last executing test programs: 4m29.927836721s ago: executing program 2 (id=173): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold', 0x2, 0x0) 4m29.916250701s ago: executing program 2 (id=186): rt_sigreturn() 4m28.580442364s ago: executing program 2 (id=593): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sr0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sr0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sr0', 0x800, 0x0) 4m28.20741762s ago: executing program 2 (id=624): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 4m27.572391094s ago: executing program 2 (id=632): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 4m27.572074124s ago: executing program 2 (id=635): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 4m27.376545907s ago: executing program 5 (id=636): exit_group(0x0) 4m27.172805222s ago: executing program 5 (id=639): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 710.291051ms ago: executing program 1 (id=11908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 583.01058ms ago: executing program 4 (id=11912): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) 581.23706ms ago: executing program 1 (id=11915): r0 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='acl\x00\t\x00\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xd3\x0f\x99R\xb3\x16n\rO\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:.\xf1!\x9d`YQ\xc3N\n\xbbWN:\xd3\x98', 0x0, r0) 541.123923ms ago: executing program 6 (id=11917): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2}) 506.181865ms ago: executing program 4 (id=11918): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 481.577877ms ago: executing program 6 (id=11920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff000000000c0000008500000011000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 438.69654ms ago: executing program 1 (id=11922): setresuid(0xee01, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) 384.543644ms ago: executing program 3 (id=11923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2d, &(0x7f0000000e40)=""/136, &(0x7f0000000f00)=0x88) 384.295844ms ago: executing program 0 (id=11924): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000840], 0x0, 0x0, &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 381.802684ms ago: executing program 6 (id=11925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d89314af63c17fe75948ee98c19", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 375.403545ms ago: executing program 4 (id=11926): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x42, 0x4, 0x428, 0xffffffff, 0x0, 0x0, 0x210, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xba7d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x9, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x0, 0x2, 0x1, 0x4, 0x4], 0x1, 0x3}, {0x4, [0x1, 0x0, 0x6, 0x2, 0x7, 0x1], 0x0, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1c, "f30053790051bf3ffd3f72b279e4368029840d3facd44179be46d350310b"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 369.240155ms ago: executing program 3 (id=11927): mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) 318.610488ms ago: executing program 0 (id=11928): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xde\xce-%^', 0x3a, '\x05\xcb\\\x1a\\', 0x3a, './file0'}, 0x31) 318.338908ms ago: executing program 1 (id=11929): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x31, 0x0, &(0x7f00000001c0)) 307.371199ms ago: executing program 0 (id=11930): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000080)=0x400047, 0x4) 304.51615ms ago: executing program 3 (id=11931): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0xe, {0x2, 0x4e22, @empty}}, 0x24) 269.606522ms ago: executing program 6 (id=11932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}}, 0x0) 220.420865ms ago: executing program 4 (id=11933): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="97452a307eb495fe223600000000000000", 0x11}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa5", 0xb}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) 220.285835ms ago: executing program 3 (id=11934): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0xfffffe01) 220.071525ms ago: executing program 1 (id=11935): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003f40)={[{@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0xfe, 0x28c, &(0x7f0000004240)="$eJzs3b9rO2UcB/DP5UdrbClVFycRREQLpQ6C4KKLhYIUERG0UJHqorRCbdfGycXBXaWTSxE3q+AiLsXFP6Bqh7q4FAeLgg6R3F0gTdM2NsnlS+/1glyeS5+75wnk/eRK7+kTQGnNR8TzEVGNiIWIqEdE0l3h0ewxn+/uN47WI1qtV/5I0nrZfqZz3ExENCPi2Yha52e7h2+c/nW8/MTHO/XHvzh8vVHU++t2dnry0vnnqx99vfL0biV/bTZ/7n4fo5T0ea2WRDw4jsbuEUltwIrTY+4IN/jq53buH4qIx9L816OSR/aT7akf6vHUZ/2Pmzovtp/AOLRa9fZ3YLMFlE4lvQZOKosRkZUrlcXF7Br+l2oS721tf7DwztbO5sakRypgBJJm9nvvyYvfTn8z05P/36tZ/gfyzJh7CoxFO/+vvnzwa7t8Xp10b4ACfNcptPO/8ObekyH/UDryD3fNoH94lX8oM/mHO+C67F5zf5X8Q3nJP5TXoPlvFtgnYETqnUL/BA///f93fgfh7bsIFG0u3br+h/LqyX8+HzefrTrYRf/y2xvvjq+DwKitdQrd+QcAyqU1PeEJyMDETHr8AQAAAAAAAAAAAAAAAAAALttvHK13HkW1+eOnEWcvZMsWdbefLVtQTdcjjrgv3d7/Z3JhdaPkf6121N/akMcP68sRz75evWa9h37mfhtt+4ObSrc/PTKes394cbdxVb29zYhmu/JSrXb585/kn78bXXn+B244sP7WYA2MStKz/9xrxbbf69+Dyba/chzxfXv8Weo3/lXi4fS5//gz2/0vlm/p/X+GPAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACF+S8AAP//MSJ0XA==") symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 154.580129ms ago: executing program 0 (id=11936): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x80000001) 154.14235ms ago: executing program 3 (id=11937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x4}}]}, {0x4f}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 131.147811ms ago: executing program 4 (id=11938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x5, 0xffffffffffffffff, 0x8, 0x5}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}}, 0x0) 127.053072ms ago: executing program 6 (id=11939): r0 = socket(0x2000000015, 0x80005, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0xfffc, 0x0, @mcast2}, 0x1c) 48.533937ms ago: executing program 0 (id=11940): r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000280)) 48.281597ms ago: executing program 3 (id=11941): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x0) 36.372268ms ago: executing program 0 (id=11942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 18.157219ms ago: executing program 1 (id=11943): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 13.991419ms ago: executing program 6 (id=11944): r0 = add_key(&(0x7f0000000480)='rxrpc\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 0s ago: executing program 4 (id=11945): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): nt failed [ 208.924965][T20588] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8526'. [ 208.957752][T20579] EXT4-fs (loop4): 1 truncate cleaned up [ 208.991369][T20579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.010919][T20588] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8526'. [ 209.012369][ T28] audit: type=1400 audit(608823.467:6504): avc: denied { ioctl } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.045451][ T28] audit: type=1400 audit(608823.505:6505): avc: denied { read write } for pid=20577 comm="syz.4.8521" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.215957][ T4142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.241253][T20603] usb usb9: usbfs: process 20603 (syz.0.8533) did not claim interface 0 before use [ 209.896150][T20645] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 210.178974][T20663] netlink: 'syz.4.8561': attribute type 21 has an invalid length. [ 210.521462][T20683] xt_connbytes: Forcing CT accounting to be enabled [ 210.571643][T20683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.701638][T20700] netlink: 'syz.4.8580': attribute type 3 has an invalid length. [ 211.226587][T20742] ieee802154 phy0 wpan0: encryption failed: -90 [ 211.669520][T20774] loop6: detected capacity change from 0 to 512 [ 211.729355][T20774] EXT4-fs (loop6): inodes count not valid: 131072 vs 32 [ 211.856619][T20779] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 211.908201][T20779] bond1 (unregistering): Released all slaves [ 212.526918][T20824] __nla_validate_parse: 7 callbacks suppressed [ 212.526935][T20824] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8635'. [ 212.918360][T20855] netlink: 'syz.0.8649': attribute type 3 has an invalid length. [ 212.933032][T20852] xt_CT: No such helper "snmp_trap" [ 213.053106][T20864] netlink: 'syz.6.8655': attribute type 2 has an invalid length. [ 213.097648][T20867] netlink: 'syz.0.8656': attribute type 25 has an invalid length. [ 213.116075][T20867] netlink: 'syz.0.8656': attribute type 9 has an invalid length. [ 213.332410][T20889] set match dimension is over the limit! [ 213.364342][T20890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.547165][T20903] netlink: 'syz.3.8672': attribute type 25 has an invalid length. [ 213.604712][T20903] netlink: 'syz.3.8672': attribute type 9 has an invalid length. [ 213.788439][T20921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8681'. [ 213.821797][T20921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8681'. [ 213.840322][ T28] kauditd_printk_skb: 705 callbacks suppressed [ 213.840337][ T28] audit: type=1400 audit(608828.444:7211): avc: denied { create } for pid=20926 comm="syz.1.8686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.875954][T20921] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8681'. [ 213.899317][ T28] audit: type=1400 audit(608828.444:7212): avc: denied { write } for pid=20926 comm="syz.1.8686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.990752][T20936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.991993][ T28] audit: type=1400 audit(608828.453:7213): avc: denied { read write } for pid=4140 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.115119][ T28] audit: type=1400 audit(608828.453:7214): avc: denied { open } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.228710][ T28] audit: type=1400 audit(608828.453:7215): avc: denied { ioctl } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.272656][T20951] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.333900][T20955] loop4: detected capacity change from 0 to 4096 [ 214.370010][ T28] audit: type=1400 audit(608828.490:7216): avc: denied { read write } for pid=4142 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.399866][T20961] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.406404][T20961] audit: audit_lost=47 audit_rate_limit=0 audit_backlog_limit=64 [ 214.415346][T20959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.422993][ T28] audit: type=1400 audit(608828.490:7217): avc: denied { open } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.465115][T20955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.497260][T20955] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.8699: Failed to acquire dquot type 1 [ 214.540967][T20963] loop3: detected capacity change from 0 to 8192 [ 214.548725][T20970] SELinux: syz.0.8706 (20970) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 214.571783][T20963] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.592042][ T4142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.949057][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8713'. [ 215.422001][T21015] geneve3: entered allmulticast mode [ 216.207061][T21072] netlink: 'syz.3.8753': attribute type 15 has an invalid length. [ 216.343763][T21084] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 216.853473][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8774'. [ 216.879632][T21113] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=21113 comm=syz.4.8772 [ 216.884170][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8774'. [ 216.943215][T21111] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8774'. [ 217.556210][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8794'. [ 217.782734][T21169] IPv6: sit1: Disabled Multicast RS [ 218.152818][T21186] netlink: 'syz.6.8810': attribute type 16 has an invalid length. [ 218.180641][T21186] netlink: 'syz.6.8810': attribute type 17 has an invalid length. [ 218.198536][T21186] netlink: 'syz.6.8810': attribute type 27 has an invalid length. [ 219.192265][ T28] kauditd_printk_skb: 692 callbacks suppressed [ 219.192280][ T28] audit: type=1400 audit(608833.448:7896): avc: denied { read write } for pid=4142 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.232498][ T28] audit: type=1400 audit(608833.448:7897): avc: denied { read write } for pid=4140 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.260280][ T28] audit: type=1400 audit(608833.448:7898): avc: denied { open } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.317766][T21264] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8846'. [ 219.357039][ T28] audit: type=1400 audit(608833.448:7899): avc: denied { ioctl } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.444712][ T28] audit: type=1400 audit(608833.485:7900): avc: denied { read write open } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.525498][ T28] audit: type=1400 audit(608833.485:7901): avc: denied { ioctl } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.637393][ T28] audit: type=1400 audit(608833.485:7902): avc: denied { create } for pid=21255 comm="syz.1.8843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.652032][T21282] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.8853'. [ 219.695478][ T28] audit: type=1400 audit(608833.513:7903): avc: denied { accept } for