last executing test programs: 49.122787172s ago: executing program 1 (id=11147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 48.788062297s ago: executing program 1 (id=11156): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40000101) 48.787945408s ago: executing program 3 (id=11157): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f0000000180)=0x80000004, 0x4) 48.673434463s ago: executing program 3 (id=11161): r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x3, 0x10000000}) io_uring_enter(r0, 0x0, 0xc3d1, 0x6f, 0x0, 0x0) 48.673016153s ago: executing program 1 (id=11162): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e20, @multicast1}, {0x6, @broadcast}, 0xe, {0x2, 0x4e20, @rand_addr=0x64010102}, 'veth0_macvtap\x00'}) 48.54763383s ago: executing program 3 (id=11165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@generic="b8"]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) 48.54755212s ago: executing program 1 (id=11166): r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000200)='fd', &(0x7f0000000240)="f3f2a703", 0x4) 48.520594721s ago: executing program 3 (id=11167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0, @ANYBLOB="0c000b00000000000000000008000e00", @ANYRES32=0x0, @ANYBLOB="080005"], 0x88}}, 0x0) 48.512872772s ago: executing program 1 (id=11168): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='*\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) 48.441375515s ago: executing program 1 (id=11169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 48.368982528s ago: executing program 3 (id=11171): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x8, 0x1c, 0x0, 0x0, @in6={0xa, 0x4e23, 0xb, @remote, 0x4}, @ib={0x1b, 0x0, 0x3, {"b9322f534f61cd1848a76d94f0ba2078"}, 0x0, 0x7}}}, 0x118) 48.320601681s ago: executing program 4 (id=11173): r0 = socket(0x10, 0x803, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000140)={'bond_slave_1\x00'}) 48.320274111s ago: executing program 3 (id=11174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x44}}, 0x8000) 48.227798105s ago: executing program 4 (id=11178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000010300)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c80028008000700000000000a0001"], 0x48}}, 0x0) 48.191450437s ago: executing program 4 (id=11180): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000080)=0x2c) 48.157277768s ago: executing program 4 (id=11181): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x84, 0x15, 0x0, &(0x7f0000000b00)) 47.468921152s ago: executing program 0 (id=11182): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f00000000c0)=0x10, 0x0) 46.562564795s ago: executing program 4 (id=11183): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 43.310433533s ago: executing program 2 (id=11194): writev(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000200)}], 0x1) set_mempolicy(0x8000, &(0x7f0000000140)=0x50f, 0x78e9) 38.048115518s ago: executing program 0 (id=11184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x8c014) 37.293635945s ago: executing program 2 (id=11185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 36.303513622s ago: executing program 4 (id=11186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) 29.975536289s ago: executing program 32 (id=11169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 28.343250158s ago: executing program 2 (id=11188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x108}}, 0x0) 27.333100507s ago: executing program 33 (id=11174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x44}}, 0x8000) 25.390759011s ago: executing program 0 (id=11190): r0 = timerfd_create(0x1, 0x800) timerfd_gettime(r0, &(0x7f0000000280)) 20.628234351s ago: executing program 0 (id=11192): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x202, 0x2, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x10}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 18.763873161s ago: executing program 2 (id=11193): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 16.497450391s ago: executing program 34 (id=11186): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) 10.12496073s ago: executing program 2 (id=11196): syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) syz_emit_ethernet(0x9b, &(0x7f0000000440)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x8d, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x79, 0x0, @wg=@data={0x4, 0x7, 0x0, "cd6be0d047693f9caeb56f20b5725428d9003f4b45b527de6be499f69422a7728182efb02af3bd22f1437b7f390ea03c74aed730fe1d444ace46e7a477a41c6c1ea14f5844316f432f6a3fa5ff0f3c8ecb068a3b18d4a682862057557b2805f7c9"}}}}}}, 0x0) 7.836358451s ago: executing program 0 (id=11197): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) 1.529087306s ago: executing program 2 (id=11198): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 0s ago: executing program 0 (id=11199): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'lblcr\x00', 0x28, 0x5, 0x72}, 0x2c) kernel console output (not intermixed with test programs): [ 227.153286][ C0] EXT4-fs (loop3): initial error at time 218: ext4_iget_extra_inode:5025: inode 15 [ 227.153320][ C0] EXT4-fs (loop3): last error at time 218: ext4_iget_extra_inode:5025: inode 15 [ 227.190604][T20928] loop3: lost filesystem error report for type 5 error -117 [ 227.192012][T20928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.244565][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.287311][ T28] audit: type=1326 audit(218.496:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20938 comm="syz.4.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 227.322110][ T28] audit: type=1326 audit(218.496:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20938 comm="syz.4.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 227.386798][ T28] audit: type=1326 audit(218.506:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20938 comm="syz.4.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 227.418050][ T28] audit: type=1326 audit(218.506:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20938 comm="syz.4.8405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 227.433118][T20954] futex_wake_op: syz.2.8409 tries to shift op by 32; fix this program [ 227.451003][ T28] audit: type=1326 audit(218.618:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.2.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 227.474989][ T28] audit: type=1326 audit(218.618:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.2.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 227.499317][ T28] audit: type=1326 audit(218.618:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.2.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 227.619811][T20978] usb usb7: usbfs: process 20978 (syz.1.8422) did not claim interface 0 before use [ 227.636589][ T28] audit: type=1326 audit(218.693:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.2.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 227.696482][T20985] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 227.708238][ T28] audit: type=1326 audit(218.693:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20952 comm="syz.2.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 227.745514][T20989] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8428' sets config #-1 [ 227.969802][T21027] netlink: 'syz.1.8446': attribute type 16 has an invalid length. [ 228.273166][T21066] __nla_validate_parse: 10 callbacks suppressed [ 228.273186][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8465'. [ 228.288638][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8465'. [ 228.577001][T21101] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 228.602744][T21101] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 228.618606][T21101] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 228.740670][T21117] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 228.823442][T21117] bond1 (unregistering): Released all slaves [ 229.037542][T21152] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 229.112902][T21152] bond2 (unregistering): Released all slaves [ 229.204529][T21177] xt_socket: unknown flags 0x58 [ 229.243069][T21185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.250434][T21185] IPv6: NLM_F_CREATE should be set when creating new route [ 229.257689][T21185] IPv6: NLM_F_CREATE should be set when creating new route [ 229.337209][T21201] loop2: detected capacity change from 0 to 128 [ 229.362755][T21203] xt_TCPMSS: Only works on TCP SYN packets [ 229.410575][T21205] xt_hashlimit: max too large, truncated to 1048576 [ 229.420026][T21205] xt_bpf: check failed: parse error [ 229.431094][T21209] IPv6: sit3: Disabled Multicast RS [ 229.613622][T21231] loop0: detected capacity change from 0 to 1024 [ 229.640035][T21231] EXT4-fs: Ignoring removed bh option [ 229.666897][T21231] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 229.686947][T21231] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 229.695861][T21231] System zones: 0-1, 3-12 [ 229.711260][T21231] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #3: block 1: comm syz.0.8546: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.726452][T21231] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 229.731663][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 229.747280][ C0] EXT4-fs (loop0): initial error at time 220: ext4_map_blocks:818: inode 3: block 1 [ 229.756748][ C0] EXT4-fs (loop0): last error at time 220: ext4_map_blocks:818: inode 3: block 1 [ 229.764037][T21231] EXT4-fs (loop0): Remounting filesystem read-only [ 229.785428][T21231] EXT4-fs (loop0): 1 orphan inode deleted [ 229.812511][T21231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.839892][T21258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8557'. [ 229.935574][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.006414][T21280] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 230.109238][T21295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8576'. [ 230.132218][T21295] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 230.232185][T21316] random: crng reseeded on system resumption [ 230.343624][T21330] loop3: detected capacity change from 0 to 512 [ 230.376616][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8597'. [ 230.389529][T21339] batadv1: entered promiscuous mode [ 230.396136][T21330] EXT4-fs (loop3): orphan cleanup on readonly fs [ 230.405770][T21330] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8595: bg 0: block 255: padding at end of block bitmap is not set [ 230.439661][T21330] loop3: lost filesystem error report for type 5 error -117 [ 230.439919][T21330] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 230.456092][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 230.456130][ C0] EXT4-fs (loop3): initial error at time 221: ext4_validate_block_bitmap:441 [ 230.456175][ C0] EXT4-fs (loop3): last error at time 221: ext4_validate_block_bitmap:441 [ 230.481558][T21330] loop3: lost filesystem error report for type 5 error -117 [ 230.481814][T21330] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8595: invalid indirect mapped block 1 (level 1) [ 230.502835][T21330] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 230.503158][T21330] EXT4-fs (loop3): 1 truncate cleaned up [ 230.519636][T21330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 230.544967][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.627645][T21350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.652389][T21350] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.663182][T21350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.705378][T21362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8608'. [ 230.731104][T21362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8608'. [ 230.753028][T21368] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.8609'. [ 230.817886][T21374] loop3: detected capacity change from 0 to 512 [ 230.858390][T21374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.891121][T21374] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.8613: directory missing '.' [ 230.917020][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.980869][T21397] loop3: detected capacity change from 0 to 1024 [ 230.993722][T21397] EXT4-fs: Ignoring removed bh option [ 231.013380][T21397] EXT4-fs: inline encryption not supported [ 231.055593][T21397] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.067096][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8629'. [ 231.089582][T21397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 231.130306][T21397] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.8621: lblock 2 mapped to illegal pblock 2 (length 1) [ 231.157840][T21397] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 231.159164][T21397] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.8621: lblock 0 mapped to illegal pblock 48 (length 1) [ 231.168463][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 231.168485][ C0] EXT4-fs (loop3): initial error at time 222: ext4_map_blocks:776: inode 3: block 2 [ 231.168527][ C0] EXT4-fs (loop3): last error at time 222: ext4_map_blocks:776: inode 3: block 2 [ 231.208526][T21397] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 231.208690][T21397] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.8621: Failed to acquire dquot type 0 [ 231.229676][T21397] loop3: lost filesystem error report for type 5 error -117 [ 231.281204][T21397] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 231.300354][T21397] loop3: lost filesystem error report for type 5 error -117 [ 231.314156][T21397] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.8621: mark_inode_dirty error [ 