last executing test programs: 502.419304ms ago: executing program 2 (id=2393): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r0) 466.514597ms ago: executing program 0 (id=2396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[], 0x48) 442.019749ms ago: executing program 2 (id=2398): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 380.694205ms ago: executing program 0 (id=2401): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_robust_list(&(0x7f00000003c0), 0x18) 380.279715ms ago: executing program 1 (id=2403): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="45aa4b0634", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002680)="3062fdb1ce438613179d", 0xa}], 0x1}}], 0x4, 0x28048005) 360.563586ms ago: executing program 0 (id=2404): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0xfffffffffffffffe, 0x0) 297.271032ms ago: executing program 1 (id=2406): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) 297.137742ms ago: executing program 0 (id=2409): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r0, 0x0, 0x0) 297.070662ms ago: executing program 4 (id=2410): unshare(0x0) fchmod(0xffffffffffffffff, 0x2) 243.301228ms ago: executing program 4 (id=2411): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fec010018000000000000000c11a81c88ce54e4fb000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 219.59499ms ago: executing program 3 (id=2412): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000840)=@ethtool_gstrings={0x1b, 0x7}}) 177.273444ms ago: executing program 0 (id=2413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 177.218534ms ago: executing program 1 (id=2414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003a80)=ANY=[@ANYBLOB="64000000020601010000000000000000b600000205000400010000000900020073797a32000000000500010007000000100003006269746d61703a706f72740005000500050000001c000780060005000d210000060004404eca5f00080006"], 0x64}, 0x1, 0x0, 0x0, 0x200008a1}, 0x2000880) 177.186854ms ago: executing program 2 (id=2415): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b"], 0x28}}, 0x0) 177.069964ms ago: executing program 0 (id=2416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="7a5053f56ee77b4a53ef2a2d86dd", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 174.847874ms ago: executing program 2 (id=2417): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') read$char_usb(r0, &(0x7f0000000280)=""/247, 0xf7) 169.909744ms ago: executing program 3 (id=2418): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000740)=[@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x37a}], 0x1c) 148.838316ms ago: executing program 4 (id=2419): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) 94.201491ms ago: executing program 3 (id=2420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) 94.086201ms ago: executing program 4 (id=2421): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x30, 0x1e, 0xd, {0x10, @esp_ip4_spec={@multicast2, @remote, 0x6, 0x5}, {0x0, @remote, 0xfce6, 0x0, [0x898, 0xfffeffff]}, @hdata="b19bb44f4d4f84bcda44603c252052d6eae9799d3aa464f49c686edbaa5d7afbfe498350e7e55441e74e958091d3a3a1148f1a8b", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x7, 0x9, [0x8, 0x81]}, 0x9, 0x3}}}) 93.932151ms ago: executing program 4 (id=2422): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x80, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x3, 0x0, 0x0, 0x1, 0x101, 0x0}) 92.460611ms ago: executing program 1 (id=2430): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40002083, 0x0) 87.858902ms ago: executing program 2 (id=2423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="b412000001050108000000000000000005000007540201000100000002000000760001000001010073797a3100000000000000000000000000000000000000000000000000000000baf09eb010e22e04ed0447f6ad4e5bf42748b406307ba52bb4954b282008af5bc2cdb19586c5ae1a713c14dd5b0857f77302dc163339f4a58f640197841dd62fbce601004100020000000200000033000700010000"], 0x12b4}, 0x1, 0x0, 0x0, 0x24008840}, 0xc000044) 58.532354ms ago: executing program 3 (id=2424): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x2000000) 58.125905ms ago: executing program 2 (id=2425): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x1e}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 54.744215ms ago: executing program 1 (id=2426): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semop(0x0, 0x0, 0x0) 34.723127ms ago: executing program 3 (id=2427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 301.55µs ago: executing program 3 (id=2428): set_mempolicy(0x1, 0x0, 0x7582) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 205.56µs ago: executing program 1 (id=2429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 0s ago: executing program 4 (id=2431): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 34.022937][ T29] audit: type=1400 audit(1767164618.007:62): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.046065][ T29] audit: type=1400 audit(1767164618.037:63): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.048186][ T3311] cgroup: Unknown subsys name 'net' [ 34.073929][ T29] audit: type=1400 audit(1767164618.057:64): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.195169][ T3311] cgroup: Unknown subsys name 'cpuset' [ 34.201385][ T3311] cgroup: Unknown subsys name 'rlimit' [ 34.332431][ T29] audit: type=1400 audit(1767164618.317:65): avc: denied { setattr } for pid=3311 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.363033][ T29] audit: type=1400 audit(1767164618.317:66): avc: denied { create } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.383525][ T29] audit: type=1400 audit(1767164618.317:67): avc: denied { write } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.403907][ T29] audit: type=1400 audit(1767164618.317:68): avc: denied { read } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.424248][ T29] audit: type=1400 audit(1767164618.317:69): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.443290][ T3314] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.449238][ T29] audit: type=1400 audit(1767164618.317:70): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.480956][ T29] audit: type=1400 audit(1767164618.347:71): avc: denied { read } for pid=3049 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.516839][ T3311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.668198][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 35.706949][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.715837][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.747923][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 35.779920][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 35.818633][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.825772][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.832901][ T3324] bridge_slave_0: entered allmulticast mode [ 35.839500][ T3324] bridge_slave_0: entered promiscuous mode [ 35.850067][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.857325][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.864543][ T3324] bridge_slave_1: entered allmulticast mode [ 35.870996][ T3324] bridge_slave_1: entered promiscuous mode [ 35.899166][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.906364][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.913612][ T3322] bridge_slave_0: entered allmulticast mode [ 35.920345][ T3322] bridge_slave_0: entered promiscuous mode [ 35.945384][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.952466][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.959917][ T3322] bridge_slave_1: entered allmulticast mode [ 35.966443][ T3322] bridge_slave_1: entered promiscuous mode [ 35.984326][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.993520][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.000628][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.007775][ T3321] bridge_slave_0: entered allmulticast mode [ 36.014329][ T3321] bridge_slave_0: entered promiscuous mode [ 36.033604][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.042777][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.049928][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.057199][ T3321] bridge_slave_1: entered allmulticast mode [ 36.063746][ T3321] bridge_slave_1: entered promiscuous mode [ 36.085110][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.092207][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.099477][ T3328] bridge_slave_0: entered allmulticast mode [ 36.105901][ T3328] bridge_slave_0: entered promiscuous mode [ 36.123264][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.137172][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.144355][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.151461][ T3328] bridge_slave_1: entered allmulticast mode [ 36.157858][ T3328] bridge_slave_1: entered promiscuous mode [ 36.170766][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.180680][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.189880][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.196970][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.204225][ T3329] bridge_slave_0: entered allmulticast mode [ 36.210713][ T3329] bridge_slave_0: entered promiscuous mode [ 36.223082][ T3324] team0: Port device team_slave_0 added [ 36.229672][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.243307][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.250557][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.257788][ T3329] bridge_slave_1: entered allmulticast mode [ 36.264126][ T3329] bridge_slave_1: entered promiscuous mode [ 36.276280][ T3324] team0: Port device team_slave_1 added [ 36.297115][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.316313][ T3322] team0: Port device team_slave_0 added [ 36.327386][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.341663][ T3321] team0: Port device team_slave_0 added [ 36.348283][ T3322] team0: Port device team_slave_1 added [ 36.355063][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.368878][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.376008][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.401956][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.413508][ T3321] team0: Port device team_slave_1 added [ 36.430195][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.444212][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.451185][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.477254][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.503618][ T3328] team0: Port device team_slave_0 added [ 36.511825][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.518820][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.544819][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.555908][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.562905][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.588876][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.604872][ T3328] team0: Port device team_slave_1 added [ 36.611582][ T3329] team0: Port device team_slave_0 added [ 36.618342][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.625408][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.651373][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.662662][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.669707][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.695669][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.717337][ T3329] team0: Port device team_slave_1 added [ 36.738096][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.745199][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.771247][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.793721][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.800792][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.826723][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.843148][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.850337][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.876308][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.889532][ T3324] hsr_slave_0: entered promiscuous mode [ 36.895544][ T3324] hsr_slave_1: entered promiscuous mode [ 36.908781][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.915903][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.941965][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.979145][ T3321] hsr_slave_0: entered promiscuous mode [ 36.985362][ T3321] hsr_slave_1: entered promiscuous mode [ 36.991345][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.997200][ T3321] Cannot create hsr debugfs directory [ 37.005393][ T3322] hsr_slave_0: entered promiscuous mode [ 37.011431][ T3322] hsr_slave_1: entered promiscuous mode [ 37.017403][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.023126][ T3322] Cannot create hsr debugfs directory [ 37.056064][ T3328] hsr_slave_0: entered promiscuous mode [ 37.062050][ T3328] hsr_slave_1: entered promiscuous mode [ 37.068139][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 37.073861][ T3328] Cannot create hsr debugfs directory [ 37.094861][ T3329] hsr_slave_0: entered promiscuous mode [ 37.101117][ T3329] hsr_slave_1: entered promiscuous mode [ 37.107125][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 37.113022][ T3329] Cannot create hsr debugfs directory [ 37.298390][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.316078][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.328294][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.338456][ T3328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.346904][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.355624][ T3328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.368254][ T3328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.379656][ T3328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.402949][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.413304][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.429756][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.438701][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.478448][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.489335][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.498086][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.512064][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.550817][ T3329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.561022][ T3329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.571363][ T3329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.583218][ T3329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.600749][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.609924][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.639587][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.649224][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.659734][ T2006] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.666792][ T2006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.679027][ T2006] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.686219][ T2006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.696267][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.707939][ T2006] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.715021][ T2006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.735874][ T2254] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.743034][ T2254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.766320][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.778791][ T2045] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.785975][ T2045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.805063][ T2045] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.812204][ T2045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.823540][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.860374][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.881166][ T2045] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.888285][ T2045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.906077][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.927840][ T2045] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.934990][ T2045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.969217][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.988202][ T897] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.995352][ T897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.017183][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.026175][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.037674][ T897] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.044762][ T897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.082299][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.125588][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.225844][ T3328] veth0_vlan: entered promiscuous mode [ 38.239748][ T3324] veth0_vlan: entered promiscuous mode [ 38.251738][ T3328] veth1_vlan: entered promiscuous mode [ 38.274478][ T3324] veth1_vlan: entered promiscuous mode [ 38.284442][ T3322] veth0_vlan: entered promiscuous mode [ 38.295607][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.314672][ T3324] veth0_macvtap: entered promiscuous mode [ 38.321791][ T3322] veth1_vlan: entered promiscuous mode [ 38.333568][ T3324] veth1_macvtap: entered promiscuous mode [ 38.343796][ T3328] veth0_macvtap: entered promiscuous mode [ 38.366160][ T3321] veth0_vlan: entered promiscuous mode [ 38.374921][ T3328] veth1_macvtap: entered promiscuous mode [ 38.391865][ T3322] veth0_macvtap: entered promiscuous mode [ 38.400299][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.414295][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.423146][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.430654][ T3322] veth1_macvtap: entered promiscuous mode [ 38.440725][ T3321] veth1_vlan: entered promiscuous mode [ 38.452457][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.460273][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.473896][ T1665] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.486916][ T1665] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.499827][ T1665] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.524762][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.533538][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.554110][ T1665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.566257][ T1665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.580299][ T1665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.590605][ T1665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.609765][ T1665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.622578][ T3321] veth0_macvtap: entered promiscuous mode [ 38.647615][ T3321] veth1_macvtap: entered promiscuous mode [ 38.655841][ T1665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.670607][ T1665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.686046][ T1665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.697925][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.710706][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.713284][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.723304][ T3329] veth0_vlan: entered promiscuous mode [ 38.753541][ T3329] veth1_vlan: entered promiscuous mode [ 38.763233][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.792457][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.815038][ T3329] veth0_macvtap: entered promiscuous mode [ 38.831055][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.850896][ T3329] veth1_macvtap: entered promiscuous mode [ 38.863045][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.877326][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.889306][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.900644][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.916372][ T3505] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6'. [ 38.926496][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.967739][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.022174][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.064525][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 39.064543][ T29] audit: type=1400 audit(1767164623.057:108): avc: denied { open } for pid=3520 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.146655][ T29] audit: type=1400 audit(1767164623.057:109): avc: denied { kernel } for pid=3520 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.214157][ T29] audit: type=1326 audit(1767164623.187:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.3.20" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b5a1cf749 code=0x0 [ 39.275015][ T29] audit: type=1400 audit(1767164623.267:111): avc: denied { create } for pid=3544 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.321753][ T29] audit: type=1400 audit(1767164623.267:112): avc: denied { write } for pid=3544 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.341741][ T29] audit: type=1400 audit(1767164623.267:113): avc: denied { nlmsg_write } for pid=3544 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.387051][ T3555] netlink: 'syz.3.27': attribute type 11 has an invalid length. [ 39.448914][ T3564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 39.498878][ T29] audit: type=1326 audit(1767164623.487:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5a1cf749 code=0x50000 [ 39.630087][ T29] audit: type=1326 audit(1767164623.487:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5a1cf749 code=0x50000 [ 39.653132][ T29] audit: type=1326 audit(1767164623.487:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5a1cf749 code=0x50000 [ 39.676042][ T29] audit: type=1326 audit(1767164623.487:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3568 comm="syz.3.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b5a1cf749 code=0x50000 [ 39.884265][ T3600] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 39.974030][ T3616] netlink: 'syz.0.53': attribute type 16 has an invalid length. [ 40.114010][ T3634] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 40.379581][ T3670] loop3: detected capacity change from 0 to 764 [ 40.429272][ T3670] Symlink component flag not implemented [ 40.447851][ T3670] Symlink component flag not implemented (116) [ 40.595331][ T3700] netlink: 'syz.4.93': attribute type 29 has an invalid length. [ 40.603046][ T3700] netlink: 'syz.4.93': attribute type 3 has an invalid length. [ 40.610656][ T3700] netlink: 132 bytes leftover after parsing attributes in process `syz.4.93'. [ 40.735378][ T3721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 40.881205][ T3747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 40.910440][ T3748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.079160][ T3782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.102838][ T3780] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 41.116503][ T3784] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 41.144270][ T3782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.229159][ T3799] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.142'. [ 41.258137][ T3804] ipvlan1: entered promiscuous mode [ 41.263422][ T3804] ipvlan1: entered allmulticast mode [ 41.268848][ T3804] veth0_vlan: entered allmulticast mode [ 41.318775][ T3813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 41.457648][ T3835] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 41.575659][ T3854] loop2: detected capacity change from 0 to 256 [ 41.830474][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 41.852952][ T3901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 41.921200][ T3917] netlink: 10 bytes leftover after parsing attributes in process `syz.0.198'. [ 41.965690][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 42.088915][ T3948] mmap: syz.4.213 (3948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.249975][ T3983] bond1 (unregistering): Released all slaves [ 42.336388][ T4003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4003 comm=syz.3.239 [ 42.583006][ T4055] bridge_slave_0: left allmulticast mode [ 42.588939][ T4055] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.601592][ T4055] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 42.768608][ T4093] kernel profiling enabled (shift: 5) [ 42.796690][ T4087] veth3: entered promiscuous mode [ 43.062184][ T4149] netlink: 'syz.4.312': attribute type 13 has an invalid length. [ 43.119399][ T4161] netlink: 'syz.1.319': attribute type 10 has an invalid length. [ 43.351268][ T4213] capability: warning: `syz.3.345' uses deprecated v2 capabilities in a way that may be insecure [ 43.364486][ T4216] x_tables: unsorted entry at hook 2 [ 43.480068][ T4235] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 43.569357][ T4248] netlink: 'syz.3.362': attribute type 16 has an invalid length. [ 43.577212][ T4248] netlink: 'syz.3.362': attribute type 17 has an invalid length. [ 43.621605][ T4248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.659847][ T4256] netlink: 'syz.0.367': attribute type 3 has an invalid length. [ 43.985684][ T4311] __nla_validate_parse: 9 callbacks suppressed [ 43.985698][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 44.000790][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 44.012031][ T4312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.392'. [ 44.043603][ T4311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.085280][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 44.085298][ T29] audit: type=1400 audit(1767164628.077:464): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.143598][ T4321] netlink: 516 bytes leftover after parsing attributes in process `syz.2.399'. [ 44.159261][ T29] audit: type=1400 audit(1767164628.117:465): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.183471][ T29] audit: type=1400 audit(1767164628.127:466): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.274256][ T29] audit: type=1400 audit(1767164628.177:467): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.298499][ T29] audit: type=1400 audit(1767164628.227:468): avc: denied { read write } for pid=3329 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.322637][ T29] audit: type=1400 audit(1767164628.237:469): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.346892][ T29] audit: type=1400 audit(1767164628.237:470): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.371090][ T29] audit: type=1400 audit(1767164628.237:471): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.400631][ T29] audit: type=1400 audit(1767164628.307:472): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.424984][ T29] audit: type=1400 audit(1767164628.337:473): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.478736][ T4345] IPv6: Can't replace route, no match found [ 44.525059][ T4349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 44.534048][ T4349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 44.542971][ T4349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 44.572768][ T4357] validate_nla: 4 callbacks suppressed [ 44.572798][ T4357] netlink: 'syz.4.413': attribute type 6 has an invalid length. [ 44.631335][ T4362] bond3 (unregistering): Released all slaves [ 44.720652][ T4379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.427'. [ 44.762424][ T4381] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 44.778066][ T4389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.431'. [ 44.836809][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 44.872017][ T4404] gre1: entered promiscuous mode [ 44.877213][ T4404] gre1: entered allmulticast mode [ 44.980957][ T4424] netlink: 'syz.0.449': attribute type 13 has an invalid length. [ 45.001197][ T4424] gretap0: refused to change device tx_queue_len [ 45.008190][ T4424] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 45.113876][ T4442] xt_connbytes: Forcing CT accounting to be enabled [ 45.664728][ T4547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.829030][ T4570] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 46.107304][ T4632] ipt_ECN: cannot use operation on non-tcp rule [ 46.229788][ T4656] batadv1: entered allmulticast mode [ 46.257801][ T4656] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 46.265105][ T4664] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 46.660812][ T4734] netlink: 'syz.3.602': attribute type 12 has an invalid length. [ 46.826629][ T4757] ipvlan1: entered promiscuous mode [ 46.831993][ T4757] ipvlan1: entered allmulticast mode [ 46.837386][ T4757] veth0_vlan: entered allmulticast mode [ 47.416726][ T4823] netlink: 'syz.4.645': attribute type 1 has an invalid length. [ 47.510624][ T4832] veth3: entered promiscuous mode [ 47.564785][ T4845] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 47.610794][ T4854] netlink: 'syz.4.660': attribute type 4 has an invalid length. [ 47.681733][ T4867] gre1: entered allmulticast mode [ 47.991160][ T4922] netlink: 'syz.1.692': attribute type 10 has an invalid length. [ 48.010789][ T4922] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 48.085490][ T4922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 48.426801][ T4987] capability: warning: `syz.4.726' uses 32-bit capabilities (legacy support in use) [ 48.466392][ T4995] binfmt_misc: register: failed to install interpreter file ./file0 [ 48.517715][ T5003] loop0: detected capacity change from 0 to 512 [ 48.543737][ T5003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.575603][ T5011] C: renamed from team_slave_0 (while UP) [ 48.594014][ T5003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.619299][ T5003] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.667298][ T5022] netlink: 'syz.1.741': attribute type 21 has an invalid length. [ 48.712380][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.723181][ T5026] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 48.737973][ T5029] loop4: detected capacity change from 0 to 1024 [ 48.746704][ T5026] bond3 (unregistering): Released all slaves [ 48.768085][ T5031] loop0: detected capacity change from 0 to 512 [ 48.778855][ T5022] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 48.791887][ T5029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.805069][ T5031] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 48.813660][ T5031] EXT4-fs (loop0): 1 truncate cleaned up [ 48.819785][ T5031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.834089][ T5031] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 48.852753][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.858437][ T5029] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.744: missing EA_INODE flag [ 48.873429][ T5029] EXT4-fs (loop4): Remounting filesystem read-only [ 48.880448][ T5029] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.907390][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.934708][ T5040] netlink: 'syz.0.747': attribute type 16 has an invalid length. [ 49.001682][ T5040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.092692][ T5064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5064 comm=syz.3.760 [ 49.106377][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 49.106392][ T29] audit: type=1400 audit(1767164633.097:825): avc: denied { write } for pid=5060 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.206407][ T29] audit: type=1400 audit(1767164633.197:826): avc: denied { read write } for pid=5078 comm="syz.0.767" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.230843][ T29] audit: type=1400 audit(1767164633.197:827): avc: denied { open } for pid=5078 comm="syz.0.767" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.283925][ T29] audit: type=1400 audit(1767164633.267:828): avc: denied { tracepoint } for pid=5082 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 49.311208][ T29] audit: type=1400 audit(1767164633.297:829): avc: denied { map_create } for pid=5082 comm="syz.1.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.375109][ T5099] __nla_validate_parse: 19 callbacks suppressed [ 49.375129][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 49.407848][ T5103] xt_cgroup: path and classid specified [ 49.444214][ T29] audit: type=1400 audit(1767164633.427:830): avc: denied { create } for pid=5107 comm="syz.1.781" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.507506][ T29] audit: type=1400 audit(1767164633.457:831): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.555344][ T5126] loop1: detected capacity change from 0 to 128 [ 49.571501][ T5129] netlink: 172 bytes leftover after parsing attributes in process `syz.3.792'. [ 49.580649][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 49.593532][ T29] audit: type=1400 audit(1767164633.537:832): avc: denied { create } for pid=5122 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.613434][ T29] audit: type=1400 audit(1767164633.537:833): avc: denied { setopt } for pid=5122 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.633491][ T5129] netlink: 172 bytes leftover after parsing attributes in process `syz.3.792'. [ 49.651478][ T5126] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.690450][ T5135] veth3: entered promiscuous mode [ 49.695631][ T5135] veth3: entered allmulticast mode [ 49.696359][ T29] audit: type=1400 audit(1767164633.687:834): avc: denied { create } for pid=5138 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.703604][ T5126] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.778301][ T3321] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.156921][ T5196] loop2: detected capacity change from 0 to 1024 [ 50.186532][ T5196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.203636][ T5196] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 50.230599][ T5196] System zones: 0-1, 3-36 [ 50.236661][ T5206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.829'. [ 50.283812][ T5196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.367147][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.397826][ T5224] netlink: 260 bytes leftover after parsing attributes in process `syz.0.838'. [ 50.484192][ T5236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 50.706207][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 50.732223][ T5261] bridge1: entered allmulticast mode [ 50.892704][ T5281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.864'. [ 50.901765][ T5281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.864'. [ 50.982454][ T5296] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 50.984512][ T5295] loop4: detected capacity change from 0 to 512 [ 51.008350][ T5295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.035419][ T5295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.056885][ T5295] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.070518][ T5295] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.874: Failed to acquire dquot type 0 [ 51.103739][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 51.142674][ T5314] netlink: 200 bytes leftover after parsing attributes in process `syz.0.882'. [ 51.305902][ T5342] usb usb2: usbfs: interface 0 claimed by hub while 'syz.2.894' sets config #1 [ 51.534475][ T5391] validate_nla: 3 callbacks suppressed [ 51.534488][ T5391] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 51.717477][ T5414] netlink: 'syz.4.930': attribute type 49 has an invalid length. [ 51.746323][ T5418] syz.4.933 (5418): /proc/5417/oom_adj is deprecated, please use /proc/5417/oom_score_adj instead. [ 52.056601][ T5473] netlink: 'syz.1.958': attribute type 2 has an invalid length. [ 52.064410][ T5473] netlink: 'syz.1.958': attribute type 8 has an invalid length. [ 52.135285][ T5488] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 52.167396][ T5493] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 52.213494][ T5499] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 52.333928][ T5509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.565578][ T5549] netlink: 'syz.1.993': attribute type 13 has an invalid length. [ 52.580135][ T5553] loop4: detected capacity change from 0 to 128 [ 52.587152][ T5553] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.600937][ T5549] gretap0: refused to change device tx_queue_len [ 52.608137][ T5549] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.623852][ T5553] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.634674][ T5555] loop3: detected capacity change from 0 to 512 [ 52.642522][ T5555] ======================================================= [ 52.642522][ T5555] WARNING: The mand mount option has been deprecated and [ 52.642522][ T5555] and is ignored by this kernel. Remove the mand [ 52.642522][ T5555] option from the mount to silence this warning. [ 52.642522][ T5555] ======================================================= [ 52.702082][ T5555] EXT4-fs: Ignoring removed orlov option [ 52.724036][ T5555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.749216][ T5555] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.770178][ T5555] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.997: bg 0: block 248: padding at end of block bitmap is not set [ 52.791500][ T5569] bond2 (unregistering): Released all slaves [ 52.798436][ T5555] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.997: Failed to acquire dquot type 1 [ 52.830330][ T5555] EXT4-fs (loop3): 1 truncate cleaned up [ 52.844498][ T5555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.869961][ T5555] EXT4-fs: Ignoring removed orlov option [ 52.880056][ T5582] xt_TCPMSS: Only works on TCP SYN packets [ 52.888733][ T5555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.898080][ T5555] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 52.936154][ T5555] EXT4-fs error (device loop3): __ext4_remount:6789: comm syz.3.997: Abort forced by user [ 52.959796][ T5555] EXT4-fs (loop3): Remounting filesystem read-only [ 52.966447][ T5555] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 52.983548][ T5555] ext4 filesystem being remounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.019253][ T5555] syz.3.997 (5555) used greatest stack depth: 9184 bytes left [ 53.078237][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.246590][ T5633] sctp: [Deprecated]: syz.0.1032 (pid 5633) Use of int in maxseg socket option. [ 53.246590][ T5633] Use struct sctp_assoc_value instead [ 53.272022][ T5631] loop1: detected capacity change from 0 to 1024 [ 53.290027][ T5631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.315758][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.440239][ T5659] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 53.681411][ T5697] xfrm1: entered promiscuous mode [ 53.852926][ T5728] netlink: 'syz.3.1077': attribute type 13 has an invalid length. [ 53.970434][ T5744] netlink: 'syz.0.1087': attribute type 10 has an invalid length. [ 53.981048][ T5747] tmpfs: Bad value for 'mpol' [ 53.988013][ T5744] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 54.010207][ T5744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.167231][ T5776] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 54.207198][ T5780] vxcan3: entered promiscuous mode [ 54.212370][ T5780] vxcan3: entered allmulticast mode [ 54.265794][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 54.265811][ T29] audit: type=1400 audit(1767164638.257:910): avc: denied { module_load } for pid=5785 comm="syz.4.1107" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 54.299782][ T5790] Invalid ELF header magic: != ELF [ 54.306544][ T5794] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 54.457210][ T5818] __nla_validate_parse: 26 callbacks suppressed [ 54.457228][ T5818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1123'. [ 54.671438][ T29] audit: type=1400 audit(1767164638.657:911): avc: denied { connect } for pid=5848 comm="syz.3.