last executing test programs: 503.584471ms ago: executing program 2 (id=3275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001900010026bd7000000000000a000000fd04000b0000000005001400030000001800168014000100010000000000000038000400054006000c00090008"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) 503.044771ms ago: executing program 0 (id=3279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e24, 0x2, 0x2, 0x20, 0x20, 0x73}, {@in=@loopback, 0x4d2, 0x32}, @in=@local, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f, 0x4000000}, {0x0, 0x8, 0x4}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe, 0x5c}, [@algo_aead={0x4c, 0x12, {{'gcm_base(cts-cbc-aes-aesni,sha384-ce)\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) 497.544481ms ago: executing program 2 (id=3281): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 472.473412ms ago: executing program 0 (id=3282): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_gettime(0xffffffffffffffff, 0x0) 419.303015ms ago: executing program 0 (id=3286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffd14000780080011400000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 405.051496ms ago: executing program 2 (id=3289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xff}}, 0x14}}, 0x20000000) 354.836129ms ago: executing program 0 (id=3293): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 335.64991ms ago: executing program 1 (id=3294): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, 0x0, 0x0) 335.50072ms ago: executing program 2 (id=3295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc000000000901080000000000000000000000030c00048008000140ffffffc60c00048008000140000000070900010073797a30000000008c0002002c000180"], 0xcc}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008010) 296.350252ms ago: executing program 0 (id=3298): mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) msync(&(0x7f0000860000/0x600000)=nil, 0x600000, 0x2) 285.654283ms ago: executing program 1 (id=3299): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) 277.570614ms ago: executing program 3 (id=3300): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) 264.265675ms ago: executing program 4 (id=3301): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 252.591695ms ago: executing program 1 (id=3302): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 234.939256ms ago: executing program 2 (id=3303): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") statx(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1000, 0x56159817211d7953, &(0x7f0000002500)) 224.812097ms ago: executing program 3 (id=3304): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) ioprio_get$pid(0x2, 0x0) 203.933318ms ago: executing program 1 (id=3305): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pwritev(r0, 0x0, 0x0, 0x6, 0xffffff85) 197.888978ms ago: executing program 4 (id=3306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x63d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 155.562261ms ago: executing program 3 (id=3307): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 155.165881ms ago: executing program 4 (id=3308): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x4, 0x0, 0x0) 145.781641ms ago: executing program 3 (id=3309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xd80, 0x0, &(0x7f0000000d40)="fae56ac553d73f32", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 145.311782ms ago: executing program 1 (id=3319): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) membarrier(0x2, 0x0) 70.630766ms ago: executing program 1 (id=3310): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) 70.214956ms ago: executing program 3 (id=3311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 56.390477ms ago: executing program 4 (id=3312): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000007464000100000000000000e5c09a0349f9cd417e5d4c8ba3d218c4f7e4ebebee6335ac4ca8c4e946", 0x2e}], 0x1}}], 0x1, 0x24004044) 41.293278ms ago: executing program 4 (id=3313): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x808, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911034000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 27.957828ms ago: executing program 2 (id=3314): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000002c0)={0x1, 0x1}) 27.192699ms ago: executing program 0 (id=3325): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="b00000000314010029bd7000fddbdf250900020073797a300000000008004180"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x2010000) 2.4567ms ago: executing program 3 (id=3315): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x400204, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) 0s ago: executing program 4 (id=3316): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2800) fsync(r0) kernel console output (not intermixed with test programs): [ 18.529295][ T28] audit: type=1400 audit(1770686678.740:62): avc: denied { search } for pid=3189 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.551351][ T28] audit: type=1400 audit(1770686678.740:63): avc: denied { search } for pid=3189 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.574024][ T28] audit: type=1400 audit(1770686678.740:64): avc: denied { search } for pid=3189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.596881][ T28] audit: type=1400 audit(1770686678.740:65): avc: denied { search } for pid=3189 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.619892][ T28] audit: type=1400 audit(1770686678.750:66): avc: denied { read open } for pid=3190 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 23.703762][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 23.703776][ T28] audit: type=1400 audit(1770686683.920:70): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.732732][ T28] audit: type=1400 audit(1770686683.950:71): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.733529][ T3295] cgroup: Unknown subsys name 'net' [ 23.760529][ T28] audit: type=1400 audit(1770686683.980:72): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.891096][ T3295] cgroup: Unknown subsys name 'cpuset' [ 23.897139][ T3295] cgroup: Unknown subsys name 'rlimit' [ 24.006674][ T28] audit: type=1400 audit(1770686684.220:73): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.029973][ T28] audit: type=1400 audit(1770686684.220:74): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.050476][ T28] audit: type=1400 audit(1770686684.220:75): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.070843][ T28] audit: type=1400 audit(1770686684.220:76): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.091089][ T28] audit: type=1400 audit(1770686684.230:77): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.111966][ T28] audit: type=1400 audit(1770686684.250:78): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.136914][ T28] audit: type=1400 audit(1770686684.250:79): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.143962][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.241028][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.925669][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 25.960867][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 25.976494][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.015457][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.046543][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.053623][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.060855][ T3307] bridge_slave_0: entered allmulticast mode [ 26.067075][ T3307] bridge_slave_0: entered promiscuous mode [ 26.092262][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.099345][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.106496][ T3307] bridge_slave_1: entered allmulticast mode [ 26.112845][ T3307] bridge_slave_1: entered promiscuous mode [ 26.157681][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.164778][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.172154][ T3311] bridge_slave_0: entered allmulticast mode [ 26.178402][ T3311] bridge_slave_0: entered promiscuous mode [ 26.184982][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.195498][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.202584][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.209874][ T3306] bridge_slave_0: entered allmulticast mode [ 26.216141][ T3306] bridge_slave_0: entered promiscuous mode [ 26.223574][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.232696][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.239745][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.247031][ T3306] bridge_slave_1: entered allmulticast mode [ 26.253333][ T3306] bridge_slave_1: entered promiscuous mode [ 26.264043][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.271144][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.278261][ T3311] bridge_slave_1: entered allmulticast mode [ 26.284647][ T3311] bridge_slave_1: entered promiscuous mode [ 26.302761][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.319975][ T3307] team0: Port device team_slave_0 added [ 26.335403][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.353931][ T3307] team0: Port device team_slave_1 added [ 26.362536][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.380161][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.387331][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.394613][ T3314] bridge_slave_0: entered allmulticast mode [ 26.401026][ T3314] bridge_slave_0: entered promiscuous mode [ 26.415022][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.429772][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.436949][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.444260][ T3314] bridge_slave_1: entered allmulticast mode [ 26.450768][ T3314] bridge_slave_1: entered promiscuous mode [ 26.462572][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.476097][ T3306] team0: Port device team_slave_0 added [ 26.486201][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.493162][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.519145][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.543503][ T3306] team0: Port device team_slave_1 added [ 26.549899][ T3311] team0: Port device team_slave_0 added [ 26.559803][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.566771][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.592711][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.603488][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.610590][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.617875][ T3315] bridge_slave_0: entered allmulticast mode [ 26.624244][ T3315] bridge_slave_0: entered promiscuous mode [ 26.635469][ T3311] team0: Port device team_slave_1 added [ 26.646629][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.670462][ T3307] hsr_slave_0: entered promiscuous mode [ 26.676428][ T3307] hsr_slave_1: entered promiscuous mode [ 26.682497][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.689739][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.696926][ T3315] bridge_slave_1: entered allmulticast mode [ 26.703344][ T3315] bridge_slave_1: entered promiscuous mode [ 26.714356][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.721301][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.747236][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.759035][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.785837][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.792815][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.818780][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.838649][ T3314] team0: Port device team_slave_0 added [ 26.845435][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.852478][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.878439][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.890178][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.904103][ T3314] team0: Port device team_slave_1 added [ 26.914317][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.921338][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.947299][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.959242][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.986779][ T3306] hsr_slave_0: entered promiscuous mode [ 26.992798][ T3306] hsr_slave_1: entered promiscuous