last executing test programs: 859.363799ms ago: executing program 4 (id=11485): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 840.18627ms ago: executing program 4 (id=11487): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x80}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) 813.240602ms ago: executing program 4 (id=11488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}]}, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8000}, 0x0) 804.046903ms ago: executing program 4 (id=11490): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 768.548645ms ago: executing program 4 (id=11494): r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000940)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xb3=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xadhs\x1d\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\x7f\xed\x99\x8f\x17m-\x91\xda\b\x1d\xb72\x98\xa3\xd1\xe4\\\x13\xd4\xc1\x1f*a\x03\xc20a|\x9a\x91\x83\x1e\a\xa3L \x14\xbc\xff\xc1\xce\x89\xe6\x1cJa\x05kq\x84\xbb\xe5\x98\xdb\x00\x00\xde\x9c\xc5', 0x3a, '#%\\x*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahF\xee\'X\x9a*Z\x15\xbc\xc8!\xf9\'\xbb\xfc\xeb\xdc\x11\xa8\x90{\xc5\xe2\xf1u\xb5\x12\xd0\x1e\x98\xce+\x12\xaexk\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T} \x888yDr\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\x0e\x00\x00\x00\x00\x00t0\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x85\xa4\xab\xa0\x88\xceI\x9a\xa0\xee`\xa0\xbc!r\xda\xea\x8f\x1bo\x02\xd7q2\x1a\xe9K\x89A\x06\x001\x86\xf3\xbe\xe5\x9e\x170\x113\xf2\x054W+\x9d\x1f\xd1\xda\xe6\x0ed\xa2\xb2\xfeij', 0x3a, './file0'}, 0x2a1) 709.44579ms ago: executing program 4 (id=11501): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 250.153442ms ago: executing program 1 (id=11549): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 211.785245ms ago: executing program 1 (id=11553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1}]}]}, 0x1bc}}, 0x0) 211.467655ms ago: executing program 3 (id=11554): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) 180.661407ms ago: executing program 1 (id=11555): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$tun(r0, 0x0, 0x2e) 180.284817ms ago: executing program 2 (id=11556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x11, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 170.158878ms ago: executing program 3 (id=11557): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) read$qrtrtun(r0, 0x0, 0x0) 169.434778ms ago: executing program 0 (id=11558): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80085610, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 155.320969ms ago: executing program 2 (id=11559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa000000080004"], 0x48}}, 0x0) 144.664119ms ago: executing program 1 (id=11560): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setrlimit(0x0, &(0x7f0000000300)={0x1, 0x81}) 141.77242ms ago: executing program 0 (id=11561): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 116.154292ms ago: executing program 3 (id=11562): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet_opts(r0, 0x0, 0x480, 0x0, 0x0) 115.931951ms ago: executing program 0 (id=11563): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xad0, 0xe1, 0x2, 0x8}) 115.618362ms ago: executing program 2 (id=11564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) 87.904524ms ago: executing program 3 (id=11565): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000496000/0x2000)=nil) 87.742493ms ago: executing program 1 (id=11566): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/236, 0xec}], 0x1, 0x3, 0x4) 87.550224ms ago: executing program 2 (id=11567): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='=relative', &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffffff) 82.089384ms ago: executing program 0 (id=11568): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600), &(0x7f0000000640)=0x8) 46.117027ms ago: executing program 3 (id=11569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 46.011567ms ago: executing program 0 (id=11570): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf27}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}]}}}]}, 0x5c}}, 0x8000) 45.792956ms ago: executing program 2 (id=11571): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 15.766529ms ago: executing program 1 (id=11572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 15.294649ms ago: executing program 0 (id=11573): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x3, 0x2}) 873.59µs ago: executing program 2 (id=11574): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x4e23, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}}, 0x4c}}, 0x20004010) 0s ago: executing program 3 (id=11575): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0xffffff1f, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xea}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1000}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041000}, 0x4804) kernel console output (not intermixed with test programs): system 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.203863][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.576236][T14993] tmpfs: Bad value for 'mpol' [ 115.718213][T15022] tmpfs: Bad value for 'mpol' [ 115.786501][T15034] IPv6: addrconf: prefix option has invalid lifetime [ 117.358834][T15297] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 117.376317][T15294] loop1: detected capacity change from 0 to 8192 [ 117.446081][ T3913] loop1: p2 p3 [ 117.464448][ T3913] loop1: p3 size 100663552 extends beyond EOD, truncated [ 117.499773][T15294] loop1: p2 p3 [ 117.507756][T15294] loop1: p3 size 100663552 extends beyond EOD, truncated [ 117.576267][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 117.591638][ T3911] udevd[3911]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 117.595105][T15328] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 117.632051][ T3911] udevd[3911]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 117.644757][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 118.110736][T15423] loop1: detected capacity change from 0 to 512 [ 118.129931][T15423] EXT4-fs (loop1): #blocks per group too big: 13066240 [ 118.155766][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 118.155802][ T28] audit: type=1326 audit(38097.470:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15429 comm="syz.0.6109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39aaf4c819 code=0x0 [ 118.428050][T15452] loop1: detected capacity change from 0 to 8192 [ 118.482512][T15452] FAT-fs (loop1): bogus logical sector size 0 [ 118.505878][T15452] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 118.527978][T15452] FAT-fs (loop1): Can't find a valid FAT filesystem [ 118.792834][T15513] IPv6: addrconf: prefix option has invalid lifetime [ 118.799578][T15513] IPv6: addrconf: prefix option has invalid lifetime [ 119.158046][T15581] tmpfs: Bad value for 'size' [ 119.169839][T15585] SELinux: Context system_u:object is not valid (left unmapped). [ 119.181224][T15586] IPv6: addrconf: prefix option has invalid lifetime [ 119.187969][T15586] IPv6: addrconf: prefix option has invalid lifetime [ 119.214398][ T28] audit: type=1400 audit(38098.462:304): avc: denied { relabelto } for pid=15583 comm="syz.0.6196" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 119.280008][ T28] audit: type=1400 audit(38098.462:305): avc: denied { associate } for pid=15583 comm="syz.0.6196" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 119.367989][ T28] audit: type=1400 audit(38098.574:306): avc: denied { mount } for pid=15606 comm="syz.0.6195" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.426283][ T28] audit: type=1400 audit(38098.593:307): avc: denied { unmount } for pid=3977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.448312][T15605] loop3: detected capacity change from 0 to 8192 [ 119.528983][ T3913] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 119.534339][ T3913] loop3: partition table partially beyond EOD, truncated [ 119.552157][ T3913] loop3: p1 start 100663296 is beyond EOD, truncated [ 119.568702][ T3913] loop3: p2 size 134217732 extends beyond EOD, truncated [ 119.588460][ T3913] loop3: p4 size 14876672 extends beyond EOD, truncated [ 119.611174][ T3913] loop3: p5 size 134217732 extends beyond EOD, truncated [ 119.629344][ T3913] loop3: p6 size 14876672 extends beyond EOD, truncated [ 119.649678][T15605] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 119.655086][T15605] loop3: partition table partially beyond EOD, truncated [ 119.666329][T15605] loop3: p1 start 100663296 is beyond EOD, truncated [ 119.685604][T15605] loop3: p2 size 134217732 extends beyond EOD, truncated [ 119.695500][T15605] loop3: p4 size 14876672 extends beyond EOD, truncated [ 119.718256][T15651] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 119.722938][T15648] tmpfs: Bad value for 'mpol' [ 119.732788][T15605] loop3: p5 size 134217732 extends beyond EOD, truncated [ 119.746056][ T28] audit: type=1400 audit(38098.957:308): avc: denied { relabelto } for pid=15650 comm="syz.4.6219" name="1112" dev="tmpfs" ino=5581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 119.772784][T15605] loop3: p6 size 14876672 extends beyond EOD, truncated [ 119.837496][ T28] audit: type=1400 audit(38098.986:309): avc: denied { associate } for pid=15650 comm="syz.4.6219" name="1112" dev="tmpfs" ino=5581 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 119.924680][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 119.924904][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 119.945973][ T3911] udevd[3911]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 119.958429][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 119.964165][ T28] audit: type=1400 audit(38099.014:310): avc: denied { remove_name } for pid=3993 comm="syz-executor" name="binderfs" dev="tmpfs" ino=5585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 119.980607][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 120.060810][ T3917] udevd[3917]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 120.100639][T15685] loop3: detected capacity change from 0 to 512 [ 120.115430][ T28] audit: type=1400 audit(38099.014:311): avc: denied { rmdir } for pid=3993 comm="syz-executor" name="1112" dev="tmpfs" ino=5581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 120.154155][T15689] tmpfs: Bad value for 'mpol' [ 120.169551][T15685] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 120.501354][T15741] futex_wake_op: syz.2.6263 tries to shift op by 36; fix this program [ 120.636962][T15763] loop3: detected capacity change from 0 to 512 [ 120.681620][T15763] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 120.770506][T15763] EXT4-fs (loop3): Remounting filesystem read-only [ 120.777992][T15763] EXT4-fs (loop3): 1 truncate cleaned up [ 120.783937][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 120.783956][ C0] EXT4-fs (loop3): initial error at time 38099: ext4_mb_generate_buddy:1317 [ 120.783986][ C0] EXT4-fs (loop3): last error at time 38099: ext4_mb_generate_buddy:1317 [ 120.809284][T15763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.840696][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.073662][T15827] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 121.086077][T15831] loop1: detected capacity change from 0 to 512 [ 121.138049][T15831] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 121.165808][T15842] tmpfs: Bad value for 'mpol' [ 121.213903][T15831] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 121.273421][ T28] audit: type=1326 audit(38100.389:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15849 comm="syz.4.6318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x0 [ 121.301351][T15831] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.6309: Corrupt directory, running e2fsck is recommended [ 121.397523][T15831] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 121.443297][T15831] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.6309: corrupted in-inode xattr: e_name out of bounds [ 121.510161][T15831] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.510299][T15831] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6309: couldn't read orphan inode 15 (err -117) [ 121.519683][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 121.519705][ C1] EXT4-fs (loop1): initial error at time 38100: ext4_iget_extra_inode:5040: inode 15 [ 121.519741][ C1] EXT4-fs (loop1): last error at time 38100: ext4_iget_extra_inode:5040: inode 15 [ 121.594562][T15831] loop1: lost filesystem error report for type 5 error -117 [ 121.595231][T15831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.715883][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.834419][T15910] loop1: detected capacity change from 0 to 2048 [ 121.846632][T15917] loop3: detected capacity change from 0 to 512 [ 121.900793][T15917] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.6348: ea_inode file size=4 entry size=6 [ 121.928870][T15917] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.6348: corrupted inode contents [ 121.941797][T15910] EXT4-fs warning (device loop1): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 121.962459][T15917] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.963839][T15917] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #15: comm syz.3.6348: mark_inode_dirty error [ 121.973205][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 121.973234][ C1] EXT4-fs (loop3): initial error at time 38101: ext4_do_update_inode:5602: inode 15 [ 121.973260][ C1] EXT4-fs (loop3): last error at time 38101: ext4_do_update_inode:5602: inode 15 [ 121.999033][T15930] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 122.000810][T15917] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.028361][T15917] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.6348: corrupted inode contents [ 122.050545][T15917] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.066037][T15917] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.6348: mark_inode_dirty error [ 122.094234][T15917] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.094569][T15917] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.6348: mark inode dirty (error -117) [ 122.117125][T15917] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.117337][T15917] EXT4-fs warning (device loop3): ext4_evict_inode:285: xattr delete (err -117) [ 122.177179][T15917] EXT4-fs (loop3): 1 orphan inode deleted [ 122.191276][T15917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.251203][T15959] IPv6: addrconf: prefix option has invalid lifetime [ 122.257967][T15959] IPv6: addrconf: prefix option has invalid lifetime [ 122.296450][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.575233][T16025] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 122.596444][T16024] loop3: detected capacity change from 0 to 512 [ 122.619764][T16024] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 122.655276][T16024] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 122.667032][T16024] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6402: Corrupt directory, running e2fsck is recommended [ 122.685041][T16042] tmpfs: Unexpected value for 'inode32' [ 122.692126][T16024] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 122.712123][T16024] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.6402: corrupted in-inode xattr: e_name out of bounds [ 122.726675][T16024] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.726881][T16024] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6402: couldn't read orphan inode 15 (err -117) [ 122.748379][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 122.748398][ C0] EXT4-fs (loop3): initial error at time 38101: ext4_iget_extra_inode:5040: inode 15 [ 122.748433][ C0] EXT4-fs (loop3): last error at time 38101: ext4_iget_extra_inode:5040: inode 15 [ 122.774160][T16024] loop3: lost filesystem error report for type 5 error -117 [ 122.774767][T16024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.814123][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.020294][T16062] loop3: detected capacity change from 0 to 8192 [ 123.668963][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 123.668981][ T28] audit: type=1400 audit(38103.635:317): avc: denied { mounton } for pid=16171 comm="syz.0.6476" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 123.808654][ T28] audit: type=1400 audit(38103.747:318): avc: denied { create } for pid=16195 comm="syz.4.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.136928][T16257] random: crng reseeded on system resumption [ 124.462920][T16304] loop1: detected capacity change from 0 to 1024 [ 124.504698][T16304] EXT4-fs: inline encryption not supported [ 124.512851][T16304] EXT4-fs: Ignoring removed bh option [ 124.518689][T16304] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 124.518689][T16304] [ 124.614996][T16319] tmpfs: Bad value for 'mpol' [ 124.961282][ T28] audit: type=1400 audit(38104.842:319): avc: denied { create } for pid=16375 comm="syz.3.6579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 125.572937][T16501] loop3: detected capacity change from 0 to 2048 [ 125.592362][ T3913] loop3: p1 < > p4 [ 125.602256][ T3913] loop3: p4 size 722688 extends beyond EOD, truncated [ 125.632828][T16501] loop3: p1 < > p4 [ 125.637410][T16501] loop3: p4 size 722688 extends beyond EOD, truncated [ 125.761872][T16526] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 125.761872][T16526] Ue[%#s' [ 125.811659][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.825837][ T3911] udevd[3911]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 125.844250][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.855584][ T3911] udevd[3911]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 125.931711][T16551] loop3: detected capacity change from 0 to 512 [ 125.950641][T16550] loop1: detected capacity change from 0 to 2048 [ 125.970283][T16551] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #3: comm syz.3.6666: corrupted inode contents [ 125.985182][T16551] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 125.986647][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 125.999370][T16551] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #3: comm syz.3.6666: mark_inode_dirty error [ 126.002234][ C0] EXT4-fs (loop3): initial error at time 38105: ext4_do_update_inode:5602: inode 3 [ 126.002266][ C0] EXT4-fs (loop3): last error at time 38105: ext4_do_update_inode:5602 [ 126.013653][T16551] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 126.022986][ C0] : inode 3 [ 126.031628][ T3911] loop1: p1 < > p4 [ 126.040941][T16551] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #3: comm syz.3.6666: corrupted inode contents [ 126.051002][ T3911] loop1: p4 size 722688 extends beyond EOD, truncated [ 126.059411][T16551] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 126.068359][T16551] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.6666: mark_inode_dirty error [ 126.090748][T16551] Quota error (device loop3): write_blk: dquota write failed [ 126.090922][T16550] loop1: p1 < > p4 [ 126.098477][T16551] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 126.112499][T16551] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.6666: Failed to acquire dquot type 0 [ 126.123774][T16551] loop3: lost filesystem error report for type 5 error -117 [ 126.127610][T16550] loop1: p4 size 722688 extends beyond EOD, [ 126.135612][T16551] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.6666: corrupted inode contents [ 126.145891][T16550] truncated [ 126.157712][T16551] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #16: comm syz.3.6666: mark_inode_dirty error [ 126.186702][T16551] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.6666: corrupted inode contents [ 126.201295][T16551] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.6666: mark_inode_dirty error [ 126.231236][T16551] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.6666: corrupted inode contents [ 126.258975][T16551] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 126.290811][T16551] loop3: lost filesystem error report for type 5 error -117 [ 126.303410][T16551] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.6666: corrupted inode contents [ 126.326281][T16551] EXT4-fs error (device loop3): ext4_truncate:4602: inode #16: comm syz.3.6666: mark_inode_dirty error [ 126.339465][T16551] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 126.351591][T16551] loop3: lost filesystem error report for type 5 error -117 [ 126.352093][T16551] EXT4-fs (loop3): 1 truncate cleaned up [ 126.373460][T16551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.443250][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.483611][T16605] loop1: detected capacity change from 0 to 2048 [ 126.511286][T16605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.512635][T16607] loop3: detected capacity change from 0 to 1024 [ 126.552622][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.600601][T16607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.613288][T16621] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 126.613288][T16621] Ue[%#s' [ 126.638302][T16618] loop1: detected capacity change from 0 to 512 [ 126.675741][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.685853][T16618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.753650][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.809943][T16644] loop1: detected capacity change from 0 to 512 [ 126.847810][T16644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.857187][T16646] loop3: detected capacity change from 0 to 2048 [ 126.877502][T16646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.918615][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.932210][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.000743][T16667] loop1: detected capacity change from 0 to 2048 [ 127.044838][T16674] loop3: detected capacity change from 0 to 136 [ 127.070436][T16667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.114934][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.168440][ T28] audit: type=1400 audit(38106.899:320): avc: denied { mount } for pid=16684 comm="syz.3.6727" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 127.250417][ T28] audit: type=1400 audit(38106.918:321): avc: denied { unmount } for pid=3982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 127.286424][ T28] audit: type=1400 audit(38106.946:322): avc: denied { mount } for pid=16689 comm="syz.3.6728" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 127.303487][T16698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.344526][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.793277][T16740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.966861][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.089385][ T28] audit: type=1400 audit(38108.705:323): avc: denied { write } for pid=16800 comm="syz.1.6782" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.295500][T16815] veth0_to_hsr: entered allmulticast mode [ 129.399823][T16821] netlink: 'syz.1.6791': attribute type 8 has an invalid length. [ 129.472230][T16827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.499553][T16827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.500420][T16829] xt_l2tp: v2 doesn't support IP mode [ 129.830296][ T28] audit: type=1326 audit(38109.388:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.3.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 129.888759][ T28] audit: type=1326 audit(38109.388:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.3.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 129.942185][ T28] audit: type=1326 audit(38109.416:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.3.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 129.969749][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6812'. [ 129.995662][ T28] audit: type=1326 audit(38109.416:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.3.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 130.042053][ T28] audit: type=1326 audit(38109.416:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16844 comm="syz.3.6802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 130.079770][ T28] audit: type=1400 audit(38109.453:329): avc: denied { write } for pid=16853 comm="syz.0.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.156048][ T28] audit: type=1400 audit(38109.453:330): avc: denied { nlmsg_write } for pid=16853 comm="syz.0.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.199981][T16875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6819'. [ 130.208997][T16875] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6819'. [ 130.319149][T16884] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 130.361397][T16884] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 130.371912][T16884] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6823: Corrupt directory, running e2fsck is recommended [ 130.393314][T16884] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 130.437302][T16884] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.6823: corrupted in-inode xattr: invalid ea_ino [ 130.498134][ T28] audit: type=1326 audit(38110.014:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.4.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 130.499831][T16884] fserror_report: 8 callbacks suppressed [ 130.499846][T16884] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.558819][T16884] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6823: couldn't read orphan inode 15 (err -117) [ 130.568088][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 130.568119][ C0] EXT4-fs (loop3): initial error at time 38110: ext4_iget_extra_inode:5040: inode 15 [ 130.568164][ C0] EXT4-fs (loop3): last error at time 38110: ext4_iget_extra_inode:5040: inode 15 [ 130.605543][ T28] audit: type=1326 audit(38110.014:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16896 comm="syz.4.