last executing test programs: 2.435697578s ago: executing program 1 (id=13652): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.478004726s ago: executing program 1 (id=13684): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, 0x0, 0x0) 1.423737159s ago: executing program 1 (id=13695): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 827.244188ms ago: executing program 4 (id=13710): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000, 0x6e6bbb}}, 0xb8}}, 0x0) 752.288792ms ago: executing program 4 (id=13713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) 744.288182ms ago: executing program 4 (id=13714): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x81ff, 0x1, 0x0, 0x0, 0x0}) 626.002258ms ago: executing program 4 (id=13719): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r0, &(0x7f0000000080), 0xffffff1c) 494.642485ms ago: executing program 3 (id=13723): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) 400.16571ms ago: executing program 0 (id=13726): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0xfffffffffffffffe}) 397.4202ms ago: executing program 0 (id=13727): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/protocols\x00') preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/161, 0xa1}], 0x1, 0x8003d1, 0x3) 383.4422ms ago: executing program 2 (id=13728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@allocspi={0x104, 0x16, 0x1, 0x70bd2b, 0x25dfdbfc, {{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0xfffe, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0xa, 0x2, 0x6, 0x1}, 0x7, 0x74f}, [@policy_type={0xa}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 371.049801ms ago: executing program 3 (id=13729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x2c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880) 326.378423ms ago: executing program 0 (id=13730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 264.474246ms ago: executing program 3 (id=13731): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x3ded09ad073f4b47) 264.340816ms ago: executing program 2 (id=13732): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000040)={0xf97cff8c, 0x16e, 'SE Linux', "929e92d6d9cb422af6312b850663ce5c0ea9edba0dca06095436e3ea19aaa96c17e0b602787320ba423586db0ba4fc79059caa5c89cb1a998a24dfdabfa450cf3a66b1eee2b458183c866edbe877b92b4366ab9b6e728d871dd181b0a7df9d9b1a66a3f65212e40c446cdd29e7778c2f030000003bcf3385ec7acec73c68310aa16d8730bde6a02673db89610602898dc6790cdb47780513ec"}, 0xb2) 253.227857ms ago: executing program 1 (id=13733): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 253.120107ms ago: executing program 0 (id=13734): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 241.183518ms ago: executing program 2 (id=13735): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 164.449141ms ago: executing program 3 (id=13736): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000100)={{{0xc, 0x1}}, 0x0, 0x4fd, 0x0}) 164.284861ms ago: executing program 2 (id=13737): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) chroot(0x0) 148.207882ms ago: executing program 1 (id=13738): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 145.890602ms ago: executing program 2 (id=13739): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002d0001002abd", @ANYRES32, @ANYBLOB="0b00008000101e5738ebf700"], 0x2c}], 0x1}, 0x0) 144.683592ms ago: executing program 0 (id=13740): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) 133.371493ms ago: executing program 4 (id=13741): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 64.485096ms ago: executing program 3 (id=13742): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2}}) 63.751216ms ago: executing program 0 (id=13743): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 60.598696ms ago: executing program 1 (id=13744): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}]]}, {0x4}, {0xc, 0xb}, {0xffffffffffffff39, 0xa, {0x20}}}}]}]}, 0x8c}}, 0x0) 50.374557ms ago: executing program 3 (id=13745): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x300, 0x100000c, 0x130, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, 0x7f7fffff, 0xff, 'pim6reg\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xc8, 0x138, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e21], [0x4e21, 0x4e24], 0x0, 0x4, 0xfff2, 0xf9}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 144.739µs ago: executing program 2 (id=13746): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x7, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8b4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c00", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x5, 0x21, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x5b10df4d84c3f683}, 0x240448c8) 0s ago: executing program 4 (id=13747): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x755c00) kernel console output (not intermixed with test programs): miscuous mode [ 238.976351][T27264] bridge3: left allmulticast mode [ 238.981771][T27264] gre1: left promiscuous mode [ 238.986623][T27264] gre1: left allmulticast mode [ 239.004449][T27267] speed is unknown, defaulting to 1000 [ 239.057712][T27267] lo speed is unknown, defaulting to 1000 [ 239.212931][T27325] loop0: detected capacity change from 0 to 512 [ 239.275014][T27325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 239.347148][T27325] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.9584: Failed to acquire dquot type 0 [ 239.433626][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 239.584246][T27367] netlink: 'syz.2.9599': attribute type 11 has an invalid length. [ 239.649192][T27374] SELinux: Context ømMAh`ix: is not valid (left unmapped). [ 239.657881][T27372] __nla_validate_parse: 4 callbacks suppressed [ 239.657898][T27372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9600'. [ 239.808295][T27387] loop0: detected capacity change from 0 to 1764 [ 239.935316][T27406] loop0: detected capacity change from 0 to 512 [ 239.966489][T27406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.996663][T27414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9613'. [ 239.996669][T27406] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.9612: corrupted xattr block 32: bad e_name length [ 240.020743][T27406] EXT4-fs (loop0): Remounting filesystem read-only [ 240.024474][T27414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9613'. [ 240.042018][T27406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 240.091069][T27406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 240.118302][T27421] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9616'. [ 240.133424][T27406] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 240.160711][T27421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9616'. [ 240.194481][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.456144][T27464] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 240.664023][T27486] speed is unknown, defaulting to 1000 [ 240.813570][T27486] lo speed is unknown, defaulting to 1000 [ 241.004366][ T28] kauditd_printk_skb: 5488 callbacks suppressed [ 241.004384][ T28] audit: type=1326 audit(227.952:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.082007][ T28] audit: type=1326 audit(227.990:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.159015][ T28] audit: type=1326 audit(227.990:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.217702][ T28] audit: type=1326 audit(227.990:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.324783][ T28] audit: type=1326 audit(227.990:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.374332][ T28] audit: type=1326 audit(227.990:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.443833][ T28] audit: type=1326 audit(227.990:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.516673][ T28] audit: type=1326 audit(227.990:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.600153][ T28] audit: type=1326 audit(227.990:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.663922][ T28] audit: type=1326 audit(227.990:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27328 comm="syz.3.9585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x50000 [ 241.841856][T27608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9677'. [ 241.865196][T27613] xt_ecn: cannot match TCP bits for non-tcp packets [ 242.234450][T27699] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 242.300757][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9705'. [ 242.318200][T27712] netlink: 'syz.2.9706': attribute type 16 has an invalid length. [ 242.459547][T27733] IPv6: NLM_F_REPLACE set, but no existing node found! [ 242.556640][T27752] loop4: detected capacity change from 0 to 512 [ 242.589748][T27752] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.632202][T27752] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 242.647279][T27752] EXT4-fs (loop4): 1 truncate cleaned up [ 242.652994][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 242.653021][ C0] EXT4-fs (loop4): initial error at time 229: ext4_mb_generate_buddy:1315 [ 242.653063][ C0] EXT4-fs (loop4): last error at time 229: ext4_mb_generate_buddy:1315 [ 242.676953][T27752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.709650][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.055602][T27843] loop1: detected capacity change from 0 to 1024 [ 243.078254][T27843] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 243.098435][T27843] System zones: 0-1, 3-36 [ 243.111255][T27846] ipip0: entered promiscuous mode [ 243.129444][T27843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.290461][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.335242][T27887] bridge0: entered promiscuous mode [ 243.371517][T27899] netlink: 'syz.0.9763': attribute type 5 has an invalid length. [ 243.518665][T27916] veth5: entered promiscuous mode [ 243.523840][T27916] veth5: entered allmulticast mode [ 243.573086][T27927] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 243.616295][T27955] SET target dimension over the limit! [ 243.633366][T27959] netlink: 'syz.2.9779': attribute type 21 has an invalid length. [ 243.742557][T27982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9787'. [ 243.759673][T27982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9787'. [ 244.211783][T28054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9814'. [ 244.555919][T28098] loop0: detected capacity change from 0 to 512 [ 244.602064][T28098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.699838][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.833865][T28129] loop0: detected capacity change from 0 to 512 [ 244.876260][T28118] loop3: detected capacity change from 0 to 8192 [ 245.038483][T28129] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 245.060281][T28129] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 245.076307][T28129] EXT4-fs (loop0): 1 truncate cleaned up [ 245.261196][T28129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.332602][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.444196][T28118] loop3: p1 < > p2 p3 < p5 p6 > p4 [ 245.457630][T28164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9854'. [ 245.476649][T28118] loop3: partition table partially beyond EOD, truncated [ 245.518908][T28118] loop3: p1 start 100663296 is beyond EOD, truncated [ 245.554988][T28118] loop3: p2 size 134217732 extends beyond EOD, truncated [ 245.568680][T28118] loop3: p4 size 14876672 extends beyond EOD, truncated [ 245.590691][T28118] loop3: p5 size 134217732 extends beyond EOD, truncated [ 245.623373][T28118] loop3: p6 size 14876672 extends beyond EOD, truncated [ 245.816508][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 245.827871][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 245.827918][ T3646] udevd[3646]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 245.832342][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 245.859415][ T4743] udevd[4743]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 245.903216][ T3646] udevd[3646]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 245.911789][ T4743] udevd[4743]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 245.915962][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 245.930840][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 245.939429][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 245.995589][T28245] netlink: 'syz.4.9871': attribute type 46 has an invalid length. [ 246.046690][T28251] loop0: detected capacity change from 0 to 512 [ 246.086764][T28251] EXT4-fs (loop0): 1 truncate cleaned up [ 246.126794][T28251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.169131][T28261] bond3: entered promiscuous mode [ 246.174298][T28261] bond3: entered allmulticast mode [ 246.207035][T28261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.227018][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.261331][T28301] xt_SECMARK: invalid mode: 3 [ 246.326745][T28309] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9880'. [ 246.374519][T28315] xt_recent: hitcount (4194304) is larger than allowed maximum (65535) [ 246.515147][T28333] netlink: 'syz.0.9888': attribute type 4 has an invalid length. [ 246.639546][T28346] netlink: 'syz.4.9892': attribute type 1 has an invalid length. [ 246.655240][T28351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9894'. [ 246.783785][ T28] kauditd_printk_skb: 2444 callbacks suppressed [ 246.783804][ T28] audit: type=1400 audit(233.368:9818): avc: denied { nlmsg_write } for pid=28370 comm="syz.2.9901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 246.841345][ T28] audit: type=1400 audit(233.396:9819): avc: denied { audit_write } for pid=28370 comm="syz.2.9901" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 246.893184][ T28] audit: type=1400 audit(233.443:9820): avc: denied { append } for pid=28374 comm="syz.2.9904" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 247.015027][T28405] loop3: detected capacity change from 0 to 512 [ 247.041602][T28405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 247.095544][ T28] audit: type=1400 audit(233.658:9821): avc: denied { bind } for pid=28414 comm="syz.4.9916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 247.135804][T28405] EXT4-fs (loop3): 1 truncate cleaned up [ 247.183735][T28405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.233340][T28430] Cannot find del_set index 286 as target [ 247.247377][ T28] audit: type=1400 audit(233.799:9822): avc: denied { setattr } for pid=28401 comm="syz.3.9913" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.447103][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.462653][T28451] usb usb9: usbfs: process 28451 (syz.4.9928) did not claim interface 0 before use [ 247.593444][T28477] netlink: 'syz.3.9937': attribute type 2 has an invalid length. [ 247.711845][T28498] loop3: detected capacity change from 0 to 128 [ 247.726479][ T28] audit: type=1400 audit(234.248:9823): avc: denied { mounton } for pid=28496 comm="syz.3.9943" path="/1917/file1" dev="tmpfs" ino=9724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 247.808026][ T28] audit: type=1400 audit(234.322:9824): avc: denied { setopt } for pid=28509 comm="syz.3.9946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.650895][T28616] netlink: 'syz.4.9980': attribute type 10 has an invalid length. [ 248.674079][T28616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9980'. [ 248.694992][T28616] team0: entered promiscuous mode [ 248.705589][T28616] team0: entered allmulticast mode [ 248.722470][T28616] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.738551][T28616] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.871879][T28642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.983290][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9991'. [ 249.052703][T28663] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 249.139132][ T28] audit: type=1400 audit(235.566:9825): avc: denied { append } for pid=28671 comm="syz.3.9999" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 249.177439][T28676] ipt_ECN: cannot use operation on non-tcp rule [ 249.196186][ T28] audit: type=1400 audit(235.613:9826): avc: denied { listen } for pid=28674 comm="syz.4.9998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.276537][T28685] hsr0: entered allmulticast mode [ 249.287433][T28685] hsr_slave_0: entered allmulticast mode [ 249.336879][T28685] hsr_slave_1: entered allmulticast mode [ 249.358568][T28685] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 249.456267][T28705] netlink: 'syz.1.10009': attribute type 63 has an invalid length. [ 249.473391][ T28] audit: type=1326 audit(235.884:9827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28707 comm="syz.4.10010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 249.498026][T28705] lo: entered promiscuous mode [ 249.502907][T28705] lo: entered allmulticast mode [ 249.648770][T28729] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 249.663344][T28729] bond2 (unregistering): Released all slaves [ 249.846418][T28822] cgroup: Unexpected value for 'nofavordynmods' [ 250.458851][T28910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.573148][T28925] netlink: 'syz.3.10061': attribute type 21 has an invalid length. [ 250.595602][T28925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10061'. [ 250.735027][T28948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.745564][T28949] netlink: 'syz.0.10068': attribute type 30 has an invalid length. [ 250.794149][T28955] loop1: detected capacity change from 0 to 512 [ 250.825192][T28955] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.851868][T28955] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 250.875650][T28955] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 250.897382][T28955] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 250.917067][T28955] System zones: 0-2, 18-18, 34-35 [ 250.932300][T28955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.946478][T28955] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.1.10070: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 250.967885][T28955] EXT4-fs error (device loop1) in ext4_delete_entry:2737: Corrupt filesystem [ 250.978129][T28955] EXT4-fs warning (device loop1): ext4_rename_delete:3729: inode #2: comm syz.1.10070: Deleting old file: nlink 4, error=-117 [ 251.012968][T28980] loop0: detected capacity change from 0 to 128 [ 251.015212][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.409068][T29034] bond7 (unregistering): Released all slaves [ 251.527753][T29120] loop0: detected capacity change from 0 to 512 [ 251.564414][T29120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 251.602295][T29120] EXT4-fs (loop0): 1 orphan inode deleted [ 251.608166][T29120] EXT4-fs (loop0): 1 truncate cleaned up [ 251.640353][T29120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.782977][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.115623][T29200] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 252.163303][T29205] TCP: TCP_TX_DELAY enabled [ 252.170775][T29208] xt_connbytes: Forcing CT accounting to be enabled [ 252.322326][T29223] xt_CT: No such helper "snmp_trap" [ 252.606687][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 252.606706][ T28] audit: type=1400 audit(238.812:9846): avc: denied { setopt } for pid=29254 comm="syz.4.10148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.833630][T29265] netlink: 2160 bytes leftover after parsing attributes in process `syz.3.10151'. [ 252.871156][T29265] netlink: 2160 bytes leftover after parsing attributes in process `syz.3.10151'. [ 252.959263][ T28] audit: type=1107 audit(239.130:9847): pid=29278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 252.995844][T29288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10160'. [ 253.172426][T29301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10165'. [ 253.181833][T29301] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10165'. [ 253.268731][ T28] audit: type=1400 audit(239.430:9848): avc: denied { append } for pid=29318 comm="syz.2.10171" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 253.302263][T29320] usb usb8: usbfs: process 29320 (syz.2.10171) did not claim interface 0 before use [ 253.737077][ T28] audit: type=1400 audit(239.879:9849): avc: denied { map } for pid=29394 comm="syz.2.10198" path="socket:[74818]" dev="sockfs" ino=74818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.772888][T29402] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 253.829206][ T28] audit: type=1400 audit(239.879:9850): avc: denied { read } for pid=29394 comm="syz.2.10198" path="socket:[74818]" dev="sockfs" ino=74818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.856473][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10205'. [ 253.897066][ T28] audit: type=1401 audit(239.935:9851): op=setxattr invalid_context="" [ 253.918491][T29409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10205'. [ 254.073853][T29449] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 254.102903][ T28] audit: type=1400 audit(240.215:9852): avc: denied { setopt } for pid=29453 comm="syz.0.10221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 254.187372][T29460] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.272662][ T28] audit: type=1400 audit(240.374:9853): avc: denied { read } for pid=29478 comm="syz.3.10227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.306282][T29482] x_tables: duplicate underflow at hook 2 [ 254.394720][T29496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.419664][ T28] audit: type=1326 audit(240.505:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.3.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 254.485173][ T28] audit: type=1326 audit(240.505:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29498 comm="syz.3.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 254.510035][T29505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10239'. [ 254.549189][T29505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10239'. [ 254.719755][T29547] loop4: detected capacity change from 0 to 512 [ 254.760075][T29547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.776316][T29554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10256'. [ 254.785886][T29554] netlink: 'syz.0.10256': attribute type 1 has an invalid length. [ 254.856940][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.122509][T29615] loop0: detected capacity change from 0 to 512 [ 255.134333][ T7343] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.153561][T29615] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.169287][ T6859] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.220925][ T6859] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.247285][ T6859] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.263326][T29615] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.10277: inode has both inline data and extents flags [ 255.306993][T29645] netlink: 'syz.4.10285': attribute type 21 has an invalid length. [ 255.310259][T29615] fserror_report: 12 callbacks suppressed [ 255.310304][T29615] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 255.321075][T29615] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.10277: couldn't read orphan inode 17 (err -117) [ 255.330271][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 255.330289][ C1] EXT4-fs (loop0): initial error at time 241: ext4_orphan_get:1391: inode 17 [ 255.330326][ C1] EXT4-fs (loop0): last error at time 241: ext4_orphan_get:1391: inode 17 [ 255.366563][T29615] loop0: lost filesystem error report for type 5 error -117 [ 255.372742][T29615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.420176][T29657] netlink: 'syz.1.10290': attribute type 19 has an invalid length. [ 255.454685][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.908396][T29761] Cannot find del_set index 286 as target [ 256.296217][T29834] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.625125][T29885] loop1: detected capacity change from 0 to 256 [ 256.684900][T29893] loop0: detected capacity change from 0 to 512 [ 256.721467][T29885] FAT-fs (loop1): Directory bread(block 64) failed [ 256.728046][T29885] FAT-fs (loop1): Directory bread(block 65) failed [ 256.739846][T29893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.798603][T29885] FAT-fs (loop1): Directory bread(block 66) failed [ 256.826790][T29885] FAT-fs (loop1): Directory bread(block 67) failed [ 256.833466][T29885] FAT-fs (loop1): Directory bread(block 68) failed [ 256.848094][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.887696][T29885] FAT-fs (loop1): Directory bread(block 69) failed [ 256.926970][T29885] FAT-fs (loop1): Directory bread(block 70) failed [ 256.938241][T29885] FAT-fs (loop1): Directory bread(block 71) failed [ 256.938279][T29885] FAT-fs (loop1): Directory bread(block 72) failed [ 256.938334][T29885] FAT-fs (loop1): Directory bread(block 73) failed [ 256.968409][T29885] syz.1.10375: attempt to access beyond end of device [ 256.968409][T29885] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 257.012471][T29929] netlink: 'syz.3.10390': attribute type 1 has an invalid length. [ 257.067728][T29935] netlink: 'syz.2.10393': attribute type 4 has an invalid length. [ 257.229627][T29963] netlink: 'syz.1.10401': attribute type 64 has an invalid length. [ 257.300723][T29978] netlink: 'syz.1.10405': attribute type 21 has an invalid length. [ 257.360935][T29985] netlink: 'syz.0.10408': attribute type 3 has an invalid length. [ 257.449428][T29998] hsr0: entered allmulticast mode [ 257.463672][T29998] hsr_slave_0: entered allmulticast mode [ 257.469880][T29998] hsr_slave_1: entered allmulticast mode [ 257.475604][T29998] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 257.838906][T30069] ipt_ECN: cannot use operation on non-tcp rule [ 257.917866][T30078] usb usb8: usbfs: process 30078 (syz.1.10440) did not claim interface 6 before use [ 257.969166][ T28] kauditd_printk_skb: 5977 callbacks suppressed [ 257.969183][ T28] audit: type=1326 audit(243.807:15832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.000990][T30088] 0XD: renamed from gretap0 [ 258.024436][T30088] 0XD: entered allmulticast mode [ 258.059893][ T28] audit: type=1326 audit(243.863:15833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.115599][ T28] audit: type=1326 audit(243.863:15834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.137293][T30107] loop1: detected capacity change from 0 to 512 [ 258.149985][T30106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 258.156688][T30106] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 258.173217][ T28] audit: type=1326 audit(243.863:15835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.194903][T30106] vhci_hcd vhci_hcd.0: Device attached [ 258.216558][T30108] vhci_hcd: connection closed [ 258.216685][ T7343] vhci_hcd vhci_hcd.2: stop threads [ 258.232325][T30107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.262500][ T28] audit: type=1326 audit(243.863:15836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.265617][ T7343] vhci_hcd vhci_hcd.2: release socket [ 258.298945][T30107] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.10451: iget: checksum invalid [ 