last executing test programs: 596.8831ms ago: executing program 1 (id=7539): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 496.417375ms ago: executing program 1 (id=7549): mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 446.152077ms ago: executing program 1 (id=7553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000540)) 436.123538ms ago: executing program 4 (id=7554): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 398.30497ms ago: executing program 4 (id=7556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) 397.96883ms ago: executing program 0 (id=7557): r0 = socket(0x2d, 0x2, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2d}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4002000}, 0x20048041) 387.89603ms ago: executing program 3 (id=7558): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) 351.385862ms ago: executing program 1 (id=7560): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x36, 0x107, 0xfffffffc, 0x810000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 351.104182ms ago: executing program 2 (id=7561): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0x40000000007, 0x0) 347.211952ms ago: executing program 0 (id=7562): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x1000, @private0, 0x8, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="6959e926", 0x4}, {0x0}], 0x2}}], 0x1, 0x8000) 339.121153ms ago: executing program 3 (id=7563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000040000000000000000000000850000007d00000085000000d000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 337.267453ms ago: executing program 4 (id=7564): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100200a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000340000000020013"], 0x50}}, 0x0) 289.008615ms ago: executing program 0 (id=7565): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x60) 288.895885ms ago: executing program 2 (id=7566): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000)='-0', 0x2) 288.643515ms ago: executing program 1 (id=7567): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1208002, &(0x7f0000000180), 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 241.575168ms ago: executing program 3 (id=7568): r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc)=0x3) 241.451427ms ago: executing program 4 (id=7569): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="d800000010008104687da3aa7143a0bac81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00034006006aec036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e496e6f66112c88a2ddddbbb219c6c09136dd481d485dc2331419768c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a5e1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fac25667e006dcdf63951f215ce3bb14feb9f519e53595e6e167c2ed64c804fba3f3", 0xd8}], 0x1}, 0x856) 241.413838ms ago: executing program 0 (id=7570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd7004fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="d941050000000000140035007465616d3000000000000000000000000500210006"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) 239.277067ms ago: executing program 3 (id=7571): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) 212.985689ms ago: executing program 2 (id=7572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 167.031311ms ago: executing program 2 (id=7573): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) 89.783615ms ago: executing program 0 (id=7574): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 89.651695ms ago: executing program 4 (id=7575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x1170, 0x1170, 0x178, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x178, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x3, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x48a, 0x5, 0x4, 0x1, 0x0, "f342a67c2c8839f34dc41410843d9d5b6c0bffd9272e2a6bbb41043c26f552454c4da82330ce9be65548dea046d85e62aee4e92396bc1c01a84b1d197d6754c2"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 89.569105ms ago: executing program 3 (id=7576): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 89.514965ms ago: executing program 2 (id=7577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x18, 0x1, 0x0, 0x8, {0xa, 0x37, 0x3f}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) 89.448095ms ago: executing program 3 (id=7578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xe874, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xee}]}, 0x3c}}, 0x0) 67.335986ms ago: executing program 0 (id=7579): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4101, 0x1005}], 0x1, 0x2, 0x0) 57.181236ms ago: executing program 4 (id=7580): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 11.525209ms ago: executing program 1 (id=7581): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000001800dd8d000000000000000002000000000000060000000006001500040000009000168004000880880001"], 0xb4}, 0x1, 0x0, 0x0, 0x841}, 0x0) 0s ago: executing program 2 (id=7582): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): [T12460] IPv6: Can't replace route, no match found [ 85.008823][T12472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2949'. [ 85.026976][ T28] audit: type=1400 audit(84.815:637): avc: denied { search } for pid=3040 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.065801][ T28] audit: type=1400 audit(84.815:638): avc: denied { read } for pid=3040 comm="dhcpcd" name="n25" dev="tmpfs" ino=10037 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.114637][ T28] audit: type=1400 audit(84.815:639): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=10037 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.184990][T12492] loop2: detected capacity change from 0 to 512 [ 85.212328][T12492] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.255873][T12511] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2956'. [ 85.293750][T12492] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 85.313959][T12492] FAT-fs (loop2): Filesystem has been set read-only [ 85.433366][T12549] IPv6: Can't replace route, no match found [ 85.541046][T12571] netlink: 'syz.4.2969': attribute type 32 has an invalid length. [ 85.568636][T12573] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2972'. [ 85.601413][T12573] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 86.560185][T12607] IPv6: Can't replace route, no match found [ 86.579218][T12617] netlink: 'syz.3.2986': attribute type 32 has an invalid length. [ 86.655081][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2992'. [ 86.806669][T12655] IPv6: Can't replace route, no match found [ 86.820776][T12656] loop3: detected capacity change from 0 to 512 [ 86.844289][T12656] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.874850][T12656] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 86.889822][T12656] FAT-fs (loop3): Filesystem has been set read-only [ 86.947076][T12677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3008'. [ 87.106168][T12710] loop3: detected capacity change from 0 to 1024 [ 87.123466][T12710] EXT4-fs: Ignoring removed orlov option [ 87.134526][T12710] EXT4-fs: Ignoring removed bh option [ 87.171054][T12710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.187290][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 87.187306][ T28] audit: type=1400 audit(87.165:650): avc: denied { remount } for pid=12709 comm="syz.3.3016" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.212529][T12725] loop0: detected capacity change from 0 to 512 [ 87.219321][T12725] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.232182][T12724] bond1: option mode: invalid value (9) [ 87.243978][T12710] EXT4-fs error (device loop3): __ext4_remount:6804: comm syz.3.3016: Abort forced by user [ 87.259003][T12724] bond1 (unregistering): Released all slaves [ 87.265111][T12725] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 87.275512][T12710] EXT4-fs (loop3): Remounting filesystem read-only [ 87.288397][T12710] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.292227][T12725] FAT-fs (loop0): Filesystem has been set read-only [ 87.327564][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.502292][T12814] xt_CT: No such helper "snmp_trap" [ 87.526909][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 87.739607][T12868] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 87.905792][T12898] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3052'. [ 87.928179][T12905] Cannot find map_set index 2 as target [ 87.931355][T12898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.005040][T12912] lo: left promiscuous mode [ 88.028267][T12912] syz_tun: left promiscuous mode [ 88.051505][T12912] team0: left promiscuous mode [ 88.059762][T12912] team_slave_0: left promiscuous mode [ 88.079757][T12912] team_slave_1: left promiscuous mode [ 88.093971][T12912] batadv_slave_0: left promiscuous mode [ 88.099641][T12912] batadv_slave_0: left allmulticast mode [ 88.115651][T12912] ip6gre1: left promiscuous mode [ 88.136508][T12912] ip6tnl4: left allmulticast mode [ 88.222936][T12948] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.265430][T12951] loop4: detected capacity change from 0 to 1024 [ 88.282596][T12951] EXT4-fs: Ignoring removed orlov option [ 88.288435][T12951] EXT4-fs: Ignoring removed bh option [ 88.343777][T12963] xt_CT: No such helper "snmp_trap" [ 88.355845][T12951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.440840][T12951] EXT4-fs error (device loop4): __ext4_remount:6804: comm syz.4.3069: Abort forced by user [ 88.458950][T12951] EXT4-fs (loop4): Remounting filesystem read-only [ 88.465766][T12951] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 88.517868][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.605673][T12986] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.612929][T12986] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.626323][T12986] team0: left promiscuous mode [ 88.631299][T12986] team_slave_0: left promiscuous mode [ 88.641387][T12986] team_slave_1: left promiscuous mode [ 88.710043][T13012] xt_CT: No such helper "snmp_trap" [ 88.718092][T12986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.740047][T12986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.812132][T12986] geneve2: left allmulticast mode [ 88.823802][T12986] veth3: left promiscuous mode [ 88.828605][T12986] veth3: left allmulticast mode [ 88.863815][T12986] ip6tnl1: left allmulticast mode [ 88.874247][T13030] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 88.883460][T12986] bridge1: left promiscuous mode [ 88.893454][T12986] bond1: left promiscuous mode [ 88.906767][T12986] bond1: left allmulticast mode [ 88.921815][ T30] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.959542][ T30] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.991254][ T30] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.009684][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.035274][T13045] loop0: detected capacity change from 0 to 1024 [ 89.051702][T13045] EXT4-fs: Ignoring removed orlov option [ 89.072395][T13045] EXT4-fs: Ignoring removed bh option [ 89.081722][T13053] bond2: option mode: invalid value (9) [ 89.110076][T13053] bond2 (unregistering): Released all slaves [ 89.147889][T13045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.182889][ T28] audit: type=1400 audit(89.165:651): avc: denied { ioctl } for pid=13143 comm="syz.2.3115" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.226592][T13045] EXT4-fs error (device loop0): __ext4_remount:6804: comm syz.0.3097: Abort forced by user [ 89.289754][T13045] EXT4-fs (loop0): Remounting filesystem read-only [ 89.299570][T13045] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 89.377335][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.491502][T13176] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.498807][T13176] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.538190][T13176] team0: left promiscuous mode [ 89.549229][T13176] team_slave_0: left promiscuous mode [ 89.560241][T13176] team_slave_1: left promiscuous mode [ 89.633690][T13176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.644779][T13176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.694730][T13176] gtp0: left promiscuous mode [ 89.699475][T13176] gtp0: left allmulticast mode [ 89.704421][T13176] ip6tnl3: left allmulticast mode [ 89.711805][T13176] bridge2: left promiscuous mode [ 89.742842][T13188] bond1: option mode: invalid value (9) [ 89.750275][T13188] bond1 (unregistering): Released all slaves [ 89.772259][T13192] netlink: 'syz.3.3119': attribute type 1 has an invalid length. [ 89.789317][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.807652][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.841890][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.871095][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.898504][T13279] loop2: detected capacity change from 0 to 1024 [ 89.912501][T13279] EXT4-fs: Ignoring removed orlov option [ 89.927029][T13279] EXT4-fs: Ignoring removed bh option [ 89.967063][T13279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.011494][T13300] __nla_validate_parse: 1 callbacks suppressed [ 90.011511][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3132'. [ 90.030542][ T28] audit: type=1400 audit(90.015:652): avc: denied { setopt } for pid=13299 comm="syz.3.