pid=21255 comm="syz.1.8843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.742995][ T28] audit: type=1400 audit(608833.588:7904): avc: denied { read write } for pid=4143 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.848625][ T28] audit: type=1400 audit(608833.588:7905): avc: denied { open } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.109910][T21314] netlink: 'syz.4.8870': attribute type 21 has an invalid length. [ 220.157435][T21314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8870'. [ 220.188151][T21314] netlink: 'syz.4.8870': attribute type 1 has an invalid length. [ 220.346193][T21329] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.604534][T21352] netlink: 3260 bytes leftover after parsing attributes in process `syz.6.8888'. [ 220.630560][ T2998] SELinux: avc: seqno 2 < latest_notif 3 [ 221.127326][T21398] Cannot find del_set index 1 as target [ 221.159941][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8914'. [ 221.381483][T21422] netlink: 'syz.3.8924': attribute type 11 has an invalid length. [ 221.529330][T21435] geneve3: entered promiscuous mode [ 221.545448][T21435] geneve3: entered allmulticast mode [ 222.100403][T21483] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 222.116336][T21487] program syz.1.8955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.133619][T21487] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 222.471482][T21517] loop1: detected capacity change from 0 to 128 [ 222.506061][T21517] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 222.540734][T21517] FAT-fs (loop1): Filesystem has been set read-only [ 222.649339][T21530] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8980'. [ 222.684154][T21530] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8980'. [ 222.712349][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8980'. [ 222.964560][T21556] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8990'. [ 223.082733][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8996'. [ 223.345836][T21592] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 223.629553][T21618] netlink: 'syz.6.9018': attribute type 1 has an invalid length. [ 223.765062][T21628] IPVS: length: 1152 != 8 [ 223.850696][T21634] SET target dimension over the limit! [ 223.904504][T21635] loop1: detected capacity change from 0 to 2048 [ 223.962890][T21640] netlink: 'syz.3.9031': attribute type 1 has an invalid length. [ 223.987661][T21644] netlink: 'syz.0.9032': attribute type 39 has an invalid length. [ 224.109154][T21653] netlink: 'syz.3.9037': attribute type 2 has an invalid length. [ 224.129742][T21653] netlink: 'syz.3.9037': attribute type 1 has an invalid length. [ 224.183607][T21658] netlink: 'syz.1.9040': attribute type 21 has an invalid length. [ 224.221147][T21658] netlink: 'syz.1.9040': attribute type 4 has an invalid length. [ 224.543878][T21688] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 224.554947][ T28] kauditd_printk_skb: 853 callbacks suppressed [ 224.554963][ T28] audit: type=1400 audit(608838.462:8759): avc: denied { read write open } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.633982][ T28] audit: type=1400 audit(608838.462:8760): avc: denied { ioctl } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.751747][ T28] audit: type=1400 audit(608838.499:8761): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 224.780180][T21700] netlink: 'syz.1.9059': attribute type 5 has an invalid length. [ 224.829441][ T28] audit: type=1400 audit(608838.499:8762): avc: denied { read write } for pid=4140 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.881995][T21700] netlink: 'syz.1.9059': attribute type 8 has an invalid length. [ 224.902225][ T28] audit: type=1400 audit(608838.499:8763): avc: denied { open } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.926958][T21709] bond1: option packets_per_slave: invalid value (33554434) [ 224.941390][T21700] __nla_validate_parse: 6 callbacks suppressed [ 224.941402][T21700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9059'. [ 224.972374][T21709] bond1: option packets_per_slave: allowed values 0 - 65535 [ 225.037160][T21709] bond1 (unregistering): Released all slaves [ 225.097475][ T28] audit: type=1400 audit(608838.499:8764): avc: denied { ioctl } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.224811][ T28] audit: type=1400 audit(608838.508:8765): avc: denied { read write } for pid=4138 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.316661][ T28] audit: type=1400 audit(608838.508:8766): avc: denied { open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.364706][ T4138] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.412896][ T4142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 225.437876][T21734] netlink: 'syz.1.9076': attribute type 7 has an invalid length. [ 226.129355][T21766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9093'. [ 226.578702][T21782] xt_TCPMSS: Only works on TCP SYN packets [ 226.912104][T21801] loop0: detected capacity change from 0 to 1024 [ 226.958132][T21801] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 227.002862][T21801] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 227.061998][T21801] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 227.104240][T21815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9117'. [ 227.115828][T21801] EXT4-fs (loop0): orphan cleanup on readonly fs [ 227.122568][T21801] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.9107: Inode bitmap for bg 0 marked uninitialized [ 227.135531][T21801] loop0: lost filesystem error report for type 5 error -117 [ 227.135666][T21801] EXT4-fs (loop0): Remounting filesystem read-only [ 227.143008][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 227.143027][ C1] EXT4-fs (loop0): initial error at time 608840: ext4_read_inode_bitmap:167 [ 227.143058][ C1] EXT4-fs (loop0): last error at time 608840: ext4_read_inode_bitmap:167 [ 227.185125][T21801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.292129][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.703461][T21839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9127'. [ 227.934304][T21851] FAT-fs (loop9): unable to read boot sector [ 228.061036][T21858] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.422390][T21874] ipt_ECN: cannot use operation on non-tcp rule [ 228.515409][T21879] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9147'. [ 228.910993][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9158'. [ 228.946649][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9158'. [ 229.350030][T21924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9169'. [ 229.901626][T21953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9185'. [ 229.911232][ T28] kauditd_printk_skb: 6868 callbacks suppressed [ 229.911245][ T28] audit: type=1326 audit(608843.447:15606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21814 comm="syz.6.9116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300268c819 code=0x50000 [ 229.977156][T21958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.983787][T21958] audit: audit_lost=61 audit_rate_limit=0 audit_backlog_limit=64 [ 229.991569][ T28] audit: type=1326 audit(608843.466:15611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21814 comm="syz.6.9116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300268c819 code=0x50000 [ 230.046184][T21958] audit: backlog limit exceeded [ 230.076099][ T4138] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.093891][T21958] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.097728][T21962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.104088][ T28] audit: type=1326 audit(608843.466:15612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21814 comm="syz.6.9116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300268c819 code=0x50000 [ 230.134999][T21962] audit: audit_lost=62 audit_rate_limit=0 audit_backlog_limit=64 [ 230.486383][T21988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9201'. [ 230.753432][T22011] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 230.791655][T22015] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 231.252640][T22048] bridge0: left promiscuous mode [ 231.259432][T22048] team0: left promiscuous mode [ 231.264253][T22048] team_slave_0: left promiscuous mode [ 231.271803][T22047] validate_nla: 1 callbacks suppressed [ 231.271816][T22047] netlink: 'syz.3.9230': attribute type 4 has an invalid length. [ 231.296646][T22048] team_slave_1: left promiscuous mode [ 231.315920][T22048] dummy0: left promiscuous mode [ 231.353324][T22048] geneve3: left promiscuous mode [ 232.276152][T22117] bond1: option packets_per_slave: invalid value (33554434) [ 232.283508][T22117] bond1: option packets_per_slave: allowed values 0 - 65535 [ 232.335240][T22117] bond1 (unregistering): Released all slaves [ 232.509758][T22139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.528211][T22139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.571646][T22139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.593761][T22139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.824468][T22156] bridge2: entered promiscuous mode [ 232.936132][T22155] loop6: detected capacity change from 0 to 8192 [ 233.051591][T22168] bond3: option packets_per_slave: invalid value (33554434) [ 233.068456][T22168] bond3: option packets_per_slave: allowed values 0 - 65535 [ 233.099653][T22168] bond3 (unregistering): Released all slaves [ 233.134298][T22173] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9290'. [ 233.326193][T22184] netlink: 'syz.4.9295': attribute type 39 has an invalid length. [ 233.336676][T22183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9296'. [ 233.360851][T22185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9297'. [ 233.369247][T22187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9298'. [ 233.480817][T22183] veth5: entered allmulticast mode [ 233.705767][T22203] netlink: 'syz.0.9307': attribute type 21 has an invalid length. [ 233.945188][T22219] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9314'. [ 234.108920][T22230] netlink: 'syz.1.9319': attribute type 39 has an invalid length. [ 234.276710][T22237] xt_TCPMSS: Only works on TCP SYN packets [ 234.360952][T22240] loop4: detected capacity change from 0 to 512 [ 234.407558][T22240] EXT4-fs (loop4): 1 orphan inode deleted [ 234.435573][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:0: Failed to release dquot type 1 [ 234.447748][T22240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.450196][T22246] netlink: 'syz.6.9326': attribute type 10 has an invalid length. [ 234.471492][ T12] loop4: lost filesystem error report for type 5 error -117 [ 234.510359][ T4142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.563880][T22235] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 234.928379][T22246] team0: Port device dummy0 removed [ 234.935280][T22246] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.006771][T22260] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.074919][T22266] netlink: 'syz.6.9336': attribute type 2 has an invalid length. [ 235.108792][T22260] geneve2: left promiscuous mode [ 235.122580][T22260] bridge2: left promiscuous mode [ 235.273740][ T28] kauditd_printk_skb: 1005 callbacks suppressed [ 235.273755][ T28] audit: type=1400 audit(608848.489:16594): avc: denied { create } for pid=22271 comm="syz.1.9340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.348267][ T28] audit: type=1400 audit(608848.517:16595): avc: denied { read write } for pid=4140 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.436091][ T28] audit: type=1400 audit(608848.517:16596): avc: denied { read write open } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.650469][T22281] syz.0.9345 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 235.673159][ T28] audit: type=1400 audit(608848.517:16597): avc: denied { ioctl } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.743358][ T28] audit: type=1400 audit(608848.555:16598): avc: denied { read write } for pid=4137 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.798845][T22281] CPU: 0 UID: 0 PID: 22281 Comm: syz.0.9345 Tainted: G W syzkaller #0 PREEMPT(full) [ 235.798913][T22281] Tainted: [W]=WARN [ 235.798976][T22281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.799050][T22281] Call Trace: [ 235.799056][T22281] [ 235.799070][T22281] __dump_stack+0x1d/0x30 [ 235.799097][T22281] dump_stack_lvl+0x95/0xd0 [ 235.799187][T22281] dump_stack+0x15/0x1b [ 235.799209][T22281] dump_header+0x80/0x240 [ 235.799230][T22281] oom_kill_process+0x295/0x350 [ 235.799249][T22281] out_of_memory+0x97d/0xb80 [ 235.799338][T22281] try_charge_memcg+0x62e/0xa10 [ 235.799439][T22281] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 235.799531][T22281] __swap_cache_prepare_and_add+0x67/0x460 [ 235.799558][T22281] ? alloc_pages_mpol+0x217/0x260 [ 235.799599][T22281] swap_cache_alloc_folio+0xa2/0x120 [ 235.799624][T22281] swap_cluster_readahead+0x26e/0x3d0 [ 235.799724][T22281] swapin_readahead+0xde/0x840 [ 235.799777][T22281] ? _raw_spin_unlock+0x9/0x30 [ 235.799805][T22281] ? swap_put_entries_cluster+0x385/0x3a0 [ 235.799915][T22281] ? swap_put_entries_cluster+0x161/0x3a0 [ 235.799947][T22281] ? __rcu_read_unlock+0x4e/0x70 [ 235.800082][T22281] ? swap_cache_get_folio+0x26f/0x280 [ 235.800110][T22281] do_swap_page+0x2fe/0x21e0 [ 235.800139][T22281] ? css_rstat_updated+0xbb/0x280 [ 235.800223][T22281] ? __rcu_read_lock+0x36/0x50 [ 