last executing test programs: 1m2.532875138s ago: executing program 2 (id=968): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9c) 1m2.43451942s ago: executing program 2 (id=971): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 1m2.213187953s ago: executing program 2 (id=972): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001f00)=""/4090, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 1m2.179401243s ago: executing program 2 (id=976): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$eJzs2k2LW2UUB/Bz25HWKdNEfKMF8UE3urk0Wblw0UFaEAOKNoIK0lvnRkMyyZAbBiLSzs6tH8G1uHQnSL/AbPwEXbibzSy7EK+0KZ0X4mIQJ9j5/TY5cPKH5+FcLmdx9979YXPQq/JeMY1zWRYr12MnHmbRjHNxPuZ24u277zx47ZPPPv9gvdO58XFKN9dvtdoppcuv//bFdz+/cX966dNfLv96IXabX+7tt//YfWX3yt5ft77pV6lfpdF4mop0ZzyeFneGZdroV4M8pY+GZVGVqT+qysmRfm843tqapWK0sba6NSmrKhWjWRqUszQdp+lkloqvi/4o5Xme1laDf6P708O6jv36udtR1/XzP8al+7H2IBqRvZCyF69nL9/OXt3JruzXdWPZR+U/Yf5nm/mfbeZ/th1a6i5GbH6/3d3uzn/n/fVe9GMYZVyLRvwZjx6TJ+b1zfc7N66lx5qRNu89yd/b7p4/mm9FI5qL8615Ph3NX4jVw/l2NOKlxfn2wvzFeOvNQ/k8GvH7VzGOYWzEo+xB/m4rpfc+7BzLX338PwCAZ02enlq4v+X5P/Xn+RPsh8f2q5W4urLcuxNRzb4dFMNhOVEoFIqnxbLfTJyGg6Ev+yQAAAAAAAAAAACcxGl8TrjsOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w9/BwAA///8j/If") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 1m2.145434544s ago: executing program 2 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 1m2.126815014s ago: executing program 2 (id=979): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2a8, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x294, 0x1, [@m_skbedit={0x1f0, 0x19, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x7, 0x101}}]}, {0x191, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa033e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41b23e07582b3128621edbf17703923cea8b079f042f9924f50ce06116fc38e34430e0a4b60e7144cccb31d0a0457e528dd782264fec2417bd1b18aa82a223185cee31b2989e534df535b22243ec2971118b283cebb23130d1622a675cabf8788d71473f98949841ab1c34d28257f4b10e6eec198365490620753627951432cf82875ec0fccc70181d74035e141d4bbdd59571d5c3fa68b6a9365539b7e734e38e7083fe43b3104f03a618c99dc38b7b166c71dcda72645a7ddd09b867d20ef1d0f2154c6c2af7bfc13509c92a055f4ba6134cf5124359fccca93ea9ef30597c542c2e259bbd96051f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x3c, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16fb, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x64, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0x2d, 0x6, "5c284c3a3976241974df53e1d3b1cccfebd3f123dec3f372dd21566159734af29ce5d14ed6f7073420"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2a8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 47.096658405s ago: executing program 32 (id=979): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2a8, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x294, 0x1, [@m_skbedit={0x1f0, 0x19, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x7, 0x101}}]}, {0x191, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa033e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41b23e07582b3128621edbf17703923cea8b079f042f9924f50ce06116fc38e34430e0a4b60e7144cccb31d0a0457e528dd782264fec2417bd1b18aa82a223185cee31b2989e534df535b22243ec2971118b283cebb23130d1622a675cabf8788d71473f98949841ab1c34d28257f4b10e6eec198365490620753627951432cf82875ec0fccc70181d74035e141d4bbdd59571d5c3fa68b6a9365539b7e734e38e7083fe43b3104f03a618c99dc38b7b166c71dcda72645a7ddd09b867d20ef1d0f2154c6c2af7bfc13509c92a055f4ba6134cf5124359fccca93ea9ef30597c542c2e259bbd96051f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x3c, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16fb, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x64, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0x2d, 0x6, "5c284c3a3976241974df53e1d3b1cccfebd3f123dec3f372dd21566159734af29ce5d14ed6f7073420"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2a8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 488.996162ms ago: executing program 5 (id=3112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 488.219242ms ago: executing program 4 (id=3122): r0 = syz_io_uring_setup(0x83d, &(0x7f0000000540)={0x0, 0xa9ee, 0x400, 0x100003, 0x96}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffeffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x10b280}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 484.958602ms ago: executing program 3 (id=3113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076844268cb89e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 418.883863ms ago: executing program 5 (id=3125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r1) 418.247243ms ago: executing program 5 (id=3116): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) symlinkat(0x0, 0xffffffffffffffff, 0x0) 405.869043ms ago: executing program 5 (id=3119): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 405.488023ms ago: executing program 3 (id=3120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000) 341.247924ms ago: executing program 3 (id=3121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000001000000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "902d03", 0x0, 0x0, 0x0, @remote, @local}}}}, 0x0) 327.177254ms ago: executing program 0 (id=3124): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1, 0x3}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108) 301.505675ms ago: executing program 3 (id=3126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 300.872675ms ago: executing program 4 (id=3128): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61143c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x2, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) 281.095545ms ago: executing program 3 (id=3129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f000054f000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0) 264.883825ms ago: executing program 4 (id=3130): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 264.351305ms ago: executing program 0 (id=3140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r2, 0x400, 0x0) 263.943665ms ago: executing program 1 (id=3131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 232.869826ms ago: executing program 1 (id=3132): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x400}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x4, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4000bf}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x100}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe6f1}, {}, {0x0, 0x0, 0x0, 0x0, 0x3e0d905c, 0x6}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x57, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x8, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {0x2}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {0x0, 0x1}, {}, {0x523e, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 206.435756ms ago: executing program 1 (id=3133): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) symlinkat(0x0, 0xffffffffffffffff, 0x0) 205.827636ms ago: executing program 0 (id=3144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 173.020747ms ago: executing program 0 (id=3134): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x5, @local, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x80010003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) 171.165956ms ago: executing program 1 (id=3135): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x102, 0x0) 138.108847ms ago: executing program 0 (id=3136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000004c0)="01000722625a900ede290f00015b097ead85847837353d2dbad05d", 0x1b, r1) 137.806507ms ago: executing program 1 (id=3137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x1000000}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x8000) 104.984188ms ago: executing program 5 (id=3138): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) getgid() 91.203238ms ago: executing program 1 (id=3139): r0 = syz_io_uring_setup(0x83d, &(0x7f0000000540)={0x0, 0xa9ee, 0x400, 0x100003, 0x96}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xffeffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x10b280}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 90.633388ms ago: executing program 0 (id=3141): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x801000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_setup(0x20, &(0x7f0000001140)=<r1=>0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, 0x0}]) 69.920148ms ago: executing program 5 (id=3142): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r1=>0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0xfffffffffffffffe, {0x0, 0xf0, 0x1}}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) 69.242748ms ago: executing program 4 (id=3143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getrlimit(0x1, &(0x7f0000000000)) 438.999µs ago: executing program 4 (id=3145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x400}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x4, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4000bf}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x100}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe6f1}, {}, {0x0, 0x0, 0x0, 0x0, 0x3e0d905c, 0x6}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x57, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x8, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {0x2}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {0x0, 0x1}, {}, {0x523e, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 289.96µs ago: executing program 3 (id=3146): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 0s ago: executing program 4 (id=3147): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r1, 0x5, 0x20, 0xd, 0xb}, &(0x7f0000000240)=0x18) kernel console output (not intermixed with test programs): e from 0 to 128 [ 65.516002][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.597607][ T5646] loop4: detected capacity change from 0 to 128 [ 66.155862][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.327491][ T5674] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1001'. [ 66.537659][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 66.537675][ T29] audit: type=1326 audit(1743473578.900:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.571867][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.581074][ T29] audit: type=1326 audit(1743473578.930:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.605643][ T29] audit: type=1326 audit(1743473578.930:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.630229][ T29] audit: type=1326 audit(1743473578.930:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.674971][ T29] audit: type=1326 audit(1743473579.020:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.699805][ T29] audit: type=1326 audit(1743473579.020:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.725276][ T29] audit: type=1326 audit(1743473579.020:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.753577][ T29] audit: type=1326 audit(1743473579.020:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.778755][ T29] audit: type=1326 audit(1743473579.020:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 66.835465][ T29] audit: type=1400 audit(1743473579.170:539): avc: denied { create } for pid=5703 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.929589][ T5725] loop3: detected capacity change from 0 to 256 [ 66.981704][ T5729] loop1: detected capacity change from 0 to 128 [ 66.996757][ T5729] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.095552][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.103174][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.181639][ T3303] block device autoloading is deprecated and will be removed. [ 67.214494][ T5756] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1040'. [ 67.224438][ T5756] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1040'. [ 67.235223][ T5752] loop3: detected capacity change from 0 to 2048 [ 67.273429][ T5761] loop1: detected capacity change from 0 to 256 [ 67.281011][ T5752] loop3: p1 < > p4 [ 67.286645][ T5762] loop4: detected capacity change from 0 to 128 [ 67.301992][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.305219][ T5762] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.331908][ T5752] loop3: p4 size 8388608 extends beyond EOD, truncated [ 67.469064][ T5776] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 67.477393][ T5776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1058'. [ 67.610221][ T36] net_ratelimit: 2 callbacks suppressed [ 67.610241][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.632805][ T5786] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1052'. [ 67.703282][ T5792] SELinux: policydb version 1779250385 does not match my version range 15-34 [ 67.717277][ T5792] SELinux: failed to load policy [ 67.750957][ T5794] loop3: detected capacity change from 0 to 128 [ 67.767429][ T5794] ext4 filesystem being mounted at /228/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.036488][ T5800] loop4: detected capacity change from 0 to 2048 [ 68.053829][ T5763] syz.0.1039 (5763) used