last executing test programs: 3m44.520723998s ago: executing program 1 (id=586): socket$rxrpc(0x21, 0x2, 0x0) 3m44.519775388s ago: executing program 1 (id=591): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools', 0x1, 0x0) 3m44.498391108s ago: executing program 1 (id=594): getrusage(0x0, &(0x7f0000000000)) 3m44.497787788s ago: executing program 1 (id=598): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 3m43.764481488s ago: executing program 1 (id=603): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci', 0x2, 0x0) 3m43.719569988s ago: executing program 1 (id=607): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3m42.995085388s ago: executing program 4 (id=619): capset(&(0x7f0000000000), &(0x7f0000000000)) 3m42.995036088s ago: executing program 4 (id=620): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty', 0x800, 0x0) 3m42.994539308s ago: executing program 4 (id=621): get_thread_area(&(0x7f0000000000)) 3m42.991479008s ago: executing program 4 (id=623): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sg(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$sg(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$sg(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$sg(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$sg(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$sg(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$sg(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$sg(&(0x7f0000000500), 0x4, 0x800) 3m42.80171138s ago: executing program 4 (id=624): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3m42.476885675s ago: executing program 4 (id=628): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 806.561831ms ago: executing program 2 (id=13117): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0x0, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) 759.123542ms ago: executing program 5 (id=13120): r0 = socket(0x15, 0x5, 0x0) connect$can_j1939(r0, &(0x7f0000000040)={0xa, 0x0, 0xffffffffffffffff, {0x1}}, 0x18) 708.266612ms ago: executing program 2 (id=13122): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a3a73302075c7224b25caf3f405c26e636f6e66696e65642030"], 0x3f) 708.198352ms ago: executing program 3 (id=13123): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x40002120, 0x0) 618.773293ms ago: executing program 5 (id=13125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x1ff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 618.476633ms ago: executing program 0 (id=13126): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x1, 0x2, 0x6, 0x80000000}) 595.205024ms ago: executing program 2 (id=13127): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 564.049734ms ago: executing program 3 (id=13128): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r0) 549.627374ms ago: executing program 6 (id=13129): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], 0x0, 0x0, 0x0) 525.144044ms ago: executing program 0 (id=13130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x10000000, r0}, 0x38) 463.478615ms ago: executing program 5 (id=13131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001800010028bd7000fcdbdf251d01020005000d00a0"], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x4008000) 451.489085ms ago: executing program 3 (id=13132): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000005c0)="900000001c001f4d154a817793278bff0a80a5ba180000008004740014000100ac1414bb054296211051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efe00760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560e41263da4de1df3e0b390000000000000003fd789c8d856aed1b820ad64", 0x90, 0x0, 0x0, 0x0) 410.733826ms ago: executing program 6 (id=13133): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x10, 0x29, 0x4}], 0x10}, 0x0) 344.147096ms ago: executing program 0 (id=13134): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 318.496807ms ago: executing program 2 (id=13135): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0\x00'}) 311.132327ms ago: executing program 5 (id=13136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) 295.587477ms ago: executing program 3 (id=13137): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@sndrcv={0x30, 0x84, 0x1, {0x8, 0x401, 0x0, 0x8f, 0x5, 0x6, 0x8, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}], 0x48, 0x24040091}], 0x1, 0x40000) 288.453177ms ago: executing program 6 (id=13138): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/153, 0x99}], 0x1, 0x4, 0x40000000) 244.399188ms ago: executing program 0 (id=13139): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x40002120, 0x0) 191.095349ms ago: executing program 5 (id=13140): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000000100"], 0x40}, 0x20000000) 190.961318ms ago: executing program 3 (id=13141): r0 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) 190.666609ms ago: executing program 6 (id=13142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x703, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x8000) 130.987749ms ago: executing program 2 (id=13143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xb4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x58, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8001}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xa7d7, 0x7, 0xffffffffffffffff, 0x2, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb32}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xb4}}, 0x0) 123.557539ms ago: executing program 0 (id=13144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r0, 0x402, 0xffffffffffffffff) 123.175199ms ago: executing program 5 (id=13145): r0 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000003c0)='\x00', &(0x7f0000000580)="ded880aefc", 0x5) 86.820879ms ago: executing program 6 (id=13146): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) 69.538919ms ago: executing program 3 (id=13147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) 43.091ms ago: executing program 2 (id=13148): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000280)=""/226, &(0x7f00000000c0)=0xe2) 653.72µs ago: executing program 0 (id=13149): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000010000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) 0s ago: executing program 6 (id=13150): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.2.9484'. [ 193.959334][T22607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9484'. [ 194.266861][T22663] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 194.543573][T22699] lo: entered promiscuous mode [ 194.548464][T22699] lo: entered allmulticast mode [ 194.553464][T22699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.619640][T22712] netlink: 124 bytes leftover after parsing attributes in process `syz.5.9534'. [ 194.628779][T22712] netlink: 124 bytes leftover after parsing attributes in process `syz.5.9534'. [ 194.665037][T22717] xt_cgroup: path and classid specified [ 195.139773][T22777] x_tables: unsorted entry at hook 2 [ 195.523194][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 195.523234][ T29] audit: type=1400 audit(961.682:66895): avc: denied { write } for pid=22819 comm="syz.3.9588" name="nfsfs" dev="proc" ino=4026533364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 195.572248][ T29] audit: type=1400 audit(961.724:66896): avc: denied { add_name } for pid=22819 comm="syz.3.9588" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 195.594143][ T29] audit: type=1400 audit(961.724:66897): avc: denied { create } for pid=22819 comm="syz.3.9588" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 195.615869][ T29] audit: type=1400 audit(961.724:66898): avc: denied { associate } for pid=22819 comm="syz.3.9588" name="freezer.parent_freezing" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.670759][T22835] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 195.677298][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9592'. [ 195.697205][T22837] dns_resolver: Unsupported server list version (0) [ 195.780473][T22843] netlink: 'syz.0.9598': attribute type 7 has an invalid length. [ 195.835283][T22847] netlink: 'syz.2.9600': attribute type 6 has an invalid length. [ 195.919582][T22850] block device autoloading is deprecated and will be removed. [ 195.949666][T22850] syz.0.9602: attempt to access beyond end of device [ 195.949666][T22850] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 196.077874][T22867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9609'. [ 196.086926][T22867] netlink: 'syz.2.9609': attribute type 6 has an invalid length. [ 196.146398][T22881] netlink: 'syz.3.9618': attribute type 4 has an invalid length. [ 196.262047][T22900] netlink: 'syz.5.9624': attribute type 13 has an invalid length. [ 196.269967][T22900] netlink: 'syz.5.9624': attribute type 27 has an invalid length. [ 196.461883][T22924] ip6t_rpfilter: unknown options [ 196.470129][T22927] netlink: 'syz.5.9640': attribute type 3 has an invalid length. [ 196.501102][T22921] loop6: detected capacity change from 0 to 8192 [ 196.540248][T22921] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.890940][ T29] audit: type=1400 audit(963.099:66899): avc: denied { execute } for pid=22959 comm="syz.5.9656" dev="hugetlbfs" ino=65097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 197.128520][T22988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.152849][T22988] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 197.361694][T23021] xt_hashlimit: size too large, truncated to 1048576 [ 197.368535][T23021] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 197.490306][T23035] xt_TCPMSS: Only works on TCP SYN packets [ 197.493494][T23040] xt_hashlimit: max too large, truncated to 1048576 [ 197.518214][ T29] audit: type=1400 audit(963.771:66900): avc: denied { checkpoint_restore } for pid=23038 comm="syz.0.9691" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.545658][T23037] validate_nla: 1 callbacks suppressed [ 197.545675][T23037] netlink: 'syz.5.9693': attribute type 46 has an invalid length. [ 197.685937][T23062] loop3: detected capacity change from 0 to 1024 [ 197.703027][T23062] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.743647][T23062] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.785605][T23062] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 197.808529][T23062] EXT4-fs (loop3): orphan cleanup on readonly fs [ 197.825456][T23062] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 197.842576][T23082] process 'syz.2.9713' launched '/dev/fd/3' with NULL argv: empty string added [ 197.851857][ T29] audit: type=1400 audit(964.139:66901): avc: denied { execute_no_trans } for pid=23078 comm="syz.2.9713" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=65293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 197.872851][T23062] EXT4-fs (loop3): Remounting filesystem read-only [ 197.903361][T23062] Quota error (device loop3): write_blk: dquota write failed [ 197.910840][T23062] Quota error (device loop3): write_blk: dquota write failed [ 197.918278][T23062] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 197.928351][T23062] EXT4-fs (loop3): 1 orphan inode deleted [ 197.945083][T23062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 197.977794][T23062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.409630][T23159] netlink: 'syz.6.9751': attribute type 10 has an invalid length. [ 198.434710][T23159] nlmon0: left promiscuous mode [ 198.530183][T23180] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 198.630509][T23194] __nla_validate_parse: 5 callbacks suppressed [ 198.630531][T23194] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.9769'. [ 198.859127][T23230] netlink: 'syz.6.9786': attribute type 10 has an invalid length. [ 198.888382][T23230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.896679][T23230] batadv0: entered promiscuous mode [ 198.902787][T23230] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 198.912665][T23237] xt_ecn: cannot match TCP bits for non-tcp packets [ 199.326183][T23304] netlink: 'syz.5.9822': attribute type 3 has an invalid length. [ 199.334050][T23304] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9822'. [ 199.354516][T23298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9820'. [ 199.501895][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9836'. [ 199.510879][T23329] netlink: 'syz.2.9836': attribute type 5 has an invalid length. [ 199.518764][T23329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9836'. [ 199.567962][T23334] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9837'. [ 199.584152][T23329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 199.593042][T23329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 199.601770][T23329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 199.610170][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9840'. [ 199.610892][T23329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 199.651648][T23329] geneve3: entered promiscuous mode [ 199.657014][T23329] geneve3: entered allmulticast mode [ 199.680498][T23334] batadv_slave_1: entered promiscuous mode [ 199.698266][T23334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.709036][T23341] netlink: 'syz.0.9842': attribute type 1 has an invalid length. [ 199.716943][T23341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.930538][T23379] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 200.005024][T23387] bridge_slave_0: left allmulticast mode [ 200.010988][T23387] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.037318][T23387] bridge_slave_1: left allmulticast mode [ 200.043090][T23387] bridge_slave_1: left promiscuous mode [ 200.048829][T23387] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.083998][T23387] $H: (slave bond_slave_0): Releasing backup interface [ 200.104944][T23387] bond_slave_0: left promiscuous mode [ 200.110291][T23403] netlink: 'syz.6.9867': attribute type 6 has an invalid length. [ 200.119979][T23387] $H: (slave bond_slave_1): Releasing backup interface [ 200.129093][T23387] bond_slave_1: left promiscuous mode [ 200.140965][T23387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.148580][T23387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.157734][T23387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.165350][T23387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.187965][T23392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9864'. [ 200.197178][T23392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9864'. [ 200.209232][T23392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9864'. [ 200.220384][T23401] netlink: 'syz.2.9869': attribute type 29 has an invalid length. [ 200.329676][T23419] SELinux: syz.0.9877 (23419) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 200.428842][T23430] netlink: 'syz.5.9881': attribute type 5 has an invalid length. [ 200.471111][T23430] ip6erspan0: entered promiscuous mode [ 200.612803][T23450] SET target dimension over the limit! [ 200.821489][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 200.821509][ T29] audit: type=1400 audit(967.258:66911): avc: denied { sqpoll } for pid=23477 comm="syz.2.9907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 200.915921][ T29] audit: type=1400 audit(967.353:66912): avc: denied { getopt } for pid=23488 comm="syz.3.9912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 201.075362][T23509] loop5: detected capacity change from 0 to 512 [ 201.099495][T23514] loop3: detected capacity change from 0 to 128 [ 201.110071][T23516] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.154324][T23509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.215901][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.227829][T23525] netlink: 'syz.0.9927': attribute type 21 has an invalid length. [ 201.400923][ T29] audit: type=1400 audit(967.857:66913): avc: denied { write } for pid=23551 comm="syz.5.9940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 201.502671][T23562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.612270][T23575] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 201.622713][T23575] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 201.725155][ T29] audit: type=1400 audit(968.203:66914): avc: denied { setopt } for pid=23588 comm="syz.5.9957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 201.818739][T23605] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.904320][ T29] audit: type=1400 audit(968.382:66915): avc: denied { execute_no_trans } for pid=23615 comm="syz.3.9971" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.367883][T23688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.521414][T23708] lo: entered promiscuous mode [ 202.526372][T23708] lo: entered allmulticast mode [ 202.560141][T23708] tunl0: entered promiscuous mode [ 202.560730][ T29] audit: type=1326 audit(969.075:66916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23713 comm="syz.2.10019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x0 [ 202.565250][T23708] tunl0: entered allmulticast mode [ 202.650615][T23708] gre0: entered promiscuous mode [ 202.655621][T23708] gre0: entered allmulticast mode [ 202.665207][T23708] gretap0: entered promiscuous mode [ 202.670668][T23708] gretap0: entered allmulticast mode [ 202.678968][T23708] erspan0: entered promiscuous mode [ 202.684220][T23708] erspan0: entered allmulticast mode [ 202.691247][T23708] ip_vti0: entered promiscuous mode [ 202.696511][T23708] ip_vti0: entered allmulticast mode [ 202.710284][T23708] ip6_vti0: entered promiscuous mode [ 202.715661][T23708] ip6_vti0: entered allmulticast mode [ 202.723380][T23708] sit0: entered promiscuous mode [ 202.728426][T23708] sit0: entered allmulticast mode [ 202.738731][T23708] ip6tnl0: entered promiscuous mode [ 202.744001][T23708] ip6tnl0: entered allmulticast mode [ 202.754977][T23708] ip6gre0: entered promiscuous mode [ 202.760230][T23708] ip6gre0: entered allmulticast mode [ 202.766916][T23708] syz_tun: entered promiscuous mode [ 202.772230][T23708] syz_tun: entered allmulticast mode [ 202.791878][T23708] ip6gretap0: entered promiscuous mode [ 202.797472][T23708] ip6gretap0: entered allmulticast mode [ 202.805514][T23729] validate_nla: 1 callbacks suppressed [ 202.805532][T23729] netlink: 'syz.0.10026': attribute type 2 has an invalid length. [ 202.819057][T23729] netlink: 'syz.0.10026': attribute type 11 has an invalid length. [ 202.828060][T23708] bridge0: entered promiscuous mode [ 202.833432][T23708] bridge0: entered allmulticast mode [ 202.839834][T23708] vcan0: entered promiscuous mode [ 202.844888][T23708] vcan0: entered allmulticast mode [ 202.850599][T23708] bond0: entered promiscuous mode [ 202.855699][T23708] batadv0: entered promiscuous mode [ 202.861130][T23708] bond0: entered allmulticast mode [ 202.866268][T23708] batadv0: entered allmulticast mode [ 202.872241][T23708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.880435][T23708] dummy0: entered promiscuous mode [ 202.885581][T23708] dummy0: entered allmulticast mode [ 202.891831][T23708] nlmon0: entered promiscuous mode [ 202.897013][T23708] nlmon0: entered allmulticast mode [ 202.903264][T23708] caif0: entered promiscuous mode [ 202.908383][T23708] caif0: entered allmulticast mode [ 202.913585][T23708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.114283][ T29] audit: type=1400 audit(969.652:66917): avc: denied { name_bind } for pid=23749 comm="syz.6.10036" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 203.165346][T23754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.273828][T23768] C: renamed from team_slave_0 [ 203.298453][T23768] netlink: 'syz.0.10045': attribute type 3 has an invalid length. [ 203.306365][T23768] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 203.401933][T23782] netlink: 'syz.6.10052': attribute type 10 has an invalid length. [ 203.413508][ T29] audit: type=1326 audit(969.978:66918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23783 comm="syz.0.10053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f151aace969 code=0x0 [ 203.506070][T23798] __nla_validate_parse: 10 callbacks suppressed [ 203.506152][T23798] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10060'. [ 203.546232][ T29] audit: type=1326 audit(970.115:66919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23801 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc42e969 code=0x7ffc0000 [ 203.552451][T23798] netlink: 7 bytes leftover after parsing attributes in process `syz.6.10060'. [ 203.569391][ T29] audit: type=1326 audit(970.115:66920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23801 comm="syz.3.10063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbbc42e969 code=0x7ffc0000 [ 203.759029][T23820] can0: slcan on ptm0. [ 203.807413][T23827] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10074'. [ 203.810591][T23819] can0 (unregistered): slcan off ptm0. [ 204.249533][T23892] netlink: 830 bytes leftover after parsing attributes in process `syz.6.10095'. [ 204.321626][T23905] netlink: 'syz.3.10099': attribute type 4 has an invalid length. [ 204.529326][T23935] netlink: 'syz.5.10114': attribute type 2 has an invalid length. [ 204.537291][T23935] netlink: 'syz.5.10114': attribute type 11 has an invalid length. [ 204.545329][T23935] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10114'. [ 204.735788][T23969] loop3: detected capacity change from 0 to 512 [ 204.771862][T23969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.772631][T23974] veth1_virt_wifi: entered promiscuous mode [ 204.786382][T23974] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10134'. [ 204.839069][T23969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.872010][T23969] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.10129: corrupted xattr block 19: overlapping e_value [ 204.915222][T23969] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 204.924577][T23969] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.10129: corrupted xattr block 19: overlapping e_value [ 204.939027][T23969] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.10129: corrupted xattr block 19: overlapping e_value [ 204.981201][T23969] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 205.006121][T23969] EXT4-fs error (device loop3): ext4_get_inode_usage:884: inode #15: comm syz.3.10129: corrupted xattr block 19: overlapping e_value [ 205.073202][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.107816][T24014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10153'. [ 205.295454][T24043] loop2: detected capacity change from 0 to 1764 [ 205.372526][T24055] xt_nat: multiple ranges no longer supported [ 205.438602][T24066] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10179'. [ 205.471307][T24071] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 205.585516][T24090] SET target dimension over the limit! [ 205.691261][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 205.691278][ T29] audit: type=1326 audit(972.362:66956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24093 comm="syz.2.10193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 205.720606][ T29] audit: type=1326 audit(972.362:66957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24093 comm="syz.2.10193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 205.752661][ T29] audit: type=1326 audit(972.425:66958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24093 comm="syz.2.10193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 205.775837][ T29] audit: type=1326 audit(972.425:66959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24093 comm="syz.2.10193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 205.799109][ T29] audit: type=1326 audit(972.425:66960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24093 comm="syz.2.10193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 205.834611][T24104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10195'. [ 205.873438][ T29] audit: type=1400 audit(972.540:66961): avc: denied { nlmsg_read } for pid=24101 comm="syz.6.10196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 205.927113][T24116] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 205.934834][T24116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10200'. [ 205.943955][T24116] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.055771][T24130] loop5: detected capacity change from 0 to 1024 [ 206.081845][T24131] netlink: 'syz.3.10209': attribute type 7 has an invalid length. [ 206.105014][T24130] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 206.114253][T24130] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 206.123760][T24130] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.10210: Failed to acquire dquot type 0 [ 206.153479][T24130] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 206.181046][T24130] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.10210: corrupted inode contents [ 206.194960][T24130] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.10210: mark_inode_dirty error [ 206.208686][T24130] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.10210: corrupted inode contents [ 206.229565][T24130] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.10210: mark_inode_dirty error [ 206.242595][T24130] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.10210: corrupted inode contents [ 206.256794][T24130] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 206.265868][T24130] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.10210: corrupted inode contents [ 206.290747][ T29] audit: type=1400 audit(972.992:66962): avc: denied { setattr } for pid=24151 comm="syz.2.10219" name="seq" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 206.337447][T24158] netlink: 'syz.2.10224': attribute type 8 has an invalid length. [ 206.356403][T24130] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.10210: mark_inode_dirty error [ 206.423481][T24130] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 206.434293][ T29] audit: type=1326 audit(973.150:66963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24172 comm="syz.6.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572417e969 code=0x7ffc0000 [ 206.468757][T24130] EXT4-fs (loop5): 1 truncate cleaned up [ 206.476061][T24130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.512729][T24130] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 206.572843][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.889046][T24241] netlink: 'syz.5.10264': attribute type 2 has an invalid length. [ 206.922861][T24247] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 207.160103][T24281] loop3: detected capacity change from 0 to 512 [ 207.170629][T24285] wg1: entered promiscuous mode [ 207.174124][T24281] EXT4-fs: Ignoring removed nobh option [ 207.175611][T24285] wg1: entered allmulticast mode [ 207.191543][T24281] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.10283: invalid indirect mapped block 256 (level 2) [ 207.212037][T24291] loop5: detected capacity change from 0 to 512 [ 207.215408][T24281] EXT4-fs (loop3): 2 truncates cleaned up [ 207.224886][T24281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.287657][T24291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.294384][T24291] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.296611][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.317384][T24291] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 207.336161][T24291] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 207.353199][T24291] EXT4-fs (loop5): 1 truncate cleaned up [ 207.364771][T24291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.418052][T24291] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #2: block 4: comm syz.5.10288: lblock 0 mapped to illegal pblock 4 (length 1) [ 207.456816][T24320] TCP: TCP_TX_DELAY enabled [ 207.472802][T24291] EXT4-fs (loop5): Remounting filesystem read-only [ 207.511654][T24329] $H: renamed from bond0 [ 207.531695][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.583597][T24338] validate_nla: 1 callbacks suppressed [ 207.583612][T24338] netlink: 'syz.6.10312': attribute type 30 has an invalid length. [ 207.847934][T24380] SET target dimension over the limit! [ 207.956592][T24396] netlink: get zone limit has 8 unknown bytes [ 207.999541][T24407] SET target dimension over the limit! [ 208.007238][T24404] vti0: entered promiscuous mode [ 208.257559][T24445] xt_l2tp: v2 doesn't support IP mode [ 208.373013][T24466] loop0: detected capacity change from 0 to 1024 [ 208.383912][T24471] ipt_REJECT: TCP_RESET invalid for non-tcp [ 208.417858][T24473] $H: renamed from bond0 (while UP) [ 208.424551][T24475] __nla_validate_parse: 9 callbacks suppressed [ 208.424615][T24475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10378'. [ 208.441592][T24473] $H: left allmulticast mode [ 208.442724][T24466] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.10373: Failed to acquire dquot type 0 [ 208.446489][T24473] batadv0: left allmulticast mode [ 208.489864][T24466] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 208.504703][T24466] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.10373: corrupted inode contents [ 208.526064][T24466] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.10373: mark_inode_dirty error [ 208.574962][T24466] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.10373: corrupted inode contents [ 208.590874][T24466] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.10373: mark_inode_dirty error [ 208.613080][T24495] SET target dimension over the limit! [ 208.625325][T24466] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.10373: corrupted inode contents [ 208.640353][T24501] loop2: detected capacity change from 0 to 512 [ 208.646979][T24501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.667132][T24466] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 208.684008][T24501] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.690737][T24466] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.10373: corrupted inode contents [ 208.714713][T24466] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.10373: mark_inode_dirty