235.800239][T22281] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 235.800262][T22281] handle_mm_fault+0xb46/0x3020 [ 235.800290][T22281] ? vma_start_read+0x1c7/0x2c0 [ 235.800369][T22281] do_user_addr_fault+0x62f/0x1050 [ 235.800451][T22281] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 235.800550][T22281] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 235.800673][T22281] ? trace_page_fault_user+0x1f/0xe0 [ 235.800704][T22281] exc_page_fault+0x62/0xa0 [ 235.800727][T22281] asm_exc_page_fault+0x26/0x30 [ 235.800854][T22281] RIP: 0033:0x7f3dec007978 [ 235.800869][T22281] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 235.800884][T22281] RSP: 002b:00007fffeda8d4b0 EFLAGS: 00010246 [ 235.800978][T22281] RAX: 0000000000000000 RBX: 0000555573eaa500 RCX: 00007f3dec00d04e [ 235.800990][T22281] RDX: 00007fffeda8d500 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.801004][T22281] RBP: 00007f3dec2c7da0 R08: 0000000000000000 R09: 0000000000000000 [ 235.801018][T22281] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000374a2 [ 235.801044][T22281] R13: 00007f3dec2c5fac R14: 00000000000371a6 R15: 00007fffeda8d630 [ 235.801059][T22281] [ 235.850973][ T28] audit: type=1400 audit(608848.555:16599): avc: denied { open } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.865200][T22281] memory: usage 18596kB, limit 307200kB, failcnt 200 [ 235.943172][ T28] audit: type=1400 audit(608848.555:16600): avc: denied { ioctl } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 235.969552][T22281] memory+swap: usage 18744kB, limit 9007199254740988kB, failcnt 0 [ 235.986501][ T28] audit: type=1400 audit(608848.564:16601): avc: denied { read write } for pid=4138 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.045067][ T4142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 236.072803][T22281] kmem: usage 18140kB, limit 9007199254740988kB, failcnt 0 [ 236.137271][ T28] audit: type=1400 audit(608848.564:16602): avc: denied { open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.199579][T22281] Memory cgroup stats for /syz0: [ 236.199858][T22281] cache 0 [ 236.322704][T22281] rss 4096 [ 236.342388][T22281] shmem 0 [ 236.345515][T22281] mapped_file 0 [ 236.380937][T22281] dirty 0 [ 236.383967][T22281] writeback 0 [ 236.387244][T22281] workingset_refault_anon 22 [ 236.430689][T22326] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9367'. [ 236.451389][T22281] workingset_refault_file 0 [ 236.464419][T22281] swap 151552 [ 236.467829][T22326] bridge_slave_1: default FDB implementation only supports local addresses [ 236.489385][T22281] swapcached 278528 [ 236.497858][T22331] xt_TCPMSS: Only works on TCP SYN packets [ 236.506284][T22281] pgpgin 235075 [ 236.525057][T22281] pgpgout 235066 [ 236.539425][T22281] pgfault 260101 [ 236.548046][T22281] pgmajfault 9 [ 236.562504][T22281] inactive_anon 4096 [ 236.566534][T22281] active_anon 16384 [ 236.598772][T22281] inactive_file 16384 [ 236.602774][T22281] active_file 0 [ 236.654590][T22281] unevictable 0 [ 236.660482][T22341] vhci_hcd vhci_hcd.4: default hub control req: 2016 v0100 i0004 l0 [ 236.670569][T22281] hierarchical_memory_limit 314572800 [ 236.675943][T22281] hierarchical_memsw_limit 9223372036854771712 [ 236.682847][T22340] loop4: detected capacity change from 0 to 2048 [ 236.714580][T22281] total_cache 0 [ 236.718469][T22340] EXT4-fs: Ignoring removed orlov option [ 236.727677][T22281] total_rss 4096 [ 236.742309][T22340] EXT4-fs: Ignoring removed oldalloc option [ 236.745870][T22281] total_shmem 0 [ 236.751761][T22281] total_mapped_file 0 [ 236.779813][T22281] total_dirty 0 [ 236.783312][T22281] total_writeback 0 [ 236.837688][T22281] total_workingset_refault_anon 22 [ 236.838194][T22340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.856945][T22281] total_workingset_refault_file 0 [ 236.863373][T22281] total_swap 151552 [ 236.867242][T22281] total_swapcached 278528 [ 236.872629][T22281] total_pgpgin 235075 [ 236.877687][T22281] total_pgpgout 235066 [ 236.882576][T22281] total_pgfault 260101 [ 236.886688][T22281] total_pgmajfault 9 [ 236.890685][T22281] total_inactive_anon 4096 [ 236.895962][T22281] total_active_anon 16384 [ 236.900415][T22281] total_inactive_file 16384 [ 236.907245][T22281] total_active_file 0 [ 236.911395][T22281] total_unevictable 0 [ 236.917960][T22281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9345,pid=22281,uid=0 [ 236.936385][T22355] netlink: 'syz.1.9379': attribute type 21 has an invalid length. [ 236.954691][T22281] Memory cgroup out of memory: Killed process 22281 (syz.0.9345) total-vm:96080kB, anon-rss:1224kB, file-rss:21896kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 236.986118][T22340] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.9372: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 237.092653][ T4142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.278253][T22372] gre0: left promiscuous mode [ 237.321410][T22372] bridge0: port 3(bond0) entered disabled state [ 237.380329][T22372] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.413065][T22382] netlink: 'syz.4.9392': attribute type 2 has an invalid length. [ 237.438724][T22382] netlink: 'syz.4.9392': attribute type 1 has an invalid length. [ 237.501786][T22384] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9393'. [ 237.554814][T22384] netlink: 9 bytes leftover after parsing attributes in process `syz.6.9393'. [ 237.600156][T22384] netlink: 'syz.6.9393': attribute type 1 has an invalid length. [ 237.639374][T22384] netlink: 'syz.6.9393': attribute type 2 has an invalid length. [ 237.998647][T22421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.042601][T22421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.159869][T22510] xt_l2tp: v2 doesn't support IP mode [ 239.364530][T22518] x_tables: duplicate underflow at hook 3 [ 239.542822][T22529] netlink: 'syz.4.9464': attribute type 10 has an invalid length. [ 239.673423][T22536] xt_socket: unknown flags 0x4c [ 239.678965][T22529] team0: Device wg1 is of different type [ 240.518105][T22594] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 240.591004][ T4220] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.633904][ T28] kauditd_printk_skb: 652 callbacks suppressed [ 240.633919][ T28] audit: type=1400 audit(608853.512:17178): avc: denied { read write open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.678662][T22602] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9501'. [ 240.733802][ T28] audit: type=1400 audit(608853.540:17179): avc: denied { ioctl } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.791712][T22607] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 240.800886][ T28] audit: type=1400 audit(608853.559:17180): avc: denied { read write } for pid=4143 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.826160][ T28] audit: type=1400 audit(608853.559:17181): avc: denied { open } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.850278][ T28] audit: type=1400 audit(608853.559:17182): avc: denied { ioctl } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.877093][T22607] bond1 (unregistering): Released all slaves [ 240.883251][ T28] audit: type=1400 audit(608853.559:17183): avc: denied { create } for pid=22603 comm="syz.6.9502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.903774][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.912211][ T28] audit: type=1400 audit(608853.568:17184): avc: denied { getopt } for pid=22603 comm="syz.6.9502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.932419][ T28] audit: type=1400 audit(608853.634:17185): avc: denied { read write } for pid=4137 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.014010][ T28] audit: type=1400 audit(608853.634:17186): avc: denied { read write open } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.064784][ T28] audit: type=1400 audit(608853.634:17187): avc: denied { ioctl } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.237531][T22634] netlink: 'syz.1.9515': attribute type 1 has an invalid length. [ 241.286849][T22636] netlink: 'syz.6.9517': attribute type 1 has an invalid length. [ 241.303073][T22636] netlink: 'syz.6.9517': attribute type 2 has an invalid length. [ 241.320742][T22636] netlink: 'syz.6.9517': attribute type 2 has an invalid length. [ 241.568277][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9524'. [ 241.617295][ T4427] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 241.837114][T22665] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.9531'. [ 242.057235][ T4208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.065141][ T4208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.140338][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9544'. [ 242.209624][T22694] cgroup2: Unknown parameter 'defcontext#3۱$%j{zM^' [ 242.272156][T22699] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9548'. [ 242.322826][ T4427] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.381517][T22699] bond0: (slave bond_slave_0): Releasing backup interface [ 242.457130][T22699] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 242.464067][T22714] Invalid option length (0) for dns_resolver key [ 242.551299][T22719] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9558'. [ 242.825713][T22737] validate_nla: 3 callbacks suppressed [ 242.825730][T22737] netlink: 'syz.6.9564': attribute type 2 has an invalid length. [ 242.907200][T22737] netlink: 'syz.6.9564': attribute type 1 has an invalid length. [ 242.950538][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9569'. [ 243.050509][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9564'. [ 243.127649][T22746] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 243.150101][T22748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9573'. [ 243.271523][T22751] loop6: detected capacity change from 0 to 256 [ 243.829125][T22764] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 243.905281][T22764] bond1 (unregistering): Released all slaves [ 244.440157][T22807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9600'. [ 244.600052][T22818] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 245.192623][T22854] bond1: entered allmulticast mode [ 245.230821][T22854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.354756][T22861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9628'. [ 245.385260][T22863] loop6: detected capacity change from 0 to 128 [ 245.435636][T22866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9630'. [ 245.585245][T22876] hsr_slave_0: left promiscuous mode [ 245.607705][T22876] hsr_slave_1: left promiscuous mode [ 245.997813][ T28] kauditd_printk_skb: 606 callbacks suppressed [ 245.997882][ T28] audit: type=1400 audit(608858.517:17794): avc: denied { create } for pid=22901 comm="syz.1.9646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.059234][ T28] audit: type=1400 audit(608858.517:17795): avc: denied { getopt } for pid=22901 comm="syz.1.9646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.093168][ T28] audit: type=1400 audit(608858.535:17796): avc: denied { create } for pid=22900 comm="syz.6.9647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.127054][ T28] audit: type=1400 audit(608858.535:17797): avc: denied { write } for pid=22900 comm="syz.6.9647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.190727][ T28] audit: type=1400 audit(608858.535:17798): avc: denied { read write } for pid=4137 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.299920][ T28] audit: type=1400 audit(608858.535:17799): avc: denied { open } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.331754][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.353386][ T28] audit: type=1400 audit(608858.535:17800): avc: denied { ioctl } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.436288][ T28] audit: type=1400 audit(608858.563:17801): avc: denied { read write } for pid=4138 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.555630][ T28] audit: type=1400 audit(608858.563:17802): avc: denied { open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.601468][ T4138] audit: audit_backlog=65 > audit_backlog_limit=64 [ 246.685688][T22945] xt_ecn: cannot match TCP bits for non-tcp packets [ 247.122482][T22987] netlink: 'syz.6.9688': attribute type 9 has an invalid length. [ 247.284138][T22998] loop6: detected capacity change from 0 to 512 [ 247.358377][T22998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.465149][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.554745][T23025] __nla_validate_parse: 5 callbacks suppressed [ 247.554774][T23025] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9706'. [ 247.574436][T23024] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9704'. [ 247.668108][T23025] hsr_slave_0: left promiscuous mode [ 247.694427][T23025] hsr_slave_1: left promiscuous mode [ 247.914890][T23039] netlink: 'syz.6.9712': attribute type 6 has an invalid length. [ 248.078710][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9718'. [ 248.086201][T23049] netlink: 'syz.6.9717': attribute type 1 has an invalid length. [ 248.116035][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9718'. [ 248.334321][T23063] netlink: 'syz.0.9725': attribute type 30 has an invalid length. [ 248.382492][T23065] loop6: detected capacity change from 0 to 512 [ 248.414623][T23065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.497279][T23065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.612938][T23065] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.9726: Failed to acquire dquot type 1 [ 248.725482][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.129657][T23105] netlink: 'syz.6.9744': attribute type 8 has an invalid length. [ 249.407222][T23118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9750'. [ 249.546062][T23132] bridge0: entered promiscuous mode [ 249.571044][T23132] bridge0: entered allmulticast mode [ 249.646091][T23139] loop3: detected capacity change from 0 to 128 [ 249.670885][T23139] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 250.094271][T23172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9779'. [ 250.448654][T23199] xt_bpf: check failed: parse error [ 250.595150][T23212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9797'. [ 250.631628][T23212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9797'. [ 250.680144][T23212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9797'. [ 250.698219][T23212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9797'. [ 250.850705][T23212] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.858020][T23212] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.919280][T23231] netlink: 'syz.4.9808': attribute type 5 has an invalid length. [ 250.973140][T23212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.015249][T23212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.140840][T23226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.151227][ T4208] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.180106][ T4208] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 251.189828][ T4208] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.198778][ T4208] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 251.207881][ T4208] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.217389][ T4208] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 251.226392][ T4208] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.236127][ T4208] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 251.256877][T23257] netlink: 'syz.3.9818': attribute type 3 has an invalid length. [ 251.348276][ T28] kauditd_printk_skb: 729 callbacks suppressed [ 251.348289][ T28] audit: type=1400 audit(608863.530:18525): avc: denied { read write } for pid=23265 comm="syz.6.9824" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 251.431436][ T28] audit: type=1400 audit(608863.530:18526): avc: denied { open } for pid=23268 comm="syz.0.9825" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 251.465709][T23274] xt_limit: Overflow, try lower: 2147483649/3300 [ 251.501114][T23281] netlink: 'syz.1.9827': attribute type 10 has an invalid length. [ 251.552153][ T28] audit: type=1400 audit(608863.558:18527): avc: denied { read write open } for pid=23265 comm="syz.6.9824" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 251.668530][ T28] audit: type=1400 audit(608863.577:18528): avc: denied { read write } for pid=4137 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.731239][ T28] audit: type=1400 audit(608863.577:18529): avc: denied { open } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.755480][ T28] audit: type=1400 audit(608863.577:18530): avc: denied { ioctl } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.782254][ T28] audit: type=1400 audit(608863.587:18531): avc: denied { read write } for pid=4138 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.806679][ T28] audit: type=1400 audit(608863.587:18532): avc: denied { open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.830966][ T28] audit: type=1400 audit(608863.587:18533): avc: denied { ioctl } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.856951][ T28] audit: type=1400 audit(608863.652:18534): avc: denied { prog_load } for pid=23276 comm="syz.0.9830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.906121][T23322] x_tables: unsorted underflow at hook 2 [ 251.923382][T23320] openvswitch: netlink: EtherType 0 is less than min 600 [ 252.452945][ C0] hrtimer: interrupt took 37533 ns [ 252.608471][T23411] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 252.616048][T23411] SELinux: failed to load policy [ 253.109668][T23475] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 253.268545][T23487] loop4: detected capacity change from 0 to 512 [ 253.282599][T23489] IPv6: Can't replace route, no match found [ 253.314304][T23492] IPv6: NLM_F_REPLACE set, but no existing node found! [ 253.362888][T23497] netlink: 'syz.3.9929': attribute type 21 has an invalid length. [ 253.379324][T23487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.484218][ T4142] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.274201][T23600] __nla_validate_parse: 167 callbacks suppressed [ 254.274218][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.331376][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.396458][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.406635][T23611] SET target dimension over the limit! [ 254.413727][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.413849][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.418547][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.471800][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.483939][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.493123][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.502104][T23618] tipc: Can't bind to reserved service type 2 [ 254.512965][T23600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9977'. [ 254.694614][T23634] netlink: 'syz.4.9994': attribute type 1 has an invalid length. [ 254.759871][T23637] bond2: Removing last arp target with arp_interval on [ 254.785786][T23637] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 254.805665][T23637] bond2 (unregistering): Released all slaves [ 254.938628][T23625] infiniband !yz2: set down [ 254.956098][T23625] infiniband !yz2: added veth0_to_batadv [ 254.986644][T23625] RDS/IB: !yz2: added [ 255.001202][T23625] smc: adding ib device !yz2 with port count 1 [ 255.024035][T23625] smc: ib device !yz2 port 1 has no pnetid [ 255.228191][T23686] loop0: detected capacity change from 0 to 1024 [ 255.274698][T23686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.354268][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 255.782592][T23748] bond0: (slave dummy0): Releasing backup interface [ 255.802842][T23748] bridge_slave_0: left allmulticast mode [ 255.825212][T23748] bridge_slave_0: left promiscuous mode [ 255.830943][T23748] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.859934][T23748] bridge_slave_1: left allmulticast mode [ 255.869622][T23748] bridge_slave_1: left promiscuous mode [ 255.896481][T23748] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.921819][T23748] bond0: (slave bond_slave_0): Releasing backup interface [ 255.936475][T23748] bond0: (slave bond_slave_1): Releasing backup interface [ 255.987957][T23748] team0: Port device team_slave_0 removed [ 256.003158][T23748] team0: Port device team_slave_1 removed [ 256.019574][T23748] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.438245][T23821] netlink: 'syz.1.10082': attribute type 4 has an invalid length. [ 256.442515][T23820] netlink: 'syz.6.10083': attribute type 10 has an invalid length. [ 256.614661][T23834] loop1: detected capacity change from 0 to 1764 [ 256.648331][T23837] netlink: 'syz.0.10090': attribute type 1 has an invalid length. [ 256.701752][ T28] kauditd_printk_skb: 800 callbacks suppressed [ 256.701765][ T28] audit: type=1400 audit(608868.544:19335): avc: denied { open } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.778838][ T28] audit: type=1400 audit(608868.563:19336): avc: denied { ioctl } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.853177][T23853] tc_dump_action: action bad kind [ 256.868727][T23855] netlink: 'syz.6.10099': attribute type 10 has an invalid length. [ 256.881605][ T28] audit: type=1400 audit(608868.563:19337): avc: denied { read write } for pid=4138 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.915225][T23855] team0: Port device bridge_slave_1 added [ 256.958146][ T28] audit: type=1400 audit(608868.572:19339): avc: denied { unmount } for pid=4137 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 256.994953][T23862] loop1: detected capacity change from 0 to 1024 [ 257.023368][T23862] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 257.071337][ T28] audit: type=1400 audit(608868.563:19338): avc: denied { open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.109281][T23862] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #3: block 2: comm syz.1.10102: lblock 2 mapped to illegal pblock 2 (length 1) [ 257.143729][T23862] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 257.143856][T23862] EXT4-fs (loop1): Remounting filesystem read-only [ 257.152993][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 257.153011][ C0] EXT4-fs (loop1): initial error at time 608868: ext4_map_blocks:786: inode 3: block 2 [ 257.153042][ C0] EXT4-fs (loop1): last error at time 608868: ext4_map_blocks:786: inode 3: block 2 [ 257.178805][ T28] audit: type=1400 audit(608868.582:19340): avc: denied { ioctl } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.210956][ T28] audit: type=1400 audit(608868.582:19341): avc: denied { read write } for pid=4137 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.235192][ T28] audit: type=1400 audit(608868.582:19342): avc: denied { open } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.259479][ T28] audit: type=1400 audit(608868.591:19343): avc: denied { read write } for pid=4140 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.283842][ T28] audit: type=1400 audit(608868.591:19344): avc: denied { open } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.291917][T23862] EXT4-fs (loop1): 1 orphan inode deleted [ 257.335279][T23873] netlink: 'syz.3.10106': attribute type 1 has an invalid length. [ 257.454646][T23862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.492614][T23886] bridge3: entered promiscuous mode [ 257.553730][ T4137] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.563104][T23895] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 257.791510][T23920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=23920 comm=syz.1.10128 [ 257.824305][T23920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=23920 comm=syz.1.10128 [ 257.955509][T23934] loop1: detected capacity change from 0 to 512 [ 257.974709][T23934] EXT4-fs: Ignoring removed bh option [ 258.008714][T23934] EXT4-fs (loop1): 1 truncate cleaned up [ 258.014813][T23934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.136487][ T4137] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.228494][T23943] loop0: detected capacity change from 0 to 4096 [ 258.262861][T23943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.335971][T23943] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.10140: Failed to acquire dquot type 1 [ 258.391543][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.547281][T23981] usb usb8: usbfs: process 23981 (syz.3.10156) did not claim interface 0 before use [ 259.169135][T24036] loop0: detected capacity change from 0 to 1764 [ 259.209084][T24036] iso9660: Unexpected value for 'utf8' [ 259.554050][T24068] vlan0: entered promiscuous mode [ 259.620861][T24074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.680499][T24083] loop3: detected capacity change from 0 to 512 [ 259.788057][T24083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.880485][ T4143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.006970][T24109] bridge_slave_0: left allmulticast mode [ 260.036693][T24109] bridge_slave_0: left promiscuous mode [ 260.070319][T24109] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.112105][T24109] bridge_slave_1: left allmulticast mode [ 260.135824][T24109] bridge_slave_1: left promiscuous mode [ 260.159320][T24109] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.221825][T24109] bond0: (slave bond_slave_0): Releasing backup interface [ 260.245237][T24109] bond0: (slave bond_slave_1): Releasing backup interface [ 260.276097][T24109] team_slave_0: left allmulticast mode [ 260.277425][T24141] cgroup: Name too long [ 260.299446][T24109] team0: Port device team_slave_0 removed [ 260.323379][T24109] team_slave_1: left allmulticast mode [ 260.346105][T24149] netlink: 'syz.6.10239': attribute type 9 has an invalid length. [ 260.347899][T24109] team0: Port device team_slave_1 removed [ 260.377297][T24109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.402855][T24109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.411666][T24109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.419160][T24109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.428775][T24109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.445932][T24118] __nla_validate_parse: 129 callbacks suppressed [ 260.445947][T24118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10223'. [ 260.641700][T24172] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10251'. [ 261.002224][T24197] netlink: 'syz.1.10263': attribute type 10 has an invalid length. [ 261.031396][T24197] bridge_slave_1: left allmulticast mode [ 261.041615][T24197] bridge_slave_1: left promiscuous mode [ 261.071431][T24197] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.182681][T24207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10265'. [ 261.203113][T24197] team0: Port device bridge_slave_1 added [ 261.389149][T24219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10273'. [ 