231.339258][T21397] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.339377][T21397] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 231.359227][T21397] EXT4-fs (loop3): 1 orphan inode deleted [ 231.365429][T21397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.378198][ T50] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 231.392510][ T50] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 231.392807][ T50] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 231.415510][T21424] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 231.481566][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.498344][ T3327] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 231.516880][T21428] netlink: 'syz.2.8649': attribute type 4 has an invalid length. [ 231.524132][ T3327] loop3: lost filesystem error report for type 5 error -117 [ 231.524819][ T3327] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 231.546506][ T3327] loop3: lost filesystem error report for type 5 error -117 [ 231.546602][ T3327] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 231.613881][ T3327] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 231.987679][T21477] gre0: entered promiscuous mode [ 232.038324][T21477] gre0: entered allmulticast mode [ 232.045455][T21477] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 232.180195][T21501] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 232.214059][T21510] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.8681'. [ 232.238743][T21510] netlink: zone id is out of range [ 232.248776][T21510] netlink: zone id is out of range [ 232.276102][T21510] netlink: del zone limit has 8 unknown bytes [ 232.335886][T21526] netlink: 'syz.3.8688': attribute type 10 has an invalid length. [ 232.349796][T21526] veth1_macvtap: left promiscuous mode [ 232.355827][T21526] team0: Device veth1_macvtap failed to register rx_handler [ 232.377277][T21528] sctp: [Deprecated]: syz.4.8689 (pid 21528) Use of int in maxseg socket option. [ 232.377277][T21528] Use struct sctp_assoc_value instead [ 232.791618][T21588] --map-set only usable from mangle table [ 232.835202][T21593] xfrm1: entered allmulticast mode [ 232.907192][T21606] netlink: 'syz.4.8728': attribute type 2 has an invalid length. [ 233.083208][T21628] netlink: 'syz.0.8738': attribute type 10 has an invalid length. [ 233.096740][T21630] loop2: detected capacity change from 0 to 512 [ 233.116047][T21630] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 233.124585][T21628] team0: Port device dummy0 added [ 233.137485][T21630] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.154635][T21630] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 233.174337][T21630] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 233.181535][T21630] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.8739: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 233.199785][T21630] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 233.200036][T21630] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8739: couldn't read orphan inode 13 (err -117) [ 233.209236][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 233.209270][ C0] EXT4-fs (loop2): last error at time 224: ext4_ext_check_inode:521: inode 13 [ 233.242550][T21630] loop2: lost filesystem error report for type 5 error -117 [ 233.261877][T21630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.316188][T21630] EXT4-fs error (device loop2): ext4_lookup:1785: comm syz.2.8739: inode #15: comm syz.2.8739: iget: illegal inode # [ 233.362844][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.490184][T21670] loop2: detected capacity change from 0 to 512 [ 233.514045][T21672] cgroup: none used incorrectly [ 233.527079][T21670] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 233.567371][T21670] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 233.575826][T21670] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.582410][T21670] __quota_error: 19 callbacks suppressed [ 233.582426][T21670] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 233.606027][T21670] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 233.620851][T21670] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 233.633639][T21670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8760: bg 0: block 40: padding at end of block bitmap is not set [ 233.655144][T21670] loop2: lost filesystem error report for type 5 error -117 [ 233.655341][T21670] EXT4-fs (loop2): Remounting filesystem read-only [ 233.669255][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 233.669277][ C1] EXT4-fs (loop2): initial error at time 224: ext4_validate_block_bitmap:441 [ 233.669304][ C1] EXT4-fs (loop2): last error at time 224: ext4_validate_block_bitmap:441 [ 233.694672][T21685] __nla_validate_parse: 2 callbacks suppressed [ 233.694688][T21685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8766'. [ 233.698631][T21670] EXT4-fs (loop2): 1 truncate cleaned up [ 233.716547][T21670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.731410][ T28] audit: type=1400 audit(224.518:708): avc: denied { read } for pid=21669 comm="syz.2.8760" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 233.780536][ T28] audit: type=1400 audit(224.565:709): avc: denied { create } for pid=21686 comm="syz.0.8777" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 233.822058][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.832039][ T28] audit: type=1400 audit(224.565:710): avc: denied { map } for pid=21686 comm="syz.0.8777" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 233.865766][ T28] audit: type=1400 audit(224.565:711): avc: denied { read write } for pid=21686 comm="syz.0.8777" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 233.946625][T21698] loop0: detected capacity change from 0 to 512 [ 234.012325][T21698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.101343][T21698] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.8783: bad entry in directory: inode out of bounds - offset=0, inode=60882946, rec_len=2048, size=2048 fake=1 [ 234.231165][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.244160][T21732] netlink: 'syz.4.8787': attribute type 33 has an invalid length. [ 234.284961][T21732] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8787'. [ 234.402917][ T28] audit: type=1326 audit(225.145:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21746 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 234.467295][ T28] audit: type=1326 audit(225.173:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21746 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 234.522267][ T28] audit: type=1326 audit(225.173:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21746 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 234.582553][ T28] audit: type=1326 audit(225.173:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21746 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 234.677349][T21770] netlink: 'syz.4.8806': attribute type 1 has an invalid length. [ 234.876802][T21783] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 234.903989][T21784] loop2: detected capacity change from 0 to 512 [ 234.911065][T21784] EXT4-fs: Ignoring removed orlov option [ 234.956642][T21784] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.975547][T21784] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.8812: corrupted in-inode xattr: e_value size too large [ 234.989740][T21784] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.990024][T21784] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.8812: couldn't read orphan inode 15 (err -117) [ 234.999279][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 234.999294][ C1] EXT4-fs (loop2): initial error at time 225: ext4_iget_extra_inode:5025: inode 15 [ 234.999320][ C1] EXT4-fs (loop2): last error at time 225: ext4_iget_extra_inode:5025: inode 15 [ 235.036273][T21784] loop2: lost filesystem error report for type 5 error -117 [ 235.038793][T21784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.077940][T21776] loop1: detected capacity change from 0 to 512 [ 235.114104][T21776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.205664][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.368653][T21776] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #12: comm syz.1.8807: Directory block failed checksum [ 235.394346][T21823] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8831'. [ 235.472230][T21828] erspan1: entered allmulticast mode [ 235.478240][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.549471][T21839] netlink: 'syz.2.8839': attribute type 3 has an invalid length. [ 235.628229][ T28] audit: type=1326 audit(226.295:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21848 comm="syz.2.8844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 235.744666][T21867] netlink: 'syz.3.8852': attribute type 5 has an invalid length. [ 235.765340][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8852'. [ 235.826686][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8858'. [ 235.883851][T21887] geneve3: entered promiscuous mode [ 235.890342][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.921578][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.930388][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.968351][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.011159][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8871'. [ 236.177671][T21931] netlink: 'syz.0.8884': attribute type 21 has an invalid length. [ 236.371020][T21966] netlink: 'syz.3.8902': attribute type 33 has an invalid length. [ 236.390564][T21967] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 236.392072][T21966] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8902'. [ 236.410966][T21967] bond2 (unregistering): Released all slaves [ 236.509566][T21984] loop3: detected capacity change from 0 to 512 [ 236.551683][T21984] EXT4-fs (loop3): orphan cleanup on readonly fs [ 236.569314][T21984] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.8910: Failed to acquire dquot type 1 [ 236.611654][T21984] loop3: lost filesystem error report for type 5 error -117 [ 236.612315][T21984] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.8910: Failed to acquire dquot type 1 [ 236.619767][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 236.619789][ C0] EXT4-fs (loop3): last error at time 227: ext4_acquire_dquot:7001 [ 236.645869][T21984] loop3: lost filesystem error report for type 5 error -117 [ 236.656667][T21984] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8910: bg 0: block 248: padding at end of block bitmap is not set [ 236.679685][T21984] loop3: lost filesystem error report for type 5 error -117 [ 236.687396][T21984] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 236.723419][T21984] loop3: lost filesystem error report for type 5 error -117 [ 236.724750][T21984] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.8910: Failed to acquire dquot type 1 [ 236.760600][T22005] batadv0: entered promiscuous mode [ 236.787574][T21984] loop3: lost filesystem error report for type 5 error -117 [ 236.787948][T21984] EXT4-fs (loop3): 1 orphan inode deleted [ 236.822443][T22008] team0: Port device dummy0 added [ 236.838760][T21984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.899585][T21984] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 236.920351][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8924'. [ 236.932416][T22022] loop2: detected capacity change from 0 to 512 [ 236.949657][T21984] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 236.969119][T22022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.002749][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.047462][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.092040][T22031] bond2: option fail_over_mac: invalid value (127) [ 237.123805][T22031] bond2 (unregistering): Released all slaves [ 237.201279][T22054] loop2: detected capacity change from 0 to 512 [ 237.277744][T22054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.349581][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.374880][T22069] validate_nla: 1 callbacks suppressed [ 237.374896][T22069] netlink: 'syz.0.8947': attribute type 10 has an invalid length. [ 237.418486][T22069] geneve1: entered promiscuous mode [ 237.427835][T22069] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 237.453436][ T905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.469874][ T905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.486025][T22080] loop1: detected capacity change from 0 to 128 [ 237.507485][T22080] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 237.521483][ T905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.554031][ T905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.566688][T22080] FAT-fs (loop1): Filesystem has been set read-only [ 237.820704][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8974'. [ 237.832495][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8974'. [ 238.135853][T22163] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 238.183711][T22163] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 238.226413][T22163] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 238.252234][T22174] netlink: 'syz.1.8999': attribute type 16 has an invalid length. [ 238.260272][T22174] netlink: 'syz.1.8999': attribute type 17 has an invalid length. [ 238.357771][T22174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.377349][T22174] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.407154][T22174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.478074][T22174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.499436][T22174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.529907][T22174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.562262][T22174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.581570][T22174] veth1_vlan: left promiscuous mode [ 238.590218][T22174] veth0_vlan: left promiscuous mode [ 238.599664][T22174] veth0_vlan: entered promiscuous mode [ 238.618713][T22174] veth1_vlan: entered promiscuous mode [ 238.640375][T22174] veth1_macvtap: left promiscuous mode [ 238.671489][T22202] netlink: 'syz.4.9014': attribute type 5 has an invalid length. [ 238.681082][T22174] veth0_macvtap: left promiscuous mode [ 238.722116][T22174] veth0_macvtap: entered promiscuous mode [ 238.746008][T22174] veth1_macvtap: entered promiscuous mode [ 238.787568][T22174] ip6tnl3: left allmulticast mode [ 238.794020][T22174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.813707][T22174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.830391][ T905] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.837525][ T905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.847689][ T905] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.854864][ T905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.896885][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.914978][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.985076][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.051768][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.075361][T22224] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.090960][T22221] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 239.237200][ T50] ip6_tunnel: K xmit: Local address not yet configured! [ 239.244281][ T50] ip6_tunnel: K xmit: Local address not yet configured! [ 239.267761][ T3355] ip6_tunnel: K xmit: Local address not yet configured! [ 239.381798][T22246] loop1: detected capacity change from 0 to 512 [ 239.397449][T22248] __nla_validate_parse: 2 callbacks suppressed [ 239.397469][T22248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9034'. [ 239.419230][T22246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.445195][T22246] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz.1.9033: directory missing '.' [ 239.476427][T22252] gre0: entered promiscuous mode [ 239.481444][T22252] gre0: entered allmulticast mode [ 239.487452][T22252] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 239.516607][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9039'. [ 239.550958][T22256] bond2: option ad_actor_sys_prio: invalid value (0) [ 239.578529][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.588124][T22256] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 239.632257][T22256] bond2 (unregistering): Released all slaves [ 239.646284][T22254] netlink: 'syz.3.9037': attribute type 4 has an invalid length. [ 239.680082][T22266] xt_CT: No such helper "snmp" [ 239.778953][T22275] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.9046'. [ 239.807707][T22275] netlink: zone id is out of range [ 239.828432][T22275] netlink: zone id is out of range [ 239.884630][T22275] netlink: del zone limit has 8 unknown bytes [ 239.898663][ T3418] ip6_tunnel: K xmit: Local address not yet configured! [ 239.951391][T22290] loop2: detected capacity change from 0 to 1024 [ 239.976003][T22290] EXT4-fs: Ignoring removed bh option [ 239.995008][T22290] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 240.057661][T22290] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 240.113187][T22301] lo: left allmulticast mode [ 240.118108][T22290] System zones: 0-1, 3-12 [ 240.144703][ T3418] ip6_tunnel: K xmit: Local address not yet configured! [ 240.166634][T22290] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 1: comm syz.2.9054: lblock 1 mapped to illegal pblock 1 (length 1) [ 240.191808][T22301] gre0: left promiscuous mode [ 240.219304][T22290] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 240.219468][T22290] EXT4-fs (loop2): Remounting filesystem read-only [ 240.235153][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 240.235196][ C0] EXT4-fs (loop2): initial error at time 230: ext4_map_blocks:818: inode 3: block 1 [ 240.235227][ C0] EXT4-fs (loop2): last error at time 230: ext4_map_blocks:818: inode 3: block 1 [ 240.266467][T22290] __quota_error: 18 callbacks suppressed [ 240.266486][T22290] Quota error (device loop2): write_blk: dquota write failed [ 240.279957][T22290] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 240.290152][T22290] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 240.299186][T22290] EXT4-fs (loop2): 1 orphan inode deleted [ 240.305836][T22290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.326153][T22301] gre0: left allmulticast mode [ 240.346473][T22301] sit0: left promiscuous mode [ 240.378562][T22301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.401419][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.415947][T22301] team0: left promiscuous mode [ 240.447957][T22301] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.497421][T22301] caif0: left promiscuous mode [ 240.515391][T22301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.610082][T22303] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 240.647807][T22303] bond2 (unregistering): Released all slaves [ 240.675650][T22326] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 240.805491][T22332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9074'. [ 241.009442][T22355] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9084'. [ 241.042409][T22357] loop0: detected capacity change from 0 to 128 [ 241.184021][T22375] loop1: detected capacity change from 0 to 512 [ 241.261724][T22375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.315021][T22392] loop0: detected capacity change from 0 to 512 [ 241.327640][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.347574][T22392] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 241.396057][T22392] EXT4-fs (loop0): orphan cleanup on readonly fs [ 241.410472][T22392] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 241.446832][T22399] xfrm1: entered allmulticast mode [ 241.458064][T22392] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 241.470993][T22392] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.9099: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 241.490460][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9107'. [ 241.501419][T22392] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 241.502026][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 241.517681][ C0] EXT4-fs (loop0): last error at time 231: ext4_ext_check_inode:521: inode 13 [ 241.527851][T22392] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.9099: couldn't read orphan inode 13 (err -117) [ 241.540149][T22392] loop0: lost filesystem error report for type 5 error -117 [ 241.540857][T22392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.544954][T22405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9107'. [ 241.555894][ T28] audit: type=1326 audit(231.842:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22408 comm="syz.3.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8369c799 code=0x7ffc0000 [ 241.603207][T22392] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.9099: inode #15: comm syz.0.9099: iget: illegal inode # [ 241.609922][T22405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9107'. [ 241.626661][ T28] audit: type=1326 audit(231.880:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22408 comm="syz.3.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8369c799 code=0x7ffc0000 [ 241.631510][T22405] netlink: 540 bytes leftover after parsing attributes in process `syz.2.9107'. [ 241.656946][ T28] audit: type=1326 audit(231.880:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22408 comm="syz.3.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f8a8369c799 code=0x7ffc0000 [ 241.705611][ T28] audit: type=1326 audit(231.880:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22408 comm="syz.3.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8369c799 code=0x7ffc0000 [ 241.729137][ T28] audit: type=1326 audit(231.880:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22408 comm="syz.3.9108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8369c799 code=0x7ffc0000 [ 241.788442][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.824016][T22422] loop0: detected capacity change from 0 to 512 [ 241.841138][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9116'. [ 241.872973][T22422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.897035][T22430] usb usb1: usbfs: process 22430 (syz.1.9118) did not claim interface 0 before use [ 241.994858][ T28] audit: type=1400 audit(232.244:734): avc: denied { read } for pid=22438 comm="syz.1.9122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.069333][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.389476][ T28] audit: type=1400 audit(232.609:735): avc: denied { relabelfrom } for pid=22492 comm="syz.1.9146" name="" dev="pipefs" ino=64468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 242.854599][T22543] netlink: 'syz.1.9172': attribute type 10 has an invalid length. [ 242.877893][T22543] geneve1: entered promiscuous mode [ 242.887537][T22543] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 243.151362][T22575] netlink: 'syz.4.9188': attribute type 10 has an invalid length. [ 243.174074][T22575] geneve1: entered promiscuous mode [ 243.186708][T22575] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 243.203856][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.217911][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.223557][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 243.241137][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.261496][T22578] batadv_slave_0: entered promiscuous mode [ 243.271853][T22585] netlink: 'syz.4.9193': attribute type 5 has an invalid length. [ 243.276761][T22578] batadv_slave_0: entered allmulticast mode [ 243.293028][T22578] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 243.299861][T22579] loop0: detected capacity change from 0 to 256 [ 243.355062][T22583] bond3: option lacp_active: invalid value (5) [ 243.371099][T22583] bond3 (unregistering): Released all slaves [ 243.384002][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.428015][T22587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.437909][T22587] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.453666][T22587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.497985][T22603] loop0: detected capacity change from 0 to 512 [ 243.545314][T22603] EXT4-fs (loop0): orphan cleanup on readonly fs [ 243.561326][T22603] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.9201: Failed to acquire dquot type 1 [ 243.573263][T22603] loop0: lost filesystem error report for type 5 error -117 [ 243.576000][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 243.589808][ C1] EXT4-fs (loop0): last error at time 233: ext4_acquire_dquot:7001 [ 243.602578][T22603] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.9201: Failed to acquire dquot type 1 [ 243.614046][T22603] loop0: lost filesystem error report for type 5 error -117 [ 243.620990][T22603] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9201: bg 0: block 248: padding at end of block bitmap is not set [ 243.672586][T22619] netlink: 'syz.1.9208': attribute type 1 has an invalid length. [ 243.688820][T22603] loop0: lost filesystem error report for type 5 error -117 [ 243.689076][T22603] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 243.711859][T22621] netlink: 'syz.2.9210': attribute type 10 has an invalid length. [ 243.733913][T22603] loop0: lost filesystem error report for type 5 error -117 [ 243.734171][T22603] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.9201: Failed to acquire dquot type 1 [ 243.752749][T22621] geneve1: entered promiscuous mode [ 243.773195][T22603] loop0: lost filesystem error report for type 5 error -117 [ 243.773425][T22603] EXT4-fs (loop0): 1 orphan inode deleted [ 243.778768][T22621] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 243.796525][T22603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.811961][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.842105][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.863399][T22603] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 243.872863][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.881942][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.902055][T22636] loop4: detected capacity change from 0 to 512 [ 243.912946][T22603] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 243.931507][T22636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.972309][T22636] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz.4.9220: Directory block failed checksum [ 244.014943][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.020247][T22643] geneve1: left promiscuous mode [ 244.056215][T22643] xfrm1: left allmulticast mode [ 244.089374][ T3677] ip6_tunnel: K xmit: Local address not yet configured! [ 244.136397][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.244196][T22678] loop2: detected capacity change from 0 to 512 [ 244.299064][T22678] EXT4-fs (loop2): orphan cleanup on readonly fs [ 244.336060][T22692] netlink: 'syz.3.9237': attribute type 21 has an invalid length. [ 244.364127][T22678] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.9232: Failed to acquire dquot type 1 [ 244.376510][T22678] loop2: lost filesystem error report for type 5 error -117 [ 244.377793][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 244.391583][ C1] EXT4-fs (loop2): last error at time 234: ext4_acquire_dquot:7001 [ 244.399793][ T3677] ip6_tunnel: K xmit: Local address not yet configured! [ 244.408331][T22678] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.9232: Failed to acquire dquot type 1 [ 