error [ 208.726607][T24501] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 208.738875][T24501] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 208.747760][T24466] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 208.759293][T24501] EXT4-fs (loop2): 1 truncate cleaned up [ 208.766250][T24501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.780269][T24466] EXT4-fs (loop0): 1 truncate cleaned up [ 208.782491][T24501] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #2: block 4: comm syz.2.10390: lblock 0 mapped to illegal pblock 4 (length 1) [ 208.795817][T24466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.819072][T24501] EXT4-fs (loop2): Remounting filesystem read-only [ 208.826507][T24516] netlink: get zone limit has 8 unknown bytes [ 208.882857][ T4106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.892747][ T4110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.926646][T24526] netlink: 'syz.3.10402': attribute type 10 has an invalid length. [ 208.952666][T24526] geneve1: entered promiscuous mode [ 208.958102][T24526] geneve1: left allmulticast mode [ 208.973454][T24526] $H: (slave geneve1): Enslaving as an active interface with an up link [ 209.036618][T24543] netlink: get zone limit has 8 unknown bytes [ 209.192452][T24566] loop3: detected capacity change from 0 to 164 [ 209.211983][T24568] netlink: 'syz.5.10422': attribute type 10 has an invalid length. [ 209.220073][T24568] geneve1: entered promiscuous mode [ 209.225320][T24568] geneve1: left allmulticast mode [ 209.243194][T24568] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.252130][T24568] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.260949][T24568] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.269813][T24568] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.280986][T24568] $H: (slave geneve1): Enslaving as an active interface with an up link [ 209.383233][T24584] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10430'. [ 209.383845][T24585] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 209.392446][T24584] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10430'. [ 209.413571][T24584] netlink: 204 bytes leftover after parsing attributes in process `syz.6.10430'. [ 209.575957][T24613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.680506][T24628] loop6: detected capacity change from 0 to 512 [ 209.705552][T24628] EXT4-fs (loop6): orphan cleanup on readonly fs [ 209.738011][T24628] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10452: bg 0: block 248: padding at end of block bitmap is not set [ 209.783949][T24628] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.10452: Failed to acquire dquot type 1 [ 209.808680][T24628] EXT4-fs (loop6): 1 truncate cleaned up [ 209.836461][T24628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.923467][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.948914][T24663] loop2: detected capacity change from 0 to 1024 [ 209.983564][T24663] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.10468: Failed to acquire dquot type 0 [ 210.038629][T24663] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 210.059357][T24678] netlink: 'syz.0.10475': attribute type 10 has an invalid length. [ 210.067587][T24678] veth0_vlan: entered allmulticast mode [ 210.097286][T24663] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.10468: corrupted inode contents [ 210.112244][T24663] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.10468: mark_inode_dirty error [ 210.125854][T24663] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.10468: corrupted inode contents [ 210.138429][T24663] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.10468: mark_inode_dirty error [ 210.172381][T24686] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10478'. [ 210.197932][T24663] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.10468: corrupted inode contents [ 210.224233][T24663] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 210.244822][T24663] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.10468: corrupted inode contents [ 210.267092][T24692] netlink: 'syz.6.10482': attribute type 21 has an invalid length. [ 210.269231][T24663] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.10468: mark_inode_dirty error [ 210.275092][T24692] netlink: 'syz.6.10482': attribute type 6 has an invalid length. [ 210.293990][T24663] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 210.294081][T24692] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10482'. [ 210.303945][T24663] EXT4-fs (loop2): 1 truncate cleaned up [ 210.319157][T24663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.398595][T24704] loop5: detected capacity change from 0 to 164 [ 210.465849][ T4110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.475298][T24714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10492'. [ 210.484433][T24714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10492'. [ 210.501828][T24714] netlink: 204 bytes leftover after parsing attributes in process `syz.3.10492'. [ 210.631723][T24739] loop2: detected capacity change from 0 to 164 [ 210.743871][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10513'. [ 210.796599][T24756] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.888539][T24780] loop6: detected capacity change from 0 to 164 [ 211.049201][T24803] netlink: 'syz.2.10534': attribute type 2 has an invalid length. [ 211.057202][T24803] netlink: 'syz.2.10534': attribute type 9 has an invalid length. [ 211.117189][T24811] loop3: detected capacity change from 0 to 1024 [ 211.126258][T24813] netlink: 'syz.0.10540': attribute type 5 has an invalid length. [ 211.176797][T24811] __quota_error: 17 callbacks suppressed [ 211.176815][T24811] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 211.191980][T24811] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 211.202018][T24811] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.10538: Failed to acquire dquot type 0 [ 211.202656][T24825] tc_dump_action: action bad kind [ 211.216179][T24811] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 211.237311][T24811] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.10538: corrupted inode contents [ 211.251207][T24811] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.10538: mark_inode_dirty error [ 211.263091][T24811] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.10538: corrupted inode contents [ 211.311091][T24811] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.10538: mark_inode_dirty error [ 211.353015][T24831] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 211.363754][T24811] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.10538: corrupted inode contents [ 211.408001][T24811] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 211.456936][T24811] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.10538: corrupted inode contents [ 211.492057][T24811] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.10538: mark_inode_dirty error [ 211.520630][T24811] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 211.550779][T24811] EXT4-fs (loop3): 1 truncate cleaned up [ 211.573341][T24811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.631136][T24811] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 211.699063][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.954975][T24916] binfmt_misc: register: failed to install interpreter file ./file2 [ 212.287120][ T29] audit: type=1326 audit(979.293:66975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24964 comm="syz.5.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 212.311030][ T29] audit: type=1326 audit(979.293:66976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24964 comm="syz.5.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 212.456677][ T29] audit: type=1326 audit(979.346:66977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24964 comm="syz.5.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 212.479859][ T29] audit: type=1326 audit(979.346:66978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24964 comm="syz.5.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 212.503232][ T29] audit: type=1326 audit(979.346:66979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24964 comm="syz.5.10615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 212.526660][ T29] audit: type=1326 audit(979.367:66980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.5.10618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 212.549974][ T29] audit: type=1326 audit(979.367:66981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.5.10618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 212.573138][ T29] audit: type=1326 audit(979.377:66982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24971 comm="syz.5.10618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 212.636278][T24997] sctp: [Deprecated]: syz.0.10633 (pid 24997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.636278][T24997] Use struct sctp_sack_info instead [ 212.815565][T25021] loop5: detected capacity change from 0 to 2048 [ 212.878254][T25021] loop5: p1 < > p4 [ 212.883495][T25021] loop5: p4 size 8388608 extends beyond EOD, truncated [ 213.109778][T25069] netlink: 'syz.5.10666': attribute type 49 has an invalid length. [ 213.236606][T25085] tmpfs: Bad value for 'mpol' [ 213.430483][T25107] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 213.439938][T25107] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 213.493597][T25106] __nla_validate_parse: 4 callbacks suppressed [ 213.493615][T25106] netlink: 830 bytes leftover after parsing attributes in process `syz.6.10684'. [ 213.725217][T25133] netlink: 156 bytes leftover after parsing attributes in process `syz.5.10697'. [ 214.060663][T25177] netlink: 3548 bytes leftover after parsing attributes in process `syz.2.10720'. [ 214.381652][T25216] netlink: 'syz.5.10738': attribute type 12 has an invalid length. [ 214.389677][T25216] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10738'. [ 214.490577][T25231] syz.0.10745: attempt to access beyond end of device [ 214.490577][T25231] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 214.652383][T25257] batadv1: entered promiscuous mode [ 214.663526][T25257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 214.860032][T25291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10775'. [ 214.953748][T25307] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10781'. [ 215.016173][T25316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10786'. [ 215.366915][T25372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10814'. [ 215.376073][T25372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10814'. [ 215.761436][T25429] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 216.102529][T25490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10872'. [ 216.114740][T25491] xt_l2tp: invalid flags combination: 8 [ 216.220044][T25502] xt_bpf: check failed: parse error [ 216.450577][T25544] loop6: detected capacity change from 0 to 512 [ 216.477379][T25544] EXT4-fs: Ignoring removed nobh option [ 216.487687][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 216.487703][ T29] audit: type=1326 audit(983.704:67001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25546 comm="syz.2.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 216.555942][T25544] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 216.579286][T25544] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.10898: invalid indirect mapped block 2683928664 (level 1) [ 216.595461][ T29] audit: type=1326 audit(983.735:67002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25546 comm="syz.2.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 216.618736][ T29] audit: type=1326 audit(983.756:67003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25546 comm="syz.2.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 216.642211][ T29] audit: type=1326 audit(983.756:67004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25546 comm="syz.2.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 216.665603][ T29] audit: type=1326 audit(983.756:67005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25546 comm="syz.2.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d642e969 code=0x7ffc0000 [ 216.696313][T25544] EXT4-fs (loop6): 1 truncate cleaned up [ 216.709848][T25544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.795381][T25544] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 216.882625][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.898891][T25594] loop2: detected capacity change from 0 to 1024 [ 216.917521][T25594] EXT4-fs: Ignoring removed nobh option [ 216.923233][T25594] EXT4-fs: Ignoring removed bh option [ 216.947417][T25594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.020481][ T4110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.107387][T25625] netlink: 'syz.5.10933': attribute type 11 has an invalid length. [ 217.156376][ T29] audit: type=1400 audit(984.397:67006): avc: denied { setcurrent } for pid=25632 comm="syz.3.10938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 217.185470][T25638] ip6t_srh: unknown srh match flags 4000 [ 217.305330][T25653] loop3: detected capacity change from 0 to 512 [ 217.319121][ T29] audit: type=1400 audit(984.576:67007): avc: denied { audit_write } for pid=25654 comm="syz.0.10951" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 217.341948][T25653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.396843][T25653] EXT4-fs (loop3): 1 truncate cleaned up [ 217.414241][T25653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.494340][ T29] audit: type=1326 audit(984.754:67008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25677 comm="syz.0.10961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 217.517496][ T29] audit: type=1326 audit(984.754:67009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25677 comm="syz.0.10961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 217.540773][ T29] audit: type=1326 audit(984.754:67010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25677 comm="syz.0.10961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 217.565556][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.616167][T25685] Invalid option length (1046020) for dns_resolver key [ 217.874857][T25730] wireguard0: entered promiscuous mode [ 217.905287][T25736] caif0: left promiscuous mode [ 218.011566][T25754] netlink: 'syz.6.10995': attribute type 5 has an invalid length. [ 218.095351][T25771] netlink: 'syz.0.11003': attribute type 30 has an invalid length. [ 218.189321][T25779] netlink: 'syz.2.11008': attribute type 1 has an invalid length. [ 218.305145][T25801] loop2: detected capacity change from 0 to 1024 [ 218.340817][T25801] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.11018: Failed to acquire dquot type 0 [ 218.366191][T25801] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 218.388747][T25801] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.11018: corrupted inode contents [ 