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 54.715557][ T29] audit: type=1400 audit(1767164638.707:912): avc: denied { associate } for pid=5851 comm="syz.4.1140" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.757061][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 54.766820][ T29] audit: type=1326 audit(1767164638.707:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 54.790306][ T29] audit: type=1326 audit(1767164638.707:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 54.813699][ T29] audit: type=1326 audit(1767164638.727:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 54.837362][ T29] audit: type=1326 audit(1767164638.727:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 54.860962][ T29] audit: type=1326 audit(1767164638.727:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 54.884608][ T29] audit: type=1326 audit(1767164638.727:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 54.908281][ T29] audit: type=1326 audit(1767164638.727:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 54.979783][ T5869] loop3: detected capacity change from 0 to 764 [ 54.979974][ C0] hrtimer: interrupt took 59248 ns [ 55.038536][ T5869] Symlink component flag not implemented [ 55.044338][ T5869] Symlink component flag not implemented [ 55.088501][ T5869] Symlink component flag not implemented (129) [ 55.094861][ T5869] Symlink component flag not implemented (6) [ 55.104094][ T23] IPVS: starting estimator thread 0... [ 55.124649][ T5869] rock: directory entry would overflow storage [ 55.131058][ T5869] rock: sig=0x4f50, size=4, remaining=3 [ 55.136764][ T5869] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 55.214409][ T5885] IPVS: using max 2400 ests per chain, 120000 per kthread [ 55.230595][ T5903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 55.239917][ T5903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 55.313455][ T5915] binfmt_misc: register: failed to install interpreter file ./file0 [ 55.318100][ T5916] xt_bpf: check failed: parse error [ 55.394473][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'. [ 55.403478][ T5928] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 55.677993][ T5971] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 55.695729][ T5971] bond2 (unregistering): Released all slaves [ 55.947672][ T6012] x_tables: unsorted entry at hook 2 [ 56.031515][ T6026] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1223'. [ 56.280234][ T6071] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.1246'. [ 56.289992][ T6069] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 56.319436][ T6074] loop3: detected capacity change from 0 to 512 [ 56.333521][ T6074] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 56.358512][ T6074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 56.387863][ T6074] EXT4-fs (loop3): orphan cleanup on readonly fs [ 56.395317][ T6074] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1249: bg 0: block 361: padding at end of block bitmap is not set [ 56.411207][ T6074] EXT4-fs (loop3): Remounting filesystem read-only [ 56.419414][ T6074] EXT4-fs (loop3): 1 truncate cleaned up [ 56.424106][ T6085] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1252'. [ 56.427012][ T6074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 56.469002][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 56.709535][ T6125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1273'. [ 56.718671][ T6125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1273'. [ 56.791448][ T6136] bond1: option arp_all_targets: invalid value (262144) [ 56.813847][ T6136] bond1 (unregistering): Released all slaves [ 57.189164][ T6201] validate_nla: 6 callbacks suppressed [ 57.189183][ T6201] netlink: 'syz.1.1311': attribute type 21 has an invalid length. [ 57.284329][ T6215] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 57.405226][ T6234] loop2: detected capacity change from 0 to 128 [ 57.573748][ T6264] netlink: 'syz.1.1341': attribute type 58 has an invalid length. [ 57.661327][ T6277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.753966][ T6290] loop3: detected capacity change from 0 to 128 [ 57.836777][ T6297] gre1: entered allmulticast mode [ 58.060122][ T6331] loop2: detected capacity change from 0 to 512 [ 58.063650][ T6331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.063707][ T6331] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.085697][ T6331] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.1372: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 58.136351][ T6337] netlink: 'syz.3.1373': attribute type 2 has an invalid length. [ 58.136370][ T6337] netlink: 'syz.3.1373': attribute type 8 has an invalid length. [ 58.187502][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.354037][ T6352] loop1: detected capacity change from 0 to 512 [ 58.399915][ T6352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.419634][ T6352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.420384][ T6352] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.472358][ T6358] loop0: detected capacity change from 0 to 1024 [ 58.472672][ T6358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.484651][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.490193][ T6358] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 58.526204][ T6358] System zones: 0-1, 3-36 [ 58.537245][ T6358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.632482][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.662101][ T6375] netlink: 'syz.4.1389': attribute type 13 has an invalid length. [ 58.672436][ T6375] gretap0: refused to change device tx_queue_len [ 58.683680][ T6375] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.815315][ T6398] xt_TCPMSS: Only works on TCP SYN packets [ 58.863320][ T6407] loop0: detected capacity change from 0 to 128 [ 58.878812][ T6409] loop1: detected capacity change from 0 to 512 [ 58.903537][ T6409] EXT4-fs: Ignoring removed bh option [ 58.938835][ T6409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.952107][ T6409] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.961287][ T6409] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 58.994482][ T6409] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 59.014687][ T6409] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 59.026409][ T6409] System zones: 0-2, 18-18, 34-35 [ 59.032121][ T6409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.101426][ T6409] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #12: block 32: comm syz.1.1409: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 59.115558][ T6437] netlink: 'syz.0.1422': attribute type 3 has an invalid length. [ 59.139284][ T6439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.168320][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.179763][ T6443] sctp: [Deprecated]: syz.3.1425 (pid 6443) Use of int in maxseg socket option. [ 59.179763][ T6443] Use struct sctp_assoc_value instead [ 59.344584][ T6468] dvmrp8: entered allmulticast mode [ 59.477176][ T6492] __nla_validate_parse: 25 callbacks suppressed [ 59.477194][ T6492] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1449'. [ 59.533283][ T6501] xt_hashlimit: size too large, truncated to 1048576 [ 59.540070][ T6501] xt_hashlimit: max too large, truncated to 1048576 [ 59.569781][ T6498] loop3: detected capacity change from 0 to 2048 [ 59.576719][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 59.576790][ T29] audit: type=1400 audit(1767164643.567:961): avc: denied { write } for pid=6503 comm="syz.1.1454" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.607025][ T6498] EXT4-fs: Ignoring removed oldalloc option [ 59.632807][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 59.661326][ T29] audit: type=1400 audit(1767164643.647:962): avc: denied { setattr } for pid=6496 comm="syz.3.1451" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.715429][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 59.781029][ T29] audit: type=1400 audit(1767164643.767:963): avc: denied { ioctl } for pid=6523 comm="syz.3.1462" path="socket:[14837]" dev="sockfs" ino=14837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.867534][ T29] audit: type=1400 audit(1767164643.817:964): avc: denied { read } for pid=6531 comm="syz.1.1468" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.890847][ T29] audit: type=1400 audit(1767164643.817:965): avc: denied { open } for pid=6531 comm="syz.1.1468" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.914650][ T29] audit: type=1400 audit(1767164643.837:966): avc: denied { ioctl } for pid=6531 comm="syz.1.1468" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.951480][ T6541] netlink: 'syz.0.1473': attribute type 21 has an invalid length. [ 59.959544][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 59.969427][ T29] audit: type=1326 audit(1767164643.947:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6542 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 59.992851][ T29] audit: type=1326 audit(1767164643.947:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6542 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 60.016260][ T29] audit: type=1326 audit(1767164643.947:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6542 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 60.039568][ T29] audit: type=1326 audit(1767164643.947:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6542 comm="syz.1.