261.815074][T24253] netlink: 'syz.1.10300': attribute type 1 has an invalid length. [ 262.057724][ T28] kauditd_printk_skb: 631 callbacks suppressed [ 262.057739][ T28] audit: type=1400 audit(608873.539:19972): avc: denied { open } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.111246][T24269] netlink: 45 bytes leftover after parsing attributes in process `syz.1.10297'. [ 262.165716][ T28] audit: type=1400 audit(608873.539:19973): avc: denied { ioctl } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.250098][ T28] audit: type=1326 audit(608873.549:19974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.4.10298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddde8ac819 code=0x7ffc0000 [ 262.293757][T24299] netlink: 'syz.0.10313': attribute type 3 has an invalid length. [ 262.323166][ T28] audit: type=1326 audit(608873.549:19975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.4.10298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fddde8ac819 code=0x7ffc0000 [ 262.352012][T24306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.352377][T24303] loop4: detected capacity change from 0 to 2048 [ 262.392600][ T28] audit: type=1326 audit(608873.549:19976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24270 comm="syz.4.10298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddde8ac819 code=0x7ffc0000 [ 262.442466][ T28] audit: type=1400 audit(608873.567:19977): avc: denied { create } for pid=24272 comm="syz.0.10302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 262.446147][T24320] openvswitch: netlink: Key type 1542 is out of range max 32 [ 262.486823][ T2998] loop4: p1 p2 p3 [ 262.496784][ T28] audit: type=1400 audit(608873.577:19978): avc: denied { write } for pid=24272 comm="syz.0.10302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 262.519084][ T2998] loop4: p1 p2 p3 [ 262.531304][T24303] loop4: p1 p2 p3 [ 262.584316][ T28] audit: type=1400 audit(608873.605:19979): avc: denied { create } for pid=24275 comm="syz.3.10301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.650167][ T28] audit: type=1400 audit(608873.614:19980): avc: denied { read write } for pid=4138 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.689483][ T4142] audit: audit_backlog=66 > audit_backlog_limit=64 [ 262.737106][T24341] loop1: detected capacity change from 0 to 4096 [ 262.785617][T24341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 262.838754][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 262.843334][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 262.854672][ T3980] udevd[3980]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 262.875727][T24341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.917987][T24359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10341'. [ 262.921234][T24341] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz.1.10333: invalid fast symlink length 131109 [ 262.957911][ T8422] udevd[8422]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 262.958829][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 262.971908][ T9983] udevd[9983]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 263.050104][ T4137] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.056934][ T8422] udevd[8422]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 263.064458][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 263.070092][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 263.454939][T24414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10369'. [ 263.844138][T24456] netlink: 'syz.6.10389': attribute type 1 has an invalid length. [ 263.896797][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10390'. [ 263.949724][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10393'. [ 264.545466][T24500] macvtap0: entered promiscuous mode [ 264.775032][T24516] netlink: 'syz.6.10418': attribute type 1 has an invalid length. [ 264.801968][T24516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.212183][T24558] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 265.332174][T24567] bond2: Removing last ns target with arp_interval on [ 265.511667][T24582] bond3: option arp_all_targets: invalid value (262144) [ 265.558585][T24582] bond3 (unregistering): Released all slaves [ 265.581895][T24588] ip6t_rpfilter: unknown options [ 265.804873][T24608] netlink: 'syz.6.10463': attribute type 10 has an invalid length. [ 265.882017][T24614] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10467'. [ 266.012304][T24628] netlink: 572 bytes leftover after parsing attributes in process `syz.0.10472'. [ 266.064380][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10474'. [ 266.096179][T24628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10472'. [ 266.207624][T24639] bond3: option lp_interval: invalid value (18446744073709551613) [ 266.229974][T24639] bond3: option lp_interval: allowed values 1 - 2147483647 [ 266.279721][T24639] bond3 (unregistering): Released all slaves [ 266.557920][T24671] netlink: 'syz.4.10490': attribute type 46 has an invalid length. [ 266.582473][T24669] xt_ecn: cannot match TCP bits for non-tcp packets [ 266.823221][T24699] netlink: 'syz.4.10505': attribute type 12 has an invalid length. [ 266.971504][T24710] : renamed from hsr0 [ 266.990404][T24711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10510'. [ 267.210380][T24724] netlink: 'syz.0.10517': attribute type 13 has an invalid length. [ 267.382895][T24737] loop3: detected capacity change from 0 to 1024 [ 267.406770][T24737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 267.424349][T24745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10526'. [ 267.442693][T24737] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 267.454824][ T28] kauditd_printk_skb: 626 callbacks suppressed [ 267.454873][ T28] audit: type=1400 audit(608878.590:20602): avc: denied { read write } for pid=4142 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.499662][T24737] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 2: comm syz.3.10524: lblock 2 mapped to illegal pblock 2 (length 1) [ 267.532028][T24737] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 267.532201][T24737] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 267.549492][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 267.549512][ C1] EXT4-fs (loop3): initial error at time 608878: ext4_map_blocks:786: inode 3: block 2 [ 267.549545][ C1] EXT4-fs (loop3): last error at time 608878: ext4_map_blocks:786: inode 3: block 2 [ 267.580916][ T28] audit: type=1400 audit(608878.637:20603): avc: denied { read write open } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.616961][T24737] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 48: comm syz.3.10524: lblock 0 mapped to illegal pblock 48 (length 1) [ 267.631303][T24737] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 267.631439][ T28] audit: type=1400 audit(608878.637:20604): avc: denied { ioctl } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.666375][ T28] audit: type=1400 audit(608878.759:20605): avc: denied { read write } for pid=4142 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.684850][T24737] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 267.690430][ T28] audit: type=1400 audit(608878.759:20606): avc: denied { open } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.723270][T24737] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.10524: Failed to acquire dquot type 0 [ 267.734661][T24737] loop3: lost filesystem error report for type 5 error -117 [ 267.737617][T24737] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 267.754765][T24737] loop3: lost filesystem error report for type 5 error -117 [ 267.754884][T24737] EXT4-fs error (device loop3): ext4_evict_inode:265: inode #11: comm syz.3.10524: mark_inode_dirty error [ 267.774769][ T28] audit: type=1400 audit(608878.759:20607): avc: denied { ioctl } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.801347][T24737] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 267.801510][T24737] EXT4-fs warning (device loop3): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 267.831844][ T28] audit: type=1400 audit(608878.880:20608): avc: denied { create } for pid=24752 comm="syz.4.10529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.852785][T24737] EXT4-fs (loop3): 1 orphan inode deleted [ 267.859005][T24737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.871848][ T28] audit: type=1400 audit(608878.890:20609): avc: denied { write } for pid=24752 comm="syz.4.10529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.892710][ T4208] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.921257][ T4208] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 0 [ 267.991251][ T4143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.001206][ T41] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.016302][ T41] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 268.016517][ T41] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 0 [ 268.058743][ T41] loop3: lost filesystem error report for type 5 error -117 [ 268.059036][ T4143] EXT4-fs error (device loop3): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 268.086161][ T4143] loop3: lost filesystem error report for type 5 error -117 [ 268.086257][ T4143] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 268.105899][ T4143] loop3: lost filesystem error report for type 5 error -117 [ 268.105995][ T4143] EXT4-fs error (device loop3): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 268.133305][ T4143] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 268.241136][T24782] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.10543'. [ 268.637909][T24824] netlink: 'syz.0.10563': attribute type 26 has an invalid length. [ 268.730055][T24830] Q6`Ҙ: renamed from lo (while UP) [ 268.870912][T24842] loop3: detected capacity change from 0 to 512 [ 268.899229][T24842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 268.914939][T24842] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.10573: bad orphan inode 131083 [ 268.926265][T24842] loop3: lost filesystem error report for type 5 error -117 [ 268.931626][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 268.945395][ C0] EXT4-fs (loop3): initial error at time 608879: ext4_orphan_get:1423 [ 268.949691][T24842] EXT4-fs (loop3): Remounting filesystem read-only [ 268.953611][ C0] EXT4-fs (loop3): last error at time 608879: ext4_orphan_get:1423 [ 268.988958][T24842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.044331][ T4143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.171111][T24863] loop6: detected capacity change from 0 to 1024 [ 270.231002][T24863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.340907][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.961386][T24962] netlink: 'syz.4.10630': attribute type 13 has an invalid length. [ 271.273325][T25000] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.10646'. [ 271.327886][T25008] xt_TCPMSS: Only works on TCP SYN packets [ 271.451207][T25019] loop6: detected capacity change from 0 to 764 [ 271.722585][T25035] netlink: 'syz.3.10665': attribute type 3 has an invalid length. [ 271.730418][T25035] netlink: 'syz.3.10665': attribute type 3 has an invalid length. [ 271.916796][T25054] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 271.923363][T25054] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.952419][T25066] netlink: 'syz.4.10679': attribute type 3 has an invalid length. [ 271.961997][T25063] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 271.968524][T25063] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.012512][T25054] vhci_hcd vhci_hcd.0: Device attached [ 272.043417][T25063] vhci_hcd vhci_hcd.0: Device attached [ 272.083225][T25057] vhci_hcd: connection closed [ 272.085174][T25064] vhci_hcd: connection closed [ 272.085540][ T12] vhci_hcd vhci_hcd.1: stop threads [ 272.126831][ T12] vhci_hcd vhci_hcd.1: release socket [ 272.147818][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 272.159306][ T12] vhci_hcd vhci_hcd.1: stop threads [ 272.172204][ T12] vhci_hcd vhci_hcd.1: release socket [ 272.187807][T25088] netlink: 'syz.4.10687': attribute type 12 has an invalid length. [ 272.203008][ T3970] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 272.209403][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 272.380012][T25102] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10695'. [ 272.525212][T25113] netlink: 'syz.4.10700': attribute type 2 has an invalid length. [ 272.577776][T25117] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 272.672817][T25127] netlink: 'syz.1.10709': attribute type 10 has an invalid length. [ 272.679978][T25131] loop0: detected capacity change from 0 to 512 [ 272.720423][T25131] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.10706: Failed to acquire dquot type 1 [ 272.746629][T25131] loop0: lost filesystem error report for type 5 error -117 [ 272.748200][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 272.761990][ C0] EXT4-fs (loop0): last error at time 608883: ext4_acquire_dquot:7026 [ 272.779497][T25131] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.10706: Failed to acquire dquot type 1 [ 272.809324][ T28] kauditd_printk_skb: 540 callbacks suppressed [ 272.809340][ T28] audit: type=1400 audit(608883.604:21144): avc: denied { read write } for pid=4143 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.816391][T25131] loop0: lost filesystem error report for type 5 error -117 [ 272.856791][ T28] audit: type=1400 