greatest stack depth: 8232 bytes left [ 68.115689][ T5804] loop0: detected capacity change from 0 to 256 [ 68.130716][ T5800] loop4: p1 < > p4 [ 68.135404][ T5800] loop4: p4 size 8388608 extends beyond EOD, truncated [ 68.238431][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.429843][ T5788] Set syz1 is full, maxelem 65536 reached [ 68.582288][ T5827] loop3: detected capacity change from 0 to 128 [ 68.626589][ T5827] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.699300][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.834985][ T5842] __nla_validate_parse: 1 callbacks suppressed [ 68.835004][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 68.852068][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 68.875919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.885944][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.894556][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.903931][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.917346][ T5842] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.926968][ T5842] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.936272][ T5842] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.945995][ T5842] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.404767][ T5869] random: crng reseeded on system resumption [ 69.557529][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 69.568101][ T5877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1094'. [ 69.829517][ T5893] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 69.925894][ T5855] Set syz1 is full, maxelem 65536 reached [ 69.932618][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.021970][ T5900] netlink: 'syz.3.1103': attribute type 1 has an invalid length. [ 70.056916][ T5906] random: crng reseeded on system resumption [ 70.083985][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'. [ 70.093493][ T5907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1105'. [ 70.298243][ T5921] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 71.061803][ T5959] netem: change failed [ 71.072725][ T5961] Cannot find del_set index 0 as target [ 71.135027][ T5965] capability: warning: `syz.4.1134' uses 32-bit capabilities (legacy support in use) [ 71.187879][ T5969] SELinux: failed to load policy [ 71.338822][ T5992] netem: change failed [ 71.863637][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 71.863677][ T29] audit: type=1400 audit(1743473584.220:560): avc: denied { setopt } for pid=6004 comm="syz.4.1153" laddr=fe80::b lport=51830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.924427][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1154'. [ 71.935111][ T29] audit: type=1400 audit(1743473584.250:561): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 71.959460][ T29] audit: type=1400 audit(1743473584.250:562): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.984619][ T29] audit: type=1400 audit(1743473584.250:563): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.008176][ T29] audit: type=1400 audit(1743473584.250:564): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.031775][ T29] audit: type=1400 audit(1743473584.250:565): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.058116][ T29] audit: type=1400 audit(1743473584.270:566): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.084055][ T29] audit: type=1400 audit(1743473584.270:567): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.112348][ T29] audit: type=1400 audit(1743473584.270:568): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.141308][ T29] audit: type=1400 audit(1743473584.280:569): avc: denied { prog_load } for pid=6010 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 72.258722][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 72.268435][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1162'. [ 72.278060][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1162'. [ 72.344758][ T6034] 9pnet: Could not find request transport: 0xffffffffffffffff [ 72.487765][ T6047] 9pnet: Could not find request transport: 0xffffffffffffffff [ 72.730964][ T6084] program syz.4.1188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.884381][ T6099] veth1_macvtap: left promiscuous mode [ 73.150053][ T6114] loop4: detected capacity change from 0 to 512 [ 73.189473][ T6114] EXT4-fs mount: 32 callbacks suppressed [ 73.189493][ T6114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.216257][ T6114] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.288380][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.307566][ T6129] veth1_macvtap: left promiscuous mode [ 73.630358][ T6154] loop1: detected capacity change from 0 to 512 [ 73.670002][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.698723][ T6154] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.764694][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.819700][ T6161] ������: renamed from vlan1 (while UP) [ 73.873919][ T6169] veth1_macvtap: left promiscuous mode [ 74.796179][ T6186] __nla_validate_parse: 4 callbacks suppressed [ 74.796195][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1233'. [ 74.851452][ T6192] loop1: detected capacity change from 0 to 512 [ 74.887022][ T6192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.922620][ T6192] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.973765][ T6205] ������: renamed from vlan1 (while UP) [ 74.988387][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1246'. [ 75.052235][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.235306][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1245'. [ 75.357756][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1257'. [ 75.663334][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1271'. [ 75.750542][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'. [ 75.905500][ C1] hrtimer: interrupt took 36628 ns [ 76.261264][ T6338] veth1_macvtap: entered promiscuous mode [ 76.268553][ T6338] macsec1: entered allmulticast mode [ 76.274404][ T6338] veth1_macvtap: entered allmulticast mode [ 76.617277][ T6372] veth1_macvtap: entered promiscuous mode [ 76.627253][ T6372] macsec2: entered allmulticast mode [ 76.633018][ T6372] veth1_macvtap: entered allmulticast mode [ 76.798629][ T6391] loop1: detected capacity change from 0 to 512 [ 76.810673][ T6394] loop3: detected capacity change from 0 to 512 [ 76.818879][ T6391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.843769][ T6394] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.873148][ T6391] EXT4-fs (loop1): 1 orphan inode deleted [ 76.880616][ T6391] EXT4-fs (loop1): 1 truncate cleaned up [ 76.916255][ T6394] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.927649][ T6391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.966024][ T6394] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #16: comm syz.3.1324: casefold flag without casefold feature [ 76.991632][ T6394] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1324: couldn't read orphan inode 16 (err -117) [ 77.017716][ T6394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.052208][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 77.052224][ T29] audit: type=1400 audit(1743473589.410:649): avc: denied { remount } for pid=6392 comm="syz.3.1324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.081494][ T6394] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.099698][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.117557][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.305812][ T6414] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 77.312937][ T6414] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 77.321336][ T6414] vhci_hcd vhci_hcd.0: Device attached [ 77.378249][ T6415] vhci_hcd: connection closed [ 77.378484][ T59] vhci_hcd: stop threads [ 77.388099][ T59] vhci_hcd: release socket [ 77.392666][ T59] vhci_hcd: disconnect device [ 77.405848][ T29] audit: type=1400 audit(1743473589.770:650): avc: denied { read write } for pid=6424 comm="syz.4.1338" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 77.456954][ T29] audit: type=1400 audit(1743473589.790:651): avc: denied { open } for pid=6424 comm="syz.4.1338" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 77.484319][ T29] audit: type=1326 audit(1743473589.820:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6418 comm="syz.0.1335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f6511d169 code=0x0 [ 77.509226][ T29] audit: type=1326 audit(1743473589.840:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 77.534485][ T29] audit: type=1326 audit(1743473589.840:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 77.563007][ T29] audit: type=1326 audit(1743473589.920:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 77.587873][ T29] audit: type=1326 audit(1743473589.920:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 77.612831][ T29] audit: type=1326 audit(1743473589.920:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 77.639944][ T29] audit: type=1326 audit(1743473590.000:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 77.761112][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.770026][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.363330][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 78.419855][ T6464] loop4: detected capacity change from 0 to 512 [ 78.428698][ T6464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.447322][ T6464] EXT4-fs (loop4): 1 orphan inode deleted [ 78.453466][ T6464] EXT4-fs (loop4): 1 truncate cleaned up [ 78.473653][ T6464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.542813][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.559011][ T6474] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 78.565812][ T6474] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.573725][ T6474] vhci_hcd vhci_hcd.0: Device attached [ 78.608500][ T6476] vhci_hcd: connection closed [ 78.608698][ T37] vhci_hcd: stop threads [ 78.617741][ T37] vhci_hcd: release socket [ 78.622181][ T37] vhci_hcd: disconnect device [ 78.630603][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 78.656464][ T6481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.672398][ T6481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.836336][ T6489] syz.3.1378: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 78.851954][ T6489] CPU: 0 UID: 0 PID: 6489 Comm: syz.3.1378 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 78.852009][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.852026][ T6489] Call Trace: [ 78.852033][ T6489] <TASK> [ 78.852043][ T6489] dump_stack_lvl+0xf6/0x150 [ 78.852074][ T6489] dump_stack+0x15/0x1a [ 78.852097][ T6489] warn_alloc+0x145/0x1b0 [ 78.852141][ T6489] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 78.852179][ T6489] __vmalloc_node_range_noprof+0xac/0xe80 [ 78.852208][ T6489] ? __pfx_futex_wake_mark+0x10/0x10 [ 78.852230][ T6489] ? __rcu_read_unlock+0x4e/0x70 [ 78.852256][ T6489] ? avc_has_perm_noaudit+0x1cc/0x210 [ 78.852327][ T6489] ? should_fail_ex+0x31/0x270 [ 78.852355][ T6489] ? should_failslab+0x8f/0xb0 [ 78.852452][ T6489] vmalloc_user_noprof+0x59/0x70 [ 78.852484][ T6489] ? xskq_create+0x79/0xd0 [ 78.852509][ T6489] xskq_create+0x79/0xd0 [ 78.852546][ T6489] xsk_init_queue+0x82/0xd0 [ 78.852570][ T6489] xsk_setsockopt+0x37d/0x550 [ 78.852588][ T6489] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.852606][ T6489] __sys_setsockopt+0x187/0x200 [ 78.852629][ T6489] __x64_sys_setsockopt+0x66/0x80 [ 78.852654][ T6489] x64_sys_call+0x2a09/0x2e10 [ 78.852719][ T6489] do_syscall_64+0xc9/0x1c0 [ 78.852740][ T6489] ? clear_bhb_loop+0x25/0x80 [ 78.852778][ T6489] ? clear_bhb_loop+0x25/0x80 [ 78.852807][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.852835][ T6489] RIP: 0033:0x7fb2209ad169 [ 78.852930][ T6489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.853030][ T6489] RSP: 002b:00007fb21f00f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.853054][ T6489] RAX: ffffffffffffffda RBX: 00007fb220bc5fa0 RCX: 00007fb2209ad169 [ 78.853069][ T6489] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 78.853084][ T6489] RBP: 00007fb220a2e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 78.853099][ T6489] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.853113][ T6489] R13: 0000000000000000 R14: 00007fb220bc5fa0 R15: 00007ffe95394248 [ 78.853136][ T6489] </TASK> [ 78.853145][ T6489] Mem-Info: [ 79.078311][ T6489] active_anon:3574 inactive_anon:17 isolated_anon:0 [ 79.078311][ T6489] active_file:17039 inactive_file:2176 isolated_file:0 [ 79.078311][ T6489] unevictable:0 dirty:232 writeback:0 [ 79.078311][ T6489] slab_reclaimable:2806 slab_unreclaimable:17674 [ 79.078311][ T6489] mapped:28091 shmem:260 pagetables:915 [ 79.078311][ T6489] sec_pagetables:0 bounce:0 [ 79.078311][ T6489] kernel_misc_reclaimable:0 [ 79.078311][ T6489] free:1890520 free_pcp:7856 free_cma:0 [ 79.124318][ T6489] Node 0 active_anon:14296kB inactive_anon:68kB active_file:68156kB inactive_file:8704kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112364kB dirty:928kB writeback:0kB shmem:1040kB writeback_tmp:0kB