mode [ 26.998612][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 27.004343][ T3306] Cannot create hsr debugfs directory [ 27.024575][ T3315] team0: Port device team_slave_0 added [ 27.036943][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.043907][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.069811][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.081390][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.088322][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.114210][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.125853][ T3315] team0: Port device team_slave_1 added [ 27.183525][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.190628][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.216622][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.231658][ T3311] hsr_slave_0: entered promiscuous mode [ 27.237627][ T3311] hsr_slave_1: entered promiscuous mode [ 27.243493][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.249262][ T3311] Cannot create hsr debugfs directory [ 27.262739][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.269730][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.295635][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.332612][ T3314] hsr_slave_0: entered promiscuous mode [ 27.338596][ T3314] hsr_slave_1: entered promiscuous mode [ 27.344448][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.350166][ T3314] Cannot create hsr debugfs directory [ 27.406357][ T3315] hsr_slave_0: entered promiscuous mode [ 27.412744][ T3315] hsr_slave_1: entered promiscuous mode [ 27.418582][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.424311][ T3315] Cannot create hsr debugfs directory [ 27.439621][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.468191][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.490879][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.516884][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.573429][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.584001][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.592451][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.602113][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.641893][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.650696][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.659706][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.668444][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.704314][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.714948][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.726346][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.737982][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.752257][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.778775][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.790233][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.800152][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.809158][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.816330][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.824821][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.835727][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.845117][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.861331][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.868400][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.888387][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.898787][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.932362][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.961282][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.980232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.987336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.996401][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.003495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.023087][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.043432][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.050549][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.058748][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.065789][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.093683][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.110241][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.121417][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.132936][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.146923][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.154046][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.163953][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.179961][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.187022][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.203706][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.210796][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.220315][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.227357][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.246994][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.284129][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.338986][ T3307] veth0_vlan: entered promiscuous mode [ 28.383350][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.393347][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.409639][ T3307] veth1_vlan: entered promiscuous mode [ 28.430063][ T3307] veth0_macvtap: entered promiscuous mode [ 28.442071][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.473776][ T3307] veth1_macvtap: entered promiscuous mode [ 28.482821][ T3306] veth0_vlan: entered promiscuous mode [ 28.519637][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.529294][ T3306] veth1_vlan: entered promiscuous mode [ 28.540181][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.565643][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.578049][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.595033][ T3306] veth0_macvtap: entered promiscuous mode [ 28.623413][ T3311] veth0_vlan: entered promiscuous mode [ 28.639345][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.650187][ T3306] veth1_macvtap: entered promiscuous mode [ 28.663299][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.673579][ T3311] veth1_vlan: entered promiscuous mode [ 28.683102][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.701850][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.720608][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 28.720624][ T28] audit: type=1400 audit(1770686688.930:99): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.735359][ T3311] veth0_macvtap: entered promiscuous mode [ 28.750902][ T28] audit: type=1400 audit(1770686688.930:100): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.759895][ T3311] veth1_macvtap: entered promiscuous mode [ 28.780543][ T28] audit: type=1400 audit(1770686688.930:101): avc: denied { ioctl } for pid=3307 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.794208][ T3315] veth0_vlan: entered promiscuous mode [ 28.820558][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.852129][ T3315] veth1_vlan: entered promiscuous mode [ 28.872405][ T1451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.881855][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.890424][ T1451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.905049][ T3315] veth0_macvtap: entered promiscuous mode [ 28.912494][ T3315] veth1_macvtap: entered promiscuous mode [ 28.924877][ T3314] veth0_vlan: entered promiscuous mode [ 28.936584][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.944323][ T3483] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7'. [ 28.953388][ T3483] bridge_slave_1: default FDB implementation only supports local addresses [ 28.964693][ T3314] veth1_vlan: entered promiscuous mode [ 28.971159][ T1451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.992586][ T3485] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 28.999849][ T28] audit: type=1400 audit(1770686689.210:102): avc: denied { create } for pid=3484 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.019662][ T28] audit: type=1400 audit(1770686689.220:103): avc: denied { ioctl } for pid=3484 comm="syz.2.8" path="socket:[3851]" dev="sockfs" ino=3851 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.046245][ T1451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.055694][ T1451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.064444][ T1451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.077446][ T28] audit: type=1400 audit(1770686689.290:104): avc: denied { open } for pid=3486 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.096509][ T28] audit: type=1400 audit(1770686689.290:105): avc: denied { perfmon } for pid=3486 comm="syz.2.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.117210][ T28] audit: type=1400 audit(1770686689.290:106): avc: denied { kernel } for pid=3486 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.137547][ T1451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.156944][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.172305][ T3314] veth0_macvtap: entered promiscuous mode [ 29.185951][ T1451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.202050][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.211288][ T3314] veth1_macvtap: entered promiscuous mode [ 29.222466][ T28] audit: type=1400 audit(1770686689.440:107): avc: denied { map_create } for pid=3490 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.241454][ T28] audit: type=1400 audit(1770686689.440:108): avc: denied { map_read map_write } for pid=3490 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.262568][ T1451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.298258][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.308584][ T3496] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 29.324689][ T3331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.337709][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.364589][ T3331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.401417][ T3331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.413513][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.434963][ T1451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.458705][ T1451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.467020][ T3508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 29.483153][ T1451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.532604][ T3514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16'. [ 29.784385][ T3553] Invalid ELF header magic: != ELF [ 29.821724][ T3557] netlink: 'syz.4.35': attribute type 7 has an invalid length. [ 29.912647][ T3573] netlink: 10 bytes leftover after parsing attributes in process `syz.1.40'. [ 29.933746][ T3571] batadv0: entered promiscuous mode [ 29.951922][ T3571] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 29.983880][ T3575] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 30.008812][ T3575] bond1 (unregistering): Released all slaves [ 30.053130][ T3588] loop3: detected capacity change from 0 to 2048 [ 30.113408][ T3588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.161432][ T3588] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.167683][ T3600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.54'. [ 30.208109][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.290200][ T3617] loop2: detected capacity change from 0 to 256 [ 30.481445][ T3641] mmap: syz.4.75 (3641) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.524761][ T3646] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.78'. [ 30.556505][ T3651] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 30.564256][ T3651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'. [ 30.575514][ T3646] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.78'. [ 30.582287][ T3651] batman_adv: batadv0: Adding interface: macvlan0 [ 30.590956][ T3651] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.624203][ T3651] batman_adv: batadv0: Interface activated: macvlan0 [ 30.719895][ T3666] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 30.726437][ T3666] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 30.733918][ T3666] vhci_hcd vhci_hcd.0: Device attached [ 30.762381][ T3666] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 30.768921][ T3666] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 30.776588][ T3666] vhci_hcd vhci_hcd.0: Device attached [ 30.791345][ T3668] vhci_hcd: connection closed [ 30.792261][ T3676] vhci_hcd: connection closed [ 30.793868][ T12] vhci_hcd vhci_hcd.2: stop threads [ 30.806931][ T12] vhci_hcd vhci_hcd.2: release socket [ 30.812471][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 30.848320][ T3686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 30.855565][ T12] vhci_hcd vhci_hcd.2: stop threads [ 30.861717][ T12] vhci_hcd vhci_hcd.2: release socket [ 30.867481][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 30.926301][ T3699] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 30.934342][ T3699] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 30.997232][ T3710] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.108'. [ 31.027736][ T3716] netlink: 830 bytes leftover after parsing attributes in process `syz.0.110'. [ 31.158450][ T3738] batadv0: entered promiscuous mode [ 31.174755][ T3738] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 31.403972][ T3772] loop2: detected capacity change from 0 to 512 [ 31.429625][ T3781] netlink: 'syz.4.140': attribute type 4 has an invalid length. [ 31.441326][ T3772] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.137: bad orphan inode 13 [ 31.451345][ T3772] loop2: lost filesystem error report for type 5 error -117 [ 31.457855][ T3781] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 31.497681][ T3772] ext4_test_bit(bit=12, block=4) = 1 [ 31.503092][ T3772] is_bad_inode(inode)=0 [ 31.507239][ T3772] NEXT_ORPHAN(inode)=0 [ 31.511339][ T3772] max_ino=32 [ 31.514612][ T3772] i_nlink=1 [ 31.527720][ T3772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.570726][ T3772] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.137: Unrecognised inode hash code 20 [ 31.582113][ T3772] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.137: Corrupt directory, running e2fsck is recommended [ 31.595849][ T3772] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.137: Unrecognised inode hash code 20 [ 31.607206][ T3772] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.137: Corrupt directory, running e2fsck is recommended [ 31.632138][ T3790] loop3: detected capacity change from 0 to 8192 [ 31.659761][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.691004][ T3299] loop3: p1 p2 p4 < > [ 31.695180][ T3299] loop3: partition table partially beyond EOD, truncated [ 31.714812][ T3299] loop3: p1 start 16777216 is beyond EOD, truncated [ 31.721464][ T3299] loop3: p2 size 515840 extends beyond EOD, truncated [ 31.744686][ T3299] loop3: p4 start 16777216 is beyond EOD, truncated [ 31.777900][ T3790] loop3: p1 p2 p4 < > [ 31.782022][ T3790] loop3: partition table partially beyond EOD, truncated [ 31.805589][ T3790] loop3: p1 start 16777216 is beyond EOD, truncated [ 31.812255][ T3790] loop3: p2 size 515840 extends beyond EOD, truncated [ 31.844338][ T3790] loop3: p4 start 16777216 is beyond EOD, truncated [ 31.961485][ T3841] usb usb5: usbfs: process 3841 (syz.3.170) did not claim interface 0 before use [ 32.017236][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 32.060442][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 32.143746][ T3866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 32.267671][ T3877] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 32.296526][ T3877] gretap1: entered allmulticast mode [ 32.477255][ T3900] netlink: 'syz.0.202': attribute type 29 has an invalid length. [ 32.667254][ T3927] loop4: detected capacity change from 0 to 2048 [ 32.674819][ T3931] No such timeout policy "syz1" [ 32.735285][ T3927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.749800][ T3927] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.764245][ T3927] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.214: bg 0: block 345: padding at end of block bitmap is not set [ 32.832613][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.891196][ T3961] netlink: 'syz.1.231': attribute type 21 has an invalid length. [ 33.161213][ T4007] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 33.411867][ T4052] netlink: 'syz.3.275': attribute type 16 has an invalid length. [ 33.419751][ T4052] netlink: 'syz.3.275': attribute type 17 has an invalid length. [ 33.532535][ T4052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 33.660093][ T4090] bridge_slave_1: left allmulticast mode [ 33.665896][ T4090] bridge_slave_1: left promiscuous mode [ 33.671758][ T4090] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.684776][ T4090] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 33.751293][ T4102] kernel profiling enabled (shift: 9) [ 33.838578][ T4114] xt_l2tp: wrong L2TP version: 0 [ 33.951589][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 33.951605][ T28] audit: type=1400 audit(1770686694.170:210): avc: denied { lock } for pid=4129 comm="syz.2.314" path="socket:[5885]" dev="sockfs" ino=5885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 33.996579][ C1] hrtimer: interrupt took 40553 ns [ 34.065064][ T4146] loop4: detected capacity change from 0 to 128 [ 34.092469][ T4146] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 34.101149][ T4146] FAT-fs (loop4): Filesystem has been set read-only [ 34.153268][ T4156] netlink: 'syz.3.329': attribute type 9 has an invalid length. [ 34.231005][ T4169] __nla_validate_parse: 9 callbacks suppressed [ 34.231020][ T4169] netlink: 132 bytes leftover after parsing attributes in process `syz.4.333'. [ 34.231490][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'. [ 34.255046][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'. [ 34.270612][ T28] audit: type=1400 audit(1770686694.480:211): avc: denied { getopt } for pid=4171 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.338766][ T4180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.339'. [ 34.394113][ T28] audit: type=1400 audit(1770686694.610:212): avc: denied { ioctl } for pid=4188 comm="syz.0.344" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.466664][ T28] audit: type=1326 audit(1770686694.670:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 34.490310][ T28] audit: type=1326 audit(1770686694.670:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 34.514015][ T28] audit: type=1326 audit(1770686694.670:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 34.537292][ T28] audit: type=1326 audit(1770686694.670:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 34.560504][ T28] audit: type=1326 audit(1770686694.670:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 34.583811][ T28] audit: type=1326 audit(1770686694.670:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 34.607228][ T28] audit: type=1326 audit(1770686694.670:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 34.731533][ T4228] xt_hashlimit: size too large, truncated to 1048576 [ 34.738241][ T4228] xt_hashlimit: max too large, truncated to 1048576 [ 34.815681][ T4243] IPv6: sit1: Disabled Multicast RS [ 34.831647][ T4243] sit1: entered allmulticast mode [ 35.031513][ T4266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 35.041295][ T4265] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.141520][ T4282] netlink: 92 bytes leftover after parsing attributes in process `syz.2.385'. [ 35.159051][ T4282] validate_nla: 3 callbacks suppressed [ 35.159065][ T4282] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 35.211388][ T4296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 35.380023][ T4322] loop4: detected capacity change from 0 to 128 [ 35.473086][ T4334] xt_addrtype: ipv6 does not support BROADCAST matching [ 35.510168][ T4340] netlink: 'syz.2.412': attribute type 3 has an invalid length. [ 35.515174][ T4342] netlink: 'syz.0.413': attribute type 5 has an invalid length. [ 35.517863][ T4340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.412'. [ 35.625901][ T4350] bond1: Removing last arp target with arp_interval on [ 35.654575][ T4350] bond1: entered promiscuous mode [ 35.659652][ T4350] bond1: entered allmulticast mode [ 35.674402][ T4350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.027819][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 36.093536][ T4427] netlink: 220 bytes leftover after parsing attributes in process `syz.1.453'. [ 36.212451][ T4443] loop1: detected capacity change from 0 to 512 [ 36.263868][ T4453] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.277931][ T4455] loop4: detected capacity change from 0 to 512 [ 36.285087][ T4443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.305625][ T4443] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.312402][ T4455] ======================================================= [ 36.312402][ T4455] WARNING: The mand mount option has been deprecated and [ 36.312402][ T4455] and is ignored by this kernel. Remove the mand [ 36.312402][ T4455] option from the mount to silence this warning. [ 36.312402][ T4455] ======================================================= [ 36.329965][ T4443] EXT4-fs warning (device loop1): ext4_enable_quotas:7226: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 36.347906][ T4455] EXT4-fs: Ignoring removed nobh option [ 36.377124][ T4455] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.393949][ T4455] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 36.432417][ T4455] EXT4-fs (loop4): orphan cleanup on readonly fs [ 36.464752][ T4455] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.466: attempt to clear invalid blocks 1024 len 1 [ 36.477929][ T4455] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.479744][ T4443] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 36.498559][ T4443] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.460: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 36.511654][ T4455] EXT4-fs (loop4): Remounting filesystem read-only [ 36.516402][ T4443] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 36.532385][ T4455] EXT4-fs (loop4): 1 truncate cleaned up [ 36.548192][ T4455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 36.567545][ T4443] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.460: couldn't read orphan inode 13 (err -117) [ 36.579419][ T4443] loop1: lost filesystem error report for type 5 error -117 [ 36.619648][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.684181][ T4443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.757615][ T4443] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.460: deleted inode referenced: 12 [ 36.850635][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.988229][ T4552] Cannot find set identified by id 0 to match [ 37.036037][ T4560] xfrm1: entered allmulticast mode [ 37.158363][ T4583] loop1: detected capacity change from 0 to 1024 [ 37.189820][ T4583] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.234887][ T4583] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 1: comm syz.1.528: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.248900][ T4583] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.263602][ T4600] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 37.290299][ T4583] EXT4-fs error (device loop1): ext4_acquire_dquot:6991: comm syz.1.528: Failed to acquire dquot type 0 [ 37.290325][ T4583] loop1: lost filesystem error report for type 5 error -117 [ 37.290740][ T4583] EXT4-fs error (device loop1): ext4_free_blocks:6727: comm syz.1.528: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.322351][ T4583] loop1: lost filesystem error report for type 5 error -117 [ 37.325029][ T4583] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.528: Invalid inode bitmap blk 0 in block_group 0 [ 37.325158][ T4583] loop1: lost filesystem error report for type 5 error -117 [ 37.333007][ T4583] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 37.333103][ T4583] loop1: lost filesystem error report for type 5 error -117 [ 37.338285][ T4583] EXT4-fs (loop1): 1 orphan inode deleted [ 37.338591][ T4583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.340642][ T3441] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.340838][ T3441] EXT4-fs error (device loop1): ext4_release_dquot:7027: comm kworker/u8:7: Failed to release dquot type 0 [ 37.355453][ T4604] netlink: 'syz.3.539': attribute type 2 has an invalid length. [ 37.443595][ T4616] xt_HMARK: spi-set and port-set can't be combined [ 37.443656][ T4583] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 37.490010][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.509119][ T4622] loop3: detected capacity change from 0 to 128 [ 37.527511][ T4622] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 37.536158][ T4622] FAT-fs (loop3): Filesystem has been set read-only [ 37.701870][ T4654] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 37.806513][ T4671] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 37.826715][ T4676] Cannot find set identified by id 0 to match [ 38.037650][ T4712] IPv6: NLM_F_REPLACE set, but no existing node found! [ 38.144259][ T4731] netlink: 'syz.3.600': attribute type 3 has an invalid length. [ 38.152320][ T4730] netlink: 'syz.0.599': attribute type 11 has an invalid length. [ 38.249424][ T4744] bond2: option xmit_hash_policy: invalid value (8) [ 38.257973][ T4744] bond2 (unregistering): Released all slaves [ 38.308425][ T4752] netlink: 'syz.0.610': attribute type 75 has an invalid length. [ 38.331314][ T4754] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.351850][ T4756] netlink: 'syz.1.612': attribute type 16 has an invalid length. [ 38.359611][ T4756] netlink: 'syz.1.612': attribute type 17 has an invalid length. [ 38.450158][ T4756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.802652][ T4797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.965585][ T4818] capability: warning: `syz.0.642' uses 32-bit capabilities (legacy support in use) [ 39.185001][ T4840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.264880][ T4867] __nla_validate_parse: 13 callbacks suppressed [ 39.264956][ T4867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.667'. [ 39.324855][ T4875] xt_TCPMSS: Only works on TCP SYN packets [ 39.355051][ T4879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 39.364049][ T4879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.674'. [ 39.372927][ T4879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.674'. [ 39.402670][ T4882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.423626][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 39.423639][ T28] audit: type=1400 audit(1770686699.640:269): avc: denied { module_request } for pid=4885 comm="syz.3.677" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 39.553095][ T4910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.685'. [ 39.576927][ T4904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.600650][ T28] audit: type=1400 audit(1770686699.810:270): avc: denied { write } for pid=4912 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.707066][ T4926] netlink: 996 bytes leftover after parsing attributes in process `syz.1.691'. [ 39.761470][ T4932] xt_ecn: cannot match TCP bits for non-tcp packets [ 39.840067][ T4948] netlink: 516 bytes leftover after parsing attributes in process `syz.3.703'. [ 39.881307][ T4953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.705'. [ 39.884671][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 39.919887][ T4956] ip6tnl1: entered promiscuous mode [ 40.234473][ T28] audit: type=1400 audit(1770686700.450:271): avc: denied { read } for pid=4999 comm="syz.1.729" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 40.238240][ T5002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.728'. [ 40.257543][ T28] audit: type=1400 audit(1770686700.450:272): avc: denied { open } for pid=4999 comm="syz.1.729" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 40.266433][ T5002] validate_nla: 7 callbacks suppressed [ 40.266446][ T5002] netlink: 'syz.2.728': attribute type 5 has an invalid length. [ 40.316619][ T28] audit: type=1400 audit(1770686700.520:273): avc: denied { ioctl } for pid=4999 comm="syz.1.729" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 40.355686][ T5010] netlink: 'syz.3.733': attribute type 10 has an invalid length. [ 40.365798][ T5010] team0: entered promiscuous mode [ 40.370879][ T5010] team_slave_0: entered promiscuous mode [ 40.376640][ T5010] team_slave_1: entered promiscuous mode [ 40.382459][ T5010] team0: entered allmulticast mode [ 40.387580][ T5010] team_slave_0: entered allmulticast mode [ 40.393348][ T5010] team_slave_1: entered allmulticast mode [ 40.412466][ T5010] bridge0: port 3(team0) entered blocking state [ 40.418827][ T5010] bridge0: port 3(team0) entered disabled state [ 40.427224][ T5010] bridge0: port 3(team0) entered blocking state [ 40.433595][ T5010] bridge0: port 3(team0) entered forwarding state [ 40.543692][ T5036] veth2: entered allmulticast mode [ 40.589642][ T28] audit: type=1326 audit(1770686700.800:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d645af79 code=0x7ffc0000 [ 40.631711][ T28] audit: type=1326 audit(1770686700.830:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d645af79 code=0x7ffc0000 [ 40.655139][ T28] audit: type=1326 audit(1770686700.830:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d645af79 code=0x7ffc0000 [ 40.678394][ T28] audit: type=1326 audit(1770686700.830:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f64d645af79 code=0x7ffc0000 [ 40.701691][ T28] audit: type=1326 audit(1770686700.830:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.1.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d645af79 code=0x7ffc0000 [ 41.223681][ T5115] bridge_slave_1: left allmulticast mode [ 41.229389][ T5115] bridge_slave_1: left promiscuous mode [ 41.235252][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.272619][ T5115] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 41.293961][ T5123] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 41.491695][ T5155] netlink: 'syz.3.804': attribute type 5 has an invalid length. [ 41.528491][ T5159] xt_CT: No such helper "pptp" [ 41.530456][ T5162] netlink: 'syz.4.807': attribute type 21 has an invalid length. [ 41.619241][ T5176] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.639733][ T5175] IPv6: sit2: Disabled Multicast RS [ 41.655811][ T5175] sit2: entered allmulticast mode [ 41.717745][ T5190] x_tables: duplicate underflow at hook 2 [ 41.843970][ T5214] loop3: detected capacity change from 0 to 128 [ 42.158817][ T5270] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 42.192679][ T5270] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 42.634296][ T5343] veth2: entered allmulticast mode [ 42.679596][ T5354] netlink: 'syz.0.897': attribute type 3 has an invalid length. [ 42.766618][ T5362] xt_addrtype: ipv6 does not support BROADCAST matching [ 42.821261][ T5372] netlink: 'syz.4.910': attribute type 5 has an invalid length. [ 43.065699][ T5413] veth2: entered allmulticast mode [ 43.151312][ T5431] xfrm1: entered allmulticast mode [ 43.177097][ T5434] bond1: Removing last arp target with arp_interval on [ 43.196360][ T5434] bond1: entered promiscuous mode [ 43.201496][ T5434] bond1: entered allmulticast mode [ 43.207117][ T5434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.364902][ T5464] veth2: entered allmulticast mode [ 43.494424][ T5486] xt_HMARK: spi-set and port-set can't be combined [ 43.562382][ T5493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 43.752335][ T5524] veth2: entered allmulticast mode [ 43.802474][ T5539] loop4: detected capacity change from 0 to 512 [ 43.835783][ T5539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.864561][ T5549] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 43.880098][ T5539] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.893749][ T5539] EXT4-fs warning (device loop4): ext4_enable_quotas:7226: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 43.913887][ T5539] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 43.922790][ T5556] loop2: detected capacity change from 0 to 512 [ 43.929416][ T5539] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.985: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 43.947242][ T5539] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 43.948269][ T5539] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.985: couldn't read orphan inode 13 (err -117) [ 43.969252][ T5539] loop4: lost filesystem error report for type 5 error -117 [ 43.974557][ T5556] EXT4-fs: Ignoring removed nobh option [ 43.987424][ T5539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.004259][ T5539] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.985: deleted inode referenced: 12 [ 44.022689][ T5556] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 44.034544][ T5556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 44.042766][ T5556] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.049531][ T5556] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.997: attempt to clear invalid blocks 1024 len 1 [ 44.062596][ T5556] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.064500][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.092102][ T5556] EXT4-fs (loop2): Remounting filesystem read-only [ 44.114956][ T5556] EXT4-fs (loop2): 1 truncate cleaned up [ 44.144924][ T5556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 44.214911][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 44.382779][ T5605] bond1: option xmit_hash_policy: invalid value (8) [ 44.391546][ T5605] bond1 (unregistering): Released all slaves [ 44.398152][ T5616] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 44.517997][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 44.518012][ T28] audit: type=1400 audit(1770686704.730:318): avc: denied { ioctl } for pid=5628 comm="syz.2.1033" path="socket:[12447]" dev="sockfs" ino=12447 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.678202][ T28] audit: type=1400 audit(1770686704.890:319): avc: denied { setopt } for pid=5660 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.680070][ T5659] netlink: 'syz.0.1046': attribute type 2 has an invalid length. [ 44.705622][ T5659] __nla_validate_parse: 23 callbacks suppressed [ 44.705639][ T5659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1046'. [ 44.714690][ T5663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1048'. [ 44.831339][ T5676] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 44.948341][ T5693] IPv6: NLM_F_REPLACE set, but no existing node found! [ 44.973849][ T5695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'. [ 45.048912][ T28] audit: type=1326 audit(1770686705.260:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.4.1068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x0 [ 45.362385][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1092'. [ 45.392578][ T5755] netlink: 'syz.1.1096': attribute type 15 has an invalid length. [ 45.444695][ T5761] loop0: detected capacity change from 0 to 512 [ 45.455009][ T5763] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 45.503303][ T5761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.552906][ T5761] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.566522][ T5777] netlink: 'syz.3.1104': attribute type 13 has an invalid length. [ 45.574450][ T5777] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1104'. [ 45.601489][ T5777] syz_tun: refused to change device tx_queue_len [ 45.607861][ T5777] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 45.617155][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.650638][ T5783] netlink: 'syz.4.1109': attribute type 11 has an invalid length. [ 45.664994][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 45.782586][ T28] audit: type=1400 audit(1770686706.000:321): avc: denied { setopt } for pid=5805 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.814556][ T28] audit: type=1326 audit(1770686706.020:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 45.837936][ T28] audit: type=1326 audit(1770686706.020:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 45.861250][ T28] audit: type=1326 audit(1770686706.020:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 45.884595][ T28] audit: type=1326 audit(1770686706.020:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 45.907982][ T28] audit: type=1326 audit(1770686706.020:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz.3.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 46.011488][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1130'. [ 46.140358][ T5853] xt_TCPMSS: Only works on TCP SYN packets [ 46.175152][ T5861] netlink: 'syz.0.1146': attribute type 10 has an invalid length. [ 46.354004][ T28] audit: type=1400 audit(1770686706.560:327): avc: denied { create } for pid=5887 comm="syz.4.