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.088241][T13279] EXT4-fs error (device loop2): __ext4_remount:6804: comm syz.2.3127: Abort forced by user [ 90.118177][T13279] EXT4-fs (loop2): Remounting filesystem read-only [ 90.150440][T13311] netlink: 'syz.0.3137': attribute type 1 has an invalid length. [ 90.152213][T13279] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.198697][ T28] audit: type=1400 audit(90.175:653): avc: denied { connect } for pid=13316 comm="syz.4.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.265306][T13322] loop0: detected capacity change from 0 to 1764 [ 90.273923][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.302643][ T28] audit: type=1400 audit(90.285:654): avc: denied { mount } for pid=13321 comm="syz.0.3142" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 90.378774][ T28] audit: type=1400 audit(90.295:655): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 90.488847][T13369] netlink: 'syz.2.3154': attribute type 1 has an invalid length. [ 91.533208][T13398] loop1: detected capacity change from 0 to 1024 [ 91.542524][T13398] EXT4-fs: Ignoring removed orlov option [ 91.548264][T13398] EXT4-fs: Ignoring removed bh option [ 91.560735][T13398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.577063][T13398] EXT4-fs error (device loop1): __ext4_remount:6804: comm syz.1.3156: Abort forced by user [ 91.587240][T13398] EXT4-fs (loop1): Remounting filesystem read-only [ 91.593782][T13398] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.612716][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.707788][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'. [ 91.749189][T13437] netlink: 'syz.1.3177': attribute type 5 has an invalid length. [ 91.898599][T13451] loop1: detected capacity change from 0 to 1024 [ 91.934681][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3185'. [ 91.944060][T13451] EXT4-fs: Ignoring removed orlov option [ 91.975532][T13451] EXT4-fs: Ignoring removed bh option [ 91.990651][T13459] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 92.042389][T13451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.060941][T13470] loop4: detected capacity change from 0 to 1764 [ 92.071723][T13451] EXT4-fs error (device loop1): __ext4_remount:6804: comm syz.1.3182: Abort forced by user [ 92.126220][T13451] EXT4-fs (loop1): Remounting filesystem read-only [ 92.132937][T13451] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.297650][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.408078][T13511] loop3: detected capacity change from 0 to 136 [ 92.477885][T13527] netlink: 'syz.2.3202': attribute type 5 has an invalid length. [ 92.518158][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 92.641782][T13563] loop4: detected capacity change from 0 to 136 [ 92.736108][T13578] xt_connbytes: Forcing CT accounting to be enabled [ 92.851834][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3223'. [ 92.947447][T13613] xt_connbytes: Forcing CT accounting to be enabled [ 93.020252][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3234'. [ 93.081603][ T28] audit: type=1400 audit(93.065:656): avc: denied { ioctl } for pid=13634 comm="syz.2.3238" path="socket:[26601]" dev="sockfs" ino=26601 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.247618][T13669] xt_connbytes: Forcing CT accounting to be enabled [ 93.758597][T13782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3282'. [ 95.150255][T13793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3285'. [ 95.168825][T13793] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 95.300120][T13830] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3296' sets config #1 [ 95.414335][T13856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3305'. [ 95.429399][T13856] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 95.501849][T13869] xt_TCPMSS: Only works on TCP SYN packets [ 95.571501][ T28] audit: type=1400 audit(95.555:657): avc: denied { cpu } for pid=13883 comm="syz.0.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 95.606592][T13890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.613904][T13890] IPv6: NLM_F_CREATE should be set when creating new route [ 95.621226][T13890] IPv6: NLM_F_CREATE should be set when creating new route [ 95.628411][T13890] IPv6: NLM_F_CREATE should be set when creating new route [ 95.735599][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3320'. [ 95.766395][T13905] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 95.809909][T13923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3327'. [ 96.023035][T13962] netlink: 'syz.4.3340': attribute type 39 has an invalid length. [ 96.086905][T13981] netlink: 'syz.0.3346': attribute type 10 has an invalid length. [ 96.114101][T13981] team0: Device vxcan1 is of different type [ 96.205367][T13995] Cannot find set identified by id 0 to match [ 96.318485][T14014] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3356' sets config #1 [ 96.467740][T14041] netlink: 'syz.0.3364': attribute type 39 has an invalid length. [ 96.626983][T14073] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3373' sets config #1 [ 98.725856][T14108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.733108][T14108] IPv6: NLM_F_CREATE should be set when creating new route [ 98.740356][T14108] IPv6: NLM_F_CREATE should be set when creating new route [ 98.747575][T14108] IPv6: NLM_F_CREATE should be set when creating new route [ 98.829759][T14126] netlink: 'syz.2.3389': attribute type 39 has an invalid length. [ 98.836433][T14127] netlink: 'syz.1.3390': attribute type 10 has an invalid length. [ 98.866157][T14127] team0: Device vxcan1 is of different type [ 99.436306][T14294] netlink: 'syz.4.3441': attribute type 11 has an invalid length. [ 99.486859][T14294] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3441'. [ 99.530113][T14315] netlink: 'syz.0.3451': attribute type 3 has an invalid length. [ 99.600358][T14329] netlink: 'syz.3.3455': attribute type 10 has an invalid length. [ 99.613893][T14329] team0: Device vxcan1 is of different type [ 99.627710][T14334] netlink: 'syz.2.3458': attribute type 12 has an invalid length. [ 99.691900][T14353] netlink: 'syz.1.3466': attribute type 3 has an invalid length. [ 99.815743][T14387] team0: Device vxcan1 is of different type [ 99.901490][ T28] audit: type=1400 audit(99.885:658): avc: denied { validate_trans } for pid=14405 comm="syz.0.3478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.950005][T14418] bond1 (unregistering): Released all slaves [ 99.976148][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'. [ 100.112919][T14516] batadv_slave_0: entered promiscuous mode [ 100.114009][T14521] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3498'. [ 100.134480][T14516] batadv_slave_0: entered allmulticast mode [ 100.151494][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3495'. [ 100.168597][T14516] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 100.185563][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 100.194711][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 100.268420][T14542] bond1 (unregistering): Released all slaves [ 100.345183][T14626] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3512'. [ 100.480870][T14658] batadv_slave_0: entered promiscuous mode [ 100.496702][T14658] batadv_slave_0: entered allmulticast mode [ 100.504216][T14658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3522'. [ 100.513861][T14658] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 100.566112][T14672] bond2 (unregistering): Released all slaves [ 100.713053][T14772] batadv_slave_0: entered promiscuous mode [ 100.739918][T14772] batadv_slave_0: entered allmulticast mode [ 100.740037][T14772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3540'. [ 100.740052][T14772] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 100.814911][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3545'. [ 100.855993][ T28] audit: type=1400 audit(100.835:659): avc: denied { read write } for pid=14796 comm="syz.1.3559" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 100.901734][ T28] audit: type=1400 audit(100.835:660): avc: denied { open } for pid=14796 comm="syz.1.3559" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 100.937402][T14802] bond2 (unregistering): Released all slaves [ 101.110429][T14911] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3573'. [ 101.284695][T14951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3579'. [ 101.293895][T14957] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3582'. [ 101.438800][T14990] xt_ipcomp: unknown flags 1D [ 101.543993][T15019] loop1: detected capacity change from 0 to 1024 [ 101.587295][T15019] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 101.621923][T15019] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 101.647802][T15019] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 101.684626][T15019] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #5: comm syz.1.3606: unexpected bad inode w/o EXT4_IGET_BAD [ 101.716226][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3617'. [ 101.728302][T15019] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 101.728512][T15019] EXT4-fs (loop1): no journal found [ 101.737586][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 101.737608][ C1] EXT4-fs (loop1): initial error at time 101: ext4_get_journal_inode:5863: inode 5 [ 101.737648][ C1] EXT4-fs (loop1): last error at time 101: ext4_get_journal_inode:5863: inode 5 [ 101.770904][T15019] EXT4-fs (loop1): can't get journal size [ 101.780131][T15019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.785359][T15065] validate_nla: 12 callbacks suppressed [ 101.785376][T15065] netlink: 'syz.4.3620': attribute type 21 has an invalid length. [ 101.807112][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.816253][T15067] loop2: detected capacity change from 0 to 1764 [ 101.837626][ T28] audit: type=1400 audit(101.805:661): avc: denied { mounton } for pid=15062 comm="syz.2.3621" path="/749/file1" dev="tmpfs" ino=3779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.894805][T15085] netlink: 'syz.1.3624': attribute type 12 has an invalid length. [ 101.963592][ T28] audit: type=1400 audit(101.945:662): avc: denied { read } for pid=15099 comm="syz.0.3631" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.101270][T15139] netlink: 'syz.4.3643': attribute type 12 has an invalid length. [ 102.151860][ T28] audit: type=1400 audit(102.125:663): avc: denied { setopt } for pid=15146 comm="syz.2.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.285612][T15182] xt_ipcomp: unknown flags 1D [ 102.482594][T15231] xt_ipcomp: unknown flags 1D [ 102.667526][T15268] netlink: 'syz.3.3685': attribute type 21 has an invalid length. [ 102.733788][T15276] loop4: detected capacity change from 0 to 1024 [ 102.768486][T15276] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 102.779652][T15276] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 102.797079][T15276] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 102.814099][T15276] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: inode #5: comm syz.4.3686: unexpected bad inode w/o EXT4_IGET_BAD [ 102.827509][T15276] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 102.827637][T15276] EXT4-fs (loop4): no journal found [ 102.836684][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 102.836704][ C0] EXT4-fs (loop4): initial error at time 102: ext4_get_journal_inode:5863: inode 5 [ 102.836746][ C0] EXT4-fs (loop4): last error at time 102: ext4_get_journal_inode:5863: inode 5 [ 102.867039][T15276] EXT4-fs (loop4): can't get journal size [ 102.873765][T15276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.903474][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.943643][T15292] xt_ipcomp: unknown flags 1D [ 103.048475][T15305] loop3: detected capacity change from 0 to 1764 [ 103.158850][T15327] netlink: 'syz.0.3701': attribute type 21 has an invalid length. [ 103.278967][T15350] xt_ipcomp: unknown flags 1D [ 103.286281][ T28] audit: type=1400 audit(103.265:664): avc: denied { create } for pid=15354 comm="syz.4.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.316312][ T28] audit: type=1400 audit(103.295:665): avc: denied { setopt } for pid=15354 comm="syz.4.