kernel_stack:2896kB pagetables:3776kB sec_pagetables:0kB all_unreclaimable? no [ 79.155565][ T6489] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 79.168079][ T6500] loop4: detected capacity change from 0 to 256 [ 79.183918][ T6489] lowmem_reserve[]: 0 2884 7862 7862 [ 79.196163][ T6489] Node 0 DMA32 free:2949876kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953408kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 79.225286][ T6489] lowmem_reserve[]: 0 0 4978 4978 [ 79.230644][ T6489] Node 0 Normal free:4596380kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14412kB inactive_anon:68kB active_file:68156kB inactive_file:8704kB unevictable:0kB writepending:928kB present:5242880kB managed:5098248kB mlocked:0kB bounce:0kB free_pcp:27820kB local_pcp:8872kB free_cma:0kB [ 79.261163][ T6489] lowmem_reserve[]: 0 0 0 0 [ 79.265798][ T6489] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 79.278699][ T6489] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 4*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949876kB [ 79.294820][ T6489] Node 0 Normal: 65*4kB (UM) 41*8kB (UME) 54*16kB (UME) 234*32kB (UM) 181*64kB (UME) 61*128kB (UM) 42*256kB (UM) 15*512kB (UM) 9*1024kB (M) 3*2048kB (M) 1107*4096kB (UM) = 4596396kB [ 79.313318][ T6489] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 79.322819][ T6489] 19554 total pagecache pages [ 79.327676][ T6489] 54 pages in swap cache [ 79.332270][ T6489] Free swap = 124508kB [ 79.336621][ T6489] Total swap = 124996kB [ 79.340967][ T6489] 2097051 pages RAM [ 79.345006][ T6489] 0 pages HighMem/MovableOnly [ 79.349798][ T6489] 80297 pages reserved [ 79.477826][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 79.489661][ T6510] loop1: detected capacity change from 0 to 2048 [ 79.501481][ T6510] EXT4-fs: Ignoring removed nobh option [ 79.557824][ T6510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.612065][ T6510] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.687378][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.747727][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'. [ 79.857175][ T6558] loop4: detected capacity change from 0 to 2048 [ 79.890319][ T6558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.925497][ T6568] autofs4:pid:6568:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc0189378) [ 79.940282][ T6568] autofs4:pid:6568:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189378) [ 80.009074][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.308171][ T6582] chnl_net:caif_netlink_parms(): no params data found [ 80.342333][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.349514][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.356988][ T6582] bridge_slave_0: entered allmulticast mode [ 80.363640][ T6582] bridge_slave_0: entered promiscuous mode [ 80.371789][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.378986][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.388023][ T6582] bridge_slave_1: entered allmulticast mode [ 80.394792][ T6582] bridge_slave_1: entered promiscuous mode [ 80.409137][ T387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.426304][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.437500][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.457858][ T6582] team0: Port device team_slave_0 added [ 80.464531][ T6582] team0: Port device team_slave_1 added [ 80.472980][ T387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.493860][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.500997][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.527203][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.538656][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.545885][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.572607][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.588816][ T387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.613829][ T6582] hsr_slave_0: entered promiscuous mode [ 80.620902][ T6582] hsr_slave_1: entered promiscuous mode [ 80.627288][ T6582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.634950][ T6582] Cannot create hsr debugfs directory [ 80.644063][ T387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.717903][ T6582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.735135][ T6582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.743838][ T387] bridge_slave_1: left allmulticast mode [ 80.749690][ T387] bridge_slave_1: left promiscuous mode [ 80.755622][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.763793][ T387] bridge_slave_0: left allmulticast mode [ 80.769595][ T387] bridge_slave_0: left promiscuous mode [ 80.775450][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.847937][ T387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.858372][ T387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.868583][ T387] bond0 (unregistering): Released all slaves [ 80.877755][ T6582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.890114][ T6582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.930468][ T387] hsr_slave_0: left promiscuous mode [ 80.936832][ T387] hsr_slave_1: left promiscuous mode [ 80.942560][ T387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.950114][ T387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.958218][ T387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.965923][ T387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.975334][ T387] veth1_macvtap: left promiscuous mode [ 80.981216][ T387] veth0_macvtap: left promiscuous mode [ 80.986871][ T387] veth1_vlan: left promiscuous mode [ 80.992278][ T387] veth0_vlan: left promiscuous mode [ 81.057295][ T387] team0 (unregistering): Port device team_slave_1 removed [ 81.068606][ T387] team0 (unregistering): Port device team_slave_0 removed [ 81.103122][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.117355][ T6582] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.138969][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.146600][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.155417][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.163045][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.215198][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.311039][ T6582] veth0_vlan: entered promiscuous mode [ 81.319293][ T6582] veth1_vlan: entered promiscuous mode [ 81.336454][ T6582] veth0_macvtap: entered promiscuous mode [ 81.344084][ T6582] veth1_macvtap: entered promiscuous mode [ 81.354423][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.365687][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.376045][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.387833][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.398187][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.408930][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.419202][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.429960][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.440961][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.452430][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.463325][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.473618][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.484550][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.494807][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.505575][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.515820][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.526670][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.537372][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.547277][ T6582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.556153][ T6582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.565428][ T6582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.574543][ T6582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.619909][ T6615] autofs4:pid:6615:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc0189378) [ 81.635063][ T6615] autofs4:pid:6615:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189378) [ 81.697542][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'. [ 81.827154][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 81.861246][ T6656] loop1: detected capacity change from 0 to 256 [ 81.887813][ T6656] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 81.942339][ T6661] tmpfs: Bad value for 'mpol' [ 82.052476][ T6683] loop4: detected capacity change from 0 to 256 [ 82.061653][ T6681] set match dimension is over the limit! [ 82.079268][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 82.079283][ T29] audit: type=1400 audit(1743473594.440:737): avc: denied { ioctl } for pid=6685 comm="syz.5.1444" path="socket:[14254]" dev="sockfs" ino=14254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.129450][ T6683] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 82.145783][ T6689] netlink: 'syz.0.1445': attribute type 5 has an invalid length. [ 82.231102][ T6702] netlink: 'syz.1.1461': attribute type 5 has an invalid length. [ 82.295542][ T6711] ip6gretap1: entered promiscuous mode [ 82.338440][ T6719] loop5: detected capacity change from 0 to 256 [ 82.349486][ T29] audit: type=1326 audit(1743473594.710:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 82.373413][ T29] audit: type=1326 audit(1743473594.710:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 82.374938][ T6719] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 82.424925][ T29] audit: type=1326 audit(1743473594.760:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 82.449237][ T29] audit: type=1326 audit(1743473594.760:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.1.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 82.501968][ T6728] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1474'. [ 82.516527][ T29] audit: type=1400 audit(1743473594.850:742): avc: denied { connect } for pid=6729 comm="syz.4.1463" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.537082][ T29] audit: type=1400 audit(1743473594.850:743): avc: denied { write } for pid=6729 comm="syz.4.1463" laddr=fe80::a8aa:aaff:feaa:aa16 lport=5 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.603194][ T6735] netlink: 'syz.3.1465': attribute type 5 has an invalid length. [ 82.750357][ T6755] loop3: detected capacity change from 0 to 256 [ 82.764138][ T6756] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1477'. [ 82.786134][ T6755] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 82.829059][ T29] audit: type=1326 audit(1743473595.190:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.4.1479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889154d169 code=0x0 [ 82.856041][ T6762] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1490'. [ 82.870285][ T6766] netlink: 'syz.5.1482': attribute type 5 has an invalid length. [ 82.939072][ T29] audit: type=1400 audit(1743473595.300:745): avc: denied { create } for pid=6774 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.961077][ T29] audit: type=1400 audit(1743473595.320:746): avc: denied { write } for pid=6774 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.308139][ T6815] loop5: detected capacity change from 0 to 128 [ 83.347740][ T6815] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.378020][ T6815] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.455610][ T6582] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.577608][ T6836] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 83.721122][ T6862] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 83.828210][ T6878] loop4: detected capacity change from 0 to 128 [ 83.842365][ T6878] EXT4-fs: Ignoring removed nobh option [ 83.851896][ T6880] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 83.870798][ T6878] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.900417][ T6878] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.930139][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.968251][ T6891] loop5: detected capacity change from 0 to 512 [ 83.975267][ T6891] EXT4-fs: Ignoring removed orlov option [ 83.997553][ T6891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.010455][ T6891] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.033741][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.051746][ T6896] loop4: detected capacity change from 0 to 128 [ 84.071116][ T6896] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.085589][ T6896] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.125501][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.366783][ T6914] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 84.399710][ T6918] loop5: detected capacity change from 0 to 128 [ 84.407008][ T6918] EXT4-fs: Ignoring removed nobh option [ 84.414402][ T6918] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.427276][ T6918] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.450250][ T6920] loop4: detected capacity change from 0 to 8192 [ 84.457422][ T6582] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.460123][ T6920] syz.4.1553: attempt to access beyond end of device [ 84.460123][ T6920] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 