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 46.457336][ T5905] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 46.463892][ T5905] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 46.464011][ T5905] vhci_hcd vhci_hcd.0: Device attached [ 46.517081][ T5905] vhci_hcd vhci_hcd.0: port 0 already used [ 46.517409][ T5906] vhci_hcd: connection closed [ 46.517679][ T12] vhci_hcd vhci_hcd.0: stop threads [ 46.517698][ T12] vhci_hcd vhci_hcd.0: release socket [ 46.517714][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 46.770512][ T5952] netlink: 'syz.3.1188': attribute type 11 has an invalid length. [ 46.846158][ T5967] netlink: 'syz.1.1204': attribute type 3 has an invalid length. [ 46.853962][ T5967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1204'. [ 46.967244][ T5988] netlink: 'syz.2.1206': attribute type 21 has an invalid length. [ 46.975135][ T5988] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1206'. [ 46.987183][ T5988] netlink: 'syz.2.1206': attribute type 5 has an invalid length. [ 46.995077][ T5988] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1206'. [ 46.996389][ T5992] SET target dimension over the limit! [ 47.210369][ T6026] netlink: 'syz.0.1223': attribute type 1 has an invalid length. [ 47.280518][ T6040] xt_TCPMSS: Only works on TCP SYN packets [ 47.355683][ T6056] xt_hashlimit: overflow, try lower: 6/0 [ 47.414395][ T6062] netlink: 'syz.0.1238': attribute type 10 has an invalid length. [ 47.431221][ T6062] team0: entered promiscuous mode [ 47.436291][ T6062] team_slave_0: entered promiscuous mode [ 47.442138][ T6062] team_slave_1: entered promiscuous mode [ 47.448204][ T6062] team0: entered allmulticast mode [ 47.453407][ T6062] team_slave_0: entered allmulticast mode [ 47.459185][ T6062] team_slave_1: entered allmulticast mode [ 47.466029][ T6068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.470423][ T6062] bridge0: port 3(team0) entered blocking state [ 47.480457][ T6062] bridge0: port 3(team0) entered disabled state [ 47.491475][ T6062] bridge0: port 3(team0) entered blocking state [ 47.497802][ T6062] bridge0: port 3(team0) entered listening state [ 47.567780][ T6083] loop0: detected capacity change from 0 to 128 [ 47.889371][ T6135] xt_CT: No such helper "pptp" [ 48.168178][ T6156] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 48.181567][ T6156] bond2 (unregistering): Released all slaves [ 48.228484][ T6167] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 48.923904][ T6227] team0: entered promiscuous mode [ 48.928979][ T6227] team_slave_0: entered promiscuous mode [ 48.934787][ T6227] team_slave_1: entered promiscuous mode [ 48.940668][ T6227] team0: entered allmulticast mode [ 48.945905][ T6227] team_slave_0: entered allmulticast mode [ 48.951649][ T6227] team_slave_1: entered allmulticast mode [ 49.021227][ T6227] bridge0: port 2(team0) entered blocking state [ 49.027746][ T6227] bridge0: port 2(team0) entered disabled state [ 49.050406][ T6227] bridge0: port 2(team0) entered blocking state [ 49.053373][ T6232] loop2: detected capacity change from 0 to 4096 [ 49.056734][ T6227] bridge0: port 2(team0) entered listening state [ 49.075883][ T6201] syz.4.1309 (6201) used greatest stack depth: 10056 bytes left [ 49.091901][ T6232] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 49.142454][ T6232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.224271][ T6250] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 49.276591][ T6255] SET target dimension over the limit! [ 49.285891][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.395241][ T6272] ip6tnl1: entered promiscuous mode [ 49.407104][ T6275] team0: entered promiscuous mode [ 49.412205][ T6275] team_slave_0: entered promiscuous mode [ 49.417891][ T6275] team_slave_1: entered promiscuous mode [ 49.423605][ T6275] team0: entered allmulticast mode [ 49.428946][ T6275] team_slave_0: entered allmulticast mode [ 49.434780][ T6275] team_slave_1: entered allmulticast mode [ 49.472892][ T6275] bridge0: port 2(team0) entered blocking state [ 49.479222][ T6275] bridge0: port 2(team0) entered disabled state [ 49.487346][ T6275] bridge0: port 2(team0) entered blocking state [ 49.493694][ T6275] bridge0: port 2(team0) entered forwarding state [ 49.504766][ T6280] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 49.559884][ T6288] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 49.696961][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 49.696996][ T28] audit: type=1400 audit(1770686709.910:376): avc: denied { mounton } for pid=6310 comm="syz.1.1362" path="/259/file0" dev="tmpfs" ino=1321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.769915][ T6319] xt_TCPMSS: Only works on TCP SYN packets [ 49.777302][ T28] audit: type=1400 audit(1770686709.980:377): avc: denied { setopt } for pid=6318 comm="syz.4.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.828652][ T28] audit: type=1400 audit(1770686710.040:378): avc: denied { read } for pid=6325 comm="syz.0.1370" dev="nsfs" ino=4026532509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.849759][ T28] audit: type=1400 audit(1770686710.040:379): avc: denied { open } for pid=6325 comm="syz.0.1370" path="net:[4026532509]" dev="nsfs" ino=4026532509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.854658][ T6329] __nla_validate_parse: 14 callbacks suppressed [ 49.854681][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 49.897603][ T28] audit: type=1400 audit(1770686710.090:380): avc: denied { create } for pid=6325 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.917520][ T28] audit: type=1400 audit(1770686710.100:381): avc: denied { setopt } for pid=6325 comm="syz.0.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.938240][ T6331] xt_cluster: node mask cannot exceed total number of nodes [ 49.963767][ T28] audit: type=1400 audit(1770686710.160:382): avc: denied { create } for pid=6332 comm="syz.0.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.983355][ T28] audit: type=1400 audit(1770686710.170:383): avc: denied { write } for pid=6332 comm="syz.0.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.009796][ T28] audit: type=1400 audit(1770686710.220:384): avc: denied { create } for pid=6337 comm="syz.3.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.029406][ T28] audit: type=1400 audit(1770686710.220:385): avc: denied { ioctl } for pid=6337 comm="syz.3.1375" path="socket:[14547]" dev="sockfs" ino=14547 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.266455][ T6378] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1396'. [ 50.275592][ T6378] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1396'. [ 50.284594][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 50.299045][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1398'. [ 50.325511][ T6387] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1400'. [ 50.407217][ T6400] validate_nla: 10 callbacks suppressed [ 50.407234][ T6400] netlink: 'syz.1.1404': attribute type 46 has an invalid length. [ 50.420681][ T6400] netlink: 'syz.1.1404': attribute type 19 has an invalid length. [ 50.428478][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1404'. [ 50.485532][ T6410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1419'. [ 50.587222][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1415'. [ 50.596403][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1415'. [ 50.654858][ T6434] IPv6: A: Disabled Multicast RS [ 50.822402][ T6468] netlink: 'syz.4.1439': attribute type 21 has an invalid length. [ 50.823587][ T6467] xt_TCPMSS: Only works on TCP SYN packets [ 50.830408][ T6468] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.839306][ T6468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.851313][ T6468] IPv6: NLM_F_CREATE should be set when creating new route [ 50.858518][ T6468] IPv6: NLM_F_CREATE should be set when creating new route [ 50.865811][ T6468] IPv6: NLM_F_CREATE should be set when creating new route [ 50.881762][ T6470] netlink: 'syz.2.1442': attribute type 3 has an invalid length. [ 51.058066][ T6501] netlink: 'syz.4.1455': attribute type 3 has an invalid length. [ 51.078333][ T6491] bridge0: port 3(team0) entered disabled state [ 51.084753][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.091939][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.787081][ T6643] loop3: detected capacity change from 0 to 512 [ 52.279418][ T6721] netlink: 'syz.1.1560': attribute type 10 has an invalid length. [ 52.341876][ T6721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.377523][ T6721] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 52.489436][ T6760] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 52.497345][ T6760] netlink: 'syz.0.1566': attribute type 2 has an invalid length. [ 52.643214][ T6786] netlink: 'syz.4.1579': attribute type 15 has an invalid length. [ 52.976739][ T6850] netlink: 'syz.2.1610': attribute type 6 has an invalid length. [ 53.116368][ T6873] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 53.122918][ T6873] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 53.131089][ T6873] vhci_hcd vhci_hcd.0: Device attached [ 53.151236][ T6882] syz_tun: refused to change device tx_queue_len [ 53.157640][ T6882] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 53.181036][ T6873] vhci_hcd vhci_hcd.0: port 0 already used [ 53.197621][ T6877] vhci_hcd: connection closed [ 53.202980][ T3441] vhci_hcd vhci_hcd.2: stop threads [ 53.213089][ T3441] vhci_hcd vhci_hcd.2: release socket [ 53.218461][ T3441] vhci_hcd vhci_hcd.2: disconnect device [ 53.290156][ T6903] loop4: detected capacity change from 0 to 512 [ 53.339265][ T6903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.370222][ T6903] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.395916][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.825582][ T6989] loop1: detected capacity change from 0 to 2048 [ 53.872473][ T3288] Alternate GPT is invalid, using primary GPT. [ 53.878877][ T3288] loop1: p2 p3 p7 [ 53.913105][ T6989] Alternate GPT is invalid, using primary GPT. [ 53.919487][ T6989] loop1: p2 p3 p7 [ 53.955742][ T2996] Alternate GPT is invalid, using primary GPT. [ 53.962115][ T2996] loop1: p2 p3 p7 [ 54.005094][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.021775][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.032147][ T4040] udevd[4040]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 54.085198][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 54.086273][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.086858][ T4040] udevd[4040]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.100413][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 54.103761][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 54.104098][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 54.142507][ T7032] bond2: option mode: invalid value (9) [ 54.148993][ T7032] bond2 (unregistering): Released all slaves [ 54.634156][ T7096] xt_limit: Overflow, try lower: 0/0 [ 54.744239][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 54.744253][ T28] audit: type=1400 audit(1770686714.960:466): avc: denied { create } for pid=7114 comm="syz.4.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.801943][ T28] audit: type=1400 audit(1770686714.990:467): avc: denied { write } for pid=7114 comm="syz.4.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.856626][ T7125] __nla_validate_parse: 23 callbacks suppressed [ 54.856643][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1741'. [ 54.875328][ T7127] ip6erspan0: entered allmulticast mode [ 54.939174][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'. [ 54.992486][ T28] audit: type=1400 audit(1770686715.210:468): avc: denied { kexec_image_load } for pid=7142 comm="syz.3.