last executing test programs: 419.434034ms ago: executing program 4 (id=14309): setresuid(0xffffffffffffffff, 0xee01, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 399.544504ms ago: executing program 4 (id=14322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32=r0, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES64], 0x84}}, 0x0) 373.880235ms ago: executing program 4 (id=14316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 352.164975ms ago: executing program 4 (id=14321): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x2000001, 0x0, 0xb, 0xd624, 0x0, 0x6}}) 336.739115ms ago: executing program 4 (id=14324): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) 268.617386ms ago: executing program 3 (id=14335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f00000001c0)) 246.789656ms ago: executing program 3 (id=14339): io_setup(0xffff, &(0x7f0000000080)) io_setup(0x8, &(0x7f00000002c0)) 133.466278ms ago: executing program 1 (id=14347): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, 0xfffffffffffffffc) 133.311678ms ago: executing program 4 (id=14349): setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) setitimer(0x1, 0x0, &(0x7f0000000040)) 133.253098ms ago: executing program 2 (id=14350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f00000001c0)) 133.138918ms ago: executing program 1 (id=14351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a00010100000000000000000200000000000000080001"], 0x20}}, 0x0) 126.730408ms ago: executing program 0 (id=14352): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076009f03000000000000000008000000ffffffff0c000d80"], 0x24}], 0x1, 0x0, 0x0, 0x10}, 0x0) 126.484128ms ago: executing program 2 (id=14353): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8990, &(0x7f0000001040)={'gre0\x00', 0x0}) 115.588499ms ago: executing program 0 (id=14354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 109.553408ms ago: executing program 1 (id=14355): setresuid(0xffffffffffffffff, 0xee01, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 94.416049ms ago: executing program 0 (id=14356): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x60000021) 94.326829ms ago: executing program 2 (id=14357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f00000006c0)=0xffffffff, 0x4) 93.997229ms ago: executing program 3 (id=14358): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_link_settings={0x37, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 78.368569ms ago: executing program 1 (id=14359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x15}, {0x0, 0x8}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 78.011419ms ago: executing program 2 (id=14360): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000040)) 69.06285ms ago: executing program 0 (id=14361): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) read$usbmon(r0, 0x0, 0x0) 55.78609ms ago: executing program 3 (id=14362): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) 46.68018ms ago: executing program 0 (id=14363): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3}, [], [0x0, 0xffffff00], '\x00', 'wg1\x00', {}, {0xff}, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) 46.40225ms ago: executing program 1 (id=14364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x19}]}, 0x38}}, 0x0) 30.04654ms ago: executing program 3 (id=14365): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'veth1_to_team\x00', 'vcan0\x00'}, 0xee02, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x70, 0xd8, 0x94}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 29.5882ms ago: executing program 2 (id=14375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x15}, {0x0, 0x8}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 21.40353ms ago: executing program 0 (id=14366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a00010100000000000000000200000000000000080001"], 0x20}}, 0x0) 19.61342ms ago: executing program 1 (id=14367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 405.371µs ago: executing program 3 (id=14368): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8990, &(0x7f0000001040)={'gre0\x00', 0x0}) 0s ago: executing program 2 (id=14369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): red promiscuous mode [ 206.447058][T16505] device bridge5 entered promiscuous mode [ 206.453037][T16505] device erspan2 entered promiscuous mode [ 206.459274][T16505] device ip6tnl3 entered promiscuous mode [ 206.465242][T16505] device sit2 entered promiscuous mode [ 206.471888][T16505] device bridge6 entered promiscuous mode [ 206.477866][T16505] device bridge7 entered promiscuous mode [ 206.484436][T16505] device ip6tnl4 entered promiscuous mode [ 206.490561][T16505] device veth4 entered promiscuous mode [ 206.496392][T16505] device veth5 entered promiscuous mode [ 206.505193][ T339] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 206.512900][ T339] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 206.540506][ T39] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 206.621835][T16553] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 206.637669][T16558] device veth1_macvtap left promiscuous mode [ 206.670529][T16558] device macsec0 entered promiscuous mode [ 206.692578][T16560] __nla_validate_parse: 7 callbacks suppressed [ 206.692589][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7893'. [ 206.766782][ T39] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 206.831486][T16609] netlink: 'syz.2.7916': attribute type 3 has an invalid length. [ 206.863752][ T39] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 206.874521][T16621] netlink: 'syz.4.7921': attribute type 6 has an invalid length. [ 206.905795][T16627] netlink: 'syz.0.7924': attribute type 5 has an invalid length. [ 206.964397][T16647] device bridge5 entered promiscuous mode [ 207.019414][T16651] device veth1_macvtap entered promiscuous mode [ 207.056776][T16651] device macsec0 left promiscuous mode [ 207.080914][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7944'. [ 207.142883][T16694] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 207.281854][T16730] netlink: 'syz.3.7977': attribute type 6 has an invalid length. [ 207.429682][T16773] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 207.580469][T16823] xt_socket: unknown flags 0x40 [ 207.681617][T16861] xt_socket: unknown flags 0x40 [ 207.724661][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8049'. [ 207.752399][T16885] xt_socket: unknown flags 0x40 [ 207.924619][T16945] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8082'. [ 207.939195][T16945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.009483][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8090'. [ 208.042196][T16973] device lo left promiscuous mode [ 208.047769][T16973] device tunl0 left promiscuous mode [ 208.053683][T16973] device gre0 left promiscuous mode [ 208.059277][T16973] device gretap0 left promiscuous mode [ 208.065840][T16973] device erspan0 left promiscuous mode [ 208.072029][T16973] device ip_vti0 left promiscuous mode [ 208.077983][T16973] device ip6_vti0 left promiscuous mode [ 208.084051][T16973] device sit0 left promiscuous mode [ 208.089695][T16973] device ip6tnl0 left promiscuous mode [ 208.092391][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 208.095937][T16973] device ip6gre0 left promiscuous mode [ 208.108071][T16973] device syz_tun left promiscuous mode [ 208.114329][T16973] device ip6gretap0 left promiscuous mode [ 208.120482][T16973] device bridge0 left promiscuous mode [ 208.126528][T16973] device vcan0 left promiscuous mode [ 208.132245][T16973] device dummy0 left promiscuous mode [ 208.153950][T16973] device veth0 left promiscuous mode [ 208.159878][T16973] device veth1 left promiscuous mode [ 208.165626][T16973] device wg0 left promiscuous mode [ 208.171293][T16973] device wg1 left promiscuous mode [ 208.177207][T16973] device wg2 left promiscuous mode [ 208.182861][T16973] device veth0_to_bridge left promiscuous mode [ 208.189706][T16973] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.197187][T16973] device veth1_to_bridge left promiscuous mode [ 208.204448][T16973] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.212015][T16973] device veth0_to_bond left promiscuous mode [ 208.218431][T16973] device bond_slave_0 left promiscuous mode [ 208.224893][T16973] device veth1_to_bond left promiscuous mode [ 208.231428][T16973] device bond_slave_1 left promiscuous mode [ 208.237724][T16973] device veth0_to_team left promiscuous mode [ 208.244277][T16973] device team_slave_0 left promiscuous mode [ 208.250640][T16973] device veth1_to_team left promiscuous mode [ 208.257163][T16973] device team_slave_1 left promiscuous mode [ 208.263723][T16973] device veth0_to_batadv left promiscuous mode [ 208.270330][T16973] device batadv_slave_0 left promiscuous mode [ 208.276944][T16973] device veth1_to_batadv left promiscuous mode [ 208.283551][T16973] device batadv_slave_1 left promiscuous mode [ 208.290202][T16973] device xfrm0 left promiscuous mode [ 208.296020][T16973] device veth0_to_hsr left promiscuous mode [ 208.302342][T16973] device hsr_slave_0 left promiscuous mode [ 208.308725][T16973] device veth1_to_hsr left promiscuous mode [ 208.315025][T16973] device hsr_slave_1 left promiscuous mode [ 208.321398][T16973] device veth1_virt_wifi left promiscuous mode [ 208.328040][T16973] device veth0_virt_wifi left promiscuous mode [ 208.334651][T16973] device veth1_vlan left promiscuous mode [ 208.341620][T16973] device vlan0 left promiscuous mode [ 208.347951][T16973] device vlan1 left promiscuous mode [ 208.354249][T16973] device veth0_macvtap left promiscuous mode [ 208.360761][T16973] device macsec0 left promiscuous mode [ 208.366694][T16973] device sit1 left promiscuous mode [ 208.372487][T16973] device syztnl2 left promiscuous mode [ 208.378342][T16973] device xfrm1 left promiscuous mode [ 208.384201][T16973] device syztnl1 left promiscuous mode [ 208.390060][T16973] device erspan1 left promiscuous mode [ 208.396192][T16973] device ip6tnl1 left promiscuous mode [ 208.402102][T16973] device bridge1 left promiscuous mode [ 208.408160][T16973] device ip6erspan0 left promiscuous mode [ 208.414208][T16973] device bridge2 left promiscuous mode [ 208.419927][T16973] device ip6tnl2 left promiscuous mode [ 208.425764][T16973] device ip6gretap1 left promiscuous mode [ 208.431737][T16973] device gre1 left promiscuous mode [ 208.437509][T16973] device bridge3 left promiscuous mode [ 208.443223][T16973] device bridge4 left promiscuous mode [ 208.448915][T16973] device bridge5 left promiscuous mode [ 208.454771][T16973] device erspan2 left promiscuous mode [ 208.460772][T16973] device ip6tnl3 left promiscuous mode [ 208.466811][T16973] device sit2 left promiscuous mode [ 208.472476][T16973] device bridge6 left promiscuous mode [ 208.478379][T16973] device bridge7 left promiscuous mode [ 208.484432][T16973] device ip6tnl4 left promiscuous mode [ 208.490475][T16973] device veth4 left promiscuous mode [ 208.496160][T16973] device veth5 left promiscuous mode [ 208.502005][T16973] device bridge8 left promiscuous mode [ 208.776643][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 208.783828][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 208.818604][T17063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.884063][ T593] ip6_tunnel:  xmit: Local address not yet configured! [ 209.015188][T17112] device lo left promiscuous mode [ 209.020680][T17112] device tunl0 left promiscuous mode [ 209.041514][T17112] device gre0 left promiscuous mode [ 209.055370][T17112] device gretap0 left promiscuous mode [ 209.065680][T17112] device erspan0 left promiscuous mode [ 209.086705][T17112] device ip_vti0 left promiscuous mode [ 209.106781][T17112] device ip6_vti0 left promiscuous mode [ 209.119702][T17112] device sit0 left promiscuous mode [ 209.129895][T17112] device ip6tnl0 left promiscuous mode [ 209.143426][T17112] device ip6gre0 left promiscuous mode [ 209.154751][T17112] device syz_tun left promiscuous mode [ 209.166099][T17112] device ip6gretap0 left promiscuous mode [ 209.182894][T17112] device bridge0 left promiscuous mode [ 209.188613][T17112] device vcan0 left promiscuous mode [ 209.204589][T17112] device dummy0 left promiscuous mode [ 209.210183][T17112] device veth0 left promiscuous mode [ 209.225948][T17112] device veth1 left promiscuous mode [ 209.231497][T17112] device wg0 left promiscuous mode [ 209.247391][T17112] device wg1 left promiscuous mode [ 209.252716][T17112] device wg2 left promiscuous mode [ 209.268871][T17112] device veth0_to_bridge left promiscuous mode [ 209.283715][T17112] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.311460][T17112] device veth1_to_bridge left promiscuous mode [ 209.317996][T17112] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.336908][T17112] device veth0_to_bond left promiscuous mode [ 209.347733][T17112] device bond_slave_0 left promiscuous mode [ 209.365009][T17112] device veth1_to_bond left promiscuous mode [ 209.371221][T17112] device bond_slave_1 left promiscuous mode [ 209.385457][T17112] device veth0_to_team left promiscuous mode [ 209.397120][T17112] device team_slave_0 left promiscuous mode [ 209.410066][T17112] device veth1_to_team left promiscuous mode [ 209.421948][T17112] device team_slave_1 left promiscuous mode [ 209.434860][T17112] device veth0_to_batadv left promiscuous mode [ 209.448153][T17112] device batadv_slave_0 left promiscuous mode [ 209.461700][T17112] device veth1_to_batadv left promiscuous mode [ 209.474928][T17112] device batadv_slave_1 left promiscuous mode [ 209.486932][T17112] device xfrm0 left promiscuous mode [ 209.498063][T17112] device veth0_to_hsr left promiscuous mode [ 209.511131][T17112] device hsr_slave_0 left promiscuous mode [ 209.524018][T17112] device veth1_to_hsr left promiscuous mode [ 209.537028][T17112] device hsr_slave_1 left promiscuous mode [ 209.548966][T17112] device veth1_virt_wifi left promiscuous mode [ 209.562148][T17112] device veth0_virt_wifi left promiscuous mode [ 209.575958][T17112] device veth1_vlan left