244.449867][T22678] loop2: lost filesystem error report for type 5 error -117 [ 244.454718][T22678] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9232: bg 0: block 248: padding at end of block bitmap is not set [ 244.476662][T22678] loop2: lost filesystem error report for type 5 error -117 [ 244.476920][T22678] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 244.493659][T22678] loop2: lost filesystem error report for type 5 error -117 [ 244.493973][T22678] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.9232: Failed to acquire dquot type 1 [ 244.513188][T22678] EXT4-fs (loop2): 1 orphan inode deleted [ 244.520033][T22678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.535984][T22678] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 244.549191][T22678] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 244.567831][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.637186][T22711] lo: left promiscuous mode [ 244.649212][T22711] gre0: left promiscuous mode [ 244.653954][T22711] gre0: left allmulticast mode [ 244.703188][T22711] syz_tun: left promiscuous mode [ 244.740455][T22711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.749040][T22711] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.761956][T22711] batadv0: left promiscuous mode [ 244.773692][T22711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.821358][T22711] veth0_to_bond: entered promiscuous mode [ 244.841817][T22711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.854057][T22711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.864853][T22711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.875773][T22711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.888187][T22711] veth1_macvtap: left promiscuous mode [ 244.894766][T22711] veth0_macvtap: left promiscuous mode [ 244.901360][T22711] veth0_macvtap: entered promiscuous mode [ 244.908004][T22711] veth1_macvtap: entered promiscuous mode [ 244.915236][T22711] geneve1: left promiscuous mode [ 244.921434][T22711] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 244.930839][T22711] geneve2: left allmulticast mode [ 244.937495][T22711] bridge1: left promiscuous mode [ 244.943378][T22711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.952746][T22711] ip6tnl1: left allmulticast mode [ 244.958969][T22711] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 244.977408][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.984542][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.017600][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.024811][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.041122][T22735] loop1: detected capacity change from 0 to 512 [ 245.096108][T22735] EXT4-fs (loop1): orphan cleanup on readonly fs [ 245.104803][T22735] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.9254: Failed to acquire dquot type 1 [ 245.168390][T22735] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.9254: Failed to acquire dquot type 1 [ 245.179784][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 245.179805][ C0] EXT4-fs (loop1): last error at time 235: ext4_acquire_dquot:7001 [ 245.197400][T22735] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9254: bg 0: block 248: padding at end of block bitmap is not set [ 245.211901][T22742] openvswitch: netlink: Missing key (keys=40, expected=80) [ 245.222698][T22735] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 245.240508][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.252644][T22735] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.9254: Failed to acquire dquot type 1 [ 245.267805][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.276069][ T3677] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.303552][T22735] EXT4-fs (loop1): 1 orphan inode deleted [ 245.336067][T22735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.392016][T22735] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 245.435434][T22735] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 245.501825][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.571330][T22776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.632786][T22792] __nla_validate_parse: 4 callbacks suppressed [ 245.632807][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9282'. [ 245.758344][T22802] netlink: 'syz.2.9289': attribute type 1 has an invalid length. [ 245.766216][T22806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9290'. [ 245.774646][T22808] loop4: detected capacity change from 0 to 512 [ 245.783917][T22802] netlink: 'syz.2.9289': attribute type 2 has an invalid length. [ 245.809600][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9289'. [ 245.828472][T22808] EXT4-fs (loop4): orphan cleanup on readonly fs [ 245.847276][T22808] __quota_error: 20 callbacks suppressed [ 245.847297][T22808] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 245.860435][T22815] netlink: 404 bytes leftover after parsing attributes in process `syz.3.9291'. [ 245.869226][T22808] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 245.883050][T22808] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.9286: Failed to acquire dquot type 1 [ 245.894742][T22808] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 245.904855][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 245.904884][ C0] EXT4-fs (loop4): last error at time 235: ext4_acquire_dquot:7001 [ 245.909284][T22815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9291'. [ 245.918031][T22808] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 245.938522][T22808] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.9286: Failed to acquire dquot type 1 [ 245.945197][T22815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9291'. [ 245.959751][T22815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9291'. [ 245.969305][T22808] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9286: bg 0: block 248: padding at end of block bitmap is not set [ 245.992263][T22808] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 246.023998][T22808] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 246.063525][T22808] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 246.073604][T22808] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.9286: Failed to acquire dquot type 1 [ 246.087937][T22808] EXT4-fs (loop4): 1 orphan inode deleted [ 246.107398][T22808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.131318][ T3418] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.141841][T18500] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.171585][T22808] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 246.187761][T22808] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 246.209527][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.217172][T18500] ip6_tunnel: K xmit: Local address not yet configured! [ 246.282730][T22836] EXT4-fs (loop0): orphan cleanup on readonly fs [ 246.295150][T22836] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 246.314762][T22836] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 246.331693][T22836] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.9312: Failed to acquire dquot type 1 [ 246.345102][T22836] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 246.355573][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 246.361439][T22836] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 246.362093][ C1] EXT4-fs (loop0): last error at time 236: ext4_acquire_dquot:7001 [ 246.372225][T22836] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.9312: Failed to acquire dquot type 1 [ 246.393041][T22836] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9312: bg 0: block 248: padding at end of block bitmap is not set [ 246.415473][T22836] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 246.427996][T22836] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.9312: Failed to acquire dquot type 1 [ 246.439693][T22836] EXT4-fs (loop0): 1 orphan inode deleted [ 246.446138][T22842] bridge5: entered promiscuous mode [ 246.456571][T22836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.473429][ T3677] ip6_tunnel: K xmit: Local address not yet configured! [ 246.518137][T22836] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 246.568331][T22836] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 246.595438][T22865] gre0: left promiscuous mode [ 246.618715][T22865] gre0: left allmulticast mode [ 246.643928][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.659996][T22865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.717896][T22872] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 246.762040][T22872] bond2 (unregistering): Released all slaves [ 246.837577][T22895] set_capacity_and_notify: 2 callbacks suppressed [ 246.837598][T22895] loop1: detected capacity change from 0 to 512 [ 246.876953][T22895] EXT4-fs (loop1): orphan cleanup on readonly fs [ 246.903630][T22895] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.9331: Failed to acquire dquot type 1 [ 246.940720][T22895] fserror_report: 16 callbacks suppressed [ 246.940739][T22895] loop1: lost filesystem error report for type 5 error -117 [ 246.948839][T22895] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.9331: Failed to acquire dquot type 1 [ 246.956260][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 246.956291][ C1] EXT4-fs (loop1): last error at time 236: ext4_acquire_dquot:7001 [ 246.982084][T22895] loop1: lost filesystem error report for type 5 error -117 [ 246.993105][T22895] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9331: bg 0: block 248: padding at end of block bitmap is not set [ 247.019939][T22895] loop1: lost filesystem error report for type 5 error -117 [ 247.028563][T22895] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 247.037992][T22895] loop1: lost filesystem error report for type 5 error -117 [ 247.039887][T22895] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.9331: Failed to acquire dquot type 1 [ 247.059076][T22904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.085819][T22895] loop1: lost filesystem error report for type 5 error -117 [ 247.086079][T22895] EXT4-fs (loop1): 1 orphan inode deleted [ 247.108504][T22895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.180365][T22895] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 247.213014][T22895] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 247.279206][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.345877][T22943] netlink: 'syz.3.9355': attribute type 3 has an invalid length. [ 247.376482][T22947] xt_CONNSECMARK: invalid mode: 4 [ 247.439317][T22959] netlink: 'syz.0.9360': attribute type 21 has an invalid length. [ 247.450785][T22958] loop2: detected capacity change from 0 to 512 [ 247.459969][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9360'. [ 247.477000][T22958] EXT4-fs (loop2): orphan cleanup on readonly fs [ 247.487326][T22958] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.9362: Failed to acquire dquot type 1 [ 247.500021][T22958] loop2: lost filesystem error report for type 5 error -117 [ 247.500348][T22958] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.9362: Failed to acquire dquot type 1 [ 247.519022][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 247.519049][ C1] EXT4-fs (loop2): last error at time 237: ext4_acquire_dquot:7001 [ 247.547995][T22958] loop2: lost filesystem error report for type 5 error -117 [ 247.552197][T22958] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9362: bg 0: block 248: padding at end of block bitmap is not set [ 247.581086][T22964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.591804][T22958] loop2: lost filesystem error report for type 5 error -117 [ 247.603612][T22958] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 247.604556][T22966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9364'. [ 247.611374][T22958] loop2: lost filesystem error report for type 5 error -117 [ 247.629502][T22958] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.9362: Failed to acquire dquot type 1 [ 247.635826][T22966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9364'. [ 247.636822][T22958] loop2: lost filesystem error report for type 5 error -117 [ 247.637324][T22958] EXT4-fs (loop2): 1 orphan inode deleted [ 247.671503][T22958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.700558][T22958] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 247.758626][T22958] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 247.807637][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.932581][T22992] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 247.948824][T22992] bond3 (unregistering): Released all slaves [ 247.987748][T22997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.013435][T23003] loop0: detected capacity change from 0 to 8192 [ 248.140406][T23017] loop1: detected capacity change from 0 to 1024 [ 248.156297][T23020] loop0: detected capacity change from 0 to 512 [ 248.164430][T23020] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 248.199418][T23020] EXT4-fs (loop0): 1 truncate cleaned up [ 248.207583][T23017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.221070][T23020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.284829][T23032] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 248.296491][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.316422][T23032] bond3 (unregistering): Released all slaves [ 248.339544][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.352080][T23038] validate_nla: 6 callbacks suppressed [ 248.352097][T23038] netlink: 'syz.3.9400': attribute type 8 has an invalid length. [ 248.369068][T23041] netlink: 'syz.0.9398': attribute type 16 has an invalid length. [ 248.377346][T23041] netlink: 'syz.0.9398': attribute