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 130.658856][T16884] loop3: lost filesystem error report for type 5 error -117 [ 130.663615][T16884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.746340][T16884] EXT4-fs error (device loop3): ext4_xattr_set_entry:1670: inode #2: comm syz.3.6823: corrupted xattr entries [ 130.762319][T16918] xt_l2tp: v2 doesn't support IP mode [ 130.840495][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.965870][T16931] netlink: 'syz.3.6844': attribute type 21 has an invalid length. [ 131.085291][T16944] set_capacity_and_notify: 30 callbacks suppressed [ 131.085308][T16944] loop3: detected capacity change from 0 to 512 [ 131.214362][ C1] hrtimer: interrupt took 29538 ns [ 131.268507][T16961] netlink: 'syz.4.6860': attribute type 21 has an invalid length. [ 131.279225][T16965] xt_CONNSECMARK: invalid mode: 0 [ 131.582362][T16996] netlink: 'syz.0.6877': attribute type 21 has an invalid length. [ 131.676992][T16977] loop3: detected capacity change from 0 to 32768 [ 131.679484][T16971] loop1: detected capacity change from 0 to 32768 [ 131.731461][T17005] veth0_to_hsr: entered allmulticast mode [ 132.010759][T17040] veth0_to_hsr: entered allmulticast mode [ 132.038763][T17044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.059595][T17044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.312653][T17079] veth0_to_hsr: entered allmulticast mode [ 132.418948][T17093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6924'. [ 132.428042][T17093] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6924'. [ 132.538281][T17113] xt_CONNSECMARK: invalid mode: 0 [ 132.646271][T17130] xt_hashlimit: size too large, truncated to 1048576 [ 132.657228][T17130] xt_hashlimit: max too large, truncated to 1048576 [ 132.708130][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6950'. [ 132.867983][T17170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6962'. [ 133.059461][T17200] gre1: entered promiscuous mode [ 133.064615][T17200] gre1: entered allmulticast mode [ 133.113598][T17211] xt_CONNSECMARK: invalid mode: 0 [ 133.147767][T17212] netlink: 'syz.1.6994': attribute type 4 has an invalid length. [ 133.189741][T17221] xt_hashlimit: size too large, truncated to 1048576 [ 133.200678][T17221] xt_hashlimit: max too large, truncated to 1048576 [ 133.231439][T17226] netlink: 'syz.2.6990': attribute type 29 has an invalid length. [ 134.471896][T17267] bond1: option all_slaves_active: invalid value (5) [ 134.496683][T17267] bond1 (unregistering): Released all slaves [ 134.537693][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 134.537727][ T28] audit: type=1400 audit(38113.793:383): avc: denied { write } for pid=17280 comm="syz.3.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.557394][T17284] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.566517][ T28] audit: type=1400 audit(38113.803:384): avc: denied { create } for pid=17282 comm="syz.2.7019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.589804][ T28] audit: type=1400 audit(38113.812:385): avc: denied { write } for pid=17282 comm="syz.2.7019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.624128][T17290] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17290 comm=syz.1.7022 [ 134.645342][T17290] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17290 comm=syz.1.7022 [ 134.692129][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7023'. [ 134.719014][T17292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7023'. [ 134.815336][T17304] loop3: detected capacity change from 0 to 8192 [ 134.844916][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7039'. [ 134.849277][ T28] audit: type=1400 audit(38114.083:386): avc: denied { setopt } for pid=17319 comm="syz.2.7037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.887007][ T28] audit: type=1400 audit(38114.093:387): avc: denied { write } for pid=17323 comm="syz.4.7038" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.917543][T17304] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 134.925814][ T28] audit: type=1400 audit(38114.139:388): avc: denied { write } for pid=17325 comm="syz.0.7041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.945697][T17304] FAT-fs (loop3): Filesystem has been set read-only [ 135.013397][ T28] audit: type=1400 audit(38114.139:389): avc: denied { connect } for pid=17325 comm="syz.0.7041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.044996][ T28] audit: type=1400 audit(38114.139:390): avc: denied { name_connect } for pid=17325 comm="syz.0.7041" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 135.076016][ T28] audit: type=1400 audit(38114.298:391): avc: denied { getopt } for pid=17345 comm="syz.0.7050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.251962][T17376] xt_TCPMSS: Only works on TCP SYN packets [ 135.283615][ T28] audit: type=1400 audit(131.610:392): avc: denied { getopt } for pid=17379 comm="syz.1.7066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.552828][T17429] netlink: 'syz.3.7090': attribute type 2 has an invalid length. [ 135.794228][T17481] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7116'. [ 135.896929][T17498] netlink: 'syz.0.7124': attribute type 21 has an invalid length. [ 135.936720][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7124'. [ 136.040139][T17519] netlink: 'syz.2.7136': attribute type 25 has an invalid length. [ 136.070338][T17519] netlink: 'syz.2.7136': attribute type 3 has an invalid length. [ 136.089883][T17519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7136'. [ 136.159231][T17533] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 136.238627][T17547] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.283678][T17553] netlink: 'syz.4.7150': attribute type 4 has an invalid length. [ 136.303495][T17553] netlink: 'syz.4.7150': attribute type 30 has an invalid length. [ 136.356609][T17561] netlink: 'syz.2.7163': attribute type 4 has an invalid length. [ 136.364729][T17561] netlink: 'syz.2.7163': attribute type 30 has an invalid length. [ 136.516249][T17581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7165'. [ 136.819976][T17591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7170'. [ 136.821797][T17595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7171'. [ 136.886884][T17602] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 136.961680][T17617] netlink: 'syz.4.7182': attribute type 9 has an invalid length. [ 137.033390][T17628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7186'. [ 137.070861][T17637] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 137.084394][T17638] bridge1: entered promiscuous mode [ 137.090059][T17638] bridge1: entered allmulticast mode [ 137.122596][T17644] x_tables: unsorted underflow at hook 3 [ 137.411330][T17707] netlink: 'syz.2.7227': attribute type 17 has an invalid length. [ 137.423584][T17707] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7227'. [ 137.473852][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7232'. [ 137.766609][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7264'. [ 138.599803][T17923] random: crng reseeded on system resumption [ 138.635973][T17921] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.654313][T17921] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 138.676236][T17937] IPv6: sit1: Disabled Multicast RS [ 138.938210][T17975] program syz.2.7365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.973314][T17975] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 139.029692][T17986] random: crng reseeded on system resumption [ 139.212433][T18013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.219767][T18013] IPv6: NLM_F_CREATE should be set when creating new route [ 139.227006][T18013] IPv6: NLM_F_CREATE should be set when creating new route [ 139.234234][T18013] IPv6: NLM_F_CREATE should be set when creating new route [ 139.267046][T18015] random: crng reseeded on system resumption [ 139.714666][T18082] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.723770][T18082] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 139.914358][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 139.914376][ T28] audit: type=1400 audit(135.941:440): avc: denied { create } for pid=18090 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.989266][ T28] audit: type=1400 audit(135.941:441): avc: denied { write } for pid=18090 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=13203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.041766][T18144] random: crng reseeded on system resumption [ 140.084393][ T28] audit: type=1400 audit(135.941:442): avc: denied { append } for pid=18090 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=13203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.199186][ T28] audit: type=1400 audit(136.016:443): avc: denied { unlink } for pid=18129 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=13203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.248124][T18182] SELinux: policydb version 0 does not match my version range 15-35 [ 140.255440][ T28] audit: type=1400 audit(136.268:444): avc: denied { load_policy } for pid=18178 comm="syz.1.7446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 140.281919][T18182] SELinux: failed to load policy [ 140.328330][ T28] audit: type=1400 audit(136.324:445): avc: denied { setopt } for pid=18187 comm="syz.3.7450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 140.358476][ T28] audit: type=1400 audit(136.362:446): avc: denied { write } for pid=18195 comm="syz.2.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.361980][T18193] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 140.702540][T18255] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 140.796120][ T28] audit: type=1400 audit(136.773:447): avc: denied { ioctl } for pid=18258 comm="syz.4.7483" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 140.911162][T18278] veth3: entered allmulticast mode [ 140.930897][ T28] audit: type=1400 audit(136.867:448): avc: denied { setopt } for pid=18279 comm="syz.2.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.980160][T18282] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.987545][T18282] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.024702][ T28] audit: type=1400 audit(136.988:449): avc: denied { write } for pid=18290 comm="syz.4.7497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 141.092994][T18282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.115530][T18282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.153157][T18299] ipip0: entered allmulticast mode [ 141.160951][T18306] validate_nla: 5 callbacks suppressed [ 141.160968][T18306] netlink: 'syz.0.7505': attribute type 5 has an invalid length. [ 141.177962][T18302] __nla_validate_parse: 7 callbacks suppressed [ 141.189048][T18302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7503'. [ 141.212029][ T58] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.221105][ T58] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.240693][ T58] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.264304][ T58] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.321613][T18324] SELinux: policydb version 0 does not match my version range 15-35 [ 141.347540][T18324] SELinux: failed to load policy [ 141.586682][T18368] netlink: 'syz.1.7534': attribute type 10 has an invalid length. [ 141.878993][T18404] bridge1: left promiscuous mode [ 142.031172][T18430] netlink: 'syz.0.7565': attribute type 58 has an invalid length. [ 142.051709][T18430] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7565'. [ 142.191443][T18459] netlink: 'syz.2.7579': attribute type 22 has an invalid length. [ 142.218099][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7579'. [ 142.233482][T18462] veth3: entered allmulticast mode [ 142.254729][T18467] netlink: 'syz.0.7584': attribute type 10 has an invalid length. [ 142.506728][T18511] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7603'. [ 143.048488][T18594] netlink: 'syz.0.7645': attribute type 22 has an invalid length. [ 143.061985][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7645'. [ 143.080231][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.087654][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.138088][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.148554][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.187410][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.197511][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.236579][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.271457][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.334172][T18620] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7658'. [ 143.461858][T18631] gre1: left promiscuous mode [ 143.565542][T18663] mmap: syz.3.7680 (18663): VmData 29077504 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 143.819719][T18717] netlink: 'syz.0.7707': attribute type 3 has an invalid length. [ 143.839873][T18717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7707'. [ 143.988280][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7717'. [ 144.098422][T18752] netlink: 'syz.4.7725': attribute type 13 has an invalid length. [ 144.106425][T18752] netlink: 'syz.4.7725': attribute type 17 has an invalid length. [ 144.175598][T18752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.197744][T18752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.631502][T18823] loop3: detected capacity change from 0 to 4096 [ 144.662434][T18823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.762110][T18823] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.7759: Failed to acquire dquot type 1 [ 144.790220][T18841] sock: sock_timestamping_bind_phc: sock not bind to device [ 144.842378][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.916275][T18859] bridge0: entered promiscuous mode [ 144.936769][T18859] bridge0: entered allmulticast mode [ 145.031748][T18879] cgroup2: Unknown parameter 'defcontext#3۱$%j{zM^' [ 145.151020][T18895] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7795'. [ 145.223390][T18909] netlink: 360 bytes leftover after parsing attributes in process `syz.2.7802'. [ 145.336494][T18923] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.343875][T18923] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.416576][T18923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.428532][T18923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.487616][ T1700] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.518727][ T1700] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.535533][ T1700] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.545697][ T1700] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.628529][T18936] xt_CT: No such helper "snmp" [ 145.751258][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 145.751277][ T28] audit: type=1400 audit(141.403:479): avc: denied { bind } for pid=18954 comm="syz.1.7825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.807092][ T28] audit: type=1400 audit(141.403:480): avc: denied { node_bind } for pid=18954 comm="syz.1.7825" saddr=fe80::34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 145.860251][ T28] audit: type=1326 audit(141.506:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.3.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 145.913960][ T28] audit: type=1326 audit(141.506:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.3.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 145.993049][ T28] audit: type=1326 audit(141.506:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.3.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 146.023450][T18992] loop1: detected capacity change from 0 to 128 [ 146.035561][T18995] xfrm0: entered promiscuous mode [ 146.040644][T18995] xfrm0: entered allmulticast mode [ 146.057786][T18992] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.061748][ T28] audit: type=1326 audit(141.506:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18969 comm="syz.3.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 146.142015][ T3978] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.255782][T19024] loop3: detected capacity change from 0 to 128 [ 146.276932][T19024] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.333320][ T3982] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.403077][T19039] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 146.416665][T19039] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 146.554475][ T28] audit: type=1400 audit(142.152:485): avc: denied { ioctl } for pid=19062 comm="syz.1.7876" path="socket:[53704]" dev="sockfs" ino=53704 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.568006][T19060] No such timeout policy "syz0" [ 146.706318][ T28] audit: type=1400 audit(142.301:486): avc: denied { setcurrent } for pid=19079 comm="syz.3.7894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.861980][T19103] netlink: 'syz.2.7897': attribute type 1 has an invalid length. [ 146.930586][ T28] audit: type=1326 audit(142.460:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19100 comm="syz.0.7896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39aaf4c819 code=0x7ffc0000 [ 146.992225][ T28] audit: type=1326 audit(142.460:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19100 comm="syz.0.7896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f39aaf4c819 code=0x7ffc0000 [ 147.103014][T19127] netlink: 'syz.3.7908': attribute type 27 has an invalid length. [ 147.282440][T19153] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 147.445254][T19180] netlink: 'syz.4.7933': attribute type 15 has an invalid length. [ 147.525376][T19198] netlink: 'syz.3.7941': attribute type 21 has an invalid length. [ 147.551805][T19204] Timeout policy `syz0' can only be used by L3 protocol number 34887 [ 147.569542][T19198] netlink: 'syz.3.7941': attribute type 6 has an invalid length. [ 147.577716][T19198] __nla_validate_parse: 3 callbacks suppressed [ 147.577751][T19198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7941'. [ 147.629307][T19214] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 147.704903][T19229] netlink: 'syz.0.7957': attribute type 27 has an invalid length. [ 147.717018][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7956'. [ 147.721357][T19220] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.733196][T19220] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.773700][T19234] loop3: detected capacity change from 0 to 2048 [ 147.803918][T19220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.815810][T19220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.828496][T19234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.847241][T19248] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7966'. [ 147.894893][ T58] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.913294][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.935824][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.946025][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.955710][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.069531][T19278] netlink: 'syz.1.7978': attribute type 21 has an invalid length. [ 148.069593][T19278] netlink: 'syz.1.7978': attribute type 6 has an invalid length. [ 148.069608][T19278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7978'. [ 148.269515][T19305] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 148.314501][T19315] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 148.442623][T19337] netlink: 'syz.0.8008': attribute type 1 has an invalid length. [ 148.549630][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8017'. [ 148.596179][T19363] loop3: detected capacity change from 0 to 1024 [ 148.614198][T19371] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8025'. [ 148.631732][T19363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.646785][T19363] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.8022: missing EA_INODE flag [ 148.668342][T19363] EXT4-fs (loop3): Remounting filesystem read-only [ 148.694774][T19385] xt_hashlimit: max too large, truncated to 1048576 [ 148.714008][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.750165][T19393] IPv6: sit1: Disabled Multicast RS [ 148.796091][T19398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8037'. [ 148.888513][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8049'. [ 148.910757][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8049'. [ 148.943312][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8052'. [ 148.979266][T19431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.180823][T19463] netlink: 'syz.4.8068': attribute type 58 has an invalid length. [ 149.229988][T19467] bond1: option arp_all_targets: invalid value (262144) [ 149.254431][T19467] bond1 (unregistering): Released all slaves [ 149.379145][T19493] usb usb9: usbfs: process 19493 (syz.4.8084) did not claim interface 0 before use [ 149.394931][T19497] xt_hashlimit: max too large, truncated to 1048576 [ 149.396073][T19499] macvtap0: entered promiscuous mode [ 149.522922][T19518] bridge1: entered promiscuous mode [ 149.638600][T19545] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.666695][T19551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.691992][T19553] IPv6: sit1: Disabled Multicast RS [ 149.705286][T19555] bond1: option arp_all_targets: invalid value (262144) [ 149.726716][T19555] bond1 (unregistering): Released all slaves [ 149.794787][T19574] xt_TCPMSS: Only works on TCP SYN packets [ 149.828404][T19578] loop1: detected capacity change from 0 to 128 [ 149.846136][T19578] FAT-fs (loop1): bogus number of reserved sectors [ 149.864299][T19578] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 149.883789][T19578] FAT-fs (loop1): Can't find a valid FAT filesystem [ 149.928964][T19578] 9p: Could not find request transport: xen [ 150.193842][T19645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=19645 comm=syz.0.8151 [ 150.285194][T19657] macvtap0: entered promiscuous mode [ 150.555607][T19704] random: crng reseeded on system resumption [ 151.039123][T19788] Option ' ' to dns_resolver key: bad/missing value [ 151.119902][T19803] xt_hashlimit: overflow, try lower: 6/0 [ 151.254793][T19832] Option ' ' to dns_resolver key: bad/missing value [ 151.266137][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 151.266154][ T28] audit: type=1400 audit(146.567:518): avc: denied { ioctl } for pid=19831 comm="syz.0.8234" path="socket:[55042]" dev="sockfs" ino=55042 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.418837][T19858] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.480968][T19863] bond1 (unregistering): Released all slaves [ 151.595621][T19886] loop1: detected capacity change from 0 to 164 [ 151.710113][T19905] Unsupported ieee802154 address type: 0 [ 151.766869][ T28] audit: type=1400 audit(147.035:519): avc: denied { connect } for pid=19912 comm="syz.0.8274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.823943][T19920] loop3: detected capacity change from 0 to 164 [ 151.932654][T19940] loop3: detected capacity change from 0 to 512 [ 151.964377][T19940] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #2: block 8: comm syz.3.8285: lblock 0 mapped to illegal pblock 8 (length 1) [ 151.992821][T19940] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 151.995336][T19940] EXT4-fs (loop3): Remounting filesystem read-only [ 151.995357][T19940] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.8285: error -117 reading directory block [ 151.995429][T19940] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 152.000468][T19940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.021180][ T28] audit: type=1400 audit(147.268:520): avc: denied { quotaon } for pid=19939 comm="syz.3.8285" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.033169][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.081893][T19964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19964 comm=syz.2.8299 [ 152.145037][T19962] loop1: detected capacity change from 0 to 512 [ 152.179565][T19964] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19964 comm=syz.2.8299 [ 152.226175][T19962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.272452][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.296375][ T28] audit: type=1400 audit(147.530:521): avc: denied { getopt } for pid=19984 comm="syz.4.8308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.652138][T20045] loop1: detected capacity change from 0 to 512 [ 152.679061][T20045] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.735314][T20045] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 152.782300][T20045] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8333: bg 0: block 248: padding at end of block bitmap is not set [ 152.798381][T20045] loop1: lost filesystem error report for type 5 error -117 [ 152.798704][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 152.812663][ C1] EXT4-fs (loop1): last error at time 147: ext4_validate_block_bitmap:441 [ 152.821641][T20045] Quota error (device loop1): write_blk: dquota write failed [ 152.829053][T20045] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 152.839294][T20045] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.8333: Failed to acquire dquot type 1 [ 152.850906][T20045] loop1: lost filesystem error report for type 5 error -28 [ 152.863432][T20045] EXT4-fs (loop1): 1 truncate cleaned up [ 152.877474][T20045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 152.906326][T20082] validate_nla: 3 callbacks suppressed [ 152.906345][T20082] netlink: 'syz.4.8349': attribute type 5 has an invalid length. [ 152.920342][T20045] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 152.934947][T20045] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074 [ 152.945472][T20045] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.8333: Failed to acquire dquot type 1 [ 152.988201][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 153.168878][T20127] __nla_validate_parse: 12 callbacks suppressed [ 153.168898][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8372'. [ 153.300041][T20151] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 153.316744][T20151] SELinux: failed to load policy [ 153.323055][T20153] netlink: 'syz.3.8384': attribute type 5 has an invalid length. [ 153.430689][ T28] audit: type=1400 audit(148.597:522): avc: denied { map } for pid=20166 comm="syz.3.8391" path="socket:[56638]" dev="sockfs" ino=56638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.489553][ T28] audit: type=1400 audit(148.615:523): avc: denied { read } for pid=20166 comm="syz.3.8391" path="socket:[56638]" dev="sockfs" ino=56638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.579515][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8402'. [ 153.657579][T20208] netlink: 'syz.3.8410': attribute type 1 has an invalid length. [ 153.667451][T20208] netlink: 'syz.3.8410': attribute type 3 has an invalid length. [ 153.693410][T20208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8410'. [ 153.903831][T20246] netlink: 'syz.0.8428': attribute type 1 has an invalid length. [ 153.911826][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8428'. [ 153.920751][T20246] netlink: 'syz.0.8428': attribute type 1 has an invalid length. [ 154.021162][T20256] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8433'. [ 154.032160][T20262] random: crng reseeded on system resumption [ 