258.321645][ T28] audit: type=1326 audit(243.863:15837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.368172][ T7343] vhci_hcd vhci_hcd.2: disconnect device [ 258.376285][ T28] audit: type=1326 audit(243.863:15838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.412466][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.424455][ T28] audit: type=1326 audit(243.863:15839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.451343][ T28] audit: type=1326 audit(243.863:15840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.453018][T26214] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 258.487520][ T28] audit: type=1326 audit(243.863:15841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29817 comm="syz.4.10350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x50000 [ 258.543666][T30144] __nla_validate_parse: 8 callbacks suppressed [ 258.543687][T30144] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10461'. [ 258.575536][T30144] netlink: 'syz.0.10461': attribute type 1 has an invalid length. [ 258.583877][T30144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10461'. [ 258.610097][T30152] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10463'. [ 258.619784][T30152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10463'. [ 258.831414][T30189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.911002][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10479'. [ 258.934675][T30205] team0: entered allmulticast mode [ 258.951235][T30205] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.965377][T30208] netlink: 'syz.1.10481': attribute type 10 has an invalid length. [ 258.975077][T30208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10481'. [ 259.002173][T30208] team0: entered promiscuous mode [ 259.008024][T30208] team0: entered allmulticast mode [ 259.026409][T30208] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.043751][T30246] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10484'. [ 259.063978][T30208] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 259.176670][T30251] bond7 (unregistering): Released all slaves [ 259.398511][T30355] loop2: detected capacity change from 0 to 512 [ 259.429367][T30355] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.456573][T30365] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 259.458071][T30355] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 259.477724][T30355] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 259.488383][T30355] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 259.498879][T30355] System zones: 0-2, 18-18, 34-35 [ 259.547330][T30355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.568400][T30377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10507'. [ 259.614074][T30355] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.2.10501: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 259.635027][T30355] EXT4-fs error (device loop2) in ext4_delete_entry:2737: Corrupt filesystem [ 259.644942][T30355] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.10501: Deleting old file: nlink 4, error=-117 [ 259.756385][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.766995][T30413] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.10519'. [ 259.798630][T30413] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.10519'. [ 259.821058][T30425] xt_connbytes: Forcing CT accounting to be enabled [ 260.005758][ T7343] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.033528][ T7343] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.069020][ T7343] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.096834][T30465] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 260.162189][ T7343] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.208057][T30483] validate_nla: 2 callbacks suppressed [ 260.208075][T30483] netlink: 'syz.2.10541': attribute type 33 has an invalid length. [ 260.252441][T30495] loop1: detected capacity change from 0 to 512 [ 260.281132][T30495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.295914][T30495] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10545: bg 0: block 217: padding at end of block bitmap is not set [ 260.316930][T30495] EXT4-fs (loop1): Remounting filesystem read-only [ 260.396122][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.630383][T30557] No such timeout policy "syz1" [ 261.393834][T31160] bond0: (slave dummy0): Releasing backup interface [ 261.468598][T31180] netlink: 'syz.3.10610': attribute type 30 has an invalid length. [ 261.527829][T31224] sctp: [Deprecated]: syz.3.10615 (pid 31224) Use of int in maxseg socket option. [ 261.527829][T31224] Use struct sctp_assoc_value instead [ 261.668778][T31253] netlink: 'syz.4.10623': attribute type 4 has an invalid length. [ 261.808885][T31283] loop2: detected capacity change from 0 to 256 [ 261.848887][T31283] FAT-fs (loop2): Directory bread(block 64) failed [ 261.869487][T31283] FAT-fs (loop2): Directory bread(block 65) failed [ 261.880676][T31283] FAT-fs (loop2): Directory bread(block 66) failed [ 261.901871][T31283] FAT-fs (loop2): Directory bread(block 67) failed [ 261.929707][T31283] FAT-fs (loop2): Directory bread(block 68) failed [ 261.951219][T31283] FAT-fs (loop2): Directory bread(block 69) failed [ 261.972209][T31283] FAT-fs (loop2): Directory bread(block 70) failed [ 261.990639][T31283] FAT-fs (loop2): Directory bread(block 71) failed [ 262.009689][T31283] FAT-fs (loop2): Directory bread(block 72) failed [ 262.027301][T31283] FAT-fs (loop2): Directory bread(block 73) failed [ 262.034235][T31314] x_tables: duplicate underflow at hook 2 [ 262.067785][T31283] syz.2.10634: attempt to access beyond end of device [ 262.067785][T31283] loop2: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 262.161021][T31343] openvswitch: netlink: Message has 5 unknown bytes. [ 262.362570][T31380] loop3: detected capacity change from 0 to 256 [ 262.399436][T31380] FAT-fs (loop3): Directory bread(block 64) failed [ 262.432410][T31380] FAT-fs (loop3): Directory bread(block 65) failed [ 262.454755][T31380] FAT-fs (loop3): Directory bread(block 66) failed [ 262.475582][T31380] FAT-fs (loop3): Directory bread(block 67) failed [ 262.502223][T31380] FAT-fs (loop3): Directory bread(block 68) failed [ 262.511998][T31402] bond7: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 262.522070][T31402] 8021q: adding VLAN 0 to HW filter on device bond7 [ 262.530279][T31380] FAT-fs (loop3): Directory bread(block 69) failed [ 262.537446][T31380] FAT-fs (loop3): Directory bread(block 70) failed [ 262.543990][T31380] FAT-fs (loop3): Directory bread(block 71) failed [ 262.551123][T31380] FAT-fs (loop3): Directory bread(block 72) failed [ 262.557980][T31380] FAT-fs (loop3): Directory bread(block 73) failed [ 262.596852][T31380] syz.3.10663: attempt to access beyond end of device [ 262.596852][T31380] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 262.760624][T31486] netlink: 'syz.3.10685': attribute type 21 has an invalid length. [ 262.898334][T31516] loop0: detected capacity change from 0 to 256 [ 262.983480][T31516] FAT-fs (loop0): Directory bread(block 64) failed [ 263.005895][T31516] FAT-fs (loop0): Directory bread(block 65) failed [ 263.015726][T31516] FAT-fs (loop0): Directory bread(block 66) failed [ 263.050786][T31516] FAT-fs (loop0): Directory bread(block 67) failed [ 263.065352][T31516] FAT-fs (loop0): Directory bread(block 68) failed [ 263.081244][T31558] netlink: 'syz.2.10709': attribute type 21 has an invalid length. [ 263.086065][T31516] FAT-fs (loop0): Directory bread(block 69) failed [ 263.102269][T31516] FAT-fs (loop0): Directory bread(block 70) failed [ 263.109021][T31516] FAT-fs (loop0): Directory bread(block 71) failed [ 263.116317][T31516] FAT-fs (loop0): Directory bread(block 72) failed [ 263.123179][T31516] FAT-fs (loop0): Directory bread(block 73) failed [ 263.160540][T31516] syz.0.10693: attempt to access beyond end of device [ 263.160540][T31516] loop0: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 263.269345][T31582] netlink: 'syz.3.10716': attribute type 2 has an invalid length. [ 263.287332][T31582] netlink: 'syz.3.10716': attribute type 1 has an invalid length. [ 263.414425][T31615] loop4: detected capacity change from 0 to 512 [ 263.458865][T31615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.511615][T31636] loop3: detected capacity change from 0 to 512 [ 263.539084][T31636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 263.547106][T31615] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10725: corrupted xattr block 13: invalid checksum [ 263.565182][T31615] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 263.580151][T31636] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.10732: Unimplemented hash flags: 0x0001 [ 263.581632][T31615] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10725: corrupted xattr block 13: invalid checksum [ 263.605730][T31615] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 263.614970][ T28] kauditd_printk_skb: 3105 callbacks suppressed [ 263.614986][ T28] audit: type=1400 audit(249.111:18945): avc: denied { link } for pid=31609 comm="syz.4.10725" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.615162][T31615] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10725: corrupted xattr block 13: invalid checksum [ 263.644527][T31636] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.10732: Corrupt directory, running e2fsck is recommended [ 263.685554][T31615] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 263.740589][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.775048][ T28] audit: type=1400 audit(249.251:18946): avc: granted { setsecparam } for pid=31659 comm="syz.2.10741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 263.796804][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.909995][T31689] __nla_validate_parse: 9 callbacks suppressed [ 263.910016][T31689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10746'. [ 263.956858][T31689] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 264.058803][T31718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10759'. [ 264.072571][T31722] netlink: 'syz.3.10757': attribute type 1 has an invalid length. [ 264.110865][T31722] netlink: 'syz.3.10757': attribute type 2 has an invalid length. [ 264.144386][T31722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10757'. [ 264.303101][ T28] audit: type=1400 audit(249.756:18947): avc: denied { ioctl } for pid=31761 comm="syz.2.10773" path="socket:[77788]" dev="sockfs" ino=77788 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 264.447532][T31803] loop3: detected capacity change from 0 to 512 [ 264.460765][T31799] bridge0: entered allmulticast mode [ 264.483133][T31803] FAT-fs (loop3): Directory bread(block 199916) failed [ 264.511676][T31803] FAT-fs (loop3): Directory bread(block 199917) failed [ 264.517944][ T28] audit: type=1326 audit(249.953:18948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31813 comm="syz.2.10790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 264.557310][ T28] audit: type=1326 audit(249.981:18949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31813 comm="syz.2.10790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 264.580598][ T28] audit: type=1326 audit(249.981:18950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31813 comm="syz.2.10790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 264.604536][ T28] audit: type=1326 audit(249.981:18951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31813 comm="syz.2.10790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 264.619727][T31803] FAT-fs (loop3): Directory bread(block 199918) failed [ 264.667904][T31803] FAT-fs (loop3): Directory bread(block 199919) failed [ 264.690600][T31803] FAT-fs (loop3): Directory bread(block 199920) failed [ 264.719526][T31803] FAT-fs (loop3): Directory bread(block 199921) failed [ 264.726829][T31803] FAT-fs (loop3): Directory bread(block 199922) failed [ 264.758610][T31803] FAT-fs (loop3): Directory bread(block 199923) failed [ 264.791300][T31803] FAT-fs (loop3): Directory bread(block 199916) failed [ 264.812135][T31803] FAT-fs (loop3): Directory bread(block 199917) failed [ 265.240875][T31942] usb usb8: usbfs: process 31942 (syz.2.10831) did not claim interface 6 before use [ 265.396818][ T28] audit: type=1326 audit(250.776:18952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.3.10845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 265.494881][ T28] audit: type=1326 audit(250.776:18953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.3.10845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 265.572410][ T28] audit: type=1326 audit(250.804:18954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31977 comm="syz.3.10845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 265.613780][T32022] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 265.733307][T32044] bond2 (unregistering): Released all slaves [ 265.755626][T32117] netlink: 'syz.0.10867': attribute type 10 has an invalid length. [ 265.763889][T32117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10867'. [ 265.773349][T32117] team0: entered promiscuous mode [ 265.778910][T32117] team_slave_0: entered promiscuous mode [ 265.784788][T32117] team_slave_1: entered promiscuous mode [ 265.791073][T32117] team0: entered allmulticast mode [ 265.796399][T32117] team_slave_0: entered allmulticast mode [ 265.802359][T32117] team_slave_1: entered allmulticast mode [ 265.808571][T32117] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.817139][T32117] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.880194][T32127] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 