last executing test programs: 571.091993ms ago: executing program 2 (id=7572): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x3, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 543.323525ms ago: executing program 2 (id=7575): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x73e3f6507bbf3231, 0x1}, 0x20) 492.214109ms ago: executing program 2 (id=7580): r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) 481.99726ms ago: executing program 2 (id=7586): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020) 440.679774ms ago: executing program 2 (id=7589): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 395.021057ms ago: executing program 2 (id=7596): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 251.297209ms ago: executing program 0 (id=7617): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000740)={[{@nodots}, {}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffff9}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@discard}, {@dots}, {@fat=@sys_immutable}, {@fat=@errors_remount}, {@fat=@dos1xfloppy}]}, 0x21, 0x24b, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x02\x00', 0x0) 226.290671ms ago: executing program 0 (id=7621): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000cd640600680012800b000100627269646765000058000280050016000000000005002e"], 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0xe4) 225.845281ms ago: executing program 4 (id=7622): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000440)) 200.090193ms ago: executing program 0 (id=7624): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x3, 0x4, 0x0, @empty, @empty, 0x20, 0x7, 0xfffc0000, 0x2}}) 199.656433ms ago: executing program 4 (id=7626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_delrule={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FRA_SRC={0x14, 0x2, @local}]}, 0x44}}, 0x0) 183.677295ms ago: executing program 4 (id=7628): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0) 172.270936ms ago: executing program 1 (id=7629): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000c40)=@ethtool_per_queue_op={0x16, 0xe, [0x8, 0x7, 0x9, 0x70, 0x1, 0xffffffff, 0x5, 0xa, 0x5, 0x9, 0x5, 0x2, 0x3, 0xeac5, 0xea9f, 0xfff, 0x1, 0x70, 0xb58f41d, 0x7ff, 0x7, 0x7fffffff, 0x14, 0x24e, 0x10001, 0xf, 0x9, 0x6, 0xc4, 0x9, 0x61cb, 0x1f34d744, 0x7, 0x9, 0xc6, 0xfffffffe, 0x0, 0x1, 0x3, 0x270, 0xb5fd, 0x8001, 0xa0, 0x1, 0x8, 0x2008000, 0xfff, 0x7, 0x0, 0x3, 0x7fffffff, 0x2, 0xfffffffe, 0x3, 0xfffffffe, 0x2, 0x800, 0x8, 0x3ff, 0x4, 0x8, 0x100, 0xd, 0x8000, 0x3, 0x2, 0x1, 0x800, 0x3, 0x5, 0xfffffffe, 0x7a, 0xc, 0x0, 0x1000, 0xffff, 0x4, 0x10000, 0x100, 0x2, 0x5, 0x2, 0xb86, 0x8, 0x5fb0, 0x4, 0x40, 0x0, 0xe, 0x3, 0x5, 0xffffe8bb, 0x1, 0x7fff, 0x7, 0x8c81, 0x6, 0x1, 0x8, 0x2, 0x4, 0x10001, 0xff, 0x80000000, 0xfffffc00, 0x9, 0x10000, 0x40, 0x9, 0x9, 0xa3c, 0x8, 0x10, 0xa, 0x10, 0xec, 0x4, 0x8fe7, 0x0, 0xe, 0xfffffffc, 0x5, 0x3, 0x81, 0x36, 0x6, 0xae5, 0xe]}}) 161.038326ms ago: executing program 0 (id=7630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000000000008000100000000001c000200010081ffffff"], 0x44}}, 0x0) 160.709607ms ago: executing program 3 (id=7631): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) preadv(r0, &(0x7f0000003300)=[{0x0}, {&(0x7f0000002040)=""/92, 0x5c}], 0x2, 0xfff, 0x8) 152.279097ms ago: executing program 4 (id=7632): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002b40)={0x1c, 0x76, 0x31f, 0x0, 0x2000, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xcd}]}, 0x1c}], 0x1}, 0x0) 129.393009ms ago: executing program 1 (id=7633): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 129.266449ms ago: executing program 0 (id=7634): setreuid(0x0, 0xee00) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 129.067329ms ago: executing program 0 (id=7635): prctl$PR_SET_THP_DISABLE(0x29, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 101.453201ms ago: executing program 3 (id=7636): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x1d8, 0x1d8, 0x108, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [], [], 'macvtap0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 101.306471ms ago: executing program 4 (id=7637): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 101.201461ms ago: executing program 1 (id=7638): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 101.110061ms ago: executing program 4 (id=7639): select(0x64, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) syz_clone3(&(0x7f0000000300)={0x24000080, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 94.102282ms ago: executing program 3 (id=7640): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfdfe, @any, 0x0, 0x1}, 0xe) 79.944973ms ago: executing program 3 (id=7641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@getlink={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 79.699013ms ago: executing program 1 (id=7642): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x98, 0x378, 0x2d8, 0x0, 0x2d8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 15.000858ms ago: executing program 3 (id=7643): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x348, 0x8, 0x7f02ae, 0x0, 0x200, 0x418, 0x2e8, 0x2e8, 0x418, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'veth1_vlan\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 14.812748ms ago: executing program 1 (id=7644): timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_delete(r0) 14.636228ms ago: executing program 3 (id=7645): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffd, 0x6, 0xa, 0x100f6, &(0x7f0000000e80)="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"}) 0s ago: executing program 1 (id=7646): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x41b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfffc}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) kernel console output (not intermixed with test programs): 182.052090][ T294] usb 3-1: config 3 interface 3 has no altsetting 0 [ 182.116316][ T294] usb 3-1: config 3 interface 66 has no altsetting 0 [ 182.116647][ T28] audit: type=1400 audit(1755428962.027:264): avc: denied { write } for pid=7540 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.153234][ T294] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 182.180851][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.202996][ T294] usb 3-1: Product: syz [ 182.207231][ T294] usb 3-1: Manufacturer: syz [ 182.212120][ T294] usb 3-1: SerialNumber: syz [ 182.333121][ T28] audit: type=1400 audit(1755428962.267:265): avc: denied { write } for pid=7552 comm="syz.3.3467" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.455296][ T294] hub 3-1:3.3: Invalid hub with more than one config or interface [ 182.473851][ T294] hub: probe of 3-1:3.3 failed with error -22 [ 182.491643][ T294] hub 3-1:3.66: Invalid hub with more than one config or interface [ 182.506427][ T294] hub: probe of 3-1:3.66 failed with error -22 [ 182.531301][ T294] usb 3-1: USB disconnect, device number 72 [ 182.637232][ T28] audit: type=1326 audit(1755428962.544:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.3.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 182.701996][ T28] audit: type=1326 audit(1755428962.544:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.3.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 182.777185][ T28] audit: type=1326 audit(1755428962.544:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.3.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 183.087109][ T28] audit: type=1400 audit(1755428962.959:269): avc: denied { write } for pid=7588 comm="syz.2.