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.389638][ T28] audit: type=1400 audit(103.355:666): avc: denied { getopt } for pid=15368 comm="syz.1.3718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.494105][T15397] xt_TCPMSS: Only works on TCP SYN packets [ 103.557322][ T28] audit: type=1400 audit(103.535:667): avc: denied { sys_module } for pid=15405 comm="syz.3.3730" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.885671][T15483] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 103.934556][T15483] bond1 (unregistering): Released all slaves [ 104.204869][T15608] loop3: detected capacity change from 0 to 1024 [ 104.222770][T15619] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 104.243361][T15608] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 104.299949][T15608] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 104.340541][T15608] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 104.365376][T15608] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #5: comm syz.3.3777: unexpected bad inode w/o EXT4_IGET_BAD [ 104.439963][T15608] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 104.440226][T15608] EXT4-fs (loop3): no journal found [ 104.454490][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 104.454506][ C1] EXT4-fs (loop3): initial error at time 104: ext4_get_journal_inode:5863: inode 5 [ 104.454553][ C1] EXT4-fs (loop3): last error at time 104: ext4_get_journal_inode:5863: inode 5 [ 104.502532][T15608] EXT4-fs (loop3): can't get journal size [ 104.508948][T15608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.534955][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.552102][T15655] xt_TCPMSS: Only works on TCP SYN packets [ 104.797322][T15701] xt_TCPMSS: Only works on TCP SYN packets [ 105.096374][T15768] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 105.126105][T15768] bond2 (unregistering): Released all slaves [ 105.199348][T15846] __nla_validate_parse: 15 callbacks suppressed [ 105.199363][T15846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3839'. [ 105.219466][T15846] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3839'. [ 105.363058][T15872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3848'. [ 105.639142][T15920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3865'. [ 105.777767][ T220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.778605][T15953] netlink: 'syz.4.3879': attribute type 17 has an invalid length. [ 105.802424][ T220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.833593][T15953] netlink: 'syz.4.3879': attribute type 16 has an invalid length. [ 105.845142][ T220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.877031][ T220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.877477][T15953] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3879'. [ 105.973726][T15976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3888'. [ 105.996741][T15976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3888'. [ 106.065264][T15992] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 106.085099][T15992] bond1 (unregistering): Released all slaves [ 106.111972][T16032] loop2: detected capacity change from 0 to 4096 [ 106.140271][T16032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.155924][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 106.155939][ T28] audit: type=1400 audit(106.135:694): avc: denied { remove_name } for pid=16030 comm="syz.2.3895" name="file3" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.184692][ T28] audit: type=1400 audit(106.165:695): avc: denied { rename } for pid=16030 comm="syz.2.3895" name="file3" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.205576][T16032] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3895: corrupted inode contents [ 106.206744][ T28] audit: type=1400 audit(106.165:696): avc: denied { unlink } for pid=16030 comm="syz.2.3895" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.240061][T16032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.242402][T16032] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.3895: mark_inode_dirty error [ 106.263097][T16032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.266654][T16032] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3895: corrupted inode contents [ 106.293156][T16032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.293925][T16032] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.3895: mark_inode_dirty error [ 106.315312][T16032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.319480][T16032] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3895: corrupted inode contents [ 106.349530][T16032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.349715][T16032] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.3895: mark_inode_dirty error [ 106.371591][T16032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.371778][T16032] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3895: corrupted inode contents [ 106.393144][T16032] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.393295][T16032] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.3895: mark_inode_dirty error [ 106.414023][T16032] EXT4-fs error (device loop2): ext4_evict_inode:266: comm syz.2.3895: couldn't truncate inode 15 (err -117) [ 106.456940][T16093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3906'. [ 106.470033][T16093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3906'. [ 106.484954][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.524049][T16103] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 106.840271][T16156] x_tables: duplicate underflow at hook 3 [ 106.984508][ T28] audit: type=1400 audit(106.965:697): avc: denied { create } for pid=16178 comm="syz.4.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 107.036866][ T28] audit: type=1400 audit(107.005:698): avc: denied { read } for pid=16178 comm="syz.4.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 107.327053][T16200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3943'. [ 107.354245][T16200] gre0: Master is either lo or non-ether device [ 107.499846][ T28] audit: type=1400 audit(107.485:699): avc: denied { append } for pid=16225 comm="syz.3.3951" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.975743][T16299] x_tables: duplicate underflow at hook 3 [ 108.124719][T16320] loop0: detected capacity change from 0 to 4096 [ 108.161303][T16320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.239592][T16320] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3985: corrupted inode contents [ 108.269593][T16320] fserror_report: 1 callbacks suppressed [ 108.269608][T16320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.299484][T16320] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.3985: mark_inode_dirty error [ 108.337532][T16354] netlink: 'syz.2.3995': attribute type 21 has an invalid length. [ 108.359858][T16320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.362368][T16320] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3985: corrupted inode contents [ 108.399598][T16355] gre0: Master is either lo or non-ether device [ 108.408011][T16320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.408302][T16320] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.3985: mark_inode_dirty error [ 108.488874][T16320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.489039][T16320] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3985: corrupted inode contents [ 108.529485][T16320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.529689][T16320] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.3985: mark_inode_dirty error [ 108.552982][T16383] loop3: detected capacity change from 0 to 512 [ 108.569670][T16320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.569815][T16320] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.3985: corrupted inode contents [ 108.600062][T16383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.625079][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.653508][T16320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.653755][T16320] EXT4-fs error (device loop0): ext4_truncate:4587: inode #15: comm syz.0.3985: mark_inode_dirty error [ 108.653785][T16320] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.653945][T16320] EXT4-fs error (device loop0): ext4_evict_inode:266: comm syz.0.3985: couldn't truncate inode 15 (err -117) [ 108.700525][T16401] gre0: Master is either lo or non-ether device [ 108.727367][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.959395][T16444] loop3: detected capacity change from 0 to 4096 [ 108.979816][T16444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.983425][T16444] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.4024: corrupted inode contents [ 108.983450][T16444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.983549][T16444] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.4024: mark_inode_dirty error [ 108.983570][T16444] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.983670][T16444] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.4024: corrupted inode contents [ 108.983863][T16444] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.4024: mark_inode_dirty error [ 108.984033][T16444] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.4024: corrupted inode contents [ 108.984136][T16444] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.4024: mark_inode_dirty error [ 108.984237][T16444] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.4024: corrupted inode contents [ 108.984403][T16444] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.4024: mark_inode_dirty error [ 108.984561][T16444] EXT4-fs error (device loop3): ext4_evict_inode:266: comm syz.3.4024: couldn't truncate inode 15 (err -117) [ 109.021611][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.137709][T16475] netlink: 'syz.0.4035': attribute type 21 has an invalid length. [ 109.246189][ T28] audit: type=1400 audit(109.225:700): avc: denied { connect } for pid=16486 comm="syz.1.4040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.286600][T16498] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16498 comm=syz.1.4044 [ 109.380682][ T28] audit: type=1400 audit(109.365:701): avc: denied { getopt } for pid=16514 comm="syz.3.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.466851][T16531] netlink: 'syz.4.4055': attribute type 21 has an invalid length. [ 109.499884][T16539] netlink: 'syz.3.4054': attribute type 10 has an invalid length. [ 109.539783][T16551] loop1: detected capacity change from 0 to 128 [ 109.569365][T16539] team0: Device wg1 is of different type [ 109.585722][ T28] audit: type=1400 audit(109.555:702): avc: denied { setopt } for pid=16554 comm="syz.2.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.704151][T16586] loop0: detected capacity change from 0 to 512 [ 109.757838][T16586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.803014][ T28] audit: type=1400 audit(109.775:703): avc: denied { ioctl } for pid=16603 comm="syz.1.4082" path="socket:[32648]" dev="sockfs" ino=32648 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.855290][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.899120][T16620] loop1: detected capacity change from 0 to 512 [ 109.970112][T16620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.052196][T16658] xt_CONNSECMARK: invalid mode: 0 [ 110.098870][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.136690][T16669] loop4: detected capacity change from 0 to 128 [ 110.252241][T16708] loop3: detected capacity change from 0 to 128 [ 110.306184][T16718] __nla_validate_parse: 3 callbacks suppressed [ 110.306201][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4120'. [ 110.451568][T16756] loop2: detected capacity change from 0 to 128 [ 110.509570][T16771] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16771 comm=syz.0.4137 [ 110.580960][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4145'. [ 110.660264][T16811] xt_CONNSECMARK: invalid mode: 0 [ 110.707379][T16820] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 110.785554][T16828] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16828 comm=syz.2.4156 [ 110.847769][T16842] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4160'. [ 110.896485][T16852] : renamed from dummy0 [ 110.937050][T16858] xt_CONNSECMARK: invalid mode: 0 [ 110.963176][T16863] bond2: option all_slaves_active: invalid value (5) [ 110.975952][T16863] bond2 (unregistering): Released all slaves [ 111.037889][T16942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16942 comm=syz.3.4171 [ 111.097280][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4173'. [ 111.138230][T16960] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4175'. [ 111.181915][T16966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4179'. [ 111.242284][T16972] Option 'ڼeF 2͂ K*Ϫ,۟nyB6f[A [ 111.242284][T16972] Q׿2:[kz' to dns_resolver key: bad/missing value [ 111.267642][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4184'. [ 111.292182][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4184'. [ 111.329521][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 111.380359][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 111.408596][T17004] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 111.611080][ T28] audit: type=1326 audit(111.595:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17030 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9f1bc799 code=0x7ffc0000 [ 111.721185][ T28] audit: type=1326 audit(111.595:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17030 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9f1bc799 code=0x7ffc0000 [ 111.771012][T17043] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 111.822695][ T28] audit: type=1326 audit(111.595:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17030 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fcb9f1bc799 code=0x7ffc0000 [ 111.868272][ T28] audit: type=1326 audit(111.595:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17030 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9f1bc799 code=0x7ffc0000 [ 111.902308][ T28] audit: type=1326 audit(111.595:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17030 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9f1bc799 code=0x7ffc0000 [ 111.968298][T17063] netlink: 'syz.0.4213': attribute type 3 has an invalid length. [ 111.970563][ T28] audit: type=1400 audit(111.665:709): avc: denied { getopt } for pid=17034 comm="syz.3.4204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.009627][T17063] netlink: 'syz.0.4213': attribute type 3 has an invalid length. [ 112.458762][ T28] audit: type=1326 audit(112.435:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.3.