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81f934f749 code=0x7ffc0000 [ 60.132281][ T6559] netlink: 'syz.2.1479': attribute type 3 has an invalid length. [ 60.169083][ T6559] netlink: 'syz.2.1479': attribute type 3 has an invalid length. [ 60.196562][ T6572] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 60.217955][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1488'. [ 60.260147][ T6580] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 60.287726][ T6586] Invalid ELF header magic: != ELF [ 60.293307][ T6580] bridge2: entered promiscuous mode [ 60.298694][ T6580] bridge2: entered allmulticast mode [ 60.449217][ T6613] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 60.560310][ T6628] loop0: detected capacity change from 0 to 512 [ 60.588851][ T6628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.619425][ T6628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.632867][ T6628] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.686166][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.750370][ T6654] netlink: 'syz.2.1524': attribute type 21 has an invalid length. [ 60.759338][ T6657] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 60.770029][ T6654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1524'. [ 60.895307][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'. [ 60.910675][ T6683] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 61.038444][ T6697] loop1: detected capacity change from 0 to 2048 [ 61.076008][ T6697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.110556][ T6697] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.157776][ T6715] loop4: detected capacity change from 0 to 764 [ 61.171811][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.197855][ T6715] Symlink component flag not implemented [ 61.203669][ T6715] Symlink component flag not implemented [ 61.226490][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 61.240291][ T6715] Symlink component flag not implemented (129) [ 61.246553][ T6715] Symlink component flag not implemented (6) [ 61.263685][ T6715] rock: directory entry would overflow storage [ 61.269928][ T6715] rock: sig=0x4f50, size=4, remaining=3 [ 61.275620][ T6715] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 61.514601][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1575'. [ 61.593781][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 61.603645][ T6769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.834883][ T6808] loop4: detected capacity change from 0 to 512 [ 61.883299][ T6808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.903496][ T6808] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.1600: No space for directory leaf checksum. Please run e2fsck -D. [ 61.918935][ T6808] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.1600: checksumming directory block 0 [ 61.942513][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.001867][ T6834] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1608'. [ 62.089449][ T6847] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 62.319101][ T6887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.345443][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 62.354492][ T6889] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 62.439989][ T6900] loop1: detected capacity change from 0 to 512 [ 62.447844][ T6900] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.458671][ T6900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 62.480918][ T6900] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.497642][ T6900] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1642: bg 0: block 361: padding at end of block bitmap is not set [ 62.537475][ T6900] EXT4-fs (loop1): Remounting filesystem read-only [ 62.544699][ T6900] EXT4-fs (loop1): 1 truncate cleaned up [ 62.551445][ T6900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 62.569517][ T6911] xt_hashlimit: overflow, try lower: 0/0 [ 62.585959][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 62.643212][ T10] IPVS: starting estimator thread 0... [ 62.710739][ T6933] validate_nla: 3 callbacks suppressed [ 62.710756][ T6933] netlink: 'syz.4.1656': attribute type 5 has an invalid length. [ 62.735336][ T6933] ip6erspan0: entered promiscuous mode [ 62.754344][ T6922] IPVS: using max 2304 ests per chain, 115200 per kthread [ 62.995592][ T6973] loop0: detected capacity change from 0 to 512 [ 63.011953][ T6973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.040112][ T6973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 63.066818][ T6973] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.073034][ T6989] netlink: 'syz.4.1685': attribute type 10 has an invalid length. [ 63.086244][ T6988] SET target dimension over the limit! [ 63.094826][ T6973] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1678: Failed to acquire dquot type 0 [ 63.108949][ T6991] Unsupported ieee802154 address type: 0 [ 63.124311][ T6989] macvlan1: entered allmulticast mode [ 63.132641][ T6989] veth1_vlan: entered allmulticast mode [ 63.146932][ T6989] team0: Port device macvlan1 added [ 63.155434][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 63.281160][ T7013] netlink: 'syz.2.1697': attribute type 3 has an invalid length. [ 63.345121][ T7017] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 63.423325][ T7037] loop4: detected capacity change from 0 to 512 [ 63.464733][ T7037] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 63.472733][ T7037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 63.483832][ T7037] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.490287][ T7037] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.505074][ T7037] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 63.512449][ T7037] EXT4-fs (loop4): 1 truncate cleaned up [ 63.530632][ T7037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.558716][ T7037] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1707: bad symlink. [ 63.569993][ T7037] EXT4-fs (loop4): Remounting filesystem read-only [ 63.588838][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.650136][ T7064] netlink: 'syz.0.1721': attribute type 58 has an invalid length. [ 63.975362][ T7124] syz.4.1750 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.990689][ T7126] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 64.228710][ T7167] netlink: 'syz.0.1781': attribute type 49 has an invalid length. [ 64.259055][ T7175] loop3: detected capacity change from 0 to 1024 [ 64.266365][ T7175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.275469][ T7175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 64.283716][ T7175] System zones: 0-1, 3-36 [ 64.289386][ T7175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.348825][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.359233][ T7186] loop0: detected capacity change from 0 to 128 [ 64.476470][ T7205] loop2: detected capacity change from 0 to 128 [ 64.607344][ T7227] ipvlan1: left promiscuous mode [ 64.612449][ T7227] ipvlan1: left allmulticast mode [ 64.617629][ T7227] veth0_vlan: left allmulticast mode [ 64.626466][ T7224] rock: directory entry would overflow storage [ 64.632706][ T7224] rock: sig=0x4654, size=5, remaining=4 [ 64.711986][ T7240] netlink: 'syz.2.1807': attribute type 3 has an invalid length. [ 64.720009][ T7240] __nla_validate_parse: 9 callbacks suppressed [ 64.720025][ T7240] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1807'. [ 64.746911][ T7244] EXT4-fs: Ignoring removed bh option [ 64.792643][ T7244] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.801832][ T7244] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 64.825188][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 64.825207][ T29] audit: type=1400 audit(1767164648.817:1009): avc: denied { setopt } for pid=7251 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.853429][ T7244] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 64.866459][ T7244] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 64.875030][ T7244] System zones: 0-2, 18-18, 34-35 [ 64.880952][ T7244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.893744][ T7258] x_tables: ip_tables: osf match: only valid for protocol 6 [ 64.903351][ T7244] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #12: block 32: comm syz.4.1808: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 64.958371][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 65.039965][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.125361][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 65.295269][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 65.304517][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 65.496133][ T7350] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 65.574144][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.581396][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.698853][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.710186][ T7340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.741406][ T7340] ipvlan1: left promiscuous mode [ 65.746679][ T7340] ipvlan1: left allmulticast mode [ 65.751789][ T7340] veth0_vlan: left allmulticast mode [ 65.767391][ T7340] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 65.781332][ T7340] veth3: left promiscuous mode [ 65.786586][ T7340] xfrm1: left promiscuous mode [ 65.792989][ T7340] gre1: left allmulticast mode [ 65.798760][ T53] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.832684][ T53] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.874242][ T53] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.899203][ T53] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.918610][ T29] audit: type=1400 audit(1767164649.897:1010): avc: denied { validate_trans } for pid=7373 comm="syz.4.1863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 65.940311][ T7378] netlink: 'syz.2.1864': attribute type 21 has an invalid length. [ 65.948294][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'. [ 66.015264][ T7384] bond3: entered promiscuous mode [ 66.020568][ T7384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.055689][ T7389] xt_ecn: cannot match TCP bits for non-tcp packets [ 66.104198][ T7397] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1877'. [ 66.115470][ T7397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.154831][ T29] audit: type=1400 audit(1767164650.147:1011): avc: denied { write } for pid=7403 comm="syz.1.1878" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 66.179243][ T7405] autofs4:pid:7405:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 66.195067][ T7397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.239753][ T7397] bond0 (unregistering): Released all slaves [ 66.239833][ T29] audit: type=1400 audit(1767164650.227:1012): avc: denied { ioctl } for pid=7408 comm="syz.2.1882" path="socket:[17342]" dev="sockfs" ino=17342 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.314525][ T7414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1883'. [ 66.438152][ T7434] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 66.582902][ T7457] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 66.612726][ T7461] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1908' sets config #1 [ 66.649988][ T29] audit: type=1326 audit(1767164650.637:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab187f749 code=0x7ffc0000 [ 66.735945][ T29] audit: type=1326 audit(1767164650.667:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab187f749 code=0x7ffc0000 [ 66.759663][ T29] audit: type=1326 audit(1767164650.667:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f1ab187f749 code=0x7ffc0000 [ 66.783035][ T29] audit: type=1326 audit(1767164650.667:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab187f749 code=0x7ffc0000 [ 66.806668][ T29] audit: type=1326 audit(1767164650.667:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab187f749 code=0x7ffc0000 [ 66.830286][ T29] audit: type=1400 audit(1767164650.717:1018): avc: denied { setopt } for pid=7472 comm="syz.2.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.086586][ T7525] xt_bpf: check failed: parse error [ 67.201024][ T7537] wg1: entered promiscuous mode [ 67.206012][ T7537] wg1: entered allmulticast mode [ 67.233746][ T7545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.264592][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 67.323928][ T7559] set_capacity_and_notify: 2 callbacks suppressed [ 67.323946][ T7559] loop3: detected capacity change from 0 to 512 [ 67.340517][ T7559] EXT4-fs: Ignoring removed nobh option [ 67.361178][ T7565] netlink: 'syz.4.1957': attribute type 2 has an invalid length. [ 67.376737][ T7559] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #3: comm syz.3.1955: corrupted inode contents [ 67.392164][ T7559] EXT4-fs (loop3): Remounting filesystem read-only [ 67.399352][ T7559] EXT4-fs (loop3): 1 truncate cleaned up [ 67.405761][ T7559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.419964][ T7559] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.434098][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1961'. [ 67.470722][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.473241][ T7579] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.495591][ T7579] xt_socket: unknown flags 0x50 [ 67.564466][ T7593] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 67.712816][ T7618] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 67.940773][ T7625] syz.1.1989 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 67.952023][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.1.1989 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.952090][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.952105][ T7625] Call Trace: [ 67.952117][ T7625] [ 67.952127][ T7625] __dump_stack+0x1d/0x30 [ 67.952156][ T7625] dump_stack_lvl+0x95/0xd0 [ 67.952245][ T7625] dump_stack+0x15/0x1b [ 67.952268][ T7625] dump_header+0x81/0x240 [ 67.952293][ T7625] oom_kill_process+0x295/0x350 [ 67.952321][ T7625] out_of_memory+0x97b/0xb80 [ 67.952413][ T7625] try_charge_memcg+0x610/0xa10 [ 67.952447][ T7625] charge_memcg+0x51/0xc0 [ 67.952477][ T7625] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 67.952581][ T7625] __read_swap_cache_async+0x17b/0x2d0 [ 67.952619][ T7625] swap_cluster_readahead+0x262/0x3c0 [ 67.952660][ T7625] swapin_readahead+0xde/0x820 [ 67.952767][ T7625] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 67.952836][ T7625] ? lruvec_stat_mod_folio+0xd6/0x120 [ 67.952863][ T7625] ? __rcu_read_unlock+0x4f/0x70 [ 67.952885][ T7625] ? swap_cache_get_folio+0x277/0x280 [ 67.952978][ T7625] do_swap_page+0x2b4/0x21e0 [ 67.953009][ T7625] ? __pfx_default_wake_function+0x10/0x10 [ 67.953043][ T7625] handle_mm_fault+0x9d8/0x2c60 [ 67.953121][ T7625] do_user_addr_fault+0x630/0x1080 [ 67.953156][ T7625] exc_page_fault+0x62/0xa0 [ 67.953291][ T7625] asm_exc_page_fault+0x26/0x30 [ 67.953311][ T7625] RIP: 0033:0x7f81f92259ec [ 67.953329][ T7625] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 67.953350][ T7625] RSP: 002b:00007ffc04a37ad0 EFLAGS: 00010202 [ 67.953369][ T7625] RAX: 0000000000000000 RBX: 00007f81f95a5fa0 RCX: 0000000000000000 [ 67.953400][ T7625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556e23a808 [ 67.953411][ T7625] RBP: 00007f81f95a7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 67.953425][ T7625] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010be4 [ 67.953439][ T7625] R13: 00007ffc04a37bc0 R14: ffffffffffffffff R15: 00007ffc04a37be0 [ 67.953461][ T7625] [ 67.953468][ T7625] memory: usage 307200kB, limit 307200kB, failcnt 567 [ 68.170394][ T7625] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 68.178341][ T7625] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 68.185729][ T7625] Memory cgroup stats for /syz1: [ 68.190855][ T7625] cache 0 [ 68.199023][ T7625] rss 0 [ 68.201927][ T7625] shmem 0 [ 68.205009][ T7625] mapped_file 0 [ 68.208485][ T7625] dirty 0 [ 68.211439][ T7625] writeback 0 [ 68.214863][ T7625] workingset_refault_anon 5 [ 68.219405][ T7625] workingset_refault_file 3 [ 68.223931][ T7625] swap 192512 [ 68.227429][ T7625] swapcached 0 [ 68.230813][ T7625] pgpgin 16179 [ 68.234296][ T7625] pgpgout 16179 [ 68.237856][ T7625] pgfault 36938 [ 68.241326][ T7625] pgmajfault 7 [ 68.245068][ T7625] inactive_anon 0 [ 68.248793][ T7625] active_anon 0 [ 68.252254][ T7625] inactive_file 0 [ 68.255937][ T7625] active_file 0 [ 68.259418][ T7625] unevictable 0 [ 68.262886][ T7625] hierarchical_memory_limit 314572800 [ 68.268806][ T7625] hierarchical_memsw_limit 9223372036854771712 [ 68.275366][ T7625] total_cache 0 [ 68.278849][ T7625] total_rss 0 [ 68.282148][ T7625] total_shmem 0 [ 68.285678][ T7625] total_mapped_file 0 [ 68.289740][ T7625] total_dirty 0 [ 68.293211][ T7625] total_writeback 0 [ 68.297134][ T7625] total_workingset_refault_anon 5 [ 68.302171][ T7625] total_workingset_refault_file 3 [ 68.307265][ T7625] total_swap 192512 [ 68.311099][ T7625] total_swapcached 0 [ 68.315037][ T7625] total_pgpgin 16179 [ 68.318953][ T7625] total_pgpgout 16179 [ 68.322946][ T7625] total_pgfault 36938 [ 68.325392][ T7653] netlink: 'syz.2.1999': attribute type 7 has an invalid length. [ 68.327093][ T7625] total_pgmajfault 7 [ 68.338728][ T7625] total_inactive_anon 0 [ 68.343128][ T7625] total_active_anon 0 [ 68.347176][ T7625] total_inactive_file 0 [ 68.351344][ T7625] total_active_file 0 [ 68.355455][ T7625] total_unevictable 0 [ 68.359530][ T7625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1989,pid=7625,uid=0 [ 68.374192][ T7625] Memory cgroup out of memory: Killed process 7625 (syz.1.1989) total-vm:95884kB, anon-rss:1264kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 68.584589][ T7686] loop0: detected capacity change from 0 to 2048 [ 68.643436][ T7686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.753623][ T7710] xt_hashlimit: overflow, try lower: 0/0 [ 68.774633][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.896145][ T7729] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 68.903998][ T7729] netlink: 'syz.4.2038': attribute type 2 has an invalid length. [ 69.065852][ T7757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.099881][ T7764] vlan0: entered promiscuous mode [ 69.186662][ T7773] Unsupported ieee802154 address type: 0 [ 69.305315][ T7792] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 69.819775][ T7886] __nla_validate_parse: 12 callbacks suppressed [ 69.819788][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2115'. [ 69.835186][ T7886] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2115'. [ 69.862854][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2115'. [ 69.904971][ T7886] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2115'. [ 69.914189][ T7886] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2115'. [ 69.943820][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 69.943906][ T29] audit: type=1400 audit(1767164653.927:1037): avc: denied { bind } for pid=7900 comm="syz.3.