audit(608883.604:21145): avc: denied { open } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.856899][T25131] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10706: bg 0: block 248: padding at end of block bitmap is not set [ 272.902496][ T28] audit: type=1400 audit(608883.604:21146): avc: denied { ioctl } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.927996][ T28] audit: type=1400 audit(608883.642:21147): avc: denied { allowed } for pid=25144 comm="syz.1.10715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 272.947263][ T28] audit: type=1400 audit(608883.642:21148): avc: denied { create } for pid=25144 comm="syz.1.10715" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 272.988899][T25131] loop0: lost filesystem error report for type 5 error -117 [ 272.989076][T25131] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 273.008457][ T28] audit: type=1400 audit(608883.642:21149): avc: denied { map } for pid=25144 comm="syz.1.10715" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 273.061916][T25131] loop0: lost filesystem error report for type 5 error -117 [ 273.062223][T25131] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 273.080948][ T28] audit: type=1400 audit(608883.642:21150): avc: denied { read write } for pid=25144 comm="syz.1.10715" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 273.115376][T25131] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 273.126633][T25131] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.10706: Failed to acquire dquot type 1 [ 273.166603][T25164] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 273.180508][ T28] audit: type=1400 audit(608883.642:21151): avc: denied { read write } for pid=4142 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.184184][T25168] bond3: entered promiscuous mode [ 273.212120][T25131] loop0: lost filesystem error report for type 5 error -117 [ 273.212284][T25131] EXT4-fs (loop0): 1 orphan inode deleted [ 273.226825][T25168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.234157][T25131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.301221][T25131] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.10706: Failed to acquire dquot type 1 [ 273.333746][T25173] bridge3: entered promiscuous mode [ 273.404665][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.471277][T25182] geneve1: entered promiscuous mode [ 273.507827][T25187] netlink: 'syz.3.10734': attribute type 21 has an invalid length. [ 273.658244][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10742'. [ 273.953049][T25239] netlink: 'syz.3.10759': attribute type 1 has an invalid length. [ 274.039147][T25252] netlink: 'syz.3.10764': attribute type 21 has an invalid length. [ 274.088791][T25257] netlink: 'syz.4.10768': attribute type 6 has an invalid length. [ 274.118325][T25257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10768'. [ 274.446836][T25289] ipvlan0: entered allmulticast mode [ 274.458698][T25289] veth0_vlan: entered allmulticast mode [ 274.470395][T25289] team0: Device ipvlan0 failed to register rx_handler [ 274.534618][T25293] bond3: entered promiscuous mode [ 274.539903][T25293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.599570][T25306] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.939954][T25350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10813'. [ 274.959514][T25350] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10813'. [ 275.196675][T25375] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 275.203212][T25375] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 275.250773][T25375] vhci_hcd vhci_hcd.0: Device attached [ 275.261326][T25383] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 275.267932][T25383] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.297207][T25390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10830'. [ 275.315892][T25385] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10828'. [ 275.333557][T25390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10830'. [ 275.363347][T25383] vhci_hcd vhci_hcd.0: Device attached [ 275.376862][T25377] vhci_hcd: connection closed [ 275.378631][T25384] vhci_hcd: connection closed [ 275.383350][ T41] vhci_hcd vhci_hcd.0: stop threads [ 275.399740][ T41] vhci_hcd vhci_hcd.0: release socket [ 275.426564][ T41] vhci_hcd vhci_hcd.0: disconnect device [ 275.436933][ T41] vhci_hcd vhci_hcd.0: stop threads [ 275.442162][ T41] vhci_hcd vhci_hcd.0: release socket [ 275.448023][ T4220] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 275.474520][ T41] vhci_hcd vhci_hcd.0: disconnect device [ 275.604907][T25414] loop4: detected capacity change from 0 to 512 [ 275.757769][T25432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10849'. [ 275.944522][T25449] random: crng reseeded on system resumption [ 276.007690][T25452] loop0: detected capacity change from 0 to 164 [ 276.012261][T25452] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 276.637970][T25520] xt_l2tp: missing protocol rule (udp|l2tpip) [ 276.736382][T25533] __nla_validate_parse: 2 callbacks suppressed [ 276.736395][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10902'. [ 276.823162][T25542] netlink: 56 bytes leftover after parsing attributes in process `syz.6.10905'. [ 276.929509][T25555] xt_hashlimit: size too large, truncated to 1048576 [ 276.936230][T25555] xt_hashlimit: invalid rate [ 277.216328][T25591] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10929'. [ 277.235313][T25596] loop0: detected capacity change from 0 to 512 [ 277.263342][T25596] EXT4-fs: Ignoring removed nobh option [ 277.368174][T25596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.392618][T25596] Option ' W' to dns_resolver key: bad/missing value [ 277.439939][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.475745][T25614] openvswitch: netlink: Missing key (keys=400040, expected=10000000) [ 277.781480][T25648] loop6: detected capacity change from 0 to 512 [ 277.845225][T25648] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.10953: Failed to acquire dquot type 1 [ 277.870341][T25648] loop6: lost filesystem error report for type 5 error -117 [ 277.870547][T25648] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.10953: Failed to acquire dquot type 1 [ 277.889203][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 277.889222][ C0] EXT4-fs (loop6): last error at time 608888: ext4_acquire_dquot:7026 [ 277.904476][T25648] loop6: lost filesystem error report for type 5 error -117 [ 277.908425][T25648] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10953: bg 0: block 248: padding at end of block bitmap is not set [ 277.936996][T25648] loop6: lost filesystem error report for type 5 error -117 [ 277.937299][T25648] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 277.953809][T25648] loop6: lost filesystem error report for type 5 error -117 [ 277.954723][T25648] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.10953: Failed to acquire dquot type 1 [ 277.975768][T25648] loop6: lost filesystem error report for type 5 error -117 [ 277.983887][T25648] EXT4-fs (loop6): 1 orphan inode deleted [ 278.004994][T25648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.023820][T25648] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.10953: Failed to acquire dquot type 1 [ 278.104997][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.158410][ T28] kauditd_printk_skb: 779 callbacks suppressed [ 278.158492][ T28] audit: type=1400 audit(608888.608:21921): avc: denied { create } for pid=25679 comm="syz.0.10971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 278.224149][ T28] audit: type=1400 audit(608888.627:21922): avc: denied { write } for pid=25679 comm="syz.0.10971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 278.297264][T25694] bridge3: entered promiscuous mode [ 278.302576][ T28] audit: type=1400 audit(608888.637:21923): avc: denied { read write } for pid=4143 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.334020][T25694] bridge3: entered allmulticast mode [ 278.384786][ T28] audit: type=1400 audit(608888.637:21924): avc: denied { open } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.452070][ T28] audit: type=1400 audit(608888.637:21925): avc: denied { ioctl } for pid=4143 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.530081][ T28] audit: type=1400 audit(608888.674:21926): avc: denied { create } for pid=25687 comm="syz.3.10973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 278.558568][T25725] validate_nla: 6 callbacks suppressed [ 278.558582][T25725] netlink: 'syz.6.10992': attribute type 1 has an invalid length. [ 278.595709][T25725] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10992'. [ 278.608246][ T28] audit: type=1400 audit(608888.674:21927): avc: denied { read write } for pid=4140 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.611681][T25728] loop1: detected capacity change from 0 to 512 [ 278.633013][T25729] netlink: 288 bytes leftover after parsing attributes in process `syz.0.10993'. [ 278.679835][ T28] audit: type=1400 audit(608888.674:21928): avc: denied { open } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.706198][ T4138] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.707553][ T4140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.749879][T25728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.770299][T25728] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.10991: invalid size [ 278.790603][T25728] EXT4-fs (loop1): Remounting filesystem read-only [ 278.858665][T25741] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.10998'. [ 278.939000][ T4137] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.959279][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 278.975763][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 278.998944][T25753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11004'. [ 279.068079][T25757] netlink: 432 bytes leftover after parsing attributes in process `syz.1.11000'. [ 279.098107][T25761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11007'. [ 279.258959][T25777] IPv6: NLM_F_REPLACE set, but no existing node found! [ 279.433178][T25797] netlink: 'syz.3.11026': attribute type 21 has an invalid length. [ 279.457743][T25797] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.490232][T25797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.497472][T25797] IPv6: NLM_F_CREATE should be set when creating new route [ 279.504698][T25797] IPv6: NLM_F_CREATE should be set when creating new route [ 279.511963][T25797] IPv6: NLM_F_CREATE should be set when creating new route [ 279.626837][T25818] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 279.679283][T25823] loop0: detected capacity change from 0 to 4096 [ 279.717647][T25823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.764466][T25840] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11045'. [ 279.776533][T25823] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.11036: corrupted in-inode xattr: e_name out of bounds [ 279.868764][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.062975][T25861] netlink: 'syz.0.11056': attribute type 21 has an invalid length. [ 280.104241][T25866] syz.3.11057: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 280.128287][T25866] CPU: 0 UID: 0 PID: 25866 Comm: syz.3.11057 Tainted: G W syzkaller #0 PREEMPT(full) [ 280.128318][T25866] Tainted: [W]=WARN [ 280.128358][T25866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 280.128374][T25866] Call Trace: [ 280.128381][T25866] [ 280.128389][T25866] __dump_stack+0x1d/0x30 [ 280.128415][T25866] dump_stack_lvl+0x95/0xd0 [ 280.128437][T25866] dump_stack+0x15/0x1b [ 280.128517][T25866] warn_alloc+0x145/0x1c0 [ 280.128544][T25866] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 280.128608][T25866] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 280.128664][T25866] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 280.128697][T25866] ? slow_avc_audit+0x14c/0x190 [ 280.128729][T25866] ? should_fail_ex+0x30/0x280 [ 280.128760][T25866] ? xskq_create+0x36/0xe0 [ 280.128820][T25866] vmalloc_user_noprof+0x7d/0xb0 [ 280.128849][T25866] ? xskq_create+0x80/0xe0 [ 280.128878][T25866] xskq_create+0x80/0xe0 [ 280.128905][T25866] xsk_init_queue+0x70/0xb0 [ 280.129053][T25866] xsk_setsockopt+0x3f5/0x640 [ 280.129082][T25866] ? __pfx_xsk_setsockopt+0x10/0x10 [ 280.129110][T25866] __sys_setsockopt+0x184/0x200 [ 280.129150][T25866] __x64_sys_setsockopt+0x64/0x80 [ 280.129269][T25866] x64_sys_call+0x2327/0x3020 [ 280.129300][T25866] do_syscall_64+0x12c/0x370 [ 280.129436][T25866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.129465][T25866] RIP: 0033:0x7fa2874dc819 [ 280.129480][T25866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.129497][T25866] RSP: 002b:00007fa285f2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.129516][T25866] RAX: ffffffffffffffda RBX: 00007fa287755fa0 RCX: 00007fa2874dc819 [ 280.129529][T25866] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 280.129619][T25866] RBP: 00007fa287572c91 R08: 0000000000000004 R09: 0000000000000000 [ 280.129633][T25866] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.129672][T25866] R13: 00007fa287756038 R14: 00007fa287755fa0 R15: 00007ffe0ff413e8 [ 280.129693][T25866] [ 280.141135][T25866] Mem-Info: [ 280.348543][T25892] netlink: 'syz.6.11071': attribute type 21 has an invalid length. [ 280.402824][T25866] active_anon:16832 inactive_anon:0 isolated_anon:0 [ 280.402824][T25866] active_file:6977 inactive_file:15157 