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 55.079628][ T7163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.130101][ T28] audit: type=1400 audit(1770686715.340:469): avc: denied { execute } for pid=7167 comm="syz.1.1761" name="cgroup" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 55.188086][ T28] audit: type=1326 audit(1770686715.380:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x7ffc0000 [ 55.211441][ T28] audit: type=1326 audit(1770686715.380:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x7ffc0000 [ 55.234775][ T28] audit: type=1326 audit(1770686715.390:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f633b48af79 code=0x7ffc0000 [ 55.257995][ T28] audit: type=1326 audit(1770686715.390:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x7ffc0000 [ 55.281374][ T28] audit: type=1326 audit(1770686715.390:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x7ffc0000 [ 55.313008][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1767'. [ 55.499283][ T7217] validate_nla: 6 callbacks suppressed [ 55.499300][ T7217] netlink: 'syz.2.1786': attribute type 15 has an invalid length. [ 55.512630][ T7217] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1786'. [ 55.545874][ T7223] loop4: detected capacity change from 0 to 2048 [ 55.569472][ T7228] netlink: 'syz.1.1791': attribute type 3 has an invalid length. [ 55.603476][ T4040] loop4: p3 p4 < > [ 55.608634][ T4040] loop4: p3 start 11362048 is beyond EOD, truncated [ 55.651567][ T7223] loop4: p3 p4 < > [ 55.655461][ T7223] loop4: p3 start 11362048 is beyond EOD, truncated [ 55.734259][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 55.734807][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 55.831491][ T28] audit: type=1400 audit(1770687484.065:475): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.909496][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1824'. [ 55.946998][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 55.984263][ T7282] netlink: 'syz.4.1817': attribute type 41 has an invalid length. [ 56.054130][ T7288] loop0: detected capacity change from 0 to 4096 [ 56.096144][ T7288] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.156383][ T7288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.279545][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.385684][ T7322] netlink: 'syz.2.1836': attribute type 27 has an invalid length. [ 56.622153][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1851'. [ 56.623359][ T7354] netlink: 'syz.0.1852': attribute type 6 has an invalid length. [ 56.639010][ T7354] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1852'. [ 56.723756][ T7364] netlink: 'syz.4.1856': attribute type 7 has an invalid length. [ 56.731602][ T7364] netlink: 'syz.4.1856': attribute type 8 has an invalid length. [ 56.955475][ T7405] IPv6: A: Disabled Multicast RS [ 57.005674][ T7413] xt_cluster: node mask cannot exceed total number of nodes [ 57.056974][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.064203][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.130646][ T7427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1889'. [ 57.281201][ T7452] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 57.340094][ T7466] netlink: 'syz.3.1908': attribute type 46 has an invalid length. [ 57.348111][ T7466] netlink: 'syz.3.1908': attribute type 19 has an invalid length. [ 57.659393][ T7485] syz.2.1918 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 57.670510][ T7485] CPU: 0 UID: 0 PID: 7485 Comm: syz.2.1918 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.670535][ T7485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 57.670547][ T7485] Call Trace: [ 57.670595][ T7485] [ 57.670603][ T7485] __dump_stack+0x1d/0x30 [ 57.670625][ T7485] dump_stack_lvl+0x95/0xd0 [ 57.670671][ T7485] dump_stack+0x15/0x1b [ 57.670688][ T7485] dump_header+0x80/0x240 [ 57.670741][ T7485] oom_kill_process+0x295/0x350 [ 57.670766][ T7485] out_of_memory+0x97d/0xb80 [ 57.670787][ T7485] try_charge_memcg+0x62e/0xa10 [ 57.670892][ T7485] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 57.670924][ T7485] __read_swap_cache_async+0x17b/0x2d0 [ 57.671005][ T7485] swap_cluster_readahead+0x262/0x3c0 [ 57.671142][ T7485] swapin_readahead+0xde/0x840 [ 57.671185][ T7485] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 57.671212][ T7485] ? lruvec_stat_mod_folio+0xd2/0x110 [ 57.671305][ T7485] ? __rcu_read_unlock+0x4e/0x70 [ 57.671334][ T7485] ? swap_cache_get_folio+0x26f/0x280 [ 57.671363][ T7485] do_swap_page+0x59b/0x2a50 [ 57.671420][ T7485] ? __rcu_read_lock+0x36/0x50 [ 57.671499][ T7485] ? __pfx_default_wake_function+0x10/0x10 [ 57.671531][ T7485] handle_mm_fault+0xb40/0x3030 [ 57.671576][ T7485] ? vma_start_read+0x1c7/0x2c0 [ 57.671599][ T7485] do_user_addr_fault+0x62f/0x1050 [ 57.671623][ T7485] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 57.671647][ T7485] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 57.671724][ T7485] ? irqentry_exit+0x3c/0x510 [ 57.671747][ T7485] exc_page_fault+0x62/0xa0 [ 57.671764][ T7485] asm_exc_page_fault+0x26/0x30 [ 57.671793][ T7485] RIP: 0033:0x7f1bab3e8a0c [ 57.671815][ T7485] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 57.671831][ T7485] RSP: 002b:00007ffef262a2c0 EFLAGS: 00010206 [ 57.671877][ T7485] RAX: 0000000000000000 RBX: 00007f1bab795fa0 RCX: 0000555563fca808 [ 57.671890][ T7485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.671904][ T7485] RBP: 00007f1bab797da0 R08: 0000000000000000 R09: 0000000000000000 [ 57.671918][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000e407 [ 57.671929][ T7485] R13: 00007f1bab795fac R14: 000000000000e0f9 R15: 00007ffef262a3c0 [ 57.671946][ T7485] [ 57.671952][ T7485] memory: usage 307200kB, limit 307200kB, failcnt 444 [ 57.910435][ T7485] memory+swap: usage 77752kB, limit 9007199254740988kB, failcnt 0 [ 57.918279][ T7485] kmem: usage 71356kB, limit 9007199254740988kB, failcnt 0 [ 57.925524][ T7485] Memory cgroup stats for /syz2: [ 57.940766][ T7485] cache 0 [ 57.948797][ T7485] rss 0 [ 57.951561][ T7485] shmem 0 [ 57.954494][ T7485] mapped_file 0 [ 57.958072][ T7485] dirty 0 [ 57.961000][ T7485] writeback 0 [ 57.964267][ T7485] workingset_refault_anon 5 [ 57.968782][ T7485] workingset_refault_file 3 [ 57.973277][ T7485] swap 135168 [ 57.976582][ T7485] swapcached 20480 [ 57.980286][ T7485] pgpgin 18529 [ 57.983645][ T7485] pgpgout 18524 [ 57.987123][ T7485] pgfault 39139 [ 57.990642][ T7485] pgmajfault 4 [ 57.994041][ T7485] inactive_anon 20480 [ 57.998031][ T7485] active_anon 0 [ 58.001473][ T7485] inactive_file 0 [ 58.005120][ T7485] active_file 0 [ 58.008621][ T7485] unevictable 0 [ 58.012060][ T7485] hierarchical_memory_limit 314572800 [ 58.017448][ T7485] hierarchical_memsw_limit 9223372036854771712 [ 58.023617][ T7485] total_cache 0 [ 58.027103][ T7485] total_rss 0 [ 58.030379][ T7485] total_shmem 0 [ 58.033912][ T7485] total_mapped_file 0 [ 58.037890][ T7485] total_dirty 0 [ 58.041341][ T7485] total_writeback 0 [ 58.045180][ T7485] total_workingset_refault_anon 5 [ 58.050208][ T7485] total_workingset_refault_file 3 [ 58.055284][ T7485] total_swap 135168 [ 58.059112][ T7485] total_swapcached 20480 [ 58.063374][ T7485] total_pgpgin 18529 [ 58.067273][ T7485] total_pgpgout 18524 [ 58.071282][ T7485] total_pgfault 39139 [ 58.075249][ T7485] total_pgmajfault 4 [ 58.079132][ T7485] total_inactive_anon 20480 [ 58.083653][ T7485] total_active_anon 0 [ 58.087651][ T7485] total_inactive_file 0 [ 58.091830][ T7485] total_active_file 0 [ 58.095797][ T7485] total_unevictable 0 [ 58.099795][ T7485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1918,pid=7485,uid=0 [ 58.114363][ T7485] Memory cgroup out of memory: Killed process 7485 (syz.2.1918) total-vm:96060kB, anon-rss:1340kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 58.138537][ T7533] erspan0: entered promiscuous mode [ 58.143766][ T7533] erspan0: entered allmulticast mode [ 58.218228][ T7548] xt_TCPMSS: Only works on TCP SYN packets [ 58.744223][ T7639] loop3: detected capacity change from 0 to 4096 [ 58.782900][ T7647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.811397][ T7639] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.824078][ T7639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.853334][ T7657] loop0: detected capacity change from 0 to 512 [ 58.896233][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.157022][ T7699] bond2: option mode: invalid value (9) [ 59.166357][ T7699] bond2 (unregistering): Released all slaves [ 60.114719][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 60.114736][ T28] audit: type=1400 audit(1770687488.559:563): avc: denied { read write } for pid=7735 comm="syz.4.2038" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.144560][ T28] audit: type=1400 audit(1770687488.559:564): avc: denied { open } for pid=7735 comm="syz.4.2038" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.187008][ T7734] bond2: option mode: invalid value (9) [ 60.201058][ T28] audit: type=1400 audit(1770687488.654:565): avc: denied { getopt } for pid=7744 comm="syz.3.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.202174][ T7734] bond2 (unregistering): Released all slaves [ 60.277563][ T7750] bridge0: port 3(team0) entered disabled state [ 60.283924][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.291119][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.325049][ T7754] __nla_validate_parse: 15 callbacks suppressed [ 60.325065][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 60.347089][ T7754] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2046'. [ 60.356210][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 60.420575][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.446937][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.494846][ T7771] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 60.512701][ T7771] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 60.541118][ T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.556310][ T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.565454][ T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.588516][ T28] audit: type=1400 audit(1770687489.063:566): avc: denied { read } for pid=7787 comm="syz.0.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 60.615109][ T7791] bond1: option mode: invalid value (9) [ 60.622758][ T7791] bond1 (unregistering): Released all slaves [ 60.635605][ T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.658519][ T7799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.665772][ T7799] IPv6: NLM_F_CREATE should be set when creating new route [ 60.701996][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2068'. [ 60.718827][ T7805] loop3: detected capacity change from 0 to 512 [ 60.752962][ T28] audit: type=1400 audit(1770687489.220:567): avc: denied { setopt } for pid=7808 comm="syz.0.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.782513][ T7805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.795248][ T7805] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.837741][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.851404][ T7823] validate_nla: 5 callbacks suppressed [ 60.851420][ T7823] netlink: 'syz.0.2078': attribute type 21 has an invalid length. [ 60.861978][ T28] audit: type=1400 audit(1770687489.336:568): avc: denied { read } for pid=7819 comm="syz.1.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.864920][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 60.960343][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 61.002986][ T7839] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2085'. [ 61.013237][ T28] audit: type=1326 audit(1770687489.493:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.0.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x50000 [ 61.016912][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2085'. [ 61.036302][ T28] audit: type=1326 audit(1770687489.493:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.0.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x50000 [ 61.036330][ T28] audit: type=1326 audit(1770687489.493:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.0.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x50000 [ 61.091845][ T28] audit: type=1326 audit(1770687489.493:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7841 comm="syz.0.