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.146466][ T28] audit: type=1400 audit(1755428962.987:270): avc: denied { nlmsg_write } for pid=7588 comm="syz.2.3485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.572270][ T28] audit: type=1400 audit(1755428963.402:271): avc: denied { ioctl } for pid=7606 comm="syz.2.3494" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.645125][ T7609] netlink: 'syz.2.3495': attribute type 5 has an invalid length. [ 184.236103][ T28] audit: type=1400 audit(1755428964.011:272): avc: denied { read } for pid=7629 comm="syz.4.3505" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.276934][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3506'. [ 184.320890][ T7621] loop2: detected capacity change from 0 to 32768 [ 184.402372][ T7638] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3509'. [ 184.473742][ T7644] x_tables: duplicate underflow at hook 2 [ 184.712415][ T7666] Illegal XDP return value 4294967274 on prog (id 407) dev N/A, expect packet loss! [ 184.823243][ T7539] loop1: detected capacity change from 0 to 262144 [ 184.855347][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3530'. [ 184.866636][ T7539] F2FS-fs (loop1): Found nat_bits in checkpoint [ 185.009096][ T7539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.669911][ T347] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 185.823063][ T7739] xt_socket: unknown flags 0x40 [ 185.864950][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 185.871833][ T347] usb 1-1: config 8 has an invalid interface number: 141 but max is 0 [ 185.892518][ T347] usb 1-1: config 8 has no interface number 0 [ 185.913679][ T347] usb 1-1: config 8 interface 141 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 185.944808][ T347] usb 1-1: config 8 interface 141 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 185.973056][ T347] usb 1-1: config 8 interface 141 has no altsetting 0 [ 185.987441][ T347] usb 1-1: New USB device found, idVendor=0403, idProduct=bcd8, bcdDevice=bb.08 [ 186.012964][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.023877][ T347] usb 1-1: Product: syz [ 186.038455][ T347] usb 1-1: Manufacturer: syz [ 186.043459][ T347] usb 1-1: SerialNumber: syz [ 186.064154][ T7721] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.082080][ T7721] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.090610][ T347] ftdi_sio 1-1:8.141: FTDI USB Serial Device converter detected [ 186.111115][ T347] ftdi_sio ttyUSB0: unknown device type: 0xbb08 [ 186.312740][ T7769] device sit0 entered promiscuous mode [ 186.326056][ T347] usb 1-1: USB disconnect, device number 72 [ 186.341228][ T7769] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 186.345344][ T347] ftdi_sio 1-1:8.141: device disconnected [ 186.421320][ T7769] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3572'. [ 186.679755][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3584'. [ 186.683274][ T7794] cgroup: Unexpected value for 'cpuset_v2_mode' [ 187.033648][ T7827] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 187.096307][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3601'. [ 187.122022][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'. [ 187.131430][ T7757] loop1: detected capacity change from 0 to 131072 [ 187.139086][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3601'. [ 187.176794][ T7757] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.205505][ T7698] loop2: detected capacity change from 0 to 262144 [ 187.241549][ T7698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.305949][ T7757] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 187.369523][ T7851] netlink: 'syz.4.3607': attribute type 13 has an invalid length. [ 187.424565][ T7698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.432589][ T7851] gretap0: refused to change device tx_queue_len [ 187.450690][ T7851] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 187.850493][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 187.850512][ T28] audit: type=1400 audit(1755428967.352:281): avc: denied { create } for pid=7893 comm="syz.1.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.900444][ T7901] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3633'. [ 187.909994][ T28] audit: type=1400 audit(1755428967.352:282): avc: denied { write } for pid=7893 comm="syz.1.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.987534][ T28] audit: type=1400 audit(1755428967.408:283): avc: denied { append } for pid=7899 comm="syz.1.3631" name="userfaultfd" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.016579][ T7910] IPv6: sit1: Disabled Multicast RS [ 188.163083][ T28] audit: type=1400 audit(1755428967.648:284): avc: denied { accept } for pid=7923 comm="syz.0.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 188.213363][ T7926] netlink: 'syz.0.3645': attribute type 3 has an invalid length. [ 188.281197][ T7930] netlink: 'syz.3.3647': attribute type 13 has an invalid length. [ 188.296477][ T7930] gretap0: refused to change device tx_queue_len [ 188.337172][ T7930] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 188.420558][ T28] audit: type=1326 audit(1755428967.878:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.3.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 188.493718][ T28] audit: type=1326 audit(1755428967.925:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.3.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 188.595299][ T28] audit: type=1326 audit(1755428967.925:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7939 comm="syz.3.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 188.674494][ T28] audit: type=1326 audit(1755428968.008:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 188.767099][ T28] audit: type=1326 audit(1755428968.008:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 188.827072][ T28] audit: type=1326 audit(1755428968.017:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 188.833874][ T7985] loop1: detected capacity change from 0 to 256 [ 188.877400][ T7989] kernel profiling enabled (shift: 5) [ 188.935512][ T7985] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 189.203059][ T8027] loop2: detected capacity change from 0 to 512 [ 189.227793][ T8027] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 189.324030][ T336] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 189.766345][ T8083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.917651][ T8091] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 189.941999][ T8093] 9pnet_fd: Insufficient options for proto=fd [ 190.314811][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'. [ 190.349201][ T8124] device bridge_slave_1 left promiscuous mode [ 190.380272][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.422466][ T8124] device bridge_slave_0 left promiscuous mode [ 190.441476][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.577025][ T8143] netlink: 'syz.1.3749': attribute type 12 has an invalid length. [ 190.660755][ T8158] netlink: 'syz.0.3755': attribute type 4 has an invalid length. [ 190.697153][ T8158] netlink: 'syz.0.3755': attribute type 5 has an invalid length. [ 190.725998][ T8158] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3755'. [ 190.773382][ T8172] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 190.980042][ T8200] sock: sock_timestamping_bind_phc: sock not bind to device [ 191.023412][ T8207] futex_wake_op: syz.0.3780 tries to shift op by 32; fix this program [ 191.365036][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 191.396800][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 191.412240][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 191.449368][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 191.481107][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 191.514204][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 191.543289][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 191.568370][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3796'. [ 191.740161][ T8260] syz.4.3806 (8260): /proc/8259/oom_adj is deprecated, please use /proc/8259/oom_score_adj instead. [ 191.800424][ T8266] netlink: 'syz.0.3810': attribute type 1 has an invalid length. [ 191.832166][ T8266] netlink: 'syz.0.3810': attribute type 2 has an invalid length. [ 192.089285][ T8301] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 192.236273][ T8318] device bridge_slave_1 left promiscuous mode [ 192.242639][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.295121][ T8318] device bridge_slave_0 left promiscuous mode [ 192.307134][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.664839][ T8377] xt_socket: unknown flags 0x4c [ 192.924861][ T8413] xt_l2tp: invalid flags combination: 4 [ 192.978472][ T8420] device bridge_slave_1 left promiscuous mode [ 192.998066][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.022667][ T8420] device bridge_slave_0 left promiscuous mode [ 193.031629][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.301882][ T28] kauditd_printk_skb: 5752 callbacks suppressed [ 193.301902][ T28] audit: type=1326 audit(1755428972.337:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8203 comm="syz.2.