84.480131][ T6920] Buffer I/O error on dev loop4, logical block 57847, async page read [ 84.506094][ T6923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1554'. [ 84.605570][ T6926] loop5: detected capacity change from 0 to 8192 [ 84.628404][ T6926] syz.5.1565: attempt to access beyond end of device [ 84.628404][ T6926] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 84.642206][ T6926] Buffer I/O error on dev loop5, logical block 57847, async page read [ 84.803338][ T6937] loop3: detected capacity change from 0 to 8192 [ 84.816785][ T6937] syz.3.1569: attempt to access beyond end of device [ 84.816785][ T6937] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 84.831281][ T6937] Buffer I/O error on dev loop3, logical block 57847, async page read [ 84.940001][ T6956] loop3: detected capacity change from 0 to 128 [ 84.947629][ T6956] EXT4-fs: Ignoring removed nobh option [ 84.958702][ T6956] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.973040][ T6956] ext4 filesystem being mounted at /329/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.996105][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.552132][ T6984] loop5: detected capacity change from 0 to 1024 [ 85.581645][ T6984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.626120][ T6984] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 85.637766][ T6984] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.650154][ T6984] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 85.658752][ T6984] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.665660][ T6984] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.1580: Inode bitmap for bg 0 marked uninitialized [ 85.682274][ T6984] EXT4-fs (loop5): Remounting filesystem read-only [ 85.692887][ T6984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.725149][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.832524][ T6995] serio: Serial port ttyS3 [ 85.852125][ T6996] loop4: detected capacity change from 0 to 1764 [ 85.895011][ T7003] loop5: detected capacity change from 0 to 1024 [ 85.928004][ T7008] SELinux: policydb version -1694734552 does not match my version range 15-34 [ 85.952113][ T7008] SELinux: failed to load policy [ 85.973417][ T7003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.003596][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.046600][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 86.098400][ T7016] loop1: detected capacity change from 0 to 8192 [ 86.156467][ T7016] loop1: p2 p3 p4 [ 86.160635][ T7016] loop1: p2 size 130943 extends beyond EOD, truncated [ 86.181425][ T7016] loop1: p3 size 16776960 extends beyond EOD, truncated [ 86.190928][ T7016] loop1: p4 size 3599499392 extends beyond EOD, truncated [ 86.278324][ T7057] SELinux: policydb version -1694734552 does not match my version range 15-34 [ 86.290216][ T7057] SELinux: failed to load policy [ 86.382486][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 86.514919][ T7083] loop1: detected capacity change from 0 to 512 [ 86.527880][ T7083] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.543711][ T7083] EXT4-fs (loop1): mount failed [ 86.817007][ T7109] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 86.994985][ T7126] loop1: detected capacity change from 0 to 512 [ 87.019357][ T7124] loop4: detected capacity change from 0 to 8192 [ 87.027367][ T7126] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 87.038975][ T7126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 87.047880][ T7126] System zones: 1-12 [ 87.052299][ T7126] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.061637][ T7126] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1642: bg 0: block 296: padding at end of block bitmap is not set [ 87.081041][ T7126] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 87.091352][ T7124] loop4: p2 p3 p4 [ 87.093116][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 87.093136][ T29] audit: type=1326 audit(1743473599.460:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 87.095507][ T7126] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1642: invalid indirect mapped block 12 (level 1) [ 87.128612][ T29] audit: type=1326 audit(1743473599.470:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 87.150148][ T7126] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1642: invalid indirect mapped block 2 (level 2) [ 87.167867][ T7124] loop4: p2 size 130943 extends beyond EOD, truncated [ 87.190150][ T7126] EXT4-fs (loop1): 1 truncate cleaned up [ 87.197420][ T7126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 87.211260][ T7124] loop4: p3 size 16776960 extends beyond EOD, truncated [ 87.222476][ T7124] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 87.243587][ T29] audit: type=1326 audit(1743473599.600:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 87.268673][ T29] audit: type=1326 audit(1743473599.600:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.5.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 87.356091][ T7126] EXT4-fs error (device loop1): ext4_map_blocks:672: inode #2: block 5: comm syz.1.1642: lblock 0 mapped to illegal pblock 5 (length 1) [ 87.386535][ T7126] EXT4-fs warning (device loop1): dx_probe:793: inode #2: lblock 0: comm syz.1.1642: error -117 reading directory block [ 87.411709][ T7126] EXT4-fs error (device loop1): ext4_map_blocks:672: inode #2: block 5: comm syz.1.1642: lblock 0 mapped to illegal pblock 5 (length 1) [ 87.436121][ T7126] EXT4-fs warning (device loop1): dx_probe:793: inode #2: lblock 0: comm syz.1.1642: error -117 reading directory block [ 87.466351][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 87.489213][ T7147] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 87.497507][ T29] audit: type=1400 audit(1743473599.850:793): avc: denied { write } for pid=7148 comm="syz.1.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.518009][ T29] audit: type=1400 audit(1743473599.850:794): avc: denied { name_connect } for pid=7148 comm="syz.1.1649" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 87.609783][ T29] audit: type=1400 audit(1743473599.970:795): avc: denied { mount } for pid=7161 comm="syz.1.1658" name="/" dev="ramfs" ino=15981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.633539][ T7159] loop4: detected capacity change from 0 to 2048 [ 87.647721][ T7159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.663500][ T29] audit: type=1400 audit(1743473600.030:796): avc: denied { append } for pid=7158 comm="syz.4.1657" path="/335/file0/cpu.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.945832][ T7159] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1657: bg 0: block 234: padding at end of block bitmap is not set [ 87.986003][ T7159] EXT4-fs (loop4): Remounting filesystem read-only [ 88.017520][ T29] audit: type=1400 audit(1743473600.380:797): avc: denied { write } for pid=7167 comm="syz.0.1660" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 88.017530][ T3379] kernel write not supported for file /sg0 (pid: 3379 comm: kworker/0:4) [ 88.092820][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 88.159843][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.228800][ T29] audit: type=1400 audit(1743473600.590:798): avc: denied { read write } for pid=7180 comm="syz.0.1667" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.273328][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.281627][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.290488][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.296205][ T7184] loop3: detected capacity change from 0 to 512 [ 88.299480][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.314039][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.318030][ T7184] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 88.322276][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.341081][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.349998][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.359791][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.366392][ T7184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 88.368478][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.377659][ T7184] System zones: [ 88.386456][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.386488][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.386510][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.386538][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.386564][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.386626][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.390510][ T7184] 1-12 [ 88.399205][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.407670][ T7184] [ 88.407811][ T7184] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.416443][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.435450][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.445556][ T7184] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1670: bg 0: block 296: padding at end of block bitmap is not set [ 88.446252][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.446281][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.454217][ T7184] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.456807][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.471722][ T7188] loop4: detected capacity change from 0 to 1024 [ 88.479826][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.495753][ T7184] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1670: invalid indirect mapped block 12 (level 1) [ 88.502290][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.512254][ T7184] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1670: invalid indirect mapped block 2 (level 2) [ 88.519777][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.530642][ T7184] EXT4-fs (loop3): 1 truncate cleaned up [ 88.534726][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.543574][ T7184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 88.556991][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.557024][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.602717][ T7188] EXT4-fs: Ignoring removed orlov option [ 88.612904][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.612934][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.643486][ T7184] EXT4-fs error (device loop3): ext4_map_blocks:672: inode #2: block 5: comm syz.3.1670: lblock 0 mapped to illegal pblock 5 (length 1) [ 88.643725][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.666178][ T7184] EXT4-fs warning (device loop3): dx_probe:793: inode #2: lblock 0: comm syz.3.1670: error -117 reading directory block [ 88.673938][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.689991][ T7188] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 88.695208][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.695233][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.695255][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.695276][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.708462][ T7189] EXT4-fs error (device loop3): ext4_map_blocks:672: inode #2: block 5: comm syz.3.1670: lblock 0 mapped to illegal pblock 5 (length 1) [ 88.713401][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.733264][ T7189] EXT4-fs warning (device loop3): dx_probe:793: inode #2: lblock 0: comm syz.3.1670: error -117 reading directory block [ 88.737983][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.738009][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.738058][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.786902][ T7188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.791670][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.820853][ T7188] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 88.821678][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.837126][ T7188] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.1669: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 88.843512][ T3379] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 88.871625][ T7188] EXT4-fs (loop4): Remounting filesystem read-only [ 88.878761][ T3379] hid-generic 0000:0000:20000000.0001: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1 [ 88.893640][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 88.906540][ T7195] geneve0: entered allmulticast mode [ 89.001444][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.831651][ T7229] loop5: detected capacity change from 0 to 512 [ 89.838637][ T7229] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 90.005876][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.013979][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.025037][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.035853][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.044148][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.053209][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.062364][ T7240] loop5: detected capacity change from 0 to 512 [ 