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x50000 [ 61.403455][ T7887] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2109'. [ 61.434800][ T7891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2111'. [ 61.508596][ T7897] netlink: 'syz.3.2114': attribute type 13 has an invalid length. [ 61.576699][ T7909] x_tables: duplicate underflow at hook 1 [ 61.594184][ T7911] sit0: entered promiscuous mode [ 61.599198][ T7911] netlink: 'syz.2.2118': attribute type 1 has an invalid length. [ 61.966594][ T7958] xt_hashlimit: overflow, try lower: 6/0 [ 62.214373][ T7996] netlink: 'syz.3.2159': attribute type 3 has an invalid length. [ 62.391905][ T8009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.427573][ T8009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.483863][ T8029] netlink: 'syz.4.2178': attribute type 2 has an invalid length. [ 62.502343][ T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.533572][ T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.575076][ T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.616201][ T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.739378][ T8061] netlink: 'syz.2.2193': attribute type 32 has an invalid length. [ 63.012911][ T8101] bridge2: entered promiscuous mode [ 63.018227][ T8101] bridge2: entered allmulticast mode [ 63.044055][ T8104] loop2: detected capacity change from 0 to 512 [ 63.078291][ T8104] FAT-fs (loop2): Directory bread(block 199916) failed [ 63.107883][ T8104] FAT-fs (loop2): Directory bread(block 199917) failed [ 63.136644][ T8104] FAT-fs (loop2): Directory bread(block 199918) failed [ 63.155882][ T8117] netlink: 'syz.3.2222': attribute type 41 has an invalid length. [ 63.165663][ T8104] FAT-fs (loop2): Directory bread(block 199919) failed [ 63.200436][ T8104] FAT-fs (loop2): Directory bread(block 199920) failed [ 63.223973][ T8104] FAT-fs (loop2): Directory bread(block 199921) failed [ 63.248246][ T8104] FAT-fs (loop2): Directory bread(block 199922) failed [ 63.253696][ T8124] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 63.270516][ T8104] FAT-fs (loop2): Directory bread(block 199923) failed [ 63.303384][ T8104] FAT-fs (loop2): Directory bread(block 199916) failed [ 63.322385][ T8124] bond2 (unregistering): Released all slaves [ 63.342832][ T8104] FAT-fs (loop2): Directory bread(block 199917) failed [ 63.433161][ T8140] tmpfs: Unknown parameter 'context*½p' [ 63.500991][ T8151] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 63.782383][ T8191] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 63.870405][ C1] bridge0: port 2(team0) entered learning state [ 64.060673][ T8234] futex_wake_op: syz.3.2280 tries to shift op by 32; fix this program [ 64.130456][ T8246] random: crng reseeded on system resumption [ 64.369817][ T8292] netlink: 'syz.3.2308': attribute type 6 has an invalid length. [ 64.454230][ T8302] netlink: 'syz.2.2313': attribute type 1 has an invalid length. [ 64.594049][ T8328] netlink: 'syz.3.2322': attribute type 30 has an invalid length. [ 64.900148][ T28] kauditd_printk_skb: 7576 callbacks suppressed [ 64.900164][ T28] audit: type=1400 audit(1770687493.588:8140): avc: denied { read open } for pid=8381 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.022703][ T28] audit: type=1400 audit(1770687493.588:8141): avc: denied { getattr } for pid=8381 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.085314][ T8414] xt_TCPMSS: Only works on TCP SYN packets [ 65.097076][ T28] audit: type=1400 audit(1770687493.756:8142): avc: denied { add_name } for pid=8380 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.119958][ T28] audit: type=1400 audit(1770687493.756:8143): avc: denied { create } for pid=8380 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.142593][ T28] audit: type=1400 audit(1770687493.756:8144): avc: denied { write } for pid=8380 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=8961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.169067][ T28] audit: type=1400 audit(1770687493.756:8145): avc: denied { append } for pid=8380 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=8961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.200836][ T28] audit: type=1400 audit(1770687493.788:8146): avc: denied { remove_name } for pid=8415 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=8961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.224547][ T28] audit: type=1400 audit(1770687493.788:8147): avc: denied { unlink } for pid=8415 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=8961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.249119][ T8425] __nla_validate_parse: 14 callbacks suppressed [ 65.249138][ T8425] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2367'. [ 65.382474][ T28] audit: type=1326 audit(1770687494.050:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.2.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bab51af79 code=0x7ffc0000 [ 65.405970][ T28] audit: type=1326 audit(1770687494.050:8149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz.2.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bab51af79 code=0x7ffc0000 [ 65.494797][ T8468] loop1: detected capacity change from 0 to 1024 [ 65.570230][ T8468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.610866][ T8487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2390'. [ 65.619921][ T8487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2390'. [ 65.624119][ T8468] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #11: block 32: comm syz.1.2383: bad entry in directory: inode out of bounds - offset=0, inode=695563, rec_len=1024, size=1024 fake=1 [ 65.638149][ T8492] syz.0.2393 (8492): /proc/8489/oom_adj is deprecated, please use /proc/8489/oom_score_adj instead. [ 65.662160][ T8468] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #11: comm syz.1.2383: directory missing '.' [ 65.704915][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.754440][ T8504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2395'. [ 65.958459][ T8538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2415'. [ 65.976297][ T8540] validate_nla: 6 callbacks suppressed [ 65.976314][ T8540] netlink: 'syz.3.2417': attribute type 13 has an invalid length. [ 66.032958][ T8540] gretap0: refused to change device tx_queue_len [ 66.051797][ T8540] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 66.131867][ T8564] process 'syz.2.2429' launched '/dev/fd/3' with NULL argv: empty string added [ 66.251783][ T8586] netlink: 'syz.0.2438': attribute type 21 has an invalid length. [ 66.259651][ T8586] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2438'. [ 66.269942][ T8585] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 66.282175][ T8586] netlink: 'syz.0.2438': attribute type 4 has an invalid length. [ 66.289948][ T8586] netlink: 'syz.0.2438': attribute type 5 has an invalid length. [ 66.297679][ T8586] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2438'. [ 66.530697][ T8614] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 66.538556][ T8614] netlink: 'syz.2.2451': attribute type 2 has an invalid length. [ 66.546311][ T8614] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2451'. [ 66.851644][ T8604] bridge0: port 2(team0) entered disabled state [ 66.858002][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.954636][ T8650] netlink: 'syz.4.2468': attribute type 15 has an invalid length. [ 66.962699][ T8650] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2468'. [ 67.043892][ T8664] erspan0: entered promiscuous mode [ 67.049141][ T8664] erspan0: entered allmulticast mode [ 67.360348][ T8722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.487307][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 67.720935][ T8771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.740003][ T8771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.772569][ T8771] batman_adv: batadv0: Interface deactivated: macvlan0 [ 67.800107][ T51] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.822173][ T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.840446][ T51] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.949571][ T8809] netlink: 'syz.2.2546': attribute type 39 has an invalid length. [ 68.033684][ T8802] bridge0: port 2(team0) entered disabled state [ 68.040090][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.213760][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.224884][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.285112][ T51] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.319506][ T51] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.341552][ T51] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.350626][ T51] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.363135][ T3331] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.451075][ T8840] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 68.459343][ T8840] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 68.553987][ T8854] loop1: detected capacity change from 0 to 512 [ 68.595540][ T8854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.631509][ T8854] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.711470][ T8880] syz.0.2569 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.729505][ T8882] xt_ipcomp: unknown flags 1D [ 68.741892][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.903444][ T8903] x_tables: duplicate underflow at hook 4 [ 69.015248][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.035967][ T8869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.112720][ T8884] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 69.129648][ T8894] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 69.137962][ T8901] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 69.163953][ T3331] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.194829][ T3331] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.214013][ T3331] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.227459][ T3331] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.325117][ T8929] netlink: 'syz.4.2594': attribute type 2 has an invalid length. [ 69.486123][ T8951] sit0: entered promiscuous mode [ 69.776580][ T9002] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.806220][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 69.806233][ T28] audit: type=1326 audit(1770687498.743:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 69.835934][ T28] audit: type=1326 audit(1770687498.743:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 69.897262][ T28] audit: type=1326 audit(1770687498.785:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 69.920770][ T28] audit: type=1326 audit(1770687498.785:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 69.944401][ T28] audit: type=1326 audit(1770687498.785:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcdaf9af79 code=0x7ffc0000 [ 69.970204][ T9010] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9010 comm=syz.1.2633 [ 69.982909][ T9010] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=9010 comm=syz.1.2633 [ 70.001393][ T9014] loop3: detected capacity change from 0 to 512 [ 70.050116][ T9014] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.063263][ T9014] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.095537][ T9014] EXT4-fs (loop3): 1 truncate cleaned up [ 70.101846][ T9014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.133649][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.162081][ T28] audit: type=1326 audit(1770687499.090:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 70.185600][ T28] audit: type=1326 audit(1770687499.090:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 70.209166][ T28] audit: type=1326 audit(1770687499.090:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 70.232678][ T28] audit: type=1326 audit(1770687499.090:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 70.256261][ T28] audit: type=1326 audit(1770687499.090:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ac09af79 code=0x7ffc0000 [ 70.389224][ T9060] __nla_validate_parse: 12 callbacks suppressed [ 70.389239][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2657'. [ 70.404600][ T9060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2657'. [ 70.416330][ T9064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2660'. [ 70.531445][ T9082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2669'. [ 70.747133][ T9114] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2685'. [ 70.789225][ T9121] No such timeout policy "syz1" [ 70.841029][ T9132] loop2: detected capacity change from 0 to 512 [ 70.900395][ T9132] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2694: couldn't read orphan inode 26 (err -116) [ 70.903553][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'. [ 70.912407][ T9132] loop2: lost filesystem error report for type 5 error -116 [ 70.981956][ T9132] EXT4-fs (loop2): Remounting filesystem read-only [ 71.048409][ T9132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.092319][ T9132] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.105108][ T9167] validate_nla: 3 callbacks suppressed [ 71.105122][ T9167] netlink: 'syz.3.2710': attribute type 7 has an invalid length. [ 71.130498][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.190941][ T9177] loop1: detected capacity change from 0 to 764 [ 71.439029][ T9212] x_tables: duplicate entry at hook 3 [ 71.543459][ T9229] geneve0: entered promiscuous mode [ 71.549025][ T9230] netlink: 'syz.0.2741': attribute type 4 has an invalid length. [ 71.549076][ T9226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2735'. [ 71.565739][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'. [ 71.578982][ T1451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 71.601545][ T1451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 71.613543][ T1451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 71.631616][ T9236] x_tables: duplicate underflow at hook 4 [ 71.636819][ T1451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 71.869374][ T9277] netlink: 'syz.3.2760': attribute type 21 has an invalid length. [ 71.977013][ T9295] netlink: 'syz.4.2771': attribute type 12 has an invalid length. [ 71.983895][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2775'. [ 72.101403][ T9320] netlink: 'syz.2.2784': attribute type 2 has an invalid length. [ 72.109288][ T9320] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2784'. [ 72.124486][ T9322] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 72.195746][ T9335] netlink: 'syz.2.2792': attribute type 13 has an invalid length. [ 72.261575][ T9347] netlink: 'syz.2.2798': attribute type 4 has an invalid length. [ 72.323435][ T9356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.389455][ T9364] x_tables: ip_tables: osf match: only valid for protocol 6 [ 72.429129][ T9374] netlink: 'syz.3.2812': attribute type 1 has an invalid length. [ 72.437017][ T9374] netlink: 'syz.3.2812': attribute type 3 has an invalid length. [ 72.466822][ T9380] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.941730][ T9475] loop3: detected capacity change from 0 to 1024 [ 72.944229][ T9477] usb usb1: usbfs: process 9477 (syz.0.2862) did not claim interface 0 before use [ 72.986616][ T9475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.044209][ T9494] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 73.053300][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.230218][ T9527] loop1: detected capacity change from 0 to 128 [ 73.293865][ T9539] tc_dump_action: action bad kind [ 73.859728][ T9637] erspan0: left promiscuous mode [ 73.864884][ T9637] erspan0: left allmulticast mode [ 73.913765][ T9637] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 74.088344][ T9673] random: crng reseeded on system resumption [ 74.162784][ T9681] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 74.210018][ T9691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.503393][ T51] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.528351][ T51] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.554066][ T51] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.569734][ T51] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.673573][ T9764] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 75.000012][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 75.000025][ T28] audit: type=1326 audit(1770687504.192:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9820 comm="syz.0.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x7ffc0000 [ 75.098810][ T28] audit: type=1326 audit(1770687504.287:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9830 comm="syz.0.3033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f633b48af79 code=0x0 [ 75.152213][ T9837] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 75.190343][ T9843] xt_hashlimit: max too large, truncated to 1048576 [ 75.259794][ T9855] x_tables: duplicate underflow at hook 4 [ 75.352086][ T28] audit: type=1400 audit(1770687504.560:8279): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.376314][ T28] audit: type=1400 audit(1770687504.560:8280): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.501356][ T28] audit: type=1400 audit(1770687504.612:8281): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.527111][ T28] audit: type=1400 audit(1770687504.644:8282): avc: denied { create } for pid=9868 comm="syz.0.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.546637][ T28] audit: type=1400 audit(1770687504.644:8283): avc: denied { write } for pid=9868 comm="syz.0.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.567006][ T28] audit: type=1400 audit(1770687504.696:8284): avc: denied { create } for pid=9871 comm="syz.4.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.587240][ T28] audit: type=1400 audit(1770687504.696:8285): avc: denied { write } for pid=9871 comm="syz.4.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.607312][ T28] audit: type=1400 audit(1770687504.717:8286): avc: denied { read write } for pid=9875 comm="syz.4.3055" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.745632][ T9890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9890 comm=syz.0.3061 [ 75.758346][ T9890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=9890 comm=syz.0.3061 [ 75.785907][ T9896] __nla_validate_parse: 19 callbacks suppressed [ 75.785922][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3064'. [ 75.860038][ T51] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.890306][ T51] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.911812][ T51] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.947717][ T51] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 76.073457][ T9932] loop0: detected capacity change from 0 to 512 [ 76.095417][ T9932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.146388][ T9932] ext4 filesystem being mounted at /611/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.151301][ T9932] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.3084: directory missing '.' [ 76.185089][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.605875][T10019] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.636893][T10023] validate_nla: 16 callbacks suppressed [ 76.636907][T10023] netlink: 'syz.4.3127': attribute type 4 has an invalid length. [ 76.684094][T10030] netlink: 'syz.0.3128': attribute type 12 has an invalid length. [ 76.811811][T10045] tmpfs: Bad value for 'mpol' [ 76.888004][T10052] netdevsim netdevsim0 ì: renamed from netdevsim0 [ 76.955781][T10065] netlink: 'syz.3.3146': attribute type 12 has an invalid length. [ 77.014531][T10074] loop4: detected capacity change from 0 to 512 [ 77.030167][T10074] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.066879][T10074] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3152: bg 0: block 104: invalid block bitmap [ 77.079387][T10074] loop4: lost filesystem error report for type 5 error -117 [ 77.090709][T10085] xt_cgroup: invalid path, errno=-2 [ 77.110350][T10074] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 77.119045][T10074] loop4: lost filesystem error report for type 5 error -117 [ 77.128772][T10074] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3152: invalid indirect mapped block 1 (level 1) [ 77.149374][T10074] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.182324][T10074] EXT4-fs (loop4): 1 truncate cleaned up [ 77.213771][T10098] batadv1: entered promiscuous mode [ 77.214773][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3164'. [ 77.219157][T10098] batadv1: entered allmulticast mode [ 77.234882][T10074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.250827][T10098] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 77.263020][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'. [ 77.280879][T10103] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3166'. [ 77.309105][T10107] netlink: 'syz.1.3167': attribute type 12 has an invalid length. [ 77.318389][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.361527][T10116] x_tables: duplicate underflow at hook 4 [ 77.438458][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3179'. [ 77.447634][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3179'. [ 77.550444][T10150] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 77.553868][T10151] netlink: 'syz.2.3188': attribute type 12 has an invalid length. [ 77.625464][T10162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3195'. [ 77.690684][T10168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.705998][ T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.734386][ T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.773272][ T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.805864][ T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.827052][T10187] netlink: 'syz.0.3208': attribute type 12 has an invalid length. [ 77.906559][T10200] Cannot find add_set index 1 as target [ 78.011186][T10217] netlink: 'syz.2.3222': attribute type 12 has an invalid length. [ 78.238744][T10247] netlink: 'syz.2.3237': attribute type 12 has an invalid length. [ 78.449283][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3249'. [ 78.555130][T10284] tc_dump_action: action bad kind [ 78.570603][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3257'. [ 78.579657][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3257'. [ 78.843021][T10303] openvswitch: netlink: Key type 16383 is out of range max 32 [ 78.987494][T10331] netlink: 'syz.1.3276': attribute type 13 has an invalid length. [ 79.181431][T10373] random: crng reseeded on system resumption [ 79.190289][T10368] netlink: 'syz.2.3295': attribute type 1 has an invalid length. [ 79.286883][T10385] loop2: detected capacity change from 0 to 512 [ 79.314701][T10385] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.373650][T10385] EXT4-fs (loop2): 1 truncate cleaned up [ 79.387650][T10385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.478870][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.510506][ T3307] ================================================================== [ 79.518616][ T3307] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 79.526158][ T3307] [ 79.528465][ T3307] read-write to 0xffff888237c264a8 of 1 bytes by task 10417 on cpu 0: [ 79.536599][ T3307] folio_add_lru+0xa4/0x1e0 [ 79.541100][ T3307] folio_add_lru_vma+0x49/0x70 [ 79.545853][ T3307] do_wp_page+0x15be/0x2560 [ 79.550348][ T3307] handle_mm_fault+0x8c7/0x3030 [ 79.555192][ T3307] do_user_addr_fault+0x62f/0x1050 [ 79.560293][ T3307] exc_page_fault+0x62/0xa0 [ 79.564803][ T3307] asm_exc_page_fault+0x26/0x30 [ 79.569644][ T3307] [ 79.571951][ T3307] read to 0xffff888237c264a8 of 1 bytes by task 3307 on cpu 1: [ 79.579484][ T3307] __lru_add_drain_all+0x17e/0x450 [ 79.584590][ T3307] lru_add_drain_all+0x10/0x20 [ 79.589348][ T3307] invalidate_bdev+0x47/0x70 [ 79.593929][ T3307] ext4_put_super+0x624/0x7d0 [ 79.598595][ T3307] generic_shutdown_super+0xee/0x220 [ 79.603870][ T3307] kill_block_super+0x2a/0x70 [ 79.608538][ T3307] ext4_kill_sb+0x42/0x80 [ 79.612863][ T3307] deactivate_locked_super+0x75/0x1c0 [ 79.618235][ T3307] deactivate_super+0x97/0xa0 [ 79.622904][ T3307] cleanup_mnt+0x2bb/0x330 [ 79.627315][ T3307] __cleanup_mnt+0x19/0x20 [ 79.631720][ T3307] task_work_run+0x130/0x1a0 [ 79.636303][ T3307] exit_to_user_mode_loop+0x1f7/0x6f0 [ 79.641664][ T3307] do_syscall_64+0x1d3/0x2a0 [ 79.646248][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.652132][ T3307] [ 79.654438][ T3307] value changed: 0x19 -> 0x1c [ 79.659093][ T3307] [ 79.661398][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 79.667532][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.677410][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 79.687449][ T3307] ================================================================== [ 79.738188][T10421] usb usb1: usbfs: process 10421 (syz.2.3314) did not claim interface 0 before use