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa653f8eb69 code=0x50000 [ 193.330674][ T8460] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.351419][ T8460] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 193.360314][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.360705][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.367904][ T8460] audit: backlog limit exceeded [ 193.376745][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.383923][ T284] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 193.394952][ T285] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 193.394976][ T285] audit: backlog limit exceeded [ 193.620829][ T8485] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3917' sets config #2 [ 193.662732][ T8484] usb usb1: usbfs: process 8484 (syz.0.3916) did not claim interface 4 before use [ 193.768659][ T8496] device vti0 entered promiscuous mode [ 193.898586][ T8518] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 193.963376][ T8527] x_tables: duplicate underflow at hook 3 [ 194.721572][ T8670] device bridge0 entered promiscuous mode [ 194.732188][ T8673] TCP: TCP_TX_DELAY enabled [ 194.769059][ T8679] device bridge_slave_1 left promiscuous mode [ 194.791860][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.801317][ T8684] xt_TCPMSS: Only works on TCP SYN packets [ 194.822979][ T8679] device bridge_slave_0 left promiscuous mode [ 194.846776][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.407762][ T8800] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4072' sets config #9 [ 195.608824][ T8828] netlink: 'syz.3.4086': attribute type 11 has an invalid length. [ 196.001968][ T8882] __nla_validate_parse: 35 callbacks suppressed [ 196.002019][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4113'. [ 197.416468][ T8905] netlink: 'syz.2.4124': attribute type 1 has an invalid length. [ 197.515779][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 197.568136][ T8923] syz.3.4134 (8923) used greatest stack depth: 21440 bytes left [ 197.603831][ T8934] netlink: 'syz.3.4138': attribute type 5 has an invalid length. [ 197.661271][ T8941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4142'. [ 197.744037][ T8949] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 197.760959][ T347] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 197.830950][ T8961] random: crng reseeded on system resumption [ 197.876049][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4156'. [ 197.986318][ T347] usb 2-1: Using ep0 maxpacket: 16 [ 198.001928][ T347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.007109][ T8988] xt_connbytes: Forcing CT accounting to be enabled [ 198.025816][ T347] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.037845][ T8988] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 198.049109][ T347] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 198.083864][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.104560][ T347] usb 2-1: Product: syz [ 198.104896][ T9001] netlink: 'syz.0.4172': attribute type 5 has an invalid length. [ 198.110284][ T347] usb 2-1: Manufacturer: syz [ 198.123659][ T347] usb 2-1: SerialNumber: syz [ 198.137245][ T347] r8152-cfgselector 2-1: config 0 descriptor?? [ 198.235580][ T9020] binfmt_misc: register: failed to install interpreter file ./file0 [ 198.246418][ T9022] @: renamed from bond_slave_0 [ 198.291806][ T294] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 198.501110][ T294] usb 3-1: config 0 has an invalid interface number: 234 but max is 0 [ 198.524121][ T294] usb 3-1: config 0 has no interface number 0 [ 198.542586][ T294] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=b7.44 [ 198.560474][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.570563][ T294] usb 3-1: Product: syz [ 198.587650][ T294] usb 3-1: Manufacturer: syz [ 198.600162][ T294] usb 3-1: SerialNumber: syz [ 198.610255][ T347] usb 2-1: USB disconnect, device number 68 [ 198.617617][ T294] usb 3-1: config 0 descriptor?? [ 198.628596][ T294] usb 3-1: bad CDC descriptors [ 198.634324][ T294] usb 3-1: unsupported MDLM descriptors [ 198.748960][ T9103] netlink: 'syz.3.4223': attribute type 6 has an invalid length. [ 198.864478][ T294] usb 3-1: USB disconnect, device number 73 [ 198.910426][ T9126] device bridge1 entered promiscuous mode [ 198.954713][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4238'. [ 199.100884][ T28] kauditd_printk_skb: 1922 callbacks suppressed [ 199.100903][ T28] audit: type=1400 audit(1755428977.736:7963): avc: denied { read write } for pid=9158 comm="syz.0.4250" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.137374][ T28] audit: type=1400 audit(1755428977.773:7964): avc: denied { open } for pid=9158 comm="syz.0.4250" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.175586][ T28] audit: type=1400 audit(1755428977.801:7965): avc: denied { ioctl } for pid=9158 comm="syz.0.4250" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.262098][ T28] audit: type=1400 audit(1755428977.865:7966): avc: denied { setopt } for pid=9171 comm="syz.1.4257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.289490][ T9175] bridge0: port 3(veth0_to_bridge) entered blocking state [ 199.312096][ T9175] bridge0: port 3(veth0_to_bridge) entered disabled state [ 199.321346][ T9175] device veth0_to_bridge entered promiscuous mode [ 199.328371][ T9175] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.342174][ T9175] bridge0: port 3(veth0_to_bridge) entered blocking state [ 199.350316][ T9175] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 199.370334][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'. [ 199.466808][ T28] audit: type=1400 audit(1755428978.078:7967): avc: denied { read write } for pid=9194 comm="syz.4.4268" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 199.518584][ T28] audit: type=1400 audit(1755428978.078:7968): avc: denied { open } for pid=9194 comm="syz.4.4268" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 199.753553][ T9222] xt_CT: No such helper "syz0" [ 199.808141][ T28] audit: type=1400 audit(1755428978.382:7969): avc: denied { view } for pid=9227 comm="syz.3.4285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 199.852686][ T9232] xt_ecn: cannot match TCP bits for non-tcp packets [ 199.879778][ T9240] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4289'. [ 199.889775][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4289'. [ 199.900019][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4289'. [ 199.934424][ T9243] device vlan0 entered promiscuous mode [ 199.943207][ T9246] loop1: detected capacity change from 0 to 256 [ 199.964105][ T28] audit: type=1400 audit(1755428978.539:7970): avc: denied { mounton } for pid=9244 comm="syz.1.4292" path="/908/file0" dev="tmpfs" ino=4637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 199.964557][ T9246] exfat: Unknown parameter 'utf8' [ 199.995165][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4289'. [ 200.211334][ T28] audit: type=1400 audit(1755428978.770:7971): avc: denied { create } for pid=9277 comm="syz.1.