218.402682][T25801] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.11018: mark_inode_dirty error [ 218.414353][T25801] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.11018: corrupted inode contents [ 218.454352][T25801] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.11018: mark_inode_dirty error [ 218.467851][T25801] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.11018: corrupted inode contents [ 218.480043][T25801] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 218.490326][T25801] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.11018: corrupted inode contents [ 218.527910][T25801] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.11018: mark_inode_dirty error [ 218.541140][T25801] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 218.550632][T25801] EXT4-fs (loop2): 1 truncate cleaned up [ 218.558985][T25801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.610653][T25837] veth0_to_hsr: entered promiscuous mode [ 218.629151][T25837] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 218.648451][ T4110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.729776][T25850] xt_l2tp: v2 tid > 0xffff: 150994944 [ 218.752961][T25851] loop6: detected capacity change from 0 to 512 [ 218.760074][T25856] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 218.788754][T25859] __nla_validate_parse: 4 callbacks suppressed [ 218.788772][T25859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11048'. [ 218.827386][T25851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.848826][T25865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11049'. [ 218.894491][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.028483][T25894] ip6gretap1: entered allmulticast mode [ 219.297753][T25937] netlink: 'syz.5.11083': attribute type 4 has an invalid length. [ 219.330401][T25940] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11084'. [ 219.340318][T25935] loop6: detected capacity change from 0 to 4096 [ 219.368096][T25935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.414099][T25950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11089'. [ 219.471723][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.543263][T25967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11094'. [ 219.574024][T25971] loop5: detected capacity change from 0 to 1024 [ 219.608658][T25971] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.11099: Failed to acquire dquot type 0 [ 219.634054][T25971] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 219.648931][T25971] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.11099: corrupted inode contents [ 219.665064][T25971] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.11099: mark_inode_dirty error [ 219.700589][T25971] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.11099: corrupted inode contents [ 219.725625][T25971] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.11099: mark_inode_dirty error [ 219.753435][T25971] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.11099: corrupted inode contents [ 219.790429][T25995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11110'. [ 219.799665][T25995] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11110'. [ 219.809102][T25995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11110'. [ 219.815652][T25971] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 219.818819][T25995] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11110'. [ 219.836243][T25995] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11110'. [ 219.844306][T25971] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.11099: corrupted inode contents [ 219.879208][T25998] loop3: detected capacity change from 0 to 512 [ 219.879474][T25971] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.11099: mark_inode_dirty error [ 219.886454][T25998] EXT4-fs: Ignoring removed orlov option [ 219.914646][T25971] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 219.925306][T25998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.934957][T25971] EXT4-fs (loop5): 1 truncate cleaned up [ 219.955823][T25998] EXT4-fs (loop3): orphan cleanup on readonly fs [ 219.963188][T25971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.988313][T25998] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11112: bg 0: block 248: padding at end of block bitmap is not set [ 220.032201][T25998] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.11112: Failed to acquire dquot type 1 [ 220.076376][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.099242][T25998] EXT4-fs (loop3): 1 truncate cleaned up [ 220.130224][T25998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.185853][T25998] EXT4-fs: Ignoring removed orlov option [ 220.208160][T25998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.238243][T26035] netlink: 'syz.0.11129': attribute type 2 has an invalid length. [ 220.246163][T26035] netlink: 'syz.0.11129': attribute type 1 has an invalid length. [ 220.255252][T25998] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 220.299679][T25998] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.11112: Abort forced by user [ 220.330449][T25998] EXT4-fs (loop3): Remounting filesystem read-only [ 220.337117][T25998] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 220.353404][T26038] loop2: detected capacity change from 0 to 8192 [ 220.395694][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.476973][T26054] loop5: detected capacity change from 0 to 4096 [ 220.517844][T26054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.660211][T26079] loop3: detected capacity change from 0 to 8192 [ 220.668750][T26083] IPv6: sit2: Disabled Multicast RS [ 220.676616][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.727586][T26088] netlink: 'syz.6.11156': attribute type 21 has an invalid length. [ 221.122001][T26151] loop6: detected capacity change from 0 to 512 [ 221.147523][T26151] EXT4-fs: Ignoring removed orlov option [ 221.198801][T26151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.222113][T26151] EXT4-fs (loop6): orphan cleanup on readonly fs [ 221.231046][T26151] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11186: bg 0: block 248: padding at end of block bitmap is not set [ 221.248955][T26151] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.11186: Failed to acquire dquot type 1 [ 221.274694][T26151] EXT4-fs (loop6): 1 truncate cleaned up [ 221.284498][T26151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.297062][T26171] netlink: 'syz.5.11194': attribute type 5 has an invalid length. [ 221.339540][T26151] EXT4-fs: Ignoring removed orlov option [ 221.352560][T26151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.361310][T26151] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 221.370905][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 221.370921][ T29] audit: type=1326 audit(988.829:67037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26177 comm="syz.5.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 221.400218][ T29] audit: type=1326 audit(988.829:67038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26177 comm="syz.5.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 221.423396][ T29] audit: type=1326 audit(988.839:67039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26177 comm="syz.5.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 221.446523][ T29] audit: type=1326 audit(988.839:67040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26177 comm="syz.5.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 221.469675][ T29] audit: type=1326 audit(988.839:67041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26177 comm="syz.5.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 221.480436][T26186] C: renamed from team_slave_0 [ 221.504445][T26151] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.11186: Abort forced by user [ 221.533166][T26186] netlink: 'syz.2.11204': attribute type 1 has an invalid length. [ 221.541121][T26186] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 221.557177][T26151] EXT4-fs (loop6): Remounting filesystem read-only [ 221.563805][T26151] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 221.604001][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.617413][T26199] syz.5.11209: attempt to access beyond end of device [ 221.617413][T26199] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 221.646356][T26203] netlink: 'syz.3.11212': attribute type 29 has an invalid length. [ 221.668470][T26207] loop6: detected capacity change from 0 to 512 [ 221.694941][T26207] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 221.725349][T26207] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.11211: bad orphan inode 16 [ 221.769068][T26207] ext4_test_bit(bit=15, block=4) = 0 [ 221.774555][T26207] EXT4-fs (loop6): 1 orphan inode deleted [ 221.795239][T26207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.834696][ T29] audit: type=1400 audit(989.312:67042): avc: denied { create } for pid=26205 comm="syz.6.11211" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 221.854529][T26207] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.11211: reserved inode found cleared - inode=9 [ 221.871321][T26226] tc_dump_action: action bad kind [ 221.914295][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.963618][T26238] Q6\bY4: renamed from lo [ 221.968897][ T29] audit: type=1401 audit(989.459:67043): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 222.226416][T26278] xt_HMARK: proto mask must be zero with L3 mode [ 222.427647][ T29] audit: type=1400 audit(989.942:67044): avc: granted { setsecparam } for pid=26306 comm="syz.2.11264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 222.605953][T26338] loop0: detected capacity change from 0 to 512 [ 222.626663][ T29] audit: type=1400 audit(990.152:67045): avc: denied { read } for pid=26339 comm="syz.2.11278" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 222.657374][T26338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 222.689699][T26338] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.11276: bad orphan inode 16 [ 222.698754][T26348] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.715993][T26338] ext4_test_bit(bit=15, block=4) = 0 [ 222.721510][T26338] EXT4-fs (loop0): 1 orphan inode deleted [ 222.729666][ T29] audit: type=1326 audit(2000000000.021:67046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26350 comm="syz.5.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 222.760005][T26338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.775431][T26338] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.11276: reserved inode found cleared - inode=9 [ 222.814961][ T4106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.909916][T26369] ip6gre1: entered allmulticast mode [ 222.995788][T26385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.002461][T26386] loop5: detected capacity change from 0 to 512 [ 223.029747][T26386] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 223.091545][T26386] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.11298: bad orphan inode 16 [ 223.121736][T26386] ext4_test_bit(bit=15, block=4) = 0 [ 223.127148][T26386] EXT4-fs (loop5): 1 orphan inode deleted [ 223.157127][T26386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.203257][T26386] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.11298: reserved inode found cleared - inode=9 [ 223.220403][T26418] validate_nla: 2 callbacks suppressed [ 223.220423][T26418] netlink: 'syz.3.11316': attribute type 21 has an invalid length. [ 223.285840][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.417892][T26446] netlink: 'syz.2.11328': attribute type 21 has an invalid length. [ 223.492905][T26453] netlink: 'syz.3.11333': attribute type 10 has an invalid length. [ 223.550003][T26453] Q6\bY4: left allmulticast mode [ 223.555892][T26453] $H: (slave Q6\bY4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.584765][T26471] __nla_validate_parse: 18 callbacks suppressed [ 223.584782][T26471] netlink: 696 bytes leftover after parsing attributes in process `syz.2.11342'. [ 223.612770][T26474] netlink: 288 bytes leftover after parsing attributes in process `syz.3.11343'. [ 223.663252][T26480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.689317][T26481] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.797037][T26495] netlink: 'syz.6.11354': attribute type 21 has an invalid length. [ 223.805031][T26495] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11354'. [ 223.822107][T26495] netlink: 'syz.6.11354': attribute type 4 has an invalid length. [ 223.830002][T26495] netlink: 'syz.6.11354': attribute type 5 has an invalid length. [ 223.837879][T26495] netlink: 3 bytes leftover after parsing attributes in process `syz.6.11354'. [ 223.893843][T26501] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11357'. [ 224.150736][T26547] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11379'. [ 224.211413][T26554] netlink: 'syz.6.11382': attribute type 4 has an invalid length. [ 224.282377][T26557] loop0: detected capacity change from 0 to 1764 [ 224.412968][T26581] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.529503][T26598] netlink: 'syz.0.11404': attribute type 10 has an invalid length. [ 224.596761][T26607] netlink: 'syz.6.11408': attribute type 8 has an invalid length. [ 224.659157][T26614] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11412'. [ 224.668450][T26614] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11412'. [ 224.681998][T26619] loop0: detected capacity change from 0 to 512 [ 224.718409][T26619] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.11415: invalid indirect mapped block 256 (level 2) [ 224.735923][T26619] EXT4-fs (loop0): 2 truncates cleaned up [ 224.742627][T26619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.833773][ T4106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.853223][T26636] loop6: detected capacity change from 0 to 512 [ 224.910870][T26646] !: renamed from dummy0 (while UP) [ 224.944473][T26654] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11429'. [ 224.969538][T26656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11431'. [ 224.992119][T26654] $H (unregistering): (slave batadv0): Releasing backup interface [ 225.003873][T26654] batadv0: left promiscuous mode [ 225.018907][T26654] $H (unregistering): (slave geneve1): Releasing backup interface [ 225.029308][T26654] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.038393][T26654] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.047507][T26654] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.056625][T26654] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.066831][T26654] $H (unregistering): Released all slaves [ 225.076451][T26663] C: renamed from team_slave_0 (while UP) [ 225.084013][T26663] netlink: 'syz.6.11434': attribute type 3 has an invalid length. [ 225.092327][T26663] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 225.137994][T26672] IPv6: Can't replace route, no match found [ 225.164504][T26675] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 