promiscuous mode [ 209.589613][T17112] device vlan0 left promiscuous mode [ 209.600842][T17112] device vlan1 left promiscuous mode [ 209.612224][T17112] device veth0_macvtap left promiscuous mode [ 209.619184][T17112] device macsec0 left promiscuous mode [ 209.625014][T17112] device gre1 left promiscuous mode [ 209.630417][T17112] device ip6tnl1 left promiscuous mode [ 209.636874][T17112] device bridge1 left promiscuous mode [ 209.642823][T17112] device ip6tnl2 left promiscuous mode [ 209.648519][T17112] device ip6gretap1 left promiscuous mode [ 209.654509][T17112] device ip6gretap2 left promiscuous mode [ 209.660429][T17112] device erspan1 left promiscuous mode [ 209.666167][T17112] device ipip0 left promiscuous mode [ 209.671665][T17112] device bridge2 left promiscuous mode [ 209.677451][T17112] device erspan2 left promiscuous mode [ 209.683128][T17112] device bridge3 left promiscuous mode [ 209.688879][T17112] device  left promiscuous mode [ 209.694009][T17112] device sit1 left promiscuous mode [ 209.699502][T17112] device xfrm1 left promiscuous mode [ 209.705019][T17112] device  left promiscuous mode [ 209.710242][T17112] device bridge4 left promiscuous mode [ 209.715902][T17112] device veth2 left promiscuous mode [ 209.721822][T17112] device veth3 left promiscuous mode [ 209.764387][T17156] device vlan0 entered promiscuous mode [ 209.776344][T17158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8189'. [ 210.384118][T17318] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8264'. [ 210.397563][ T28] kauditd_printk_skb: 547 callbacks suppressed [ 210.397577][ T28] audit: type=1400 audit(1752642357.889:30868): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.468448][ T28] audit: type=1400 audit(1752642357.945:30869): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.514498][ T28] audit: type=1400 audit(1752642357.954:30870): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.588075][ T28] audit: type=1400 audit(1752642358.067:30871): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.636741][ T28] audit: type=1400 audit(1752642358.076:30872): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.689185][ T28] audit: type=1400 audit(1752642358.113:30873): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.742884][ T28] audit: type=1400 audit(1752642358.141:30874): avc: denied { read write } for pid=17315 comm="syz.0.8263" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.797211][ T28] audit: type=1400 audit(1752642358.151:30875): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.848035][ T28] audit: type=1400 audit(1752642358.188:30876): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.883957][ T28] audit: type=1400 audit(1752642358.291:30877): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.922211][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8284'. [ 211.047602][T17387] xt_policy: neither incoming nor outgoing policy selected [ 211.059802][T17391] netlink: 'syz.3.8304': attribute type 2 has an invalid length. [ 211.066572][T17393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.092989][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8307'. [ 211.112965][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8320'. [ 211.165153][T17422] xt_policy: neither incoming nor outgoing policy selected [ 211.201963][T17433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.277543][T17459] xt_policy: neither incoming nor outgoing policy selected [ 211.340758][T17482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.443694][T17515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.478369][T17531] netlink: 'syz.4.8374': attribute type 2 has an invalid length. [ 211.559451][T17554] netlink: 'syz.2.8385': attribute type 30 has an invalid length. [ 211.688667][T17587] xt_hashlimit: size too large, truncated to 1048576 [ 211.832165][T17633] netlink: 'syz.4.8433': attribute type 30 has an invalid length. [ 211.922204][T17661] netlink: 'syz.0.8437': attribute type 30 has an invalid length. [ 212.069685][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.084674][T17684] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 212.102417][T17691] xt_hashlimit: size too large, truncated to 1048576 [ 212.119457][T17694] __nla_validate_parse: 2 callbacks suppressed [ 212.119474][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8449'. [ 212.165514][T17694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8449'. [ 212.379305][T17772] netlink: 'syz.4.8491': attribute type 2 has an invalid length. [ 212.435370][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8499'. [ 212.526695][T17808] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.544299][T17808] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 212.586521][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8515'. [ 212.606994][T17822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8515'. [ 212.698888][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8535'. [ 212.708957][T17858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8535'. [ 212.719634][T17856] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.732407][T17856] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 212.829062][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8557'. [ 212.978181][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8568'. [ 213.054753][T17949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.061990][T17949] IPv6: NLM_F_CREATE should be set when creating new route [ 213.069210][T17949] IPv6: NLM_F_CREATE should be set when creating new route [ 213.307768][T18025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.315013][T18025] IPv6: NLM_F_CREATE should be set when creating new route [ 213.322235][T18025] IPv6: NLM_F_CREATE should be set when creating new route [ 213.456770][T18062] syz.4.8638 (18062): /proc/18062/oom_adj is deprecated, please use /proc/18062/oom_score_adj instead. [ 213.568372][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8650'. [ 214.059531][T18187] loop3: detected capacity change from 0 to 256 [ 214.100090][T18149] loop2: detected capacity change from 0 to 40427 [ 214.145238][T18149] F2FS-fs (loop2): fault_injection options not supported [ 214.159995][T18202] netlink: 'syz.1.8707': attribute type 3 has an invalid length. [ 214.179417][T18149] F2FS-fs (loop2): invalid crc value [ 214.197568][T18149] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 214.271691][T18149] F2FS-fs (loop2): Start checkpoint disabled! [ 214.282334][T18223] tc_dump_action: action bad kind [ 214.296517][T18149] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 214.399638][T18252] loop1: detected capacity change from 0 to 256 [ 214.437012][T18257] device sit0 entered promiscuous mode [ 214.471843][T18264] tc_dump_action: action bad kind [ 214.553101][T18279] loop1: detected capacity change from 0 to 512 [ 214.573058][T18282] netlink: 'syz.3.8744': attribute type 3 has an invalid length. [ 214.581135][T18279] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.603454][T18279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.666679][T18279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 214.683065][T18279] ext4 filesystem being mounted at /1845/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.697258][T18306] loop2: detected capacity change from 0 to 256 [ 214.746069][ T285] EXT4-fs (loop1): unmounting filesystem. [ 214.777497][T18321] device sit0 entered promiscuous mode [ 214.864210][T18340] loop3: detected capacity change from 0 to 512 [ 214.901968][T18340] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.926024][T18340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.993840][T18340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.028552][T18340] ext4 filesystem being mounted at /1661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.058958][T18380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.066202][T18380] IPv6: NLM_F_CREATE should be set when creating new route [ 215.073423][T18380] IPv6: NLM_F_CREATE should be set when creating new route [ 215.180383][ T286] EXT4-fs (loop3): unmounting filesystem. [ 215.484375][T18478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.491613][T18478] IPv6: NLM_F_CREATE should be set when creating new route [ 215.498832][T18478] IPv6: NLM_F_CREATE should be set when creating new route [ 215.569743][T18497] device xfrm2 entered promiscuous mode [ 215.856079][T18571] device xfrm2 entered promiscuous mode [ 216.007125][T18611] loop4: detected capacity change from 0 to 128 [ 216.190338][ T28] kauditd_printk_skb: 515 callbacks suppressed [ 216.190353][ T28] audit: type=1400 audit(2000000003.722:31393): avc: denied { create } for pid=18660 comm="syz.3.8928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.246863][T18672] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 216.317766][ T28] audit: type=1400 audit(2000000003.722:31394): avc: denied { getopt } for pid=18660 comm="syz.3.8928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.404721][T18706] loop2: detected capacity change from 0 to 512 [ 216.443411][T18706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.491619][T18706] ext4 filesystem being mounted at /1834/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.519172][ T28] audit: type=1400 audit(2000000004.025:31395): avc: denied { write } for pid=18705 comm="syz.2.8951" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.555978][T18706] Quota error (device loop2): do_check_range: Getting block 262146 out of range 1-5 [ 216.615736][T18706] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 216.655658][T18706] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.8951: Failed to acquire dquot type 0 [ 216.681973][ T28] audit: type=1400 audit(2000000004.174:31396): avc: denied { mac_admin } for pid=18758 comm="syz.4.8977" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.704760][T18759] SELinux: Context Ž is not valid (left unmapped). [ 216.711718][ T287] EXT4-fs (loop2): unmounting filesystem. [ 216.780941][ T28] audit: type=1400 audit(2000000004.230:31397): avc: denied { write } for pid=18763 comm="syz.1.8980" name="ipv6_route" dev="proc" ino=4026532497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 216.878995][T18708] loop3: detected capacity change from 0 to 40427 [ 216.908621][T18708] F2FS-fs (loop3): fault_injection options not supported [ 216.940446][T18800] netlink: 'syz.2.8998': attribute type 1 has an invalid length. [ 216.948476][T18708] F2FS-fs (loop3): invalid crc value [ 216.960237][ T28] audit: type=1400 audit(2000000004.436:31398): avc: denied { write } for pid=18804 comm="syz.1.9000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 216.987107][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 216.987123][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 216.988749][T18801] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 217.018062][T18708] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 217.089744][T18828] netlink: 'syz.4.9010': attribute type 2 has an invalid length. [ 217.124966][T18708] F2FS-fs (loop3): Start checkpoint disabled! [ 217.165467][T18708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 217.341080][T18878] netlink: 'syz.0.9034': attribute type 1 has an invalid length. [ 217.471270][ T28] audit: type=1400 audit(2000000004.923:31399): avc: denied { read } for pid=18901 comm="syz.2.9056" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.549703][ T28] audit: type=1400 audit(2000000004.923:31400): avc: denied { open } for pid=18901 comm="syz.2.9056" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.627620][T18938] loop4: detected capacity change from 0 to 512 [ 217.655784][T18938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 217.668786][T18948] __nla_validate_parse: 18 callbacks suppressed [ 217.668802][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9068'. [ 217.684429][T18946] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 217.692127][T18938] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.9061: Failed to acquire dquot type 0 [ 217.733791][T18958] loop2: detected capacity change from 0 to 128 [ 217.767906][T18958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 217.803897][ T287] EXT4-fs (loop2): unmounting filesystem. [ 217.812857][ T283] EXT4-fs (loop4): unmounting filesystem. [ 218.027731][T19020] device lo entered promiscuous mode [ 218.044674][T19025] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.073514][T19025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.080769][T19025] IPv6: NLM_F_CREATE should be set when creating new route [ 218.087987][T19025] IPv6: NLM_F_CREATE should be set when creating new route [ 218.128269][T19045] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 218.206031][T19065] device lo entered promiscuous mode [ 218.408002][T19113] loop3: detected capacity change from 0 to 128 [ 218.416099][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9147'. [ 218.439734][T19113] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.494221][ T286] EXT4-fs (loop3): unmounting filesystem. [ 218.516474][T19131] xt_ecn: cannot match TCP bits for non-tcp packets [ 218.560086][T19138] Driver unsupported XDP return value 0 on prog (id 465) dev N/A, expect packet loss! [ 218.588544][T19147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9167'. [ 218.757934][T19101] loop2: detected capacity change from 0 to 40427 [ 218.797633][T19101] F2FS-fs (loop2): fault_injection options not supported [ 218.815785][T19101] F2FS-fs (loop2): invalid crc value [ 218.857227][T19208] xt_policy: output policy not valid in PREROUTING and INPUT [ 218.866666][T19209] kernel profiling enabled (shift: 5) [ 218.877787][T19101] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 218.898690][T19213] xt_ecn: cannot match TCP bits for non-tcp packets [ 218.942867][T19221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9199'. [ 218.960988][T19101] F2FS-fs (loop2): Start checkpoint disabled! [ 218.989304][T19101] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 219.179029][T19269] netlink: 'syz.4.9235': attribute type 15 has an invalid length. [ 219.244221][T19285] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 219.315262][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9236'. [ 219.326485][T19303] netlink: 'syz.0.9239': attribute type 15 has an invalid length. [ 219.349410][T19305] xt_policy: output policy not valid in PREROUTING and INPUT [ 219.372182][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9253'. [ 219.481669][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9257'. [ 219.503180][T19336] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9257'. [ 219.575516][T19355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9275'. [ 219.581911][T19357] netlink: 'syz.0.9266': attribute type 49 has an invalid length. [ 219.594844][T19355] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9275'. [ 219.617024][T19357] netlink: 'syz.0.9266': attribute type 49 has an invalid length. [ 219.724670][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 220.005680][T19463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.146373][T19499] netlink: 'syz.1.9337': attribute type 1 has an invalid length. [ 220.262276][T19521] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 220.369198][T19543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.511962][T19571] loop4: detected capacity change from 0 to 512 [ 220.527899][T19575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.622344][T19571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.632910][T19571] ext4 filesystem being mounted at /1964/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.658577][T19598] netlink: 'syz.3.9385': attribute type 1 has an invalid length. [ 220.686612][ T283] EXT4-fs (loop4): unmounting filesystem. [ 221.285277][T19722] xt_TCPMSS: Only works on TCP SYN packets [ 221.594721][T19780] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 221.632567][T19791] loop3: detected capacity change from 0 to 16 [ 221.640369][T19789] xt_TCPMSS: Only works on TCP SYN packets [ 221.664426][T19794] loop1: detected capacity change from 0 to 512 [ 221.676884][T19791] erofs: (device loop3): mounted with root inode @ nid 36. [ 221.739345][T19794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.767975][T19814] xt_TCPMSS: Only works on TCP SYN packets [ 221.777352][T19794] ext4 filesystem being mounted at /2026/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.831481][T19824] loop4: detected capacity change from 0 to 512 [ 221.838980][ T285] EXT4-fs (loop1): unmounting filesystem. [ 221.864093][T19824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 221.873799][T19824] ext4 filesystem being mounted at /1990/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.889523][T19824] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.9494: corrupted xattr block 6 [ 221.901738][T19824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 221.918831][T19837] netlink: 'syz.3.9505': attribute type 5 has an invalid length. [ 221.926902][T19824] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.9494: corrupted xattr block 6 [ 221.958549][T19824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 221.979883][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 221.979896][ T28] audit: type=1400 audit(2000000001.880:31444): avc: denied { mounton } for pid=19822 comm="syz.4.9494" path="/1990/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.980002][T19824] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.9494: corrupted xattr block 6 [ 222.024075][ T28] audit: type=1400 audit(2000000001.917:31445): avc: denied { create } for pid=19852 comm="syz.3.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.029057][T19824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 222.053294][T19856] loop1: detected capacity change from 0 to 16 [ 222.058357][T19824] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.9494: corrupted xattr block 6 [ 222.086296][T19856] erofs: (device loop1): mounted with root inode @ nid 36. [ 222.090259][ T28] audit: type=1400 audit(2000000001.945:31446): avc: denied { getopt } for pid=19852 comm="syz.3.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.094305][T19862] xt_TCPMSS: Only works on TCP SYN packets [ 222.122400][T19860] loop2: detected capacity change from 0 to 1024 [ 222.122723][T19824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 222.156047][ T28] audit: type=1400 audit(2000000002.039:31447): avc: denied { write } for pid=19822 comm="syz.4.9494" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.188696][T19860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.196611][T19824] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.9494: corrupted xattr block 6 [ 222.232482][ T287] EXT4-fs (loop2): unmounting filesystem. [ 222.253191][ T28] audit: type=1400 audit(2000000002.095:31448): avc: denied { read } for pid=19859 comm="syz.2.9515" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 222.290492][T19889] xt_hashlimit: max too large, truncated to 1048576 [ 222.305941][T19824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 222.306335][T19886] usb usb4: usbfs: process 19886 (syz.1.9527) did not claim interface 0 before use [ 222.317072][T19824] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.9494: corrupted xattr block 6 [ 222.329592][T19889] xt_hashlimit: overflow, try lower: 0/0 [ 222.339873][ T28] audit: type=1400 audit(2000000002.198:31449): avc: denied { add_name } for pid=19822 comm="syz.4.9494" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.347743][T19893] loop2: detected capacity change from 0 to 256 [ 222.370159][T19824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 222.409336][ T28] audit: type=1400 audit(2000000002.254:31450): avc: denied { write } for pid=19894 comm="syz.0.9531" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 222.431478][T19893] FAT-fs (loop2): Directory bread(block 64) failed [ 222.438723][T19897] xt_l2tp: missing protocol rule (udp|l2tpip) [ 222.455826][T19893] FAT-fs (loop2): Directory bread(block 65) failed [ 222.462704][T19824] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #12: comm syz.4.9494: corrupted xattr block 6 [ 222.490077][T19893] FAT-fs (loop2): Directory bread(block 66) failed [ 222.496737][ T28] audit: type=1400 audit(2000000002.301:31451): avc: denied { create } for pid=19822 comm="syz.4.9494" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 222.509558][T19893] FAT-fs (loop2): Directory bread(block 67) failed [ 222.526297][T19824] incfs: Can't find or create .index dir in ./file0 [ 222.542020][T19907] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 222.543661][T19824] incfs: mount failed -117 [ 222.561926][ T28] audit: type=1400 audit(2000000002.366:31452): avc: denied { block_suspend } for pid=19902 comm="syz.3.9535" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.567926][T19893] FAT-fs (loop2): Directory bread(block 68) failed [ 222.622913][ T283] EXT4-fs (loop4): unmounting filesystem. [ 222.641866][T19893] FAT-fs (loop2): Directory bread(block 69) failed [ 222.666945][T19893] FAT-fs (loop2): Directory bread(block 70) failed [ 222.677684][T19893] FAT-fs (loop2): Directory bread(block 71) failed [ 222.684233][T19893] FAT-fs (loop2): Directory bread(block 72) failed [ 222.707470][T19927] xt_l2tp: missing protocol rule (udp|l2tpip) [ 222.725088][T19893] FAT-fs (loop2): Directory bread(block 73) failed [ 222.737913][T19935] usb usb4: usbfs: process 19935 (syz.3.9548) did not claim interface 0 before use [ 222.816919][T19945] usb usb4: usbfs: process 19945 (syz.0.9564) did not claim interface 0 before use [ 222.880106][T19959] xt_hashlimit: max too large, truncated to 1048576 [ 222.919834][T19959] xt_hashlimit: overflow, try lower: 0/0 [ 222.944690][T19972] xt_l2tp: missing protocol rule (udp|l2tpip) [ 222.950925][ T28] audit: type=1400 audit(2000000002.778:31453): avc: denied { read write } for pid=19973 comm="syz.3.9570" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.098864][T20006] cgroup: subsys name conflicts with all [ 223.167098][T20017] __nla_validate_parse: 13 callbacks suppressed [ 223.167117][T20017] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.9591'. [ 223.225992][T20029] loop1: detected capacity change from 0 to 512 [ 223.243103][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9597'. [ 223.246832][T20035] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 223.276688][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9597'. [ 223.301135][T20029] EXT4-fs: Ignoring removed oldalloc option [ 223.334136][T20029] EXT4-fs (loop1): 1 truncate cleaned up [ 223.339991][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9597'. [ 223.346862][T20029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 223.364485][T20045] netlink: 'syz.2.9605': attribute type 3 has an invalid length. [ 223.375801][T20045] netlink: 'syz.2.9605': attribute type 3 has an invalid length. [ 223.422346][T20063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9613'. [ 223.449974][ T285] EXT4-fs (loop1): unmounting filesystem. [ 223.456963][T20063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9613'. [ 223.467566][T20069] loop4: detected capacity change from 0 to 512 [ 223.475835][T20063] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 223.487635][T20069] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.520784][T20069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.535199][T20069] ext4 filesystem being mounted at /2003/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.574992][ T283] EXT4-fs (loop4): unmounting filesystem. [ 223.601492][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9621'. [ 223.636607][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9621'. [ 223.654876][T20087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9621'. [ 223.659987][T20097] loop3: detected capacity change from 0 to 512 [ 223.670524][T20099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9630'. [ 223.712508][T20099] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 223.734481][T20097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.759975][T20097] ext4 filesystem being mounted at /1811/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.777956][T20114] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 223.827384][T20097] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.9638: corrupted xattr block 6 [ 223.888416][T20097] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 223.944534][T20097] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.9638: corrupted xattr block 6 [ 224.009292][T20097] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 224.023024][T20140] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 224.040086][T20097] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.9638: corrupted xattr block 6 [ 224.054252][T20144] netlink: 'syz.4.9649': attribute type 3 has an invalid length. [ 224.068832][T20144] netlink: 'syz.4.9649': attribute type 3 has an invalid length. [ 224.081690][T20097] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 224.118056][T20097] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.9638: corrupted xattr block 6 [ 224.170665][T20097] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 224.194676][T20097] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.9638: corrupted xattr block 6 [ 224.240449][T20097] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 224.269749][T20097] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.9638: corrupted xattr block 6 [ 224.321390][T20097] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 224.341416][T20172] cgroup: subsys name conflicts with all [ 224.351137][T20097] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.9638: corrupted xattr block 6 [ 224.390037][T20180] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 224.398826][T20097] incfs: Can't find or create .index dir in ./file0 [ 224.432153][T20097] incfs: mount failed -117 [ 224.458338][T20188] loop1: detected capacity change from 0 to 512 [ 224.494805][ T286] EXT4-fs (loop3): unmounting filesystem. [ 224.504104][T20188] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.556122][T20188] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 224.603804][T20204] loop3: detected capacity change from 0 to 512 [ 224.631259][T20188] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 224.640706][T20204] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.696371][T20204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 224.709913][T20188] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 224.727332][T20204] ext4 filesystem being mounted at /1814/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.789473][T20188] System zones: 0-2, 18-18, 34-35 [ 224.810220][T20188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 224.844049][T20224] netlink: 'syz.0.9689': attribute type 16 has an invalid length. [ 224.844519][ T286] EXT4-fs (loop3): unmounting filesystem. [ 224.855017][T20224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.867258][T20224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.882166][T20188] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.9668: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 224.919461][ T339] ip6_tunnel: K xmit: Local address not yet configured! [ 224.954131][T20235] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 224.971880][ T285] EXT4-fs (loop1): unmounting filesystem. [ 225.045973][T20248] loop1: detected capacity change from 0 to 512 [ 225.070076][T20252] loop3: detected capacity change from 0 to 512 [ 225.076630][T20252] EXT4-fs: Ignoring removed oldalloc option [ 225.083857][T20248] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.117796][T20252] EXT4-fs (loop3): 1 truncate cleaned up [ 225.123469][T20252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.141208][T20248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.168992][T20248] ext4 filesystem being mounted at /2058/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.197675][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 225.204835][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 225.213956][ T286] EXT4-fs (loop3): unmounting filesystem. [ 225.271132][ T285] EXT4-fs (loop1): unmounting filesystem. [ 225.280228][T20267] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 225.427807][T20292] loop2: detected capacity change from 0 to 1024 [ 225.463086][T20292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 225.499767][T20292] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz.2.9721: directory missing '..' [ 225.558010][ T287] EXT4-fs (loop2): unmounting filesystem. [ 225.774793][T20364] loop1: detected capacity change from 0 to 512 [ 225.833863][T20364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.860538][T20364] ext4 filesystem being mounted at /2071/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.910176][T20364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.9754: corrupted xattr block 6 [ 225.968236][ T339] ip6_tunnel: K xmit: Local address not yet configured! [ 225.995072][T20364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 226.023112][T20394] loop3: detected capacity change from 0 to 1024 [ 226.042381][T20364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.9754: corrupted xattr block 6 [ 226.095135][T20364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 226.114608][T20394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.165393][T20364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.9754: corrupted xattr block 6 [ 226.217769][ T286] EXT4-fs (loop3): unmounting filesystem. [ 226.243733][T20423] device veth1_to_team entered promiscuous mode [ 226.251433][T20423] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 226.257572][T20364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 226.288547][T20429] validate_nla: 1 callbacks suppressed [ 226.288561][T20429] netlink: 'syz.4.9788': attribute type 16 has an invalid length. [ 226.301181][T20364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.9754: corrupted xattr block 6 [ 226.314116][T20429] netlink: 'syz.4.9788': attribute type 17 has an invalid length. [ 226.335057][T20364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 226.335172][T20429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.350142][T20364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.9754: corrupted xattr block 6 [ 226.369842][T20429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 226.377179][T20364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 226.386300][T20364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.9754: corrupted xattr block 6 [ 226.400878][T20429] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.407935][T20429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.415521][T20364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 226.425432][T20364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.9754: corrupted xattr block 6 [ 226.439399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.452777][ T1382] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 226.462122][T20440] loop3: detected capacity change from 0 to 512 [ 226.471538][T20364] incfs: Can't find or create .index dir in ./file0 [ 226.478849][T20440] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.492687][T20364] incfs: mount failed -117 [ 226.512637][T20440] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 226.551031][T20440] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 226.578363][T20440] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 226.599425][T20440] System zones: 0-2, 18-18, 34-35 [ 226.626021][ T285] EXT4-fs (loop1): unmounting filesystem. [ 226.636417][T20440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.712839][T20440] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.9790: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 226.815730][ T286] EXT4-fs (loop3): unmounting filesystem. [ 226.919491][ T339] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 227.031715][T20559] netlink: 'syz.3.9850': attribute type 16 has an invalid length. [ 227.055890][T20568] loop2: detected capacity change from 0 to 128 [ 227.062177][T20559] netlink: 'syz.3.9850': attribute type 17 has an invalid length. [ 227.093033][T20559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.122487][T20559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.134612][T20559] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.141635][T20559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.170859][T20559] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.177892][T20559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.211813][T20561] device vti0 entered promiscuous mode [ 227.217965][T20564] device veth1_to_team entered promiscuous mode [ 227.229583][T20564] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 227.426209][T20608] netlink: 'syz.2.9872': attribute type 16 has an invalid length. [ 227.453377][T20608] netlink: 'syz.2.9872': attribute type 17 has an invalid length. [ 227.462254][T20613] loop4: detected capacity change from 0 to 128 [ 227.482144][T20608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.497572][T20608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.516907][T20608] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.523949][T20608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.548919][T20608] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.555981][T20608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.575864][T20622] loop4: detected capacity change from 0 to 1024 [ 227.641906][T20608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.656751][T20622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.675513][T20608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.696260][ T283] EXT4-fs (loop4): unmounting filesystem. [ 227.723453][ T1559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.745302][ T6] ip6_tunnel:  xmit: Local address not yet configured! [ 227.819312][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 227.819328][ T28] audit: type=1326 audit(2000000007.342:31476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.1.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1418e929 code=0x7ffc0000 [ 227.891886][T20667] loop1: detected capacity change from 0 to 512 [ 227.892148][T20669] xt_hashlimit: overflow, try lower: 6/0 [ 227.924159][ T28] audit: type=1326 audit(2000000007.370:31477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.1.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fdf1418e929 code=0x7ffc0000 [ 227.950422][T20667] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.9900: casefold flag without casefold feature [ 227.994429][T20667] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9900: couldn't read orphan inode 15 (err -117) [ 228.052254][T20667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.058625][ T28] audit: type=1326 audit(2000000007.370:31478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.1.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1418e929 code=0x7ffc0000 [ 228.093771][ T28] audit: type=1326 audit(2000000007.370:31479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.1.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1418e929 code=0x7ffc0000 [ 228.129818][ T28] audit: type=1400 audit(2000000007.408:31480): avc: denied { setopt } for pid=20668 comm="syz.4.9898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.150587][ T28] audit: type=1326 audit(2000000007.604:31481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.2.9911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a418e929 code=0x7ffc0000 [ 228.165571][ T285] EXT4-fs (loop1): unmounting filesystem. [ 228.174794][ T28] audit: type=1326 audit(2000000007.604:31482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.2.9911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a418e929 code=0x7ffc0000 [ 228.207411][ T28] audit: type=1326 audit(2000000007.604:31483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.2.9911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff8a418e929 code=0x7ffc0000 [ 228.207440][ T28] audit: type=1326 audit(2000000007.604:31484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.2.9911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a418e929 code=0x7ffc0000 [ 228.207464][ T28] audit: type=1326 audit(2000000007.604:31485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz.2.9911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a418e929 code=0x7ffc0000 [ 228.255600][T20708] loop3: detected capacity change from 0 to 256 [ 228.256089][T20708] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.256103][T20708] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 228.265416][T20708] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 228.277534][T20712] netlink: 'syz.1.9912': attribute type 16 has an invalid length. [ 228.277553][T20712] netlink: 'syz.1.9912': attribute type 17 has an invalid length. [ 228.290975][T20712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.397080][ T593] ip6_tunnel:  xmit: Local address not yet configured! [ 228.416425][T20712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.429031][T20712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.439191][T20712] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.446240][T20712] bridge0: port 1(bridge_slave_0) entered listening state [ 228.454249][T20712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.467681][T20712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.478304][T20712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 228.486153][T20712] IPv6: ADDRCONF(NETDEV_CHANGE): syztnl0: link becomes ready [ 228.504954][ T6] ip6_tunnel:  xmit: Local address not yet configured! [ 228.528674][ T6] ip6_tunnel: K xmit: Local address not yet configured! [ 228.622287][T20759] loop1: detected capacity change from 0 to 256 [ 228.638470][T20765] __nla_validate_parse: 10 callbacks suppressed [ 228.638487][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9948'. [ 228.645033][T20764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.665390][T20759] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.684085][T20759] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 228.726605][T20759] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 228.823832][T20792] netlink: 'syz.3.9961': attribute type 15 has an invalid length. [ 228.833236][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9963'. [ 228.880434][T20808] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.903329][T20815] loop4: detected capacity change from 0 to 256 [ 228.914627][T20811] loop2: detected capacity change from 0 to 2048 [ 228.945913][T20815] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.989344][T20815] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 229.009131][T20811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.018910][T20815] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 229.058763][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9981'. [ 229.113834][ T287] EXT4-fs (loop2): unmounting filesystem. [ 229.164237][T20859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9988'. [ 229.306581][T20893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10009'. [ 229.378733][T20906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10027'. [ 229.414668][T20906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10027'. [ 229.680317][T20978] loop3: detected capacity change from 0 to 2048 [ 229.731696][T20978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 229.742022][T21002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10062'. [ 229.751059][T21002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10062'. [ 229.797434][ T286] EXT4-fs (loop3): unmounting filesystem. [ 229.960514][T21043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10080'. [ 229.991580][T21045] loop1: detected capacity change from 0 to 2048 [ 230.050923][T21045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 230.083513][ T285] EXT4-fs (loop1): unmounting filesystem. [ 230.242702][T21105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.439029][T21155] netlink: 'syz.2.10138': attribute type 9 has an invalid length. [ 230.639933][T21200] loop4: detected capacity change from 0 to 256 [ 230.691258][T21200] FAT-fs (loop4): Directory bread(block 64) failed [ 230.705957][T21200] FAT-fs (loop4): Directory bread(block 65) failed [ 230.720897][T21212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.741971][T21200] FAT-fs (loop4): Directory bread(block 66) failed [ 230.755471][T21200] FAT-fs (loop4): Directory bread(block 67) failed [ 230.769109][T21200] FAT-fs (loop4): Directory bread(block 68) failed [ 230.792636][T21200] FAT-fs (loop4): Directory bread(block 69) failed [ 230.812886][T21200] FAT-fs (loop4): Directory bread(block 70) failed [ 230.834272][T21200] FAT-fs (loop4): Directory bread(block 71) failed [ 230.853304][T21200] FAT-fs (loop4): Directory bread(block 72) failed [ 230.867517][T21200] FAT-fs (loop4): Directory bread(block 73) failed [ 230.935739][T21240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.219812][T21292] loop4: detected capacity change from 0 to 256 [ 231.247996][T21292] FAT-fs (loop4): Directory bread(block 64) failed [ 231.263996][T21292] FAT-fs (loop4): Directory bread(block 65) failed [ 231.277890][T21292] FAT-fs (loop4): Directory bread(block 66) failed [ 231.285982][T21292] FAT-fs (loop4): Directory bread(block 67) failed [ 231.294480][T21292] FAT-fs (loop4): Directory bread(block 68) failed [ 231.301080][T21292] FAT-fs (loop4): Directory bread(block 69) failed [ 231.307895][T21292] FAT-fs (loop4): Directory bread(block 70) failed [ 231.319519][T21292] FAT-fs (loop4): Directory bread(block 71) failed [ 231.326218][T21292] FAT-fs (loop4): Directory bread(block 72) failed [ 231.337430][T21292] FAT-fs (loop4): Directory bread(block 73) failed [ 232.056909][T21418] x_tables: duplicate entry at hook 2 [ 232.166343][T21435] loop1: detected capacity change from 0 to 256 [ 232.175847][T21404] loop4: detected capacity change from 0 to 40427 [ 232.196712][T21404] F2FS-fs (loop4): fault_injection options not supported [ 232.234498][T21404] F2FS-fs (loop4): Image doesn't support compression [ 232.254705][T21435] FAT-fs (loop1): Directory bread(block 64) failed [ 232.257794][T21404] F2FS-fs (loop4): invalid crc value [ 232.272559][T21404] F2FS-fs (loop4): Found nat_bits in checkpoint [ 232.283094][T21435] FAT-fs (loop1): Directory bread(block 65) failed [ 232.307480][T21435] FAT-fs (loop1): Directory bread(block 66) failed [ 232.326296][T21404] F2FS-fs (loop4): Start checkpoint disabled! [ 232.332983][T21404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 232.345382][T21435] FAT-fs (loop1): Directory bread(block 67) failed [ 232.360651][T21435] FAT-fs (loop1): Directory bread(block 68) failed [ 232.408123][T21435] FAT-fs (loop1): Directory bread(block 69) failed [ 232.465108][T21435] FAT-fs (loop1): Directory bread(block 70) failed [ 232.520932][T21435] FAT-fs (loop1): Directory bread(block 71) failed [ 232.531563][T21435] FAT-fs (loop1): Directory bread(block 72) failed [ 232.584893][T21435] FAT-fs (loop1): Directory bread(block 73) failed [ 232.617985][T21503] x_tables: duplicate entry at hook 2 [ 232.767144][T21524] xt_l2tp: v2 tid > 0xffff: 134217728 [ 232.857811][T21491] loop3: detected capacity change from 0 to 40427 [ 232.883937][T21491] F2FS-fs (loop3): fault_injection options not supported [ 232.901669][T21491] F2FS-fs (loop3): Image doesn't support compression [ 232.924442][T21491] F2FS-fs (loop3): invalid crc value [ 232.946740][T21491] F2FS-fs (loop3): Found nat_bits in checkpoint [ 233.033194][T21491] F2FS-fs (loop3): Start checkpoint disabled! [ 233.056344][T21491] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 233.499416][T21594] netlink: 'syz.1.10350': attribute type 13 has an invalid length. [ 233.538082][T21594] gretap0: refused to change device tx_queue_len [ 233.553861][T21594] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.803257][T21657] netlink: 'syz.4.10382': attribute type 13 has an invalid length. [ 233.833238][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 233.833254][ T28] audit: type=1400 audit(2000000012.964:31528): avc: denied { map } for pid=21662 comm="syz.0.10385" path="socket:[83162]" dev="sockfs" ino=83162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 233.874576][T21657] gretap0: refused to change device tx_queue_len [ 233.881772][T21657] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.893260][T21672] loop1: detected capacity change from 0 to 1024 [ 233.939714][T21680] netlink: 'syz.0.10394': attribute type 1 has an invalid length. [ 233.982210][T21672] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 234.006251][T21697] __nla_validate_parse: 10 callbacks suppressed [ 234.006266][T21697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10401'. [ 234.006883][T21672] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 234.041427][T21696] loop2: detected capacity change from 0 to 2048 [ 234.051748][T21701] netlink: 'syz.3.10403': attribute type 13 has an invalid length. [ 234.061186][T21672] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.10387: Failed to acquire dquot type 0 [ 234.074095][T21701] gretap0: refused to change device tx_queue_len [ 234.080615][T21701] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.096396][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 234.096410][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 234.114178][T21696] loop2: p1 < > p3 [ 234.118188][T21672] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 234.135202][T21696] loop2: p3 size 134217728 extends beyond EOD, truncated [ 234.141450][ T28] audit: type=1326 audit(2000000013.254:31529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.4.10408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc950d8e929 code=0x7ffc0000 [ 234.151953][T21672] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #13: comm syz.1.10387: corrupted inode contents [ 234.175507][ T28] audit: type=1326 audit(2000000013.282:31530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.4.10408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc950d8e929 code=0x7ffc0000 [ 234.219683][ T28] audit: type=1326 audit(2000000013.282:31531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.4.10408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc950d8e929 code=0x7ffc0000 [ 234.247841][T21672] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #13: comm syz.1.10387: mark_inode_dirty error [ 234.255080][ T28] audit: type=1326 audit(2000000013.282:31532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.4.10408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc950d8e929 code=0x7ffc0000 [ 234.295415][T21672] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #13: comm syz.1.10387: corrupted inode contents [ 234.301876][T18678] udevd[18678]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 234.309825][T21730] loop2: detected capacity change from 0 to 256 [ 234.318611][T17564] udevd[17564]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 234.340262][T21672] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.10387: mark_inode_dirty error [ 234.382152][T21730] FAT-fs (loop2): Directory bread(block 64) failed [ 234.395172][T21672] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #13: comm syz.1.10387: corrupted inode contents [ 234.414426][T21730] FAT-fs (loop2): Directory bread(block 65) failed [ 234.430237][T21730] FAT-fs (loop2): Directory bread(block 66) failed [ 234.441359][T21672] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 234.463126][T21730] FAT-fs (loop2): Directory bread(block 67) failed [ 234.470107][T21672] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #13: comm syz.1.10387: corrupted inode contents [ 234.482202][T21730] FAT-fs (loop2): Directory bread(block 68) failed [ 234.488883][T21730] FAT-fs (loop2): Directory bread(block 69) failed [ 234.495505][T21730] FAT-fs (loop2): Directory bread(block 70) failed [ 234.502073][T21672] EXT4-fs error (device loop1): ext4_truncate:4314: inode #13: comm syz.1.10387: mark_inode_dirty error [ 234.513253][T21730] FAT-fs (loop2): Directory bread(block 71) failed [ 234.519761][T21730] FAT-fs (loop2): Directory bread(block 72) failed [ 234.526558][T21730] FAT-fs (loop2): Directory bread(block 73) failed [ 234.533102][T21672] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 234.542444][T21672] EXT4-fs (loop1): 1 truncate cleaned up [ 234.548061][T21672] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 234.592057][T21756] netlink: 'syz.3.10439': attribute type 1 has an invalid length. [ 234.600787][ T285] EXT4-fs (loop1): unmounting filesystem. [ 234.644738][T21763] netlink: 'syz.0.10443': attribute type 13 has an invalid length. [ 234.695272][T21763] gretap0: refused to change device tx_queue_len [ 234.712892][T21763] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.729862][ T28] audit: type=1326 audit(2000000013.806:31533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.10441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a418e929 code=0x7ffc0000 [ 234.769460][ T28] audit: type=1326 audit(2000000013.806:31534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.10441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff8a418e929 code=0x7ffc0000 [ 234.784384][T21788] loop3: detected capacity change from 0 to 2048 [ 234.803882][T21790] netlink: 'syz.2.10447': attribute type 1 has an invalid length. [ 234.848554][ T28] audit: type=1326 audit(2000000013.806:31535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21779 comm="syz.2.10441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a418e929 code=0x7ffc0000 [ 234.894719][T21788] loop3: p1 < > p3 [ 234.899350][T21788] loop3: p3 size 134217728 extends beyond EOD, truncated [ 235.070244][T21843] loop1: detected capacity change from 0 to 2048 [ 235.119165][T21843] loop1: p1 < > p3 [ 235.123611][T21843] loop1: p3 size 134217728 extends beyond EOD, truncated [ 235.185157][ T593] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 235.195364][T18678] udevd[18678]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 235.215290][T17564] udevd[17564]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 235.228226][T21875] x_tables: unsorted underflow at hook 2 [ 235.271350][T21884] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 235.305011][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10497'. [ 235.365811][T21899] loop4: detected capacity change from 0 to 2048 [ 235.397627][ T593] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 235.419357][ T593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.432951][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10503'. [ 235.442705][T21899] loop4: p1 < > p3 [ 235.447878][T21899] loop4: p3 size 134217728 extends beyond EOD, truncated [ 235.458371][ T593] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 235.487474][ T593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.522082][ T593] usb 3-1: config 0 descriptor?? [ 235.526861][T21915] loop4: detected capacity change from 0 to 1024 [ 235.536907][T21809] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.590205][T21915] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.10507: Failed to acquire dquot type 0 [ 235.604892][T21915] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 235.624784][T21915] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #13: comm syz.4.10507: corrupted inode contents [ 235.674870][T21915] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #13: comm syz.4.10507: mark_inode_dirty error [ 235.695506][T21915] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #13: comm syz.4.10507: corrupted inode contents [ 235.700383][T21938] x_tables: unsorted underflow at hook 2 [ 235.707976][T21915] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.10507: mark_inode_dirty error [ 235.724746][T21915] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #13: comm syz.4.10507: corrupted inode contents [ 235.737302][T21915] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 235.750549][T21915] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #13: comm syz.4.10507: corrupted inode contents [ 235.763280][ T593] usbhid 3-1:0.0: can't add hid device: -71 [ 235.764894][T21915] EXT4-fs error (device loop4): ext4_truncate:4314: inode #13: comm syz.4.10507: mark_inode_dirty error [ 235.769276][ T593] usbhid: probe of 3-1:0.0 failed with error -71 [ 235.788142][ T593] usb 3-1: USB disconnect, device number 79 [ 235.795150][T21915] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 235.806918][T21915] EXT4-fs (loop4): 1 truncate cleaned up [ 235.812599][T21915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.876631][ T283] EXT4-fs (loop4): unmounting filesystem. [ 236.034592][T21972] x_tables: unsorted underflow at hook 2 [ 236.212081][T22008] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 236.251379][T22014] loop3: detected capacity change from 0 to 256 [ 236.310468][T22014] FAT-fs (loop3): Directory bread(block 64) failed [ 236.312534][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10572'. [ 236.347325][T22014] FAT-fs (loop3): Directory bread(block 65) failed [ 236.368979][T22014] FAT-fs (loop3): Directory bread(block 66) failed [ 236.383363][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10569'. [ 236.396629][T22014] FAT-fs (loop3): Directory bread(block 67) failed [ 236.408991][T22042] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 236.420555][T22040] loop4: detected capacity change from 0 to 2048 [ 236.427049][T22014] FAT-fs (loop3): Directory bread(block 68) failed [ 236.444414][T22014] FAT-fs (loop3): Directory bread(block 69) failed [ 236.456784][T22040] loop4: p1 < > p3 [ 236.464618][T22014] FAT-fs (loop3): Directory bread(block 70) failed [ 236.466624][T22040] loop4: p3 size 134217728 extends beyond EOD, truncated [ 236.484683][T22014] FAT-fs (loop3): Directory bread(block 71) failed [ 236.513336][T22014] FAT-fs (loop3): Directory bread(block 72) failed [ 236.535259][T22014] FAT-fs (loop3): Directory bread(block 73) failed [ 236.642522][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10591'. [ 236.963387][T22169] xt_l2tp: invalid flags combination: 4 [ 237.188558][T22216] loop1: detected capacity change from 0 to 128 [ 237.263185][T22235] xt_CT: No such helper "netbios-ns" [ 237.276501][T22237] xt_l2tp: invalid flags combination: 4 [ 237.485636][T22284] loop3: detected capacity change from 0 to 128 [ 237.547918][T22297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10698'. [ 237.651953][T22321] loop4: detected capacity change from 0 to 128 [ 237.693387][T22329] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10715'. [ 237.824583][T22356] 9pnet_fd: p9_fd_create_unix (22356): problem connecting socket: ./file0: -111 [ 237.852221][T22359] loop2: detected capacity change from 0 to 128 [ 237.859635][T22361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10731'. [ 237.893546][T22369] netlink: 'syz.1.10733': attribute type 4 has an invalid length. [ 237.928152][T22369] netlink: 'syz.1.10733': attribute type 5 has an invalid length. [ 237.955539][T22369] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.10733'. [ 237.985569][T22383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.069883][ T6] ip6_tunnel: K xmit: Local address not yet configured! [ 238.174180][T22424] 9pnet_fd: p9_fd_create_unix (22424): problem connecting socket: ./file0: -111 [ 238.197552][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 238.218924][ T6] ip6_tunnel: K xmit: Local address not yet configured! [ 238.231797][T22434] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 238.257058][T22437] netlink: 'syz.3.10769': attribute type 32 has an invalid length. [ 238.302160][T22442] loop2: detected capacity change from 0 to 4096 [ 238.346509][T22442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.400106][ T287] EXT4-fs (loop2): unmounting filesystem. [ 238.452339][T22476] usb usb1: check_ctrlrecip: process 22476 (syz.4.10782) requesting ep 01 but needs 81 [ 238.514882][T22476] usb usb1: usbfs: process 22476 (syz.4.10782) did not claim interface 0 before use [ 238.607908][T22497] loop3: detected capacity change from 0 to 4096 [ 238.652798][T22497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.677035][T22518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.710015][ T286] EXT4-fs (loop3): unmounting filesystem. [ 238.727045][T22518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.807489][ T6] ip6_tunnel:  xmit: Local address not yet configured! [ 238.815476][T22545] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 238.835067][ T340] ip6_tunnel: K xmit: Local address not yet configured! [ 238.910470][T22561] usb usb1: check_ctrlrecip: process 22561 (syz.2.10829) requesting ep 01 but needs 81 [ 238.917678][T22555] loop4: detected capacity change from 0 to 4096 [ 238.953670][T22561] usb usb1: usbfs: process 22561 (syz.2.10829) did not claim interface 0 before use [ 239.008954][T22555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.015774][T22580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.035243][T22580] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 239.114228][ T283] EXT4-fs (loop4): unmounting filesystem. [ 239.270328][T22623] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 239.347989][T22638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.387506][T22638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.438839][ T593] ip6_tunnel:  xmit: Local address not yet configured! [ 239.445831][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 239.445844][ T28] audit: type=1326 audit(2000000018.212:31667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.0.10875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 239.558043][ T28] audit: type=1326 audit(2000000018.212:31668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.0.10875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 239.651132][ T28] audit: type=1326 audit(2000000018.212:31669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.0.10875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 239.651601][ T340] ip6_tunnel: K xmit: Local address not yet configured! [ 239.678301][ T28] audit: type=1326 audit(2000000018.212:31670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.0.10875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 239.715334][ T28] audit: type=1326 audit(2000000018.212:31671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22657 comm="syz.0.10875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 239.736922][ T340] ip6_tunnel:  xmit: Local address not yet configured! [ 239.739340][ T28] audit: type=1400 audit(2000000018.268:31672): avc: denied { read write } for pid=22666 comm="syz.4.10889" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.770011][ T28] audit: type=1400 audit(2000000018.268:31673): avc: denied { open } for pid=22666 comm="syz.4.10889" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.793854][ T28] audit: type=1400 audit(2000000018.268:31674): avc: denied { ioctl } for pid=22666 comm="syz.4.10889" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.793857][ T593] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 239.826701][ T28] audit: type=1400 audit(2000000018.352:31675): avc: denied { nlmsg_read } for pid=22685 comm="syz.1.10898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.865206][ T8142] ip6_tunnel:  xmit: Local address not yet configured! [ 239.941844][ T28] audit: type=1400 audit(2000000018.679:31676): avc: denied { write } for pid=22725 comm="syz.2.10911" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.984417][ T593] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 240.004146][ T6] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 240.019158][ T593] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.036312][ T593] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 240.048455][ T593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.083519][ T593] usb 5-1: config 0 descriptor?? [ 240.088733][T22667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.118518][T22760] __nla_validate_parse: 14 callbacks suppressed [ 240.118534][T22760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10927'. [ 240.144225][T22760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10927'. [ 240.153303][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10927'. [ 240.174172][T22770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.197417][T22770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.219778][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.250432][ T6] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.284424][ T340] ip6_tunnel:  xmit: Local address not yet configured! [ 240.291503][ T340] ip6_tunnel: K xmit: Local address not yet configured! [ 240.304702][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.321955][ T593] usbhid 5-1:0.0: can't add hid device: -71 [ 240.328378][ T593] usbhid: probe of 5-1:0.0 failed with error -71 [ 240.349886][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.358707][ T593] usb 5-1: USB disconnect, device number 81 [ 240.381260][ T6] usb 4-1: Product: syz [ 240.393554][ T6] usb 4-1: Manufacturer: syz [ 240.403380][ T6] usb 4-1: SerialNumber: syz [ 240.426062][ T6] usb 4-1: selecting invalid altsetting 1 [ 240.602870][ T593] ip6_tunnel: K xmit: Local address not yet configured! [ 240.675402][T22852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10972'. [ 240.691149][T22852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10972'. [ 240.700691][T22852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10972'. [ 240.772080][T22866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.807397][T22872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.831657][ T1382] ip6_tunnel: K xmit: Local address not yet configured! [ 240.854756][ T6] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 240.865017][ T6] cdc_ncm 4-1:1.1: bind() failure [ 240.889707][ T6] usb 4-1: USB disconnect, device number 79 [ 241.014158][T22913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge10: link becomes ready [ 241.096811][T22934] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 241.105424][ T593] ip6_tunnel:  xmit: Local address not yet configured! [ 241.247380][T22970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.257026][T22970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.278534][T22970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge10: link becomes ready [ 241.308731][ T329] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 241.333839][T22982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.371483][T22988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11040'. [ 241.372702][ T329] ip6_tunnel: K xmit: Local address not yet configured! [ 241.432624][T22996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge6: link becomes ready [ 241.679161][T23066] loop4: detected capacity change from 0 to 256 [ 241.750179][T23079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11082'. [ 241.792158][T23090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11091'. [ 241.818750][T23098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11094'. [ 241.848729][T23104] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 241.931910][T23126] validate_nla: 8 callbacks suppressed [ 241.931927][T23126] netlink: 'syz.3.11110': attribute type 5 has an invalid length. [ 242.266810][T23204] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 242.385926][T23226] netlink: 'syz.2.11158': attribute type 1 has an invalid length. [ 242.446364][T23246] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 242.457474][T23247] loop1: detected capacity change from 0 to 256 [ 242.523637][T23259] device bridge9 entered promiscuous mode [ 242.555059][T23268] netlink: 'syz.4.11181': attribute type 1 has an invalid length. [ 242.568180][T23259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge9: link becomes ready [ 242.580670][T23265] netlink: 'syz.2.11179': attribute type 5 has an invalid length. [ 242.614727][T23276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.621937][T23276] IPv6: NLM_F_CREATE should be set when creating new route [ 242.629165][T23276] IPv6: NLM_F_CREATE should be set when creating new route [ 242.744509][T23302] netlink: 'syz.3.11196': attribute type 1 has an invalid length. [ 242.762104][T23304] xt_l2tp: v2 doesn't support IP mode [ 242.897075][T23337] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 242.970508][T23354] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 243.021708][T23371] netlink: 'syz.1.11231': attribute type 3 has an invalid length. [ 243.441639][T23475] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 243.575266][T23511] xt_l2tp: v2 doesn't support IP mode [ 243.591616][T23515] device bridge11 entered promiscuous mode [ 243.598626][T23515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge11: link becomes ready [ 243.629770][T23527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.636987][T23527] IPv6: NLM_F_CREATE should be set when creating new route [ 243.644216][T23527] IPv6: NLM_F_CREATE should be set when creating new route [ 243.664647][T23535] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 243.673430][T23538] xt_l2tp: v2 doesn't support IP mode [ 243.695225][T23541] netlink: 'syz.3.11316': attribute type 3 has an invalid length. [ 243.721230][T23549] device bridge7 entered promiscuous mode [ 243.727307][T23549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge7: link becomes ready [ 243.761903][T23559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.769132][T23559] IPv6: NLM_F_CREATE should be set when creating new route [ 243.776311][T23559] IPv6: NLM_F_CREATE should be set when creating new route [ 243.811670][T23569] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 243.929093][T23606] bridge0: port 3(gretap0) entered blocking state [ 243.944900][T23606] bridge0: port 3(gretap0) entered disabled state [ 243.965045][T23606] device gretap0 entered promiscuous mode [ 243.973246][T23606] bridge0: port 3(gretap0) entered blocking state [ 243.979664][T23606] bridge0: port 3(gretap0) entered forwarding state [ 244.389892][T23671] x_tables: unsorted underflow at hook 3 [ 244.611029][T23707] x_tables: unsorted underflow at hook 3 [ 244.764637][T23765] netlink: 'syz.2.11426': attribute type 49 has an invalid length. [ 244.800774][ T28] kauditd_printk_skb: 261 callbacks suppressed [ 244.800788][ T28] audit: type=1400 audit(2000000023.225:31938): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 244.832254][ T28] audit: type=1400 audit(2000000023.225:31939): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 244.861566][ T28] audit: type=1400 audit(2000000023.235:31940): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 244.892275][T23793] netlink: 'syz.4.11442': attribute type 49 has an invalid length. [ 244.910657][ T28] audit: type=1400 audit(2000000023.235:31941): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 244.920010][T23802] tc_dump_action: action bad kind [ 244.973553][ T28] audit: type=1400 audit(2000000023.272:31942): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 245.026907][ T28] audit: type=1400 audit(2000000023.272:31943): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 245.039378][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 245.052935][ T28] audit: type=1400 audit(2000000023.272:31944): avc: denied { bpf } for pid=23779 comm="syz.0.11434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 245.079250][ T28] audit: type=1400 audit(2000000023.272:31945): avc: denied { prog_load } for pid=23779 comm="syz.0.11434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 245.099706][ T28] audit: type=1400 audit(2000000023.272:31946): avc: denied { bpf } for pid=23779 comm="syz.0.11434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 245.133044][ T28] audit: type=1400 audit(2000000023.282:31947): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 245.362719][T23934] device vlan0 entered promiscuous mode [ 245.431551][T23957] xt_bpf: check failed: parse error [ 245.502634][T23983] x_tables: duplicate underflow at hook 4 [ 245.522604][T23990] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 245.562553][T24001] __nla_validate_parse: 7 callbacks suppressed [ 245.562563][T24001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11542'. [ 245.604212][T24001] device vlan0 entered promiscuous mode [ 245.613332][T24013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11548'. [ 245.670446][T24028] xt_bpf: check failed: parse error [ 245.688432][T24034] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 245.712933][T24040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11562'. [ 245.716847][T24042] x_tables: duplicate underflow at hook 4 [ 245.740512][T24040] device vlan0 entered promiscuous mode [ 245.754986][T24046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11565'. [ 245.791181][T24059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11571'. [ 245.796646][T24057] xt_bpf: check failed: parse error [ 245.850182][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11589'. [ 245.852141][T24077] x_tables: duplicate underflow at hook 4 [ 245.862292][T24076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11589'. [ 245.902823][T24085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11581'. [ 245.918052][T24085] device vlan0 entered promiscuous mode [ 245.930382][T24089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11584'. [ 246.018485][T24121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11603'. [ 246.073483][T24144] netlink: 'syz.4.11613': attribute type 3 has an invalid length. [ 246.217041][T24200] xt_TCPMSS: Only works on TCP SYN packets [ 246.341262][T24248] xt_TCPMSS: Only works on TCP SYN packets [ 246.885692][T24447] binfmt_misc: register: failed to install interpreter file ./file0 [ 246.969591][T24474] xt_bpf: check failed: parse error [ 247.048085][T24498] device ip6tnl5 entered promiscuous mode [ 247.215721][T24559] binfmt_misc: register: failed to install interpreter file ./file0 [ 247.236630][T24565] xt_bpf: check failed: parse error [ 247.308698][T24588] device ip6tnl1 entered promiscuous mode [ 247.331240][T24595] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 247.432760][T24627] device ip6tnl3 entered promiscuous mode [ 247.567143][T24675] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 247.665660][T24704] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 247.706885][T24718] xt_hashlimit: size too large, truncated to 1048576 [ 247.728337][T24718] xt_hashlimit: max too large, truncated to 1048576 [ 247.890403][T24789] device vti1 entered promiscuous mode [ 247.914171][T24795] futex_wake_op: syz.1.11931 tries to shift op by 32; fix this program [ 248.013257][T24830] x_tables: unsorted underflow at hook 4 [ 248.140446][T24874] x_tables: unsorted entry at hook 2 [ 248.171154][T24886] validate_nla: 10 callbacks suppressed [ 248.171170][T24886] netlink: 'syz.3.11980': attribute type 5 has an invalid length. [ 248.281189][T24928] x_tables: unsorted underflow at hook 4 [ 248.296346][T24934] netlink: 'syz.0.12001': attribute type 5 has an invalid length. [ 248.378390][T24963] x_tables: unsorted underflow at hook 4 [ 248.397063][T24968] x_tables: unsorted entry at hook 2 [ 248.858484][T25101] netlink: 'syz.1.12083': attribute type 5 has an invalid length. [ 249.147825][T25183] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 249.274167][T25214] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 249.291864][T25219] xt_policy: too many policy elements [ 249.413144][T25257] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 249.505766][T25281] device bridge11 entered promiscuous mode [ 249.654132][T25319] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 249.677082][T25326] xt_SECMARK: invalid mode: 2 [ 249.710379][T25335] xt_policy: too many policy elements [ 249.827065][T25358] xt_SECMARK: invalid mode: 2 [ 249.925480][T25382] device bridge14 entered promiscuous mode [ 250.069881][T25434] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 250.113381][T25447] device bridge7 entered promiscuous mode [ 250.152125][ T28] kauditd_printk_skb: 1026 callbacks suppressed [ 250.152140][ T28] audit: type=1400 audit(2000000028.230:32974): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.182850][ T28] audit: type=1400 audit(2000000028.230:32975): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.208121][ T28] audit: type=1400 audit(2000000028.230:32976): avc: denied { bpf } for pid=25460 comm="syz.0.12263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 250.238373][ T28] audit: type=1400 audit(2000000028.267:32977): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.268805][ T28] audit: type=1400 audit(2000000028.267:32978): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.320135][ T28] audit: type=1400 audit(2000000028.277:32979): avc: denied { read write } for pid=25466 comm="syz.3.12266" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.369393][ T28] audit: type=1400 audit(2000000028.295:32980): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.407860][ T28] audit: type=1400 audit(2000000028.305:32981): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.429709][T25509] device bridge8 entered promiscuous mode [ 250.469156][ T28] audit: type=1400 audit(2000000028.314:32982): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.493471][ T28] audit: type=1400 audit(2000000028.333:32983): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.538289][T25521] device sit0 left promiscuous mode [ 250.544288][T25521] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.554543][T25521] device veth1_to_team left promiscuous mode [ 250.569839][T25521] device vlan0 left promiscuous mode [ 250.585830][T25521] device xfrm2 left promiscuous mode [ 250.592634][T25521] device vti0 left promiscuous mode [ 250.598232][T25521] device bridge9 left promiscuous mode [ 250.604596][T25521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge9: link becomes ready [ 250.614159][ T339] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 250.614173][ T339] ip6_tunnel: K xmit: Local address not yet configured! [ 250.623798][T25521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge9: link becomes ready [ 250.635361][T25521] device vti1 left promiscuous mode [ 250.734056][T25570] device bridge12 entered promiscuous mode [ 250.899993][T25625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.031320][T25663] xt_check_table_hooks: 2 callbacks suppressed [ 251.031336][T25663] x_tables: unsorted entry at hook 3 [ 251.105977][T25679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.115132][T25679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.123953][T25679] device veth1_to_team left promiscuous mode [ 251.174939][T25698] x_tables: unsorted entry at hook 3 [ 251.231204][T25717] __nla_validate_parse: 33 callbacks suppressed [ 251.231222][T25717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12392'. [ 251.277089][T25734] x_tables: unsorted entry at hook 3 [ 251.326983][T25753] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 251.359660][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12411'. [ 251.382302][T25770] netlink: 'syz.4.12416': attribute type 13 has an invalid length. [ 251.420513][T25782] x_tables: unsorted entry at hook 3 [ 251.517536][T25815] x_tables: unsorted entry at hook 3 [ 251.625275][ T329] ip6_tunnel: K xmit: Local address not yet configured! [ 251.704707][T25879] netlink: 'syz.3.12470': attribute type 13 has an invalid length. [ 251.732528][T25889] xt_limit: Overflow, try lower: 2147483649/3300 [ 251.752029][T25893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12479'. [ 251.827432][T25921] netlink: 'syz.1.12489': attribute type 13 has an invalid length. [ 251.972644][T25969] xt_limit: Overflow, try lower: 2147483649/3300 [ 252.203538][T25997] xt_limit: Overflow, try lower: 2147483649/3300 [ 252.211715][T26000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12527'. [ 252.263387][T26020] netlink: 'syz.1.12539': attribute type 9 has an invalid length. [ 252.282930][T26020] netlink: 'syz.1.12539': attribute type 6 has an invalid length. [ 252.290825][T26020] netlink: 'syz.1.12539': attribute type 7 has an invalid length. [ 252.298928][T26020] netlink: 'syz.1.12539': attribute type 8 has an invalid length. [ 252.820668][T26225] device bridge7 entered promiscuous mode [ 252.877016][T26245] device bridge11 entered promiscuous mode [ 252.959517][T26272] tc_dump_action: action bad kind [ 252.986192][T26280] device bridge12 entered promiscuous mode [ 253.056615][T26303] tc_dump_action: action bad kind [ 253.130291][T26330] netlink: 25 bytes leftover after parsing attributes in process `syz.0.12702'. [ 253.232414][T26364] netlink: 25 bytes leftover after parsing attributes in process `syz.1.12707'. [ 253.483440][T26451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.510475][T26451] device bridge_slave_0 left promiscuous mode [ 253.521371][T26451] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.529056][T26451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.537361][T26451] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.547367][T26463] xt_limit: Overflow, try lower: 65536/2147483648 [ 253.562779][T26451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge6: link becomes ready [ 253.570219][T26451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge7: link becomes ready [ 253.593017][ T6] ip6_tunnel:  xmit: Local address not yet configured! [ 253.600034][ T6] ip6_tunnel: K xmit: Local address not yet configured! [ 253.687349][T26494] validate_nla: 13 callbacks suppressed [ 253.687365][T26494] netlink: 'syz.1.12772': attribute type 2 has an invalid length. [ 253.764697][T26521] xt_limit: Overflow, try lower: 65536/2147483648 [ 253.891331][ T6] ip6_tunnel: K xmit: Local address not yet configured! [ 253.896390][T26571] netlink: 'syz.4.12821': attribute type 2 has an invalid length. [ 254.137797][T26656] netlink: 'syz.1.12856': attribute type 24 has an invalid length. [ 254.193432][T26675] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.208692][T26675] device bridge_slave_0 left promiscuous mode [ 254.215575][T26675] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.216637][T26675] device bridge_slave_1 left promiscuous mode [ 254.216696][T26675] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.225383][T26675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge9: link becomes ready [ 254.232874][T26685] netlink: 2 bytes leftover after parsing attributes in process `syz.4.12870'. [ 254.232893][T26685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.235993][ T340] ip6_tunnel:  xmit: Local address not yet configured! [ 254.244486][ T329] ip6_tunnel: K xmit: Local address not yet configured! [ 254.346876][T26717] netlink: 'syz.4.12886': attribute type 24 has an invalid length. [ 254.375670][T26720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.392989][T26720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.411196][T26720] device bridge_slave_0 left promiscuous mode [ 254.417472][ T339] ip6_tunnel: K xmit: Local address not yet configured! [ 254.431294][T26720] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.444734][T26720] device bridge_slave_1 left promiscuous mode [ 254.451188][T26720] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.479854][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12903'. [ 254.480527][T26720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge10: link becomes ready [ 254.497447][T26720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge11: link becomes ready [ 254.511633][ T329] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 254.549391][T26763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12908'. [ 254.632065][T26787] netlink: 'syz.2.12921': attribute type 1 has an invalid length. [ 254.658964][T26797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12924'. [ 254.750945][T26826] x_tables: duplicate underflow at hook 2 [ 254.988475][T26905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.000598][T26908] x_tables: duplicate underflow at hook 2 [ 255.008083][T26905] device bridge_slave_0 left promiscuous mode [ 255.027575][T26905] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.046905][T26905] device bridge_slave_1 left promiscuous mode [ 255.053036][T26905] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.152489][T26929] netlink: 'syz.1.12989': attribute type 1 has an invalid length. [ 255.473539][ T329] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 255.504575][T27034] device gretap0 left promiscuous mode [ 255.511200][ T28] kauditd_printk_skb: 943 callbacks suppressed [ 255.511213][ T28] audit: type=1400 audit(2000000033.244:33927): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.524634][T27034] bridge0: port 3(gretap0) entered disabled state [ 255.542546][ T28] audit: type=1400 audit(2000000033.244:33928): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.573047][ T28] audit: type=1400 audit(2000000033.281:33929): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.597993][ T28] audit: type=1400 audit(2000000033.309:33930): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.607610][T27034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.630890][ T28] audit: type=1400 audit(2000000033.356:33931): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.658184][T27034] device bridge_slave_0 left promiscuous mode [ 255.664647][ T28] audit: type=1400 audit(2000000033.384:33932): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.671189][T27034] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.723624][T27034] device bridge_slave_1 left promiscuous mode [ 255.736511][T27034] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.770764][ T28] audit: type=1400 audit(2000000033.477:33933): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.799536][ T28] audit: type=1400 audit(2000000033.487:33934): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.834235][ T28] audit: type=1400 audit(2000000033.487:33935): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.879945][ T28] audit: type=1400 audit(2000000033.534:33936): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.927008][T27076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.941881][T27076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge9: link becomes ready [ 255.970297][ T339] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 255.970312][ T339] ip6_tunnel: K xmit: Local address not yet configured! [ 256.088280][T27119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.094626][T27122] netlink: 'syz.3.13086': attribute type 10 has an invalid length. [ 256.104895][T27119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge10: link becomes ready [ 256.112484][T27119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge11: link becomes ready [ 256.126027][ T339] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 256.127392][T27122] netlink: 'syz.3.13086': attribute type 10 has an invalid length. [ 256.274952][T27166] netlink: 'syz.4.13110': attribute type 10 has an invalid length. [ 256.283713][T27166] netlink: 'syz.4.13110': attribute type 10 has an invalid length. [ 256.297212][ T6] ip6_tunnel:  xmit: Local address not yet configured! [ 256.531978][ T1382] ip6_tunnel: K xmit: Local address not yet configured! [ 256.744075][T27315] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 256.821531][ T1382] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 256.903697][T27370] __nla_validate_parse: 13 callbacks suppressed [ 256.903714][T27370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13206'. [ 256.999805][T27406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13228'. [ 257.066477][T27427] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 257.119416][T27447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13245'. [ 257.275935][T27506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13278'. [ 257.299459][T27506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13278'. [ 257.334062][T27521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.407366][T27543] device batadv_slave_0 entered promiscuous mode [ 257.436954][T27543] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 257.540727][T27584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.651746][T27623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13342'. [ 257.676159][T27623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13342'. [ 258.515244][T27690] device batadv_slave_0 entered promiscuous mode [ 258.532363][T27690] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 258.563088][T27706] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13373'. [ 258.669746][T27749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13393'. [ 258.699304][T27747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13396'. [ 258.723468][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 258.802390][T27792] device batadv_slave_0 entered promiscuous mode [ 258.810129][T27792] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 259.000520][T27860] xt_TCPMSS: Only works on TCP SYN packets [ 259.087737][T27891] device batadv_slave_0 entered promiscuous mode [ 259.108464][T27891] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 259.120227][T27903] xt_TCPMSS: Only works on TCP SYN packets [ 259.204570][T27928] xt_hashlimit: size too large, truncated to 1048576 [ 259.224774][T27928] xt_hashlimit: max too large, truncated to 1048576 [ 259.225743][T27936] device batadv_slave_0 entered promiscuous mode [ 259.233865][T27939] xt_TCPMSS: Only works on TCP SYN packets [ 259.250316][T27936] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 259.326814][T27962] validate_nla: 15 callbacks suppressed [ 259.326832][T27962] netlink: 'syz.1.13500': attribute type 3 has an invalid length. [ 259.405787][T27992] netlink: 'syz.0.13527': attribute type 3 has an invalid length. [ 259.486227][T28020] bridge0: port 1(veth0_to_bridge) entered blocking state [ 259.495279][T28020] bridge0: port 1(veth0_to_bridge) entered disabled state [ 259.502862][T28020] device veth0_to_bridge entered promiscuous mode [ 259.509926][T28020] bridge0: port 1(veth0_to_bridge) entered blocking state [ 259.517072][T28020] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 259.541718][T28025] netlink: 'syz.3.13535': attribute type 3 has an invalid length. [ 259.680305][T28078] bridge0: port 1(veth0_to_bridge) entered blocking state [ 259.706967][T28078] bridge0: port 1(veth0_to_bridge) entered disabled state [ 259.714504][T28078] device veth0_to_bridge entered promiscuous mode [ 259.734235][T28078] bridge0: port 1(veth0_to_bridge) entered blocking state [ 259.741391][T28078] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 260.091810][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 260.657327][T28137] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28137 comm=syz.4.13590 [ 260.736205][T28164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.862616][ T28] kauditd_printk_skb: 718 callbacks suppressed [ 260.862630][ T28] audit: type=1400 audit(2000000038.248:34655): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 260.939179][T28210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28210 comm=syz.0.13625 [ 260.965012][ T28] audit: type=1400 audit(2000000038.248:34656): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.021932][ T28] audit: type=1400 audit(2000000038.248:34657): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.072125][ T28] audit: type=1400 audit(2000000038.285:34658): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.139902][T28249] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28249 comm=syz.1.13642 [ 261.152401][ T28] audit: type=1400 audit(2000000038.285:34659): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.216007][T28265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.233453][ T28] audit: type=1400 audit(2000000038.304:34660): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.276404][ T28] audit: type=1400 audit(2000000038.313:34661): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.313926][ T28] audit: type=1400 audit(2000000038.313:34662): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.340708][ T28] audit: type=1400 audit(2000000038.323:34663): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.367016][ T28] audit: type=1400 audit(2000000038.342:34664): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.422552][T28294] netlink: 'syz.4.13667': attribute type 27 has an invalid length. [ 261.458327][T28301] netlink: 'syz.0.13670': attribute type 9 has an invalid length. [ 261.467087][T28301] netlink: 'syz.0.13670': attribute type 6 has an invalid length. [ 261.508555][T28309] x_tables: duplicate entry at hook 3 [ 261.835934][T28368] netlink: 'syz.1.13703': attribute type 27 has an invalid length. [ 261.960813][T28399] netlink: 'syz.0.13728': attribute type 1 has an invalid length. [ 261.975354][T28399] netlink: 'syz.0.13728': attribute type 2 has an invalid length. [ 262.169297][T28433] netlink: 'syz.3.13734': attribute type 1 has an invalid length. [ 262.210744][T28440] sock: sock_timestamping_bind_phc: sock not bind to device [ 264.134227][T28741] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 264.154903][T28747] device wg1 entered promiscuous mode [ 264.461717][T28854] __nla_validate_parse: 96 callbacks suppressed [ 264.461736][T28854] netlink: 116 bytes leftover after parsing attributes in process `syz.1.13953'. [ 264.503605][T28868] netlink: 116 bytes leftover after parsing attributes in process `syz.3.13959'. [ 264.521029][T28870] device wg1 entered promiscuous mode [ 265.318305][T28905] netlink: 116 bytes leftover after parsing attributes in process `syz.4.13967'. [ 265.446404][T28954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14002'. [ 265.511039][T28972] xt_TPROXY: Can be used only with -p tcp or -p udp [ 265.554303][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14010'. [ 265.608789][T29010] validate_nla: 1 callbacks suppressed [ 265.608806][T29010] netlink: 'syz.2.14020': attribute type 15 has an invalid length. [ 265.649938][T29010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14020'. [ 265.737606][T29051] netlink: 'syz.0.14042': attribute type 15 has an invalid length. [ 265.745520][T29051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14042'. [ 265.819804][T29078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 265.849634][T29088] device macsec0 entered promiscuous mode [ 265.875182][T29097] netlink: 'syz.4.14061': attribute type 15 has an invalid length. [ 265.894902][T29097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14061'. [ 265.964080][T29125] netlink: 'syz.2.14080': attribute type 5 has an invalid length. [ 266.068603][T29162] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 266.084417][T29162] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 266.101995][T29168] device macsec0 entered promiscuous mode [ 266.161127][T29195] netlink: 'syz.4.14112': attribute type 3 has an invalid length. [ 266.182611][T29203] netlink: 'syz.1.14114': attribute type 5 has an invalid length. [ 266.220344][ T28] kauditd_printk_skb: 595 callbacks suppressed [ 266.220357][ T28] audit: type=1400 audit(2000000043.262:35260): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.221599][T29215] xt_TCPMSS: Only works on TCP SYN packets [ 266.231914][ T28] audit: type=1400 audit(2000000043.262:35261): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.250988][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 266.257001][T29217] device macsec0 entered promiscuous mode [ 266.288561][ T28] audit: type=1400 audit(2000000043.290:35262): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.347248][T29230] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 266.364974][ T28] audit: type=1326 audit(2000000043.290:35263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.14124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 266.394152][ T28] audit: type=1326 audit(2000000043.290:35264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.14124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 266.425665][T29253] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 266.432999][T29249] netlink: 'syz.3.14138': attribute type 5 has an invalid length. [ 266.440645][ T28] audit: type=1326 audit(2000000043.290:35265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.14124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 266.463243][T29257] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 266.465009][ T28] audit: type=1326 audit(2000000043.290:35266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.14124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 266.477558][T29257] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 266.501935][ T28] audit: type=1326 audit(2000000043.290:35267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.0.14124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f500af8e929 code=0x7ffc0000 [ 266.534705][T29261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14145'. [ 266.535371][ T28] audit: type=1400 audit(2000000043.290:35268): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.596651][ T28] audit: type=1400 audit(2000000043.318:35269): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.637401][T29289] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 266.672482][T29300] xt_TCPMSS: Only works on TCP SYN packets [ 266.680145][T29304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14165'. [ 266.719092][T29317] tc_dump_action: action bad kind [ 266.817519][T29348] netlink: 'syz.0.14186': attribute type 9 has an invalid length. [ 266.860285][T29360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 266.891870][T29360] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 266.912457][T29360] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 266.929633][T29374] xt_TCPMSS: Only works on TCP SYN packets [ 267.047132][T29409] xt_ecn: cannot match TCP bits for non-tcp packets [ 267.069734][T29415] netlink: 'syz.4.14221': attribute type 9 has an invalid length. [ 267.188749][T29459] netlink: 'syz.2.14238': attribute type 9 has an invalid length. [ 267.400894][T29533] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 267.542229][T29589] xt_CT: No such helper "snmp_trap" [ 267.750870][T29659] IPv6: sit5: Disabled Multicast RS [ 267.756348][T29661] xt_CT: No such helper "snmp_trap" [ 267.782275][T29663] bridge0: port 1(veth1_macvtap) entered blocking state [ 267.798188][T29663] bridge0: port 1(veth1_macvtap) entered disabled state [ 267.937632][T29700] xt_TCPMSS: Only works on TCP SYN packets [ 267.960232][ T6738] ------------[ cut here ]------------ [ 267.965698][ T6738] kernel BUG at fs/buffer.c:2714! [ 267.985920][ T6738] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 267.992015][ T6738] CPU: 1 PID: 6738 Comm: kmmpd-loop0 Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 268.001897][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.011963][ T6738] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 268.017336][ T6738] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d8 38 e8 ff e9 b0 fe ff ff e8 2e df a3 ff 0f 0b e8 27 df a3 ff <0f> 0b e8 20 df a3 ff 0f 0b e8 19 df a3 ff 0f 0b e8 12 df a3 ff 0f [ 268.036940][ T6738] RSP: 0018:ffffc90011597ca0 EFLAGS: 00010293 [ 268.043004][ T6738] RAX: ffffffff81cc1849 RBX: 0000000000000000 RCX: ffff88811eb23cc0 [ 268.047559][T29731] xt_TCPMSS: Only works on TCP SYN packets [ 268.050971][ T6738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.050986][ T6738] RBP: ffffc90011597cf0 R08: dffffc0000000000 R09: ffffed1023131c6a [ 268.072673][ T6738] R10: ffffed1023131c6a R11: 1ffff11023131c69 R12: 0000000000000000 [ 268.080641][ T6738] R13: 1ffff11023131c69 R14: ffff88811898e348 R15: 0000000000003801 [ 268.088613][ T6738] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 268.097537][ T6738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.101519][T29737] bridge0: port 2(veth1_macvtap) entered blocking state [ 268.104114][ T6738] CR2: 0000001b2d81eff8 CR3: 0000000106341000 CR4: 00000000003506a0 [ 268.111117][T29737] bridge0: port 2(veth1_macvtap) entered disabled state [ 268.118973][ T6738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 268.118987][ T6738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 268.141794][ T6738] Call Trace: [ 268.145066][ T6738] [ 268.147987][ T6738] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 268.153776][ T6738] submit_bh+0x1f/0x30 [ 268.157818][ T6738] write_mmp_block_thawed+0x34a/0x4c0 [ 268.163166][ T6738] ? read_mmp_block+0x6d0/0x6d0 [ 268.168000][ T6738] ? __cfi_process_timeout+0x10/0x10 [ 268.173262][ T6738] write_mmp_block+0x138/0x2b0 [ 268.178000][ T6738] kmmpd+0x3ce/0x950 [ 268.181870][ T6738] kthread+0x281/0x320 [ 268.185910][ T6738] ? __cfi_kmmpd+0x10/0x10 [ 268.190299][ T6738] ? __cfi_kthread+0x10/0x10 [ 268.194858][ T6738] ret_from_fork+0x1f/0x30 [ 268.199246][ T6738] [ 268.202244][ T6738] Modules linked in: [ 268.206926][ T6738] ---[ end trace 0000000000000000 ]--- [ 268.212432][ T6738] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 268.218093][ T6738] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d8 38 e8 ff e9 b0 fe ff ff e8 2e df a3 ff 0f 0b e8 27 df a3 ff <0f> 0b e8 20 df a3 ff 0f 0b e8 19 df a3 ff 0f 0b e8 12 df a3 ff 0f [ 268.237856][ T6738] RSP: 0018:ffffc90011597ca0 EFLAGS: 00010293 [ 268.243938][ T6738] RAX: ffffffff81cc1849 RBX: 0000000000000000 RCX: ffff88811eb23cc0 [ 268.251978][ T6738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.259957][ T6738] RBP: ffffc90011597cf0 R08: dffffc0000000000 R09: ffffed1023131c6a [ 268.267914][ T6738] R10: ffffed1023131c6a R11: 1ffff11023131c69 R12: 0000000000000000 [ 268.275937][ T6738] R13: 1ffff11023131c69 R14: ffff88811898e348 R15: 0000000000003801 [ 268.283914][ T6738] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 268.292880][ T6738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.299449][ T6738] CR2: 0000001b2d81eff8 CR3: 0000000006e0f000 CR4: 00000000003506a0 [ 268.307767][ T6738] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 268.315782][ T6738] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 268.323761][ T6738] Kernel panic - not syncing: Fatal exception [ 268.330006][ T6738] Kernel Offset: disabled [ 268.334305][ T6738] Rebooting in 86400 seconds..