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.248162][ T28] audit: type=1400 audit(1755428978.788:7972): avc: denied { read } for pid=9277 comm="syz.1.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.286387][ T9284] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.538709][ T9329] loop1: detected capacity change from 0 to 1024 [ 200.581879][ T9329] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 200.614585][ T9329] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 200.640915][ T9329] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.4332: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 200.693464][ T9329] EXT4-fs (loop1): no journal found [ 200.706680][ T9329] EXT4-fs (loop1): can't get journal size [ 200.726581][ T9329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 200.783085][ T283] EXT4-fs (loop1): unmounting filesystem. [ 200.838609][ T9372] xt_TCPMSS: Only works on TCP SYN packets [ 200.976680][ T9400] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4367'. [ 201.122921][ T9426] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 201.192253][ T9438] device bridge0 entered promiscuous mode [ 201.423363][ T9476] x_tables: duplicate entry at hook 1 [ 201.529167][ T9492] IPv6: Can't replace route, no match found [ 201.541367][ T9494] __nla_validate_parse: 3 callbacks suppressed [ 201.541388][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'. [ 201.737162][ T347] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 201.769880][ T9519] loop2: detected capacity change from 0 to 512 [ 201.802128][ T9519] EXT4-fs (loop2): orphan cleanup on readonly fs [ 201.809251][ T9519] EXT4-fs error (device loop2): ext4_quota_enable:7009: inode #4: comm syz.2.4426: iget: special inode unallocated [ 201.824233][ T9519] EXT4-fs error (device loop2): ext4_quota_enable:7012: comm syz.2.4426: Bad quota inode: 4, type: 1 [ 201.828012][ T9524] netlink: 600 bytes leftover after parsing attributes in process `syz.4.4429'. [ 201.844893][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4429'. [ 201.854333][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4429'. [ 201.857221][ T9519] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.863602][ T9524] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4429'. [ 201.887911][ T9519] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 201.906699][ T9519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.951069][ T282] EXT4-fs (loop2): unmounting filesystem. [ 201.957265][ T347] usb 2-1: Using ep0 maxpacket: 16 [ 201.975053][ T347] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 202.006515][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.022515][ T347] usb 2-1: Product: syz [ 202.027096][ T347] usb 2-1: Manufacturer: syz [ 202.033979][ T347] usb 2-1: SerialNumber: syz [ 202.039767][ T347] usb 2-1: config 0 descriptor?? [ 202.047219][ T347] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 202.055551][ T347] usb 2-1: Detected FT232H [ 202.074632][ T9548] xt_hashlimit: size too large, truncated to 1048576 [ 202.089214][ T9548] xt_hashlimit: invalid rate [ 202.153687][ T9562] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4447'. [ 202.332956][ T2086] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 202.348806][ T9592] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 202.482373][ T347] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 202.500247][ T347] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 202.517390][ T347] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 202.539822][ T347] usb 2-1: USB disconnect, device number 69 [ 202.546765][ T2086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 202.565885][ T347] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 202.580160][ T2086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.595781][ T2086] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 202.609710][ T347] ftdi_sio 2-1:0.0: device disconnected [ 202.628368][ T2086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.638370][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4483'. [ 202.656259][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4483'. [ 202.667137][ T2086] usb 5-1: config 0 descriptor?? [ 202.675038][ T9542] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 202.864672][ T9666] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4497'. [ 202.911292][ T2086] usbhid 5-1:0.0: can't add hid device: -71 [ 202.923939][ T2086] usbhid: probe of 5-1:0.0 failed with error -71 [ 202.955174][ T2086] usb 5-1: USB disconnect, device number 73 [ 202.969645][ T9674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4503'. [ 203.196324][ T9719] netlink: 'syz.0.4524': attribute type 9 has an invalid length. [ 203.225281][ T9719] netlink: 'syz.0.4524': attribute type 7 has an invalid length. [ 203.236198][ T9719] netlink: 'syz.0.4524': attribute type 8 has an invalid length. [ 203.251969][ T9719] netlink: 'syz.0.4524': attribute type 13 has an invalid length. [ 203.361328][ T9739] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 203.462051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.475735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.491567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.504771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.517243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.529437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.541617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.553863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.566192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.370069][ T9821] loop1: detected capacity change from 0 to 16 [ 204.435399][ T9821] erofs: (device loop1): mounted with root inode @ nid 36. [ 204.584599][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 204.584615][ T28] audit: type=1400 audit(1755428982.794:8012): avc: denied { mount } for pid=9835 comm="syz.1.4580" name="/" dev="incremental-fs" ino=4846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 204.673267][ T28] audit: type=1400 audit(1755428982.831:8013): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 204.862718][ T9729] loop2: detected capacity change from 0 to 131072 [ 205.015858][ T9859] sock: sock_timestamping_bind_phc: sock not bind to device [ 205.031747][ T9729] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.222219][ T9729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 205.322726][ T28] audit: type=1400 audit(1755428983.477:8014): avc: denied { read write } for pid=9726 comm="syz.2.4529" name="file2" dev="loop2" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.554763][ T28] audit: type=1400 audit(1755428983.523:8015): avc: denied { open } for pid=9726 comm="syz.2.4529" path="/779/file0/file2" dev="loop2" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.783453][ T9903] loop1: detected capacity change from 0 to 256 [ 205.888683][ T9903] FAT-fs (loop1): Directory bread(block 64) failed [ 205.923767][ T9903] FAT-fs (loop1): Directory bread(block 65) failed [ 205.963098][ T9903] FAT-fs (loop1): Directory bread(block 66) failed [ 205.971928][ T9903] FAT-fs (loop1): Directory bread(block 67) failed [ 205.992206][ T9913] raw_sendmsg: syz.0.4618 forgot to set AF_INET. Fix it! [ 206.092509][ T9903] FAT-fs (loop1): Directory bread(block 68) failed [ 206.103652][ T9903] FAT-fs (loop1): Directory bread(block 69) failed [ 206.111753][ T9903] FAT-fs (loop1): Directory bread(block 70) failed [ 206.135865][ T9903] FAT-fs (loop1): Directory bread(block 71) failed [ 206.149201][ T9903] FAT-fs (loop1): Directory bread(block 72) failed [ 206.181768][ T9903] FAT-fs (loop1): Directory bread(block 73) failed [ 206.215339][ T28] audit: type=1400 audit(1755428984.308:8016): avc: denied { mount } for pid=9902 comm="syz.1.4613" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 206.352483][ T28] audit: type=1400 audit(1755428984.409:8017): avc: denied { ioctl } for pid=9919 comm="syz.4.4621" path="socket:[45103]" dev="sockfs" ino=45103 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.535951][ T28] audit: type=1400 audit(1755428984.502:8018): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 206.978587][ T9962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.044620][ T9965] loop1: detected capacity change from 0 to 128 [ 207.072417][ T9962] device bridge1 left promiscuous mode [ 207.297693][ T9982] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.417094][ T28] audit: type=1400 audit(1755428985.415:8019): avc: denied { write } for pid=9990 comm="syz.1.4656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.460933][ T9998] __nla_validate_parse: 9 callbacks suppressed [ 207.460956][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4658'. [ 207.661863][ T28] audit: type=1400 audit(1755428985.637:8020): avc: denied { create } for pid=10008 comm="syz.0.