154.085022][T20268] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 154.134056][T20276] ieee802154 phy0 wpan0: encryption failed: -90 [ 154.262993][T20302] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 154.333954][T20317] tmpfs: Unknown parameter 'context1' [ 154.360788][T20323] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8465'. [ 154.402669][T20331] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8470'. [ 154.466163][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8475'. [ 154.494647][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8475'. [ 154.507404][T20341] bridge1: entered promiscuous mode [ 154.512791][T20341] bridge1: entered allmulticast mode [ 154.593804][T20368] netlink: 'syz.4.8489': attribute type 21 has an invalid length. [ 154.606768][T20369] loop1: detected capacity change from 0 to 2048 [ 154.630903][T20368] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8489'. [ 154.660477][ T3913] loop1: p1 p2 p3 [ 154.678660][T20369] loop1: p1 p2 p3 [ 154.696193][ T2999] loop1: p1 p2 p3 [ 154.735028][ T3911] udevd[3911]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 154.746014][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 154.746989][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 154.823807][ T3911] udevd[3911]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 154.826127][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 154.835464][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 154.854722][T20403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 154.854795][T20403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.854828][T20403] vhci_hcd vhci_hcd.0: Device attached [ 154.855789][T20404] vhci_hcd: connection closed [ 154.876806][ T58] vhci_hcd vhci_hcd.1: stop threads [ 154.889973][T20410] xt_TCPMSS: Only works on TCP SYN packets [ 154.904786][ T58] vhci_hcd vhci_hcd.1: release socket [ 154.918360][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 154.922109][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 154.925314][ T3913] udevd[3913]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 154.946022][ T3911] udevd[3911]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 155.979844][T20448] IPv6: Can't replace route, no match found [ 156.036212][T20460] IPv6: sit2: Disabled Multicast RS [ 156.049583][T20460] sit2: entered allmulticast mode [ 156.107504][T20472] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.131207][T20472] block device autoloading is deprecated and will be removed. [ 156.296865][T20512] netlink: 'syz.3.8556': attribute type 1 has an invalid length. [ 156.350431][T20522] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.527333][T20549] netlink: 'syz.4.8577': attribute type 9 has an invalid length. [ 156.584256][T20553] Driver unsupported XDP return value 0 on prog (id 725) dev N/A, expect packet loss! [ 156.642041][T20559] netlink: 'syz.1.8581': attribute type 21 has an invalid length. [ 156.680901][T20569] ipt_ECN: cannot use operation on non-tcp rule [ 156.784664][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 156.784680][ T28] audit: type=1400 audit(151.721:551): avc: denied { getopt } for pid=20586 comm="syz.0.8597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.799429][T20593] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 157.028691][ T28] audit: type=1326 audit(151.955:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.068508][ T28] audit: type=1326 audit(151.955:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.108848][T20641] xt_hashlimit: invalid interval [ 157.118095][ T28] audit: type=1326 audit(151.955:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.168741][ T28] audit: type=1326 audit(151.955:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.192038][ T28] audit: type=1326 audit(151.983:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.225919][ T28] audit: type=1326 audit(151.983:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.295915][T20661] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 157.302493][T20661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.303417][ T28] audit: type=1326 audit(151.983:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.345434][T20661] vhci_hcd vhci_hcd.0: Device attached [ 157.368785][ T28] audit: type=1326 audit(151.983:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.403921][T20662] vhci_hcd: connection closed [ 157.404091][ T58] vhci_hcd vhci_hcd.3: stop threads [ 157.426667][ T58] vhci_hcd vhci_hcd.3: release socket [ 157.432218][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 157.452226][ T28] audit: type=1326 audit(151.983:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 157.704705][T20728] --map-set only usable from mangle table [ 158.270153][T20830] validate_nla: 4 callbacks suppressed [ 158.270172][T20830] netlink: 'syz.1.8712': attribute type 1 has an invalid length. [ 158.353077][T20846] delete_channel: no stack [ 158.444354][T20863] netlink: 'syz.1.8727': attribute type 21 has an invalid length. [ 158.649330][T20895] __nla_validate_parse: 25 callbacks suppressed [ 158.649378][T20895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8741'. [ 158.753992][T20910] tmpfs: Unknown parameter 'context1' [ 159.044028][T20968] netlink: 'syz.3.8778': attribute type 15 has an invalid length. [ 159.079726][T20975] xt_connbytes: Forcing CT accounting to be enabled [ 159.103751][T20975] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.133360][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8784'. [ 159.153190][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8784'. [ 159.289972][T20977] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 159.311513][T20982] bridge1: entered promiscuous mode [ 159.325151][T20982] bridge1: entered allmulticast mode [ 159.391084][T20995] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 159.397657][T20995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.416338][T20995] vhci_hcd vhci_hcd.0: Device attached [ 159.424459][T21001] bridge_slave_0: left allmulticast mode [ 159.437058][T20996] vhci_hcd: connection closed [ 159.437336][ T1700] vhci_hcd vhci_hcd.0: stop threads [ 159.442289][T21001] bridge_slave_0: left promiscuous mode [ 159.447387][ T1700] vhci_hcd vhci_hcd.0: release socket [ 159.462956][T21001] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.473295][ T1700] vhci_hcd vhci_hcd.0: disconnect device [ 159.481335][T21001] bridge_slave_1: left allmulticast mode [ 159.490369][T21001] bridge_slave_1: left promiscuous mode [ 159.497813][T21001] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.506566][T21001] bond0: (slave bond_slave_0): Releasing backup interface [ 159.515120][T21001] bond0: (slave bond_slave_1): Releasing backup interface [ 159.523779][T21001] team0: Port device team_slave_0 removed [ 159.530324][T21001] team0: Port device team_slave_1 removed [ 159.539436][T21001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.547754][T21001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.555469][T21001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.756883][T21036] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 159.775957][T21036] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.783992][T21036] vhci_hcd vhci_hcd.4: invalid port number 12 [ 159.853542][T21050] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 160.042410][T21073] random: crng reseeded on system resumption [ 160.125571][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8834'. [ 160.203566][T21089] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8837'. [ 160.282460][T21099] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 160.682986][T21148] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.8866'. [ 160.712663][T21152] veth1_to_bridge: entered allmulticast mode [ 161.023794][T21193] random: crng reseeded on system resumption [ 161.117531][T21204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8903'. [ 161.117558][T21204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8903'. [ 161.514607][T21262] loop3: detected capacity change from 0 to 512 [ 161.527979][T21262] EXT4-fs: inline encryption not supported [ 161.534437][T21268] netlink: 'syz.4.8921': attribute type 1 has an invalid length. [ 161.564048][T21262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.578365][T21262] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.585389][T21274] xfrm1: entered allmulticast mode [ 161.613620][T21262] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 161.641903][T21262] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8918: bg 0: block 248: padding at end of block bitmap is not set [ 161.656915][T21262] loop3: lost filesystem error report for type 5 error -117 [ 161.657249][T21262] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.8918: Failed to acquire dquot type 1 [ 161.664602][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 161.664626][ C0] EXT4-fs (loop3): last error at time 156: ext4_validate_block_bitmap:441 [ 161.668413][T21284] Dead loop on virtual device ip6_vti0, fix it urgently! [ 161.676617][T21262] loop3: lost filesystem error report for type 5 error -28 [ 161.698992][T21262] EXT4-fs (loop3): 1 truncate cleaned up [ 161.714104][T21262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 161.734249][T21262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 161.747145][T21284] Dead loop on virtual device ip6_vti0, fix it urgently! [ 161.771861][T21284] Dead loop on virtual device ip6_vti0, fix it urgently! [ 161.856071][T21284] syz.0.8927 (21284) used greatest stack depth: 8512 bytes left [ 161.909259][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8939'. [ 161.931788][T21312] --map-set only usable from mangle table [ 161.941861][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8939'. [ 161.964193][T21308] netlink: 'syz.4.8939': attribute type 1 has an invalid length. [ 162.215735][T21342] bridge_slave_0: left allmulticast mode [ 162.221854][T21342] bridge_slave_0: left promiscuous mode [ 162.227826][T21342] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.257414][T21342] bridge_slave_1: left allmulticast mode [ 162.263169][T21342] bridge_slave_1: left promiscuous mode [ 162.268866][T21342] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.341297][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 162.341386][ T28] audit: type=1400 audit(156.922:583): avc: denied { connect } for pid=21355 comm="syz.0.8962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 162.383552][T21358] SET target dimension over the limit! [ 162.400753][T21342] bond0: (slave bond_slave_0): Releasing backup interface [ 162.409517][T21342] bond0: (slave bond_slave_1): Releasing backup interface [ 162.418278][T21342] team0: Port device team_slave_0 removed [ 162.425114][T21342] team0: Port device team_slave_1 removed [ 162.433856][T21342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.454232][T21342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.470386][T21342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.675331][ T28] audit: type=1400 audit(157.230:584): avc: denied { write } for pid=21377 comm="syz.0.8973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 162.716350][T21386] netlink: 'syz.2.8977': attribute type 21 has an invalid length. [ 162.718212][ T28] audit: type=1326 audit(157.277:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 162.761686][T21390] batadv0: entered allmulticast mode [ 162.771018][ T28] audit: type=1326 audit(157.277:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 162.797692][ T28] audit: type=1326 audit(157.296:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 162.851134][ T28] audit: type=1326 audit(157.296:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 162.874454][ T28] audit: type=1326 audit(157.296:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.3.8976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 162.890866][T21403] Invalid option length (0) for dns_resolver key [ 162.916343][T21407] xt_TCPMSS: Only works on TCP SYN packets [ 162.960948][T21398] loop1: detected capacity change from 0 to 512 [ 162.999227][T21398] EXT4-fs: inline encryption not supported [ 163.005360][T21398] EXT4-fs: Ignoring removed i_version option [ 163.085254][T21398] EXT4-fs (loop1): 1 orphan inode deleted [ 163.094346][ T28] audit: type=1400 audit(157.633:590): avc: denied { ioctl } for pid=21437 comm="syz.3.9002" path="socket:[61747]" dev="sockfs" ino=61747 ioctlcmd=0x891e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.096682][T21398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.188860][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.202172][T21451] netlink: 'syz.3.9007': attribute type 21 has an invalid length. [ 163.230419][T21455] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 163.257386][ T28] audit: type=1400 audit(157.773:591): avc: denied { relabelto } for pid=21454 comm="syz.0.9010" name="1820" dev="tmpfs" ino=9137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 163.259274][T21460] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 163.287195][ T28] audit: type=1400 audit(157.773:592): avc: denied { associate } for pid=21454 comm="syz.0.9010" name="1820" dev="tmpfs" ino=9137 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 163.339390][T21468] batadv0: entered allmulticast mode [ 163.419826][T21479] netlink: 'syz.4.9022': attribute