265.942494][T32139] xt_l2tp: v2 doesn't support IP mode [ 266.182552][T32185] loop3: detected capacity change from 0 to 512 [ 266.208532][T32185] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 266.239153][T32185] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 266.264444][T32185] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 266.278277][T32185] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 266.286474][T32185] System zones: 0-2, 18-18, 34-35 [ 266.292926][T32185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.309886][T32185] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.3.10891: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 266.336055][T32185] EXT4-fs error (device loop3) in ext4_delete_entry:2737: Corrupt filesystem [ 266.350692][T32185] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.10891: Deleting old file: nlink 4, error=-117 [ 266.371707][T32207] netlink: 'syz.1.10897': attribute type 1 has an invalid length. [ 266.412029][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.554313][T32233] netlink: 'syz.3.10907': attribute type 10 has an invalid length. [ 266.577558][T32235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10906'. [ 266.738846][T32259] netlink: 'syz.3.10913': attribute type 33 has an invalid length. [ 266.746882][T32259] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10913'. [ 266.799011][T32261] Cannot find del_set index 286 as target [ 266.867614][T32277] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10919'. [ 267.365847][T32367] netlink: 'syz.3.10949': attribute type 11 has an invalid length. [ 267.397777][T32373] loop0: detected capacity change from 0 to 512 [ 267.428001][T32373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 267.449691][T32373] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.10951: bad orphan inode 131083 [ 267.463431][T32373] loop0: lost filesystem error report for type 5 error -117 [ 267.464029][T32373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.545504][T32391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10965'. [ 267.561626][T32393] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 267.573563][T32373] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.10951: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 267.612548][T32396] netlink: 'syz.1.10957': attribute type 2 has an invalid length. [ 267.711737][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.844617][T32428] loop3: detected capacity change from 0 to 512 [ 267.924421][T32428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.948782][T32428] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10967: bg 0: block 217: padding at end of block bitmap is not set [ 268.001706][T32428] EXT4-fs (loop3): Remounting filesystem read-only [ 268.047800][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.063124][T32460] netlink: 'syz.2.10974': attribute type 4 has an invalid length. [ 268.247946][T32501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10990'. [ 268.264571][T32503] loop0: detected capacity change from 0 to 1764 [ 268.313944][T32505] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 268.320537][T32505] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.369279][T32505] vhci_hcd vhci_hcd.0: Device attached [ 268.387796][T32510] vhci_hcd: connection closed [ 268.391168][ T6851] vhci_hcd vhci_hcd.4: stop threads [ 268.411492][ T6851] vhci_hcd vhci_hcd.4: release socket [ 268.420141][ T6851] vhci_hcd vhci_hcd.4: disconnect device [ 268.485479][T32548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11002'. [ 268.579161][T32566] netlink: 'syz.1.11009': attribute type 30 has an invalid length. [ 268.715661][T32621] loop0: detected capacity change from 0 to 256 [ 268.732038][T32621] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 269.083781][T32657] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 269.451174][T32716] xt_l2tp: wrong L2TP version: 0 [ 269.495772][T32723] Cannot find del_set index 4 as target [ 269.885945][ T336] __nla_validate_parse: 6 callbacks suppressed [ 269.885966][ T336] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.11073'. [ 270.185665][ T873] openvswitch: netlink: Message has 5 unknown bytes. [ 270.378951][ T910] netlink: 'syz.2.11101': attribute type 3 has an invalid length. [ 270.456864][ T927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11106'. [ 270.532101][ T927] bond8: option downdelay: invalid value (18446744073709547007) [ 270.571714][ T927] bond8: option downdelay: allowed values 0 - 2147483647 [ 270.609729][ T927] bond8 (unregistering): Released all slaves [ 270.636361][ T993] netlink: 'syz.1.11118': attribute type 10 has an invalid length. [ 270.703637][ T1038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11122'. [ 271.168434][ T1105] loop1: detected capacity change from 0 to 512 [ 271.245533][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 271.245548][ T28] audit: type=1400 audit(256.248:18963): avc: denied { connect } for pid=1112 comm="syz.2.11148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 271.338685][ T1119] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11151'. [ 271.434849][ T1105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.526942][ T1148] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 271.536876][ T1105] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.11144: corrupted xattr block 13: invalid checksum [ 271.584539][ T1105] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 271.640960][ T1105] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.11144: corrupted xattr block 13: invalid checksum [ 271.668162][ T28] audit: type=1400 audit(256.641:18964): avc: denied { write } for pid=1174 comm="syz.3.11162" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 271.702651][ T1105] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 271.719216][ T1180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11165'. [ 271.739834][ T1105] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.11144: corrupted xattr block 13: invalid checksum [ 271.781071][ T1105] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 271.807567][ T1198] IPv6: Can't replace route, no match found [ 271.853695][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.878885][ T28] audit: type=1400 audit(256.837:18965): avc: denied { read write } for pid=1208 comm="syz.4.11176" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 271.955658][ T28] audit: type=1400 audit(256.837:18966): avc: denied { open } for pid=1208 comm="syz.4.11176" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 272.036309][ T1240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11185'. [ 272.081667][ T1240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11185'. [ 272.289542][ T1314] tmpfs: Bad value for 'mpol' [ 272.515379][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11216'. [ 272.703196][ T28] audit: type=1400 audit(257.614:18967): avc: denied { bind } for pid=1368 comm="syz.4.11222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 272.762723][ T1377] xt_nat: multiple ranges no longer supported [ 272.794595][ T28] audit: type=1326 audit(257.698:18968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.1.11227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 272.846055][ T1385] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 272.855457][ T28] audit: type=1326 audit(257.698:18969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.1.11227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 272.863641][ T1385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.879130][ T28] audit: type=1326 audit(257.726:18970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.1.11227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 272.908398][ T28] audit: type=1326 audit(257.726:18971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.1.11227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 272.931649][ T28] audit: type=1326 audit(257.726:18972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1381 comm="syz.1.11227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 273.071717][ T1450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11237'. [ 273.471009][ T1508] xt_hashlimit: max too large, truncated to 1048576 [ 273.500740][ T1508] Timeout policy `syz1' can only be used by L3 protocol number 26667 [ 273.551573][ T1529] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11263'. [ 273.914394][ T1613] netlink: 'syz.0.11286': attribute type 6 has an invalid length. [ 274.018763][ T1631] bond8: option tlb_dynamic_lb: invalid value (255) [ 274.036729][ T1631] bond8 (unregistering): Released all slaves [ 274.264499][ T1734] xt_l2tp: v2 doesn't support IP mode [ 274.394235][ T1755] netlink: 'syz.4.11312': attribute type 2 has an invalid length. [ 274.429203][ T1755] netlink: 'syz.4.11312': attribute type 1 has an invalid length. [ 274.508485][ T1769] x_tables: duplicate underflow at hook 3 [ 274.859239][ T1812] netlink: 'syz.3.11332': attribute type 27 has an invalid length. [ 275.310086][ T1911] loop4: detected capacity change from 0 to 1764 [ 275.618785][ T1986] loop3: detected capacity change from 0 to 164 [ 275.657079][ T1986] rock: corrupted directory entry. extent=32, offset=0, size=458989 [ 275.845185][ T2018] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 276.050356][ T2058] __nla_validate_parse: 10 callbacks suppressed [ 276.050377][ T2058] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11409'. [ 276.243172][ T2087] loop2: detected capacity change from 0 to 512 [ 276.266453][ T2087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.311152][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.653402][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 276.653417][ T28] audit: type=1400 audit(261.309:18994): avc: denied { read } for pid=2624 comm="syz.3.11434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 276.752807][ T28] audit: type=1400 audit(261.393:18995): avc: denied { write } for pid=2643 comm="syz.4.11441" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 276.776247][ T2645] random: crng reseeded on system resumption [ 276.787800][ T2646] netlink: 276 bytes leftover after parsing attributes in process `syz.3.11442'. [ 276.830692][ T28] audit: type=1400 audit(261.421:18996): avc: denied { open } for pid=2643 comm="syz.4.11441" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 276.884184][ T28] audit: type=1400 audit(261.449:18997): avc: denied { ioctl } for pid=2643 comm="syz.4.11441" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.083953][ T2702] netlink: 'syz.1.11459': attribute type 1 has an invalid length. [ 277.108442][ T2702] netlink: 'syz.1.11459': attribute type 2 has an invalid length. [ 277.119002][ T2708] netlink: 320 bytes leftover after parsing attributes in process `syz.2.11463'. [ 277.179463][ T2721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11467'. [ 277.213614][ T2721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11467'. [ 277.275000][ T2742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11474'. [ 277.320407][ T2751] batadv0: entered promiscuous mode [ 277.381906][ T28] audit: type=1326 audit(261.982:18998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.1.11481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 277.466346][ T28] audit: type=1326 audit(261.982:18999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.1.11481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 277.490463][ T28] audit: type=1326 audit(261.982:19000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.1.11481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 277.513948][ T28] audit: type=1326 audit(261.982:19001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.1.11481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 277.539534][ T28] audit: type=1326 audit(261.982:19002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2760 comm="syz.1.11481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 277.588757][ T2788] netlink: 'syz.0.11487': attribute type 6 has an invalid length. [ 277.999311][ T2876] IPVS: Error connecting to the multicast addr [ 278.041578][ T2882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11521'. [ 278.090989][ T2882] bond5: option downdelay: invalid value (18446744073709547007) [ 278.098809][ T2882] bond5: option downdelay: allowed values 0 - 2147483647 [ 278.107128][ T2882] bond5 (unregistering): Released all slaves [ 278.265507][ T2996] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 278.383576][ T3019] loop0: detected capacity change from 0 to 512 [ 278.397271][ T3026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11544'. [ 278.464867][ T3019] EXT4-fs (loop0): 1 orphan inode deleted [ 278.485387][ T7343] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 278.491519][ T3019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.513383][ T3054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11548'. [ 278.514442][ T7343] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 1 [ 278.538953][ T3019] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.11541: iget: bad i_size value: -81346268269379574 [ 278.618530][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.667183][ T3085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11566'. [ 279.274707][ T3228] tmpfs: Bad value for 'mpol' [ 279.373531][ T3253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.529889][ T3284] gtp0: entered promiscuous mode [ 279.553589][ T3284] gtp0: entered allmulticast mode [ 279.562077][ T3281] team0: entered allmulticast mode [ 279.572275][ T3281] team_slave_0: entered allmulticast mode [ 279.586510][ T3281] team_slave_1: entered allmulticast mode [ 279.592922][ T3281] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.713507][ T3332] netlink: 'syz.2.11629': attribute type 6 has an invalid length. [ 279.820271][ T3363] netlink: 'syz.3.11639': attribute type 15 has an invalid length. [ 280.221624][ T3491] loop1: detected capacity change from 0 to 512 [ 280.305267][ T3491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.336601][ T3491] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11664: bg 0: block 217: padding at end of block bitmap is not set [ 280.360976][ T3516] tc_dump_action: action bad kind [ 280.398548][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.445643][ T3531] openvswitch: netlink: Missing key (keys=40, expected=80) [ 280.810861][ T3610] : renamed from dummy0 [ 281.146188][ T3687] loop2: detected capacity change from 0 to 512 [ 281.165712][ T3695] sctp: [Deprecated]: syz.0.11730 (pid 3695) Use of int in maxseg socket option. [ 281.165712][ T3695] Use struct sctp_assoc_value instead [ 281.471938][ T3760] loop3: detected capacity change from 0 to 1764 [ 281.502038][ T3768] __nla_validate_parse: 13 callbacks suppressed [ 281.502055][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11751'. [ 281.544682][ T3768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11751'. [ 281.666350][ T3798] netlink: 'syz.3.11758': attribute type 1 has an invalid length. [ 281.708847][ T3786] bond8: option tlb_dynamic_lb: invalid value (255) [ 281.723497][ T3798] netlink: 'syz.3.11758': attribute type 2 has an invalid length. [ 281.752592][ T3786] bond8 (unregistering): Released all slaves [ 281.796464][ T3864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11761'. [ 281.874476][ T3878] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11765'. [ 282.109115][ T3922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11779'. [ 282.135007][ T3922] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.221769][ T3948] random: crng reseeded on system resumption [ 282.370931][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 282.370951][ T28] audit: type=1400 audit(266.650:19026): avc: denied { connect } for pid=3977 comm="syz.4.11800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 282.447579][ T3993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11806'. [ 282.663052][ T4261] netlink: 'syz.0.11817': attribute type 6 has an invalid length. [ 282.841047][ T4537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11837'. [ 282.881067][ T4543] loop1: detected capacity change from 0 to 256 [ 282.932669][ T4549] netlink: 'syz.0.11830': attribute type 3 has an invalid length. [ 282.941892][ T4543] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 283.061502][ T4580] xt_hashlimit: invalid interval [ 283.078929][ T4585] netlink: 'syz.1.11843': attribute type 21 has an invalid length. [ 283.114497][ T4585] netlink: 'syz.1.11843': attribute type 7 has an invalid length. [ 283.295511][ T4635] netlink: 'syz.4.11858': attribute type 21 has an invalid length. [ 283.317661][ T4635] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11858'. [ 283.637661][ T4692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11879'. [ 283.900435][ T4736] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11893'. [ 284.065135][ T4763] loop4: detected capacity change from 0 to 128 [ 284.103983][ T4770] __vm_enough_memory: pid: 4770, comm: syz.1.11902, bytes: 4503599627366400 not enough memory for the allocation [ 284.331182][ T28] audit: type=1326 audit(268.483:19027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.2.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 284.374952][ T28] audit: type=1326 audit(268.511:19028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.2.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 284.438970][ T28] audit: type=1326 audit(268.511:19029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.2.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 284.491434][ T4845] batadv0: entered promiscuous mode [ 284.520724][ T28] audit: type=1326 audit(268.511:19030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.2.11918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 284.599276][ T28] audit: type=1326 audit(268.623:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.1.11924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 284.599314][ T28] audit: type=1326 audit(268.623:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.1.11924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 284.599349][ T28] audit: type=1326 audit(268.623:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.1.11924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 284.599435][ T28] audit: type=1326 audit(268.623:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.1.11924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 284.599470][ T28] audit: type=1326 audit(268.623:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4832 comm="syz.1.11924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fbe8f1ec799 code=0x7ffc0000 [ 284.671084][ T4879] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 284.805125][ T4887] Cannot find del_set index 3 as target [ 284.945297][ T4918] sctp: [Deprecated]: syz.4.11949 (pid 4918) Use of int in max_burst socket option deprecated. [ 284.945297][ T4918] Use struct sctp_assoc_value instead [ 285.122465][ T4960] netlink: 'syz.1.11962': attribute type 21 has an invalid length. [ 285.157326][ T4960] netlink: 'syz.1.11962': attribute type 6 has an invalid length. [ 285.582565][ T5064] loop2: detected capacity change from 0 to 512 [ 285.637490][ T5064] EXT4-fs (loop2): 1 orphan inode deleted [ 285.643690][ T5064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.665121][ T6859] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1 [ 285.683324][ T5064] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.11994: iget: bad i_size value: -81346268269379574 [ 285.724018][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.791983][ T5104] IPVS: Error connecting to the multicast addr [ 285.905111][ T5130] netlink: 'syz.1.12015': attribute type 21 has an invalid length. [ 286.052772][ T5160] IPv6: sit2: Disabled Multicast RS [ 286.090701][ T5171] xt_bpf: check failed: parse error [ 286.197648][ T5196] loop4: detected capacity change from 0 to 164 [ 286.378646][ T5233] loop4: detected capacity change from 0 to 512 [ 286.407740][ T5233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.458867][ T5251] netlink: 'syz.0.12051': attribute type 6 has an invalid length. [ 286.485904][ T5256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.525781][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.843228][ T5339] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 286.891663][ T5348] __nla_validate_parse: 11 callbacks suppressed [ 286.891758][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12084'. [ 286.944316][ T5355] tc_dump_action: action bad kind [ 287.244959][ T5424] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12111'. [ 287.254550][ T5424] vlan0: entered promiscuous mode [ 287.364739][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12119'. [ 287.502428][ T5516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12130'. [ 287.546422][ T5518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12131'. [ 287.555718][ T5518] netlink: 196 bytes leftover after parsing attributes in process `syz.2.12131'. [ 287.565224][ T5518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12131'. [ 287.574886][ T5518] netlink: 196 bytes leftover after parsing attributes in process `syz.2.12131'. [ 287.602851][ T5529] netlink: 'syz.4.12134': attribute type 13 has an invalid length. [ 287.668233][ T5542] netlink: 'syz.2.12139': attribute type 21 has an invalid length. [ 287.711377][ T5542] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12139'. [ 287.735707][ T5550] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 287.742279][ T5550] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.765041][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 287.765058][ T28] audit: type=1326 audit(271.701:19045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.4.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 287.796466][ T5550] vhci_hcd vhci_hcd.0: Device attached [ 287.820281][ T5564] vhci_hcd vhci_hcd.0: port 0 already used [ 287.827547][ T5553] vhci_hcd: connection closed [ 287.827906][ T7343] vhci_hcd vhci_hcd.0: stop threads [ 287.840628][ T7343] vhci_hcd vhci_hcd.0: release socket [ 287.846193][ T7343] vhci_hcd vhci_hcd.0: disconnect device [ 287.850363][ T5567] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 287.852960][ T28] audit: type=1326 audit(271.729:19046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.4.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 287.858435][ T5567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 287.907369][ T28] audit: type=1326 audit(271.738:19047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.4.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 287.911914][ T5579] netlink: 'syz.3.12150': attribute type 16 has an invalid length. [ 287.946974][ T28] audit: type=1326 audit(271.738:19048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.4.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 287.966495][ T5567] vhci_hcd vhci_hcd.0: Device attached [ 287.978480][ T5579] netlink: 'syz.3.12150': attribute type 17 has an invalid length. [ 287.988251][ T5569] vhci_hcd: connection closed [ 287.997422][ T7343] vhci_hcd vhci_hcd.2: stop threads [ 288.007835][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.009834][ T7343] vhci_hcd vhci_hcd.2: release socket [ 288.028240][ T7343] vhci_hcd vhci_hcd.2: disconnect device [ 288.034059][ T28] audit: type=1326 audit(271.738:19049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5561 comm="syz.4.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 288.057998][ T5579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.313741][ T5635] netlink: 'syz.3.12168': attribute type 9 has an invalid length. [ 288.520162][ T28] audit: type=1326 audit(272.403:19050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.3.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 288.545871][ T28] audit: type=1326 audit(272.403:19051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.3.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 288.588012][ T28] audit: type=1326 audit(272.468:19052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.3.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 288.668561][ T28] audit: type=1326 audit(272.468:19053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.3.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 288.695952][ T5695] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12190'. [ 288.716227][ T28] audit: type=1326 audit(272.468:19054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5672 comm="syz.3.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 288.767132][ T5706] xt_TCPMSS: Only works on TCP SYN packets [ 288.911723][ T5738] loop3: detected capacity change from 0 to 512 [ 289.027741][ T5758] loop1: detected capacity change from 0 to 764 [ 289.034421][ T5766] loop4: detected capacity change from 0 to 256 [ 289.087601][ T5758] Symlink component flag not implemented [ 289.093694][ T5758] Symlink component flag not implemented [ 289.418944][ T5832] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 289.955931][ T5873] loop3: detected capacity change from 0 to 2048 [ 290.086011][ T5873] loop3: p1 < > p3 < > p4 < > [ 290.100417][ T5873] loop3: partition table partially beyond EOD, truncated [ 290.127668][ T5873] loop3: p1 start 3405774849 is beyond EOD, truncated [ 290.136589][ T5873] loop3: p3 start 2304 is beyond EOD, truncated [ 290.175819][ T3001] loop3: p1 < > p3 < > p4 < > [ 290.180665][ T3001] loop3: partition table partially beyond EOD, truncated [ 290.192251][ T3001] loop3: p1 start 3405774849 is beyond EOD, truncated [ 290.199519][ T3001] loop3: p3 start 2304 is beyond EOD, truncated [ 290.227941][ T5926] loop4: detected capacity change from 0 to 512 [ 290.253484][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 290.279095][ T5926] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.331377][ T5926] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 290.367666][ T5926] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.12263: bg 0: block 248: padding at end of block bitmap is not set [ 290.382922][ T5926] loop4: lost filesystem error report for type 5 error -117 [ 290.383199][ T5926] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.12263: Failed to acquire dquot type 1 [ 290.390783][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 290.390812][ C0] EXT4-fs (loop4): last error at time 274: ext4_validate_block_bitmap:441 [ 290.417678][ T5926] loop4: lost filesystem error report for type 5 error -117 [ 290.422310][ T5926] EXT4-fs (loop4): 1 truncate cleaned up [ 290.447922][ T5926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 290.543553][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 290.566545][ T6859] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1 [ 290.628246][ T6859] loop4: lost filesystem error report for type 5 error -117 [ 290.893826][ T6502] loop3: detected capacity change from 0 to 512 [ 290.946682][ T6515] netlink: 'syz.2.12296': attribute type 3 has an invalid length. [ 290.961055][ T6502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.999916][ T6524] netlink: 