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49796cc799 code=0x7ffc0000 [ 112.520558][ T28] audit: type=1326 audit(112.475:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.3.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49796cc799 code=0x7ffc0000 [ 112.584549][ T28] audit: type=1326 audit(112.475:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.3.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f49796cc799 code=0x7ffc0000 [ 112.641602][ T28] audit: type=1326 audit(112.475:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.3.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49796cc799 code=0x7ffc0000 [ 112.755745][T17191] : renamed from dummy0 [ 112.816301][T17197] bond1: option all_slaves_active: invalid value (5) [ 112.836077][T17197] bond1 (unregistering): Released all slaves [ 112.920095][T17280] loop4: detected capacity change from 0 to 512 [ 112.958378][T17280] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.985102][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.112842][T17317] : renamed from dummy0 [ 113.235338][T17338] netlink: 'syz.1.4275': attribute type 3 has an invalid length. [ 113.252980][T17338] netlink: 'syz.1.4275': attribute type 3 has an invalid length. [ 113.385998][T17367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.595154][T17417] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 113.622176][T17422] loop0: detected capacity change from 0 to 512 [ 113.662088][T17422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.699819][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.772290][T17463] loop1: detected capacity change from 0 to 764 [ 113.873248][T17486] loop2: detected capacity change from 0 to 512 [ 113.951212][T17486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.050385][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.095295][T17533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.389409][T17610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.442898][T17625] xt_ecn: cannot match TCP bits for non-tcp packets [ 114.514691][T17641] loop4: detected capacity change from 0 to 764 [ 114.554114][T17653] sctp: [Deprecated]: syz.1.4375 (pid 17653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.554114][T17653] Use struct sctp_sack_info instead [ 114.595542][T17659] netlink: 'syz.0.4377': attribute type 1 has an invalid length. [ 114.763172][T17702] netlink: 'syz.4.4392': attribute type 4 has an invalid length. [ 114.832877][T17718] loop2: detected capacity change from 0 to 764 [ 115.018104][T17757] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.117680][T17780] loop0: detected capacity change from 0 to 764 [ 115.308625][T17824] xt_ecn: cannot match TCP bits for non-tcp packets [ 115.356586][T17835] sctp: [Deprecated]: syz.2.4431 (pid 17835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.356586][T17835] Use struct sctp_sack_info instead [ 115.421120][T17842] netlink: 'syz.4.4434': attribute type 1 has an invalid length. [ 115.438273][T17842] __nla_validate_parse: 12 callbacks suppressed [ 115.438290][T17842] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4434'. [ 115.444795][T17850] loop3: detected capacity change from 0 to 764 [ 115.582334][T17883] sctp: [Deprecated]: syz.0.4444 (pid 17883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.582334][T17883] Use struct sctp_sack_info instead [ 115.757707][T17919] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 115.836719][T17939] netlink: 'syz.4.4460': attribute type 46 has an invalid length. [ 115.863379][T17942] netlink: 'syz.0.4463': attribute type 4 has an invalid length. [ 116.040414][T17993] netlink: 'syz.1.4479': attribute type 4 has an invalid length. [ 116.053409][T17997] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 116.059947][T17997] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.088784][T17997] vhci_hcd vhci_hcd.0: Device attached [ 116.104949][T18008] netlink: 'syz.1.4482': attribute type 1 has an invalid length. [ 116.121983][T18008] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4482'. [ 116.131735][T17999] vhci_hcd: connection closed [ 116.131871][ T30] vhci_hcd vhci_hcd.2: stop threads [ 116.145910][ T30] vhci_hcd vhci_hcd.2: release socket [ 116.156760][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 116.191398][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4488'. [ 116.493917][T18103] netlink: 'syz.3.4521': attribute type 46 has an invalid length. [ 116.733630][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 116.733644][ T28] audit: type=1400 audit(116.715:751): avc: denied { append } for pid=18164 comm="syz.0.4529" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.738866][T18165] netlink: 'syz.1.4528': attribute type 46 has an invalid length. [ 117.042821][ T28] audit: type=1400 audit(117.025:752): avc: denied { write } for pid=18235 comm="syz.3.4565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.129146][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4574'. [ 117.186273][T18271] netlink: 'syz.1.4567': attribute type 3 has an invalid length. [ 117.206567][T18271] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4567'. [ 117.449621][T18340] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.473476][T18340] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.540860][ T28] audit: type=1400 audit(117.525:753): avc: denied { mac_admin } for pid=18360 comm="syz.2.4598" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.567848][T18363] SELinux: Context Y is not valid (left unmapped). [ 117.860484][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4619'. [ 118.090436][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'. [ 118.234367][T18495] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 118.240901][T18495] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.252024][T18501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4643'. [ 118.312282][T18495] vhci_hcd vhci_hcd.0: Device attached [ 118.320168][T18498] vhci_hcd: connection closed [ 118.320416][ T50] vhci_hcd vhci_hcd.3: stop threads [ 118.347278][ T50] vhci_hcd vhci_hcd.3: release socket [ 118.362679][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 118.503867][T18549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4658'. [ 118.536935][T18553] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 118.545544][T18553] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.654603][T18563] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 118.662200][T18563] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.920761][T18578] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 119.017340][T18595] batadv_slave_0: left promiscuous mode [ 119.052410][T18595] batadv_slave_0: left allmulticast mode [ 119.108835][T18605] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 119.115451][T18605] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 119.173405][T18605] vhci_hcd vhci_hcd.0: Device attached [ 119.180270][T18608] vhci_hcd: connection closed [ 119.180396][ T220] vhci_hcd vhci_hcd.4: stop threads [ 119.190741][ T220] vhci_hcd vhci_hcd.4: release socket [ 119.196141][ T220] vhci_hcd vhci_hcd.4: disconnect device [ 119.306434][T18618] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 119.508980][T18656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4695'. [ 119.789362][ T28] audit: type=1400 audit(119.765:754): avc: denied { write } for pid=18712 comm="syz.0.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.056791][T18773] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 120.598134][T18881] __nla_validate_parse: 2 callbacks suppressed [ 120.598148][T18881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4767'. [ 120.678746][T18897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4774'. [ 120.689799][T18897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4774'. [ 120.792259][ T28] audit: type=1400 audit(120.765:755): avc: denied { bind } for pid=18917 comm="syz.4.4781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.849874][ T28] audit: type=1400 audit(120.765:756): avc: denied { name_bind } for pid=18917 comm="syz.4.4781" src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 120.908777][ T28] audit: type=1400 audit(120.765:757): avc: denied { node_bind } for pid=18917 comm="syz.4.4781" saddr=ff01::1 src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 121.700041][T19009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4819'. [ 121.734825][T19009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4819'. [ 121.775503][ T28] audit: type=1326 audit(121.755:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.4.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 121.849580][ T28] audit: type=1326 audit(121.755:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.4.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 121.920134][ T28] audit: type=1326 audit(121.785:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.4.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 121.955477][ T28] audit: type=1326 audit(121.785:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.4.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 122.001029][ T28] audit: type=1326 audit(121.785:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19021 comm="syz.4.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 122.109387][T19082] validate_nla: 2 callbacks suppressed [ 122.109405][T19082] netlink: 'syz.0.4836': attribute type 26 has an invalid length. [ 122.221799][ T28] audit: type=1400 audit(122.205:763): avc: denied { bind } for pid=19101 comm="syz.2.4842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.295395][ T28] audit: type=1400 audit(122.205:764): avc: denied { node_bind } for pid=19101 comm="syz.2.4842" saddr=ffff:ff7f::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 122.354376][ T28] audit: type=1326 audit(122.235:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.0.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9f1bc799 code=0x7ffc0000 [ 122.377357][ T28] audit: type=1326 audit(122.235:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.0.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fcb9f1bc799 code=0x7ffc0000 [ 122.429746][ T28] audit: type=1326 audit(122.235:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.0.4844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9f1bc799 code=0x7ffc0000 [ 122.667709][T19190] netlink: 'syz.2.4881': attribute type 26 has an invalid length. [ 122.909077][T19235] netlink: 'syz.3.4886': attribute type 26 has an invalid length. [ 123.093402][T19278] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4901'. [ 123.137520][T19278] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4901'. [ 123.287997][T19312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4909'. [ 123.298329][T19312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4909'. [ 123.309557][T19316] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4908'. [ 123.990710][T19459] vhci_hcd vhci_hcd.0: invalid port number 255 [ 124.002313][T19459] vhci_hcd vhci_hcd.0: invalid port number 255 [ 124.693186][T19605] vhci_hcd vhci_hcd.0: invalid port number 255 [ 124.699386][T19605] vhci_hcd vhci_hcd.0: invalid port number 255 [ 124.881872][T19643] SELinux: Context system_u: is not valid (left unmapped). [ 124.902117][T19651] vhci_hcd vhci_hcd.0: invalid port number 255 [ 124.928091][T19651] vhci_hcd vhci_hcd.0: invalid port number 255 [ 126.269586][T19799] __nla_validate_parse: 6 callbacks suppressed [ 126.269604][T19799] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.5067'. [ 126.408462][T19827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5079'. [ 126.463627][T19840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5083'. [ 126.566891][T19862] loop4: detected capacity change from 0 to 512 [ 126.580659][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5091'. [ 126.594763][T19862] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.673616][T19862] EXT4-fs (loop4): 1 truncate cleaned up [ 126.709900][T19862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.780551][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.813216][T19926] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5110'. [ 126.819036][T19928] syz.2.5111 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.909068][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 126.909084][ T28] audit: type=1400 audit(126.885:799): avc: denied { create } for pid=19944 comm="syz.1.5116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 126.971126][T19958] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.5121'. [ 126.986568][ T28] audit: type=1400 audit(126.885:800): avc: denied { ioctl } for pid=19944 comm="syz.1.5116" path="socket:[40445]" dev="sockfs" ino=40445 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.092416][T19984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5130'. [ 127.159680][T20000] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.5135'. [ 127.198354][T20009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5134'. [ 127.245673][T20018] gtp0: entered promiscuous mode [ 127.263278][T20018] gtp0: entered allmulticast mode [ 127.271866][ T28] audit: type=1326 audit(127.255:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz.4.