90.063074][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.078346][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.087316][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.095457][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.105746][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.114549][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.124161][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.133285][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.141609][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.150105][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.158416][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.167023][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.175381][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.184205][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.193346][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.201680][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.209674][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.218178][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.226362][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.234749][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.243595][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.252495][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.261228][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.269636][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.278109][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.286790][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.287294][ T7240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.295061][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.311105][ T7240] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.316847][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.335966][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.343966][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.353119][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.361632][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.372428][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.380530][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.388441][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.396495][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.405263][ T3379] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 90.415657][ T3379] hid-generic 0000:0000:20000000.0002: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1 [ 90.415798][ T7236] EXT4-fs (loop5): shut down requested (0) [ 90.520188][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.678683][ T7274] geneve0: entered allmulticast mode [ 90.742514][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.751611][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.760796][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.769440][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.777861][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.786180][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.794700][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.802955][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.811439][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.819773][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.827845][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.836610][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.844761][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.852967][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.861825][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.870266][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.879232][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.887806][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.896601][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.904808][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.913305][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.921578][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.929561][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.937682][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.946086][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.954149][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.962163][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.970487][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.978718][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.986708][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 90.995218][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.003196][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.011714][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.019679][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.028023][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.036768][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.045275][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.053319][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.061282][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.069287][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.077467][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.085577][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.093719][ T36] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 91.104198][ T36] hid-generic 0000:0000:20000000.0003: hidraw0: <UNKNOWN> HID v0.01 Device [syz0] on syz1 [ 91.221806][ T7293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1722'. [ 91.361087][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 91.452554][ T7311] loop1: detected capacity change from 0 to 1024 [ 91.469925][ T7311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.500878][ T7311] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 91.544988][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.613591][ T7318] loop5: detected capacity change from 0 to 8192 [ 91.666111][ T7318] loop5: p2 p3 p4 [ 91.670224][ T7318] loop5: p2 size 130943 extends beyond EOD, truncated [ 91.678298][ T7318] loop5: p3 size 16776960 extends beyond EOD, truncated [ 91.688053][ T7318] loop5: p4 size 3599499392 extends beyond EOD, truncated [ 92.063902][ T7352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7352 comm=syz.3.1741 [ 92.117300][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 92.117321][ T29] audit: type=1400 audit(1743473604.480:852): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0" dev="tmpfs" ino=1836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.234285][ T7366] loop3: detected capacity change from 0 to 8192 [ 92.296168][ T7366] loop3: p2 p3 p4 [ 92.300202][ T7366] loop3: p2 size 130943 extends beyond EOD, truncated [ 92.312016][ T7366] loop3: p3 size 16776960 extends beyond EOD, truncated [ 92.333521][ T7366] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 92.469212][ T7373] loop3: detected capacity change from 0 to 1024 [ 92.486741][ T7373] EXT4-fs: Ignoring removed orlov option [ 92.507079][ T7373] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 92.534899][ T7375] loop4: detected capacity change from 0 to 8192 [ 92.546074][ T7373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.572607][ T7373] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.1751: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 92.597782][ T7375] loop4: p2 p3 p4 [ 92.601659][ T7375] loop4: p2 size 130943 extends beyond EOD, truncated [ 92.611450][ T7375] loop4: p3 size 16776960 extends beyond EOD, truncated [ 92.614583][ T7373] EXT4-fs (loop3): Remounting filesystem read-only [ 92.619760][ T7375] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 92.653342][ T7385] loop5: detected capacity change from 0 to 2048 [ 92.693677][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.712016][ T7389] loop4: detected capacity change from 0 to 8192 [ 92.722134][ T7385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.738953][ T29] audit: type=1326 audit(1743473605.100:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 92.778450][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.787985][ T29] audit: type=1326 audit(1743473605.100:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 92.811606][ T29] audit: type=1326 audit(1743473605.130:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 92.835321][ T29] audit: type=1326 audit(1743473605.130:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 92.859478][ T29] audit: type=1326 audit(1743473605.130:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 92.883063][ T29] audit: type=1326 audit(1743473605.130:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 92.906606][ T29] audit: type=1326 audit(1743473605.130:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 92.912566][ T7396] loop3: detected capacity change from 0 to 512 [ 92.930298][ T29] audit: type=1326 audit(1743473605.130:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7392 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 92.939323][ T7389] loop4: p2 p3 p4 [ 92.964323][ T7396] journal_path: Non-blockdev passed as './bus' [ 92.970831][ T7396] EXT4-fs: error: could not find journal device path [ 92.979015][ T7389] loop4: p2 size 130943 extends beyond EOD, truncated [ 92.987572][ T7389] loop4: p3 size 16776960 extends beyond EOD, truncated [ 93.005672][ T7389] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 93.172521][ T7418] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7418 comm=syz.4.1771 [ 93.208077][ T29] audit: type=1326 audit(1743473605.570:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.4.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889154d169 code=0x7ffc0000 [ 93.428738][ T7438] loop1: detected capacity change from 0 to 512 [ 93.439860][ T7439] loop4: detected capacity change from 0 to 512 [ 93.446738][ T7438] journal_path: Non-blockdev passed as './bus' [ 93.452976][ T7438] EXT4-fs: error: could not find journal device path [ 93.460872][ T7439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.481894][ T7439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.494940][ T7439] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.538183][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.996152][ T7462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7462 comm=syz.1.1790 [ 94.085022][ T7481] loop3: detected capacity change from 0 to 2048 [ 94.094186][ T7488] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1803'. [ 94.120411][ T7481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.148556][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.224887][ T7498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7498 comm=syz.0.1816 [ 94.296231][ T7511] loop5: detected capacity change from 0 to 512 [ 94.304026][ T7511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.323489][ T7511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.337597][ T7511] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.389810][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.447964][ T7520] loop1: detected capacity change from 0 to 2048 [ 94.469077][ T7520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.490505][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1820'. [ 94.502230][ T7529] Zero length message leads to an empty skb [ 94.520935][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.750029][ T7544] geneve2: entered promiscuous mode [ 94.755450][ T7544] geneve2: entered allmulticast mode [ 94.807740][ T7546] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7546 comm=syz.5.1825 [ 94.848306][ T7548] loop5: detected capacity change from 0 to 512 [ 94.888621][ T7548] EXT4-fs (loop5): 1 truncate cleaned up [ 94.904446][ T7548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.948565][ T7548] EXT4-fs error (device loop5): ext4_add_entry:2419: inode #2: comm syz.5.1826: Directory hole found for htree leaf block 0 [ 95.027311][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.152105][ T7563] loop4: detected capacity change from 0 to 2048 [ 95.187504][ T7563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.209887][ T7573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1841'. [ 95.274111][ T7576] loop5: detected capacity change from 0 to 1024 [ 95.289583][ T7576] EXT4-fs: Ignoring removed orlov option [ 95.303409][ T7576] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 95.328941][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.338993][ T7576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.367949][ T7575] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.1840: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 95.410634][ T7575] EXT4-fs (loop5): Remounting filesystem read-only [ 95.419816][ T7582] loop3: detected capacity change from 0 to 1024 [ 95.469061][ T7582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.492058][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.496457][ T7582] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 95.569305][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.604130][ T7594] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7594 comm=syz.5.1845 [ 95.925885][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1873'. [ 95.941038][ T7628] loop5: detected capacity change from 0 to 1024 [ 95.994555][ T7628] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 96.209800][ T7646] loop1: detected capacity change from 0 to 1024 [ 96.217939][ T7646] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.224497][ T7646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.567705][ T7664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1878'. [ 96.812377][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1895'. [ 97.085942][ T7710] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 97.251805][ T7729] geneve2: entered promiscuous mode [ 97.257315][ T7729] geneve2: entered allmulticast mode [ 97.627816][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 97.627833][ T29] audit: type=1326 audit(1743473609.990:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 97.634458][ T7737] loop3: detected capacity change from 0 to 1024 [ 97.673378][ T7737] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.680296][ T7739] loop5: detected capacity change from 0 to 256 [ 97.686887][ T7737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.696159][ T7739] FAT-fs (loop5): Directory bread(block 1285) failed [ 97.710062][ T29] audit: type=1326 audit(1743473610.020:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 97.734826][ T29] audit: type=1326 audit(1743473610.020:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 97.763488][ T7739] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 97.824182][ T29] audit: type=1326 audit(1743473610.160:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889154d169 code=0x7ffc0000 [ 97.848010][ T29] audit: type=1326 audit(1743473610.160:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889154d169 code=0x7ffc0000 [ 97.900835][ T29] audit: type=1326 audit(1743473610.180:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f889154d169 code=0x7ffc0000 [ 97.929267][ T29] audit: type=1326 audit(1743473610.180:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889154d169 code=0x7ffc0000 [ 97.956667][ T29] audit: type=1326 audit(1743473610.210:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889154d169 code=0x7ffc0000 [ 98.093460][ T29] audit: type=1326 audit(1743473610.440:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7760 comm="syz.0.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 98.118577][ T29] audit: type=1326 audit(1743473610.440:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7760 comm="syz.0.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 98.593443][ T7788] geneve2: entered promiscuous mode [ 98.599273][ T7788] geneve2: entered allmulticast mode [ 98.671576][ T7791] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 98.833549][ T7804] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1947'. [ 98.982227][ T7827] loop5: detected capacity change from 0 to 1024 [ 98.990732][ T7827] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.997414][ T7827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.060721][ T7834] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 99.085122][ T7836] loop5: detected capacity change from 0 to 512 [ 99.094789][ T7836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.120150][ T7836] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.202134][ T7854] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1963'. [ 99.276025][ T7864] loop4: detected capacity change from 0 to 1024 [ 99.284629][ T7864] EXT4-fs: Ignoring removed orlov option [ 99.291257][ T7864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.346185][ T7870] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1983'. [ 99.418332][ T7875] loop5: detected capacity change from 0 to 2048 [ 99.426923][ T7876] loop1: detected capacity change from 0 to 256 [ 99.436860][ T7876] FAT-fs (loop1): Directory bread(block 1285) failed [ 99.445778][ T7876] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 99.756328][ T7907] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1986'. [ 99.953807][ T7925] loop5: detected capacity change from 0 to 1024 [ 100.627921][ T3528] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 100.635578][ T3528] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 100.643541][ T3528] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 100.679460][ T3528] hid-generic 0000:0004:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1 [ 100.888909][ T7977] loop3: detected capacity change from 0 to 8192 [ 100.991561][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 101.007666][ T7984] batadv1: entered allmulticast mode [ 101.020552][ T7984] team0: Port device batadv1 added [ 101.136575][ T8000] sctp: [Deprecated]: syz.4.2031 (pid 8000) Use of int in max_burst socket option deprecated. [ 101.136575][ T8000] Use struct sctp_assoc_value instead [ 101.312657][ T8018] netlink: 'syz.1.2040': attribute type 2 has an invalid length. [ 101.320828][ T8018] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 102.215611][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 102.224823][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2060'. [ 102.342649][ T8073] bond2: entered promiscuous mode [ 102.349083][ T8073] bond2: entered allmulticast mode [ 102.370053][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 102.398509][ T8073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.428234][ T8073] bond2 (unregistering): Released all slaves [ 102.565198][ T8087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'. [ 102.671427][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 102.671449][ T29] audit: type=1400 audit(1743473615.030:965): avc: denied { create } for pid=8097 comm="syz.1.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.730128][ T29] audit: type=1400 audit(1743473615.030:966): avc: denied { ioctl } for pid=8097 comm="syz.1.2077" path="socket:[18410]" dev="sockfs" ino=18410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.755372][ T29] audit: type=1400 audit(1743473615.030:967): avc: denied { setopt } for pid=8097 comm="syz.1.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.775969][ T29] audit: type=1400 audit(1743473615.030:968): avc: denied { write } for pid=8097 comm="syz.1.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.796303][ T29] audit: type=1400 audit(1743473615.070:969): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 102.820474][ T29] audit: type=1400 audit(1743473615.070:970): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.842660][ T29] audit: type=1400 audit(1743473615.070:971): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.868270][ T29] audit: type=1400 audit(1743473615.070:972): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.896415][ T29] audit: type=1326 audit(1743473615.080:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 102.921382][ T29] audit: type=1326 audit(1743473615.080:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8099 comm="syz.5.2078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 103.124288][ T8125] loop5: detected capacity change from 0 to 512 [ 103.157424][ T8125] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2088: Failed to acquire dquot type 1 [ 103.187287][ T8125] EXT4-fs (loop5): 1 truncate cleaned up [ 103.213584][ T8125] EXT4-fs mount: 16 callbacks suppressed [ 103.213613][ T8125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.268934][ T8125] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.334822][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.391138][ T8155] program syz.5.2098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.600418][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2110'. [ 103.693390][ T8202] netlink: 'syz.1.2118': attribute type 1 has an invalid length. [ 103.732356][ T8208] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2120'. [ 103.798982][ T8220] netlink: 'syz.5.2127': attribute type 12 has an invalid length. [ 103.860879][ T8229] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2131'. [ 103.938380][ T8241] loop5: detected capacity change from 0 to 512 [ 103.966195][ T8241] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.007438][ T8241] EXT4-fs (loop5): 1 truncate cleaned up [ 104.013575][ T8241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.073984][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.090296][ T8262] loop4: detected capacity change from 0 to 1024 [ 104.111460][ T8262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.134246][ T8262] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.167247][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.342759][ T8305] IPv6: Can't replace route, no match found [ 104.556216][ T8340] __nla_validate_parse: 1 callbacks suppressed [ 104.556235][ T8340] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2182'. [ 104.618733][ T8350] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 104.625323][ T8350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.632897][ T8350] vhci_hcd vhci_hcd.0: Device attached [ 104.640761][ T8351] vhci_hcd: connection closed [ 104.641544][ T37] vhci_hcd: stop threads [ 104.651124][ T37] vhci_hcd: release socket [ 104.655567][ T37] vhci_hcd: disconnect device [ 104.753597][ T8371] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2195'. [ 104.762839][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2195'. [ 104.772526][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2195'. [ 104.782004][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 104.886695][ T8387] loop4: detected capacity change from 0 to 128 [ 104.955074][ T8396] mmap: syz.0.2207 (8396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.022779][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2214'. [ 105.048261][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 105.111943][ T8423] geneve2: entered promiscuous mode [ 105.118036][ T8423] geneve2: entered allmulticast mode [ 105.245267][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2230'. [ 105.342419][ T8455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2237'. [ 105.536201][ T8492] loop4: detected capacity change from 0 to 512 [ 105.552684][ T8492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.618465][ T8492] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.652109][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2263'. [ 105.664525][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.690871][ T8513] loop5: detected capacity change from 0 to 4096 [ 105.712405][ T8513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.929002][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.566103][ T8560] geneve2: entered promiscuous mode [ 106.571439][ T8560] geneve2: entered allmulticast mode [ 107.008512][ T8608] loop1: detected capacity change from 0 to 128 [ 107.844363][ T8662] loop3: detected capacity change from 0 to 512 [ 107.892946][ T8662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.914611][ T8662] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.930299][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 107.930315][ T29] audit: type=1400 audit(1743473620.290:1116): avc: denied { setattr } for pid=8659 comm="syz.3.2335" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.976597][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.007647][ T8685] IPv6: Can't replace route, no match found [ 108.037151][ T29] audit: type=1326 audit(1743473620.400:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.3.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 108.061003][ T29] audit: type=1326 audit(1743473620.400:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.3.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 108.116714][ T29] audit: type=1326 audit(1743473620.400:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.3.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 108.140504][ T29] audit: type=1326 audit(1743473620.400:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.3.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 108.164168][ T29] audit: type=1326 audit(1743473620.400:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8688 comm="syz.3.