type 17 has an invalid length. [ 248.390070][T23038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.612759][T23067] x_tables: unsorted entry at hook 1 [ 248.705114][T23041] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 248.720727][T23057] netlink: 'syz.1.9404': attribute type 5 has an invalid length. [ 248.729052][T18500] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 248.748217][T23071] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 248.759784][T23071] bond3 (unregistering): Released all slaves [ 248.801350][T23078] netlink: 'syz.1.9417': attribute type 11 has an invalid length. [ 248.881742][T23085] ip6gre2: entered promiscuous mode [ 248.889849][ T3418] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 248.920139][ T3418] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 249.043339][T23107] veth3: entered promiscuous mode [ 249.053241][T23111] ip6t_srh: unknown srh invflags 4000 [ 249.059916][T23113] netlink: 'syz.4.9432': attribute type 16 has an invalid length. [ 249.067985][T23107] veth3: entered allmulticast mode [ 249.078735][T23113] netlink: 'syz.4.9432': attribute type 17 has an invalid length. [ 249.093716][T23102] fido_id[23102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 249.154276][T23113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.170408][T18500] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.214404][T23118] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 249.246820][T23118] bond1 (unregistering): Released all slaves [ 249.284720][T23137] delete_channel: no stack [ 249.287862][T23132] bond2: option ad_select: invalid value (4) [ 249.296719][T23132] bond2 (unregistering): Released all slaves [ 249.376165][T23144] bridge5: entered promiscuous mode [ 249.466580][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.483906][T23155] netlink: 'syz.1.9453': attribute type 16 has an invalid length. [ 249.494550][T23155] netlink: 'syz.1.9453': attribute type 17 has an invalid length. [ 249.684102][T23168] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 249.717206][T23168] bond1 (unregistering): Released all slaves [ 250.126235][T23202] netlink: 'syz.3.9475': attribute type 16 has an invalid length. [ 250.394800][T23230] sctp: [Deprecated]: syz.2.9490 (pid 23230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.394800][T23230] Use struct sctp_sack_info instead [ 250.442537][T23232] net_ratelimit: 2 callbacks suppressed [ 250.442560][T23232] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.629886][T23254] SELinux: Context system_u:object_r:ld_so_cache_t:s0 is not valid (left unmapped). [ 250.844211][T23275] openvswitch: netlink: Message has 4 unknown bytes. [ 250.976875][T23287] x_tables: duplicate underflow at hook 1 [ 251.211565][T23309] __nla_validate_parse: 20 callbacks suppressed [ 251.211582][T23309] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9527'. [ 251.433693][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 251.433713][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 251.659494][T23345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9545'. [ 251.732759][T23351] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9548'. [ 251.752282][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 251.752301][ T28] audit: type=1326 audit(241.374:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.4.9549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 251.840028][ T28] audit: type=1326 audit(241.402:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.4.9549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 251.893978][T23365] loop2: detected capacity change from 0 to 512 [ 251.905940][ T28] audit: type=1326 audit(241.402:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.4.9549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 251.958032][T23365] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 251.969276][T23370] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9556'. [ 251.989796][ T28] audit: type=1326 audit(241.402:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23352 comm="syz.4.9549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 252.018998][T23370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.058535][ T28] audit: type=1400 audit(241.439:816): avc: denied { create } for pid=23358 comm="syz.2.9552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 252.096557][ T28] audit: type=1400 audit(241.449:817): avc: denied { write } for pid=23358 comm="syz.2.9552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 252.149925][ T28] audit: type=1400 audit(241.552:818): avc: denied { mounton } for pid=23363 comm="syz.2.9555" path="/1971/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=10000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 252.201408][T23379] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9562'. [ 252.246155][ T28] audit: type=1400 audit(241.739:819): avc: denied { nlmsg_read } for pid=23375 comm="syz.4.9560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.376805][ T28] audit: type=1400 audit(241.963:820): avc: denied { read write } for pid=23397 comm="syz.0.9572" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.411644][T23398] qrtr: Invalid version 180 [ 252.456468][ T28] audit: type=1400 audit(241.963:821): avc: denied { open } for pid=23397 comm="syz.0.9572" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.678185][T23430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9588'. [ 252.690749][T23430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9588'. [ 252.783951][T23446] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9596'. [ 252.989766][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9608'. [ 253.038435][T23478] cgroup: Unexpected value for 'nofavordynmods' [ 253.070479][T23480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9613'. [ 253.221223][T23498] bridge1: entered promiscuous mode [ 253.226654][T23498] bridge1: entered allmulticast mode [ 253.487797][T23536] Unsupported ieee802154 address type: 0 [ 253.574997][T23547] xt_TCPMSS: Only works on TCP SYN packets [ 253.675068][T23558] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 253.844551][T23578] loop0: detected capacity change from 0 to 128 [ 253.922932][T23584] loop2: detected capacity change from 0 to 512 [ 253.947323][T23584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.045581][T23593] loop4: detected capacity change from 0 to 164 [ 254.053225][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.080449][T23593] Unable to read rock-ridge attributes [ 254.165496][T23601] openvswitch: netlink: Missing key (keys=40, expected=80) [ 254.819861][T23680] validate_nla: 10 callbacks suppressed [ 254.819880][T23680] netlink: 'syz.0.9708': attribute type 32 has an invalid length. [ 254.834840][T23679] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 256.021612][T23733] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 256.039407][T23733] bond3 (unregistering): Released all slaves [ 256.067822][T23739] @0Ù: renamed from bond_slave_1 [ 256.118152][T23742] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 256.157333][ T3355] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.212397][ T3355] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.446695][T23781] netlink: 'syz.0.9758': attribute type 1 has an invalid length. [ 256.595761][T23794] __nla_validate_parse: 9 callbacks suppressed [ 256.595828][T23794] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9764'. [ 256.782058][T23822] x_tables: unsorted entry at hook 3 [ 256.928642][T23841] netlink: 788 bytes leftover after parsing attributes in process `syz.2.9786'. [ 257.167677][T23863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9794'. [ 257.184801][T23863] netlink: 196 bytes leftover after parsing attributes in process `syz.1.9794'. [ 257.208357][T23863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9794'. [ 257.245206][T23863] netlink: 196 bytes leftover after parsing attributes in process `syz.1.9794'. [ 257.257358][T23872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9800'. [ 257.332264][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 257.332280][ T28] audit: type=1400 audit(246.593:860): avc: denied { connect } for pid=23881 comm="syz.0.9806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 257.407955][T23890] loop2: detected capacity change from 0 to 164 [ 257.418879][T23890] Unable to read rock-ridge attributes [ 257.478949][ T28] audit: type=1400 audit(246.734:861): avc: denied { bind } for pid=23891 comm="syz.2.9813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.548148][T23896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9814'. [ 257.591463][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.632687][T23905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9818'. [ 257.641871][T23905] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9818'. [ 257.687422][T23900] xt_CT: No such helper "netbios-ns" [ 257.775897][T23911] loop4: detected capacity change from 0 to 512 [ 257.791781][ T28] audit: type=1400 audit(247.024:862): avc: denied { setopt } for pid=23914 comm="syz.2.9822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.843756][T23911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.924125][T23925] loop2: detected capacity change from 0 to 128 [ 257.933730][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.042160][T23934] netlink: 'syz.1.9831': attribute type 4 has an invalid length. [ 258.186121][T23950] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 258.233016][T23952] netlink: 'syz.2.9839': attribute type 32 has an invalid length. [ 258.312445][ T28] audit: type=1400 audit(247.510:863): avc: denied { append } for pid=23960 comm="syz.2.9843" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 258.395636][ T28] audit: type=1400 audit(247.538:864): avc: denied { open } for pid=23960 comm="syz.2.9843" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 258.421382][ T28] audit: type=1400 audit(247.538:865): avc: denied { ioctl } for pid=23960 comm="syz.2.9843" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 258.430262][T23971] vhci_hcd vhci_hcd.3: invalid port number 189 [ 258.461872][ T28] audit: type=1400 audit(247.594:866): avc: denied { create } for pid=23973 comm="syz.4.9850" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.501630][T23971] vhci_hcd vhci_hcd.3: default hub control req: 0016 v0087 i00bd l1 [ 258.527302][T23980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 258.533899][T23980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.543645][T23982] raw_sendmsg: syz.0.9854 forgot to set AF_INET. Fix it! [ 258.572006][T23980] vhci_hcd vhci_hcd.0: Device attached [ 258.605927][T23983] vhci_hcd: connection closed [ 258.606214][ T69] vhci_hcd vhci_hcd.2: stop threads [ 258.631337][ T69] vhci_hcd vhci_hcd.2: release socket [ 258.636789][ T69] vhci_hcd vhci_hcd.2: disconnect device [ 258.660562][T23993] netlink: 'syz.1.9858': attribute type 4 has an invalid length. [ 258.689218][T23993] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 258.769695][ T28] audit: type=1400 audit(247.931:867): avc: denied { create } for pid=24003 comm="syz.4.9864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.819081][ T28] audit: type=1400 audit(247.931:868): avc: denied { setopt } for pid=24003 comm="syz.4.9864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.864432][T24015] sctp: [Deprecated]: syz.4.9869 (pid 24015) Use of int in max_burst socket option. [ 258.864432][T24015] Use struct sctp_assoc_value instead [ 259.065778][ T28] audit: type=1400 audit(248.212:869): avc: granted { setsecparam } for pid=24037 comm="syz.0.9880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 259.185313][T24053] netlink: 'syz.2.9887': attribute type 1 has an invalid length. [ 259.399011][T24075] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 259.410888][T24075] bond3 (unregistering): Released all slaves [ 259.883790][T24135] bond2: Removing last arp target with arp_interval on [ 259.891165][T24135] bond2: entered promiscuous mode [ 259.896641][T24135] bond2: entered allmulticast mode [ 259.903013][T24135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.302922][T24183] netlink: 'syz.2.9950': attribute type 3 has an invalid length. [ 260.428420][T24197] erspan0: entered promiscuous mode [ 260.454888][T24197] erspan0: entered allmulticast mode [ 260.483111][T24203] veth1_macvtap: mtu greater than device maximum [ 260.751979][T24245] xt_TCPMSS: Only works on TCP SYN packets [ 260.879509][T24260] netlink: 'syz.0.9988': attribute type 46 has an invalid length. [ 261.126236][T24294] netlink: 'syz.0.10004': attribute type 22 has an invalid length. [ 261.416626][T24336] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 261.468246][T24340] IPv6: sit2: Disabled Multicast RS [ 261.489431][T24340] sit2: entered allmulticast mode [ 261.769370][T24376] qrtr: Invalid version 180 [ 262.026541][T24406] netlink: 'syz.2.10061': attribute type 32 has an invalid length. [ 262.127419][T24423] __nla_validate_parse: 44 callbacks suppressed [ 262.127439][T24423] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10070'. [ 262.143670][T24418] loop0: detected capacity change from 0 to 764 [ 262.215184][T24431] netlink: 'syz.0.10073': attribute type 4 has an invalid length. [ 262.274036][T24431] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10073'. [ 262.275807][T24436] netlink: 'syz.4.10076': attribute type 11 has an invalid length. [ 262.314818][T24436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10076'. [ 262.334796][T24431] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 262.350506][T24442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10088'. [ 