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 127.330421][ T28] audit: type=1326 audit(127.255:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz.4.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 127.354210][ T28] audit: type=1326 audit(127.255:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz.4.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 127.425498][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5155'. [ 127.440114][T20052] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 127.500054][T20052] bond2 (unregistering): Released all slaves [ 127.511428][ T28] audit: type=1326 audit(127.255:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz.4.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 127.566296][ T28] audit: type=1326 audit(127.255:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz.4.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 127.669556][ T28] audit: type=1326 audit(127.255:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz.4.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 127.716565][T20169] netlink: 'syz.4.5173': attribute type 12 has an invalid length. [ 127.757077][ T28] audit: type=1326 audit(127.255:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz.4.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 127.785146][ T28] audit: type=1326 audit(127.255:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20029 comm="syz.4.5145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 127.815102][T20191] loop1: detected capacity change from 0 to 512 [ 127.827991][T20191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.853741][T20191] EXT4-fs (loop1): 1 truncate cleaned up [ 127.865202][T20191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.919485][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.062157][T20231] loop3: detected capacity change from 0 to 8192 [ 128.074175][T20231] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.089848][T20231] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 128.097888][T20231] FAT-fs (loop3): Filesystem has been set read-only [ 128.115662][T20255] loop0: detected capacity change from 0 to 512 [ 128.126695][T20255] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.137568][T20231] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 128.145833][T20231] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 128.166770][T20255] EXT4-fs (loop0): 1 truncate cleaned up [ 128.177329][T20255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.210751][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.526037][T20352] loop3: detected capacity change from 0 to 1024 [ 128.545236][T20352] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 128.569503][T20352] System zones: 0-1, 3-36 [ 128.576669][T20364] netlink: 'syz.2.5236': attribute type 12 has an invalid length. [ 128.585168][T20352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.668355][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.682575][T20380] gtp1: entered promiscuous mode [ 128.693278][T20380] gtp1: entered allmulticast mode [ 128.836108][T20416] netlink: 'syz.0.5250': attribute type 12 has an invalid length. [ 129.071624][T20468] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 129.136620][T20468] bond1 (unregistering): Released all slaves [ 129.157589][T20518] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 129.297325][T20577] loop4: detected capacity change from 0 to 8192 [ 129.319262][T20577] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.334348][T20577] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 129.346384][T20577] FAT-fs (loop4): Filesystem has been set read-only [ 129.360512][T20577] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 129.368571][T20577] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 129.448084][T20615] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 129.459060][T20615] bond1 (unregistering): Released all slaves [ 129.500596][T20691] loop4: detected capacity change from 0 to 1024 [ 129.523845][T20691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 129.577632][T20691] System zones: 0-1, 3-36 [ 129.592071][T20691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.692052][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.693160][T20726] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 129.781196][T20731] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 129.860545][T20731] bond2 (unregistering): Released all slaves [ 129.890989][T20799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.932273][T20839] loop0: detected capacity change from 0 to 1024 [ 129.951328][T20839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 129.966841][T20839] System zones: 0-1, 3-36 [ 129.990649][T20839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.014846][T20854] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 130.025903][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.103796][T20874] netlink: 'syz.2.5344': attribute type 32 has an invalid length. [ 130.304756][T20901] loop1: detected capacity change from 0 to 8192 [ 130.332587][T20901] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.363114][T20901] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 130.394714][T20901] FAT-fs (loop1): Filesystem has been set read-only [ 130.422179][T20901] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 130.455590][T20901] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 130.467945][T20950] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 130.748068][T20999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.896880][T21021] netlink: 'syz.3.5392': attribute type 32 has an invalid length. [ 131.172107][T21061] loop3: detected capacity change from 0 to 512 [ 131.179320][T21060] netlink: 'syz.1.5407': attribute type 32 has an invalid length. [ 131.217846][T21061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.314996][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.361128][T21095] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 131.391736][T21095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.412962][T21105] __nla_validate_parse: 9 callbacks suppressed [ 131.412975][T21105] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5420'. [ 131.424387][T21110] netlink: 'syz.2.5421': attribute type 3 has an invalid length. [ 131.452184][T21110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5421'. [ 131.515458][T21132] netlink: 'syz.0.5428': attribute type 8 has an invalid length. [ 131.658189][T21163] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5439'. [ 131.660942][T21166] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.916944][T21225] netlink: 'syz.0.5459': attribute type 7 has an invalid length. [ 131.921860][T21229] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5460'. [ 131.951974][T21234] set_capacity_and_notify: 1 callbacks suppressed [ 131.951989][T21234] loop4: detected capacity change from 0 to 128 [ 132.106148][T21271] loop4: detected capacity change from 0 to 512 [ 132.193991][T21271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.231161][T21292] netlink: 'syz.0.5475': attribute type 3 has an invalid length. [ 132.238898][T21292] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5475'. [ 132.260562][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 132.260579][ T28] audit: type=1400 audit(132.235:822): avc: denied { getopt } for pid=21294 comm="syz.1.5476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.355883][T21305] loop3: detected capacity change from 0 to 128 [ 132.363771][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.418805][T21314] loop1: detected capacity change from 0 to 512 [ 132.459991][T21314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.482653][T21314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.5482: bg 0: bad block bitmap checksum [ 132.494989][ T28] audit: type=1400 audit(132.465:823): avc: denied { read write } for pid=21311 comm="syz.1.5482" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.554024][T21314] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 132.591645][ T28] audit: type=1400 audit(132.465:824): avc: denied { open } for pid=21311 comm="syz.1.5482" path="/995/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.701179][T21348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5492'. [ 132.729021][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.777761][T21363] loop1: detected capacity change from 0 to 512 [ 132.810161][T21363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.871541][T21383] validate_nla: 2 callbacks suppressed [ 132.871557][T21383] netlink: 'syz.4.5503': attribute type 8 has an invalid length. [ 132.878779][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.991776][T21412] loop0: detected capacity change from 0 to 128 [ 133.162098][T21448] netlink: 'syz.0.5524': attribute type 2 has an invalid length. [ 133.174480][T21445] Cannot find del_set index 2 as target [ 133.180613][T21448] netlink: 'syz.0.5524': attribute type 1 has an invalid length. [ 133.188761][T21448] netlink: 'syz.0.5524': attribute type 1 has an invalid length. [ 133.242072][T21459] loop0: detected capacity change from 0 to 512 [ 133.272398][T21459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.300978][T21459] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 133.340120][T21459] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 133.366330][ T28] audit: type=1400 audit(133.335:825): avc: denied { setopt } for pid=21476 comm="syz.1.5533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.391813][T21459] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.5528: Failed to acquire dquot type 0 [ 133.480420][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.684832][T21537] netlink: 'syz.1.5553': attribute type 46 has an invalid length. [ 133.699868][T21542] loop4: detected capacity change from 0 to 512 [ 133.727524][T21542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.794804][T21542] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.5555: bg 0: bad block bitmap checksum [ 133.855018][T21542] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 133.914587][T21566] netlink: 'syz.2.5563': attribute type 7 has an invalid length. [ 133.938947][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.015035][T21585] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5569'. [ 134.065184][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5569'. [ 134.093268][T21585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5569'. [ 134.102203][T21597] netlink: 'syz.4.5572': attribute type 2 has an invalid length. [ 134.102503][T21585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5569'. [ 134.126336][T21597] netlink: 'syz.4.5572': attribute type 1 has an invalid length. [ 134.145310][T21597] netlink: 'syz.4.5572': attribute type 1 has an invalid length. [ 134.171385][T21604] loop3: detected capacity change from 0 to 512 [ 134.264236][T21618] netlink: 'syz.4.5579': attribute type 7 has an invalid length. [ 134.297428][T21604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.315823][T21604] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.5576: bg 0: bad block bitmap checksum [ 134.328430][T21604] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 134.344582][T21629] loop2: detected capacity change from 0 to 512 [ 134.374478][T21629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.401476][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.418813][T21629] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 134.448624][T21644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.491788][T21629] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 134.523419][T21644] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.5599: bg 0: bad block bitmap checksum [ 134.545160][T21629] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.5580: Failed to acquire dquot type 0 [ 134.568782][T21644] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Filesystem failed CRC [ 134.624609][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.647557][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.691445][T21675] Cannot find del_set index 2 as target [ 134.742412][ T28] audit: type=1400 audit(134.725:826): avc: denied { accept } for pid=21684 comm="syz.4.5600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.859739][T21711] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5606' sets config #-1 [ 134.876299][ T28] audit: type=1400 audit(134.855:827): avc: denied { setattr } for pid=21712 comm="syz.2.5608" name="tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 135.419663][T21822] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.452489][T21822] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5644: bg 0: block 255: padding at end of block bitmap is not set [ 135.511663][T21822] loop2: lost filesystem error report for type 5 error -117 [ 135.511866][T21822] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 135.527917][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 135.527939][ C1] EXT4-fs (loop2): initial error at time 135: ext4_validate_block_bitmap:441 [ 135.527964][ C1] EXT4-fs (loop2): last error at time 135: ext4_validate_block_bitmap:441 [ 135.610042][T21822] loop2: lost filesystem error report for type 5 error -117 [ 135.610284][T21822] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5644: invalid indirect mapped block 1 (level 1) [ 135.670237][T21822] fserror_report: 6 callbacks suppressed [ 135.670252][T21822] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 135.682758][T21822] EXT4-fs (loop2): 1 truncate cleaned up [ 135.729901][T21822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.782618][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.637648][T22007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22007 comm=syz.1.5710 [ 136.744244][T22022] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.884347][T22043] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.905589][T22043] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5725: bg 0: block 255: padding at end of block bitmap is not set [ 136.939498][T22043] loop1: lost filesystem error report for type 5 error -117 [ 136.942234][T22043] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 136.949590][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 136.949631][ C1] EXT4-fs (loop1): initial error at time 136: ext4_validate_block_bitmap:441 [ 136.949659][ C1] EXT4-fs (loop1): last error at time 136: ext4_validate_block_bitmap:441 [ 136.965011][T22058] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 136.973710][T22043] loop1: lost filesystem error report for type 5 error -117 [ 136.999902][T22043] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5725: invalid indirect mapped block 1 (level 1) [ 137.048330][T22043] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.052791][T22043] EXT4-fs (loop1): 1 truncate cleaned up [ 137.112984][T22043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 137.181695][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.204819][T22076] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 137.239661][T22076] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 137.275905][ T28] kauditd_printk_skb: 1297 callbacks suppressed [ 137.275921][ T28] audit: type=1326 audit(137.235:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.305058][T22076] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.329476][ T28] audit: type=1326 audit(137.255:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.363163][T22080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.386065][ T28] audit: type=1326 audit(137.255:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.445810][ T28] audit: type=1326 audit(137.255:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.509499][ T28] audit: type=1326 audit(137.255:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.556881][ T28] audit: type=1326 audit(137.255:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.609456][ T28] audit: type=1326 audit(137.255:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.669579][ T28] audit: type=1326 audit(137.255:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.739648][ T28] audit: type=1326 audit(137.255:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.742583][T22120] __nla_validate_parse: 11 callbacks suppressed [ 137.742598][T22120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5749'. [ 137.809576][T12337] IPVS: starting estimator thread 0... [ 137.815974][ T28] audit: type=1326 audit(137.255:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22037 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x50000 [ 137.950736][T22124] IPVS: using max 2496 ests per chain, 124800 per kthread [ 137.980518][T22144] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 138.076642][T22156] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.199220][T22171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.206466][T22171] IPv6: NLM_F_CREATE should be set when creating new route [ 138.213724][T22171] IPv6: NLM_F_CREATE should be set when creating new route [ 138.226310][T22175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5767'. [ 138.394585][T22188] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 138.519275][T22201] bond0: (slave bond_slave_1): Releasing backup interface [ 138.627997][T22215] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 138.657879][T22215] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 138.683739][T22223] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.088672][T22247] batadv0: entered promiscuous mode [ 139.126703][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5795'. [ 139.405534][T22306] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 139.430474][T22306] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.491209][T22317] bond0: (slave bond_slave_1): Releasing backup interface [ 139.712431][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5834'. [ 139.764901][T22367] bond0: (slave bond_slave_1): Releasing backup interface [ 139.910771][T22398] batadv0: entered promiscuous mode [ 139.946772][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5850'. [ 140.114756][T22450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5873'. [ 140.146999][T22450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5873'. [ 140.164034][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5873'. [ 140.175366][T22453] batadv0: entered promiscuous mode [ 140.483370][T22542] PM: Enabling pm_trace changes system date and time during resume. [ 140.483370][T22542] PM: Correct system time has to be restored manually after resume. [ 140.548657][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5902'. [ 140.832875][T22615] bridge0: port 4(veth0_to_bridge) entered blocking state [ 140.865133][T22615] bridge0: port 4(veth0_to_bridge) entered disabled state [ 140.885768][T22615] veth0_to_bridge: entered allmulticast mode [ 140.895219][T22615] veth0_to_bridge: entered promiscuous mode [ 140.938326][T22633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5925'. [ 141.010179][T22651] tmpfs: Unknown parameter 'context' [ 141.160886][T22689] veth1: entered promiscuous mode [ 141.334769][T22730] PM: Enabling pm_trace changes system date and time during resume. [ 141.334769][T22730] PM: Correct system time has to be restored manually after resume. [ 141.540654][T22777] veth1: entered promiscuous mode [ 141.554748][T22783] PM: Enabling pm_trace changes system date and time during resume. [ 141.554748][T22783] PM: Correct system time has to be restored manually after resume. [ 141.750940][T22824] veth1: entered promiscuous mode [ 141.801374][T22828] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 141.852099][T22851] bridge0: port 3(veth0_to_bridge) entered blocking state [ 141.859366][T22847] tmpfs: Unknown parameter 'context' [ 141.859503][T22851] bridge0: port 3(veth0_to_bridge) entered disabled state [ 141.872278][T22851] veth0_to_bridge: entered allmulticast mode [ 141.878881][T22851] veth0_to_bridge: entered promiscuous mode [ 141.948214][T22862] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 141.954814][T22862] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 141.968730][T22862] vhci_hcd vhci_hcd.0: Device attached [ 141.975595][T22865] vhci_hcd: connection closed [ 141.975888][ T50] vhci_hcd vhci_hcd.2: stop threads [ 141.988239][ T50] vhci_hcd vhci_hcd.2: release socket [ 141.999469][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 142.068841][T22882] tmpfs: Unknown parameter 'context' [ 142.139594][T22897] bridge0: port 5(veth0_to_bridge) entered blocking state [ 142.158749][T22897] bridge0: port 5(veth0_to_bridge) entered disabled state [ 142.181511][T22897] veth0_to_bridge: entered allmulticast mode [ 142.188164][T22897] veth0_to_bridge: entered promiscuous mode [ 142.441284][T22955] set_capacity_and_notify: 3 callbacks suppressed [ 142.441298][T22955] loop0: detected capacity change from 0 to 128 [ 142.498822][T22955] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.500312][T22971] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 142.599395][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.745887][T23020] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 142.806219][T23035] validate_nla: 6 callbacks suppressed [ 142.806234][T23035] netlink: 'syz.2.6065': attribute type 1 has an invalid length. [ 142.993590][T23087] __nla_validate_parse: 13 callbacks suppressed [ 142.993609][T23087] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6085'. [ 143.184878][T23132] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6101'. [ 143.212451][T23137] loop1: detected capacity change from 0 to 128 [ 143.228562][T23140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6104'. [ 143.229760][T23142] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6103'. [ 143.270622][T23137] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.279334][ T28] kauditd_printk_skb: 8624 callbacks suppressed [ 143.279350][ T28] audit: type=1326 audit(143.255:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 143.280917][ T28] audit: type=1326 audit(143.265:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 143.366114][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.378834][ T28] audit: type=1326 audit(143.265:10761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 143.402833][ T28] audit: type=1326 audit(143.265:10762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 143.425823][ T28] audit: type=1326 audit(143.325:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d61c2cfce code=0x7ffc0000 [ 143.448924][ T28] audit: type=1326 audit(143.325:10764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d61c2cfce code=0x7ffc0000 [ 143.472023][ T28] audit: type=1326 audit(143.325:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d61c2cfce code=0x7ffc0000 [ 143.495475][ T28] audit: type=1326 audit(143.325:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d61c2cfce code=0x7ffc0000 [ 143.518737][ T28] audit: type=1326 audit(143.325:10767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d61c2cfce code=0x7ffc0000 [ 143.566570][T23175] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6114'. [ 143.579545][ T28] audit: type=1326 audit(143.325:10768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.4.6109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d61c2cfce code=0x7ffc0000 [ 143.595021][T23180] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6117'. [ 143.621789][T23184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6120'. [ 143.656936][T23191] loop2: detected capacity change from 0 to 128 [ 143.690540][T23191] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.741901][T23206] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 143.748526][T23206] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 143.765509][T23206] vhci_hcd vhci_hcd.0: Device attached [ 143.786659][T23207] vhci_hcd: connection closed [ 143.786791][ T30] vhci_hcd vhci_hcd.4: stop threads [ 143.792350][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.796924][ T30] vhci_hcd vhci_hcd.4: release socket [ 143.812733][ T30] vhci_hcd vhci_hcd.4: disconnect device [ 143.851286][T23225] netlink: 'syz.1.6132': attribute type 1 has an invalid length. [ 144.060681][T23266] netlink: 'syz.3.6148': attribute type 1 has an invalid length. [ 144.193654][T23291] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6154'. [ 144.469499][T23341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 144.476057][T23341] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 144.514911][T23349] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6176'. [ 144.549922][T23341] vhci_hcd vhci_hcd.0: Device attached [ 144.576169][T23343] vhci_hcd: connection closed [ 144.576544][ T30] vhci_hcd vhci_hcd.3: stop threads [ 144.587365][T23363] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 144.602450][T23365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6191'. [ 144.608169][ T30] vhci_hcd vhci_hcd.3: release socket [ 144.623312][ T30] vhci_hcd vhci_hcd.3: disconnect device [ 144.628978][T23363] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 145.385791][T23545] netlink: 'syz.4.6228': attribute type 30 has an invalid length. [ 145.591455][T23582] No such timeout policy "syz1" [ 145.632076][T23588] loop2: detected capacity change from 0 to 512 [ 145.696196][T23588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.812179][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.923885][T23645] loop2: detected capacity change from 0 to 512 [ 145.962959][T23645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.041331][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.777130][T23795] loop4: detected capacity change from 0 to 8192 [ 146.843350][ T3625] loop4: p1 < > p2 p4 < p5 > [ 146.848099][ T3625] loop4: partition table partially beyond EOD, truncated [ 146.865705][ T3625] loop4: p1 start 134217728 is beyond EOD, truncated [ 146.889515][ T3625] loop4: p2 size 591360 extends beyond EOD, truncated [ 146.905047][ T3625] loop4: p5 size 591360 extends beyond EOD, truncated [ 146.920457][T23830] netlink: 'syz.2.6320': attribute type 15 has an invalid length. [ 146.941006][T23795] loop4: p1 < > p2 p4 < p5 > [ 146.945810][T23795] loop4: partition table partially beyond EOD, truncated [ 146.969621][T23795] loop4: p1 start 134217728 is beyond EOD, truncated [ 146.977906][T23848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.996724][T23795] loop4: p2 size 591360 extends beyond EOD, truncated [ 147.013646][T23795] loop4: p5 size 591360 extends beyond EOD, truncated [ 147.151021][T23424] udevd[23424]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 147.168007][ T7628] udevd[7628]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 147.181028][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 147.206125][ T7628] udevd[7628]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 147.217465][T23424] udevd[23424]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 147.228620][ T3625] udevd[3625]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 147.494465][T23962] xt_nfacct: accounting object `syz1' does not exist [ 148.037572][T24272] __nla_validate_parse: 15 callbacks suppressed [ 148.037591][T24272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6407'. [ 148.103554][T24221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.320981][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.343140][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.360072][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.376463][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.377231][ T28] kauditd_printk_skb: 10626 callbacks suppressed [ 148.377246][ T28] audit: type=1400 audit(148.355:21395): avc: denied { bind } for pid=24631 comm="syz.3.6429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.385927][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.429587][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.438898][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.448452][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.457912][T24621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6425'. [ 148.499767][T24643] bond2: Removing last ns target with arp_interval on [ 148.607707][ T28] audit: type=1400 audit(148.585:21396): avc: denied { read } for pid=24702 comm="syz.1.