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.969539][ T29] audit: type=1400 audit(1767164653.927:1038): avc: denied { name_bind } for pid=7900 comm="syz.3.2122" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 69.991333][ T29] audit: type=1400 audit(1767164653.927:1039): avc: denied { node_bind } for pid=7900 comm="syz.3.2122" saddr=::ffff:172.20.20.44 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 70.002840][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2125'. [ 70.052653][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2127'. [ 70.104379][ T7916] netlink: 'syz.3.2129': attribute type 12 has an invalid length. [ 70.180258][ T29] audit: type=1400 audit(1767164654.167:1040): avc: denied { bind } for pid=7930 comm="syz.4.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.244767][ T7938] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 70.577021][ T7992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.610960][ T7996] random: crng reseeded on system resumption [ 70.617039][ T29] audit: type=1400 audit(1767164654.597:1041): avc: denied { append } for pid=7995 comm="syz.4.2169" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.640262][ T29] audit: type=1400 audit(1767164654.597:1042): avc: denied { open } for pid=7995 comm="syz.4.2169" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.790623][ T8014] netlink: 'syz.4.2175': attribute type 2 has an invalid length. [ 70.798518][ T8014] netlink: 'syz.4.2175': attribute type 1 has an invalid length. [ 70.814828][ T8017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2179'. [ 70.944609][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 71.008154][ T8040] loop0: detected capacity change from 0 to 512 [ 71.034766][ T8040] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 71.042833][ T8040] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 71.065743][ T8040] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.072378][ T8040] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 71.193093][ T8040] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 71.207896][ T8040] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 71.226507][ T8059] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 71.234360][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2199'. [ 71.247440][ T8040] EXT4-fs (loop0): 1 truncate cleaned up [ 71.253561][ T8040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.279183][ T8064] veth3: entered promiscuous mode [ 71.345758][ T8040] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.2191: bad symlink. [ 71.380861][ T8040] EXT4-fs (loop0): Remounting filesystem read-only [ 71.394125][ T8078] netlink: 'syz.3.2208': attribute type 13 has an invalid length. [ 71.404424][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.417614][ T8081] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.474624][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.485812][ T8078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.531586][ T8087] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 71.545282][ T8087] bond2 (unregistering): Released all slaves [ 71.580541][ T29] audit: type=1400 audit(1767164655.567:1043): avc: denied { write } for pid=8097 comm="syz.4.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.693403][ T8111] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 71.889092][ T8144] loop2: detected capacity change from 0 to 2364 [ 71.948431][ T8152] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 72.073881][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.081145][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.188450][ T8157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.217883][ T8157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.278714][ T8157] gre1: left promiscuous mode [ 72.283620][ T8157] gre1: left allmulticast mode [ 72.291024][ T8157] bridge2: left promiscuous mode [ 72.296459][ T8157] bridge2: left allmulticast mode [ 72.304442][ T1665] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.323841][ T1665] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.332969][ T1665] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.352082][ T1665] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.402653][ T29] audit: type=1400 audit(1767164656.387:1044): avc: denied { create } for pid=8197 comm="syz.3.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.468528][ T29] audit: type=1400 audit(1767164656.417:1045): avc: denied { getopt } for pid=8197 comm="syz.3.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.847618][ T8267] loop1: detected capacity change from 0 to 1024 [ 72.917136][ T8267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.001160][ T8267] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2301: missing EA_INODE flag [ 73.044527][ T8267] EXT4-fs (loop1): Remounting filesystem read-only [ 73.062630][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.127588][ T8312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.246550][ T8334] netlink: 'syz.2.2333': attribute type 10 has an invalid length. [ 73.273732][ T8336] loop4: detected capacity change from 0 to 1024 [ 73.305462][ T8336] EXT4-fs: Ignoring removed oldalloc option [ 73.335365][ T8336] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 73.352459][ T8336] System zones: 0-1, 3-12 [ 73.360557][ T8346] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.378334][ T8336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.429241][ T8346] block device autoloading is deprecated and will be removed. [ 73.509278][ T8361] autofs4:pid:8361:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 73.520144][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.670903][ T8383] loop3: detected capacity change from 0 to 512 [ 73.686438][ T8383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.701711][ T8383] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 3: comm syz.3.2354: lblock 0 mapped to illegal pblock 3 (length 1) [ 73.716214][ T8383] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.2354: error -117 reading directory block [ 73.749824][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.809083][ T8401] loop2: detected capacity change from 0 to 512 [ 73.848273][ T8401] EXT4-fs (loop2): 1 orphan inode deleted [ 73.864445][ T2045] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 73.894368][ T8401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.907248][ T8401] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.937993][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.171704][ T8458] netlink: 'syz.4.2388': attribute type 7 has an invalid length. [ 74.276331][ T8473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.317260][ T8473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.354582][ T8473] bond0 (unregistering): Released all slaves [ 74.367835][ T8490] loop1: detected capacity change from 0 to 512 [ 74.398794][ T8490] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.414605][ T8490] EXT4-fs error (device loop1): ext4_quota_enable:7173: comm syz.1.2406: Bad quota inum: 2, type: 1 [ 74.428902][ T8490] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 74.455206][ T3321] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 74.669319][ T8531] loop2: detected capacity change from 0 to 2048 [ 74.700620][ T3010] ================================================================== [ 74.708782][ T3010] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 74.716824][ T3010] [ 74.719168][ T3010] write to 0xffff88811b03bcf0 of 8 bytes by task 6208 on cpu 0: [ 74.726826][ T3010] dentry_unlink_inode+0x65/0x260 [ 74.731897][ T3010] d_delete+0x164/0x180 [ 74.736087][ T3010] d_delete_notify+0x32/0x100 [ 74.740806][ T3010] vfs_unlink+0x32c/0x440 [ 74.745157][ T3010] do_unlinkat+0x1cd/0x4b0 [ 74.749602][ T3010] __x64_sys_unlink+0x2e/0x40 [ 74.754302][ T3010] x64_sys_call+0x2f48/0x3000 [ 74.759009][ T3010] do_syscall_64+0xca/0x2b0 [ 74.763547][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.769473][ T3010] [ 74.771832][ T3010] read to 0xffff88811b03bcf0 of 8 bytes by task 3010 on cpu 1: [ 74.779394][ T3010] step_into_slowpath+0x113/0x480 [ 74.784448][ T3010] path_lookupat+0x330/0x500 [ 74.789071][ T3010] filename_lookup+0x147/0x340 [ 74.793887][ T3010] do_readlinkat+0x7d/0x320 [ 74.798422][ T3010] __x64_sys_readlink+0x47/0x60 [ 74.803296][ T3010] x64_sys_call+0x2af1/0x3000 [ 74.808005][ T3010] do_syscall_64+0xca/0x2b0 [ 74.812543][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.818453][ T3010] [ 74.820784][ T3010] value changed: 0xffff88811ca5faa0 -> 0x0000000000000000 [ 74.827891][ T3010] [ 74.830240][ T3010] Reported by Kernel Concurrency Sanitizer on: [ 74.836405][ T3010] CPU: 1 UID: 0 PID: 3010 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.845707][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.855776][ T3010] ================================================================== [ 74.885531][ T4842] Alternate GPT is invalid, using primary GPT. [ 74.891881][ T4842] loop2: p1 p2 p3 [ 74.895650][ T4842] loop2: partition table partially beyond EOD, truncated [ 74.918062][ T8531] Alternate GPT is invalid, using primary GPT. [ 74.924506][ T8531] loop2: p1 p2 p3 [ 74.928252][ T8531] loop2: partition table partially beyond EOD, truncated [ 75.032246][ T4778] udevd[4778]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 75.042914][ T4842] udevd[4842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 75.052979][ T6208] udevd[6208]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory