last executing test programs: 1.134653261s ago: executing program 4 (id=8278): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 1.089848442s ago: executing program 4 (id=8281): futex(&(0x7f0000000040)=0x1, 0xd, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f0000000040), 0x5, 0x2, 0x0, &(0x7f0000000180)=0xfffffffe, 0x5000000) 426.578975ms ago: executing program 1 (id=8347): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)="6913e42561ba31252f23140a139d8508", 0x10}], 0x3) 388.824096ms ago: executing program 1 (id=8351): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0xc, 0x4) 381.389217ms ago: executing program 1 (id=8352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0) 340.391568ms ago: executing program 1 (id=8357): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) pwrite64(r0, 0x0, 0x0, 0x3) 319.747709ms ago: executing program 1 (id=8359): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 296.27227ms ago: executing program 1 (id=8361): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbd0, &(0x7f0000000480)="$eJzs3M9rXVUeAPDvvfnZNp2XDsMwnU0zDEMLw7ymHVKmZcBWKm5cCLoVGtKXEvL6gyRSkwZ80X9A1LXgRlCL0oVdd6Pg1o3WrcWFUCQ2CiIaue9HkibvJU3zkhvTzwdO7jn33HvP95ubvHsOvPcCeGINZD/SiMMRcSGJKNT3pxHRXa31RlRqxy3Mz478ND87ksTi4gvfJ5FExIP52ZHGtZL69kC90RsRXzydxJ9fXzvu5PTM+HC5XJqot49PXb52fHJ65j9jl4cvlS6Vrpw49b+hk0OnBk8PtS3Xn785e/vHfzz7beWXD369+cNb7yVxNvrqfSvzqGe9ZQMxsPQ7WakzIobbcP3doKOez8o8k84NTkq3OSgAAFpKV8zh/hqF6IjlyVshPv0y1+AAAACAtljsiFgEAAAA9rjE+h8AAAD2uMb7AB7Mz440Sr7vSNhZ989FRH8t/4V6qfV0RqW67Y2uiNj/IImVH2tNaqdt2UBE3Pv69MdZiSafQ95ulbmI+Fuz+59U8++vfxJ6df5pRAy2YfyBVe0/Uv5n2zB+3vkD8GS6c672IFv7/EuX5j/R5PnX2eTZ9Tjyfv415n8La+Z/y/l3tJj/Pf+IY9x4/53rrfqy/P9/+5mPGiUbP9tuKalNuD8X8ffOZvknS/knLfK/sMG1k6hdovDb9VKrY/LOf/HdiKPRPP+GZP3vJzo+OlYuDdZ+Nh1j7vOhD1uNn3f+2f3f3yL/de5/b7bv2kNXav2lPi+dP3+rVd/G+affdScvVmvd9T2vDE9NTZyI6E6eW7v/5Pr5No5pXCPL/9g/1///b/b3n70mVOp/G1nmc/Vt1n5t1ZhP3bzxyXr5Z2u/PO//xc3f/+q+Nx5xjH999uaxVn0r179Zyca/l9TWwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQkEZEXyRpMSKSaj1Ni8WIAxHxl9iflq9OTv179OrLVy5mfRH90ZWOjpVLgxFRqLWTrH2iWl9un1zV/m9EHIqItwv7qu3iyNXyxbyTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMmBiOiLJC1GRBoRC4U0LRbzjgoAAABou/68AwAAAAC2nfU/AAAA7H3W/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyzQ0fu3E0ionJmX7Vkuut9XblGBmy3NO8AgNx05B0AkJvOvAMAcrPJNb7pAuxByQb9vS17etoeCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC719HDd+4mEVE5s69aMt31vq6mZxzZweiA7ZTmHQCQm471Ojt3Lg5g5z32v/jB9sYB7Lzma3zgSZJs0N+7fEzl4Z6ebYsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN2nr1qStBgRabWepsVixMGI6I+uZHSsXBqMiD9FxFeFrp6s3ZN30AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTd5PTM+HC5XJp4nEqytdNVVFpVXt0dYexsJdkdYdQqeb8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh8npmfHhcrk0MZl3JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeJqdnxofL5dLEI1RubebgFZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//8v5A3O") fallocate(r0, 0x1, 0x800000000009b1, 0x2a) 295.04827ms ago: executing program 2 (id=8362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x20000, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 292.42553ms ago: executing program 3 (id=8363): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') read$FUSE(r0, &(0x7f0000001a80)={0x2020}, 0x2020) 268.254941ms ago: executing program 4 (id=8365): r0 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x2) 254.055691ms ago: executing program 2 (id=8367): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r0, 0x0, 0x0, 0x0) 242.454682ms ago: executing program 3 (id=8368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@dellink={0x48, 0x11, 0x1, 0x70bd2c, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x25aa6}, [@IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x183d}, @IFLA_CARRIER={0x5, 0x21, 0x10}, @IFLA_NET_NS_PID={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3ab}]}, 0x48}}, 0x2000e844) 221.448512ms ago: executing program 2 (id=8370): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x12) 202.979623ms ago: executing program 3 (id=8371): r0 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)='B', 0x1, 0xfffffffffffffffe) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, r0) 185.628304ms ago: executing program 4 (id=8372): pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) 179.204444ms ago: executing program 2 (id=8373): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x67ef, 0x7fffffffffffffff) 174.922844ms ago: executing program 3 (id=8375): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xe501, 0x3, 0x1460, 0x0, 0x6affffff, 0x3403000b, 0x12f0, 0x7, 0x13c8, 0x230, 0x230, 0x13c8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_team\x00'}, 0x0, 0x12d0, 0x12f0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x2001, [{0x6}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10}, {}, {}, {0x0, 0x2}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x30}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x4000}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3e, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x100, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x9}, {0x0, 0x8}, {}, {0x0, 0x3, 0x0, 0x1}]}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup.cpu/syz1\x00', 0xe05f}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x14c0) 132.455515ms ago: executing program 4 (id=8378): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r0, 0x4b32, 0x0) 128.325136ms ago: executing program 2 (id=8379): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_tid_address(0x0) 122.754266ms ago: executing program 3 (id=8380): r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [{0x2, 0x6}], {}, [], {0x10, 0x3}}, 0x1c, 0x1) 108.912116ms ago: executing program 4 (id=8381): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x14}, [@RTA_GATEWAY={0x14, 0x5, @mcast1}]}, 0x30}, 0x1, 0x11}, 0x0) 77.334187ms ago: executing program 0 (id=8383): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x2, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0xc, 0x1}}]}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x70}, 0x0) 70.635898ms ago: executing program 2 (id=8384): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) 59.810448ms ago: executing program 0 (id=8385): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_gstrings={0x3}}) 53.715578ms ago: executing program 3 (id=8386): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30) 28.756889ms ago: executing program 0 (id=8387): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x1}) 20.035059ms ago: executing program 0 (id=8388): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xffffff89, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c) 10.1629ms ago: executing program 0 (id=8389): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x80000) pread64(r0, &(0x7f0000000100)=""/2, 0x2, 0x200) 0s ago: executing program 0 (id=8390): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x68, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xc580c}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffffffd}, @IFLA_GRE_IKEY={0x8, 0x4, 0xffff7fff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x10}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) kernel console output (not intermixed with test programs): nging to 7 [ 246.403624][ T9698] loop0: detected capacity change from 0 to 16 [ 246.412794][ T20] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 246.429737][ T9698] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 10852 [ 246.435837][ T20] usb 2-1: config 0 interface 88 has no altsetting 0 [ 246.474750][ T484] usb 3-1: unable to get BOS descriptor or descriptor too short [ 246.551495][ T484] usb 3-1: config 2 has an invalid interface number: 212 but max is 1 [ 246.559849][ T484] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 246.568360][ T484] usb 3-1: config 2 has no interface number 0 [ 246.574653][ T484] usb 3-1: config 2 has no interface number 1 [ 246.581532][ T484] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 246.592686][ T484] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 246.603714][ T484] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 45, changing to 9 [ 246.614932][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 246.614948][ T30] audit: type=1400 audit(2000000041.538:264): avc: denied { mount } for pid=9709 comm="syz.0.4465" name="/" dev="ramfs" ino=43212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 246.643393][ T484] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 33649, setting to 1024 [ 246.654966][ T484] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 246.665211][ T30] audit: type=1400 audit(2000000041.559:265): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 246.667360][ T484] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 246.696020][ T484] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 246.709237][ T560] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 246.713099][ T20] usb 2-1: string descriptor 0 read error: -22 [ 246.717027][ T484] usb 3-1: config 2 interface 212 has no altsetting 0 [ 246.730420][ T20] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 246.739653][ T20] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 246.748039][ T796] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 246.757468][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.766154][ T20] usb 2-1: config 0 descriptor?? [ 246.771206][ T796] usb 4-1: Product: syz [ 246.775352][ T796] usb 4-1: Manufacturer: syz [ 246.779966][ T796] usb 4-1: SerialNumber: syz [ 246.809198][ T20] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input14 [ 246.833317][ T325] udevd[325]: Error opening device "/dev/input/event3": Input/output error [ 246.842143][ T325] udevd[325]: Unable to EVIOCGABS device "/dev/input/event3" [ 246.849719][ T325] udevd[325]: Unable to EVIOCGABS device "/dev/input/event3" [ 246.865364][ T484] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 246.874465][ T484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.882504][ T484] usb 3-1: Product: syz [ 246.886742][ T484] usb 3-1: Manufacturer: syz [ 246.891322][ T484] usb 3-1: SerialNumber: syz [ 246.941746][ T6] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 247.014175][ T39] usb 2-1: USB disconnect, device number 105 [ 247.093736][ T560] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.131825][ T560] usb 5-1: not running at top speed; connect to a high speed hub [ 247.195710][ T796] usb 4-1: USB disconnect, device number 106 [ 247.208602][ T560] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 247.219900][ T560] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 247.233080][ T560] usb 5-1: config 1 interface 0 has no altsetting 1 [ 247.236896][ T6] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 247.240757][ T484] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input15 [ 247.262873][ T484] usb 3-1: USB disconnect, device number 106 [ 247.417720][ T560] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.427092][ T560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.435343][ T560] usb 5-1: Product: syz [ 247.440055][ T560] usb 5-1: Manufacturer: syz [ 247.445035][ T560] usb 5-1: SerialNumber: syz [ 247.569326][ T9726] loop1: detected capacity change from 0 to 4096 [ 247.593195][ T9726] EXT4-fs (loop1): Test dummy encryption mode enabled [ 247.596060][ T9730] loop3: detected capacity change from 0 to 8192 [ 247.608887][ T9726] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 247.627798][ T307] loop3: p1 p2 < > p3 [ 247.631912][ T307] loop3: partition table partially beyond EOD, truncated [ 247.639925][ T307] loop3: p1 size 1342439424 extends beyond EOD, truncated [ 247.648116][ T307] loop3: p2 start 4059840512 is beyond EOD, truncated [ 247.655221][ T307] loop3: p3 start 67108864 is beyond EOD, truncated [ 247.663842][ T9730] loop3: p1 p2 < > p3 [ 247.668386][ T9730] loop3: partition table partially beyond EOD, truncated [ 247.677080][ T9730] loop3: p1 size 1342439424 extends beyond EOD, truncated [ 247.685061][ T9730] loop3: p2 start 4059840512 is beyond EOD, truncated [ 247.703765][ T9730] loop3: p3 start 67108864 is beyond EOD, truncated [ 247.717935][ T560] usb 5-1: USB disconnect, device number 105 [ 247.828719][ T325] udevd[325]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 247.876214][ T9736] loop2: detected capacity change from 0 to 40427 [ 247.882875][ T325] udevd[325]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 247.884204][ T9753] : Can't open blockdev [ 247.897023][ T30] audit: type=1326 audit(2000000042.902:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.3.4486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x0 [ 247.943270][ T9736] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 247.959482][ T9736] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 247.971882][ T6] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 247.983856][ T9760] loop1: detected capacity change from 0 to 1024 [ 247.997718][ T9736] F2FS-fs (loop2): SIT is corrupted data# 5 7 vs 11 [ 248.001853][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.005723][ T9736] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 248.025743][ T9760] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 248.039684][ T6] usb 1-1: config 0 descriptor?? [ 248.046710][ T9760] EXT4-fs (loop1): barriers disabled [ 248.052342][ T9760] JBD2: no valid journal superblock found [ 248.067953][ T9760] EXT4-fs (loop1): error loading journal [ 248.085274][ T6] usb 1-1: bad CDC descriptors [ 248.279081][ T6] usb 1-1: USB disconnect, device number 104 [ 248.305755][ T30] audit: type=1326 audit(2000000043.322:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.1.4500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8530e1819 code=0x0 [ 248.377572][ T9794] loop2: detected capacity change from 0 to 1024 [ 248.413934][ T9794] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 248.440396][ T9794] EXT4-fs (loop2): invalid journal inode [ 248.487523][ T9807] loop4: detected capacity change from 0 to 512 [ 248.525809][ T9811] loop2: detected capacity change from 0 to 512 [ 248.542456][ T9807] EXT4-fs (loop4): dax option not supported [ 248.652848][ T9811] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=5 [ 248.668185][ T9811] EXT4-fs warning (device loop2): ext4_enable_quotas:6477: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 248.723363][ T9811] EXT4-fs (loop2): mount failed [ 248.805568][ T9844] loop0: detected capacity change from 0 to 512 [ 248.830419][ T9844] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 248.859368][ T9844] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.882337][ T9844] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.915019][ T9844] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 248.942010][ T9844] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 249.131957][ T9852] loop4: detected capacity change from 0 to 40427 [ 249.149091][ T9852] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 249.162614][ T9852] F2FS-fs (loop4): invalid crc value [ 249.168463][ T9852] F2FS-fs (loop4): invalid crc value [ 249.174006][ T9852] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 249.239917][ T9849] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 249.248783][ T9849] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 249.276544][ T9849] F2FS-fs (loop2): invalid crc value [ 249.312786][ T9849] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 249.332593][ T560] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 249.350556][ T9849] F2FS-fs (loop2): NAT is corrupt, run fsck to fix it [ 249.357695][ T9849] F2FS-fs (loop2): Failed to initialize F2FS node manager (-22) [ 249.517150][ T9869] erofs: (device loop4): mounted with root inode @ nid 36. [ 249.570750][ T560] usb 1-1: Using ep0 maxpacket: 32 [ 249.612969][ T9873] erofs: (device loop4): mounted with root inode @ nid 36. [ 249.639046][ T9871] erofs: (device loop2): mounted with root inode @ nid 36. [ 249.684994][ T560] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 249.712051][ T9875] erofs: (device loop2): mounted with root inode @ nid 36. [ 249.814564][ T9877] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.829144][ T9877] ext4 filesystem being mounted at /930/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.846785][ T560] usb 1-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 249.858251][ T560] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.859136][ T9880] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.866737][ T560] usb 1-1: Product: syz [ 249.881603][ T560] usb 1-1: Manufacturer: syz [ 249.885335][ T9856] F2FS-fs (loop1): Test dummy encryption mode enabled [ 249.886501][ T560] usb 1-1: SerialNumber: syz [ 249.943975][ T9885] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 249.946321][ T9856] F2FS-fs (loop1): invalid crc value [ 249.953835][ T9885] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.968732][ T9885] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 249.999178][ T9856] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:1, type:0, next_blkoff:0, blkofs:1 [ 250.015293][ T9856] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 250.047455][ T9860] F2FS-fs (loop3): Encoding requested by superblock is unknown [ 250.092064][ T9891] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 250.169245][ T560] usb 1-1: USB disconnect, device number 105 [ 250.178800][ T9895] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.332844][ T304] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 250.354767][ T9902] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.361558][ T9900] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.401152][ T9904] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 250.498000][ T9908] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.629405][ T9919] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.664244][ T9917] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.714047][ T9917] ext4 filesystem being mounted at /880/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.770966][ T304] usb 5-1: unable to get BOS descriptor or descriptor too short [ 250.872843][ T9929] EXT4-fs (loop0): Test dummy encryption mode enabled [ 250.885067][ T304] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.889709][ T9929] EXT4-fs (loop0): Test dummy encryption mode enabled [ 250.911079][ T304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.912227][ T9929] EXT4-fs (loop0): Ignoring removed oldalloc option [ 250.943746][ T9929] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4561: casefold flag without casefold feature [ 250.977004][ T9911] F2FS-fs (loop2): Found nat_bits in checkpoint [ 251.011988][ T9929] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4561: couldn't read orphan inode 15 (err -117) [ 251.024282][ T9929] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nodelalloc,i_version,test_dummy_encryption=v1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 251.024961][ T9911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 251.068306][ T325] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 251.094588][ T304] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40 [ 251.123052][ T796] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 251.184069][ T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.208799][ T304] usb 5-1: Product: syz [ 251.213364][ T304] usb 5-1: Manufacturer: syz [ 251.218138][ T304] usb 5-1: SerialNumber: syz [ 251.243316][ T9938] set_capacity_and_notify: 23 callbacks suppressed [ 251.243346][ T9938] loop0: detected capacity change from 0 to 16 [ 251.258012][ T9938] erofs: (device loop0): mounted with root inode @ nid 36. [ 251.273358][ T304] usb 5-1: selecting invalid altsetting 1 [ 251.290263][ T304] usb 5-1: unit 6 not found! [ 251.332339][ T9942] loop0: detected capacity change from 0 to 512 [ 251.426805][ T9944] loop0: detected capacity change from 0 to 512 [ 251.480816][ T9946] loop2: detected capacity change from 0 to 128 [ 251.485235][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 251.487923][ T304] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 251.516955][ T9948] loop0: detected capacity change from 0 to 1024 [ 251.525153][ T304] usb 5-1: USB disconnect, device number 106 [ 251.527496][ T9925] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 251.575361][ T9948] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.751816][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 251.773286][ T9957] loop0: detected capacity change from 0 to 128 [ 251.811637][ T9959] loop0: detected capacity change from 0 to 256 [ 251.838008][ T796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 251.857950][ T9961] loop0: detected capacity change from 0 to 128 [ 251.942683][ T6] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 252.011731][ T796] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 252.028179][ T9967] loop1: detected capacity change from 0 to 128 [ 252.032693][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.052932][ T796] usb 4-1: Product: syz [ 252.057709][ T796] usb 4-1: Manufacturer: syz [ 252.059325][ T9963] loop0: detected capacity change from 0 to 32768 [ 252.062402][ T796] usb 4-1: SerialNumber: syz [ 252.104289][ T9931] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 252.179091][ T778] udevd[778]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 252.181816][ T327] udevd[327]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 252.190854][ T776] udevd[776]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 252.200593][ T325] udevd[325]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 252.208752][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 252.225666][ T777] udevd[777]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 252.237219][ T1743] udevd[1743]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 252.292495][ T778] udevd[778]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory [ 252.292494][ T777] udevd[777]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory [ 252.293700][ T327] udevd[327]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory [ 252.323852][ T1743] udevd[1743]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 252.399701][ T6] usb 3-1: config 7 has an invalid interface number: 39 but max is 0 [ 252.408008][ T6] usb 3-1: config 7 has no interface number 0 [ 252.455308][ T6] usb 3-1: config 7 interface 39 has no altsetting 0 [ 252.467245][ T796] usb 4-1: MIDIStreaming interface descriptor not found [ 252.499591][ T796] usb 4-1: USB disconnect, device number 107 [ 252.656929][ T6] usb 3-1: New USB device found, idVendor=0572, idProduct=1349, bcdDevice=3a.8f [ 252.666116][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.734766][ T6] usb 3-1: Product: syz [ 252.764710][ T6] usb 3-1: Manufacturer: syz [ 252.770497][ T6] usb 3-1: SerialNumber: syz [ 252.943971][ T9979] SELinux: security_context_str_to_sid(unc) failed for (dev ?, type ?) errno=-22 [ 253.125610][ T6] usb 3-1: USB disconnect, device number 107 [ 253.352233][ T60] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 253.630668][ T9991] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 253.670123][ T9991] EXT4-fs (loop2): orphan cleanup on readonly fs [ 253.726480][ T9991] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4587: bg 0: block 10: padding at end of block bitmap is not set [ 253.771754][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 253.779709][ T6] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 253.797595][ T9991] Quota error (device loop2): write_blk: dquota write failed [ 253.819237][ T9991] Quota error (device loop2): find_free_dqentry: Can't remove block (3) from entry free list [ 253.838335][ T9991] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 253.866978][ T9991] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.4587: Failed to acquire dquot type 0 [ 253.886548][ T9991] Quota error (device loop2): write_blk: dquota write failed [ 253.895492][ T9991] Quota error (device loop2): find_free_dqentry: Can't remove block (3) from entry free list [ 253.914556][ T9991] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 253.933621][ T9991] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.4587: Failed to acquire dquot type 0 [ 253.955146][ T9991] EXT4-fs error (device loop2): ext4_free_blocks:6232: comm syz.2.4587: Freeing blocks not in datazone - block = 0, count = 4096 [ 253.990191][ T9991] Quota error (device loop2): write_blk: dquota write failed [ 253.999890][ T60] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 254.009136][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.019271][ T9991] Quota error (device loop2): find_free_dqentry: Can't remove block (3) from entry free list [ 254.029853][ T60] usb 4-1: Product: syz [ 254.034158][ T9991] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 254.044161][ T60] usb 4-1: Manufacturer: syz [ 254.044300][ T9991] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.4587: Failed to acquire dquot type 0 [ 254.049152][ T60] usb 4-1: SerialNumber: syz [ 254.066676][ T9991] EXT4-fs (loop2): 1 orphan inode deleted [ 254.085920][ T9991] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.101331][ T9965] F2FS-fs (loop4): Found nat_bits in checkpoint [ 254.170258][ T9965] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 254.178190][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.219032][ T6] usb 1-1: not running at top speed; connect to a high speed hub [ 254.295409][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.365112][ T60] usb 4-1: USB disconnect, device number 108 [ 254.466844][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.476882][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.485042][ T6] usb 1-1: Product: ᐁ [ 254.490563][ T6] usb 1-1: Manufacturer: Щ [ 254.505719][ T9969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.517452][T10004] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 254.581852][ T9969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 254.683173][T10008] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.763113][ T6] usb 1-1: bad CDC descriptors [ 254.789208][ T6] usb 1-1: USB disconnect, device number 106 [ 254.858436][ T325] loop4: p1 p2 p3 [ 254.863513][ T391] loop2: p1 p2 p3 [ 254.870852][T10016] loop2: p1 p2 p3 [ 254.888991][T10014] loop4: p1 p2 p3 [ 255.010149][ T30] audit: type=1400 audit(2000000050.366:268): avc: denied { connect } for pid=10033 comm="syz.3.4603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.031292][T10030] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 255.084649][T10044] IPv6: Can't replace route, no match found [ 255.254616][T10058] FAT-fs (loop4): Directory bread(block 64) failed [ 255.290277][T10058] FAT-fs (loop4): Directory bread(block 65) failed [ 255.311354][T10058] FAT-fs (loop4): Directory bread(block 66) failed [ 255.324156][T10058] FAT-fs (loop4): Directory bread(block 67) failed [ 255.333399][T10058] FAT-fs (loop4): Directory bread(block 68) failed [ 255.342715][T10058] FAT-fs (loop4): Directory bread(block 69) failed [ 255.354893][T10058] FAT-fs (loop4): Directory bread(block 70) failed [ 255.364327][T10058] FAT-fs (loop4): Directory bread(block 71) failed [ 255.371806][T10058] FAT-fs (loop4): Directory bread(block 72) failed [ 255.384270][T10058] FAT-fs (loop4): Directory bread(block 73) failed [ 255.419676][ T6] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 255.781233][ T6] usb 4-1: config index 0 descriptor too short (expected 1051, got 27) [ 255.792877][T10114] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 255.810513][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 255.821630][ T60] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 255.839049][T10114] EXT4-fs (loop4): orphan cleanup on readonly fs [ 255.848892][T10114] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4644: bg 0: block 10: padding at end of block bitmap is not set [ 255.864836][T10114] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.4644: Failed to acquire dquot type 0 [ 255.866476][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 255.886879][T10114] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.4644: Failed to acquire dquot type 0 [ 255.908089][T10114] EXT4-fs error (device loop4): ext4_free_blocks:6232: comm syz.4.4644: Freeing blocks not in datazone - block = 0, count = 4096 [ 255.923330][T10114] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.4644: Failed to acquire dquot type 0 [ 255.934915][T10114] EXT4-fs (loop4): 1 orphan inode deleted [ 255.941018][T10114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.067038][ T6] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 256.086697][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.114998][ T6] usb 4-1: Product: syz [ 256.122862][ T6] usb 4-1: Manufacturer: syz [ 256.134046][ T6] usb 4-1: SerialNumber: syz [ 256.147954][ T6] usb 4-1: config 0 descriptor?? [ 256.159744][T10151] set_capacity_and_notify: 23 callbacks suppressed [ 256.159764][T10151] loop4: detected capacity change from 0 to 256 [ 256.185668][T10153] loop0: detected capacity change from 0 to 1024 [ 256.200562][ T60] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 256.209177][ T60] usb 3-1: config 0 has no interface number 0 [ 256.215531][ T60] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 256.252932][T10153] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 256.261824][T10153] EXT4-fs (loop0): orphan cleanup on readonly fs [ 256.269466][T10153] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4662: bg 0: block 10: padding at end of block bitmap is not set [ 256.284346][T10153] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.4662: Failed to acquire dquot type 0 [ 256.301830][T10153] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.4662: Failed to acquire dquot type 0 [ 256.313909][T10153] EXT4-fs error (device loop0): ext4_free_blocks:6232: comm syz.0.4662: Freeing blocks not in datazone - block = 0, count = 4096 [ 256.329198][T10153] EXT4-fs error (device loop0): ext4_acquire_dquot:6225: comm syz.0.4662: Failed to acquire dquot type 0 [ 256.350698][T10153] EXT4-fs (loop0): 1 orphan inode deleted [ 256.366191][T10153] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.381686][ T60] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 256.391122][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.415398][ T60] usb 3-1: Product: syz [ 256.419945][ T60] usb 3-1: Manufacturer: syz [ 256.424573][ T60] usb 3-1: SerialNumber: syz [ 256.428147][ T484] usb 4-1: USB disconnect, device number 109 [ 256.437826][T10164] Zero length message leads to an empty skb [ 256.444710][ T60] usb 3-1: config 0 descriptor?? [ 256.470453][T10098] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 256.488445][ T60] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3a:08:91:fd:46:56 [ 256.714552][ T60] usb 3-1: USB disconnect, device number 108 [ 256.724752][ T60] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 256.798252][T10170] loop0: detected capacity change from 0 to 32768 [ 256.838808][T10050] loop1: detected capacity change from 0 to 262144 [ 256.868042][ T325] loop0: p1 p3 < p5 p6 > [ 256.884400][T10170] loop0: p1 p3 < p5 p6 > [ 257.043601][ T327] udevd[327]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 257.043804][ T307] udevd[307]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 257.055473][ T9974] udevd[9974]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 257.086976][ T325] udevd[325]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 257.151734][T10219] netlink: 964 bytes leftover after parsing attributes in process `syz.3.4683'. [ 257.170718][ T307] udevd[307]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 257.170752][ T327] udevd[327]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 257.191946][ T325] udevd[325]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 257.203060][ T9974] udevd[9974]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 257.341136][T10242] IPv6: sit1: Disabled Multicast RS [ 257.648164][T10283] netlink: 'syz.1.4713': attribute type 15 has an invalid length. [ 257.657943][ T304] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 257.665404][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4713'. [ 257.866072][T10309] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 257.934084][ T304] usb 3-1: Using ep0 maxpacket: 8 [ 258.019292][T10322] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4730'. [ 258.066114][T10329] device bridge1 entered promiscuous mode [ 258.105676][ T304] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.195018][T10352] loop3: detected capacity change from 0 to 256 [ 258.201768][ T304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.218623][ T304] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 258.299018][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4754'. [ 258.323025][T10352] FAT-fs (loop3): Directory bread(block 64) failed [ 258.337219][T10352] FAT-fs (loop3): Directory bread(block 65) failed [ 258.348524][T10352] FAT-fs (loop3): Directory bread(block 66) failed [ 258.367953][T10352] FAT-fs (loop3): Directory bread(block 67) failed [ 258.396472][T10352] FAT-fs (loop3): Directory bread(block 68) failed [ 258.404380][T10352] FAT-fs (loop3): Directory bread(block 69) failed [ 258.431224][ T304] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 258.444594][T10352] FAT-fs (loop3): Directory bread(block 70) failed [ 258.451683][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.470432][T10352] FAT-fs (loop3): Directory bread(block 71) failed [ 258.486368][ T304] usb 3-1: Product: syz [ 258.491294][T10352] FAT-fs (loop3): Directory bread(block 72) failed [ 258.498836][ T304] usb 3-1: Manufacturer: syz [ 258.503671][ T304] usb 3-1: SerialNumber: syz [ 258.508961][T10352] FAT-fs (loop3): Directory bread(block 73) failed [ 258.625774][T10399] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.752099][T10177] loop4: detected capacity change from 0 to 262144 [ 258.791761][ T304] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 258.858634][ T304] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 258.874025][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4782'. [ 258.878350][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 258.878366][ T30] audit: type=1400 audit(2000000054.418:326): avc: denied { accept } for pid=10430 comm="syz.3.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.913694][T10427] device bridge_slave_1 left promiscuous mode [ 258.925759][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.936597][T10427] device bridge_slave_0 left promiscuous mode [ 258.942788][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.963015][ T304] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 258.976706][ T304] usb 3-1: USB disconnect, device number 109 [ 259.143141][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4800'. [ 259.170794][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4800'. [ 259.317222][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4810'. [ 259.346907][ T30] audit: type=1326 audit(2000000054.912:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 259.399724][T10493] netlink: 'syz.4.4813': attribute type 15 has an invalid length. [ 259.411669][ T30] audit: type=1326 audit(2000000054.943:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 259.427551][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4813'. [ 259.450395][T10501] loop3: detected capacity change from 0 to 256 [ 259.456814][T10502] loop2: detected capacity change from 0 to 256 [ 259.482039][ T30] audit: type=1326 audit(2000000054.943:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 259.508564][ T30] audit: type=1326 audit(2000000054.943:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.2.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 259.536840][T10508] loop1: detected capacity change from 0 to 256 [ 259.568679][T10502] FAT-fs (loop2): Directory bread(block 64) failed [ 259.576341][T10501] FAT-fs (loop3): Directory bread(block 64) failed [ 259.583820][T10508] FAT-fs (loop1): Directory bread(block 64) failed [ 259.590552][T10508] FAT-fs (loop1): Directory bread(block 65) failed [ 259.597333][T10501] FAT-fs (loop3): Directory bread(block 65) failed [ 259.610815][T10502] FAT-fs (loop2): Directory bread(block 65) failed [ 259.629892][T10502] FAT-fs (loop2): Directory bread(block 66) failed [ 259.637397][T10501] FAT-fs (loop3): Directory bread(block 66) failed [ 259.645123][T10502] FAT-fs (loop2): Directory bread(block 67) failed [ 259.652775][T10508] FAT-fs (loop1): Directory bread(block 66) failed [ 259.659750][T10501] FAT-fs (loop3): Directory bread(block 67) failed [ 259.666573][T10501] FAT-fs (loop3): Directory bread(block 68) failed [ 259.673596][T10502] FAT-fs (loop2): Directory bread(block 68) failed [ 259.680767][T10508] FAT-fs (loop1): Directory bread(block 67) failed [ 259.687970][T10502] FAT-fs (loop2): Directory bread(block 69) failed [ 259.694547][T10502] FAT-fs (loop2): Directory bread(block 70) failed [ 259.701417][T10501] FAT-fs (loop3): Directory bread(block 69) failed [ 259.703026][T10508] FAT-fs (loop1): Directory bread(block 68) failed [ 259.714708][T10508] FAT-fs (loop1): Directory bread(block 69) failed [ 259.715236][T10501] FAT-fs (loop3): Directory bread(block 70) failed [ 259.721398][ T30] audit: type=1326 audit(2000000055.300:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.4.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 259.728011][T10502] FAT-fs (loop2): Directory bread(block 71) failed [ 259.751859][T10508] FAT-fs (loop1): Directory bread(block 70) failed [ 259.760881][T10501] FAT-fs (loop3): Directory bread(block 71) failed [ 259.765713][T10508] FAT-fs (loop1): Directory bread(block 71) failed [ 259.779084][ T30] audit: type=1326 audit(2000000055.300:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.4.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 259.779174][T10517] syz.4.4825 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 259.803209][T10508] FAT-fs (loop1): Directory bread(block 72) failed [ 259.820006][T10508] FAT-fs (loop1): Directory bread(block 73) failed [ 259.820331][T10501] FAT-fs (loop3): Directory bread(block 72) failed [ 259.826953][ T30] audit: type=1326 audit(2000000055.363:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.4.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 259.833650][T10501] FAT-fs (loop3): Directory bread(block 73) failed [ 259.860386][T10502] FAT-fs (loop2): Directory bread(block 72) failed [ 259.874996][T10502] FAT-fs (loop2): Directory bread(block 73) failed [ 259.887214][ T30] audit: type=1326 audit(2000000055.479:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.4.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 259.910886][ T484] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 259.934607][ T30] audit: type=1326 audit(2000000055.479:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10516 comm="syz.4.4825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 260.027436][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4831'. [ 260.086597][T10535] mmap: syz.1.4835 (10535): VmData 29089792 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 260.105855][T10540] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 260.290261][T10582] netlink: 'syz.4.4858': attribute type 1 has an invalid length. [ 260.344550][ T484] usb 1-1: unable to get BOS descriptor or descriptor too short [ 260.353221][T10593] x_tables: unsorted underflow at hook 1 [ 260.499368][T10615] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.506709][T10615] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.611310][ T484] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 260.620402][ T484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.637652][ T484] usb 1-1: Product: syz [ 260.678358][ T484] usb 1-1: Manufacturer: syz [ 260.683016][ T484] usb 1-1: SerialNumber: syz [ 260.712925][T10661] ip6t_rpfilter: unknown options [ 260.754856][ T484] usb 1-1: selecting invalid altsetting 1 [ 260.760779][ T484] usb 1-1: unit 6 not found! [ 260.965245][ T484] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 260.987200][ T484] usb 1-1: selecting invalid altsetting 1 [ 260.999477][ T484] usb 1-1: unit 6 not found! [ 261.173018][ T484] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 0 [ 261.190669][T10769] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=10769 comm=syz.4.4950 [ 261.211908][ T484] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 261.232789][T10773] loop2: detected capacity change from 0 to 512 [ 261.234830][ T484] usb 1-1: selecting invalid altsetting 1 [ 261.268250][ T484] usb 1-1: unit 6 not found! [ 261.296792][ T484] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 0 [ 261.313906][T10773] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.4953: bad orphan inode 13 [ 261.338739][T10773] ext4_test_bit(bit=12, block=4) = 1 [ 261.343290][ T484] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 261.346687][T10773] is_bad_inode(inode)=0 [ 261.363797][T10773] NEXT_ORPHAN(inode)=0 [ 261.367995][T10773] max_ino=32 [ 261.371374][T10773] i_nlink=1 [ 261.390110][ T484] usb 1-1: USB disconnect, device number 107 [ 261.397787][T10773] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000007,,errors=continue. Quota mode: none. [ 261.482282][T10803] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 261.570444][T10825] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 261.712627][T10857] netlink: 'syz.0.4994': attribute type 3 has an invalid length. [ 261.732286][T10859] IPv6: Can't replace route, no match found [ 261.787231][T10865] device gre0 entered promiscuous mode [ 262.097214][T10929] x_tables: duplicate underflow at hook 4 [ 262.116094][T10933] fuse: Bad value for 'fd' [ 262.191840][T10947] loop4: detected capacity change from 0 to 256 [ 262.251898][T10947] FAT-fs (loop4): Directory bread(block 64) failed [ 262.258670][T10947] FAT-fs (loop4): Directory bread(block 65) failed [ 262.283849][T10947] FAT-fs (loop4): Directory bread(block 66) failed [ 262.293998][T10947] FAT-fs (loop4): Directory bread(block 67) failed [ 262.320863][T10947] FAT-fs (loop4): Directory bread(block 68) failed [ 262.338603][T10947] FAT-fs (loop4): Directory bread(block 69) failed [ 262.347128][T10947] FAT-fs (loop4): Directory bread(block 70) failed [ 262.347161][T10947] FAT-fs (loop4): Directory bread(block 71) failed [ 262.347196][T10947] FAT-fs (loop4): Directory bread(block 72) failed [ 262.347217][T10947] FAT-fs (loop4): Directory bread(block 73) failed [ 262.371962][T10977] loop0: detected capacity change from 0 to 256 [ 262.407889][T10977] FAT-fs (loop0): Directory bread(block 64) failed [ 262.428697][T10977] FAT-fs (loop0): Directory bread(block 65) failed [ 262.442986][T10977] FAT-fs (loop0): Directory bread(block 66) failed [ 262.455462][T10977] FAT-fs (loop0): Directory bread(block 67) failed [ 262.470749][T10977] FAT-fs (loop0): Directory bread(block 68) failed [ 262.477552][T10977] FAT-fs (loop0): Directory bread(block 69) failed [ 262.490435][T10977] FAT-fs (loop0): Directory bread(block 70) failed [ 262.498228][T10993] __nla_validate_parse: 4 callbacks suppressed [ 262.498245][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5060'. [ 262.506845][T10977] FAT-fs (loop0): Directory bread(block 71) failed [ 262.522006][T10977] FAT-fs (loop0): Directory bread(block 72) failed [ 262.531179][T10977] FAT-fs (loop0): Directory bread(block 73) failed [ 262.703033][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5079'. [ 262.757312][T11035] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.901948][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.945146][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.002166][T11079] syz.1.5103 (11079) used greatest stack depth: 19744 bytes left [ 263.107121][T11121] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 263.297134][T11159] loop4: detected capacity change from 0 to 512 [ 263.336683][T11159] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.346376][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5150'. [ 263.361880][T11173] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5150'. [ 263.374627][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5150'. [ 263.384438][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5150'. [ 263.394491][T11173] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5150'. [ 263.405144][T11159] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.417013][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5150'. [ 263.426327][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5150'. [ 263.435700][T11173] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5150'. [ 263.447713][T11175] device bridge_slave_1 left promiscuous mode [ 263.457456][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.473896][T11175] device bridge_slave_0 left promiscuous mode [ 263.484833][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.556709][T11186] IPv6: Can't replace route, no match found [ 263.751884][T11234] netlink: 'syz.4.5178': attribute type 32 has an invalid length. [ 263.831123][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 263.831140][ T30] audit: type=1400 audit(2000000059.625:427): avc: denied { create } for pid=11247 comm="syz.3.5185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.882488][T11252] loop4: detected capacity change from 0 to 512 [ 263.927297][T11258] IPv6: NLM_F_REPLACE set, but no existing node found! [ 263.942545][ T30] audit: type=1400 audit(2000000059.657:428): avc: denied { bind } for pid=11247 comm="syz.3.5185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.987097][T11252] overlayfs: filesystem on './file2' not supported [ 264.002333][ T30] audit: type=1400 audit(2000000059.657:429): avc: denied { name_bind } for pid=11247 comm="syz.3.5185" src=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 264.103632][ T30] audit: type=1400 audit(2000000059.657:430): avc: denied { node_bind } for pid=11247 comm="syz.3.5185" saddr=224.0.0.2 src=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 264.180943][ T30] audit: type=1326 audit(2000000059.772:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11265 comm="syz.2.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 264.188933][T11221] loop1: detected capacity change from 0 to 40427 [ 264.269701][ T30] audit: type=1326 audit(2000000059.772:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11265 comm="syz.2.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 264.282771][T11221] F2FS-fs (loop1): Invalid segment/section count (24 != 3 * 1) [ 264.341625][ T30] audit: type=1326 audit(2000000059.772:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11265 comm="syz.2.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 264.352153][T11221] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 264.422589][T11221] F2FS-fs (loop1): invalid crc value [ 264.428249][ T30] audit: type=1400 audit(2000000059.783:434): avc: denied { mounton } for pid=11251 comm="syz.4.5187" path="/1061/file0/file0" dev="loop4" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 264.479508][T11221] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.529360][ T30] audit: type=1400 audit(2000000000.188:435): avc: denied { read } for pid=11291 comm="syz.4.5205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.608101][ T30] audit: type=1326 audit(2000000000.251:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11296 comm="syz.0.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe544ff0819 code=0x7ffc0000 [ 264.643746][T11221] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 264.663156][T11221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 264.708164][T11361] xt_l2tp: wrong L2TP version: 0 [ 264.759537][T11221] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 264.787992][T11221] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 264.905337][ T281] attempt to access beyond end of device [ 264.905337][ T281] loop1: rw=2049, want=45104, limit=40427 [ 264.938490][T11408] SELinux: Context : is not valid (left unmapped). [ 265.430428][T11505] netlink: 'syz.3.5309': attribute type 3 has an invalid length. [ 265.714973][T11466] loop2: detected capacity change from 0 to 40427 [ 265.786886][T11565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.794282][T11565] IPv6: NLM_F_CREATE should be set when creating new route [ 265.801616][T11565] IPv6: NLM_F_CREATE should be set when creating new route [ 265.815354][T11466] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 265.826965][T11466] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 265.837808][T11466] F2FS-fs (loop2): invalid crc value [ 265.875248][T11466] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 265.913452][T11466] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 265.920988][T11466] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 266.164234][T11611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.171735][T11611] IPv6: NLM_F_CREATE should be set when creating new route [ 266.178999][T11611] IPv6: NLM_F_CREATE should be set when creating new route [ 266.294770][T11641] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 266.297146][T11643] xt_TPROXY: Can be used only with -p tcp or -p udp [ 266.353159][T11648] netlink: 'syz.0.5378': attribute type 5 has an invalid length. [ 266.538853][T11693] loop1: detected capacity change from 0 to 256 [ 266.580844][T11693] FAT-fs (loop1): Directory bread(block 64) failed [ 266.615270][T11693] FAT-fs (loop1): Directory bread(block 65) failed [ 266.636304][T11693] FAT-fs (loop1): Directory bread(block 66) failed [ 266.653374][T11693] FAT-fs (loop1): Directory bread(block 67) failed [ 266.678715][T11693] FAT-fs (loop1): Directory bread(block 68) failed [ 266.685325][T11693] FAT-fs (loop1): Directory bread(block 69) failed [ 266.709955][T11693] FAT-fs (loop1): Directory bread(block 70) failed [ 266.716894][T11693] FAT-fs (loop1): Directory bread(block 71) failed [ 266.774087][T11693] FAT-fs (loop1): Directory bread(block 72) failed [ 266.803226][T11693] FAT-fs (loop1): Directory bread(block 73) failed [ 266.910024][T11765] netlink: 'syz.3.5435': attribute type 4 has an invalid length. [ 266.939855][T11772] loop0: detected capacity change from 0 to 512 [ 267.004356][T11772] EXT4-fs (loop0): Ignoring removed nobh option [ 267.020066][T11772] EXT4-fs (loop0): Test dummy encryption mode enabled [ 267.045113][T11772] EXT4-fs error (device loop0): __ext4_iget:4943: inode #11: block 1: comm syz.0.5434: invalid block [ 267.057047][T11772] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.5434: couldn't read orphan inode 11 (err -117) [ 267.070514][T11772] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 267.265902][T11837] mip6: mip6_rthdr_init_state: spi is not 0: 419430400 [ 267.280450][ T304] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 267.337006][T11855] loop2: detected capacity change from 0 to 256 [ 267.337491][T11854] __nla_validate_parse: 48 callbacks suppressed [ 267.337506][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5477'. [ 267.689522][ T304] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.737065][ T304] usb 2-1: not running at top speed; connect to a high speed hub [ 267.812060][T11941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.964966][ T304] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 267.979157][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.012675][ T304] usb 2-1: Product: syz [ 268.016997][ T304] usb 2-1: Manufacturer: syz [ 268.021626][ T304] usb 2-1: SerialNumber: syz [ 268.268799][T12015] netlink: 'syz.3.5555': attribute type 2 has an invalid length. [ 268.309299][T12018] device veth3 entered promiscuous mode [ 268.384251][ T304] usb 2-1: 1:1 : sample bitwidth 41 in over sample bytes 2 [ 268.391668][ T304] usb 2-1: 1:1: All rates were zero [ 268.404187][T12036] netlink: 'syz.4.5567': attribute type 16 has an invalid length. [ 268.414300][T12036] netlink: 'syz.4.5567': attribute type 17 has an invalid length. [ 268.425876][ T304] usb 2-1: 1:1 : invalid channels 0 [ 268.429932][T12036] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.440787][T12036] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.450679][ T304] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 268.472811][ T304] usb 2-1: USB disconnect, device number 106 [ 268.491672][ T325] udevd[325]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 268.567389][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5572'. [ 268.646622][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5577'. [ 268.689806][T12058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.842131][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 268.842150][ T30] audit: type=1400 audit(2000000005.017:503): avc: denied { read } for pid=12079 comm="syz.3.5589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 268.868664][T12078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5585'. [ 268.941590][T12097] loop1: detected capacity change from 0 to 256 [ 268.992169][T12097] FAT-fs (loop1): Directory bread(block 64) failed [ 269.023560][T12097] FAT-fs (loop1): Directory bread(block 65) failed [ 269.057811][T12097] FAT-fs (loop1): Directory bread(block 66) failed [ 269.068935][T12097] FAT-fs (loop1): Directory bread(block 67) failed [ 269.070676][ T30] audit: type=1400 audit(2000000005.259:504): avc: denied { nlmsg_read } for pid=12112 comm="syz.0.5606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.083760][T12097] FAT-fs (loop1): Directory bread(block 68) failed [ 269.103256][T12113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.166930][T12097] FAT-fs (loop1): Directory bread(block 69) failed [ 269.200035][T12097] FAT-fs (loop1): Directory bread(block 70) failed [ 269.200109][ T30] audit: type=1400 audit(2000000005.395:505): avc: denied { ioctl } for pid=12125 comm="syz.0.5612" path="socket:[51229]" dev="sockfs" ino=51229 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.251039][T12097] FAT-fs (loop1): Directory bread(block 71) failed [ 269.257641][T12097] FAT-fs (loop1): Directory bread(block 72) failed [ 269.283395][T12097] FAT-fs (loop1): Directory bread(block 73) failed [ 269.435627][T12145] loop2: detected capacity change from 0 to 512 [ 269.495316][T12118] loop4: detected capacity change from 0 to 40427 [ 269.509801][T12145] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 269.511981][ T30] audit: type=1400 audit(2000000005.721:506): avc: denied { mounton } for pid=12144 comm="syz.2.5621" path="/1094/file0" dev="tmpfs" ino=5647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 269.566930][T12145] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.5621: corrupted xattr entries [ 269.586743][T12118] F2FS-fs (loop4): Invalid segment/section count (24 != 3 * 1) [ 269.612031][T12118] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 269.646214][T12145] EXT4-fs (loop2): 1 truncate cleaned up [ 269.655096][T12118] F2FS-fs (loop4): invalid crc value [ 269.661758][T12145] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,nodiscard,,errors=continue. Quota mode: none. [ 269.689167][ T560] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 269.715587][T12118] F2FS-fs (loop4): Found nat_bits in checkpoint [ 269.744472][T12176] loop1: detected capacity change from 0 to 1024 [ 269.754287][T12118] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 269.761797][T12118] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 269.762980][T12181] loop0: detected capacity change from 0 to 256 [ 269.789672][T12118] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 269.799187][T12118] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 269.817827][T12176] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 269.830774][T12181] FAT-fs (loop0): Directory bread(block 64) failed [ 269.837588][T12176] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 269.847652][T12181] FAT-fs (loop0): Directory bread(block 65) failed [ 269.854420][T12181] FAT-fs (loop0): Directory bread(block 66) failed [ 269.861624][T12181] FAT-fs (loop0): Directory bread(block 67) failed [ 269.874468][T12181] FAT-fs (loop0): Directory bread(block 68) failed [ 269.875164][T12176] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.5635: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 269.881429][T12181] FAT-fs (loop0): Directory bread(block 69) failed [ 269.906445][T12181] FAT-fs (loop0): Directory bread(block 70) failed [ 269.913309][T12181] FAT-fs (loop0): Directory bread(block 71) failed [ 269.919967][T12181] FAT-fs (loop0): Directory bread(block 72) failed [ 269.926883][T12181] FAT-fs (loop0): Directory bread(block 73) failed [ 269.934497][ T282] attempt to access beyond end of device [ 269.934497][ T282] loop4: rw=2049, want=45104, limit=40427 [ 269.945982][T12176] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.5635: couldn't read orphan inode 11 (err -117) [ 269.965346][T12176] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 270.035186][T12194] loop2: detected capacity change from 0 to 256 [ 270.079808][ T560] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 270.094442][ T560] usb 4-1: config 0 has no interface number 0 [ 270.107645][ T560] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 270.130477][ T30] audit: type=1400 audit(2000000006.372:507): avc: denied { bind } for pid=12205 comm="syz.4.5648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.179489][ T30] audit: type=1326 audit(2000000006.414:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12213 comm="syz.4.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 270.232016][T12194] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 270.257391][ T30] audit: type=1326 audit(2000000006.414:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12213 comm="syz.4.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 270.331778][ T30] audit: type=1326 audit(2000000006.414:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12213 comm="syz.4.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 270.391382][ T30] audit: type=1326 audit(2000000006.414:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12213 comm="syz.4.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 270.432121][ T560] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 270.456076][ T560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.474495][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5675'. [ 270.479270][ T560] usb 4-1: Product: syz [ 270.487698][ T560] usb 4-1: Manufacturer: syz [ 270.527405][ T560] usb 4-1: SerialNumber: syz [ 270.548836][ T560] usb 4-1: config 0 descriptor?? [ 270.565679][T12143] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 270.598205][ T560] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, a6:49:49:48:e4:c8 [ 270.611341][ T30] audit: type=1400 audit(2000000006.865:512): avc: denied { lock } for pid=12281 comm="syz.0.5685" path="socket:[50676]" dev="sockfs" ino=50676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 270.674738][T12296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5693'. [ 270.770322][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5699'. [ 270.791198][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5699'. [ 270.804042][T12318] device ip6gre1 entered promiscuous mode [ 270.825051][ T6] usb 4-1: USB disconnect, device number 110 [ 270.831496][ T6] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 270.900257][T12331] netlink: 'syz.0.5706': attribute type 6 has an invalid length. [ 270.918040][T12331] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.946929][T12339] netlink: 'syz.2.5710': attribute type 7 has an invalid length. [ 271.110805][T12300] loop1: detected capacity change from 0 to 40427 [ 271.150700][T12300] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 271.177099][T12300] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 271.205050][T12300] F2FS-fs (loop1): invalid crc value [ 271.212834][T12379] xt_hashlimit: size too large, truncated to 1048576 [ 271.239767][T12379] xt_hashlimit: max too large, truncated to 1048576 [ 271.247265][T12300] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.282872][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5725'. [ 271.337089][T12300] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 271.356310][T12300] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 271.399786][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5733'. [ 271.472727][T12300] F2FS-fs (loop1): Corrupted max_depth of 3: 255 [ 271.479643][T12356] loop0: detected capacity change from 0 to 40427 [ 271.484418][T12300] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 271.514218][T12356] F2FS-fs (loop0): invalid crc value [ 271.522486][T12356] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 271.536982][T12423] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.545775][T12423] IPv6: Can't replace route, no match found [ 271.561497][T12356] F2FS-fs (loop0): sanity_check_inode: inode (ino=3) has casefold flag, but casefold feature is off [ 271.592560][T12356] F2FS-fs (loop0): Failed to read root inode [ 271.798433][T12459] loop2: detected capacity change from 0 to 512 [ 271.861741][T12459] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 271.869068][T12459] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 271.897237][T12478] xt_TCPMSS: Only works on TCP SYN packets [ 271.966647][T12459] EXT4-fs (loop2): orphan cleanup on readonly fs [ 271.974015][T12459] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 271.989819][T12459] EXT4-fs (loop2): Remounting filesystem read-only [ 271.997150][T12459] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.5756: Failed to acquire dquot type 0 [ 272.008657][T12459] EXT4-fs (loop2): Remounting filesystem read-only [ 272.018097][T12459] EXT4-fs (loop2): 1 truncate cleaned up [ 272.032078][T12459] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,bsddf,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 272.075652][T12496] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 272.137460][T12510] ipt_REJECT: TCP_RESET invalid for non-tcp [ 272.269973][T12536] loop0: detected capacity change from 0 to 1024 [ 272.328482][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.343197][T12536] EXT4-fs (loop0): Ignoring removed bh option [ 272.408050][T12536] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,nolazytime,commit=0x0000000000000000,usrquota,bh,,errors=continue. Quota mode: writeback. [ 272.432352][T12536] ext4 filesystem being mounted at /1197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.474408][T12547] netlink: 'syz.2.5798': attribute type 30 has an invalid length. [ 272.523535][T12558] __nla_validate_parse: 2 callbacks suppressed [ 272.523557][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.541633][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.567134][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.577905][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.640055][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.683748][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.684186][T12581] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.718468][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.735846][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.781077][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.814776][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5804'. [ 272.838659][T12558] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.845954][T12558] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.042150][T12609] xt_SECMARK: invalid security context 'unconfined' [ 273.063792][T12613] SELinux: Context ømMAh`ix: is not valid (left unmapped). [ 273.340032][T12673] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 273.381317][T12677] loop0: detected capacity change from 0 to 512 [ 273.426557][T12677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 273.441363][T12691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.448761][T12691] IPv6: NLM_F_CREATE should be set when creating new route [ 273.456027][T12691] IPv6: NLM_F_CREATE should be set when creating new route [ 273.487565][T12700] netlink: 'syz.1.5869': attribute type 30 has an invalid length. [ 273.501013][T12677] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.5860: bad orphan inode 131083 [ 273.513895][T12677] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 273.604048][T12720] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 273.649486][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 273.649504][ T30] audit: type=1326 audit(2000000266.056:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12726 comm="syz.1.5883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8530e1819 code=0x0 [ 273.812998][T12762] loop2: detected capacity change from 0 to 512 [ 273.845968][ T30] audit: type=1326 audit(2000000266.266:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.4.5905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x0 [ 273.875637][T12762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.909726][T12762] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.5899: missing EA_INODE flag [ 273.929481][ T30] audit: type=1326 audit(2000000266.319:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12769 comm="syz.4.5905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7efe869e4819 code=0x0 [ 273.947149][T12762] EXT4-fs (loop2): Remounting filesystem read-only [ 273.966313][T12762] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.5899: error while reading EA inode 2 err=-117 [ 273.997604][T12762] EXT4-fs (loop2): Remounting filesystem read-only [ 274.014147][ T30] audit: type=1400 audit(2000000266.434:532): avc: denied { read } for pid=12785 comm="syz.1.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.035065][T12762] EXT4-fs (loop2): 1 truncate cleaned up [ 274.042679][T12762] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,init_itable,errors=remount-ro,nogrpid,. Quota mode: none. [ 274.069862][T12791] device macsec0 entered promiscuous mode [ 274.272630][ T30] audit: type=1326 audit(2000000266.718:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.1.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8530e1819 code=0x7ffc0000 [ 274.302729][ T30] audit: type=1326 audit(2000000266.718:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.1.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8530e1819 code=0x7ffc0000 [ 274.360565][ T30] audit: type=1326 audit(2000000266.718:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.1.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8530e1819 code=0x7ffc0000 [ 274.451837][ T30] audit: type=1326 audit(2000000266.718:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.1.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fe8530e1819 code=0x7ffc0000 [ 274.496838][T12854] device gre0 left promiscuous mode [ 274.498773][ T30] audit: type=1326 audit(2000000266.718:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.1.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8530e1819 code=0x7ffc0000 [ 274.518071][T12854] device macsec0 left promiscuous mode [ 274.531909][ T30] audit: type=1326 audit(2000000266.718:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12820 comm="syz.1.5928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8530e1819 code=0x7ffc0000 [ 274.562571][T12854] device veth3 left promiscuous mode [ 274.598937][T12862] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 274.653045][T12868] SELinux: policydb string does not match my string SE Linux [ 274.680777][T12868] SELinux: failed to load policy [ 274.758973][T12882] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 274.773761][T12882] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 274.886816][T12905] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 275.434062][T12991] netlink: 'syz.3.6013': attribute type 13 has an invalid length. [ 275.446842][T12991] gretap0: refused to change device tx_queue_len [ 275.458836][T12931] loop2: detected capacity change from 0 to 40427 [ 275.465702][T12991] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 275.529087][T12931] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 275.536536][T12931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 275.556857][T12931] F2FS-fs (loop2): fault_type options not supported [ 275.575679][T13017] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 275.590337][T12931] F2FS-fs (loop2): invalid crc value [ 275.630661][T12931] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 275.719055][T12931] F2FS-fs (loop2): Start checkpoint disabled! [ 275.737724][T12931] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 275.748101][T13042] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1007 sclass=netlink_audit_socket pid=13042 comm=syz.1.6038 [ 275.768722][T12931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 275.821691][T13057] netlink: 'syz.1.6046': attribute type 8 has an invalid length. [ 275.938547][T13081] xt_TCPMSS: Only works on TCP SYN packets [ 276.019205][T13092] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 276.102656][T13102] xt_CT: No such helper "pptp" [ 276.452889][T13168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.470188][T13170] x_tables: unsorted entry at hook 1 [ 276.645949][T12572] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 276.662151][T12572] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 276.690316][T12572] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 276.724029][T13218] x_tables: unsorted underflow at hook 3 [ 276.769832][T13216] device vti0 entered promiscuous mode [ 277.101910][T13296] IPv6: sit1: Disabled Multicast RS [ 277.210516][T13314] netlink: 'syz.0.6171': attribute type 5 has an invalid length. [ 277.263781][T12572] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 277.293584][T13326] xt_hashlimit: size too large, truncated to 1048576 [ 277.328401][T13326] xt_hashlimit: overflow, try lower: 0/0 [ 277.395134][T12572] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 277.413980][T13354] netlink: 'syz.2.6191': attribute type 13 has an invalid length. [ 277.482669][T13363] __nla_validate_parse: 61 callbacks suppressed [ 277.482690][T13363] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6198'. [ 277.534081][T13363] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 277.606594][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6206'. [ 277.620126][T13381] SELinux: failed to load policy [ 277.629900][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6206'. [ 277.649837][T13385] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6206'. [ 277.667333][T13392] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6211'. [ 277.695562][T13395] netlink: 'syz.0.6214': attribute type 46 has an invalid length. [ 277.803629][T13415] netlink: 'syz.3.6224': attribute type 10 has an invalid length. [ 277.885049][T13429] loop4: detected capacity change from 0 to 512 [ 277.944483][T13429] incfs: Can't find or create .incomplete dir in ./file0 [ 277.972055][T13440] device sit0 entered promiscuous mode [ 277.978282][T13429] incfs: mount failed -22 [ 277.989405][T13440] netlink: 'syz.3.6236': attribute type 1 has an invalid length. [ 278.014638][T13440] netlink: 'syz.3.6236': attribute type 3 has an invalid length. [ 278.137184][T13466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6248'. [ 278.450740][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 278.450758][ T30] audit: type=1326 audit(2000000271.106:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 278.504918][T13533] netlink: 'syz.4.6281': attribute type 11 has an invalid length. [ 278.529204][ T30] audit: type=1326 audit(2000000271.106:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 278.619546][T13547] netlink: 'syz.4.6289': attribute type 3 has an invalid length. [ 278.628363][ T30] audit: type=1326 audit(2000000271.106:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 278.735471][ T30] audit: type=1326 audit(2000000271.106:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 278.761621][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6299'. [ 278.826100][ T30] audit: type=1326 audit(2000000271.137:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 278.834805][T13578] kernel profiling enabled (shift: 25) [ 278.874744][ T30] audit: type=1326 audit(2000000271.137:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 278.909777][T13589] netlink: 'syz.2.6309': attribute type 12 has an invalid length. [ 278.929033][ T30] audit: type=1326 audit(2000000271.137:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 278.950567][ T30] audit: type=1326 audit(2000000271.137:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 279.009461][ T30] audit: type=1326 audit(2000000271.137:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13522 comm="syz.4.6273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 279.062928][ T30] audit: type=1326 audit(2000000271.221:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.6282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 279.193399][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6326'. [ 279.233515][T13624] netlink: 15 bytes leftover after parsing attributes in process `syz.0.6326'. [ 279.512637][T13676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.987976][T13749] loop1: detected capacity change from 0 to 2048 [ 280.006358][T13755] xt_hashlimit: overflow, try lower: 18446744073709551614/9 [ 280.035137][ T325] loop1: p1 < > p4 [ 280.045172][ T325] loop1: p4 size 722688 extends beyond EOD, truncated [ 280.070303][T13749] loop1: p1 < > p4 [ 280.076841][T13749] loop1: p4 size 722688 extends beyond EOD, truncated [ 280.183032][ T325] udevd[325]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 280.183150][ T391] udevd[391]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 280.223269][ T325] udevd[325]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 280.247058][ T391] udevd[391]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 280.367506][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 280.630546][T13869] syz.2.6445 uses obsolete (PF_INET,SOCK_PACKET) [ 280.675410][T13877] validate_nla: 3 callbacks suppressed [ 280.675430][T13877] netlink: 'syz.3.6449': attribute type 5 has an invalid length. [ 280.923482][T13926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.206930][T13964] device veth0_vlan left promiscuous mode [ 281.212920][T13964] device veth0_vlan entered promiscuous mode [ 281.245503][T13964] device veth1_macvtap left promiscuous mode [ 281.264064][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.272610][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.285705][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.299733][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.306874][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.329125][T12572] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 281.331473][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.345601][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.354158][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.361337][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.369268][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.377680][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 281.385669][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.393946][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 281.402069][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.410379][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.418885][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.427273][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.435494][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.443700][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.451932][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.460388][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.469060][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.477400][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.485845][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.493979][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.502356][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.510528][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.519028][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.527619][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.535646][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.543861][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.551488][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.559017][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.567118][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.575487][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.891590][T12572] usb 3-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 281.912238][T12572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.938670][T12572] usb 3-1: Product: syz [ 281.954918][T12572] usb 3-1: Manufacturer: syz [ 281.962732][T12572] usb 3-1: SerialNumber: syz [ 281.973501][T14070] netlink: 'syz.0.6545': attribute type 4 has an invalid length. [ 281.985080][T14070] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6545'. [ 282.317859][T14127] loop1: detected capacity change from 0 to 4096 [ 282.339020][T12572] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 282.358245][T12572] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 282.365965][T14151] xt_bpf: check failed: parse error [ 282.389555][T12572] usb 3-1: USB disconnect, device number 110 [ 282.412104][T14164] __nla_validate_parse: 2 callbacks suppressed [ 282.412124][T14164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6591'. [ 282.463610][T14127] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.509254][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6596'. [ 282.606993][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 282.698683][T14206] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 282.885092][T14246] netlink: 'syz.1.6631': attribute type 3 has an invalid length. [ 283.013941][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6646'. [ 283.155493][T14306] xt_TCPMSS: Only works on TCP SYN packets [ 283.216596][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6666'. [ 283.241972][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6665'. [ 283.279777][T14326] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6671'. [ 283.388047][T14348] printk: syz.3.6682 (14348): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 283.418013][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 283.418031][ T30] audit: type=1400 audit(2000000276.323:669): avc: denied { execute } for pid=14349 comm="syz.2.6683" name="file0" dev="tmpfs" ino=6542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 283.514297][T14365] netlink: 'syz.1.6689': attribute type 3 has an invalid length. [ 283.541014][ T30] audit: type=1400 audit(2000000276.418:670): avc: denied { mounton } for pid=14362 comm="syz.4.6691" path="mnt:[4026532369]" dev="nsfs" ino=4026532369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.631409][ T30] audit: type=1326 audit(2000000276.481:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14373 comm="syz.0.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe544ff0819 code=0x7ffc0000 [ 283.662829][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6701'. [ 283.687061][ T30] audit: type=1326 audit(2000000276.481:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14373 comm="syz.0.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fe544ff0819 code=0x7ffc0000 [ 283.753780][T14403] syz.1.6708 (14403): /proc/14403/oom_adj is deprecated, please use /proc/14403/oom_score_adj instead. [ 283.789889][ T30] audit: type=1326 audit(2000000276.544:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14373 comm="syz.0.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe544ff0819 code=0x7ffc0000 [ 283.828304][T14410] device sit1 entered promiscuous mode [ 283.876597][ T30] audit: type=1326 audit(2000000276.544:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14373 comm="syz.0.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe544ff0819 code=0x7ffc0000 [ 283.916430][T14426] ipt_REJECT: TCP_RESET invalid for non-tcp [ 284.022208][ T30] audit: type=1326 audit(2000000276.953:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.0.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe544ff0819 code=0x7ffc0000 [ 284.074855][T14466] binfmt_misc: register: failed to install interpreter file ./file1 [ 284.105278][ T30] audit: type=1326 audit(2000000276.953:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.0.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fe544ff0819 code=0x7ffc0000 [ 284.200694][ T30] audit: type=1326 audit(2000000276.953:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.0.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe544ff0819 code=0x7ffc0000 [ 284.248936][T14495] xt_TCPMSS: Only works on TCP SYN packets [ 284.262935][T14498] loop0: detected capacity change from 0 to 512 [ 284.302421][T14498] EXT4-fs (loop0): Ignoring removed orlov option [ 284.315086][T14498] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 284.334062][ T30] audit: type=1326 audit(2000000277.279:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.2.6760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53acc99819 code=0x7ffc0000 [ 284.364110][T14498] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 284.387013][T14498] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 284.392315][T14516] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 284.403767][T14498] EXT4-fs (loop0): orphan cleanup on readonly fs [ 284.411686][T14498] EXT4-fs warning (device loop0): ext4_enable_quotas:6477: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 284.429732][T14498] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 284.448369][T14498] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.6754: bg 0: block 40: padding at end of block bitmap is not set [ 284.473216][T14498] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 284.492244][T14498] EXT4-fs (loop0): 1 truncate cleaned up [ 284.497925][T14498] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,noload,noblock_validity,norecovery,i_version,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 284.523971][T14498] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 284.651237][T14538] xt_l2tp: missing protocol rule (udp|l2tpip) [ 284.687123][T14544] netlink: 'syz.0.6776': attribute type 1 has an invalid length. [ 284.709018][T14521] loop3: detected capacity change from 0 to 40427 [ 284.727869][T14550] xt_socket: unknown flags 0xc [ 284.783467][T14521] F2FS-fs (loop3): invalid crc value [ 284.790766][T14521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 284.800436][T14565] netlink: 'syz.0.6786': attribute type 15 has an invalid length. [ 284.824903][T14521] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 284.832113][T14521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 284.884072][T14570] xt_TCPMSS: Only works on TCP SYN packets [ 284.960996][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6794'. [ 284.975514][T14582] tc_dump_action: action bad kind [ 285.062537][T14600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6802'. [ 285.189145][T14628] netlink: 37 bytes leftover after parsing attributes in process `syz.2.6817'. [ 285.432029][T14678] device sit0 entered promiscuous mode [ 285.437712][T14678] netlink: 'syz.0.6842': attribute type 1 has an invalid length. [ 285.448245][T14681] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.483978][T14685] netlink: 'syz.1.6844': attribute type 10 has an invalid length. [ 285.507833][T14685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.735187][T14734] bridge0: port 1(gretap0) entered blocking state [ 285.747371][T14734] bridge0: port 1(gretap0) entered disabled state [ 285.755588][T14734] device gretap0 entered promiscuous mode [ 285.792071][T14744] netlink: 'syz.0.6875': attribute type 46 has an invalid length. [ 285.808734][T14744] netlink: 'syz.0.6875': attribute type 19 has an invalid length. [ 285.894328][T14761] loop3: detected capacity change from 0 to 512 [ 285.939304][T14761] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 285.967682][T14761] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 285.989999][T14761] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 286.008440][T14761] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 286.020354][T14761] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 286.029417][T14761] EXT4-fs (loop3): orphan cleanup on readonly fs [ 286.056693][T14761] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.6883: bg 0: block 34: padding at end of block bitmap is not set [ 286.115583][T14800] loop0: detected capacity change from 0 to 256 [ 286.122561][T14761] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.6883: Failed to acquire dquot type 1 [ 286.145324][T14761] EXT4-fs (loop3): 1 truncate cleaned up [ 286.169380][T14761] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback. [ 286.205376][T14812] x_tables: unsorted underflow at hook 3 [ 286.322584][T14836] netlink: 'syz.2.6919': attribute type 49 has an invalid length. [ 286.524794][T14878] netlink: 'syz.1.6941': attribute type 5 has an invalid length. [ 286.661564][T14915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.927592][T14962] bridge0: port 2(dummy0) entered blocking state [ 286.952319][T14962] bridge0: port 2(dummy0) entered disabled state [ 286.968265][T14962] device dummy0 entered promiscuous mode [ 286.970005][T14973] xt_hashlimit: size too large, truncated to 1048576 [ 287.014562][T14979] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 287.097840][T14994] binfmt_misc: register: failed to install interpreter file ./file1 [ 287.152645][T15004] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.274322][T15032] device bridge3 entered promiscuous mode [ 287.393410][T15056] loop4: detected capacity change from 0 to 512 [ 287.482801][T15056] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,norecovery,,errors=continue. Quota mode: writeback. [ 287.504780][T15056] ext4 filesystem being mounted at /1438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.519866][T15056] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.7028: corrupted xattr block 6 [ 287.532417][T15056] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 287.532509][T15072] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 287.542008][T15056] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #12: comm syz.4.7028: corrupted xattr block 6 [ 287.575206][T15056] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 287.585859][T15056] EXT4-fs error (device loop4): ext4_get_inode_usage:835: inode #12: comm syz.4.7028: corrupted xattr block 6 [ 287.747902][T15060] loop1: detected capacity change from 0 to 40427 [ 287.759121][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 287.773263][T15097] __nla_validate_parse: 8 callbacks suppressed [ 287.773283][T15097] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7047'. [ 287.814022][T15060] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 287.840891][T15060] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 287.854000][T15060] F2FS-fs (loop1): invalid crc value [ 287.873642][T15060] F2FS-fs (loop1): Found nat_bits in checkpoint [ 287.884894][T15115] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 287.943415][T15060] F2FS-fs (loop1): Start checkpoint disabled! [ 287.945134][T15119] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7058'. [ 287.950541][T15060] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 287.966757][T15060] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 287.974875][T15121] netlink: 'syz.2.7057': attribute type 15 has an invalid length. [ 287.990097][T15124] xt_TPROXY: Can be used only with -p tcp or -p udp [ 288.042027][T15060] F2FS-fs (loop1): switch discard_unit option is not allowed [ 288.067318][T15130] xt_TCPMSS: Only works on TCP SYN packets [ 288.178521][T15148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7072'. [ 288.193803][T15153] x_tables: unsorted entry at hook 2 [ 288.212815][T15150] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7073'. [ 288.232652][T15150] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7073'. [ 288.274929][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 288.274946][ T30] audit: type=1400 audit(2000000281.417:732): avc: denied { setcheckreqprot } for pid=15163 comm="syz.3.7081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 288.394208][T15190] veth1: mtu less than device minimum [ 288.423385][T15197] xt_CONNSECMARK: invalid mode: 0 [ 288.500631][T15209] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.626454][ T30] audit: type=1400 audit(2000000281.794:733): avc: denied { create } for pid=15238 comm="syz.0.7116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.680737][ T30] audit: type=1400 audit(2000000281.794:734): avc: denied { write } for pid=15238 comm="syz.0.7116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.730325][T15262] futex_wake_op: syz.0.7127 tries to shift op by 32; fix this program [ 288.740117][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7129'. [ 288.782124][T15274] xt_socket: unknown flags 0x40 [ 288.792138][ T30] audit: type=1326 audit(2000000281.962:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.3.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 288.839138][ T30] audit: type=1326 audit(2000000281.983:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.3.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 288.864850][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7138'. [ 288.883796][ T30] audit: type=1326 audit(2000000281.994:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.3.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 288.907750][T15293] loop1: detected capacity change from 0 to 512 [ 288.910789][ T30] audit: type=1326 audit(2000000281.994:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.3.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 288.938801][ T30] audit: type=1326 audit(2000000281.994:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.3.7132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 288.949706][T15293] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 288.963176][ T30] audit: type=1400 audit(2000000282.046:740): avc: denied { read write } for pid=15289 comm="syz.3.7141" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.001210][ T30] audit: type=1400 audit(2000000282.046:741): avc: denied { open } for pid=15289 comm="syz.3.7141" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.005841][T15301] xt_hashlimit: max too large, truncated to 1048576 [ 289.063951][T15293] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,jqfmt=vfsv1,noquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 289.087948][T15293] ext4 filesystem being mounted at /1390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.140140][ T303] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 289.179266][T15321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7156'. [ 289.208829][T15323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 289.298839][T15331] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7160'. [ 289.315468][T15331] tc_dump_action: action bad kind [ 289.391619][T15339] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7164'. [ 289.492661][ T303] usb 4-1: config 1 interface 0 altsetting 39 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.510584][ T303] usb 4-1: config 1 interface 0 has no altsetting 0 [ 289.597646][ T303] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.612114][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.621175][ T303] usb 4-1: SerialNumber: syz [ 289.684022][T15369] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 289.883661][ T303] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 289.901563][T15399] tc_dump_action: action bad kind [ 289.904372][ T303] usb 4-1: USB disconnect, device number 111 [ 290.094741][T15436] x_tables: unsorted underflow at hook 2 [ 290.268948][T15463] loop2: detected capacity change from 0 to 512 [ 290.380430][T15463] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 290.436478][T15463] ext4 filesystem being mounted at /1412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.524455][T15463] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.2.7225: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 290.628151][T15463] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #12: comm syz.2.7225: directory missing '.' [ 290.911442][T15565] device tunl0 entered promiscuous mode [ 290.940632][T15565] netlink: 'syz.1.7277': attribute type 4 has an invalid length. [ 291.005104][T15577] xt_hashlimit: max too large, truncated to 1048576 [ 291.067517][T15583] x_tables: ip_tables: esp match: only valid for protocol 50 [ 291.171587][T15595] IPv6: sit2: Disabled Multicast RS [ 291.373957][T15626] netlink: 'syz.3.7305': attribute type 12 has an invalid length. [ 291.437757][T15638] netlink: 'syz.2.7313': attribute type 13 has an invalid length. [ 292.131856][T15770] netlink: 'syz.3.7378': attribute type 3 has an invalid length. [ 292.213148][T15786] netlink: 'syz.0.7386': attribute type 13 has an invalid length. [ 292.226453][ T304] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 292.347239][T15816] netlink: 'syz.0.7400': attribute type 14 has an invalid length. [ 292.636460][ T304] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.674990][ T304] usb 3-1: not running at top speed; connect to a high speed hub [ 292.848278][T15925] netlink: 'syz.4.7454': attribute type 2 has an invalid length. [ 292.950536][ T304] usb 3-1: New USB device found, idVendor=ffad, idProduct=a001, bcdDevice= 0.40 [ 292.961920][T15945] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 292.969313][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.021945][ T304] usb 3-1: Product: syz [ 293.028857][ T304] usb 3-1: Manufacturer: syz [ 293.033494][ T304] usb 3-1: SerialNumber: syz [ 293.178221][T15987] netlink: 'syz.1.7485': attribute type 7 has an invalid length. [ 293.266994][T16005] netlink: 'syz.1.7495': attribute type 5 has an invalid length. [ 293.298654][T16009] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 293.311121][T16013] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 293.445847][ T304] usb 3-1: unit 6 not found! [ 293.457950][ T304] usb 3-1: USB disconnect, device number 111 [ 293.488518][ T30] kauditd_printk_skb: 8985 callbacks suppressed [ 293.488537][ T30] audit: type=1400 audit(2000000286.886:9727): avc: denied { relabelfrom } for pid=16033 comm="syz.0.7509" name="UNIX" dev="sockfs" ino=63938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 293.488620][T16034] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 293.503932][ T30] audit: type=1400 audit(2000000286.886:9728): avc: denied { mac_admin } for pid=16033 comm="syz.0.7509" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 293.592025][ T30] audit: type=1400 audit(2000000286.928:9729): avc: denied { relabelto } for pid=16033 comm="syz.0.7509" name="UNIX" dev="sockfs" ino=63938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 293.647525][ T30] audit: type=1326 audit(2000000286.991:9730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 293.689803][ T30] audit: type=1326 audit(2000000286.991:9731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 293.713891][ T30] audit: type=1326 audit(2000000287.001:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 293.739003][ T30] audit: type=1326 audit(2000000287.001:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 293.763330][ T30] audit: type=1326 audit(2000000287.001:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 293.787491][ T30] audit: type=1326 audit(2000000287.001:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 293.811583][ T30] audit: type=1326 audit(2000000287.001:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.7514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe869e4819 code=0x7ffc0000 [ 293.826737][ T303] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 294.043719][T16115] xt_ecn: cannot match TCP bits for non-tcp packets [ 294.179546][ T303] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 294.192271][ T303] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 294.205739][ T303] usb 1-1: config 0 has no interface number 0 [ 294.257093][T16161] xt_bpf: check failed: parse error [ 294.360235][ T303] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 294.373993][T16181] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 294.374865][ T303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.405393][ T303] usb 1-1: Product: syz [ 294.409974][ T303] usb 1-1: Manufacturer: syz [ 294.422020][ T303] usb 1-1: SerialNumber: syz [ 294.438455][ T303] usb 1-1: config 0 descriptor?? [ 294.469622][T16196] __nla_validate_parse: 8 callbacks suppressed [ 294.469643][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.493834][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.503599][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.512849][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.521960][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.531761][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.541322][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.550733][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.559854][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.569146][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7587'. [ 294.605097][T16205] x_tables: duplicate underflow at hook 4 [ 294.675489][ T289] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 294.687330][T16219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.720397][T16225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.745572][ T289] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 294.765000][ T289] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 294.941546][ T303] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 294.950773][ T303] usb 1-1: No valid video chain found. [ 294.958745][ T303] usb 1-1: USB disconnect, device number 108 [ 295.238349][T16329] loop2: detected capacity change from 0 to 512 [ 295.288775][T16329] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 295.299252][T16337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.462369][T16367] xt_NFQUEUE: number of total queues is 0 [ 295.536453][T16385] x_tables: duplicate underflow at hook 2 [ 295.770755][ T289] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 295.778741][ T289] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 295.957477][T16475] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 295.985268][T16478] netlink: 'syz.3.7727': attribute type 5 has an invalid length. [ 296.064542][T16500] netlink: 'syz.0.7737': attribute type 5 has an invalid length. [ 296.120273][T16510] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 296.187694][T16523] netlink: 'syz.0.7749': attribute type 27 has an invalid length. [ 296.250974][T16536] netlink: 'syz.0.7757': attribute type 47 has an invalid length. [ 296.257939][T16539] xt_l2tp: v2 doesn't support IP mode [ 296.266982][T16536] netlink: 'syz.0.7757': attribute type 47 has an invalid length. [ 296.362068][T16560] device lo entered promiscuous mode [ 296.368220][T16560] device tunl0 entered promiscuous mode [ 296.386446][T16560] device gre0 entered promiscuous mode [ 296.395578][T16560] device erspan0 entered promiscuous mode [ 296.407036][T16560] device ip_vti0 entered promiscuous mode [ 296.413934][T16560] device ip6_vti0 entered promiscuous mode [ 296.420134][T16560] device ip6tnl0 entered promiscuous mode [ 296.425993][T16560] device ip6gre0 entered promiscuous mode [ 296.432862][T16560] device syz_tun entered promiscuous mode [ 296.439147][T16560] device ip6gretap0 entered promiscuous mode [ 296.445344][T16560] device veth0 entered promiscuous mode [ 296.451304][T16560] device veth1 entered promiscuous mode [ 296.457126][T16560] device wg0 entered promiscuous mode [ 296.462834][T16560] device wg1 entered promiscuous mode [ 296.468795][T16560] device wg2 entered promiscuous mode [ 296.474377][T16560] device veth0_to_bridge entered promiscuous mode [ 296.481344][T16560] device bridge_slave_0 entered promiscuous mode [ 296.488046][T16560] device veth1_to_bridge entered promiscuous mode [ 296.494728][T16560] device bridge_slave_1 entered promiscuous mode [ 296.501760][T16560] device veth0_to_bond entered promiscuous mode [ 296.508473][T16560] device bond_slave_0 entered promiscuous mode [ 296.514955][T16560] device veth1_to_bond entered promiscuous mode [ 296.521880][T16560] device bond_slave_1 entered promiscuous mode [ 296.529851][T16560] device veth0_to_team entered promiscuous mode [ 296.536466][T16560] device team_slave_0 entered promiscuous mode [ 296.543091][T16560] device veth1_to_team entered promiscuous mode [ 296.549582][T16560] device team_slave_1 entered promiscuous mode [ 296.556500][T16560] device veth0_to_batadv entered promiscuous mode [ 296.563367][T16560] device batadv_slave_0 entered promiscuous mode [ 296.569826][T16560] device veth1_to_batadv entered promiscuous mode [ 296.576639][T16560] device batadv_slave_1 entered promiscuous mode [ 296.583199][T16560] device xfrm0 entered promiscuous mode [ 296.588884][T16560] device veth0_to_hsr entered promiscuous mode [ 296.595512][T16560] device hsr_slave_0 entered promiscuous mode [ 296.601955][T16560] device veth1_to_hsr entered promiscuous mode [ 296.608326][T16560] device hsr_slave_1 entered promiscuous mode [ 296.614673][T16560] device veth1_virt_wifi entered promiscuous mode [ 296.621498][T16560] device veth0_virt_wifi entered promiscuous mode [ 296.628466][T16560] device veth1_vlan entered promiscuous mode [ 296.634757][T16560] device vlan0 entered promiscuous mode [ 296.640841][T16560] device vlan1 entered promiscuous mode [ 296.647241][T16560] device veth0_macvtap entered promiscuous mode [ 296.653695][T16560] device macsec0 entered promiscuous mode [ 296.660190][T16560] device ip6tnl1 entered promiscuous mode [ 296.666479][T16560] device ip6gretap1 entered promiscuous mode [ 296.672730][T16560] device ip6gretap2 entered promiscuous mode [ 296.679296][T16560] device ip6tnl2 entered promiscuous mode [ 296.684475][ T304] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 296.685359][T16560] device syztnl1 entered promiscuous mode [ 296.699187][T16560] device ip6tnl3 entered promiscuous mode [ 296.710243][T16560] device ip6gretap3 entered promiscuous mode [ 296.719519][T16560] device sit1 entered promiscuous mode [ 296.726113][T16560] device veth2 entered promiscuous mode [ 296.732465][T16560] device veth3 entered promiscuous mode [ 296.738319][T16560] device gretap1 entered promiscuous mode [ 296.744675][T16560] device ip6gre1 entered promiscuous mode [ 296.751437][T16560] device ip6tnl4 entered promiscuous mode [ 296.757493][T16560] device bridge0 entered promiscuous mode [ 296.763797][T16560] device ) entered promiscuous mode [ 296.769303][T16560] device ip6tnl5 entered promiscuous mode [ 296.775711][T16560] device erspan1 entered promiscuous mode [ 296.781804][T16560] device gre1 entered promiscuous mode [ 296.787446][T16560] device ip6tnl6 entered promiscuous mode [ 296.793634][T16560] device xfrm1 entered promiscuous mode [ 296.799516][ T303] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 296.836255][T16552] loop1: detected capacity change from 0 to 131072 [ 296.964944][T16552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 297.056241][ T303] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 297.072165][T16552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 297.244997][T16635] netlink: 'syz.0.7802': attribute type 13 has an invalid length. [ 297.814165][T16727] xt_TCPMSS: Only works on TCP SYN packets [ 297.820919][T16728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.859122][T16732] device bridge_slave_0 left promiscuous mode [ 297.871839][T16732] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.889396][T16732] device bridge_slave_1 left promiscuous mode [ 297.895996][T16732] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.992682][T16755] netlink: 'syz.2.7861': attribute type 8 has an invalid length. [ 298.009111][T16756] netlink: 'syz.0.7859': attribute type 5 has an invalid length. [ 298.027207][T16756] netlink: 'syz.0.7859': attribute type 11 has an invalid length. [ 298.037840][T16764] ipt_REJECT: ECHOREPLY no longer supported. [ 298.185518][T16792] xt_hashlimit: max too large, truncated to 1048576 [ 298.255629][T16806] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 298.271650][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 298.271665][ T30] audit: type=1326 audit(2000000291.915:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 298.356933][T16824] netlink: 'syz.1.7895': attribute type 13 has an invalid length. [ 298.376048][ T30] audit: type=1326 audit(2000000291.946:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 298.400586][T16833] xt_TPROXY: Can be used only with -p tcp or -p udp [ 298.482698][ T30] audit: type=1326 audit(2000000291.957:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 298.550537][ T30] audit: type=1326 audit(2000000291.957:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 298.575881][ T30] audit: type=1326 audit(2000000291.957:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 298.600569][ T30] audit: type=1326 audit(2000000291.957:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 298.712829][ T30] audit: type=1326 audit(2000000291.957:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 298.772121][T16885] loop2: detected capacity change from 0 to 4096 [ 298.809185][ T30] audit: type=1326 audit(2000000291.957:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 298.839172][T16885] EXT4-fs (loop2): Test dummy encryption mode enabled [ 298.851985][T16885] EXT4-fs (loop2): can't mount with commit=6, fs mounted w/o journal [ 298.928397][ T30] audit: type=1326 audit(2000000291.957:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.3.7890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9ee39ed819 code=0x7ffc0000 [ 299.160139][ T30] audit: type=1400 audit(2000000292.838:9776): avc: denied { write } for pid=16965 comm="syz.3.7966" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 299.356676][T17002] loop0: detected capacity change from 0 to 4096 [ 299.448218][T17002] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 299.466528][T17002] EXT4-fs (loop0): Test dummy encryption mode enabled [ 299.504027][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 299.530742][T17002] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003] [ 299.551219][T17002] System zones: 0-5 [ 299.601172][T17002] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,usrquota,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 299.916303][T17100] device bridge_slave_1 left promiscuous mode [ 299.951195][T17100] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.977743][T17100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 300.189440][T17144] __nla_validate_parse: 100 callbacks suppressed [ 300.189460][T17144] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8052'. [ 300.227972][T17144] tc_dump_action: action bad kind [ 300.260237][T17156] xt_TCPMSS: Only works on TCP SYN packets [ 300.291759][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8060'. [ 300.361001][T17173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.402191][T17177] device ipip0 entered promiscuous mode [ 300.695574][T17231] loop2: detected capacity change from 0 to 4096 [ 300.701896][T17238] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 300.766070][T17231] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 300.809332][T17231] EXT4-fs (loop2): Test dummy encryption mode enabled [ 300.837078][T17231] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003] [ 300.845533][T17231] System zones: 0-5 [ 300.856052][T17231] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,usrquota,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 300.969901][T17266] device gre2 entered promiscuous mode [ 301.478634][T17386] tc_dump_action: action bad kind [ 301.486188][T17380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8169'. [ 301.609732][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8181'. [ 301.700591][T17424] device vti0 entered promiscuous mode [ 301.731914][T17426] device veth3 entered promiscuous mode [ 301.822230][T17444] validate_nla: 2 callbacks suppressed [ 301.822253][T17444] netlink: 'syz.4.8200': attribute type 3 has an invalid length. [ 302.115742][T17500] device batadv_slave_0 entered promiscuous mode [ 302.122297][T17500] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 302.180996][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8228'. [ 302.227411][T17512] netlink: 'syz.4.8233': attribute type 3 has an invalid length. [ 302.256973][T17514] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 302.390533][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 302.485329][T17561] netlink: 'syz.0.8256': attribute type 13 has an invalid length. [ 302.503722][T17561] device lo left promiscuous mode [ 302.510203][T17561] device tunl0 left promiscuous mode [ 302.532424][T17561] device gre0 left promiscuous mode [ 302.544098][T17561] gretap0: refused to change device tx_queue_len [ 302.550767][T17561] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.566843][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8257'. [ 302.581967][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8263'. [ 302.657448][T17589] xt_l2tp: unknown flags: 10 [ 302.745783][T17605] netlink: 45 bytes leftover after parsing attributes in process `syz.2.8279'. [ 303.049561][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8306'. [ 303.405695][T17734] xt_SECMARK: invalid mode: 2 [ 303.454890][T17745] netlink: 'syz.0.8348': attribute type 7 has an invalid length. [ 303.632127][T17773] loop1: detected capacity change from 0 to 4096 [ 303.697330][T17773] EXT4-fs (loop1): Test dummy encryption mode enabled [ 303.744274][T17773] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 303.785179][T17773] System zones: 0-5 [ 303.815485][T17773] ================================================================== [ 303.823599][T17773] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e50 [ 303.830748][T17773] Read of size 8 at addr ffff88812969d3d8 by task syz.1.8361/17773 [ 303.838851][T17773] [ 303.841206][T17773] CPU: 1 PID: 17773 Comm: syz.1.8361 Tainted: G W syzkaller #0 [ 303.850171][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.860355][T17773] Call Trace: [ 303.863647][T17773] [ 303.866597][T17773] __dump_stack+0x21/0x30 [ 303.870971][T17773] dump_stack_lvl+0x110/0x170 [ 303.875679][T17773] ? show_regs_print_info+0x20/0x20 [ 303.880909][T17773] ? load_image+0x3e0/0x3e0 [ 303.885446][T17773] ? _raw_spin_lock+0x94/0xf0 [ 303.890155][T17773] print_address_description+0x7f/0x2c0 [ 303.895737][T17773] ? __ext4_iget+0x2bb/0x3e50 [ 303.900440][T17773] kasan_report+0xf1/0x140 [ 303.904971][T17773] ? __ext4_iget+0x2bb/0x3e50 [ 303.909670][T17773] __asan_report_load8_noabort+0x14/0x20 [ 303.915305][T17773] __ext4_iget+0x2bb/0x3e50 [ 303.919801][T17773] ? ext4_init_orphan_info+0x162/0x11e0 [ 303.925340][T17773] ? __kasan_check_write+0x14/0x20 [ 303.930458][T17773] ? _raw_write_trylock+0x150/0x150 [ 303.935669][T17773] ? __proc_create+0x570/0x8e0 [ 303.940756][T17773] ? ext4_get_projid+0x140/0x140 [ 303.945722][T17773] ? _raw_write_unlock+0x2b/0x60 [ 303.950750][T17773] ? ext4_orphan_file_block_trigger+0x460/0x460 [ 303.956979][T17773] ext4_enable_quotas+0x33c/0x6d0 [ 303.962086][T17773] ext4_fill_super+0x82fa/0x8bd0 [ 303.967022][T17773] ? ext4_mount+0x40/0x40 [ 303.971355][T17773] ? set_blocksize+0x1eb/0x370 [ 303.976112][T17773] ? sb_set_blocksize+0xaa/0xf0 [ 303.981139][T17773] ? ext4_mount+0x40/0x40 [ 303.985460][T17773] mount_bdev+0x2ae/0x3e0 [ 303.990550][T17773] ? ext4_mount+0x40/0x40 [ 303.994993][T17773] ext4_mount+0x34/0x40 [ 303.999233][T17773] legacy_get_tree+0xed/0x190 [ 304.003909][T17773] ? ext4_errno_to_code+0x160/0x160 [ 304.009097][T17773] vfs_get_tree+0x89/0x260 [ 304.013500][T17773] do_new_mount+0x25a/0xa20 [ 304.017991][T17773] path_mount+0x659/0xff0 [ 304.022311][T17773] ? user_path_at_empty+0x161/0x1c0 [ 304.027528][T17773] __se_sys_mount+0x320/0x390 [ 304.032203][T17773] ? __x64_sys_mount+0xd0/0xd0 [ 304.036964][T17773] __x64_sys_mount+0xbf/0xd0 [ 304.041598][T17773] x64_sys_call+0x6bf/0x9a0 [ 304.046219][T17773] do_syscall_64+0x4c/0xa0 [ 304.050639][T17773] ? clear_bhb_loop+0x50/0xa0 [ 304.055322][T17773] ? clear_bhb_loop+0x50/0xa0 [ 304.059995][T17773] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.065893][T17773] RIP: 0033:0x7fe8530e2a8a [ 304.070509][T17773] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.090222][T17773] RSP: 002b:00007fe851b3be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.098691][T17773] RAX: ffffffffffffffda RBX: 00007fe851b3bee0 RCX: 00007fe8530e2a8a [ 304.106667][T17773] RDX: 0000200000000100 RSI: 0000200000000280 RDI: 00007fe851b3bea0 [ 304.114638][T17773] RBP: 0000200000000100 R08: 00007fe851b3bee0 R09: 0000000002800000 [ 304.122794][T17773] R10: 0000000002800000 R11: 0000000000000246 R12: 0000200000000280 [ 304.130885][T17773] R13: 00007fe851b3bea0 R14: 0000000000000bd0 R15: 0000200000000140 [ 304.138868][T17773] [ 304.141974][T17773] [ 304.144394][T17773] Allocated by task 12300: [ 304.148809][T17773] __kasan_slab_alloc+0xbd/0xf0 [ 304.153776][T17773] slab_post_alloc_hook+0x4f/0x2b0 [ 304.159133][T17773] kmem_cache_alloc+0xf7/0x260 [ 304.164325][T17773] f2fs_alloc_inode+0x26/0x330 [ 304.169098][T17773] iget_locked+0x16c/0x7e0 [ 304.173525][T17773] f2fs_iget+0x55/0x5060 [ 304.177765][T17773] f2fs_fill_super+0x48c9/0x6dc0 [ 304.182790][T17773] mount_bdev+0x2ae/0x3e0 [ 304.187246][T17773] f2fs_mount+0x34/0x40 [ 304.191732][T17773] legacy_get_tree+0xed/0x190 [ 304.196409][T17773] vfs_get_tree+0x89/0x260 [ 304.200980][T17773] do_new_mount+0x25a/0xa20 [ 304.205511][T17773] path_mount+0x659/0xff0 [ 304.210027][T17773] __se_sys_mount+0x320/0x390 [ 304.215061][T17773] __x64_sys_mount+0xbf/0xd0 [ 304.219654][T17773] x64_sys_call+0x6bf/0x9a0 [ 304.224152][T17773] do_syscall_64+0x4c/0xa0 [ 304.228826][T17773] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.234892][T17773] [ 304.237313][T17773] Last potentially related work creation: [ 304.243286][T17773] kasan_save_stack+0x3a/0x60 [ 304.248861][T17773] __kasan_record_aux_stack+0xd2/0x100 [ 304.254604][T17773] kasan_record_aux_stack_noalloc+0xb/0x10 [ 304.260575][T17773] call_rcu+0x10b/0xf80 [ 304.264727][T17773] evict+0x834/0x8d0 [ 304.268624][T17773] iput+0x635/0x7c0 [ 304.272436][T17773] f2fs_put_super+0x661/0xc10 [ 304.277112][T17773] generic_shutdown_super+0x151/0x330 [ 304.282487][T17773] kill_block_super+0x7f/0xf0 [ 304.287246][T17773] kill_f2fs_super+0x303/0x3b0 [ 304.292188][T17773] deactivate_locked_super+0xa0/0x100 [ 304.297575][T17773] deactivate_super+0xaf/0xe0 [ 304.302271][T17773] cleanup_mnt+0x45b/0x510 [ 304.306695][T17773] __cleanup_mnt+0x19/0x20 [ 304.311111][T17773] task_work_run+0x127/0x190 [ 304.315795][T17773] exit_to_user_mode_loop+0xd0/0xe0 [ 304.321168][T17773] exit_to_user_mode_prepare+0x87/0xd0 [ 304.326807][T17773] syscall_exit_to_user_mode+0x1a/0x30 [ 304.332356][T17773] do_syscall_64+0x58/0xa0 [ 304.336945][T17773] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.342841][T17773] [ 304.345285][T17773] Second to last potentially related work creation: [ 304.352057][T17773] kasan_save_stack+0x3a/0x60 [ 304.356738][T17773] __kasan_record_aux_stack+0xd2/0x100 [ 304.362194][T17773] kasan_record_aux_stack_noalloc+0xb/0x10 [ 304.367997][T17773] call_rcu+0x10b/0xf80 [ 304.372272][T17773] evict+0x834/0x8d0 [ 304.376199][T17773] evict_inodes+0x5e6/0x660 [ 304.380777][T17773] generic_shutdown_super+0x96/0x330 [ 304.386079][T17773] kill_block_super+0x7f/0xf0 [ 304.390765][T17773] kill_f2fs_super+0x303/0x3b0 [ 304.395723][T17773] deactivate_locked_super+0xa0/0x100 [ 304.401183][T17773] deactivate_super+0xaf/0xe0 [ 304.406248][T17773] cleanup_mnt+0x45b/0x510 [ 304.410685][T17773] __cleanup_mnt+0x19/0x20 [ 304.415113][T17773] task_work_run+0x127/0x190 [ 304.419717][T17773] exit_to_user_mode_loop+0xd0/0xe0 [ 304.425030][T17773] exit_to_user_mode_prepare+0x87/0xd0 [ 304.430751][T17773] syscall_exit_to_user_mode+0x1a/0x30 [ 304.436232][T17773] do_syscall_64+0x58/0xa0 [ 304.440647][T17773] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.446539][T17773] [ 304.448854][T17773] The buggy address belongs to the object at ffff88812969ced0 [ 304.448854][T17773] which belongs to the cache f2fs_inode_cache of size 1424 [ 304.463427][T17773] The buggy address is located 1288 bytes inside of [ 304.463427][T17773] 1424-byte region [ffff88812969ced0, ffff88812969d460) [ 304.476957][T17773] The buggy address belongs to the page: [ 304.482597][T17773] page:ffffea0004a5a600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812969b080 pfn:0x129698 [ 304.494227][T17773] head:ffffea0004a5a600 order:3 compound_mapcount:0 compound_pincount:0 [ 304.502632][T17773] flags: 0x4000000000010200(slab|head|zone=1) [ 304.508701][T17773] raw: 4000000000010200 0000000000000000 dead000000000122 ffff8881081f5200 [ 304.517282][T17773] raw: ffff88812969b080 000000008015000c 00000001ffffffff 0000000000000000 [ 304.525874][T17773] page dumped because: kasan: bad access detected [ 304.532282][T17773] page_owner tracks the page as allocated [ 304.537988][T17773] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 860, ts 39440591017, free_ts 0 [ 304.558476][T17773] post_alloc_hook+0x192/0x1b0 [ 304.563252][T17773] prep_new_page+0x1c/0x110 [ 304.567882][T17773] get_page_from_freelist+0x2d3a/0x2dc0 [ 304.573617][T17773] __alloc_pages+0x1a2/0x460 [ 304.578208][T17773] new_slab+0xa1/0x4d0 [ 304.582278][T17773] ___slab_alloc+0x381/0x810 [ 304.586990][T17773] __slab_alloc+0x49/0x90 [ 304.591321][T17773] kmem_cache_alloc+0x138/0x260 [ 304.596170][T17773] f2fs_alloc_inode+0x26/0x330 [ 304.600932][T17773] iget_locked+0x16c/0x7e0 [ 304.605360][T17773] f2fs_iget+0x55/0x5060 [ 304.609597][T17773] f2fs_fill_super+0x3d0e/0x6dc0 [ 304.614531][T17773] mount_bdev+0x2ae/0x3e0 [ 304.618867][T17773] f2fs_mount+0x34/0x40 [ 304.623023][T17773] legacy_get_tree+0xed/0x190 [ 304.627699][T17773] vfs_get_tree+0x89/0x260 [ 304.632110][T17773] page_owner free stack trace missing [ 304.637468][T17773] [ 304.639872][T17773] Memory state around the buggy address: [ 304.645495][T17773] ffff88812969d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 304.653552][T17773] ffff88812969d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 304.661610][T17773] >ffff88812969d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 304.669661][T17773] ^ [ 304.676587][T17773] ffff88812969d400: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 304.684648][T17773] ffff88812969d480: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00 [ 304.692718][T17773] ================================================================== [ 304.700857][T17773] Disabling lock debugging due to kernel taint [ 304.708812][T17773] EXT4-fs error (device loop1): ext4_quota_enable:6433: inode #3: comm syz.1.8361: unexpected EA_INODE flag [ 304.713582][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 304.713596][ T30] audit: type=1400 audit(2000000298.675:9798): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 304.720906][T17773] EXT4-fs error (device loop1): ext4_quota_enable:6436: comm syz.1.8361: Bad quota inode: 3, type: 0 [ 304.728949][ T30] audit: type=1400 audit(2000000298.696:9799): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.749550][T17773] EXT4-fs warning (device loop1): ext4_enable_quotas:6477: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 304.760715][ T30] audit: type=1400 audit(2000000298.696:9800): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.785343][T17773] EXT4-fs (loop1): mount failed [ 304.797085][ T30] audit: type=1400 audit(2000000298.696:9801): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.844066][ T30] audit: type=1400 audit(2000000298.696:9802): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.865179][ T30] audit: type=1400 audit(2000000298.696:9803): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 304.888175][ T30] audit: type=1400 audit(2000000298.696:9804): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 307.267863][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!