262.382736][T24442] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10088'. [ 262.434067][T24448] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 262.659197][T24474] netlink: 'syz.2.10096': attribute type 4 has an invalid length. [ 262.667076][T24474] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10096'. [ 262.695668][T24474] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 262.812372][T24489] netlink: 'syz.0.10100': attribute type 25 has an invalid length. [ 262.834845][T24489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10100'. [ 262.841988][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 262.842057][ T28] audit: type=1400 audit(251.747:922): avc: denied { write } for pid=24491 comm="syz.4.10103" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 262.887460][T24494] netlink: 'syz.2.10104': attribute type 21 has an invalid length. [ 262.916382][ T28] audit: type=1400 audit(251.747:923): avc: denied { open } for pid=24491 comm="syz.4.10103" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 262.960188][ T28] audit: type=1400 audit(251.785:924): avc: denied { ioctl } for pid=24491 comm="syz.4.10103" path="/dev/usbmon8" dev="devtmpfs" ino=166 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.042920][T24511] netlink: 'syz.4.10113': attribute type 4 has an invalid length. [ 263.051412][ T28] audit: type=1400 audit(251.906:925): avc: denied { getopt } for pid=24508 comm="syz.0.10111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 263.084300][T24511] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10113'. [ 263.106365][T24511] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 263.323470][T24541] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10128'. [ 263.359282][ T28] audit: type=1400 audit(252.224:926): avc: denied { load_policy } for pid=24542 comm="syz.4.10129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 263.548359][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10139'. [ 263.702999][ T28] audit: type=1400 audit(252.552:927): avc: denied { getopt } for pid=24578 comm="syz.2.10147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 263.749062][ T28] audit: type=1400 audit(252.589:928): avc: denied { lock } for pid=24584 comm="syz.2.10150" path="socket:[72001]" dev="sockfs" ino=72001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 263.868060][T24599] loop1: detected capacity change from 0 to 164 [ 264.047109][T24618] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 264.070097][T24623] loop0: detected capacity change from 0 to 128 [ 264.089319][ T28] audit: type=1400 audit(252.907:929): avc: denied { bind } for pid=24624 comm="syz.1.10171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.208599][ T28] audit: type=1400 audit(253.020:930): avc: denied { validate_trans } for pid=24640 comm="syz.2.10178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 264.305509][T24655] loop1: detected capacity change from 0 to 256 [ 264.328796][ T28] audit: type=1326 audit(253.141:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24659 comm="syz.4.10187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 265.618450][T24782] sctp: [Deprecated]: syz.3.10247 (pid 24782) Use of int in max_burst socket option. [ 265.618450][T24782] Use struct sctp_assoc_value instead [ 266.750196][T24856] bond3: Removing last arp target with arp_interval on [ 266.775085][T24856] bond3: entered promiscuous mode [ 266.800388][T24856] bond3: entered allmulticast mode [ 266.821332][T24856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.046305][T24880] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.706149][T24927] validate_nla: 1 callbacks suppressed [ 267.706170][T24927] netlink: 'syz.4.10318': attribute type 39 has an invalid length. [ 267.848503][T24899] syz.3.10305 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 267.855177][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 267.945653][T24899] CPU: 1 UID: 0 PID: 24899 Comm: syz.3.10305 Tainted: G W syzkaller #0 PREEMPT(full) [ 267.945695][T24899] Tainted: [W]=WARN [ 267.945704][T24899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.945744][T24899] Call Trace: [ 267.945751][T24899] [ 267.945759][T24899] __dump_stack+0x1d/0x30 [ 267.945791][T24899] dump_stack_lvl+0x95/0xd0 [ 267.945832][T24899] dump_stack+0x15/0x1b [ 267.945863][T24899] dump_header+0x80/0x240 [ 267.945894][T24899] oom_kill_process+0x295/0x350 [ 267.945933][T24899] out_of_memory+0x97d/0xb80 [ 267.946008][T24899] try_charge_memcg+0x62e/0xa10 [ 267.946061][T24899] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 267.946108][T24899] __swap_cache_prepare_and_add+0x386/0x530 [ 267.946209][T24899] swap_cache_alloc_folio+0xa2/0x120 [ 267.946272][T24899] swap_cluster_readahead+0x26e/0x3d0 [ 267.946311][T24899] swapin_readahead+0xde/0x840 [ 267.946349][T24899] ? _raw_spin_unlock+0x9/0x30 [ 267.946441][T24899] ? swap_put_entries_cluster+0x385/0x3a0 [ 267.946491][T24899] ? swap_put_entries_cluster+0x81/0x3a0 [ 267.946603][T24899] ? __rcu_read_unlock+0x4e/0x70 [ 267.946631][T24899] ? swap_cache_get_folio+0x26f/0x280 [ 267.946666][T24899] do_swap_page+0x30d/0x2220 [ 267.946697][T24899] ? css_rstat_updated+0xbb/0x280 [ 267.946729][T24899] ? __rcu_read_lock+0x36/0x50 [ 267.946754][T24899] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 267.946791][T24899] handle_mm_fault+0xb46/0x3020 [ 267.946899][T24899] ? vma_start_read+0x1c7/0x2c0 [ 267.947006][T24899] do_user_addr_fault+0x62f/0x1050 [ 267.947046][T24899] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 267.947093][T24899] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 267.947118][T24899] ? trace_page_fault_user+0x1f/0xe0 [ 267.947151][T24899] exc_page_fault+0x62/0xa0 [ 267.947199][T24899] asm_exc_page_fault+0x26/0x30 [ 267.947327][T24899] RIP: 0033:0x7f8a8356a14c [ 267.947349][T24899] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 267.947374][T24899] RSP: 002b:00007fffdc803210 EFLAGS: 00010202 [ 267.947397][T24899] RAX: 0000000000000000 RBX: 00007f8a83915fa0 RCX: 0000555561dcd808 [ 267.947413][T24899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.947426][T24899] RBP: 00007f8a83917da0 R08: 0000000000000000 R09: 0000000000000000 [ 267.947482][T24899] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003eaab [ 267.947498][T24899] R13: 00007f8a83915fac R14: 000000000003e79d R15: 00007fffdc803310 [ 267.947518][T24899] [ 267.947531][T24899] memory: usage 253924kB, limit 307200kB, failcnt 176 [ 268.234289][T24899] memory+swap: usage 227120kB, limit 9007199254740988kB, failcnt 0 [ 268.284294][T24899] kmem: usage 185044kB, limit 9007199254740988kB, failcnt 0 [ 268.346364][T24899] Memory cgroup stats for /syz3: [ 268.346556][T24899] cache 0 [ 268.390249][T24966] netlink: 'syz.4.10337': attribute type 8 has an invalid length. [ 268.415841][T24899] rss 0 [ 268.418688][T24899] shmem 0 [ 268.431759][T24899] mapped_file 0 [ 268.435391][T24899] dirty 0 [ 268.438345][T24899] writeback 0 [ 268.441703][T24899] workingset_refault_anon 17 [ 268.488787][T24976] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 268.529937][T24899] workingset_refault_file 512 [ 268.534788][T24899] swap 151552 [ 268.538112][T24899] swapcached 192512 [ 268.556556][T24899] pgpgin 220112 [ 268.560512][T24899] pgpgout 220100 [ 268.564209][T24899] pgfault 270989 [ 268.567994][T24899] pgmajfault 10 [ 268.572351][T24899] inactive_anon 24576 [ 268.576448][T24899] active_anon 0 [ 268.580020][T24899] inactive_file 24576 [ 268.584430][T24899] active_file 0 [ 268.592325][T24899] unevictable 0 [ 268.595813][T24899] hierarchical_memory_limit 314572800 [ 268.612077][T24899] hierarchical_memsw_limit 9223372036854771712 [ 268.655094][T24899] total_cache 0 [ 268.659259][T24899] total_rss 0 [ 268.664237][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 268.664251][ T28] audit: type=1400 audit(257.191:945): avc: denied { audit_write } for pid=24986 comm="syz.0.10347" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 268.664753][T24899] total_shmem 0 [ 268.704923][T24899] total_mapped_file 0 [ 268.708952][T24899] total_dirty 0 [ 268.716617][T24899] total_writeback 0 [ 268.720681][T24899] total_workingset_refault_anon 17 [ 268.725912][T24899] total_workingset_refault_file 512 [ 268.731340][T24899] total_swap 151552 [ 268.735225][T24899] total_swapcached 192512 [ 268.739627][T24899] total_pgpgin 220112 [ 268.752283][T24990] __nla_validate_parse: 10 callbacks suppressed [ 268.752305][T24990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10349'. [ 268.773808][T24899] total_pgpgout 220100 [ 268.777915][T24899] total_pgfault 270989 [ 268.820539][T24990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10349'. [ 268.827296][T24899] total_pgmajfault 10 [ 268.844173][T24998] ip6gretap1: entered promiscuous mode [ 268.860750][T24899] total_inactive_anon 24576 [ 268.865427][T24899] total_active_anon 0 [ 268.869514][T24899] total_inactive_file 24576 [ 268.874578][T24998] ip6gretap1: entered allmulticast mode [ 268.893039][T24899] total_active_file 0 [ 268.897071][T24899] total_unevictable 0 [ 268.901075][T24899] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.10305,pid=24899,uid=0 [ 268.915950][ T28] audit: type=1400 audit(257.407:946): avc: denied { write } for pid=25000 comm="syz.4.10355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.980988][T24899] Memory cgroup out of memory: Killed process 24899 (syz.3.10305) total-vm:94032kB, anon-rss:1224kB, file-rss:21892kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 269.218511][T25030] xt_TCPMSS: Only works on TCP SYN packets [ 269.310840][T25036] IPv6: Can't replace route, no match found [ 269.462257][T25048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10378'. [ 269.551383][T25056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.644879][ T28] audit: type=1400 audit(258.108:947): avc: denied { setattr } for pid=25067 comm="syz.1.10387" name="tty23" dev="devtmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 269.778706][ T28] audit: type=1400 audit(258.230:948): avc: denied { connect } for pid=25083 comm="syz.1.10396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 269.792501][T25086] loop4: detected capacity change from 0 to 512 [ 269.826771][T25089] Option ' ' to dns_resolver key: bad/missing value [ 269.880696][T25086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.900134][T25098] netlink: 'syz.1.10402': attribute type 1 has an invalid length. [ 269.951092][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.964196][T25098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10402'. [ 270.024641][ T28] audit: type=1400 audit(258.464:949): avc: denied { execmem } for pid=25104 comm="syz.4.10404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 270.050009][T25101] loop0: detected capacity change from 0 to 8192 [ 270.086870][T25101] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.112000][T25101] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 270.120055][T25101] FAT-fs (loop0): Filesystem has been set read-only [ 270.134241][T25101] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 270.143674][ T28] audit: type=1400 audit(258.585:950): avc: denied { read } for pid=25111 comm="syz.3.10408" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 270.177762][T25101] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 270.337724][T25126] xfrm1: entered promiscuous mode [ 270.382879][T25130] xt_socket: unknown flags 0x4c [ 270.402166][ T28] audit: type=1400 audit(258.819:951): avc: denied { create } for pid=25131 comm="syz.0.10417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.456509][ T28] audit: type=1400 audit(258.838:952): avc: denied { ioctl } for pid=25131 comm="syz.0.10417" path="socket:[74952]" dev="sockfs" ino=74952 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 270.767855][T25159] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 270.778132][T25162] random: crng reseeded on system resumption [ 270.782475][ T28] audit: type=1400 audit(259.174:953): avc: denied { write } for pid=25161 comm="syz.4.10432" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 270.807219][T25163] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10430'. [ 270.843022][ T28] audit: type=1400 audit(259.174:954): avc: denied { open } for pid=25161 comm="syz.4.10432" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 270.968486][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10439'. [ 271.206555][T25204] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.267416][T25212] loop0: detected capacity change from 0 to 128 [ 271.307781][T25215] bond1 (unregistering): Released all slaves [ 271.332241][T25212] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.447170][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.471116][T25228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10464'. [ 271.606676][T25239] IPv6: sit4: Disabled Multicast RS [ 271.613266][T25239] sit4: entered allmulticast mode [ 271.768734][T25258] bond4: option all_slaves_active: invalid value (5) [ 271.790512][T25258] bond4 (unregistering): Released all slaves [ 272.085848][T25287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10491'. [ 273.042099][T25381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10538'. [ 273.093383][T25385] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10540'. [ 273.328041][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.402693][T25430] xfrm0: entered promiscuous mode [ 273.432509][T25430] xfrm0: entered allmulticast mode [ 273.479995][T25439] loop3: detected capacity change from 0 to 512 [ 273.579007][T25456] netlink: 'syz.3.10570': attribute type 4 has an invalid length. [ 273.593787][T25458] loop0: detected capacity change from 0 to 512 [ 