type 1 has an invalid length. [ 163.428219][T21479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.430407][T21482] netlink: 'syz.0.9021': attribute type 30 has an invalid length. [ 164.238055][T21575] loop1: detected capacity change from 0 to 736 [ 164.376217][T21593] bridge_slave_0: left allmulticast mode [ 164.384983][T21593] bridge_slave_0: left promiscuous mode [ 164.407428][T21593] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.418649][T21603] program syz.1.9076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.432786][T21593] bridge_slave_1: left allmulticast mode [ 164.438572][T21593] bridge_slave_1: left promiscuous mode [ 164.446141][T21593] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.463258][T21593] bond0: (slave bond_slave_0): Releasing backup interface [ 164.475120][T21593] bond0: (slave bond_slave_1): Releasing backup interface [ 164.492068][T21593] team0: Port device team_slave_0 removed [ 164.508368][T21593] team0: Port device team_slave_1 removed [ 164.526048][T21593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.534011][T21593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.543129][T21593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.561690][T21593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.573213][T21593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.906154][T21656] __nla_validate_parse: 8 callbacks suppressed [ 164.906193][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 164.949778][T21663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9108'. [ 164.960197][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 164.969910][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 164.979773][T21666] xt_HMARK: proto mask must be zero with L3 mode [ 164.988148][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 164.997760][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 165.011832][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 165.021024][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 165.034702][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 165.043950][T21656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9104'. [ 165.128382][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.157143][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.184849][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.199054][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.234101][T21683] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 165.256654][T21686] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 165.309915][T21697] netlink: 'syz.4.9125': attribute type 21 has an invalid length. [ 165.311240][T21694] netlink: 'syz.2.9123': attribute type 2 has an invalid length. [ 165.456820][T21723] bond1: option ad_select: invalid value (4) [ 165.489073][T21723] bond1 (unregistering): Released all slaves [ 165.553939][T21740] netlink: 'syz.2.9145': attribute type 7 has an invalid length. [ 165.655435][T21758] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 165.724854][T21770] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 165.825589][T21788] IPv6: Can't replace route, no match found [ 166.087838][T21833] netlink: 'syz.4.9190': attribute type 25 has an invalid length. [ 166.322172][T21882] netlink: 'syz.1.9213': attribute type 1 has an invalid length. [ 166.561215][T21930] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.756627][T21962] netlink: 'syz.2.9250': attribute type 21 has an invalid length. [ 166.780766][T21962] netlink: 'syz.2.9250': attribute type 4 has an invalid length. [ 166.790203][T21962] netlink: 'syz.2.9250': attribute type 5 has an invalid length. [ 167.801248][T22144] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 167.983504][T22169] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 168.018328][T22173] netlink: 'syz.1.9356': attribute type 21 has an invalid length. [ 168.431440][T22228] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 168.536219][T22232] bridge0: port 1(gretap0) entered blocking state [ 168.542731][T22232] bridge0: port 1(gretap0) entered disabled state [ 168.563494][T22232] gretap0: entered allmulticast mode [ 168.587037][T22232] gretap0: entered promiscuous mode [ 168.849782][T22298] vlan0: entered promiscuous mode [ 168.885695][T22303] netlink: 'syz.1.9421': attribute type 21 has an invalid length. [ 168.941816][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 168.941835][ T28] audit: type=1400 audit(163.105:639): avc: denied { append } for pid=22311 comm="syz.0.9425" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 169.049139][ T28] audit: type=1400 audit(163.208:640): avc: denied { setcheckreqprot } for pid=22325 comm="syz.3.9433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 169.099863][T22338] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 169.119295][ T28] audit: type=1400 audit(163.208:641): avc: denied { append } for pid=22327 comm="syz.1.9434" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 169.195950][ T28] audit: type=1400 audit(163.282:642): avc: denied { shutdown } for pid=22342 comm="syz.4.9441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.242458][T22360] xt_nat: multiple ranges no longer supported [ 169.313608][T22372] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 169.406052][T22384] xt_ecn: cannot match TCP bits for non-tcp packets [ 169.486735][ T28] audit: type=1326 audit(163.601:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 169.550943][ T28] audit: type=1326 audit(163.601:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 169.553114][T22407] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 169.598433][T22411] batadv1: entered promiscuous mode [ 169.604404][ T28] audit: type=1326 audit(163.601:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 169.783569][T22420] bridge1: left promiscuous mode [ 169.815853][ T28] audit: type=1326 audit(163.601:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 169.900136][ T28] audit: type=1326 audit(2000000000.000:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 169.974601][ T28] audit: type=1326 audit(2000000000.000:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22393 comm="syz.4.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc09a1ec819 code=0x7ffc0000 [ 170.145386][T22483] tmpfs: Bad value for 'mpol' [ 170.403258][T22532] __nla_validate_parse: 338 callbacks suppressed [ 170.403280][T22532] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9534'. [ 170.600418][T22573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9555'. [ 170.750006][T22600] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.964990][ T3316] IPVS: starting estimator thread 0... [ 171.058347][T22652] IPVS: using max 2640 ests per chain, 132000 per kthread [ 171.093437][T22676] SET target dimension over the limit! [ 171.104589][T22672] bond1 (unregistering): Released all slaves [ 171.406364][T22743] batadv0: entered allmulticast mode [ 171.421987][T22743] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 171.488877][T22759] validate_nla: 5 callbacks suppressed [ 171.488893][T22759] netlink: 'syz.2.9647': attribute type 2 has an invalid length. [ 171.519624][T22759] netlink: 'syz.2.9647': attribute type 1 has an invalid length. [ 171.623418][T22791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9662'. [ 171.893370][T22841] ip6t_srh: unknown srh invflags 4000 [ 171.984650][T22855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9694'. [ 172.053173][T22865] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9699'. [ 172.066712][T22865] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9699'. [ 172.084941][T22865] netlink: 'syz.1.9699': attribute type 2 has an invalid length. [ 172.353342][T22926] xt_hashlimit: size too large, truncated to 1048576 [ 172.532595][T22966] sctp: [Deprecated]: syz.1.9748 (pid 22966) Use of int in max_burst socket option deprecated. [ 172.532595][T22966] Use struct sctp_assoc_value instead [ 172.606063][T22980] xfrm0: entered promiscuous mode [ 172.622778][T22980] xfrm0: entered allmulticast mode [ 172.627572][T22988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9758'. [ 172.628625][T22984] netlink: 'syz.1.9757': attribute type 11 has an invalid length. [ 172.860966][T23036] batadv1: entered promiscuous mode [ 172.867661][T23040] Cannot find set identified by id 0 to match [ 172.887802][T23038] geneve2: entered promiscuous mode [ 172.893997][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.910293][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.933092][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.946497][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.950239][T23053] loop1: detected capacity change from 0 to 512 [ 172.986426][T23053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.047821][ T3978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.155558][T23092] ip6gretap2: entered promiscuous mode [ 173.165249][T23092] ip6gretap2: entered allmulticast mode [ 173.247264][T23109] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 173.270104][T23109] bond1 (unregistering): Released all slaves [ 173.421383][T23140] batadv1: entered promiscuous mode [ 173.606361][T23173] netlink: 'syz.3.9843': attribute type 8 has an invalid length. [ 173.651728][T23184] batadv2: entered promiscuous mode [ 173.805229][T23202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9858'. [ 173.974792][T23214] random: crng reseeded on system resumption [ 174.013746][T23216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9865'. [ 174.046852][T23216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9865'. [ 174.375329][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 174.375348][ T28] audit: type=1400 audit(2000000004.564:701): avc: denied { accept } for pid=23247 comm="syz.0.9881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.032931][T23312] bond1: option tlb_dynamic_lb: invalid value (255) [ 175.041951][T23312] bond1 (unregistering): Released all slaves [ 175.148874][T23333] netlink: 'syz.4.9922': attribute type 29 has an invalid length. [ 175.234936][ T28] audit: type=1400 audit(2000000005.369:702): avc: denied { shutdown } for pid=23351 comm="syz.4.9932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 175.251222][T23355] geneve2: entered promiscuous mode [ 175.260674][ T1700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.267511][T23349] loop3: detected capacity change from 0 to 512 [ 175.272789][ T1700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.302860][T23349] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.308565][ T1700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.337168][ T1700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.338434][T23349] EXT4-fs (loop3): 1 truncate cleaned up [ 175.355994][T23349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.393252][T23368] netlink: 'syz.2.9938': attribute type 21 has an invalid length. [ 175.414670][ T3982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.416205][T23368] netlink: 'syz.2.9938': attribute type 4 has an invalid length. [ 175.699041][T23422] netlink: 'syz.1.9965': attribute type 2 has an invalid length. [ 175.715350][T23422] netlink: 'syz.1.9965': attribute type 8 has an invalid length. [ 175.793914][T23448] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.794740][ T28] audit: type=1400 audit(2000000005.883:703): avc: denied { shutdown } for pid=23445 comm="syz.1.9976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.871909][T23459] __nla_validate_parse: 6 callbacks suppressed [ 175.871944][T23459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9981'. [ 175.961517][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9986'. [ 176.263272][T23532] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 176.289290][ T28] audit: type=1326 audit(2000000006.360:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.3.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 176.325569][ T28] audit: type=1326 audit(2000000006.360:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.3.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 176.351729][ T28] audit: type=1326 audit(2000000006.379:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.3.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 176.377415][T23542] xt_hashlimit: max too large, truncated to 1048576 [ 176.404039][T23545] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 176.419974][ T28] audit: type=1326 audit(2000000006.379:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.3.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 176.430009][T23542] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 176.447579][ T28] audit: type=1326 audit(2000000006.379:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23534 comm="syz.3.10017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bdd7c819 code=0x7ffc0000 [ 176.477174][T23550] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10023'. [ 176.498256][T23550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10023'. [ 176.539481][T23560] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10029'. [ 176.593077][T23572] netlink: 516 bytes leftover after parsing attributes in process `syz.3.10034'. [ 176.664533][ T28] audit: type=1400 audit(2000000006.697:709): avc: denied { ioctl } for pid=23581 comm="syz.0.10041" path="socket:[67520]" dev="sockfs" ino=67520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.709514][T23586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10043'. [ 176.779402][ T28] audit: type=1400 audit(2000000006.791:710): avc: denied { nlmsg_read } for pid=23587 comm="syz.3.10044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 176.907473][T23621] team0: entered promiscuous mode [ 176.912997][T23621] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.928649][T23623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10058'. [ 177.257914][T23683] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10088'. [ 177.274990][T23683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 177.601170][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10118'. [ 177.650902][T23752] validate_nla: 1 callbacks suppressed [ 177.650921][T23752] netlink: 'syz.3.10125': attribute type 17 has an invalid length. [ 177.672368][T23752] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 177.828216][T23787] netlink: 'syz.2.10141': attribute type 27 has an invalid length. [ 177.856546][T23792] netlink: 'syz.4.10143': attribute type 1 has an invalid length. [ 177.877196][T23794] : renamed from hsr0 [ 178.211911][T23867] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 178.295868][T23886] xt_cgroup: path and classid specified [ 178.302676][T23888] netlink: 'syz.0.10191': attribute type 13 has an invalid length. [ 178.612352][T23965] netlink: 'syz.2.10227': attribute type 29 has an invalid length. [ 178.647304][T23970] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 178.660036][T23970] bond1 (unregistering): Released all slaves [ 178.738441][T23991] netlink: 'syz.4.10242': attribute type 1 has an invalid length. [ 178.763443][T23994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 178.809884][T24000] netlink: 'syz.4.10246': attribute type 10 has an invalid length. [ 178.825348][T24000] hsr0: entered promiscuous mode [ 178.833204][T24000] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 178.849193][T24000] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 178.862604][T24000] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 178.870527][T24008] netlink: 'syz.2.10250': attribute type 4 has an invalid length. [ 179.055066][T24041] gre0: entered promiscuous mode [ 179.070553][T24041] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 179.126757][T24052] netlink: 'syz.3.10271': attribute type 5 has an invalid length. [ 179.138636][T24052] netlink: 'syz.3.10271': attribute type 8 has an invalid length. [ 179.271911][T24084] syz.0.10287 (24084): /proc/24083/oom_adj is deprecated, please use /proc/24083/oom_score_adj instead. [ 179.416103][T24112] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 179.434214][T24112] bond2 (unregistering): Released all slaves [ 179.623393][T24159] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 179.634979][T24159] bond1 (unregistering): Released all slaves [ 179.742274][ T28] kauditd_printk_skb: 262 callbacks suppressed [ 179.742293][ T28] audit: type=1400 audit(2000000009.587:973): avc: denied { read write } for pid=3977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.796382][ T28] audit: type=1400 audit(2000000009.587:974): avc: denied { read write } for pid=3993 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.828784][ T28] audit: type=1400 audit(2000000009.587:975): avc: denied { read write } for pid=3977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.869255][T24200] gretap0: refused to change device tx_queue_len [ 179.875665][T24200] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.892071][ T28] audit: type=1400 audit(2000000009.615:976): avc: denied { read write } for pid=3993 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.917317][ T28] audit: type=1400 audit(2000000009.625:977): avc: denied { read write } for pid=3986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.950435][T24207] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 179.952023][ T28] audit: type=1400 audit(2000000009.625:978): avc: denied { read write } for pid=3982 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.952181][ T28] audit: type=1400 audit(2000000009.634:979): avc: denied { read write } for pid=3977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.952210][ T28] audit: type=1400 audit(2000000009.634:980): avc: denied { read write } for pid=3993 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.952239][ T28] audit: type=1400 audit(2000000009.672:981): avc: denied { read write } for pid=3982 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.952264][ T28] audit: type=1400 audit(2000000009.672:982): avc: denied { read write } for pid=3978 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.382424][T24287] team0: entered allmulticast mode [ 180.652626][T24311] 0XD: renamed from gretap0 [ 180.702538][T24311] 0XD: entered allmulticast mode [ 180.945644][T24325] xt_TCPMSS: Only works on TCP SYN packets [ 181.003881][T24331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.116053][T24346] xt_SECMARK: invalid mode: 3 [ 181.218291][T24278] syz.4.10382 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 181.252025][T24278] CPU: 1 UID: 0 PID: 24278 Comm: syz.4.10382 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.252063][T24278] Tainted: [W]=WARN [ 181.252071][T24278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.252085][T24278] Call Trace: [ 181.252093][T24278] [ 181.252101][T24278] __dump_stack+0x1d/0x30 [ 181.252135][T24278] dump_stack_lvl+0x95/0xd0 [ 181.252163][T24278] dump_stack+0x15/0x1b [ 181.252188][T24278] dump_header+0x80/0x240 [ 181.252287][T24278] oom_kill_process+0x295/0x350 [ 181.252314][T24278] out_of_memory+0x97d/0xb80 [ 181.252340][T24278] try_charge_memcg+0x62e/0xa10 [ 181.252399][T24278] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 181.252439][T24278] __swap_cache_prepare_and_add+0x67/0x460 [ 181.252544][T24278] ? alloc_pages_mpol+0x217/0x260 [ 181.252580][T24278] swap_cache_alloc_folio+0xa2/0x120 [ 181.252613][T24278] swap_cluster_readahead+0x26e/0x3d0 [ 181.252663][T24278] swapin_readahead+0xde/0x840 [ 181.252696][T24278] ? _raw_spin_unlock+0x9/0x30 [ 181.252725][T24278] ? swap_put_entries_cluster+0x385/0x3a0 [ 181.252805][T24278] ? swap_put_entries_cluster+0x141/0x3a0 [ 181.252833][T24278] ? __rcu_read_unlock+0x4e/0x70 [ 181.252881][T24278] ? swap_cache_get_folio+0x26f/0x280 [ 181.252913][T24278] do_swap_page+0x2fe/0x21e0 [ 181.252975][T24278] ? css_rstat_updated+0xbb/0x280 [ 181.252999][T24278] ? __rcu_read_lock+0x36/0x50 [ 181.253022][T24278] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 181.253074][T24278] handle_mm_fault+0xb46/0x3020 [ 181.253109][T24278] ? vma_start_read+0x1c7/0x2c0 [ 181.253185][T24278] do_user_addr_fault+0x62f/0x1050 [ 181.253222][T24278] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 181.253247][T24278] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 181.253324][T24278] ? trace_page_fault_user+0x1f/0xe0 [ 181.253359][T24278] exc_page_fault+0x62/0xa0 [ 181.253380][T24278] asm_exc_page_fault+0x26/0x30 [ 181.253402][T24278] RIP: 0033:0x7fc09a0ba190 [ 181.253465][T24278] Code: c4 4c 0f 42 e0 83 3d 3a dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d fe b4 ed 00 e8 03 00 00 48 8d 1d ff bd 3a 00 e8 8a 31 13 00 [ 181.253483][T24278] RSP: 002b:00007ffee52b0380 EFLAGS: 00010206 [ 181.253504][T24278] RAX: 000000000002a9c5 RBX: 00007fc09a467da0 RCX: 000000000002a7b0 [ 181.253530][T24278] RDX: 0000000000000215 RSI: 00007ffee52b0360 RDI: 0000000000000001 [ 181.253546][T24278] RBP: 00007fc09a467da0 R08: 000000001fc8c234 R09: 7fffffffffffffff [ 181.253562][T24278] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000002a9ff [ 181.253650][T24278] R13: 00007fc09a465fac R14: 000000000002a6f5 R15: 00007ffee52b0480 [ 181.253673][T24278] [ 181.253681][T24278] memory: usage 307200kB, limit 307200kB, failcnt 599 [ 181.519165][T24278] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 181.527201][T24278] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 181.534805][T24278] Memory cgroup stats for /syz4: [ 181.535232][T24278] cache 4096 [ 181.543458][T24278] rss 0 [ 181.546324][T24278] shmem 0 [ 181.549266][T24278] mapped_file 0 [ 181.552754][T24278] dirty 0 [ 181.555692][T24278] writeback 4096 [ 181.559377][T24278] workingset_refault_anon 56 [ 181.564095][T24278] workingset_refault_file 0 [ 181.568650][T24278] swap 430080 [ 181.571963][T24278] swapcached 663552 [ 181.588551][T24278] pgpgin 163813 [ 181.592246][T24278] pgpgout 163809 [ 181.599680][T24278] pgfault 269147 [ 181.603266][T24278] pgmajfault 22 [ 181.608606][T24278] inactive_anon 4096 [ 181.612619][T24278] active_anon 0 [ 181.616128][T24278] inactive_file 8192 [ 181.625616][T24393] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 181.636805][T24278] active_file 4096 [ 181.640547][T24278] unevictable 0 [ 181.658428][T24278] hierarchical_memory_limit 314572800 [ 181.669231][T24278] hierarchical_memsw_limit 9223372036854771712 [ 181.675690][T24278] total_cache 4096 [ 181.683660][T24278] total_rss 0 [ 181.687051][T24278] total_shmem 0 [ 181.691397][T24278] total_mapped_file 0 [ 181.697356][T24278] total_dirty 0 [ 181.700859][T24278] total_writeback 4096 [ 181.704943][T24278] total_workingset_refault_anon 56 [ 181.710389][T24278] total_workingset_refault_file 0 [ 181.715436][T24278] total_swap 430080 [ 181.719490][T24278] total_swapcached 663552 [ 181.738957][T24278] total_pgpgin 163813 [ 181.747590][T24278] total_pgpgout 163809 [ 181.756335][T24278] total_pgfault 269147 [ 181.762616][T24278] total_pgmajfault 22 [ 181.766650][T24278] total_inactive_anon 4096 [ 181.772236][T24278] total_active_anon 0 [ 181.780883][T24416] __nla_validate_parse: 17 callbacks suppressed [ 181.781149][T24278] total_inactive_file 8192 [ 181.794855][T24278] total_active_file 4096 [ 181.799219][T24278] total_unevictable 0 [ 181.803264][T24278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.10382,pid=24278,uid=0 [ 181.820218][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10450'. [ 181.823766][T24278] Memory cgroup out of memory: Killed process 24278 (syz.4.10382) total-vm:94032kB, anon-rss:1224kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 181.887144][T24426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10453'. [ 181.942527][T24435] xt_cgroup: invalid path, errno=-2 [ 182.089251][T24463] netlink: 284 bytes leftover after parsing attributes in process `syz.1.10470'. [ 182.188367][T24475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10478'. [ 182.212796][T24477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10480'. [ 182.252581][T24483] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.10484'. [ 182.268805][T24487] batadv_slave_0: entered promiscuous mode [ 182.274978][T24487] batadv_slave_0: entered allmulticast mode [ 182.293923][T24486] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 182.300517][T24486] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.348767][T24486] vhci_hcd vhci_hcd.0: Device attached [ 182.362941][T24488] vhci_hcd: connection closed [ 182.363294][ T36] vhci_hcd vhci_hcd.1: stop threads [ 182.373429][ T36] vhci_hcd vhci_hcd.1: release socket [ 182.385387][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 182.391393][T24501] bridge3: entered promiscuous mode [ 182.454322][T24522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10500'. [ 182.510386][T24530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10505'. [ 182.582080][T24540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10510'. [ 182.832425][T24588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10534'. [ 182.848071][T24589] bridge3: entered promiscuous mode [ 182.921882][T24606] macvtap0: entered promiscuous mode [ 183.051276][T24631] xt_socket: unknown flags 0x4c [ 183.106408][T24644] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 183.175657][T24660] team0: left promiscuous mode [ 183.180516][T24660] team0: left allmulticast mode [ 183.662133][T24755] xt_TCPMSS: Only works on TCP SYN packets [ 183.973510][T24807] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 184.180872][T24830] validate_nla: 10 callbacks suppressed [ 184.180892][T24830] netlink: 'syz.3.10652': attribute type 10 has an invalid length. [ 184.198122][T24833] bridge_slave_1: default FDB implementation only supports local addresses [ 184.509246][T24890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.830760][T24968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.901407][T24984] netlink: 'syz.3.10727': attribute type 21 has an invalid length. [ 184.935849][T24990] IPv6: NLM_F_REPLACE set, but no existing node found! [ 185.106678][ T28] kauditd_printk_skb: 482 callbacks suppressed [ 185.106695][ T28] audit: type=1400 audit(2000000014.610:1465): avc: denied { read write } for pid=3986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.156303][ T28] audit: type=1400 audit(2000000014.610:1466): avc: denied { read write } for pid=3982 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.224947][ T28] audit: type=1400 audit(2000000014.610:1467): avc: denied { read write } for pid=3986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.250265][ T28] audit: type=1400 audit(2000000014.639:1468): avc: denied { read write } for pid=3978 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.311406][T25045] tc_dump_action: action bad kind [ 185.382244][ T28] audit: type=1400 