225.222079][T26683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.308832][T26691] loop2: detected capacity change from 0 to 2048 [ 225.350630][T26691] loop2: p1 < > p4 [ 225.373868][T26691] loop2: p4 size 8388608 extends beyond EOD, truncated [ 225.406811][ T3005] loop2: p1 < > p4 [ 225.412043][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 225.437179][T19826] udevd[19826]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 225.448711][T19827] udevd[19827]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 225.508634][T19827] udevd[19827]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 225.511415][T19826] udevd[19826]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 225.633593][T26737] lo: entered allmulticast mode [ 225.652620][T26737] tunl0: entered allmulticast mode [ 225.673299][T26737] gre0: entered allmulticast mode [ 225.689382][T26737] gretap0: entered allmulticast mode [ 225.702123][T26737] erspan0: entered allmulticast mode [ 225.708479][T26737] ip_vti0: entered allmulticast mode [ 225.732342][T26737] ip6_vti0: entered allmulticast mode [ 225.751911][T26737] sit0: entered allmulticast mode [ 225.781492][T26737] ip6tnl0: entered allmulticast mode [ 225.804180][T26737] ip6gre0: entered allmulticast mode [ 225.811354][T26737] syz_tun: entered allmulticast mode [ 225.820389][T26737] ip6gretap0: entered allmulticast mode [ 225.833158][T26737] vcan0: entered allmulticast mode [ 225.847792][T26737] $H: entered allmulticast mode [ 225.853052][T26737] bond_slave_0: entered allmulticast mode [ 225.858931][T26737] bond_slave_1: entered allmulticast mode [ 225.864723][T26737] macvlan1: entered allmulticast mode [ 225.890737][T26737] 8021q: adding VLAN 0 to HW filter on device $H [ 225.901374][T26737] dummy0: entered allmulticast mode [ 225.907920][T26737] nlmon0: entered allmulticast mode [ 225.920368][T26737] caif0: entered allmulticast mode [ 225.925732][T26737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.983975][T26779] loop3: detected capacity change from 0 to 512 [ 226.032072][T26779] EXT4-fs (loop3): orphan cleanup on readonly fs [ 226.053179][T26779] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 226.070099][T26789] xt_ipcomp: unknown flags 12 [ 226.075294][T26779] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 226.084261][T26779] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.11490: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 226.112991][T26779] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.11490: couldn't read orphan inode 13 (err -117) [ 226.129373][T26779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.156451][T26779] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 226.200727][T26779] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 226.265906][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.374603][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 226.374693][ T29] audit: type=1326 audit(2000000003.854:67079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 226.516715][T26840] bridge5: entered promiscuous mode [ 226.522128][T26840] bridge5: entered allmulticast mode [ 226.530279][ T29] audit: type=1326 audit(2000000003.896:67080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 226.554383][ T29] audit: type=1326 audit(2000000003.896:67081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ff00000 [ 226.578342][ T29] audit: type=1326 audit(2000000003.896:67082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ff00000 [ 226.602052][ T29] audit: type=1326 audit(2000000003.896:67083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ff00000 [ 226.626119][ T29] audit: type=1326 audit(2000000003.896:67084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ff00000 [ 226.649903][ T29] audit: type=1326 audit(2000000003.896:67085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ff00000 [ 226.673952][ T29] audit: type=1326 audit(2000000003.896:67086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ff00000 [ 226.697814][ T29] audit: type=1326 audit(2000000003.896:67087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ff00000 [ 226.721719][ T29] audit: type=1326 audit(2000000003.896:67088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26828 comm="syz.0.11512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ff00000 [ 226.934433][T26873] SET target dimension over the limit! [ 226.941102][T26874] Q6\bY4: entered allmulticast mode [ 226.961136][T26874] tunl0: entered promiscuous mode [ 226.966207][T26874] tunl0: entered allmulticast mode [ 226.981365][T26874] gre0: entered promiscuous mode [ 226.986389][T26874] gre0: entered allmulticast mode [ 227.049435][T26874] gretap0: entered promiscuous mode [ 227.054945][T26874] gretap0: entered allmulticast mode [ 227.077114][T26874] erspan0: entered promiscuous mode [ 227.082519][T26874] erspan0: entered allmulticast mode [ 227.107075][T26874] ip_vti0: entered promiscuous mode [ 227.112490][T26874] ip_vti0: entered allmulticast mode [ 227.135453][T26874] ip6_vti0: entered promiscuous mode [ 227.140838][T26874] ip6_vti0: entered allmulticast mode [ 227.157479][T26874] sit0: entered promiscuous mode [ 227.162569][T26874] sit0: entered allmulticast mode [ 227.180677][T26874] ip6tnl0: entered promiscuous mode [ 227.185975][T26874] ip6tnl0: entered allmulticast mode [ 227.214300][T26874] ip6gre0: entered promiscuous mode [ 227.219598][T26874] ip6gre0: entered allmulticast mode [ 227.242088][T26874] syz_tun: entered promiscuous mode [ 227.247453][T26874] syz_tun: entered allmulticast mode [ 227.256276][T26874] ip6gretap0: entered promiscuous mode [ 227.261898][T26874] ip6gretap0: entered allmulticast mode [ 227.269098][T26874] bridge0: entered promiscuous mode [ 227.274446][T26874] bridge0: entered allmulticast mode [ 227.295940][T26874] vcan0: entered promiscuous mode [ 227.301373][T26874] vcan0: entered allmulticast mode [ 227.307088][T26874] $H: entered allmulticast mode [ 227.312298][T26874] geneve1: entered allmulticast mode [ 227.318384][T26874] 8021q: adding VLAN 0 to HW filter on device $H [ 227.349205][T26874] dummy0: entered promiscuous mode [ 227.354523][T26874] dummy0: entered allmulticast mode [ 227.361619][T26874] nlmon0: entered promiscuous mode [ 227.366782][T26874] nlmon0: entered allmulticast mode [ 227.377010][T26874] caif0: entered promiscuous mode [ 227.382360][T26874] caif0: entered allmulticast mode [ 227.387543][T26874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.447162][ T1052] IPVS: starting estimator thread 0... [ 227.558520][T26912] IPVS: using max 1920 ests per chain, 96000 per kthread [ 227.573574][T26926] lo: left allmulticast mode [ 227.591003][T26926] tunl0: left allmulticast mode [ 227.600981][T26926] gre0: left allmulticast mode [ 227.625927][T26926] gretap0: left allmulticast mode [ 227.635452][T26926] erspan0: left allmulticast mode [ 227.652423][T26926] ip_vti0: left allmulticast mode [ 227.664073][T26926] ip6_vti0: left allmulticast mode [ 227.690779][T26926] sit0: left allmulticast mode [ 227.701129][T26926] ip6tnl0: left allmulticast mode [ 227.721091][T26926] ip6gre0: left allmulticast mode [ 227.730286][T26926] syz_tun: left allmulticast mode [ 228.398511][T27022] lo: left allmulticast mode [ 228.404023][T27022] tunl0: left allmulticast mode [ 228.425941][T27024] __nla_validate_parse: 11 callbacks suppressed [ 228.425961][T27024] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11607'. [ 228.438054][T27022] gre0: left allmulticast mode [ 228.461530][T27022] gretap0: left allmulticast mode [ 228.474373][T27022] erspan0: left allmulticast mode [ 228.489410][T27022] ip_vti0: left allmulticast mode [ 228.502622][T27022] ip6_vti0: left allmulticast mode [ 228.516299][T27022] sit0: left allmulticast mode [ 228.528358][T27022] ip6tnl0: left allmulticast mode [ 228.540662][T27022] ip6gre0: left allmulticast mode [ 228.554270][T27022] syz_tun: left allmulticast mode [ 228.637104][T27032] ip6t_rpfilter: unknown options [ 228.838533][T27056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11624'. [ 228.883389][T27062] ip6t_rpfilter: unknown options [ 229.083161][T27088] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11639'. [ 229.127414][T27092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11650'. [ 229.597118][T27160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.775737][T27188] lo: entered allmulticast mode [ 229.789532][T27188] tunl0: entered allmulticast mode [ 229.795491][T27188] gre0: entered allmulticast mode [ 229.801463][T27188] gretap0: entered allmulticast mode [ 229.807585][T27188] erspan0: entered allmulticast mode [ 229.813654][T27188] ip_vti0: entered allmulticast mode [ 229.821771][T27198] netlink: 696 bytes leftover after parsing attributes in process `syz.0.11693'. [ 229.827477][T27188] ip6_vti0: entered allmulticast mode [ 229.837553][T27188] sit0: entered allmulticast mode [ 229.843591][T27188] ip6tnl0: entered allmulticast mode [ 229.856003][T27188] ip6gre0: entered allmulticast mode [ 229.861993][T27188] syz_tun: entered allmulticast mode [ 229.868616][T27188] ip6gretap0: entered allmulticast mode [ 229.876786][T27188] bridge0: entered allmulticast mode [ 229.882985][T27188] vcan0: entered allmulticast mode [ 229.888427][T27188] bond0: entered allmulticast mode [ 229.893614][T27188] bond_slave_0: entered allmulticast mode [ 229.899433][T27188] bond_slave_1: entered allmulticast mode [ 229.905188][T27188] batadv0: entered allmulticast mode [ 229.910640][T27188] veth0_to_hsr: entered allmulticast mode [ 229.917879][T27188] dummy0: entered allmulticast mode [ 229.923843][T27188] nlmon0: entered promiscuous mode [ 229.929046][T27188] nlmon0: entered allmulticast mode [ 229.935402][T27188] caif0: entered allmulticast mode [ 229.940580][T27188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.956036][T27192] validate_nla: 6 callbacks suppressed [ 229.956147][T27192] netlink: 'syz.5.11699': attribute type 4 has an invalid length. [ 229.974221][T27195] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 229.995740][T27202] netlink: 288 bytes leftover after parsing attributes in process `syz.0.11695'. [ 230.151972][T27225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11707'. [ 230.215899][T27235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11709'. [ 230.285331][T27245] netlink: 160 bytes leftover after parsing attributes in process `syz.3.11715'. [ 230.363214][T27260] netlink: 'syz.2.11722': attribute type 10 has an invalid length. [ 230.375251][T27261] ipt_ECN: cannot use operation on non-tcp rule [ 230.393181][T27260] $H: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 230.451826][T27270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11729'. [ 230.504309][T27282] lo: entered allmulticast mode [ 230.512190][T27282] tunl0: entered allmulticast mode [ 230.518423][T27282] gre0: entered allmulticast mode [ 230.525074][T27282] gretap0: entered allmulticast mode [ 230.533336][T27282] erspan0: entered allmulticast mode [ 230.543680][T27282] ip_vti0: entered allmulticast mode [ 230.553378][T27282] ip6_vti0: entered allmulticast mode [ 230.560084][T27282] sit0: entered allmulticast mode [ 230.573481][T27282] ip6tnl0: entered allmulticast mode [ 230.589941][T27282] ip6gre0: entered allmulticast mode [ 230.596884][T27292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.609066][T27282] syz_tun: entered allmulticast mode [ 230.617338][T27282] ip6gretap0: entered allmulticast mode [ 230.624857][T27282] bridge0: entered allmulticast mode [ 230.630667][T27282] vcan0: entered allmulticast mode [ 230.638002][T27282] bond0: entered allmulticast mode [ 230.643207][T27282] bond_slave_0: entered allmulticast mode [ 230.648985][T27282] bond_slave_1: entered allmulticast mode [ 230.664741][T27282] !: entered allmulticast mode [ 230.680211][T27282] nlmon0: entered allmulticast mode [ 230.692080][T27282] caif0: entered promiscuous mode [ 230.697334][T27282] caif0: entered allmulticast mode [ 230.702640][T27282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.803117][T27308] netlink: 'syz.2.11750': attribute type 4 has an invalid length. [ 230.858587][T27319] ipt_ECN: cannot use operation on non-tcp rule [ 231.289330][T27379] netlink: 'syz.3.11783': attribute type 4 has an invalid length. [ 231.309046][T27381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.352172][T27389] !: renamed from dummy0 (while UP) [ 231.391169][T27392] loop5: detected capacity change from 0 to 1764 [ 231.422078][T27397] loop6: detected capacity change from 0 to 512 [ 231.461454][T27397] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.11791: invalid indirect mapped block 256 (level 2) [ 231.477986][T27397] EXT4-fs (loop6): 2 truncates cleaned up [ 231.484323][T27397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.549780][T27415] IPv6: Can't replace route, no match found [ 231.561914][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.731083][T27438] $H (unregistering): (slave geneve1): Releasing backup interface [ 231.760505][T27438] geneve1: left allmulticast mode [ 231.774934][T27438] $H (unregistering): Released all slaves [ 232.148922][T27503] netdevsim netdevsim6 : set [1, 0] type 2 family 0 port 20001 - 0 [ 232.157568][T27503] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 232.166381][T27503] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 232.175315][T27503] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 232.379549][ T29] kauditd_printk_skb: 10088 callbacks suppressed [ 232.379569][ T29] audit: type=1326 audit(2000000010.166:77177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 232.453460][ T29] audit: type=1326 audit(2000000010.166:77178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 232.477253][ T29] audit: type=1326 audit(2000000010.166:77179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5ba8bde969 code=0x7ffc0000 [ 232.501054][ T29] audit: type=1326 audit(2000000010.166:77180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ff00000 [ 232.524839][ T29] audit: type=1326 audit(2000000010.166:77181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ff00000 [ 232.548642][ T29] audit: type=1326 audit(2000000010.166:77182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ff00000 [ 232.572318][ T29] audit: type=1326 audit(2000000010.166:77183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ff00000 [ 232.596065][ T29] audit: type=1326 audit(2000000010.166:77184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ff00000 [ 232.619745][ T29] audit: type=1326 audit(2000000010.166:77185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ff00000 [ 232.643703][ T29] audit: type=1326 audit(2000000010.166:77186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27532 comm="syz.5.11866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x7ff00000 [ 232.694421][T27552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.737386][T27552] bond_slave_0: left promiscuous mode [ 232.742918][T27552] bond_slave_0: left allmulticast mode [ 232.771880][T27552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.783492][T27552] bond_slave_1: left promiscuous mode [ 232.789132][T27552] bond_slave_1: left allmulticast mode [ 232.803803][T27552] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 232.818552][T27552] batadv0: left promiscuous mode [ 232.823686][T27552] batadv0: left allmulticast mode [ 232.843515][T27552] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 232.857165][T27552] veth0_to_hsr: left promiscuous mode [ 232.862759][T27552] veth0_to_hsr: left allmulticast mode [ 232.884562][T27552] bond0 (unregistering): Released all slaves [ 232.910352][T27563] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 233.221998][T27603] __nla_validate_parse: 6 callbacks suppressed [ 233.222013][T27603] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11888'. [ 233.275859][T27603] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.291733][T27603] bond_slave_0: left promiscuous mode [ 233.297218][T27603] bond_slave_0: left allmulticast mode [ 233.319331][T27603] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.343293][T27609] netlink: 'syz.6.11891': attribute type 2 has an invalid length. [ 233.343388][T27603] bond_slave_1: left promiscuous mode [ 233.351180][T27609] netlink: 'syz.6.11891': attribute type 1 has an invalid length. [ 233.351198][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.6.11891'. [ 233.356752][T27603] bond_slave_1: left allmulticast mode [ 233.396880][T27603] $H (unregistering): (slave macvlan1): Releasing backup interface [ 233.434967][T27603] macvlan1: left promiscuous mode [ 233.440078][T27603] macvlan1: left allmulticast mode [ 233.462048][T27603] $H (unregistering): Released all slaves [ 233.534370][T27623] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11898'. [ 233.684415][T27635] netlink: 'syz.2.11904': attribute type 1 has an invalid length. [ 233.924272][T27657] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 234.019194][T27663] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11919'. [ 234.060190][T27669] netlink: 'syz.3.11920': attribute type 1 has an invalid length. [ 234.395594][T27707] netlink: 'syz.0.11939': attribute type 10 has an invalid length. [ 234.442649][T27712] netlink: 'syz.2.11941': attribute type 13 has an invalid length. [ 234.488422][T27712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.723273][T27742] bridge_slave_0: left allmulticast mode [ 234.729056][T27742] bridge_slave_0: left promiscuous mode [ 234.734814][T27742] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.761480][T27742] bridge_slave_1: left allmulticast mode [ 234.767209][T27742] bridge_slave_1: left promiscuous mode [ 234.772958][T27742] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.791628][T27742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.801735][T27742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.809311][T27742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.049447][T27776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.074314][T27776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.177565][T27788] netlink: 'syz.3.11979': attribute type 13 has an invalid length. [ 235.280502][T27788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.419056][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11997'. [ 235.501840][T27834] SELinux: syz.5.12003 (27834) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 235.544646][T27839] netlink: 'syz.6.12006': attribute type 13 has an invalid length. [ 235.561054][T27842] SELinux: failed to load policy [ 235.657045][T27839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.783942][T27870] xt_TCPMSS: Only works on TCP SYN packets [ 235.805660][T27874] SELinux: failed to load policy [ 235.960595][T27902] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12035'. [ 235.969773][T27902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12035'. [ 235.973877][T27906] SELinux: syz.3.12039 (27906) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 236.021669][T27910] xt_TCPMSS: Only works on TCP SYN packets [ 236.160308][T27932] xt_NFQUEUE: number of total queues is 0 [ 236.368302][T27967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12068'. [ 236.411407][T27975] sctp: [Deprecated]: syz.3.12072 (pid 27975) Use of int in max_burst socket option deprecated. [ 236.411407][T27975] Use struct sctp_assoc_value instead [ 236.511900][T27989] xt_NFQUEUE: number of total queues is 0 [ 236.565176][T28000] mmap: syz.3.12086 (28000): VmData 167489536 exceed data ulimit 67108945. Update limits or use boot option ignore_rlimit_data. [ 236.807273][T28045] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 237.082025][T28090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12127'. [ 237.091182][T28090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12127'. [ 237.092075][T28093] loop5: detected capacity change from 0 to 128 [ 237.118432][T28090] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 237.135787][T28093] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 237.163769][T28090] bond4: entered allmulticast mode [ 237.176584][T28090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.232580][T28108] netlink: 'syz.0.12135': attribute type 21 has an invalid length. [ 237.258135][T28110] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 237.358386][T28123] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 237.578468][T28147] netlink: 'syz.0.12154': attribute type 11 has an invalid length. [ 237.667764][T28159] sctp: [Deprecated]: syz.2.12160 (pid 28159) Use of int in max_burst socket option deprecated. [ 237.667764][T28159] Use struct sctp_assoc_value instead [ 237.806506][T28176] loop6: detected capacity change from 0 to 128 [ 237.839727][T28176] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 237.939330][T28192] sctp: [Deprecated]: syz.0.12176 (pid 28192) Use of int in max_burst socket option deprecated. [ 237.939330][T28192] Use struct sctp_assoc_value instead [ 237.988122][T28196] loop6: detected capacity change from 0 to 512 [ 238.020439][T28196] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 238.045143][T28196] EXT4-fs (loop6): orphan cleanup on readonly fs [ 238.072608][T28196] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.12179: Block bitmap for bg 0 marked uninitialized [ 238.086287][T28196] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 238.096994][T28210] netlink: 'syz.3.12183': attribute type 1 has an invalid length. [ 238.098092][T28196] EXT4-fs (loop6): 1 orphan inode deleted [ 238.104915][T28210] __nla_validate_parse: 2 callbacks suppressed [ 238.104990][T28210] netlink: 228 bytes leftover after parsing attributes in process `syz.3.12183'. [ 238.126826][T28196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 238.167090][T28196] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 238.213969][T28222] netlink: 'syz.3.12189': attribute type 21 has an invalid length. [ 238.235390][T28222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12189'. [ 238.237106][T28196] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 238.276263][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.285372][ T29] kauditd_printk_skb: 8783 callbacks suppressed [ 238.285386][ T29] audit: type=1400 audit(2000000016.363:85970): avc: denied { write } for pid=28224 comm="syz.2.12198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.285663][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.332679][T28229] batadv_slave_0: entered promiscuous mode [ 238.338663][T28229] batadv_slave_0: entered allmulticast mode [ 238.428808][T28244] usb usb1: usbfs: process 28244 (syz.0.12199) did not claim interface 0 before use [ 238.497854][T28249] loop5: detected capacity change from 0 to 4096 [ 238.534693][T28249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.583377][T28266] netlink: 'syz.6.12211': attribute type 10 has an invalid length. [ 238.591403][T28266] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12211'. [ 238.618238][T28266] vlan0: entered promiscuous mode [ 238.623575][T28266] vlan0: entered allmulticast mode [ 238.628766][T28266] veth0_vlan: entered allmulticast mode [ 238.634609][T28266] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 238.652358][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.739224][T28285] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28285 comm=syz.0.12220 [ 238.874505][T28300] netlink: 'syz.5.12226': attribute type 10 has an invalid length. [ 238.882520][T28300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12226'. [ 238.920134][T28311] xt_hashlimit: max too large, truncated to 1048576 [ 239.069675][T28335] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12244'. [ 239.252094][T28364] usb usb1: usbfs: process 28364 (syz.6.12260) did not claim interface 0 before use [ 239.266089][T28363] loop5: detected capacity change from 0 to 1024 [ 239.268924][T28366] loop2: detected capacity change from 0 to 512 [ 239.277030][T28363] EXT4-fs: Ignoring removed orlov option [ 239.284622][T28363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.292664][T28366] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 239.331255][T28366] EXT4-fs (loop2): orphan cleanup on readonly fs [ 239.357640][T28363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.382166][T28366] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.12259: Block bitmap for bg 0 marked uninitialized [ 239.434473][T28366] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 239.480087][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.493142][T28366] EXT4-fs (loop2): 1 orphan inode deleted [ 239.514217][T28366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 239.548656][T28366] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 239.596030][T28366] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 239.669468][ T4110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.880475][ T29] audit: type=1400 audit(2000000018.044:85971): avc: denied { read write } for pid=28429 comm="syz.3.12290" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.880513][ T29] audit: type=1400 audit(2000000018.044:85972): avc: denied { open } for pid=28429 comm="syz.3.12290" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.937012][ T29] audit: type=1400 audit(2000000018.096:85973): avc: denied { ioctl } for pid=28429 comm="syz.3.12290" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.973330][T28436] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12293'. [ 240.042431][T28440] loop2: detected capacity change from 0 to 1024 [ 240.049257][T28440] EXT4-fs: Ignoring removed orlov option [ 240.055042][T28440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.063277][T28442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28442 comm=syz.6.12295 [ 240.119849][T28440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.141142][ T29] audit: type=1400 audit(2000000018.317:85974): avc: denied { bind } for pid=28451 comm="syz.3.12300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.185185][ T29] audit: type=1326 audit(2000000018.348:85975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28453 comm="syz.0.12302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 240.209039][ T29] audit: type=1326 audit(2000000018.348:85976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28453 comm="syz.0.12302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 240.232954][ T29] audit: type=1326 audit(2000000018.348:85977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28453 comm="syz.0.12302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 240.257069][ T29] audit: type=1326 audit(2000000018.348:85978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28453 comm="syz.0.12302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 240.305981][ T4110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.384509][T28476] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12306'. [ 240.395706][T28477] macsec0: entered promiscuous mode [ 240.401004][T28477] macsec0: entered allmulticast mode [ 240.406435][T28477] veth1_macvtap: entered allmulticast mode [ 240.440312][T28476] 0: renamed from hsr_slave_1 [ 240.471564][T28476] 0: entered allmulticast mode [ 240.486592][T28476] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 240.680093][T28516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12332'. [ 240.735999][ T29] audit: type=1400 audit(2000000018.936:85979): avc: granted { setsecparam } for pid=28522 comm="syz.3.12335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 240.809184][T28534] vlan0: entered promiscuous mode [ 240.865081][T28544] macsec0: entered promiscuous mode [ 240.870695][T28544] macsec0: entered allmulticast mode [ 240.876043][T28544] veth1_macvtap: entered allmulticast mode [ 240.985478][T28560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12354'. [ 240.985914][T28559] netlink: 'syz.3.12351': attribute type 4 has an invalid length. [ 241.002533][T28559] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.12351'. [ 241.095495][T28574] netlink: 'syz.0.12360': attribute type 21 has an invalid length. [ 241.211167][T28590] netlink: 'syz.3.12368': attribute type 3 has an invalid length. [ 241.216575][T28591] netlink: 'syz.0.12369': attribute type 3 has an invalid length. [ 241.518215][T28627] ip6erspan0: entered promiscuous mode [ 241.525243][T28629] tmpfs: Bad value for 'mpol' [ 241.763427][T28666] netlink: 'syz.5.12415': attribute type 4 has an invalid length. [ 241.857958][T28681] netlink: 'syz.0.12423': attribute type 4 has an invalid length. [ 242.153384][T28718] netlink: 'syz.2.12431': attribute type 4 has an invalid length. [ 242.178887][T28724] netlink: 'syz.5.12433': attribute type 39 has an invalid length. [ 242.311000][T28739] loop2: detected capacity change from 0 to 1024 [ 242.327185][T28744] tmpfs: Bad value for 'mpol' [ 242.350494][T28739] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.12440: Failed to acquire dquot type 0 [ 242.400969][T28739] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 242.422495][T28739] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.12440: corrupted inode contents [ 242.437491][T28739] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.12440: mark_inode_dirty error [ 242.450903][T28739] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.12440: corrupted inode contents [ 242.463190][T28739] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.12440: mark_inode_dirty error [ 242.476424][T28739] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.12440: corrupted inode contents [ 242.490455][T28739] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 242.499713][T28739] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.12440: corrupted inode contents [ 242.513258][T28739] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.12440: mark_inode_dirty error [ 242.524776][T28739] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 242.543334][T28739] EXT4-fs (loop2): 1 truncate cleaned up [ 242.550337][T28739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.634023][ T4110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.759046][T28790] netlink: 'syz.2.12466': attribute type 39 has an invalid length. [ 242.813887][T28798] syz.5.12469 (28798): /proc/28795/oom_adj is deprecated, please use /proc/28795/oom_score_adj instead. [ 242.893045][T28809] netlink: 'syz.0.12476': attribute type 16 has an invalid length. [ 242.896233][T28810] __nla_validate_parse: 9 callbacks suppressed [ 242.896254][T28810] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12475'. [ 242.932101][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12475'. [ 242.989102][T28822] netlink: 220 bytes leftover after parsing attributes in process `syz.5.12481'. [ 242.998407][T28822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12481'. [ 243.007511][T28822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12481'. [ 243.024013][T28822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12481'. [ 243.034349][T28822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12481'. [ 243.102461][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 243.102475][ T29] audit: type=1400 audit(2000000021.426:86049): avc: denied { create } for pid=28833 comm="syz.0.12486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 243.164119][ T29] audit: type=1400 audit(2000000021.426:86050): avc: denied { write } for pid=28833 comm="syz.0.12486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 243.412601][ T29] audit: type=1400 audit(2000000021.741:86051): avc: denied { create } for pid=28869 comm="syz.0.12505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.496616][ T29] audit: type=1400 audit(2000000021.751:86052): avc: denied { ioctl } for pid=28869 comm="syz.0.12505" path="socket:[84345]" dev="sockfs" ino=84345 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 243.565414][T28884] loop0: detected capacity change from 0 to 1024 [ 243.586409][ T29] audit: type=1400 audit(2000000021.919:86053): avc: denied { setopt } for pid=28887 comm="syz.3.12514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.618196][T28891] bridge0: left promiscuous mode [ 243.623272][T28891] bridge0: left allmulticast mode [ 243.636939][T28896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12517'. [ 243.639412][T28884] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 243.652506][T28896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12517'. [ 243.655159][T28884] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 243.673716][T28884] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.12512: Failed to acquire dquot type 0 [ 243.697372][T28884] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 243.746804][T28884] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.12512: corrupted inode contents [ 243.760471][T28884] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.12512: mark_inode_dirty error [ 243.785609][T28884] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.12512: corrupted inode contents [ 243.799452][T28884] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.12512: mark_inode_dirty error [ 243.838454][T28884] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.12512: corrupted inode contents [ 243.876015][T28916] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12526'. [ 243.960485][T28884] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 243.990003][T28884] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.12512: corrupted inode contents [ 244.050750][T28884] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.12512: mark_inode_dirty error [ 244.107675][T28884] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 244.146471][T28884] EXT4-fs (loop0): 1 truncate cleaned up [ 244.163500][T28884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.253328][ T4106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.352830][ T29] audit: type=1400 audit(2000000022.728:86054): avc: denied { read } for pid=28964 comm="syz.5.12550" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 244.354969][T28966] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.555357][ T29] audit: type=1400 audit(2000000022.728:86055): avc: denied { open } for pid=28964 comm="syz.5.12550" path="net:[4026532642]" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 244.578962][ T29] audit: type=1400 audit(2000000022.728:86056): avc: denied { create } for pid=28964 comm="syz.5.12550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.673645][T28999] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 244.767847][T29012] lo: left promiscuous mode [ 244.781544][T29012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.838059][T29019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29019 comm=syz.0.12579 [ 245.021139][T29047] lo: left promiscuous mode [ 245.026732][T29047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.068565][T29058] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=29058 comm=syz.6.12597 [ 245.119974][T29063] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 245.200363][T29075] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.311510][T29092] loop3: detected capacity change from 0 to 128 [ 245.347261][T29097] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 245.625574][T29133] loop6: detected capacity change from 0 to 128 [ 245.632231][T29136] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 245.638786][T29136] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.647121][T29136] vhci_hcd vhci_hcd.0: Device attached [ 245.724576][T29136] vhci_hcd vhci_hcd.0: port 0 already used [ 245.740543][T29137] vhci_hcd: connection closed [ 245.743071][ T51] vhci_hcd: stop threads [ 245.752272][ T51] vhci_hcd: release socket [ 245.756746][ T51] vhci_hcd: disconnect device [ 245.902229][T29176] loop0: detected capacity change from 0 to 128 [ 245.969613][T29185] loop2: detected capacity change from 0 to 1024 [ 246.011461][T29185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.069741][ T4110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.138231][T29206] 0: renamed from hsr0 [ 246.155875][T29206] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.166111][T29206] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.179869][T29206] 0: entered allmulticast mode [ 246.184899][T29206] hsr_slave_0: entered allmulticast mode [ 246.190761][T29206] hsr_slave_1: entered allmulticast mode [ 246.200159][T29206] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 246.905455][T29311] SELinux: failed to load policy [ 246.957572][T29321] loop3: detected capacity change from 0 to 1024 [ 247.010899][T29321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.098086][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.116216][T29343] gre2: entered promiscuous mode [ 247.121233][T29343] gre2: entered allmulticast mode [ 247.355495][T29384] 0: renamed from hsr0 (while UP) [ 247.392266][T29384] 0: entered allmulticast mode [ 247.397205][T29384] hsr_slave_0: entered allmulticast mode [ 247.402908][T29384] hsr_slave_1: entered allmulticast mode [ 247.414395][T29384] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 247.617799][T29427] 0: renamed from hsr0 [ 247.653226][T29427] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.663553][T29427] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.704944][T29427] 0: entered allmulticast mode [ 247.709888][T29427] hsr_slave_0: entered allmulticast mode [ 247.715631][T29427] hsr_slave_1: entered allmulticast mode [ 247.725130][T29427] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 247.799102][T29447] loop5: detected capacity change from 0 to 2048 [ 247.822160][T29447] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 247.866720][T29447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.910048][T29447] EXT4-fs error (device loop5): ext4_find_extent:902: inode #2: comm syz.5.12776: inode has invalid extent depth: 6 [ 247.937349][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.046738][T29474] __nla_validate_parse: 17 callbacks suppressed [ 248.046758][T29474] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12788'. [ 248.087750][T29474] 0: renamed from hsr0 [ 248.109665][T29474] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.119950][T29474] 0: Slave B (c0) is not up; please bring it up to get a fully working HSR network [ 248.143322][T29474] 0: entered allmulticast mode [ 248.148279][T29474] hsr_slave_0: entered allmulticast mode [ 248.164696][T29474] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 248.183075][T29489] validate_nla: 9 callbacks suppressed [ 248.183097][T29489] netlink: 'syz.3.12796': attribute type 4 has an invalid length. [ 248.196664][T29489] netlink: 17 bytes leftover after parsing attributes in process `syz.3.12796'. [ 248.219699][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 248.219714][ T29] audit: type=1400 audit(2000000026.803:86093): avc: denied { read append } for pid=29490 comm="syz.5.12802" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.249738][ T29] audit: type=1400 audit(2000000026.803:86094): avc: denied { open } for pid=29490 comm="syz.5.12802" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.305673][ T29] audit: type=1400 audit(2000000026.803:86095): avc: denied { ioctl } for pid=29490 comm="syz.5.12802" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.410396][T29510] netlink: 'syz.6.12811': attribute type 21 has an invalid length. [ 248.448292][T29510] netlink: 152 bytes leftover after parsing attributes in process `syz.6.12811'. [ 248.456774][T29515] xt_CT: No such helper "pptp" [ 248.523230][T29520] xt_CT: No such helper "netbios-ns" [ 248.540744][T29529] netlink: 'syz.5.12819': attribute type 10 has an invalid length. [ 248.618074][T29539] netlink: 'syz.2.12825': attribute type 4 has an invalid length. [ 248.626082][T29539] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12825'. [ 248.653655][T29543] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12824'. [ 248.680422][T29543] 0: renamed from hsr0 (while UP) [ 248.687383][T29543] 0: entered allmulticast mode [ 248.692332][T29543] hsr_slave_0: entered allmulticast mode [ 248.698121][T29543] hsr_slave_1: entered allmulticast mode [ 248.722689][T29543] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 248.844721][ T29] audit: type=1400 audit(2000000027.433:86096): avc: denied { create } for pid=29565 comm="syz.0.12838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 248.864468][ T29] audit: type=1400 audit(2000000027.433:86097): avc: denied { setopt } for pid=29565 comm="syz.0.12838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 248.867595][T29574] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.002407][T29585] loop3: detected capacity change from 0 to 2048 [ 249.030936][T29585] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 249.073989][T29585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.131315][T29585] EXT4-fs error (device loop3): ext4_find_extent:902: inode #2: comm syz.3.12847: inode has invalid extent depth: 6 [ 249.150244][T29605] xt_CT: No such helper "netbios-ns" [ 249.231500][ T4116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.253783][ T29] audit: type=1400 audit(2000000027.885:86098): avc: denied { append } for pid=29624 comm="syz.2.12865" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.292131][T29623] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12862'. [ 249.301424][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12867'. [ 249.348983][T29631] netlink: 'syz.2.12868': attribute type 10 has an invalid length. [ 249.380695][T29631] lo: left promiscuous mode [ 249.388414][ T29] audit: type=1326 audit(2000000028.022:86099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29638 comm="syz.5.12871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ba8bde969 code=0x0 [ 249.454773][T29644] xt_CT: No such helper "netbios-ns" [ 249.466845][T29648] xt_CT: No such helper "pptp" [ 249.530390][T29663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12881'. [ 249.669505][ T29] audit: type=1326 audit(2000000028.326:86100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29684 comm="syz.0.12893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 249.725160][ T29] audit: type=1326 audit(2000000028.347:86101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29684 comm="syz.0.12893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 249.749074][ T29] audit: type=1326 audit(2000000028.347:86102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29684 comm="syz.0.12893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f151aace969 code=0x7ffc0000 [ 249.895809][T29707] netlink: 'syz.3.12903': attribute type 21 has an invalid length. [ 249.910869][T29707] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12903'. [ 249.920201][T29712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12907'. [ 249.991115][T29719] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 250.037117][T29729] netlink: 'syz.6.12916': attribute type 11 has an invalid length. [ 250.073443][T29736] netlink: 'syz.2.12919': attribute type 64 has an invalid length. [ 250.458357][T29802] netlink: 'syz.5.12952': attribute type 11 has an invalid length. [ 250.466398][T29803] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 250.613160][T29828] netlink: 'syz.0.12965': attribute type 21 has an invalid length. [ 250.769259][T29851] loop5: detected capacity change from 0 to 2048 [ 250.775871][T29854] SELinux: syz.0.12978 (29854) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 250.847502][T29851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.884909][T29872] random: crng reseeded on system resumption [ 250.968430][ T4104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.113979][T29903] No such timeout policy "syz0" [ 251.296541][T29930] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 38193 - 0 [ 251.305662][T29930] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 38193 - 0 [ 251.314659][T29930] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 38193 - 0 [ 251.323993][T29933] No such timeout policy "syz0" [ 251.324260][T29930] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 59445 - 0 [ 251.337764][T29930] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 59445 - 0 [ 251.346703][T29930] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 59445 - 0 [ 251.358661][T29930] geneve3: entered promiscuous mode [ 251.364051][T29930] geneve3: entered allmulticast mode [ 251.464208][T29946] loop0: detected capacity change from 0 to 128 [ 251.701614][T29962] Invalid ELF header magic: != ELF [ 252.161891][T29994] loop0: detected capacity change from 0 to 2048 [ 252.214285][T29994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.358153][ T4106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.486668][T30020] xt_TCPMSS: Only works on TCP SYN packets [ 252.708926][T30038] loop6: detected capacity change from 0 to 2048 [ 252.726011][T30037] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 49418 - 0 [ 252.734942][T30037] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 49418 - 0 [ 252.743857][T30037] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 49418 - 0 [ 252.752692][T30037] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 49418 - 0 [ 252.799284][T30037] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 57736 - 0 [ 252.808173][T30037] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 57736 - 0 [ 252.817067][T30037] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 57736 - 0 [ 252.826088][T30037] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 57736 - 0 [ 252.868656][T30043] __nla_validate_parse: 20 callbacks suppressed [ 252.868678][T30043] netlink: 348 bytes leftover after parsing attributes in process `syz.0.13066'. [ 252.886835][T30037] geneve4: entered promiscuous mode [ 252.892119][T30037] geneve4: entered allmulticast mode [ 252.904344][T30038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.991562][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 252.991581][ T29] audit: type=1400 audit(2000000031.813:86384): avc: denied { read write } for pid=4104 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.046958][ T4125] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.057871][ T29] audit: type=1400 audit(2000000031.813:86385): avc: denied { open } for pid=4104 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.082218][ T29] audit: type=1400 audit(2000000031.813:86386): avc: denied { ioctl } for pid=4104 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.108074][ T29] audit: type=1400 audit(2000000031.855:86387): avc: denied { unmount } for pid=4125 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 253.127890][ T29] audit: type=1400 audit(2000000031.866:86388): avc: denied { read write } for pid=4110 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.152286][ T29] audit: type=1400 audit(2000000031.866:86389): avc: denied { open } for pid=4110 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.176554][ T29] audit: type=1400 audit(2000000031.866:86390): avc: denied { ioctl } for pid=4110 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.202359][ T29] audit: type=1400 audit(2000000031.866:86391): avc: denied { read write } for pid=4116 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.226678][ T29] audit: type=1400 audit(2000000031.866:86392): avc: denied { read write open } for pid=4116 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.251902][ T29] audit: type=1400 audit(2000000031.866:86393): avc: denied { ioctl } for pid=4116 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.385445][T30073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13081'. [ 253.625585][T30089] xt_TCPMSS: Only works on TCP SYN packets [ 253.700495][T30091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.086983][T30125] xt_TCPMSS: Only works on TCP SYN packets [ 254.169395][T30132] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13106'. [ 254.780537][T30177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13131'. [ 254.798144][T30179] netlink: 96 bytes leftover after parsing attributes in process `syz.3.13132'. [ 255.154136][ T3302] ================================================================== [ 255.162278][ T3302] BUG: KCSAN: data-race in do_select / pollwake [ 255.168569][ T3302] [ 255.170910][ T3302] write to 0xffffc900014f7a00 of 4 bytes by interrupt on cpu 1: [ 255.178558][ T3302] pollwake+0xb6/0x100 [ 255.182654][ T3302] __wake_up_sync_key+0x52/0x80 [ 255.187514][ T3302] sock_def_readable+0x70/0x190 [ 255.192381][ T3302] tcp_data_ready+0x1ab/0x290 [ 255.197068][ T3302] tcp_data_queue+0x156c/0x3080 [ 255.201933][ T3302] tcp_rcv_established+0x90a/0xea0 [ 255.207075][ T3302] tcp_v4_do_rcv+0x672/0x740 [ 255.211680][ T3302] tcp_v4_rcv+0x1bcf/0x1f60 [ 255.216198][ T3302] ip_protocol_deliver_rcu+0x397/0x780 [ 255.221685][ T3302] ip_local_deliver_finish+0x184/0x220 [ 255.227181][ T3302] ip_local_deliver+0xe8/0x1c0 [ 255.231961][ T3302] ip_sublist_rcv+0x56b/0x650 [ 255.236658][ T3302] ip_list_rcv+0x261/0x290 [ 255.241093][ T3302] __netif_receive_skb_list_core+0x4dc/0x500 [ 255.247084][ T3302] netif_receive_skb_list_internal+0x487/0x600 [ 255.253252][ T3302] napi_complete_done+0x1a3/0x410 [ 255.258287][ T3302] virtnet_poll+0x18bf/0x1d00 [ 255.262971][ T3302] __napi_poll+0x66/0x3a0 [ 255.267323][ T3302] net_rx_action+0x38e/0x7b0 [ 255.271925][ T3302] handle_softirqs+0xba/0x290 [ 255.276610][ T3302] __irq_exit_rcu+0x3a/0xc0 [ 255.281136][ T3302] common_interrupt+0x83/0x90 [ 255.285824][ T3302] asm_common_interrupt+0x26/0x40 [ 255.290854][ T3302] kcsan_setup_watchpoint+0x415/0x430 [ 255.296252][ T3302] security_compute_av+0x380/0x920 [ 255.301379][ T3302] avc_compute_av+0x5a/0x3e0 [ 255.305974][ T3302] avc_perm_nonode+0x5e/0xe0 [ 255.310567][ T3302] avc_has_perm_noaudit+0x156/0x200 [ 255.315767][ T3302] avc_has_perm+0x61/0x150 [ 255.320188][ T3302] may_create+0x2a1/0x2f0 [ 255.324536][ T3302] selinux_inode_mkdir+0x22/0x30 [ 255.329497][ T3302] security_inode_mkdir+0x7a/0xc0 [ 255.334552][ T3302] vfs_mkdir+0x18c/0x340 [ 255.338803][ T3302] do_mkdirat+0x132/0x3f0 [ 255.343148][ T3302] __x64_sys_mkdirat+0x4c/0x60 [ 255.347924][ T3302] x64_sys_call+0x2be0/0x2fb0 [ 255.352626][ T3302] do_syscall_64+0xd0/0x1a0 [ 255.357139][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.363042][ T3302] [ 255.365367][ T3302] read to 0xffffc900014f7a00 of 4 bytes by task 3302 on cpu 0: [ 255.372939][ T3302] do_select+0xe41/0xf40 [ 255.377198][ T3302] core_sys_select+0x3b2/0x600 [ 255.381986][ T3302] __se_sys_pselect6+0x216/0x280 [ 255.386938][ T3302] __x64_sys_pselect6+0x78/0x90 [ 255.391804][ T3302] x64_sys_call+0x1caa/0x2fb0 [ 255.396493][ T3302] do_syscall_64+0xd0/0x1a0 [ 255.401010][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.406937][ T3302] [ 255.409264][ T3302] value changed: 0x00000000 -> 0x00000001 [ 255.414981][ T3302] [ 255.417307][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 255.423478][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(voluntary) [ 255.436072][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.446135][ T3302] ================================================================== SYZFAIL: failed to send rpc fd=3 want=192 sent=0 n=-1 (errno 32: Broken pipe) [ 255.785802][ T2036] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 255.819391][ T2036] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 255.894633][ T2036] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 255.951966][ T2036] netdevsim netdevsim6 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 256.342219][ T2036] bond1 (unregistering): Released all slaves [ 256.350446][ T2036] bond2 (unregistering): Released all slaves [ 256.358339][ T2036] bond3 (unregistering): Released all slaves [ 256.403045][ T2036] hsr_slave_0: left promiscuous mode [ 256.410561][ T2036] hsr_slave_1: left promiscuous mode [ 256.723433][ T2036] IPVS: stop unused estimator thread 0... [ 256.765340][ T2036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.775753][ T2036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38193 - 0 [ 256.786212][ T2036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 59445 - 0 [ 256.841610][ T2036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.852040][ T2036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38193 - 0 [ 256.862658][ T2036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 59445 - 0 [ 256.906558][ T2036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.916954][ T2036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38193 - 0 [ 256.927452][ T2036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 59445 - 0 [ 257.052213][ T2036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.140640][ T2036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.210813][ T2036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.285241][ T2036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.623055][ T2036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 257.633379][ T2036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49418 - 0 [ 257.643928][ T2036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 57736 - 0 [ 257.703094][ T2036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 257.713424][ T2036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49418 - 0 [ 257.723932][ T2036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 57736 - 0 [ 257.759970][ T29] kauditd_printk_skb: 762 callbacks suppressed [ 257.759984][ T29] audit: type=1400 audit(2000000036.823:87156): avc: denied { search } for pid=30340 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.789476][ T29] audit: type=1400 audit(2000000036.823:87157): avc: denied { read } for pid=30340 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.811644][ T29] audit: type=1400 audit(2000000036.823:87158): avc: denied { read open } for pid=30340 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.837424][ T29] audit: type=1400 audit(2000000036.823:87159): avc: denied { getattr } for pid=30340 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.863126][ T29] audit: type=1400 audit(2000000036.855:87160): avc: denied { search } for pid=30342 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.885577][ T29] audit: type=1400 audit(2000000036.855:87161): avc: denied { search } for pid=30342 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.908519][ T29] audit: type=1400 audit(2000000036.855:87162): avc: denied { search } for pid=30343 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.930941][ T29] audit: type=1400 audit(2000000036.855:87163): avc: denied { read } for pid=30343 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.952954][ T29] audit: type=1400 audit(2000000036.855:87164): avc: denied { read open } for pid=30343 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 257.978644][ T29] audit: type=1400 audit(2000000036.855:87165): avc: denied { getattr } for pid=30343 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 258.004821][ T2036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 258.015177][ T2036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49418 - 0 [ 258.025644][ T2036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 57736 - 0 [ 258.085878][ T2036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 258.096167][ T2036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49418 - 0 [ 258.106665][ T2036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 57736 - 0 [ 258.218201][ T2036] bridge_slave_1: left allmulticast mode [ 258.223888][ T2036] bridge_slave_1: left promiscuous mode [ 258.229630][ T2036] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.260029][ T2036] bridge_slave_0: left allmulticast mode [ 258.265924][ T2036] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.275664][ T2036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.284439][ T2036] bond_slave_0: left promiscuous mode [ 259.289862][ T2036] bond_slave_0: left allmulticast mode [ 259.296556][ T2036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.305831][ T2036] bond_slave_1: left promiscuous mode [ 259.311506][ T2036] bond_slave_1: left allmulticast mode [ 259.317708][ T2036] bond0 (unregistering): Released all slaves [ 259.326879][ T2036] bond1 (unregistering): Released all slaves [ 259.335297][ T2036] bond2 (unregistering): Released all slaves [ 259.343670][ T2036] bond3 (unregistering): Released all slaves [ 259.352308][ T2036] bond4 (unregistering): Released all slaves [ 259.360903][ T2036] bond5 (unregistering): Released all slaves [ 259.369930][ T2036] bond1 (unregistering): Released all slaves [ 259.377870][ T2036] bond0 (unregistering): Released all slaves [ 259.386374][ T2036] bond2 (unregistering): Released all slaves [ 259.394478][ T2036] bond1 (unregistering): Released all slaves [ 259.402718][ T2036] bond2 (unregistering): Released all slaves [ 259.411185][ T2036] bond3 (unregistering): Released all slaves [ 259.419780][ T2036] bond4 (unregistering): Released all slaves [ 259.428276][ T2036] bond0 (unregistering): Released all slaves [ 259.436452][ T2036] bond5 (unregistering): Released all slaves [ 259.445107][ T2036] bond1 (unregistering): Released all slaves [ 259.453381][ T2036] bond2 (unregistering): Released all slaves [ 259.461459][ T2036] bond0 (unregistering): Released all slaves [ 259.469883][ T2036] bond3 (unregistering): Released all slaves [ 259.532798][ T2036] IPVS: stopping backup sync thread 27563 ... [ 259.542110][ T2036] hsr_slave_0: left promiscuous mode [ 259.547810][ T2036] hsr_slave_1: left promiscuous mode [ 259.554437][ T2036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.562569][ T2036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.570038][ T2036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.582697][ T2036] hsr_slave_0: left promiscuous mode [ 259.589116][ T2036] hsr_slave_1: left promiscuous mode [ 259.596583][ T2036] hsr_slave_0: left promiscuous mode [ 259.603949][ T2036] hsr_slave_1: left promiscuous mode [ 259.612623][ T2036] hsr_slave_0: left promiscuous mode [ 259.620209][ T2036] 0: left promiscuous mode [ 259.632524][ T2036] veth1_macvtap: left promiscuous mode [ 259.638267][ T2036] veth0_macvtap: left promiscuous mode [ 259.643879][ T2036] veth1_vlan: left promiscuous mode [ 259.650039][ T2036] veth1_macvtap: left allmulticast mode [ 259.655841][ T2036] veth1_macvtap: left promiscuous mode [ 259.662377][ T2036] veth1_vlan: left promiscuous mode [ 259.669147][ T2036] veth0_vlan: left promiscuous mode [ 259.676195][ T2036] veth1_macvtap: left allmulticast mode [ 260.881070][ T2036] IPVS: stop unused estimator thread 0... [ 262.529990][ T29] kauditd_printk_skb: 1264 callbacks suppressed [ 262.530010][ T29] audit: type=1400 audit(2000000041.833:88430): avc: denied { search } for pid=30676 comm="sed" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.558698][ T29] audit: type=1400 audit(2000000041.833:88431): avc: denied { read } for pid=30676 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.580759][ T29] audit: type=1400 audit(2000000041.833:88432): avc: denied { read open } for pid=30676 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.606368][ T29] audit: type=1400 audit(2000000041.833:88433): avc: denied { getattr } for pid=30676 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.631703][ T29] audit: type=1400 audit(2000000041.843:88434): avc: denied { search } for pid=30668 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.657366][ T29] audit: type=1400 audit(2000000041.843:88435): avc: denied { search } for pid=30668 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.680369][ T29] audit: type=1400 audit(2000000041.843:88436): avc: denied { getattr } for pid=30668 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.705949][ T29] audit: type=1400 audit(2000000041.843:88437): avc: denied { write } for pid=30668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.729120][ T29] audit: type=1400 audit(2000000041.843:88438): avc: denied { add_name } for pid=30668 comm="dhcpcd-run-hook" name="resolv.conf.lapb15.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.737638][T30693] audit: audit_backlog=65 > audit_backlog_limit=64