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.771934][ T28] audit: type=1400 audit(1755428985.674:8021): avc: denied { getopt } for pid=10008 comm="syz.0.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.797071][T10016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.809801][T10016] device vlan0 left promiscuous mode [ 207.889488][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.172611][ T19] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 208.389318][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 208.402108][ T19] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 208.436925][ T19] usb 4-1: config 4 has no interface number 0 [ 208.444467][T10057] netlink: 'syz.4.4688': attribute type 3 has an invalid length. [ 208.466110][ T19] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.533827][ T19] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.555872][ T19] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.573504][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.590944][T10023] loop1: detected capacity change from 0 to 40427 [ 208.615208][ T19] hub 4-1:4.128: USB hub found [ 208.681662][T10023] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 208.705917][T10023] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 208.717829][T10023] F2FS-fs (loop1): invalid crc value [ 208.725501][T10023] F2FS-fs (loop1): Found nat_bits in checkpoint [ 208.779332][ C1] net_ratelimit: 82868 callbacks suppressed [ 208.779353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.796639][T10023] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 208.797922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.805483][T10023] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.817129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.837091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.842953][ T19] hub 4-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 208.849777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.871046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.883328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.895758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.908318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.920563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.966372][T10078] incfs: Error accessing: ./file0/file0. [ 209.015566][T10078] incfs: mount failed -2 [ 209.234459][ T294] usb 4-1: USB disconnect, device number 74 [ 209.440911][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4708'. [ 209.465558][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'. [ 209.537920][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'. [ 209.658298][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4713'. [ 209.706971][T10120] loop2: detected capacity change from 0 to 512 [ 209.798370][T10120] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.814657][T10120] ext4 filesystem being mounted at /806/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.857580][T10120] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.4718: corrupted xattr block 19 [ 209.901549][T10120] EXT4-fs (loop2): Remounting filesystem read-only [ 209.937920][T10120] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 209.954446][T10120] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.4718: corrupted xattr block 19 [ 209.967658][T10120] EXT4-fs (loop2): Remounting filesystem read-only [ 209.974809][T10120] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 209.985362][T10120] EXT4-fs error (device loop2): ext4_xattr_block_find:1837: inode #15: comm syz.2.4718: corrupted xattr block 19 [ 209.998344][T10120] EXT4-fs (loop2): Remounting filesystem read-only [ 210.047964][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 210.047982][ T28] audit: type=1400 audit(1755428987.834:8031): avc: denied { create } for pid=10140 comm="syz.4.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.113348][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4730'. [ 210.124787][T10148] tmpfs: Unknown parameter '' [ 210.132053][ T282] EXT4-fs (loop2): unmounting filesystem. [ 210.165214][ T28] audit: type=1400 audit(1755428987.871:8032): avc: denied { getopt } for pid=10140 comm="syz.4.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.268320][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4733'. [ 210.368015][T10166] device xfrm0 entered promiscuous mode [ 210.415485][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4740'. [ 210.462320][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4740'. [ 210.498426][T10170] tc_dump_action: action bad kind [ 210.528772][T10174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.536098][T10174] IPv6: NLM_F_CREATE should be set when creating new route [ 210.543482][T10174] IPv6: NLM_F_CREATE should be set when creating new route [ 210.717921][ T28] audit: type=1326 audit(1755428988.452:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.0.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 210.810341][T10196] netlink: 'syz.3.4754': attribute type 1 has an invalid length. [ 210.881384][ T28] audit: type=1326 audit(1755428988.489:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.0.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 211.068554][ T28] audit: type=1326 audit(1755428988.489:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.0.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 211.167565][T10221] netlink: 'syz.4.4766': attribute type 4 has an invalid length. [ 211.286205][ T28] audit: type=1326 audit(1755428988.489:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.0.4752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 211.423584][T10239] loop2: detected capacity change from 0 to 16 [ 211.493819][T10239] erofs: (device loop2): mounted with root inode @ nid 36. [ 211.507973][ T28] audit: type=1400 audit(1755428989.034:8037): avc: denied { wake_alarm } for pid=10232 comm="syz.4.4774" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.573941][T10249] netlink: 'syz.3.4781': attribute type 1 has an invalid length. [ 211.597737][T10239] erofs: (device loop2): erofs_read_inode: bogus i_mode (0) @ nid 46 [ 211.642400][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4781'. [ 212.161633][ T28] audit: type=1400 audit(1755428989.800:8038): avc: denied { append } for pid=10298 comm="syz.0.4806" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 212.326971][ T28] audit: type=1400 audit(1755428989.874:8039): avc: denied { read } for pid=10302 comm="syz.1.4807" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 212.351182][ T28] audit: type=1400 audit(1755428989.874:8040): avc: denied { open } for pid=10302 comm="syz.1.4807" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 212.511293][T10326] x_tables: unsorted underflow at hook 1 [ 212.827819][T10351] xt_bpf: check failed: parse error [ 213.072630][T10377] x_tables: duplicate underflow at hook 2 [ 213.443464][T10409] netlink: 'syz.0.4859': attribute type 1 has an invalid length. [ 213.755416][T10435] x_tables: duplicate