isolated_file:0 [ 280.402824][T25866] unevictable:0 dirty:250 writeback:0 [ 280.402824][T25866] slab_reclaimable:3658 slab_unreclaimable:18956 [ 280.402824][T25866] mapped:29242 shmem:178 pagetables:3043 [ 280.402824][T25866] sec_pagetables:0 bounce:0 [ 280.402824][T25866] kernel_misc_reclaimable:0 [ 280.402824][T25866] free:1871065 free_pcp:5698 free_cma:0 [ 280.450135][T25866] Node 0 active_anon:67096kB inactive_anon:0kB active_file:27908kB inactive_file:60628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116968kB dirty:1000kB writeback:0kB shmem:712kB kernel_stack:3584kB pagetables:12404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 280.510313][T25866] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.542704][T25906] ip6tnl5: entered promiscuous mode [ 280.552376][T25906] ip6tnl5: entered allmulticast mode [ 280.653470][T25866] lowmem_reserve[]: 0 2879 7857 7857 [ 280.660585][T25866] Node 0 DMA32 free:2944604kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948128kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 280.732391][T25866] lowmem_reserve[]: 0 0 4978 4978 [ 280.749342][T25866] Node 0 Normal free:4524176kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67212kB inactive_anon:0kB active_file:27908kB inactive_file:60628kB unevictable:0kB writepending:1000kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:19100kB local_pcp:3776kB free_cma:0kB [ 280.795016][T25866] lowmem_reserve[]: 0 0 0 0 [ 280.811241][T25866] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 280.833962][T25866] Node 0 DMA32: 5*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944604kB [ 280.855197][T25933] ip6t_srh: unknown srh match flags 41C4 [ 280.869996][T25866] Node 0 Normal: 1428*4kB (UME) 1156*8kB (UM) 519*16kB (UM) 678*32kB (UM) 687*64kB (UME) 531*128kB (UM) 316*256kB (UM) 165*512kB (UME) 113*1024kB (UM) 71*2048kB (UM) 962*4096kB (UM) = 4523744kB [ 280.890227][T25866] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 280.900293][T25866] 22278 total pagecache pages [ 280.915581][T25866] 0 pages in swap cache [ 280.929088][T25866] Free swap = 124996kB [ 280.940955][T25866] Total swap = 124996kB [ 280.950282][T25938] bridge6: entered promiscuous mode [ 280.956053][T25866] 2097051 pages RAM [ 280.963358][T25866] 0 pages HighMem/MovableOnly [ 280.968113][T25938] bridge6: entered allmulticast mode [ 280.986906][T25866] 81619 pages reserved [ 281.192714][T25963] xfrm1: entered promiscuous mode [ 281.256721][T25969] loop3: detected capacity change from 0 to 512 [ 281.263842][T25969] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.272706][T25969] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 281.284912][T25969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 281.293773][T25969] EXT4-fs (loop3): orphan cleanup on readonly fs [ 281.301565][T25969] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11108: bg 0: block 361: padding at end of block bitmap is not set [ 281.332843][T25969] loop3: lost filesystem error report for type 5 error -117 [ 281.332977][T25969] EXT4-fs (loop3): Remounting filesystem read-only [ 281.346977][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 281.347000][ C1] EXT4-fs (loop3): initial error at time 608891: ext4_validate_block_bitmap:441 [ 281.347026][ C1] EXT4-fs (loop3): last error at time 608891: ext4_validate_block_bitmap:441 [ 281.410857][T25969] EXT4-fs (loop3): 1 truncate cleaned up [ 281.416229][T25982] netlink: 'syz.1.11114': attribute type 2 has an invalid length. [ 281.416933][T25969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 281.464546][T25969] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000007. [ 281.504262][ T4143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 281.923865][T26034] netlink: 'syz.6.11138': attribute type 3 has an invalid length. [ 282.221754][T26075] netlink: 'syz.4.11158': attribute type 8 has an invalid length. [ 282.234991][T26074] loop0: detected capacity change from 0 to 164 [ 282.323192][T26081] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 282.343551][T26081] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 282.530252][T26103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.681199][T26120] veth0_to_hsr: entered allmulticast mode [ 282.696627][T26123] loop3: detected capacity change from 0 to 1024 [ 282.741220][T26123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.781422][ T4143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.922622][T26143] __nla_validate_parse: 10 callbacks suppressed [ 282.922638][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11190'. [ 282.940022][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11190'. [ 283.023517][T26143] netlink: 'syz.4.11190': attribute type 1 has an invalid length. [ 283.050959][T26156] xt_HMARK: spi-set and port-set can't be combined [ 283.210660][T26174] x_tables: unsorted entry at hook 1 [ 283.343093][T26183] xfrm0: entered promiscuous mode [ 283.353501][T26187] netlink: 'syz.1.11211': attribute type 30 has an invalid length. [ 283.372490][T26183] xfrm0: entered allmulticast mode [ 283.448745][T26198] loop3: detected capacity change from 0 to 128 [ 283.517230][ T28] kauditd_printk_skb: 802 callbacks suppressed [ 283.517243][ T28] audit: type=1400 audit(608893.622:22702): avc: denied { read write } for pid=4138 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.547804][T26198] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.584562][ T28] audit: type=1400 audit(608893.669:22703): avc: denied { read write open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.613776][ T28] audit: type=1400 audit(608893.669:22704): avc: denied { ioctl } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.658712][ T28] audit: type=1400 audit(608893.669:22705): avc: denied { write } for pid=26205 comm="syz.1.11219" name="vlan0" dev="proc" ino=4026533741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 283.658776][ T28] audit: type=1400 audit(608893.678:22706): avc: denied { read write } for pid=4137 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.658801][ T28] audit: type=1400 audit(608893.678:22707): avc: denied { open } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.658825][ T28] audit: type=1400 audit(608893.678:22708): avc: denied { ioctl } for pid=4137 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.658851][ T28] audit: type=1400 audit(608893.734:22709): avc: denied { mount } for pid=26196 comm="syz.3.11217" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 283.658921][ T28] audit: type=1400 audit(608893.734:22710): avc: denied { read write } for pid=26196 comm="syz.3.11217" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.658946][ T28] audit: type=1400 audit(608893.734:22711): avc: denied { open } for pid=26196 comm="syz.3.11217" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.727379][ T4143] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.037355][T26233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11233'. [ 284.058075][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11234'. [ 284.166486][T26248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11240'. [ 284.305413][T26262] loop0: detected capacity change from 0 to 512 [ 284.337446][T26262] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 284.352037][T26262] EXT4-fs (loop0): 1 truncate cleaned up [ 284.386451][T26262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.433980][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.507956][T26284] loop6: detected capacity change from 0 to 512 [ 284.541199][T26284] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.619123][T26299] xt_TPROXY: Can be used only with -p tcp or -p udp [ 284.634951][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.858641][T26314] xt_CT: No such helper "snmp_trap" [ 284.934159][T26331] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11280'. [ 285.068111][T26348] SELinux: Context system_u:object_r:var_run_t:s0 is not valid (left unmapped). [ 285.944127][T26444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11333'. [ 286.014872][T26444] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 286.552946][T26512] netlink: 'syz.3.11366': attribute type 32 has an invalid length. [ 286.585961][T26512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11366'. [ 286.639340][T26512] bond5: Setting coupled_control to off (0) [ 286.657907][T26523] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 286.664443][T26523] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 286.672542][T26523] vhci_hcd vhci_hcd.0: Device attached [ 286.688375][T26526] vhci_hcd: connection closed [ 286.695907][ T12] vhci_hcd vhci_hcd.0: stop threads [ 286.720518][ T12] vhci_hcd vhci_hcd.0: release socket [ 286.746060][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 286.845003][T26543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11381'. [ 286.925626][T26554] netlink: 212 bytes leftover after parsing attributes in process `syz.6.11384'. [ 287.583947][T26630] loop1: detected capacity change from 0 to 512 [ 287.654708][T26629] loop3: detected capacity change from 0 to 4096 [ 287.678108][T26629] EXT4-fs: Ignoring removed bh option [ 287.716000][T26629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.757631][T26648] loop0: detected capacity change from 0 to 256 [ 287.791785][T26645] xt_policy: neither incoming nor outgoing policy selected [ 287.845999][T26629] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.11420: Failed to acquire dquot type 0 [ 287.876007][T26629] EXT4-fs (loop3): Remounting filesystem read-only [ 287.924563][ T4143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.142844][T26677] netlink: 'syz.6.11440': attribute type 12 has an invalid length. [ 288.875414][ T28] kauditd_printk_skb: 811 callbacks suppressed [ 288.875428][ T28] audit: type=1400 audit(608898.627:23521): avc: denied { read write } for pid=4140 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.965696][ T28] audit: type=1400 audit(608898.627:23522): avc: denied { open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.009258][T26780] loop3: detected capacity change from 0 to 256 [ 289.021644][T26781] loop4: detected capacity change from 0 to 512 [ 289.028534][ T28] audit: type=1400 audit(608898.627:23523): avc: denied { ioctl } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.073940][T26786] __nla_validate_parse: 6 callbacks suppressed [ 289.073955][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11493'. [ 289.117591][ T28] audit: type=1400 audit(608898.664:23524): avc: denied { read write open } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.209514][ T28] audit: type=1400 audit(608898.664:23525): avc: denied { ioctl } for pid=4140 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.209567][ T28] audit: type=1400 audit(608898.673:23526): avc: denied { read write } for pid=4142 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.209592][ T28] audit: type=1400 audit(608898.673:23527): avc: denied { open } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.209644][ T28] audit: type=1400 audit(608898.673:23528): avc: denied { ioctl } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.209666][ T28] audit: type=1400 audit(608898.683:23529): avc: denied { map_create } for pid=26772 comm="syz.4.11489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 289.209684][ T28] audit: type=1400 audit(608898.683:23530): avc: denied { map_create } for pid=26772 comm="syz.4.11489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 289.376567][T26803] loop4: detected capacity change from 0 to 164 [ 289.394334][T26803] Unable to read rock-ridge attributes [ 289.573609][T26821] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11512'. [ 289.630762][T26827] @: renamed from bond_slave_0 [ 289.847330][T26853] vti0: entered allmulticast mode [ 290.038598][T26875] loop1: detected capacity change from 0 to 512 [ 290.094306][T26875] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 290.130749][T26875] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.11539: invalid indirect mapped block 8 (level 2) [ 290.169103][T26875] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.169326][T26875] EXT4-fs (loop1): Remounting filesystem read-only [ 290.178531][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 290.178567][ C1] EXT4-fs (loop1): initial error at time 608899: ext4_free_branches:1023: inode 13 [ 290.178601][ C1] EXT4-fs (loop1): last error at time 608899: ext4_free_branches:1023: inode 13 [ 290.227466][T26875] EXT4-fs (loop1): 1 truncate cleaned up [ 290.236421][T26875] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.382808][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11553'. [ 290.404705][ T4137] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.507744][T26922] ipt_REJECT: TCP_RESET invalid for non-tcp [ 290.570050][T26928] loop6: detected capacity change from 0 to 512 [ 290.581587][T26928] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 290.588629][T26928] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.11564: Invalid block bitmap block 0 in block_group 0 [ 290.588715][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.588855][T26928] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 290.588872][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.588945][T26928] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.11564: attempt to clear invalid blocks 983261 len 1 [ 290.589034][T26928] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 