audit(2000000014.676:1469): avc: denied { read write } for pid=3977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.414499][ T28] audit: type=1400 audit(2000000014.676:1470): avc: denied { read write } for pid=3978 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.447569][T25067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.463120][ T28] audit: type=1400 audit(2000000014.704:1471): avc: denied { bpf } for pid=25032 comm="syz.3.10748" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 185.491713][T25066] SET target dimension over the limit! [ 185.528604][ T28] audit: type=1400 audit(2000000014.704:1472): avc: denied { read write } for pid=3977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.606627][ T28] audit: type=1400 audit(2000000014.713:1473): avc: denied { read write } for pid=3986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.632574][T25089] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 185.659145][ T28] audit: type=1400 audit(2000000014.713:1474): avc: denied { read write } for pid=3978 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.895430][T25148] netlink: 'syz.1.10809': attribute type 15 has an invalid length. [ 185.920613][T25153] sctp: [Deprecated]: syz.0.10812 (pid 25153) Use of int in max_burst socket option. [ 185.920613][T25153] Use struct sctp_assoc_value instead [ 185.923769][T25148] netlink: 'syz.1.10809': attribute type 7 has an invalid length. [ 185.983831][T25161] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.150267][T25203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.606829][T25281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.679325][T25289] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 186.692198][T25289] bond1 (unregistering): Released all slaves [ 186.750941][T25303] netlink: 'syz.1.10884': attribute type 21 has an invalid length. [ 186.759477][T25303] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.776005][T25309] xt_HMARK: spi-set and port-set can't be combined [ 186.797427][T25303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.804679][T25303] IPv6: NLM_F_CREATE should be set when creating new route [ 186.812010][T25303] IPv6: NLM_F_CREATE should be set when creating new route [ 186.819248][T25303] IPv6: NLM_F_CREATE should be set when creating new route [ 186.988750][T25343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.030613][T25349] netlink: 'syz.4.10906': attribute type 2 has an invalid length. [ 187.128884][T25368] __nla_validate_parse: 24 callbacks suppressed [ 187.128905][T25368] netlink: 160 bytes leftover after parsing attributes in process `syz.4.10915'. [ 187.461945][T25432] gtp1: entered promiscuous mode [ 187.467035][T25432] gtp1: entered allmulticast mode [ 187.559715][T25450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.617021][T25464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10963'. [ 187.664224][T25474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.807455][T25498] bridge6: entered allmulticast mode [ 187.915289][T25526] netlink: 'syz.1.10994': attribute type 21 has an invalid length. [ 187.960174][T25526] netlink: 'syz.1.10994': attribute type 3 has an invalid length. [ 187.968062][T25526] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10994'. [ 188.045453][T25550] bond2: option arp_validate: invalid value (6216) [ 188.062002][T25550] bond2 (unregistering): Released all slaves [ 188.169686][T25575] bond1: option packets_per_slave: invalid value (33554434) [ 188.179661][T25575] bond1: option packets_per_slave: allowed values 0 - 65535 [ 188.192285][T25575] bond1 (unregistering): Released all slaves [ 188.214956][T25585] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 188.228610][T25586] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11023'. [ 188.276818][T25594] xt_TPROXY: Can be used only with -p tcp or -p udp [ 188.336525][T25597] bridge0: port 1(gretap0) entered blocking state [ 188.343043][T25597] bridge0: port 1(gretap0) entered forwarding state [ 188.352554][T25597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.360860][T25597] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.381430][T25597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.480580][T25630] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.11045'. [ 188.538733][T25632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11046'. [ 188.564526][T25632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11046'. [ 188.682725][T25669] xt_CT: No such helper "netbios-ns" [ 188.703955][T25673] sctp: [Deprecated]: syz.1.11066 (pid 25673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.703955][T25673] Use struct sctp_sack_info instead [ 188.788383][T25688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.798102][T25688] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.812399][T25688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.814916][T25694] netlink: 'syz.1.11075': attribute type 21 has an invalid length. [ 188.884311][T25701] netlink: 'syz.2.11080': attribute type 10 has an invalid length. [ 188.914964][T25701] geneve1: entered promiscuous mode [ 188.924813][T25701] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 188.933872][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.954414][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.983635][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.000704][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.117079][T25725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.138520][T25725] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.157306][T25725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.353200][T25767] netlink: 830 bytes leftover after parsing attributes in process `syz.4.11112'. [ 189.402413][T25775] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11114'. [ 189.408188][T25772] IPv6: sit2: Disabled Multicast RS [ 189.419300][T25772] sit2: entered allmulticast mode [ 189.462674][T25785] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 189.495968][T25790] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11124'. [ 189.754463][T25847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 189.761029][T25847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 189.803117][T25847] vhci_hcd vhci_hcd.0: Device attached [ 189.824992][T25848] vhci_hcd: connection closed [ 189.825170][ T58] vhci_hcd vhci_hcd.2: stop threads [ 189.836817][ T58] vhci_hcd vhci_hcd.2: release socket [ 189.857435][ T58] vhci_hcd vhci_hcd.2: disconnect device [ 189.988892][T25899] gre0: Master is either lo or non-ether device [ 190.109453][T25927] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 190.124536][T25924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.137109][T25924] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.148544][T25924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.175475][T25925] vlan0: entered promiscuous mode [ 190.268317][T25948] Cannot find add_set index 65532 as target [ 190.309384][T25957] x_tables: duplicate underflow at hook 2 [ 190.349364][T25966] netlink: 'syz.0.11220': attribute type 13 has an invalid length. [ 190.391971][T25978] netlink: 'syz.2.11214': attribute type 3 has an invalid length. [ 190.442799][T25975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.464639][ T28] kauditd_printk_skb: 594 callbacks suppressed [ 190.464657][ T28] audit: type=1400 audit(2000000019.615:2069): avc: denied { read write } for pid=3986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.468234][T25975] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.471074][ T28] audit: type=1400 audit(2000000019.615:2070): avc: denied { create } for pid=25986 comm="syz.1.11218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 190.506007][T25975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.583872][ T28] audit: type=1400 audit(2000000019.680:2071): avc: denied { read write } for pid=3977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.648025][ T28] audit: type=1400 audit(2000000019.680:2072): avc: denied { create } for pid=25989 comm="syz.2.11223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 190.679100][ T28] audit: type=1400 audit(2000000019.690:2073): avc: denied { read write } for pid=3993 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.709642][ T28] audit: type=1400 audit(2000000019.699:2074): avc: denied { read write } for pid=3986 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.723218][T25975] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 190.734623][ T28] audit: type=1400 audit(2000000019.708:2075): avc: denied { create } for pid=25995 comm="syz.2.11226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 190.781181][ T28] audit: type=1400 audit(2000000019.708:2076): avc: denied { read write } for pid=3977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.835345][T26023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.885466][ T28] audit: type=1400 audit(2000000019.718:2077): avc: denied { read write } for pid=3978 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.910670][ T28] audit: type=1400 audit(2000000019.718:2078): avc: denied { read write } for pid=3993 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.925628][T26029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.322261][T26088] bond1: entered promiscuous mode [ 191.327512][T26088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.658073][T26158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.851009][T26206] geneve2: entered promiscuous mode [ 191.858229][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 191.868043][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 191.908551][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 191.923733][T26214] xfrm1: entered promiscuous mode [ 191.942873][T26220] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 191.958796][T26217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.057080][T26239] xt_TCPMSS: Only works on TCP SYN packets [ 192.144322][T26259] netlink: 'syz.0.11356': attribute type 5 has an invalid length. [ 192.507269][T26328] IPv6: sit1: Disabled Multicast RS [ 192.699106][T26368] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.734985][T26373] __nla_validate_parse: 14 callbacks suppressed [ 192.735005][T26373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11411'. [ 192.745253][T26375] SET target dimension over the limit! [ 193.090469][T26444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11447'. [ 193.108784][T26444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11447'. [ 193.144228][T26456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11453'. [ 193.154717][T26456] bridge_slave_0: entered allmulticast mode [ 193.162716][T26456] netlink: 'syz.3.11453': attribute type 3 has an invalid length. [ 193.205897][T26468] xt_bpf: check failed: parse error [ 193.250893][T26478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11464'. [ 193.316634][T26488] xt_socket: unknown flags 0x48 [ 193.427871][T26516] netlink: 'syz.0.11481': attribute type 1 has an invalid length. [ 193.429745][T26514] xt_hashlimit: max too large, truncated to 1048576 [ 193.854989][T26609] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 193.881684][T26609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 193.960040][T26626] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 193.972163][T26631] netlink: 'syz.2.11540': attribute type 3 has an invalid length. [ 193.990053][T26626] gretap0: entered allmulticast mode [ 194.000573][T26629] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11538'. [ 194.091803][T26653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11551'. [ 194.351544][ T2] ================================================================== [ 194.359688][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 194.366283][ T2] [ 194.368610][ T2] read-write to 0xffffffff86c5ffa8 of 4 bytes by task 26697 on cpu 1: [ 194.376769][ T2] free_pid+0xbc/0x1e0 [ 194.380854][ T2] free_pids+0x9e/0xb0 [ 194.384941][ T2] release_task+0x9a7/0xb60 [ 194.389477][ T2] do_exit+0xda4/0x1600 [ 194.393648][ T2] do_group_exit+0xfe/0x140 [ 194.398170][ T2] get_signal+0xe54/0xf60 [ 194.402514][ T2] arch_do_signal_or_restart+0x96/0x450 [ 194.408077][ T2] exit_to_user_mode_loop+0x6a/0x6f0 [ 194.413375][ T2] do_syscall_64+0x249/0x370 [ 194.417980][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.423896][ T2] [ 194.426320][ T2] read to 0xffffffff86c5ffa8 of 4 bytes by task 2 on cpu 0: [ 194.433777][ T2] copy_process+0x187f/0x20b0 [ 194.438467][ T2] kernel_clone+0x16b/0x5d0 [ 194.442976][ T2] kernel_thread+0xe5/0x120 [ 194.447491][ T2] kthreadd+0x25b/0x320 [ 194.451663][ T2] ret_from_fork+0x150/0x360 [ 194.456356][ T2] ret_from_fork_asm+0x1a/0x30 [ 194.461133][ T2] [ 194.463470][ T2] value changed: 0x800000de -> 0x800000dd [ 194.469366][ T2] [ 194.471695][ T2] Reported by Kernel Concurrency Sanitizer on: [ 194.477852][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(full) [ 194.488298][ T2] Tainted: [W]=WARN [ 194.492103][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.502294][ T2] ================================================================== [ 194.527244][T26703] bond2: Removing last arp target with arp_interval on [ 194.534476][T26703] bond2: entered promiscuous mode [ 194.539800][T26703] bond2: entered allmulticast mode [ 194.545263][T26703] 8021q: adding VLAN 0 to HW filter on device bond2