underflow at hook 2 [ 213.785693][T10439] __nla_validate_parse: 4 callbacks suppressed [ 213.788093][T10439] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4874'. [ 214.049892][T10455] loop2: detected capacity change from 0 to 256 [ 214.137403][T10455] FAT-fs (loop2): Directory bread(block 64) failed [ 214.189424][T10455] FAT-fs (loop2): Directory bread(block 65) failed [ 214.196219][T10455] FAT-fs (loop2): Directory bread(block 66) failed [ 214.207275][ C1] net_ratelimit: 95083 callbacks suppressed [ 214.207296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.225597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.237745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.249994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.262360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.274883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.287842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.300399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.311236][T10455] FAT-fs (loop2): Directory bread(block 67) failed [ 214.312896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.332334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.380109][T10455] FAT-fs (loop2): Directory bread(block 68) failed [ 214.441558][T10455] FAT-fs (loop2): Directory bread(block 69) failed [ 214.487113][T10455] FAT-fs (loop2): Directory bread(block 70) failed [ 214.550463][T10455] FAT-fs (loop2): Directory bread(block 71) failed [ 214.576860][T10494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.592436][T10455] FAT-fs (loop2): Directory bread(block 72) failed [ 214.633995][T10455] FAT-fs (loop2): Directory bread(block 73) failed [ 214.778572][T10511] xt_hashlimit: max too large, truncated to 1048576 [ 214.857008][T10511] xt_bpf: check failed: parse error [ 214.956243][T10523] netlink: 'syz.2.4915': attribute type 4 has an invalid length. [ 214.988489][T10523] netlink: 'syz.2.4915': attribute type 5 has an invalid length. [ 215.013739][T10523] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4915'. [ 215.288805][T10552] mmap: syz.3.4928 (10552): VmData 29077504 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 215.314754][T10556] netlink: 'syz.4.4929': attribute type 3 has an invalid length. [ 215.577596][T10578] loop1: detected capacity change from 0 to 16 [ 215.599480][T10580] netlink: 'syz.4.4943': attribute type 10 has an invalid length. [ 215.632723][T10578] erofs: (device loop1): mounted with root inode @ nid 36. [ 215.654070][T10580] netlink: 'syz.4.4943': attribute type 10 has an invalid length. [ 215.777469][T10586] usb usb8: usbfs: process 10586 (syz.1.4946) did not claim interface 0 before use [ 215.919376][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 215.919393][ T28] audit: type=1400 audit(1755428993.270:8049): avc: denied { read } for pid=10597 comm="syz.4.4952" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.975513][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4953'. [ 215.997243][T10602] loop1: detected capacity change from 0 to 256 [ 216.036226][T10604] xt_TCPMSS: Only works on TCP SYN packets [ 216.061171][T10602] FAT-fs (loop1): Directory bread(block 64) failed [ 216.090128][T10602] FAT-fs (loop1): Directory bread(block 65) failed [ 216.141876][T10602] FAT-fs (loop1): Directory bread(block 66) failed [ 216.156022][ T28] audit: type=1400 audit(1755428993.482:8050): avc: denied { setopt } for pid=10610 comm="syz.4.4959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.192387][T10602] FAT-fs (loop1): Directory bread(block 67) failed [ 216.239582][T10602] FAT-fs (loop1): Directory bread(block 68) failed [ 216.251482][T10618] netlink: 'syz.0.4961': attribute type 12 has an invalid length. [ 216.273078][T10602] FAT-fs (loop1): Directory bread(block 69) failed [ 216.302377][T10602] FAT-fs (loop1): Directory bread(block 70) failed [ 216.347189][T10602] FAT-fs (loop1): Directory bread(block 71) failed [ 216.357614][ T28] audit: type=1326 audit(1755428993.667:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 216.400483][T10602] FAT-fs (loop1): Directory bread(block 72) failed [ 216.474435][T10602] FAT-fs (loop1): Directory bread(block 73) failed [ 216.504198][ T28] audit: type=1326 audit(1755428993.695:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 216.742485][ T28] audit: type=1326 audit(1755428993.695:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 216.904865][ T28] audit: type=1326 audit(2000000000.000:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 217.069286][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4989'. [ 217.121722][ T28] audit: type=1326 audit(2000000000.000:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.0.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cf8eb69 code=0x7ffc0000 [ 217.159522][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4988'. [ 217.301975][ T28] audit: type=1400 audit(2000000000.406:8056): avc: denied { write } for pid=10645 comm="syz.4.4976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.515681][ T28] audit: type=1326 audit(2000000001.033:8057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8318eb69 code=0x7ffc0000 [ 217.717036][ T28] audit: type=1326 audit(2000000001.061:8058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.1.5004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8318eb69 code=0x7ffc0000 [ 218.464333][T10783] xt_TCPMSS: Only works on TCP SYN packets [ 218.486041][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 218.551898][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5042'. [ 219.251185][T10843] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5067'. [ 219.635202][ C1] net_ratelimit: 98743 callbacks suppressed [ 219.635224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.654631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.668053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.681085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.695464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.708761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.724023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.737243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.750880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.764666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.080114][T10966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.087504][T10966] IPv6: NLM_F_CREATE should be set when creating new route [ 221.094963][T10966] IPv6: NLM_F_CREATE should be set when creating new route [ 221.355785][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 221.355804][ T28] audit: type=1326 audit(2000000004.578:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8318eb69 code=0x7ffc0000 [ 221.576376][ T28] audit: type=1326 audit(2000000004.615:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8318eb69 code=0x7ffc0000 [ 221.793660][ T28] audit: type=1326 audit(2000000004.615:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fcc8318eb69 code=0x7ffc0000 [ 221.982932][ T28] audit: type=1326 audit(2000000004.615:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8318eb69 code=0x7ffc0000 [ 222.168899][ T28] audit: type=1326 audit(2000000004.615:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.5142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8318eb69 code=0x7ffc0000 [ 223.374633][ T28] audit: type=1400 audit(2000000006.442:8072): avc: denied { setopt } for pid=11047 comm="syz.3.5173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.799691][T11079] loop1: detected capacity change from 0 to 256 [ 223.809850][T11082] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5190'. [ 223.851593][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5190'. [ 223.868367][T11079] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 223.890923][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5190'. [ 224.164876][ T347] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 224.174694][T11112] loop2: detected capacity change from 0 to 256 [ 224.208881][T11112] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 224.404693][ T28] audit: type=1400 audit(2000000007.393:8073): avc: denied { getopt } for pid=11127 comm="syz.2.5211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.437056][ T347] usb 1-1: Using ep0 maxpacket: 8 [ 224.465993][ T347] usb 1-1: config 0 has an invalid interface number: 193 but max is 1 [ 224.478220][ T347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.511057][ T347] usb 1-1: config 0 has no interface number 1 [ 224.532469][ T347] usb 1-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.673369][ T347] usb 1-1: config 0 interface 193 has no altsetting 0 [ 224.977489][ T347] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 224.998202][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.006264][ T347] usb 1-1: Product: syz [ 225.020711][ T347] usb 1-1: Manufacturer: syz [ 225.032037][ T347] usb 1-1: SerialNumber: syz [ 225.063178][ C1] net_ratelimit: 74138 callbacks suppressed [ 225.063200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.081549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.093764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.106598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.107809][T11203] device vlan1 entered promiscuous mode [ 225.119333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.138175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.150632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.163488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.176317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.189910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.226133][ T347] usb 1-1: config 0 descriptor?? [ 225.279883][ T752] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 225.487625][ T752] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.507423][T11240] netlink: 'syz.2.5264': attribute type 16 has an invalid length. [ 225.517034][ T752] usb 2-1: config 84 has an invalid interface number: 111 but max is 0 [ 225.522985][ T347] usb 1-1: unknown interface protocol 0xd7, assuming v1 [ 225.549407][ T752] usb 2-1: config 84 has no interface number 0 [ 225.569120][ T347] usb 1-1: 193:2 : does not exist [ 225.581855][ T752] usb 2-1: config 84 interface 111 has no altsetting 0 [ 225.585840][ T347] usb 1-1: cannot find UAC_HEADER [ 225.607871][ T752] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0 [ 225.645313][T11252] netlink: 'syz.4.5271': attribute type 9 has an invalid length. [ 225.649166][ T347] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 225.655975][ T752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.721364][ T752] usb 2-1: Product: syz [ 225.731451][ T347] usb 1-1: USB disconnect, device number 73 [ 225.745587][ T752] usb 2-1: Manufacturer: syz [ 225.757538][ T752] usb 2-1: SerialNumber: syz [ 225.997712][ T752] usb 2-1: bad CDC descriptors [ 226.032273][ T752] usb 2-1: USB disconnect, device number 70 [ 226.052719][T11268] Unsupported ieee802154 address type: 0 [ 226.119489][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5281'. [ 226.306333][ T28] audit: type=1400 audit(2000000009.146:8074): avc: denied { setcheckreqprot } for pid=11285 comm="syz.0.5289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 227.087710][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5324'. [ 227.405590][ T347] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 227.687535][ T347] usb 3-1: Using ep0 maxpacket: 8 [ 227.761427][T11411] tmpfs: Unexpected value for 'inode32' [ 227.793591][ T28] audit: type=1400 audit(2000000010.439:8075): avc: denied { module_request } for pid=11403 comm="syz.0.5346" kmod="ip6t_SET" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 227.822275][ T28] audit: type=1400 audit(2000000010.439:8076): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.849931][ T28] audit: type=1400 audit(2000000010.439:8077): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.877235][ T28] audit: type=1400 audit(2000000010.439:8078): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.905087][ T28] audit: type=1400 audit(2000000010.494:8079): avc: denied { mounton } for pid=11410 comm="syz.4.5350" path="/syzcgroup/unified/syz4" dev="pstore" ino=14438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 227.967929][ T28] audit: type=1400 audit(2000000010.688:8080): avc: denied { bpf } for pid=11415 comm="syz.3.5352" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.014455][ T347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 228.049246][ T347] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.060325][ T347] usb 3-1: config 1 has no interface number 1 [ 228.096193][ T28] audit: type=1400 audit(2000000010.706:8081): avc: denied { prog_load } for pid=11415 comm="syz.3.5352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 228.121864][ T347] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 228.126558][ T28] audit: type=1400 audit(2000000010.706:8082): avc: denied { ioctl } for pid=11356 comm="syz.2.5322" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.184377][ T28] audit: type=1400 audit(2000000010.706:8083): avc: denied { perfmon } for pid=11415 comm="syz.3.5352" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.205772][ T28] audit: type=1400 audit(2000000010.706:8084): avc: denied { prog_run } for pid=11415 comm="syz.3.5352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 228.272889][T11436] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5362'. [ 228.356842][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5364'. [ 228.433599][ T347] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.454764][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.476047][ T347] usb 3-1: Product: syz [ 228.480376][ T347] usb 3-1: Manufacturer: syz [ 228.484998][ T347] usb 3-1: SerialNumber: syz [ 228.577236][T11460] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5373'. [ 228.740094][T11357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 228.994455][ T347] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 229.018316][ T347] usb 3-1: 2:1 : invalid channels 0 [ 229.034074][ T347] usb 3-1: USB disconnect, device number 74 [ 229.148684][T11492] tc_dump_action: action bad kind [ 229.524725][T11514] loop1: detected capacity change from 0 to 256 [ 229.631553][T11514] FAT-fs (loop1): Directory bread(block 64) failed [ 229.650842][T11522] tipc: Can't bind to reserved service type 0 [ 229.682781][T11514] FAT-fs (loop1): Directory bread(block 65) failed [ 229.730378][T11514] FAT-fs (loop1): Directory bread(block 66) failed [ 229.786998][T11514] FAT-fs (loop1): Directory bread(block 67) failed [ 229.878489][T11514] FAT-fs (loop1): Directory bread(block 68) failed [ 229.962779][T11543] x_tables: duplicate entry at hook 3 [ 229.984076][T11514] FAT-fs (loop1): Directory bread(block 69) failed [ 230.003676][T11514] FAT-fs (loop1): Directory bread(block 70) failed [ 230.025329][T11514] FAT-fs (loop1): Directory bread(block 71) failed [ 230.032115][T11514] FAT-fs (loop1): Directory bread(block 72) failed [ 230.046992][T11514] FAT-fs (loop1): Directory bread(block 73) failed [ 230.328539][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5419'. [ 230.491090][ C1] net_ratelimit: 87424 callbacks suppressed [ 230.491112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.510487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.523144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.536638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.548944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.562028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.574639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.587012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.599618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.612919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.894658][T11599] netlink: 