'syz.4.12300': attribute type 2 has an invalid length. [ 291.009914][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.462480][ T6615] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 291.561883][ T6636] sctp: [Deprecated]: syz.1.12336 (pid 6636) Use of int in max_burst socket option deprecated. [ 291.561883][ T6636] Use struct sctp_assoc_value instead [ 291.824388][ T6686] xt_bpf: check failed: parse error [ 291.834185][ T6690] openvswitch: netlink: Missing key (keys=40, expected=80) [ 292.289492][ T6775] netlink: 'syz.1.12390': attribute type 1 has an invalid length. [ 292.319690][ T6775] netlink: 'syz.1.12390': attribute type 1 has an invalid length. [ 292.349986][ T6775] netlink: 'syz.1.12390': attribute type 2 has an invalid length. [ 292.510514][ T6823] loop3: detected capacity change from 0 to 512 [ 292.548120][ T6823] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.12404: invalid indirect mapped block 256 (level 2) [ 292.561750][ T6830] loop4: detected capacity change from 0 to 128 [ 292.569280][ T6834] __nla_validate_parse: 12 callbacks suppressed [ 292.569297][ T6834] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12409'. [ 292.577012][ T6823] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 292.586213][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 292.597380][ T6823] EXT4-fs (loop3): 2 truncates cleaned up [ 292.601890][ C1] EXT4-fs (loop3): initial error at time 276: ext4_free_branches:1023: inode 11 [ 292.609378][ T6830] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 292.616972][ C1] EXT4-fs (loop3): last error at time 276: ext4_free_branches:1023: inode 11 [ 292.657055][ T6823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.672340][ T6823] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.12404: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 292.754387][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12416'. [ 292.775549][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.837689][ T6879] netlink: 'syz.2.12421': attribute type 16 has an invalid length. [ 292.896274][ T6879] netlink: 'syz.2.12421': attribute type 17 has an invalid length. [ 292.957720][ T6879] 0XD: left allmulticast mode [ 293.025856][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.047484][ T6879] team0: left allmulticast mode [ 293.052493][ T6879] team_slave_0: left allmulticast mode [ 293.062662][ T6879] team_slave_1: left allmulticast mode [ 293.070537][ T6879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.171603][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 293.171624][ T28] audit: type=1400 audit(276.752:19057): avc: denied { create } for pid=6935 comm="syz.0.12440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 293.214538][ T28] audit: type=1400 audit(276.790:19058): avc: denied { write } for pid=6935 comm="syz.0.12440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 293.279403][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12448'. [ 293.364859][ T6967] bond8: option fail_over_mac: invalid value (127) [ 293.378215][ T6967] bond8 (unregistering): Released all slaves [ 293.399199][ T7005] netlink: 'syz.1.12454': attribute type 16 has an invalid length. [ 293.415163][ T7005] netlink: 'syz.1.12454': attribute type 17 has an invalid length. [ 293.424680][ T7005] lo: left promiscuous mode [ 293.429251][ T7005] lo: left allmulticast mode [ 293.454622][ T7005] 8021q: adding VLAN 0 to HW filter on device .` [ 293.499745][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12468'. [ 293.538324][ T7005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.571046][ T7061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12462'. [ 293.581562][ T7061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12462'. [ 293.596688][ T7062] netlink: 'syz.4.12470': attribute type 21 has an invalid length. [ 293.728643][ T7100] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 293.735218][ T7100] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.754971][ T7100] vhci_hcd vhci_hcd.0: Device attached [ 293.771344][ T7100] vhci_hcd vhci_hcd.0: port 0 already used [ 293.781653][ T7101] vhci_hcd: connection closed [ 293.781762][ T6844] vhci_hcd vhci_hcd.3: stop threads [ 293.808167][ T6844] vhci_hcd vhci_hcd.3: release socket [ 293.813699][ T6844] vhci_hcd vhci_hcd.3: disconnect device [ 293.871729][ T7123] loop1: detected capacity change from 0 to 512 [ 293.929404][ T7123] EXT4-fs (loop1): 1 orphan inode deleted [ 293.930482][ T7128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.944502][ T7352] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 293.945713][ T7128] team0: left promiscuous mode [ 293.957864][ T7123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.959778][ T7128] team_slave_0: left promiscuous mode [ 293.986911][ T7352] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:19: Failed to release dquot type 1 [ 293.994560][ T7128] team_slave_1: left promiscuous mode [ 294.004403][ T7128] team0: left allmulticast mode [ 294.011649][ T7123] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.12478: iget: bad i_size value: -81346268269379574 [ 294.019060][ T7128] team_slave_0: left allmulticast mode [ 294.030090][ T7128] team_slave_1: left allmulticast mode [ 294.041245][ T7128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.061082][T26245] speed is unknown, defaulting to 1000 [ 294.067236][T26245] syz0: Port: 1 Link ACTIVE [ 294.072295][T26245] speed is unknown, defaulting to 1000 [ 294.080132][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.333223][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12501'. [ 294.394681][ T7190] ip6tnl4: entered allmulticast mode [ 294.442818][ T7211] vhci_hcd vhci_hcd.0: invalid port number 255 [ 294.460543][ T7211] vhci_hcd vhci_hcd.0: invalid port number 255 [ 294.480438][ T7204] team0: left promiscuous mode [ 294.489222][ T7204] team0: left allmulticast mode [ 294.500334][ T7204] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.524804][ T7204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.545707][T26215] lo speed is unknown, defaulting to 1000 [ 294.553371][ T7213] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 294.585491][T26215] syU: Port: 1 Link ACTIVE [ 294.594753][T26245] lo speed is unknown, defaulting to 1000 [ 294.711093][ T7256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12520'. [ 294.721275][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12520'. [ 294.745822][ T7256] netlink: 31 bytes leftover after parsing attributes in process `syz.2.12520'. [ 294.858472][ T7273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.102415][ T28] audit: type=1400 audit(278.567:19059): avc: denied { ioctl } for pid=7325 comm="syz.1.12542" path="socket:[90800]" dev="sockfs" ino=90800 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 295.271478][ T28] audit: type=1326 audit(278.726:19060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz.3.12553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 295.366122][ T28] audit: type=1326 audit(278.726:19061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz.3.12553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 295.397349][ T28] audit: type=1326 audit(278.726:19062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz.3.12553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 295.421576][ T28] audit: type=1326 audit(278.726:19063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz.3.12553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 295.454665][ T28] audit: type=1326 audit(278.726:19064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz.3.12553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72267cc799 code=0x7ffc0000 [ 295.478618][ T28] audit: type=1400 audit(278.745:19065): avc: denied { remount } for pid=7369 comm="syz.4.12554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 295.703757][ T7473] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 295.710503][ T7473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 295.718442][ T7473] vhci_hcd vhci_hcd.0: Device attached [ 295.729395][ T7473] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 295.736046][ T7473] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 295.739728][ T7477] SET target dimension over the limit! [ 295.763740][ T7473] vhci_hcd vhci_hcd.0: Device attached [ 295.789792][ T7474] vhci_hcd: connection closed [ 295.791496][ T7478] vhci_hcd: connection closed [ 295.796374][ T6844] vhci_hcd vhci_hcd.0: stop threads [ 295.817394][ T6844] vhci_hcd vhci_hcd.0: release socket [ 295.822944][ T6844] vhci_hcd vhci_hcd.0: disconnect device [ 295.836719][ T6844] vhci_hcd vhci_hcd.0: stop threads [ 295.842020][ T6844] vhci_hcd vhci_hcd.0: release socket [ 295.857651][ T6844] vhci_hcd vhci_hcd.0: disconnect device [ 295.922461][ T7508] PM: Enabling pm_trace changes system date and time during resume. [ 295.922461][ T7508] PM: Correct system time has to be restored manually after resume. [ 296.352278][ T7601] xt_TCPMSS: Only works on TCP SYN packets [ 296.447986][ T7615] validate_nla: 10 callbacks suppressed [ 296.448007][ T7615] netlink: 'syz.4.12620': attribute type 1 has an invalid length. [ 296.559311][ T7636] netlink: 'syz.4.12626': attribute type 1 has an invalid length. [ 296.683904][ T7662] random: crng reseeded on system resumption [ 297.181436][ T7826] netlink: 'syz.0.12662': attribute type 2 has an invalid length. [ 297.225978][ T7826] netlink: 'syz.0.12662': attribute type 11 has an invalid length. [ 297.497658][ T8268] x_tables: unsorted entry at hook 1 [ 297.721716][ T8316] bond8: option ad_select: invalid value (4) [ 297.734024][ T8316] bond8 (unregistering): Released all slaves [ 298.103625][ T8468] netlink: 'syz.0.12717': attribute type 2 has an invalid length. [ 298.139154][ T8464] loop2: detected capacity change from 0 to 2048 [ 298.220586][ T3302] loop2: p1 < > p3 < > p4 < > [ 298.229809][ T3302] loop2: partition table partially beyond EOD, truncated [ 298.252614][ T3302] loop2: p1 start 3405774849 is beyond EOD, truncated [ 298.259440][ T3302] loop2: p3 start 2304 is beyond EOD, truncated [ 298.276776][ T8464] loop2: p1 < > p3 < > p4 < > [ 298.305717][ T8464] loop2: partition table partially beyond EOD, truncated [ 298.323042][ T8464] loop2: p1 start 3405774849 is beyond EOD, truncated [ 298.347587][ T8464] loop2: p3 start 2304 is beyond EOD, truncated [ 298.442522][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 298.572894][ T8561] __nla_validate_parse: 11 callbacks suppressed [ 298.590558][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12747'. [ 298.770825][ T8603] loop0: detected capacity change from 0 to 1024 [ 298.795884][ T8603] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.815340][ T8609] loop2: detected capacity change from 0 to 1024 [ 298.835216][ T8603] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 298.846010][ T8620] loop4: detected capacity change from 0 to 512 [ 298.855784][ T8603] EXT4-fs (loop0): orphan cleanup on readonly fs [ 298.862770][ T8603] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.12759: Freeing blocks not in datazone - block = 0, count = 4096 [ 298.878085][ T8603] loop0: lost filesystem error report for type 5 error -117 [ 298.878311][ T8603] EXT4-fs (loop0): 1 orphan inode deleted [ 298.885667][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 298.885684][ C0] EXT4-fs (loop0): initial error at time 282: ext4_free_blocks:6724 [ 298.885703][ C0] EXT4-fs (loop0): last error at time 282: ext4_free_blocks:6724 [ 298.917875][ T8603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.932641][ T8603] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.12759: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 298.952011][ T8620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.974423][ T8609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.017718][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.042429][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.054087][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.104167][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12772'. [ 299.182187][ T8669] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.12775'. [ 299.216619][ T8669] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.12775'. [ 299.258756][ T8683] netlink: 'syz.1.12779': attribute type 12 has an invalid length. [ 299.447458][ T8717] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12792'. [ 299.602609][ T8741] bond6: option fail_over_mac: invalid value (127) [ 299.611153][ T8741] bond6 (unregistering): Released all slaves [ 299.675993][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12803'. [ 299.816000][ T8829] speed is unknown, defaulting to 1000 [ 299.921336][ T8829] lo speed is unknown, defaulting to 1000 [ 300.079579][ T8893] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12828'. [ 300.340472][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12845'. [ 300.513982][ T8992] loop1: detected capacity change from 0 to 512 [ 300.580073][ T8992] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12854: bg 0: block 255: padding at end of block bitmap is not set [ 300.641419][ T8992] loop1: lost filesystem error report for type 5 error -117 [ 300.646946][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 300.660757][ C1] EXT4-fs (loop1): initial error at time 283: ext4_validate_block_bitmap:441 [ 300.669609][ C1] EXT4-fs (loop1): last error at time 283: ext4_validate_block_bitmap:441 [ 300.679096][ T8992] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 300.695548][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12862'. [ 300.706833][ T8992] loop1: lost filesystem error report for type 5 error -117 [ 300.727515][ T8992] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.12854: invalid indirect mapped block 65536 (level 0) [ 300.784299][ T9032] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12867'. [ 300.799506][ T8992] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 300.799755][ T8992] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.12854: invalid indirect mapped block 32768 (level 2) [ 300.839537][ T8992] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 300.842434][ T8992] EXT4-fs (loop1): 1 truncate cleaned up [ 300.885851][ T8992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.946795][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 300.946811][ T28] audit: type=1400 audit(284.030:19083): avc: denied { read } for pid=8989 comm="syz.1.12854" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 300.976255][ T28] audit: type=1400 audit(284.030:19084): avc: denied { open } for pid=8989 comm="syz.1.12854" path="/2644/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.066519][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.292582][ T9105] vhci_hcd vhci_hcd.0: invalid port number 255 [ 301.311415][ T9105] vhci_hcd vhci_hcd.0: invalid port number 255 [ 301.533657][ T28] audit: type=1400 audit(284.572:19085): avc: denied { bind } for pid=9138 comm="syz.0.12898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.089884][ T28] audit: type=1400 audit(285.096:19086): avc: denied { connect } for pid=9241 comm="syz.4.12931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 302.400334][ T9309] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 302.419725][ T28] audit: type=1400 audit(285.395:19087): avc: denied { write } for pid=9310 comm="syz.1.12956" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.533893][ T28] audit: type=1400 audit(285.517:19088): avc: denied { execmod } for pid=9330 comm="syz.3.12962" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=93349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 302.606708][ T28] audit: type=1400 audit(285.582:19089): avc: denied { getopt } for pid=9343 comm="syz.3.12966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 303.060803][ T28] audit: type=1326 audit(286.003:19090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.2.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 303.136700][ T28] audit: type=1326 audit(286.022:19091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.2.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 303.203739][ T28] audit: type=1326 audit(286.031:19092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.2.12997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f5e02fdc799 code=0x7ffc0000 [ 303.302969][ T9457] SET target dimension over the limit! [ 303.480490][ T9488] loop3: detected capacity change from 0 to 1024 [ 303.493068][ T9480] loop1: detected capacity change from 0 to 512 [ 303.511399][ T9480] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.537261][ T9488] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.573603][ T9480] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 303.593989][ T9508] xt_cgroup: invalid path, errno=-2 [ 303.607662][ T9488] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 303.624511][ T9480] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13010: bg 0: block 248: padding at end of block bitmap is not set [ 303.637913][ T9488] EXT4-fs (loop3): orphan cleanup on readonly fs [ 303.648785][ T9480] loop1: lost filesystem error report for type 5 error -117 [ 303.648988][ T9480] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.13010: Failed to acquire dquot type 1 [ 303.656447][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 303.656466][ C0] EXT4-fs (loop1): last error at time 286: ext4_validate_block_bitmap:441 [ 303.677564][ T9488] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.13023: Freeing blocks not in datazone - block = 0, count = 4096 [ 303.697299][ T9480] loop1: lost filesystem error report for type 5 error -117 [ 303.700660][ T9480] EXT4-fs (loop1): 1 truncate cleaned up [ 303.744189][ T9480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 303.758911][ T9488] loop3: lost filesystem error report for type 5 error -117 [ 303.767896][ T9488] EXT4-fs (loop3): 1 orphan inode deleted [ 303.775453][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 303.775494][ C1] EXT4-fs (loop3): initial error at time 286: ext4_free_blocks:6724 [ 303.775523][ C1] EXT4-fs (loop3): last error at time 286: ext4_free_blocks:6724 [ 303.839270][ T9488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.855552][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 303.868813][ T6844] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 1 [ 303.893520][ T6844] loop1: lost filesystem error report for type 5 error -117 [ 303.907883][ T9488] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.13023: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 303.972137][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.096353][ T9573] __nla_validate_parse: 6 callbacks suppressed [ 304.096371][ T9573] netlink: 144 bytes leftover after parsing attributes in process `syz.3.13033'. [ 304.321331][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13044'. [ 304.380273][T10098] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 304.442967][T10110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13052'. [ 304.501881][T10125] kernel profiling enabled (shift: 25) [ 304.547252][T10131] loop1: detected capacity change from 0 to 764 [ 304.558916][T10136] netlink: 'syz.2.13060': attribute type 1 has an invalid length. [ 304.603710][T10131] rock: directory entry would overflow storage [ 304.619665][T10131] rock: sig=0x4654, size=5, remaining=4 [ 304.747745][T10175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13073'. [ 304.783038][T10181] random: crng reseeded on system resumption [ 304.886005][T10202] x_tables: unsorted entry at hook 1 [ 304.976346][T10220] netlink: 'syz.3.13087': attribute type 10 has an invalid length. [ 304.984722][T10220] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13087'. [ 305.007131][T10220] bond0: entered promiscuous mode [ 305.012880][T10220] bridge0: port 1(bond0) entered blocking state [ 305.026522][T10220] bridge0: port 1(bond0) entered disabled state [ 305.034960][T10220] bond0: entered allmulticast mode [ 305.480630][T10287] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 305.487608][T10287] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 305.502050][T10287] vhci_hcd vhci_hcd.0: Device attached [ 305.692933][T26215] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 305.703916][T10295] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 305.710512][T10295] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.759643][T10295] vhci_hcd vhci_hcd.0: Device attached [ 305.792642][T10296] vhci_hcd: connection closed [ 305.792942][ T50] vhci_hcd vhci_hcd.3: stop threads [ 305.803221][T26215] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 305.813971][T10288] vhci_hcd: connection closed [ 305.828245][T10292] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 305.842482][ T50] vhci_hcd vhci_hcd.3: release socket [ 305.867634][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 305.880784][ T50] vhci_hcd vhci_hcd.3: stop threads [ 305.914793][ T50] vhci_hcd vhci_hcd.3: release socket [ 305.921946][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 306.493096][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 306.493116][ T28] audit: type=1400 audit(289.212:19118): avc: denied { mount } for pid=10895 comm="syz.4.13145" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 306.625669][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13151'. [ 306.945874][ T28] audit: type=1400 audit(289.642:19119): avc: denied { audit_read } for pid=11425 comm="syz.3.13162" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 307.033058][T11436] sctp: [Deprecated]: syz.4.13165 (pid 11436) Use of int in maxseg socket option. [ 307.033058][T11436] Use struct sctp_assoc_value instead [ 307.079708][T11435] bond5: option fail_over_mac: invalid value (127) [ 307.111819][T11435] bond5 (unregistering): Released all slaves [ 307.126753][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13170'. [ 307.489152][T12036] speed is unknown, defaulting to 1000 [ 307.602198][T12036] lo speed is unknown, defaulting to 1000 [ 307.672458][T12067] netlink: 830 bytes leftover after parsing attributes in process `syz.0.13191'. [ 307.698118][T12071] xt_cluster: node mask cannot exceed total number of nodes [ 309.466120][T12117] syz.3.13198 (12117): attempted to duplicate a private mapping with mremap. This is not supported. [ 309.477566][T12115] netlink: 'syz.1.13200': attribute type 1 has an invalid length. [ 309.502245][T12115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.696084][T12597] netlink: 'syz.3.13208': attribute type 5 has an invalid length. [ 309.812532][T12640] netlink: 'syz.0.13214': attribute type 10 has an invalid length. [ 309.839265][T12640] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13214'. [ 309.851816][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13216'. [ 309.861981][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13216'. [ 309.871798][T12640] bond0: entered promiscuous mode [ 309.880342][T12640] bond_slave_0: entered promiscuous mode [ 309.886457][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13216'. [ 309.896081][T12640] bond_slave_1: entered promiscuous mode [ 309.912447][T12640] dummy0: entered promiscuous mode [ 309.975481][T12664] netlink: 'syz.1.13224': attribute type 27 has an invalid length. [ 309.993081][T12664] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13224'. [ 310.066665][ T28] audit: type=1326 audit(292.560:19120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.0.13227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4ad5c799 code=0x7ffc0000 [ 310.145198][T12694] program syz.0.13233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.164277][ T28] audit: type=1326 audit(292.598:19121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.0.13227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f7b4ad5c799 code=0x7ffc0000 [ 310.198970][ T28] audit: type=1326 audit(292.598:19122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.0.13227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4ad5c799 code=0x7ffc0000 [ 310.222873][ T28] audit: type=1326 audit(292.598:19123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.0.13227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4ad5c799 code=0x7ffc0000 [ 310.251659][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13235'. [ 310.366298][T12722] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 310.530939][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13253'. [ 310.642846][T12780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13260'. [ 310.737944][T12795] netlink: 'syz.0.13265': attribute type 2 has an invalid length. [ 310.763961][T12795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13265'. [ 310.904645][T12820] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.223209][T26215] usb 7-1: enqueue for inactive port 0 [ 311.228877][T26215] usb 7-1: enqueue for inactive port 0 [ 311.351863][T26215] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 311.356642][T12905] Unsupported ieee802154 address type: 0 [ 311.587384][ T28] audit: type=1326 audit(293.982:19124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.0.13298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b4ad5c799 code=0x0 [ 312.396437][T13473] xt_socket: unknown flags 0x4c [ 312.511725][T13486] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 312.541326][T13486] vhci_hcd vhci_hcd.4: invalid port number 255 [ 312.558192][T13486] vhci_hcd vhci_hcd.4: invalid port number 255 [ 312.609817][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13328'. [ 313.106621][ T28] audit: type=1400 audit(295.404:19125): avc: denied { load_policy } for pid=13581 comm="syz.4.13354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 313.106629][T13582] SELinux: policydb string S does not match my string SE Linux [ 313.106657][T13582] SELinux: failed to load policy [ 313.528592][T13629] loop1: detected capacity change from 0 to 512 [ 313.552658][T13629] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 313.571810][T13629] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 313.593263][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 313.599838][ C0] EXT4-fs (loop1): initial error at time 295: ext4_mb_generate_buddy:1315 [ 313.608875][ C0] EXT4-fs (loop1): last error at time 295: ext4_mb_generate_buddy:1315 [ 313.618373][T13629] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.13369: attempt to clear invalid blocks 2 len 1 [ 313.696327][T13629] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 313.696543][T13629] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.13369: invalid indirect mapped block 1819239214 (level 0) [ 313.749577][T13629] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 313.749861][T13629] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.13369: invalid indirect mapped block 1819239214 (level 1) [ 313.786088][T13629] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 313.786751][T13629] EXT4-fs (loop1): 1 truncate cleaned up [ 313.853808][T13629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.958571][T13629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.073310][ T28] audit: type=1400 audit(296.302:19126): avc: denied { getopt } for pid=13684 