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.694474][T24710] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.893112][T24801] sctp: [Deprecated]: syz.1.6463 (pid 24801) Use of int in max_burst socket option. [ 148.893112][T24801] Use struct sctp_assoc_value instead [ 148.933592][T24807] loop2: detected capacity change from 0 to 256 [ 148.944480][ T28] audit: type=1400 audit(148.925:21397): avc: denied { nlmsg_read } for pid=24808 comm="syz.4.6467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 148.958761][T24807] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.022161][T24807] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.266449][T24880] veth10: entered allmulticast mode [ 149.310109][T24880] veth11: entered promiscuous mode [ 149.371287][T24918] loop4: detected capacity change from 0 to 1764 [ 149.470419][T24950] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 149.553976][T24970] xt_NFQUEUE: number of total queues is 0 [ 149.572987][T24975] loop3: detected capacity change from 0 to 512 [ 149.624637][T24975] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.686023][T24975] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 149.725132][T24975] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6519: bg 0: block 248: padding at end of block bitmap is not set [ 149.729670][ T28] audit: type=1400 audit(149.705:21398): avc: denied { listen } for pid=25010 comm="syz.2.6530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.758503][T24975] loop3: lost filesystem error report for type 5 error -117 [ 149.759484][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 149.773204][ C1] EXT4-fs (loop3): last error at time 149: ext4_validate_block_bitmap:441 [ 149.799630][T24975] Quota error (device loop3): write_blk: dquota write failed [ 149.808736][T24975] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 149.813735][T25009] loop4: detected capacity change from 0 to 4096 [ 149.837127][T24975] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.6519: Failed to acquire dquot type 1 [ 149.852452][T24975] loop3: lost filesystem error report for type 5 error -117 [ 149.859638][T24975] EXT4-fs (loop3): 1 truncate cleaned up [ 149.880034][T25009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.893573][T25028] bond1: entered allmulticast mode [ 149.905457][T25028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.909320][T24975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 149.928616][T25009] Quota error (device loop4): do_check_range: Getting block 32768 out of range 1-5 [ 149.940839][T25009] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 149.953169][T25009] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6528: Failed to acquire dquot type 1 [ 149.980217][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.986036][T24975] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 150.000492][T24975] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 150.024123][T24975] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.6519: Failed to acquire dquot type 1 [ 150.065526][T24975] syz.3.6519 (24975) used greatest stack depth: 9400 bytes left [ 150.087521][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 150.110347][T25095] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 150.173120][T25116] loop3: detected capacity change from 0 to 136 [ 150.213965][T25116] Attempt to read inode for relocated directory [ 150.235299][T25133] netlink: 'syz.4.6556': attribute type 1 has an invalid length. [ 150.263451][T25133] netlink: 'syz.4.6556': attribute type 2 has an invalid length. [ 150.340790][T25154] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 150.365883][T25162] netlink: 'syz.2.6566': attribute type 3 has an invalid length. [ 150.460151][T25186] loop4: detected capacity change from 0 to 512 [ 150.479340][T25186] EXT4-fs: Ignoring removed orlov option [ 150.512332][T25186] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.541607][T25186] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.6571: corrupted in-inode xattr: e_value size too large [ 150.563719][T25186] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 150.565881][T25186] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6571: couldn't read orphan inode 15 (err -117) [ 150.575071][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 150.575094][ C1] EXT4-fs (loop4): initial error at time 150: ext4_iget_extra_inode:5025: inode 15 [ 150.575129][ C1] EXT4-fs (loop4): last error at time 150: ext4_iget_extra_inode:5025: inode 15 [ 150.629713][T25186] loop4: lost filesystem error report for type 5 error -117 [ 150.639994][T25186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.689240][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.819960][T25272] netlink: 'syz.3.6597': attribute type 12 has an invalid length. [ 151.089086][T25334] openvswitch: netlink: Message has 5 unknown bytes. [ 151.395801][T25416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.439148][T25429] random: crng reseeded on system resumption [ 151.670075][T25483] netlink: 'syz.1.6668': attribute type 10 has an invalid length. [ 151.810447][T25505] bond2 (unregistering): Released all slaves [ 152.131952][T25664] bond2: option primary: mode dependency failed, not supported in mode broadcast(3) [ 152.158135][T25664] bond2 (unregistering): Released all slaves [ 152.187761][T25694] bridge4: entered promiscuous mode [ 152.201017][T25694] bridge4: entered allmulticast mode [ 152.269732][T25761] vhci_hcd vhci_hcd.0: invalid port number 255 [ 152.282282][T25761] vhci_hcd vhci_hcd.0: invalid port number 255 [ 152.447689][T25807] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 153.003123][T25944] loop4: detected capacity change from 0 to 512 [ 153.050229][T25944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.085742][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.229641][T25997] __nla_validate_parse: 41 callbacks suppressed [ 153.229658][T25997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6797'. [ 153.249638][T25997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6797'. [ 153.447675][T26048] netlink: 'syz.0.6805': attribute type 15 has an invalid length. [ 153.517338][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 153.517354][ T28] audit: type=1326 audit(153.495:21426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 153.575141][T26073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.603367][ T28] audit: type=1326 audit(153.525:21427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 153.629237][ T28] audit: type=1326 audit(153.525:21428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 153.652610][ T28] audit: type=1326 audit(153.525:21429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 153.669680][T26063] loop1: detected capacity change from 0 to 8192 [ 153.705619][ T28] audit: type=1326 audit(153.525:21430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 153.742128][ T28] audit: type=1326 audit(153.525:21431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 153.762800][T26096] No such timeout policy "syz1" [ 153.771308][ T28] audit: type=1326 audit(153.525:21432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 153.804887][T26063] loop1: p1 < > p2 p4 < p5 > [ 153.809868][T26063] loop1: partition table partially beyond EOD, truncated [ 153.825528][T26063] loop1: p1 start 134217728 is beyond EOD, truncated [ 153.847808][T26063] loop1: p2 size 591360 extends beyond EOD, truncated [ 153.877859][ T28] audit: type=1326 audit(153.525:21433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 153.904289][T26117] netlink: 360 bytes leftover after parsing attributes in process `syz.0.6828'. [ 153.926553][T26063] loop1: p5 size 591360 extends beyond EOD, truncated [ 153.999465][ T28] audit: type=1326 audit(153.525:21434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26064 comm="syz.4.6811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 154.116625][T26155] loop0: detected capacity change from 0 to 512 [ 154.153773][T26155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.265017][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.469518][ T28] audit: type=1400 audit(154.445:21435): avc: denied { connect } for pid=26271 comm="syz.3.6864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.488887][T26272] openvswitch: netlink: Message has 4 unknown bytes. [ 154.581722][T26294] loop4: detected capacity change from 0 to 512 [ 154.618004][T26294] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.653490][T26294] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.657588][T26311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6876'. [ 154.683710][T26318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6886'. [ 154.692840][T26294] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6871: bg 0: block 248: padding at end of block bitmap is not set [ 154.712778][T26311] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.719531][T26294] loop4: lost filesystem error report for type 5 error -117 [ 154.721575][T26294] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6871: Failed to acquire dquot type 1 [ 154.740152][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 154.740169][ C0] EXT4-fs (loop4): last error at time 154: ext4_validate_block_bitmap:441 [ 154.755473][T26294] loop4: lost filesystem error report for type 5 error -117 [ 154.756024][T26294] EXT4-fs (loop4): 1 truncate cleaned up [ 154.779686][T26294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 154.806867][T26294] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.6871: Failed to acquire dquot type 1 [ 154.896230][T26294] syz.4.6871 (26294) used greatest stack depth: 9256 bytes left [ 154.938641][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 154.950534][T26385] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6889'. [ 155.278367][T26467] netlink: 112 bytes leftover after parsing attributes in process `syz.3.6916'. [ 155.296094][T26468] loop2: detected capacity change from 0 to 136 [ 155.329726][T26468] Attempt to read inode for relocated directory [ 155.387200][T26484] bond2: entered allmulticast mode [ 155.406823][T26484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.599144][T26564] netlink: 'syz.4.6937': attribute type 3 has an invalid length. [ 155.628532][T26567] netlink: 'syz.3.6940': attribute type 1 has an invalid length. [ 155.645056][T26567] netlink: 'syz.3.6940': attribute type 2 has an invalid length. [ 155.753580][T26598] netlink: 463 bytes leftover after parsing attributes in process `syz.1.6947'. [ 155.788298][T26598] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 155.788447][T26607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6952'. [ 155.817722][T26612] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6954'. [ 155.886223][T26624] loop1: detected capacity change from 0 to 512 [ 155.895726][T26630] netlink: 'syz.4.6961': attribute type 12 has an invalid length. [ 155.919400][T26638] netlink: 'syz.3.6963': attribute type 2 has an invalid length. [ 155.943913][T26624] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.969251][T26624] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 156.006009][T26653] bridge4: entered promiscuous mode [ 156.032897][T26624] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6958: bg 0: block 248: padding at end of block bitmap is not set [ 156.047576][T26624] loop1: lost filesystem error report for type 5 error -117 [ 156.049411][T26624] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.6958: Failed to acquire dquot type 1 [ 156.049459][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 156.074367][ C1] EXT4-fs (loop1): last error at time 156: ext4_validate_block_bitmap:441 [ 156.083046][T26624] loop1: lost filesystem error report for type 5 error -117 [ 156.092484][T26624] EXT4-fs (loop1): 1 truncate cleaned up [ 156.114715][T26674] loop0: detected capacity change from 0 to 512 [ 156.139470][T26624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 156.143084][T26674] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 156.159234][T26674] FAT-fs (loop0): Filesystem has been set read-only [ 156.172648][T26624] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.6958: Failed to acquire dquot type 1 [ 156.240942][T26700] xt_recent: hitcount (262150) is larger than allowed maximum (65535) [ 156.245978][T26624] syz.1.6958 (26624) used greatest stack depth: 9160 bytes left [ 156.299872][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 156.560734][T26770] bridge5: entered promiscuous mode [ 156.566023][T26770] bridge5: entered allmulticast mode [ 156.741327][T26819] random: crng reseeded on system resumption [ 156.821383][T26834] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 156.840890][T26834] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 157.308971][T26961] random: crng reseeded on system resumption [ 157.364057][T26976] loop3: detected capacity change from 0 to 512 [ 157.398862][T26981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.487382][T27007] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 157.500975][T26997] batadv0: left promiscuous mode [ 157.509352][T26997] veth1: left promiscuous mode [ 157.523843][T26997] gtp0: left promiscuous mode [ 157.537642][T26997] veth11: left promiscuous mode [ 157.549169][T26997] bridge4: left promiscuous mode [ 157.554476][T26997] bridge5: left promiscuous mode [ 157.562419][T27008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.689258][T27048] netlink: 'syz.3.7090': attribute type 1 has an invalid length. [ 157.702382][T27051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.834405][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 158.834420][ T28] audit: type=1400 audit(158.815:21486): avc: denied { create } for pid=27594 comm="syz.4.7112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.903608][ T28] audit: type=1400 audit(158.845:21487): avc: denied { create } for pid=27595 comm="syz.0.7110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.923388][ T28] audit: type=1400 audit(158.845:21488): avc: denied { write } for pid=27595 comm="syz.0.7110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.964312][ T28] audit: type=1400 audit(158.855:21489): avc: denied { setopt } for pid=27594 comm="syz.4.7112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.006962][ T28] audit: type=1400 audit(158.865:21490): avc: denied { create } for pid=27601 comm="syz.1.7113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.019148][T27632] __nla_validate_parse: 14 callbacks suppressed [ 159.019165][T27632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7121'. [ 159.033666][ T28] audit: type=1400 audit(158.875:21491): avc: denied { setopt } for pid=27601 comm="syz.1.7113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.100933][ T28] audit: type=1326 audit(159.025:21492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27636 comm="syz.2.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7bd6c799 code=0x7ffc0000 [ 159.165394][ T28] audit: type=1326 audit(159.025:21493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27636 comm="syz.2.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f5f7bd6c799 code=0x7ffc0000 [ 159.213599][ T28] audit: type=1326 audit(159.025:21494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27636 comm="syz.2.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7bd6c799 code=0x7ffc0000 [ 159.238386][ T28] audit: type=1326 audit(159.025:21495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27636 comm="syz.2.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7bd6c799 code=0x7ffc0000 [ 159.363605][T28154] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7135'. [ 159.388453][T28154] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 159.504018][T28183] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 159.509606][T28189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7147'. [ 159.573618][T28195] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 159.594485][T28195] gretap2: entered allmulticast mode [ 159.601187][T28212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7154'. [ 159.610247][T28209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7153'. [ 159.630358][T28212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7154'. [ 159.659608][T28212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7154'. [ 159.701394][T28212] netlink: 540 bytes leftover after parsing attributes in process `syz.3.7154'. [ 160.091275][T28787] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7185'. [ 160.152684][T28801] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 160.246161][T28817] loop1: detected capacity change from 0 to 164 [ 160.322582][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7204'. [ 160.569498][T28930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.663192][T28956] netlink: 'syz.3.7230': attribute type 21 has an invalid length. [ 160.700561][T28956] netlink: 'syz.3.7230': attribute type 4 has an invalid length. [ 160.708476][T28956] netlink: 'syz.3.7230': attribute type 5 has an invalid length. [ 161.136449][T29068] xt_bpf: check failed: parse error [ 161.150207][T29074] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 161.279646][ T23] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 161.312783][T29102] program syz.0.7287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.339530][ T23] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 161.504025][T29489] loop0: detected capacity change from 0 to 164 [ 161.599682][ T50] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 161.621747][T29636] netlink: 'syz.1.7295': attribute type 3 has an invalid length. [ 161.757471][T29668] loop4: detected capacity change from 0 to 128 [ 161.816560][T29668] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.886741][T29668] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.7306: No space for directory leaf checksum. Please run e2fsck -D. [ 161.939338][T29668] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.7306: checksumming directory block 0 [ 162.007807][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.095119][T29708] netlink: 'syz.2.7315': attribute type 5 has an invalid length. [ 162.679802][ T50] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 162.698709][ T50] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 162.714811][T30366] netlink: 'syz.1.7366': attribute type 1 has an invalid length. [ 162.796499][T30385] loop0: detected capacity change from 0 to 128 [ 163.003450][T30434] SELinux: truncated policydb string identifier [ 163.003466][T30434] SELinux: failed to load policy [ 163.019686][ T23] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 163.259569][T30496] bond3 (unregistering): Released all slaves [ 163.361065][T30591] random: crng reseeded on system resumption [ 163.558413][T30638] vlan0: entered promiscuous mode [ 163.863569][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 163.863586][ T28] audit: type=1400 audit(163.845:21582): avc: denied { execmem } for pid=30863 comm="syz.2.7460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 164.027826][ T28] audit: type=1400 audit(164.005:21583): avc: denied { bind } for pid=31245 comm="syz.4.7466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 164.121186][ T28] audit: type=1400 audit(164.105:21584): avc: denied { bind } for pid=31267 comm="syz.1.7474" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.176306][ T28] audit: type=1400 audit(164.135:21585): avc: denied { name_bind } for pid=31267 comm="syz.1.7474" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 164.250415][ T28] audit: type=1400 audit(164.135:21586): avc: denied { node_bind } for pid=31267 comm="syz.1.7474" saddr=fe80::c src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 164.284172][ T28] audit: type=1400 audit(164.185:21587): avc: denied { append } for pid=31278 comm="syz.0.7476" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.401413][ T28] audit: type=1400 audit(164.185:21588): avc: denied { ioctl } for pid=31278 comm="syz.0.7476" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.432125][ T28] audit: type=1400 audit(164.205:21589): avc: denied { map } for pid=31287 comm="syz.1.7478" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.456206][T31326] netlink: 'syz.2.7491': attribute type 19 has an invalid length. [ 164.510477][T31341] __nla_validate_parse: 20 callbacks suppressed [ 164.510494][T31341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7495'. [ 164.526169][ T28] audit: type=1400 audit(164.205:21590): avc: denied { read write } for pid=31287 comm="syz.1.7478" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.583157][T31353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7500'. [ 164.593435][ T28] audit: type=1326 audit(164.295:21591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31300 comm="syz.4.7483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d61c6c799 code=0x7ffc0000 [ 164.724480][T31378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7506'. [ 164.724509][T31378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7506'. [ 164.813292][T31394] netlink: 'syz.4.7512': attribute type 2 has an invalid length. [ 164.825621][T31394] netlink: 'syz.4.7512': attribute type 8 has an invalid length. [ 164.835312][T31394] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7512'. [ 165.028935][T31435] loop3: detected capacity change from 0 to 256 [ 165.086499][T31435] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.119958][T31435] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.170613][T31456] tc_dump_action: action bad kind [ 165.227686][T31471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7537'. [ 165.262960][ T30] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 165.281657][ T30] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 165.289648][T12337] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 165.342359][T31492] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.348776][T31499] netlink: 'syz.3.7545': attribute type 1 has an invalid length. [ 165.395602][T31508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7548'. [ 165.429916][T31517] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.471797][T31529] Option ' ' to dns_resolver key: bad/missing value [ 165.625512][T31569] C: renamed from team_slave_0 [ 165.638081][T31568] loop1: detected capacity change from 0 to 1024 [ 165.650054][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7570'. [ 165.663809][T31569] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7569'. [ 165.674978][T31576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7571'. [ 165.675202][T31568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.692561][T31569] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 165.711626][T31574] team0: entered promiscuous mode [ 165.721665][T31574] team_slave_0: entered promiscuous mode [ 165.729111][T31574] team_slave_1: entered promiscuous mode [ 165.735963][T31574] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.851108][T12337] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 165.888162][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.900279][ T69] ================================================================== [ 165.908365][ T69] BUG: KCSAN: data-race in copy_process / free_pid [ 165.914864][ T69] [ 165.917170][ T69] read-write to 0xffffffff86c5ff68 of 4 bytes by task 31599 on cpu 1: [ 165.925311][ T69] free_pid+0xbc/0x1e0 [ 165.929372][ T69] free_pids+0x9e/0xb0 [ 165.933442][ T69] release_task+0x9a7/0xb60 [ 165.937934][ T69] do_exit+0xda4/0x1600 [ 165.942082][ T69] do_group_exit+0xfe/0x140 [ 165.946574][ T69] get_signal+0xe54/0xf60 [ 165.950895][ T69] arch_do_signal_or_restart+0x96/0x450 [ 165.956440][ T69] exit_to_user_mode_loop+0x6a/0x6f0 [ 165.961710][ T69] do_syscall_64+0x249/0x370 [ 165.966293][ T69] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.972210][ T69] [ 165.974530][ T69] read to 0xffffffff86c5ff68 of 4 bytes by task 69 on cpu 0: [ 165.982019][ T69] copy_process+0x187f/0x20b0 [ 165.986692][ T69] kernel_clone+0x16b/0x5d0 [ 165.991192][ T69] user_mode_thread+0x9c/0xd0 [ 165.995859][ T69] call_usermodehelper_exec_work+0x41/0x160 [ 166.001746][ T69] process_scheduled_works+0x513/0xa10 [ 166.007195][ T69] worker_thread+0x58a/0x780 [ 166.011775][ T69] kthread+0x22a/0x280 [ 166.015828][ T69] ret_from_fork+0x150/0x360 [ 166.020411][ T69] ret_from_fork_asm+0x1a/0x30 [ 166.025166][ T69] [ 166.027496][ T69] value changed: 0x800000e8 -> 0x800000e7 [ 166.033189][ T69] [ 166.035492][ T69] Reported by Kernel Concurrency Sanitizer on: [ 166.041731][ T69] CPU: 0 UID: 0 PID: 69 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 166.050999][ T69] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.061041][ T69] Workqueue: events_unbound call_usermodehelper_exec_work [ 166.068150][ T69] ================================================================== [ 166.156753][T32098] validate_nla: 1 callbacks suppressed [ 166.156784][T32098] netlink: 'syz.1.7581': attribute type 1 has an invalid length. [ 166.359547][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 166.359563][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 169.479576][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 173.729548][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!