ T41] process_scheduled_works+0x4ce/0x9d0 [ 64.269320][ T41] worker_thread+0x582/0x770 [ 64.273902][ T41] kthread+0x486/0x510 [ 64.277952][ T41] ret_from_fork+0xda/0x150 [ 64.282437][ T41] ret_from_fork_asm+0x1a/0x30 [ 64.287187][ T41] [ 64.289557][ T41] Reported by Kernel Concurrency Sanitizer on: [ 64.295691][ T41] CPU: 0 UID: 0 PID: 41 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(voluntary) [ 64.308087][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.318147][ T41] Workqueue: loop6 loop_workfn SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.322912][ T41] ================================================================== [ 64.953574][ T5422] bridge_slave_1: left allmulticast mode [ 64.959229][ T5422] bridge_slave_1: left promiscuous mode [ 64.964863][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.972683][ T5422] bridge_slave_0: left allmulticast mode [ 64.978319][ T5422] bridge_slave_0: left promiscuous mode [ 64.984135][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.044267][ T5422] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.053418][ T5422] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.062225][ T5422] $Hÿ (unregistering): Released all slaves [ 65.136179][ T5422] hsr_slave_0: left promiscuous mode [ 65.141743][ T5422] hsr_slave_1: left promiscuous mode [ 65.147415][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.155091][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.183532][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 65.194108][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 65.536127][ T5422] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.594628][ T5422] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.644633][ T5422] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.704565][ T5422] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.774433][ T5422] bridge_slave_1: left allmulticast mode [ 65.780100][ T5422] bridge_slave_1: left promiscuous mode [ 65.785784][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.793519][ T5422] bridge_slave_0: left allmulticast mode [ 65.799237][ T5422] bridge_slave_0: left promiscuous mode [ 65.805008][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.876298][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.886364][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.895997][ T5422] bond0 (unregistering): Released all slaves [ 65.904438][ T5852] syz2: Port: 1 Link DOWN [ 65.946517][ T5422] hsr_slave_0: left promiscuous mode [ 65.952155][ T5422] hsr_slave_1: left promiscuous mode [ 65.957783][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.965262][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.972914][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.980406][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.991032][ T5422] veth1_macvtap: left promiscuous mode [ 65.996624][ T5422] veth0_macvtap: left promiscuous mode [ 66.002181][ T5422] veth1_vlan: left promiscuous mode [ 66.007586][ T5422] veth0_vlan: left promiscuous mode [ 66.058679][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 66.067880][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 66.080264][ T41] smc: removing ib device syz2 [ 66.356272][ T5422] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.404692][ T5422] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.454519][ T5422] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.494438][ T5422] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.565156][ T5422] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.614777][ T5422] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.665108][ T5422] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.715106][ T5422] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.774225][ T5422] bridge_slave_1: left allmulticast mode [ 66.779879][ T5422] bridge_slave_1: left promiscuous mode [ 66.785697][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.793797][ T5422] bridge_slave_0: left allmulticast mode [ 66.799439][ T5422] bridge_slave_0: left promiscuous mode [ 66.805155][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.813518][ T5422] bridge_slave_1: left allmulticast mode [ 66.819150][ T5422] bridge_slave_1: left promiscuous mode [ 66.824852][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.832766][ T5422] bridge_slave_0: left allmulticast mode [ 66.838474][ T5422] bridge_slave_0: left promiscuous mode [ 66.844187][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.924694][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.934524][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.944043][ T5422] bond0 (unregistering): Released all slaves [ 67.005017][ T5422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.014671][ T5422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.024171][ T5422] bond0 (unregistering): Released all slaves [ 67.076663][ T5422] hsr_slave_0: left promiscuous mode [ 67.082220][ T5422] hsr_slave_1: left promiscuous mode [ 67.088008][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.095458][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.103309][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.110778][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.119811][ T5422] hsr_slave_0: left promiscuous mode [ 67.125737][ T5422] hsr_slave_1: left promiscuous mode [ 67.131372][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.138817][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.146498][ T5422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.154150][ T5422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.165769][ T5422] veth1_macvtap: left promiscuous mode [ 67.171237][ T5422] veth0_macvtap: left promiscuous mode [ 67.176797][ T5422] veth1_vlan: left promiscuous mode [ 67.182075][ T5422] veth0_vlan: left promiscuous mode [ 67.187787][ T5422] veth1_macvtap: left promiscuous mode [ 67.193359][ T5422] veth0_macvtap: left promiscuous mode [ 67.198834][ T5422] veth1_vlan: left promiscuous mode [ 67.204303][ T5422] veth0_vlan: left promiscuous mode [ 67.282670][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 67.291969][ T5422] team0 (unregistering): Port device team_slave_0 removed [ 67.339886][ T5422] team0 (unregistering): Port device team_slave_1 removed [ 67.349328][ T5422] team0 (unregistering): Port device team_slave_0 removed