comm="syz.1.13385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.696905][T13793] loop3: detected capacity change from 0 to 512 [ 314.707396][T13793] EXT4-fs: Ignoring removed nobh option [ 314.723700][T13793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 314.752521][T13793] EXT4-fs (loop3): 1 truncate cleaned up [ 314.780639][T13793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.845524][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.875428][T13784] loop2: detected capacity change from 0 to 8192 [ 315.276094][T14339] __nla_validate_parse: 7 callbacks suppressed [ 315.276114][T14339] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13439'. [ 315.623655][ T28] audit: type=1400 audit(297.752:19127): avc: denied { append } for pid=14397 comm="syz.0.13458" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.696309][T14405] netlink: 'syz.1.13460': attribute type 10 has an invalid length. [ 315.698733][T14406] netlink: 'syz.2.13461': attribute type 10 has an invalid length. [ 315.728703][T14406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13461'. [ 315.832964][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13463'. [ 315.861373][T14414] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 315.963810][T14430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.174871][T14452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13474'. [ 316.415766][ T28] audit: type=1400 audit(298.491:19128): avc: denied { ioctl } for pid=14488 comm="syz.2.13488" path="socket:[97205]" dev="sockfs" ino=97205 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 316.462609][T14495] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 316.716419][T14548] netlink: 'syz.3.13505': attribute type 2 has an invalid length. [ 317.176310][ T28] audit: type=1400 audit(299.211:19129): avc: denied { ioctl } for pid=14604 comm="syz.4.13524" path="socket:[97355]" dev="sockfs" ino=97355 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 317.380705][T14638] netlink: 'syz.2.13535': attribute type 29 has an invalid length. [ 317.464399][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13538'. [ 317.618313][T14665] loop4: detected capacity change from 0 to 512 [ 317.683783][T14665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.799246][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.881932][ T28] audit: type=1326 audit(299.875:19130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14701 comm="syz.0.13556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b4ad5c799 code=0x0 [ 318.359183][T14783] netlink: 'syz.4.13581': attribute type 1 has an invalid length. [ 318.660470][ T28] audit: type=1400 audit(300.595:19131): avc: denied { wake_alarm } for pid=14816 comm="syz.1.13592" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 318.962204][T14858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13606'. [ 319.028980][T14872] syz.4.13610: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 319.037682][ T28] audit: type=1400 audit(300.942:19132): avc: denied { setopt } for pid=14870 comm="syz.4.13610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.065291][T14872] CPU: 1 UID: 0 PID: 14872 Comm: syz.4.13610 Tainted: G W syzkaller #0 PREEMPT(full) [ 319.065338][T14872] Tainted: [W]=WARN [ 319.065349][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.065424][T14872] Call Trace: [ 319.065491][T14872] [ 319.065502][T14872] __dump_stack+0x1d/0x30 [ 319.065575][T14872] dump_stack_lvl+0x95/0xd0 [ 319.065608][T14872] dump_stack+0x15/0x1b [ 319.065645][T14872] warn_alloc+0x145/0x1c0 [ 319.065674][T14872] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 319.065707][T14872] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 319.065753][T14872] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 319.065812][T14872] ? slow_avc_audit+0x14c/0x190 [ 319.065853][T14872] ? should_fail_ex+0x30/0x280 [ 319.065956][T14872] ? xskq_create+0x36/0xe0 [ 319.065996][T14872] vmalloc_user_noprof+0x7d/0xb0 [ 319.066024][T14872] ? xskq_create+0x80/0xe0 [ 319.066057][T14872] xskq_create+0x80/0xe0 [ 319.066200][T14872] xsk_init_queue+0x70/0xb0 [ 319.066225][T14872] xsk_setsockopt+0x3f5/0x640 [ 319.066282][T14872] ? __pfx_xsk_setsockopt+0x10/0x10 [ 319.066309][T14872] __sys_setsockopt+0x184/0x200 [ 319.066427][T14872] __x64_sys_setsockopt+0x64/0x80 [ 319.066466][T14872] x64_sys_call+0x2327/0x3020 [ 319.066506][T14872] do_syscall_64+0x12c/0x370 [ 319.066550][T14872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.066577][T14872] RIP: 0033:0x7f939d15c799 [ 319.066598][T14872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.066619][T14872] RSP: 002b:00007f939bbaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.066709][T14872] RAX: ffffffffffffffda RBX: 00007f939d3d5fa0 RCX: 00007f939d15c799 [ 319.066724][T14872] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 319.066736][T14872] RBP: 00007f939d1f2c99 R08: 0000000000000004 R09: 0000000000000000 [ 319.066749][T14872] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.066766][T14872] R13: 00007f939d3d6038 R14: 00007f939d3d5fa0 R15: 00007ffec3c428e8 [ 319.066789][T14872] [ 319.279801][T14872] Mem-Info: [ 319.283063][T14872] active_anon:9284 inactive_anon:3 isolated_anon:0 [ 319.283063][T14872] active_file:9291 inactive_file:18326 isolated_file:0 [ 319.283063][T14872] unevictable:0 dirty:225 writeback:0 [ 319.283063][T14872] slab_reclaimable:3740 slab_unreclaimable:24088 [ 319.283063][T14872] mapped:29184 shmem:177 pagetables:3111 [ 319.283063][T14872] sec_pagetables:0 bounce:0 [ 319.283063][T14872] kernel_misc_reclaimable:0 [ 319.283063][T14872] free:1860129 free_pcp:12979 free_cma:0 [ 319.340118][T14872] Node 0 active_anon:37020kB inactive_anon:12kB active_file:37164kB inactive_file:73304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116852kB dirty:900kB writeback:0kB shmem:708kB kernel_stack:4320kB pagetables:12444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 319.367741][T14872] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.398047][T14872] lowmem_reserve[]: 0 2879 7857 7857 [ 319.403871][T14872] Node 0 DMA32 free:2944540kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948168kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 319.440557][T14872] lowmem_reserve[]: 0 0 4978 4978 [ 319.445839][T14872] Node 0 Normal free:4480616kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37020kB inactive_anon:12kB active_file:37164kB inactive_file:73304kB unevictable:0kB writepending:900kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:48924kB local_pcp:27108kB free_cma:0kB [ 319.518204][T14872] lowmem_reserve[]: 0 0 0 0 [ 319.526341][T14872] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 319.553002][T14888] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 319.565000][T14888] bond5 (unregistering): Released all slaves [ 319.604189][T14971] netlink: 240 bytes leftover after parsing attributes in process `syz.3.13621'. [ 319.609168][T14872] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944540kB [ 319.645569][T14872] Node 0 Normal: 1770*4kB (UME) 1387*8kB (UME) 527*16kB (UME) 490*32kB (UME) 278*64kB (UME) 272*128kB (UM) 218*256kB (UM) 220*512kB (UME) 161*1024kB (UM) 106*2048kB (UM) 936*4096kB (UM) = 4479152kB [ 319.719353][T14872] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 319.751169][T14872] 29377 total pagecache pages [ 319.767615][T14872] 5 pages in swap cache [ 319.771807][T14872] Free swap = 124880kB [ 319.804541][T14872] Total swap = 124996kB [ 319.826405][T14872] 2097051 pages RAM [ 319.830285][T14872] 0 pages HighMem/MovableOnly [ 319.868692][T14872] 81609 pages reserved [ 320.100078][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13629'. [ 320.127950][T14997] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 320.606537][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13642'. [ 320.681905][T15036] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 320.836563][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13665'. [ 320.865613][T15090] netlink: 'syz.0.13657': attribute type 10 has an invalid length. [ 320.874168][T15090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13657'. [ 320.900896][T15084] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 320.917781][ T28] audit: type=1326 audit(302.700:19133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15093 comm="syz.4.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 320.980486][ T28] audit: type=1326 audit(302.709:19134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15093 comm="syz.4.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 321.047594][ T28] audit: type=1326 audit(302.709:19135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15093 comm="syz.4.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 321.073790][T15105] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.13662'. [ 321.098128][T15105] netlink: zone id is out of range [ 321.103390][ T28] audit: type=1326 audit(302.709:19136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15093 comm="syz.4.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 321.138250][T15105] netlink: zone id is out of range [ 321.143740][T15105] netlink: del zone limit has 8 unknown bytes [ 321.198175][ T28] audit: type=1326 audit(302.728:19137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15093 comm="syz.4.13660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939d15c799 code=0x7ffc0000 [ 321.258635][ T28] audit: type=1400 audit(302.831:19138): avc: denied { getopt } for pid=15104 comm="syz.0.13663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.296721][ T28] audit: type=1400 audit(303.056:19139): avc: denied { read } for pid=15118 comm="syz.0.13668" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 321.355969][ T28] audit: type=1400 audit(303.056:19140): avc: denied { open } for pid=15118 comm="syz.0.13668" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 321.482644][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13674'. [ 321.528445][T15144] loop2: detected capacity change from 0 to 128 [ 321.542841][T15139] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 321.559269][T15144] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.723799][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.116654][T15227] netlink: 'syz.4.13701': attribute type 2 has an invalid length. [ 322.148776][T15227] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13701'. [ 322.226415][T15241] loop2: detected capacity change from 0 to 512 [ 322.238934][T15241] EXT4-fs: Ignoring removed mblk_io_submit option [ 322.263781][T15241] EXT4-fs (loop2): 1 truncate cleaned up [ 322.271504][T15241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.285724][T15246] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 322.478734][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.496866][T15272] ip6tnl9: entered allmulticast mode [ 322.553839][T15284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13718'. [ 322.927034][T15327] SELinux: policydb string length 366 does not match expected length 8 [ 322.942693][T15327] SELinux: failed to load policy [ 322.967291][T15332] bond0: left promiscuous mode [ 322.978065][T15332] bond_slave_0: left promiscuous mode [ 323.007751][T15332] bond_slave_1: left promiscuous mode [ 323.014336][T15332] dummy0: left promiscuous mode [ 323.073893][T15349] netlink: 'syz.4.13741': attribute type 10 has an invalid length. [ 323.082285][T15347] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13738'. [ 323.098014][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13739'. [ 323.120652][T15349] team0: Port device wg1 added [ 323.175458][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13744'. [ 323.191117][ T3307] ================================================================== [ 323.199266][ T3307] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 323.206270][ T3307] [ 323.208619][ T3307] write to 0xffff8881002429a4 of 4 bytes by task 3302 on cpu 1: [ 323.216284][ T3307] shmem_mknod+0x143/0x170 [ 323.220767][ T3307] shmem_create+0x34/0x50 [ 323.225182][ T3307] path_openat+0xd75/0x2050 [ 323.229724][ T3307] do_file_open+0x16c/0x290 [ 323.234279][ T3307] do_sys_openat2+0x94/0x130 [ 323.238927][ T3307] __x64_sys_openat+0xf2/0x120 [ 323.243733][ T3307] x64_sys_call+0x1e39/0x3020 [ 323.248451][ T3307] do_syscall_64+0x12c/0x370 [ 323.253091][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.259023][ T3307] [ 323.261367][ T3307] read to 0xffff8881002429a4 of 4 bytes by task 3307 on cpu 0: [ 323.268943][ T3307] fill_mg_cmtime+0x5b/0x270 [ 323.273570][ T3307] generic_fillattr+0x24a/0x340 [ 323.278457][ T3307] shmem_getattr+0x181/0x200 [ 323.283090][ T3307] vfs_getattr_nosec+0x146/0x1e0 [ 323.288060][ T3307] vfs_getattr+0x48/0x60 [ 323.292335][ T3307] vfs_statx_path+0x28/0x140 [ 323.296960][ T3307] vfs_statx+0xc4/0x170 [ 323.301243][ T3307] vfs_fstatat+0x118/0x170 [ 323.305865][ T3307] __se_sys_newfstatat+0x55/0x3e0 [ 323.311014][ T3307] __x64_sys_newfstatat+0x55/0x70 [ 323.316074][ T3307] x64_sys_call+0x2c64/0x3020 [ 323.320787][ T3307] do_syscall_64+0x12c/0x370 [ 323.325400][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.331321][ T3307] [ 323.333658][ T3307] value changed: 0x3275540a -> 0x327b0d06 [ 323.339392][ T3307] [ 323.341732][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 323.348018][ T3307] CPU: 0 UID: 0 PID: 3307 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 323.358457][ T3307] Tainted: [W]=WARN [ 323.362275][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.372347][ T3307] ==================================================================