290.589203][T26928] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.11564: Invalid inode table block 0 in block_group 0 [ 290.589248][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.589471][T26928] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 290.589489][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.589616][T26928] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 290.589635][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.589725][T26928] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.11564: Invalid inode table block 0 in block_group 0 [ 290.589749][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.589828][T26928] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 290.589899][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.589983][T26928] EXT4-fs error (device loop6): ext4_truncate:4602: inode #11: comm syz.6.11564: mark_inode_dirty error [ 290.590003][T26928] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 290.590110][T26928] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 290.590128][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.590248][T26928] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.11564: Invalid inode table block 0 in block_group 0 [ 290.590272][T26928] loop6: lost filesystem error report for type 5 error -117 [ 290.590476][T26928] EXT4-fs (loop6): 1 truncate cleaned up [ 290.591026][T26928] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.593635][T26928] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.11564: Invalid inode table block 0 in block_group 0 [ 290.904709][ T4140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.088971][T26970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11583'. [ 291.147423][T26979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11589'. [ 291.429831][T27009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11604'. [ 291.543532][T27021] netlink: 'syz.4.11608': attribute type 39 has an invalid length. [ 291.583139][T27023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11610'. [ 291.783608][T27040] Zero length message leads to an empty skb [ 291.870737][T27050] bond4: option arp_validate: invalid value (6216) [ 291.878057][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11623'. [ 291.905589][T27050] bond4 (unregistering): Released all slaves [ 291.922788][T27058] loop4: detected capacity change from 0 to 128 [ 291.945229][T27058] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.078833][ T4142] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.106544][T27067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.297449][T27095] x_tables: duplicate entry at hook 1 [ 292.608980][T27138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11664'. [ 293.099898][T27211] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 293.110744][T27214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11700'. [ 293.241519][T27225] netlink: 'syz.4.11703': attribute type 13 has an invalid length. [ 293.260975][T27225] netlink: 'syz.4.11703': attribute type 17 has an invalid length. [ 293.332229][T27244] xt_CONNSECMARK: invalid mode: 0 [ 293.364434][T27225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.427567][T27246] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 293.490056][T27246] bridge3: left promiscuous mode [ 293.507241][T27250] bond6: option ad_select: invalid value (4) [ 293.514838][T27250] bond6 (unregistering): Released all slaves [ 293.530836][ T317] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.542269][ T317] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.557500][ T317] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.599637][ T317] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.703035][T27340] loop0: detected capacity change from 0 to 4096 [ 293.715941][T27340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.732244][T27340] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.11718: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 293.811100][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.831607][T27366] netlink: 'syz.6.11729': attribute type 3 has an invalid length. [ 294.102987][T27407] loop3: detected capacity change from 0 to 512 [ 294.133240][T27407] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.189280][T27407] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 294.221762][ T28] kauditd_printk_skb: 799 callbacks suppressed [ 294.221775][ T28] audit: type=1400 audit(609159.648:24330): avc: denied { write } for pid=27421 comm="syz.0.11746" name="protocols" dev="proc" ino=4026532785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 294.254625][T27427] netlink: 'syz.4.11747': attribute type 1 has an invalid length. [ 294.257636][T27429] netlink: 'syz.1.11748': attribute type 21 has an invalid length. [ 294.273792][T27407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 294.296727][ T28] audit: type=1400 audit(609159.657:24331): avc: denied { read write } for pid=4138 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.308647][T27407] EXT4-fs (loop3): orphan cleanup on readonly fs [ 294.321049][ T28] audit: type=1400 audit(609159.657:24332): avc: denied { open } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.339827][T27434] tc_dump_action: action bad kind [ 294.351359][ T28] audit: type=1400 audit(609159.657:24333): avc: denied { ioctl } for pid=4138 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.381687][ T28] audit: type=1400 audit(609159.667:24334): avc: denied { create } for pid=27424 comm="syz.4.11747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 294.402771][ T28] audit: type=1400 audit(609159.676:24335): avc: denied { write } for pid=27424 comm="syz.4.11747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 294.423325][ T28] audit: type=1400 audit(609159.704:24336): avc: denied { read write } for pid=4142 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.433700][T27429] netlink: 'syz.1.11748': attribute type 4 has an invalid length. [ 294.458756][T27407] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11741: bg 0: block 361: padding at end of block bitmap is not set [ 294.491250][T27429] netlink: 'syz.1.11748': attribute type 5 has an invalid length. [ 294.504923][ T28] audit: type=1400 audit(609159.704:24337): avc: denied { open } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.529997][T27429] __nla_validate_parse: 5 callbacks suppressed [ 294.530010][T27429] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11748'. [ 294.543045][T27407] loop3: lost filesystem error report for type 5 error -117 [ 294.549260][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 294.563109][ C1] EXT4-fs (loop3): initial error at time 609159: ext4_validate_block_bitmap:441 [ 294.572384][ C1] EXT4-fs (loop3): last error at time 609159: ext4_validate_block_bitmap:441 [ 294.581478][T27407] EXT4-fs (loop3): Remounting filesystem read-only [ 294.591894][T27407] EXT4-fs (loop3): 1 truncate cleaned up [ 294.598052][T27407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 294.623354][ T28] audit: type=1400 audit(609159.704:24338): avc: denied { ioctl } for pid=4142 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 294.684438][ T28] audit: type=1326 audit(609159.770:24339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27430 comm="syz.0.11749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dec04c819 code=0x7ffc0000 [ 294.715653][T27407] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.11741: dx entry: limit 0 != root limit 125 [ 294.760922][T27407] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.11741: Corrupt directory, running e2fsck is recommended [ 294.832544][ T4143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 294.964299][T27503] binfmt_misc: register: failed to install interpreter file ./file0 [ 295.131689][T27527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11771'. [ 295.296265][T27547] bond4: Removing last arp target with arp_interval on [ 295.347164][T27547] bond4: entered promiscuous mode [ 295.385590][T27547] bond4: entered allmulticast mode [ 295.418663][T27547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.538374][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11796'. [ 295.569443][T27625] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11795'. [ 295.583660][T27618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11796'. [ 295.754360][T27653] sctp: [Deprecated]: syz.1.11807 (pid 27653) Use of int in max_burst socket option deprecated. [ 295.754360][T27653] Use struct sctp_assoc_value instead [ 296.100377][T27711] random: crng reseeded on system resumption [ 296.344460][T27738] netlink: 'syz.6.11837': attribute type 13 has an invalid length. [ 296.359320][T27740] syz_tun: mtu greater than device maximum [ 296.370055][T27738] netlink: 'syz.6.11837': attribute type 17 has an invalid length. [ 296.443613][T27738] bridge0: left allmulticast mode [ 296.446703][T27751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11840'. [ 296.459980][T27738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.493352][T27738] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.547805][T27738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.602864][T27751] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 296.670390][T27751] bond5 (unregistering): Released all slaves [ 296.857773][T27863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11857'. [ 296.917994][T27877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11860'. [ 296.970662][T27877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11860'. [ 297.292717][T27921] xt_CT: No such helper "pptp" [ 297.320032][T27893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.371705][T27893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.409416][T27893] veth0_to_hsr: left allmulticast mode [ 297.463936][T27893] macvtap0: left promiscuous mode [ 297.493726][T27893] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 297.532674][T27893] bridge3: left promiscuous mode [ 297.545875][T27893] bridge6: left promiscuous mode [ 297.555924][T27893] bridge6: left allmulticast mode [ 297.572513][T27893] bond4: left promiscuous mode [ 297.580502][T27893] bond4: left allmulticast mode [ 297.592331][T27905] geneve4: entered promiscuous mode [ 297.612799][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.621707][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 297.656249][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.665215][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 297.710871][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.736891][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 297.823796][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.867025][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 297.883200][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.941459][ T317] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.950382][ T317] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.994822][ T317] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 298.184209][T28031] netlink: 'syz.4.11912': attribute type 5 has an invalid length. [ 298.440103][T28075] Cannot find del_set index 4 as target [ 298.571499][T28096] loop1: detected capacity change from 0 to 128 [ 298.615619][T28096] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.641182][T28108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11937'. [ 298.654955][T28108] netlink: 'syz.3.11937': attribute type 4 has an invalid length. [ 298.752098][ T4137] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.774808][T28119] bond6: option tlb_dynamic_lb: invalid value (255) [ 298.786358][T28119] bond6 (unregistering): Released all slaves [ 298.822456][ T82] ================================================================== [ 298.830673][ T82] BUG: KCSAN: data-race in alloc_pid / copy_process [ 298.837359][ T82] [ 298.839682][ T82] read-write to 0xffffffff86c5ff68 of 4 bytes by task 12 on cpu 1: [ 298.847560][ T82] alloc_pid+0x651/0x940 [ 298.851820][ T82] copy_process+0xf37/0x20b0 [ 298.856404][ T82] kernel_clone+0x16b/0x5d0 [ 298.860894][ T82] user_mode_thread+0x9c/0xd0 [ 298.865567][ T82] call_usermodehelper_exec_work+0x41/0x160 [ 298.871454][ T82] process_scheduled_works+0x513/0xa10 [ 298.876903][ T82] worker_thread+0x58a/0x780 [ 298.881490][ T82] kthread+0x22a/0x280 [ 298.885545][ T82] ret_from_fork+0x150/0x360 [ 298.890126][ T82] ret_from_fork_asm+0x1a/0x30 [ 298.894880][ T82] [ 298.897191][ T82] read to 0xffffffff86c5ff68 of 4 bytes by task 82 on cpu 0: [ 298.904717][ T82] copy_process+0x187f/0x20b0 [ 298.909385][ T82] kernel_clone+0x16b/0x5d0 [ 298.914135][ T82] user_mode_thread+0x9c/0xd0 [ 298.918899][ T82] call_usermodehelper_exec_work+0x41/0x160 [ 298.924966][ T82] process_scheduled_works+0x513/0xa10 [ 298.930426][ T82] worker_thread+0x58a/0x780 [ 298.935019][ T82] kthread+0x22a/0x280 [ 298.939082][ T82] ret_from_fork+0x150/0x360 [ 298.943682][ T82] ret_from_fork_asm+0x1a/0x30 [ 298.948448][ T82] [ 298.950763][ T82] value changed: 0x800000f7 -> 0x800000f8 [ 298.957077][ T82] [ 298.959389][ T82] Reported by Kernel Concurrency Sanitizer on: [ 298.965615][ T82] CPU: 0 UID: 0 PID: 82 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 298.976680][ T82] Tainted: [W]=WARN [ 298.980465][ T82] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 298.990602][ T82] Workqueue: events_unbound call_usermodehelper_exec_work [ 298.997709][ T82] ==================================================================