273.649290][T25458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.980225][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.120560][T25516] netlink: 'syz.1.10599': attribute type 1 has an invalid length. [ 274.149628][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 274.149644][ T28] audit: type=1400 audit(262.317:980): avc: denied { associate } for pid=25518 comm="syz.3.10603" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 274.180540][T25521] random: crng reseeded on system resumption [ 274.289513][T25530] __nla_validate_parse: 9 callbacks suppressed [ 274.289534][T25530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10607'. [ 274.326588][T25530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10607'. [ 274.342134][T25530] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10607'. [ 274.612651][ T28] audit: type=1400 audit(262.757:981): avc: denied { bind } for pid=25568 comm="syz.4.10627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 274.653230][T25572] netlink: 'syz.0.10628': attribute type 3 has an invalid length. [ 274.670670][T25572] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.10628'. [ 274.748587][ T28] audit: type=1326 audit(262.879:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25583 comm="syz.4.10634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 274.813720][T25591] ±ÿ: entered promiscuous mode [ 274.826587][ T28] audit: type=1326 audit(262.907:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25583 comm="syz.4.10634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 274.852546][T25591] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 274.898254][ T28] audit: type=1326 audit(262.907:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25583 comm="syz.4.10634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 274.923578][T25598] IPv6: sit3: Disabled Multicast RS [ 274.957400][ T28] audit: type=1326 audit(262.907:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25583 comm="syz.4.10634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 275.039283][ T28] audit: type=1326 audit(262.907:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25583 comm="syz.4.10634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 275.089073][T25616] No such timeout policy "syz1" [ 275.108318][T25620] netlink: 'syz.2.10652': attribute type 10 has an invalid length. [ 275.282497][ T28] audit: type=1400 audit(263.384:987): avc: denied { name_bind } for pid=25647 comm="syz.2.10666" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 275.285096][T25650] veth1: entered promiscuous mode [ 275.369544][ T28] audit: type=1400 audit(263.384:988): avc: denied { node_bind } for pid=25647 comm="syz.2.10666" saddr=::ffff:127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 275.420928][ T28] audit: type=1326 audit(263.505:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25662 comm="syz.2.10675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 275.460009][T25669] random: crng reseeded on system resumption [ 275.513973][T25672] loop0: detected capacity change from 0 to 4096 [ 275.523467][T25675] netlink: 'syz.2.10681': attribute type 1 has an invalid length. [ 275.546443][T25681] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10680'. [ 275.560936][T25672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.596352][T25675] netlink: 'syz.2.10681': attribute type 2 has an invalid length. [ 275.620144][T25672] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.10678: Failed to acquire dquot type 1 [ 275.700909][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.723143][T25697] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 275.730543][T25697] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.770874][T25705] loop4: detected capacity change from 0 to 1024 [ 275.834462][T25705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.875475][T25721] netlink: 'syz.2.10701': attribute type 1 has an invalid length. [ 275.897507][T25721] netlink: 'syz.2.10701': attribute type 2 has an invalid length. [ 275.907018][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.255871][T25773] netlink: 'syz.2.10727': attribute type 21 has an invalid length. [ 276.309556][T25778] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 276.338721][T25778] bond4 (unregistering): Released all slaves [ 276.359266][T25773] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10727'. [ 276.486009][T25807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10742'. [ 276.637292][T25831] netlink: 'syz.3.10755': attribute type 11 has an invalid length. [ 276.664826][T25831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10755'. [ 276.707003][T25841] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 276.853915][T25861] bridge0: port 3(veth0_to_bridge) entered blocking state [ 276.873243][T25861] bridge0: port 3(veth0_to_bridge) entered disabled state [ 276.900295][T25861] veth0_to_bridge: entered allmulticast mode [ 276.913618][T25861] veth0_to_bridge: entered promiscuous mode [ 276.919841][T25861] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.937943][T25861] bridge0: port 3(veth0_to_bridge) entered blocking state [ 276.945207][T25861] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 276.971624][T25876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10777'. [ 277.016433][T25882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10780'. [ 277.621141][T25980] bond1: option tlb_dynamic_lb: invalid value (255) [ 277.637934][T25980] bond1 (unregistering): Released all slaves [ 277.797475][T26015] xt_socket: unknown flags 0x4c [ 277.922090][T26032] random: crng reseeded on system resumption [ 277.973815][T26039] ipt_REJECT: TCP_RESET invalid for non-tcp [ 278.139566][T26061] bond3 (unregistering): Released all slaves [ 278.293312][T26078] batadv0: entered promiscuous mode [ 278.327740][T26080] bridge_slave_1: default FDB implementation only supports local addresses [ 278.473633][T26101] bond3: option all_slaves_active: invalid value (5) [ 278.492302][T26106] SET target dimension over the limit! [ 278.505432][T26101] bond3 (unregistering): Released all slaves [ 278.587095][T26117] loop4: detected capacity change from 0 to 512 [ 278.602645][T26117] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.618306][T26117] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 278.642845][T26123] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.661949][T26117] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 278.676576][T26117] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 278.685065][T26117] System zones: 0-2, 18-18, 34-35 [ 278.691252][T26117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.717162][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.787176][T26140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.210938][T26214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 279.261984][T26216] loop4: detected capacity change from 0 to 512 [ 279.284191][T26223] tc_dump_action: action bad kind [ 279.315856][T26216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.416440][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.431491][T26239] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 279.497407][T26246] xt_CT: No such helper "netbios-ns" [ 279.549401][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 279.549418][ T28] audit: type=1400 audit(267.369:1000): avc: denied { read } for pid=26257 comm="syz.4.10960" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 279.580919][ T28] audit: type=1400 audit(267.369:1001): avc: denied { open } for pid=26257 comm="syz.4.10960" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 279.626972][ T28] audit: type=1400 audit(267.406:1002): avc: denied { ioctl } for pid=26257 comm="syz.4.10960" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 279.686126][T26262] loop3: detected capacity change from 0 to 8192 [ 279.703837][T26262] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.716014][T26262] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 279.729040][T26262] FAT-fs (loop3): Filesystem has been set read-only [ 279.753085][T26262] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 279.766152][ T28] audit: type=1326 audit(267.584:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26274 comm="syz.4.10967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 279.776566][T26262] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 279.832611][ T28] audit: type=1326 audit(267.602:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26274 comm="syz.4.10967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 279.857112][ T28] audit: type=1326 audit(267.612:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26274 comm="syz.4.10967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 279.880315][T26281] __nla_validate_parse: 15 callbacks suppressed [ 279.880337][T26281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10969'. [ 279.896183][T26281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10969'. [ 279.905415][ T28] audit: type=1326 audit(267.612:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26274 comm="syz.4.10967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 279.928782][ T28] audit: type=1326 audit(267.612:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26274 comm="syz.4.10967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcb7fc799 code=0x7ffc0000 [ 280.134616][T26314] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.10995'. [ 280.144373][T26314] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.10995'. [ 280.204795][T26324] x_tables: unsorted underflow at hook 2 [ 280.215937][T26326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10989'. [ 280.234146][ T28] audit: type=1326 audit(268.014:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.2.10991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 280.288184][ T28] audit: type=1326 audit(268.014:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26322 comm="syz.2.10991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d82dc799 code=0x7ffc0000 [ 280.353865][T26343] validate_nla: 7 callbacks suppressed [ 280.353884][T26343] netlink: 'syz.3.10999': attribute type 21 has an invalid length. [ 280.412814][T26351] netlink: 212 bytes leftover after parsing attributes in process `syz.1.11003'. [ 280.424312][T26351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11003'. [ 280.433882][T26351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11003'. [ 280.443802][T26351] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11003'. [ 280.546909][T26369] x_tables: ip_tables: osf match: only valid for protocol 6 [ 280.555632][T26363] random: crng reseeded on system resumption [ 280.596941][T26375] xfrm0: entered promiscuous mode [ 280.614650][T26375] xfrm0: entered allmulticast mode [ 280.797153][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11034'. [ 281.079490][T26447] netlink: 'syz.3.11050': attribute type 1 has an invalid length. [ 281.091697][T26450] netlink: 'syz.4.11053': attribute type 3 has an invalid length. [ 281.192357][T26462] lo: entered promiscuous mode [ 281.222247][T26462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.310844][T26482] netlink: 'syz.2.11069': attribute type 2 has an invalid length. [ 281.481604][T26507] No such timeout policy "syz1" [ 281.559338][T26516] loop2: detected capacity change from 0 to 512 [ 281.586466][T26516] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 281.621060][T26516] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 281.645274][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 281.651805][ C0] EXT4-fs (loop2): initial error at time 269: ext4_mb_generate_buddy:1315 [ 281.660415][ C0] EXT4-fs (loop2): last error at time 269: ext4_mb_generate_buddy:1315 [ 281.670198][T26524] veth1: entered promiscuous mode [ 281.689659][T26516] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.11086: attempt to clear invalid blocks 2 len 1 [ 281.708462][T26526] random: crng reseeded on system resumption [ 281.725303][T26516] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.725572][T26516] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.11086: invalid indirect mapped block 1819239214 (level 0) [ 281.783859][T26516] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.784093][T26516] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.11086: invalid indirect mapped block 1819239214 (level 1) [ 281.815046][T26516] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 281.815377][T26516] EXT4-fs (loop2): 1 truncate cleaned up [ 281.831051][T26516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.856350][T26516] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.925421][T26540] netlink: 'syz.1.11095': attribute type 1 has an invalid length. [ 281.945714][T26540] netlink: 'syz.1.11095': attribute type 2 has an invalid length. [ 281.986478][T26546] netlink: 'syz.2.11097': attribute type 3 has an invalid length. [ 282.020652][T26548] loop3: detected capacity change from 0 to 164 [ 282.055664][T26548] rock: directory entry would overflow storage [ 282.061958][T26548] rock: sig=0x4f50, size=4, remaining=3 [ 282.094092][T26548] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 282.246487][T26573] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 282.388080][T26587] netlink: 'syz.2.11119': attribute type 4 has an invalid length. [ 282.578196][T26610] netlink: 'syz.4.11129': attribute type 10 has an invalid length. [ 282.623907][T18500] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 282.828048][T26640] veth0_to_hsr: entered allmulticast mode [ 282.896206][T18500] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 282.926994][T26651] loop4: detected capacity change from 0 to 128 [ 282.960592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.973014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.985337][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.997741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.010019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.022347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.034621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.046926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.059172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.142691][T18500] ip6_tunnel: K xmit: Local address not yet configured! [ 283.334582][T18500] ip6_tunnel: K xmit: Local address not yet configured! [ 283.417328][T26675] bridge0: port 3(veth0_to_bridge) entered blocking state [ 283.465701][T26675] bridge0: port 3(veth0_to_bridge) entered disabled state [ 283.503656][T26675] veth0_to_bridge: entered allmulticast mode [ 283.531948][T26675] veth0_to_bridge: entered promiscuous mode [ 283.540654][T26675] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.555936][T26675] bridge0: port 3(veth0_to_bridge) entered blocking state [ 283.563187][T26675] bridge0: port 3(veth0_to_bridge) entered listening state [ 285.220813][ C0] bridge0: port 3(veth0_to_bridge) entered blocking state [ 286.573622][ C1] net_ratelimit: 24707 callbacks suppressed [ 286.573642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.573650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.574412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 286.580357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.592479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.603874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.616773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.628211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.639841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.651750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.929655][ C0] net_ratelimit: 38506 callbacks suppressed [ 291.929677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.930465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.936365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.948083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.960343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.972796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 291.984576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.996690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.008199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.021055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.285752][ C0] net_ratelimit: 38380 callbacks suppressed [ 297.285772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.286409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.292400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.304058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.316083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.328628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 297.340541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.352539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.364130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.376980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.327681][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 302.641619][ C0] net_ratelimit: 40220 callbacks suppressed [ 302.641639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.641661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.648246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.660039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.671936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.684065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.695736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.707943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.720122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 302.731664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.117320][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.511947][ T28] kauditd_printk_skb: 472 callbacks suppressed [ 304.511965][ T28] audit: type=1400 audit(290.716:1482): avc: denied { mounton } for pid=26743 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 307.997681][ C1] net_ratelimit: 37056 callbacks suppressed [ 307.997702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.997732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.004366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.016410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.028283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.040071][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.052034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.066069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.077370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 308.087914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.353713][ C0] net_ratelimit: 31910 callbacks suppressed [ 313.353734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.353753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.360396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 313.372154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.384999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.396015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.407982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.421216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.432051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.444251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 317.181333][T26741] bridge0: port 1(veth0_to_bridge) entered blocking state [ 317.292890][T26741] bridge0: port 1(veth0_to_bridge) entered disabled state [ 317.514313][T26741] veth0_to_bridge: entered allmulticast mode [ 317.806562][T26741] veth0_to_bridge: entered promiscuous mode [ 318.709760][ C0] net_ratelimit: 32589 callbacks suppressed [ 318.709781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.709787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.710198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.716308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.728381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.740239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.752574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.765366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.776138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.788392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 324.065640][ C0] net_ratelimit: 32560 callbacks suppressed [ 324.065661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.066005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.072034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.084099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.096450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 324.109293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.121164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.132243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 324.143860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.156008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 329.421769][ C0] net_ratelimit: 32949 callbacks suppressed [ 329.421807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.421870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.428167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.440581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 329.452297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.464169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 329.476376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.488545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.500005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.512577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.166149][T26774] usb usb7: usbfs: process 26774 (syz.0.11197) did not claim interface 0 before use [ 330.270896][ T10] ip6_tunnel: K xmit: Local address not yet configured! [ 334.350046][ C0] ================================================================== [ 334.358220][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 334.365483][ C0] [ 334.367823][ C0] read-write to 0xffff888101c688d8 of 8 bytes by interrupt on cpu 1: [ 334.375914][ C0] wq_worker_tick+0x64/0x240 [ 334.380585][ C0] sched_tick+0xda/0x210 [ 334.384864][ C0] update_process_times+0x15e/0x190 [ 334.390118][ C0] tick_nohz_handler+0x275/0x3d0 [ 334.395104][ C0] __hrtimer_run_queues+0x218/0x4f0 [ 334.400348][ C0] hrtimer_interrupt+0x269/0x810 [ 334.405431][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 334.411374][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 334.417065][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.423074][ C0] nf_hook_slow+0x17/0x180 [ 334.427534][ C0] br_nf_pre_routing_ipv6+0x29b/0x2e0 [ 334.432966][ C0] br_nf_pre_routing+0x56a/0xbe0 [ 334.438035][ C0] br_handle_frame+0x85f/0xa60 [ 334.442862][ C0] __netif_receive_skb_core+0x5b1/0x1980 [ 334.448555][ C0] process_backlog+0x25b/0x670 [ 334.453347][ C0] __napi_poll+0x61/0x330 [ 334.457713][ C0] net_rx_action+0x452/0x930 [ 334.462341][ C0] handle_softirqs+0xb9/0x2a0 [ 334.467152][ C0] do_softirq+0x45/0x60 [ 334.471343][ C0] __local_bh_enable_ip+0x70/0x80 [ 334.476426][ C0] kernel_fpu_end+0x6c/0x80 [ 334.480968][ C0] blake2s_compress+0x67/0x1740 [ 334.485877][ C0] blake2s_final+0x6a/0xa0 [ 334.490332][ C0] hmac+0x219/0x400 [ 334.494194][ C0] kdf+0x118/0x1e0 [ 334.497964][ C0] wg_noise_handshake_create_initiation+0x1b0/0x610 [ 334.504607][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 334.510715][ C0] process_scheduled_works+0x513/0xa10 [ 334.516214][ C0] worker_thread+0x58a/0x780 [ 334.520849][ C0] kthread+0x22a/0x280 [ 334.525036][ C0] ret_from_fork+0x150/0x360 [ 334.529677][ C0] ret_from_fork_asm+0x1a/0x30 [ 334.534482][ C0] [ 334.536829][ C0] read-write to 0xffff888101c688d8 of 8 bytes by interrupt on cpu 0: [ 334.544923][ C0] wq_worker_tick+0x64/0x240 [ 334.549570][ C0] sched_tick+0xda/0x210 [ 334.553840][ C0] update_process_times+0x15e/0x190 [ 334.559097][ C0] tick_nohz_handler+0x275/0x3d0 [ 334.564073][ C0] __hrtimer_run_queues+0x218/0x4f0 [ 334.569322][ C0] hrtimer_interrupt+0x269/0x810 [ 334.574312][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 334.580238][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 334.585940][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.591960][ C0] __sanitizer_cov_trace_switch+0xb/0x130 [ 334.597719][ C0] nf_hook_slow+0x8d/0x180 [ 334.602189][ C0] br_nf_pre_routing_ipv6+0x29b/0x2e0 [ 334.607607][ C0] br_nf_pre_routing+0x56a/0xbe0 [ 334.612590][ C0] br_handle_frame+0x85f/0xa60 [ 334.617385][ C0] __netif_receive_skb_core+0x5b1/0x1980 [ 334.623090][ C0] process_backlog+0x25b/0x670 [ 334.627877][ C0] __napi_poll+0x61/0x330 [ 334.632234][ C0] net_rx_action+0x452/0x930 [ 334.636867][ C0] handle_softirqs+0xb9/0x2a0 [ 334.641580][ C0] do_softirq+0x45/0x60 [ 334.645776][ C0] __local_bh_enable_ip+0x70/0x80 [ 334.650831][ C0] kernel_fpu_end+0x6c/0x80 [ 334.655372][ C0] blake2s_compress+0x67/0x1740 [ 334.660275][ C0] blake2s_update+0xa3/0x160 [ 334.664917][ C0] hmac+0x396/0x400 [ 334.668853][ C0] kdf+0x118/0x1e0 [ 334.672633][ C0] wg_noise_handshake_create_initiation+0x1b0/0x610 [ 334.679268][ C0] wg_packet_handshake_send_worker+0xb2/0x160 [ 334.685371][ C0] process_scheduled_works+0x513/0xa10 [ 334.690882][ C0] worker_thread+0x58a/0x780 [ 334.695513][ C0] kthread+0x22a/0x280 [ 334.699610][ C0] ret_from_fork+0x150/0x360 [ 334.704245][ C0] ret_from_fork_asm+0x1a/0x30 [ 334.709051][ C0] [ 334.711391][ C0] value changed: 0x0000000000211c90 -> 0x00000000002143a0 [ 334.718698][ C0] [ 334.721043][ C0] Reported by Kernel Concurrency Sanitizer on: [ 334.727220][ C0] CPU: 0 UID: 0 PID: 26719 Comm: kworker/u8:12 Tainted: G W syzkaller #0 PREEMPT(full) [ 334.738449][ C0] Tainted: [W]=WARN [ 334.742272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.752445][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 334.759437][ C0] ================================================================== [ 334.777705][ C0] net_ratelimit: 30739 callbacks suppressed [ 334.777720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.777958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.784183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.796373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 334.808234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.820060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 334.831918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.844472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.856202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 334.868451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.910632][ T28] audit: type=1400 audit(322.894:1483): avc: denied { write } for pid=3303 comm="syz-executor" path="pipe:[1601]" dev="pipefs" ino=1601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 340.133597][ C1] net_ratelimit: 33254 callbacks suppressed [ 340.133618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.133626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.134213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.140371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 340.152306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.164084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 340.175801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.188317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.200088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:a0:55:81:e9:4e, vlan:0) [ 340.212490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 343.973737][ T3355] ip6_tunnel: K xmit: Local address not yet configured!