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 108.274502][ T8714] loop4: detected capacity change from 0 to 512 [ 108.300108][ T8714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.313245][ T8714] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.344375][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.419934][ T8735] loop1: detected capacity change from 0 to 1024 [ 108.448332][ T8735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.470567][ T8735] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.506288][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.655384][ T8771] loop3: detected capacity change from 0 to 512 [ 108.703385][ T8771] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 108.745150][ T8771] EXT4-fs (loop3): 1 truncate cleaned up [ 108.765255][ T8771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.832105][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.993824][ T29] audit: type=1326 audit(1743473621.350:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 109.017557][ T29] audit: type=1326 audit(1743473621.350:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 109.062547][ T29] audit: type=1326 audit(1743473621.410:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 109.086422][ T29] audit: type=1326 audit(1743473621.410:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6511d169 code=0x7ffc0000 [ 109.121620][ T8839] loop5: detected capacity change from 0 to 512 [ 109.176035][ T8839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.189091][ T8839] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.238912][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.257859][ T8852] IPv6: Can't replace route, no match found [ 109.310877][ T8858] netlink: 'syz.4.2435': attribute type 12 has an invalid length. [ 109.525963][ T8901] netlink: 'syz.0.2443': attribute type 12 has an invalid length. [ 109.562188][ T8903] loop1: detected capacity change from 0 to 512 [ 109.612687][ T8903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.647854][ T8919] __nla_validate_parse: 11 callbacks suppressed [ 109.647872][ T8919] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2454'. [ 109.663369][ T8903] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.679972][ T8917] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 109.734808][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.794345][ T8939] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2464'. [ 109.850508][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2468'. [ 109.876193][ T8954] netlink: 'syz.3.2470': attribute type 1 has an invalid length. [ 110.048290][ T8983] netlink: 'syz.5.2485': attribute type 1 has an invalid length. [ 110.083747][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2484'. [ 110.097146][ T8991] loop5: detected capacity change from 0 to 512 [ 110.127639][ T8991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.160192][ T8991] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.262086][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.379661][ T9026] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2502'. [ 110.485485][ T9037] loop4: detected capacity change from 0 to 512 [ 110.508449][ T9037] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2517: Failed to acquire dquot type 1 [ 110.525288][ T9037] EXT4-fs (loop4): 1 truncate cleaned up [ 110.532976][ T9037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.545846][ T9037] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.598037][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.913638][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2527'. [ 111.190802][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2539'. [ 111.416267][ T9156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2556'. [ 111.433665][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2555'. [ 111.530502][ T9178] loop1: detected capacity change from 0 to 512 [ 111.561388][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 111.627059][ T9178] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2564: Failed to acquire dquot type 1 [ 111.645121][ T9178] EXT4-fs (loop1): 1 truncate cleaned up [ 111.653886][ T9178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.667092][ T9178] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.698487][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.977517][ T9245] program syz.4.2598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.036642][ T9260] program syz.3.2616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.134119][ T9278] program syz.0.2618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.484387][ T9320] loop1: detected capacity change from 0 to 512 [ 112.517117][ T9320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.531721][ T9320] ext4 filesystem being mounted at /547/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.556063][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.622217][ T9331] program syz.1.2621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.909409][ T9357] bond2: entered promiscuous mode [ 112.914667][ T9357] bond2: entered allmulticast mode [ 112.934138][ T9357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.951535][ T9366] netlink: 'syz.4.2648': attribute type 2 has an invalid length. [ 112.952906][ T9357] bond2 (unregistering): Released all slaves [ 112.959424][ T9366] netlink: 'syz.4.2648': attribute type 1 has an invalid length. [ 113.161946][ T9388] bond1: entered promiscuous mode [ 113.167283][ T9388] bond1: entered allmulticast mode [ 113.187139][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 113.187155][ T29] audit: type=1326 audit(1743473625.550:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 113.187774][ T9388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.193390][ T29] audit: type=1326 audit(1743473625.550:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 113.193521][ T29] audit: type=1326 audit(1743473625.550:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 113.270277][ T29] audit: type=1326 audit(1743473625.550:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 113.293732][ T29] audit: type=1326 audit(1743473625.550:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.1.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 113.335539][ T9388] bond1 (unregistering): Released all slaves [ 113.352251][ T9397] sctp: [Deprecated]: syz.1.2671 (pid 9397) Use of int in max_burst socket option deprecated. [ 113.352251][ T9397] Use struct sctp_assoc_value instead [ 113.359287][ T29] audit: type=1400 audit(1743473625.710:1332): avc: denied { bind } for pid=9395 comm="syz.1.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.387506][ T29] audit: type=1400 audit(1743473625.710:1333): avc: denied { name_bind } for pid=9395 comm="syz.1.2671" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 113.409446][ T29] audit: type=1400 audit(1743473625.710:1334): avc: denied { node_bind } for pid=9395 comm="syz.1.2671" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 113.419709][ T9400] netlink: 'syz.3.2660': attribute type 2 has an invalid length. [ 113.431224][ T29] audit: type=1400 audit(1743473625.710:1335): avc: denied { setopt } for pid=9395 comm="syz.1.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.438962][ T9400] netlink: 'syz.3.2660': attribute type 1 has an invalid length. [ 113.470945][ T29] audit: type=1400 audit(1743473625.730:1336): avc: denied { write } for pid=9395 comm="syz.1.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.392017][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 114.399611][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 114.407189][ T10] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 114.418375][ T10] hid-generic 0000:0004:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1 [ 114.674155][ T36] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 114.681680][ T36] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 114.689224][ T36] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 114.702847][ T36] hid-generic 0000:0004:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1 [ 114.835923][ T9505] loop4: detected capacity change from 0 to 8192 [ 114.957003][ T9514] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.975930][ T9514] batadv1: entered allmulticast mode [ 114.981605][ T9514] team0: Port device batadv1 added [ 115.228438][ T3528] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 115.235993][ T3528] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 115.243411][ T3528] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 115.268759][ T3528] hid-generic 0000:0004:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1 [ 115.393021][ T9541] loop1: detected capacity change from 0 to 8192 [ 115.532842][ T9561] loop3: detected capacity change from 0 to 2048 [ 115.581889][ T9570] loop4: detected capacity change from 0 to 512 [ 115.583815][ T9568] sctp: [Deprecated]: syz.5.2739 (pid 9568) Use of int in max_burst socket option deprecated. [ 115.583815][ T9568] Use struct sctp_assoc_value instead [ 115.590282][ T9561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.634851][ T9570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.658744][ T9570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.678559][ T9570] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.742549][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.752100][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.923574][ T9587] bond2: entered promiscuous mode [ 115.928764][ T9587] bond2: entered allmulticast mode [ 115.943740][ T9587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.977108][ T9587] bond2 (unregistering): Released all slaves [ 116.213348][ T9607] loop1: detected capacity change from 0 to 2048 [ 116.249424][ T9607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.288083][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.328321][ T9615] sctp: [Deprecated]: syz.3.2754 (pid 9615) Use of int in max_burst socket option deprecated. [ 116.328321][ T9615] Use struct sctp_assoc_value instead [ 116.450573][ T9629] bond2: entered promiscuous mode [ 116.455846][ T9629] bond2: entered allmulticast mode [ 116.462559][ T9629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.473279][ T9629] bond2 (unregistering): Released all slaves [ 116.566064][ T9641] loop1: detected capacity change from 0 to 512 [ 116.573068][ T9641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.616787][ T9641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.629902][ T9641] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.664629][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.985575][ T9659] __nla_validate_parse: 11 callbacks suppressed [ 116.985594][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2774'. [ 116.991844][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2773'. [ 117.038894][ T9664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 117.045466][ T9664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.053068][ T9664] vhci_hcd vhci_hcd.0: Device attached [ 117.068508][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2778'. [ 117.075325][ T9666] vhci_hcd: connection closed [ 117.078653][ T291] vhci_hcd: stop threads [ 117.087717][ T291] vhci_hcd: release socket [ 117.092192][ T291] vhci_hcd: disconnect device [ 117.136409][ T9674] loop1: detected capacity change from 0 to 1024 [ 117.143440][ T9674] EXT4-fs: Ignoring removed orlov option [ 117.149289][ T9674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.194043][ T9674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.218764][ T9681] geneve2: entered promiscuous mode [ 117.224091][ T9681] geneve2: entered allmulticast mode [ 117.258697][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.369522][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2790'. [ 117.417538][ T9696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2792'. [ 117.556647][ T9705] loop3: detected capacity change from 0 to 1024 [ 117.620309][ T9710] loop5: detected capacity change from 0 to 1024 [ 117.628178][ T9705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.646134][ T9710] EXT4-fs: Ignoring removed orlov option [ 117.651839][ T9710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.737780][ T9710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.786208][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.853319][ T9727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2805'. [ 117.980040][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.184486][ T9736] sctp: [Deprecated]: syz.0.2807 (pid 9736) Use of int in max_burst socket option deprecated. [ 118.184486][ T9736] Use struct sctp_assoc_value instead [ 118.203976][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 118.203992][ T29] audit: type=1400 audit(1743473630.560:1400): avc: denied { name_bind } for pid=9735 comm="syz.5.2809" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 118.243288][ T9742] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 118.249853][ T9742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.257513][ T9742] vhci_hcd vhci_hcd.0: Device attached [ 118.282276][ T9743] vhci_hcd: connection closed [ 118.282476][ T291] vhci_hcd: stop threads [ 118.291526][ T291] vhci_hcd: release socket [ 118.295981][ T291] vhci_hcd: disconnect device [ 118.367442][ T29] audit: type=1326 audit(1743473630.730:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 118.391211][ T29] audit: type=1326 audit(1743473630.730:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 118.418036][ T29] audit: type=1326 audit(1743473630.770:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 118.459516][ T29] audit: type=1326 audit(1743473630.810:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 118.483177][ T29] audit: type=1326 audit(1743473630.810:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 118.506668][ T29] audit: type=1326 audit(1743473630.810:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 118.530231][ T29] audit: type=1326 audit(1743473630.810:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 118.553705][ T29] audit: type=1326 audit(1743473630.810:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9750 comm="syz.3.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2209ad169 code=0x7ffc0000 [ 118.587710][ T9757] loop3: detected capacity change from 0 to 1024 [ 118.594425][ T9757] EXT4-fs: Ignoring removed orlov option [ 118.600211][ T9757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.636859][ T9757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.671504][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.700790][ T9763] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.710468][ T9764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9764 comm=syz.5.2829 [ 118.733642][ T29] audit: type=1400 audit(1743473631.090:1409): avc: denied { audit_write } for pid=9760 comm="syz.5.2829" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.768141][ T9769] loop4: detected capacity change from 0 to 128 [ 118.779724][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'. [ 118.779908][ T9769] EXT4-fs: Ignoring removed nobh option [ 118.802708][ T9769] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.815392][ T9769] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.838229][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.908416][ T9786] loop1: detected capacity change from 0 to 512 [ 118.939625][ T9786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.975462][ T9786] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.009533][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.055777][ T9800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9800 comm=syz.3.2835 [ 119.135867][ T9813] veth0_macvtap: left promiscuous mode [ 119.157763][ T9813] macvtap0: refused to change device tx_queue_len [ 119.241696][ T9822] loop4: detected capacity change from 0 to 512 [ 119.264182][ T9825] loop1: detected capacity change from 0 to 1024 [ 119.296384][ T9825] ext4: Unknown parameter 'nouser_xattr' [ 119.312715][ T9822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 119.337991][ T9833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9833 comm=syz.0.2852 [ 119.373347][ T9835] loop1: detected capacity change from 0 to 1024 [ 119.379987][ T9822] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.424352][ T9835] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 119.435402][ T9835] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 119.477069][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.492041][ T9835] JBD2: no valid journal superblock found [ 119.497859][ T9835] EXT4-fs (loop1): Could not load journal inode [ 119.583506][ T9852] loop4: detected capacity change from 0 to 2048 [ 119.612858][ T9852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.639021][ T9862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9862 comm=syz.1.2865 [ 119.780980][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.819047][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2871'. [ 119.977137][ T9889] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2876'. [ 120.063666][ T9893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9893 comm=syz.4.2878 [ 120.130819][ T9897] loop4: detected capacity change from 0 to 4096 [ 120.141401][ T9897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.314699][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.402990][ T9916] geneve2: entered promiscuous mode [ 120.408485][ T9916] geneve2: entered allmulticast mode [ 120.498179][ T9920] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2889'. [ 120.618429][ T9936] geneve2: entered promiscuous mode [ 120.623692][ T9936] geneve2: entered allmulticast mode [ 120.721651][ T9948] loop4: detected capacity change from 0 to 1024 [ 120.754975][ T9948] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.766123][ T9948] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.856894][ T9948] JBD2: no valid journal superblock found [ 120.862694][ T9948] EXT4-fs (loop4): Could not load journal inode [ 121.017560][ T9977] geneve2: entered promiscuous mode [ 121.022834][ T9977] geneve2: entered allmulticast mode [ 121.073849][ T9984] loop3: detected capacity change from 0 to 1024 [ 121.081938][ T9984] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.092918][ T9984] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 121.105465][ T9988] loop4: detected capacity change from 0 to 512 [ 121.113377][ T9988] EXT4-fs: Ignoring removed nobh option [ 121.122580][ T9984] JBD2: no valid journal superblock found [ 121.128453][ T9984] EXT4-fs (loop3): Could not load journal inode [ 121.137822][ T9988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.175578][ T9988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.188468][ T9988] ext4 filesystem being mounted at /596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.252482][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.348544][T10010] loop5: detected capacity change from 0 to 1024 [ 121.365784][T10010] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.377776][T10010] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 121.396765][T10010] JBD2: no valid journal superblock found [ 121.402701][T10010] EXT4-fs (loop5): Could not load journal inode [ 121.535904][T10021] geneve2: entered promiscuous mode [ 121.541198][T10021] geneve2: entered allmulticast mode [ 121.574362][T10023] loop5: detected capacity change from 0 to 512 [ 121.607871][T10023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.626439][T10023] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.823761][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 122.957410][T10035] __nla_validate_parse: 3 callbacks suppressed [ 122.957430][T10035] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2940'. [ 122.978947][T10037] loop5: detected capacity change from 0 to 1024 [ 122.986143][T10037] ext4: Unknown parameter 'nouser_xattr' [ 122.997516][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2942'. [ 123.050769][T10046] loop5: detected capacity change from 0 to 512 [ 123.057925][T10050] veth0_macvtap: left promiscuous mode [ 123.070762][T10046] EXT4-fs: Ignoring removed nobh option [ 123.081967][T10050] macvtap0: refused to change device tx_queue_len [ 123.089072][T10046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.107389][T10046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.122510][T10046] ext4 filesystem being mounted at /317/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.186204][ T6582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.227374][T10057] loop1: detected capacity change from 0 to 512 [ 123.273250][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2955'. [ 123.282301][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2955'. [ 123.296355][T10057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 123.325908][T10057] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.355917][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 123.443551][T10080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2961'. [ 123.567792][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2973'. [ 123.613200][T10092] veth0_macvtap: left promiscuous mode [ 123.630036][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 123.630053][ T29] audit: type=1400 audit(1743473891.996:1482): avc: denied { execute } for pid=10095 comm="syz.5.2966" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 123.664436][T10092] macvtap0: refused to change device tx_queue_len [ 123.679102][T10094] loop1: detected capacity change from 0 to 512 [ 123.705592][T10094] EXT4-fs: Ignoring removed nobh option [ 123.710652][T10099] loop3: detected capacity change from 0 to 512 [ 123.726905][T10094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.767454][T10099] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.778828][T10094] ext4 filesystem being mounted at /620/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.847045][ T29] audit: type=1400 audit(1743473892.216:1483): avc: denied { execstack } for pid=10108 comm="syz.5.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 124.344316][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2982'. [ 124.402939][T10137] veth0_macvtap: left promiscuous mode [ 124.420036][T10137] macvtap0: refused to change device tx_queue_len [ 124.435353][T10142] loop3: detected capacity change from 0 to 1024 [ 124.457947][T10142] ext4: Unknown parameter 'nouser_xattr' [ 124.493512][ T29] audit: type=1400 audit(1743473892.856:1484): avc: denied { read } for pid=10148 comm="syz.1.2985" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.523173][T10150] loop3: detected capacity change from 0 to 512 [ 124.531785][T10150] EXT4-fs: Ignoring removed nobh option [ 124.539557][T10150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.583028][T10150] ext4 filesystem being mounted at /589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.645762][ T29] audit: type=1400 audit(1743473893.006:1485): avc: denied { name_bind } for pid=10167 comm="syz.5.2993" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 124.667508][ T29] audit: type=1326 audit(1743473893.006:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.1.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 124.691172][ T29] audit: type=1326 audit(1743473893.006:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.1.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 124.714774][ T29] audit: type=1326 audit(1743473893.006:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.1.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16729d169 code=0x7ffc0000 [ 124.999130][T10182] veth0_macvtap: left promiscuous mode [ 125.010167][T10186] loop1: detected capacity change from 0 to 2048 [ 125.020779][T10182] macvtap0: refused to change device tx_queue_len [ 125.169624][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3020'. [ 125.178824][T10213] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3020'. [ 125.225794][T10221] macvtap0: refused to change device tx_queue_len [ 125.232329][ T29] audit: type=1326 audit(1743473893.596:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10225 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 125.255914][ T29] audit: type=1326 audit(1743473893.596:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10225 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 125.279440][ T29] audit: type=1326 audit(1743473893.596:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10225 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf0b3ed169 code=0x7ffc0000 [ 125.369477][T10235] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3024'. [ 125.431768][T10243] loop5: detected capacity change from 0 to 2048 [ 125.644657][T10273] macvtap0: refused to change device tx_queue_len [ 125.806405][T10291] geneve2: entered promiscuous mode [ 125.811687][T10291] geneve2: entered allmulticast mode [ 125.936284][T10311] unsupported nlmsg_type 40 [ 126.479477][T10404] netlink: 'syz.5.3096': attribute type 13 has an invalid length. [ 127.176005][T10519] vxcan1: tx address claim with different name [ 127.206389][T10525] ================================================================== [ 127.214534][T10525] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 127.221267][T10525] [ 127.223612][T10525] write to 0xffff888106f1acd0 of 8 bytes by task 10521 on cpu 0: [ 127.231379][T10525] __dentry_kill+0x13e/0x4c0 [ 127.235995][T10525] dput+0x5c/0xd0 [ 127.239649][T10525] step_into+0x226/0x860 [ 127.243910][T10525] path_openat+0x141f/0x2000 [ 127.248515][T10525] do_filp_open+0x115/0x240 [ 127.253029][T10525] io_openat2+0x284/0x3a0 [ 127.257377][T10525] io_openat+0x1a/0x30 [ 127.261466][T10525] io_issue_sqe+0x1a9/0xaf0 [ 127.265976][T10525] io_wq_submit_work+0x3fb/0x550 [ 127.270948][T10525] io_worker_handle_work+0x487/0x9f0 [ 127.276247][T10525] io_wq_worker+0x277/0x850 [ 127.280768][T10525] ret_from_fork+0x4b/0x60 [ 127.285190][T10525] ret_from_fork_asm+0x1a/0x30 [ 127.289971][T10525] [ 127.292299][T10525] read to 0xffff888106f1acd0 of 8 bytes by task 10525 on cpu 1: [ 127.299931][T10525] fast_dput+0x65/0x2c0 [ 127.304106][T10525] dput+0x24/0xd0 [ 127.307759][T10525] step_into+0x226/0x860 [ 127.312017][T10525] path_openat+0x141f/0x2000 [ 127.316614][T10525] do_filp_open+0x115/0x240 [ 127.321133][T10525] io_openat2+0x284/0x3a0 [ 127.325480][T10525] io_openat+0x1a/0x30 [ 127.329571][T10525] io_issue_sqe+0x1a9/0xaf0 [ 127.334079][T10525] io_wq_submit_work+0x3fb/0x550 [ 127.339027][T10525] io_worker_handle_work+0x487/0x9f0 [ 127.344321][T10525] io_wq_worker+0x277/0x850 [ 127.348842][T10525] ret_from_fork+0x4b/0x60 [ 127.353272][T10525] ret_from_fork_asm+0x1a/0x30 [ 127.358047][T10525] [ 127.360370][T10525] value changed: 0xffff888237b446e0 -> 0x0000000000000000 [ 127.367478][T10525] [ 127.369804][T10525] Reported by Kernel Concurrency Sanitizer on: [ 127.376052][T10525] CPU: 1 UID: 0 PID: 10525 Comm: iou-wrk-10512 Not tainted 6.14.0-syzkaller-11144-g1e7857b28020 #0 PREEMPT(voluntary) [ 127.388473][T10525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.400046][T10525] ==================================================================