396 bytes leftover after parsing attributes in process `syz.0.5442'. [ 231.049081][T11609] SELinux: Context c *:* w is not valid (left unmapped). [ 231.355671][T11632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5459'. [ 231.476168][T11639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5463'. [ 231.594271][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5469'. [ 231.709805][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5473'. [ 231.744775][T11662] usb usb1: usbfs: process 11662 (syz.4.5474) did not claim interface 4 before use [ 232.050229][T11685] xt_ecn: cannot match TCP bits for non-tcp packets [ 232.373748][T11708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5498'. [ 232.441728][ T752] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 232.588755][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5504'. [ 232.641584][T11722] device vlan0 entered promiscuous mode [ 232.657964][ T752] usb 4-1: Using ep0 maxpacket: 32 [ 232.664511][ T752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.677232][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5504'. [ 232.696501][ T752] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 232.738646][ T752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.766370][ T752] usb 4-1: Product: syz [ 232.777370][ T752] usb 4-1: Manufacturer: syz [ 232.788169][ T752] usb 4-1: SerialNumber: syz [ 232.797740][ T752] usb 4-1: config 0 descriptor?? [ 232.831627][ T752] usb 4-1: bad CDC descriptors [ 232.836650][ T752] usb 4-1: unsupported MDLM descriptors [ 232.982997][ T19] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 233.057470][ T752] usb 4-1: USB disconnect, device number 75 [ 233.158641][T11745] loop1: detected capacity change from 0 to 256 [ 233.200957][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 233.207331][ T19] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 233.249555][T11745] FAT-fs (loop1): Directory bread(block 64) failed [ 233.259654][ T19] usb 5-1: config 179 has no interface number 0 [ 233.281543][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 233.303926][T11745] FAT-fs (loop1): Directory bread(block 65) failed [ 233.317734][T11753] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5518'. [ 233.338194][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 233.350271][T11745] FAT-fs (loop1): Directory bread(block 66) failed [ 233.371999][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.387096][T11745] FAT-fs (loop1): Directory bread(block 67) failed [ 233.393898][T11745] FAT-fs (loop1): Directory bread(block 68) failed [ 233.429012][ T19] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 233.449120][T11745] FAT-fs (loop1): Directory bread(block 69) failed [ 233.459890][ T19] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 233.481805][T11745] FAT-fs (loop1): Directory bread(block 70) failed [ 233.492442][T11745] FAT-fs (loop1): Directory bread(block 71) failed [ 233.503200][ T19] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 233.523402][T11745] FAT-fs (loop1): Directory bread(block 72) failed [ 233.530251][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.538745][T11745] FAT-fs (loop1): Directory bread(block 73) failed [ 233.563504][T11724] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 233.993761][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 234.023382][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 234.023450][ T28] audit: type=1400 audit(2000000016.263:8137): avc: denied { write } for pid=11770 comm="syz.1.5527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 234.040675][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.066461][ T752] usb 5-1: USB disconnect, device number 74 [ 234.066504][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 234.081068][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 234.182332][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 234.200400][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.238712][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.275576][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.285153][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.293803][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.302871][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5528'. [ 234.405762][ T28] audit: type=1400 audit(2000000016.623:8138): avc: denied { ioctl } for pid=11791 comm="syz.3.5537" path="socket:[51081]" dev="sockfs" ino=51081 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.553372][ T28] audit: type=1400 audit(2000000016.752:8139): avc: denied { create } for pid=11800 comm="syz.2.5542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.680262][ T28] audit: type=1400 audit(2000000016.789:8140): avc: denied { write } for pid=11800 comm="syz.2.5542" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.840637][ T28] audit: type=1400 audit(2000000016.909:8141): avc: denied { associate } for pid=11811 comm="syz.4.5547" name="cgroup.controllers" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 234.921580][ T28] audit: type=1400 audit(2000000017.093:8142): avc: denied { create } for pid=11826 comm="syz.2.5555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 235.020608][ T28] audit: type=1400 audit(2000000017.130:8143): avc: denied { getopt } for pid=11826 comm="syz.2.5555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 235.164410][T11843] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5563'. [ 235.531595][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5579'. [ 235.919055][ C1] net_ratelimit: 91537 callbacks suppressed [ 235.919076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.937270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.949382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.961531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.973632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.985674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.997904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.010117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.010431][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5594'. [ 236.022543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.043722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.047244][ T28] audit: type=1326 audit(2000000018.136:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11909 comm="syz.2.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa653f8eb69 code=0x7ffc0000 [ 236.124948][ T28] audit: type=1326 audit(2000000018.173:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11909 comm="syz.2.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa653f8eb69 code=0x7ffc0000 [ 236.180837][T11917] loop1: detected capacity change from 0 to 256 [ 236.256579][T11917] FAT-fs (loop1): Directory bread(block 64) failed [ 236.289676][T11917] FAT-fs (loop1): Directory bread(block 65) failed [ 236.296308][T11917] FAT-fs (loop1): Directory bread(block 66) failed [ 236.330691][ T28] audit: type=1326 audit(2000000018.173:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11909 comm="syz.2.5596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa653f8eb69 code=0x7ffc0000 [ 236.383508][T11917] FAT-fs (loop1): Directory bread(block 67) failed [ 236.436812][T11917] FAT-fs (loop1): Directory bread(block 68) failed [ 236.459662][T11917] FAT-fs (loop1): Directory bread(block 69) failed [ 236.525591][T11917] FAT-fs (loop1): Directory bread(block 70) failed [ 236.578216][T11917] FAT-fs (loop1): Directory bread(block 71) failed [ 236.593317][T11917] FAT-fs (loop1): Directory bread(block 72) failed [ 236.691092][T11917] FAT-fs (loop1): Directory bread(block 73) failed [ 237.030689][T11975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5628'. [ 237.273967][T11975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5628'. [ 237.304066][T11987] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5634'. [ 237.409516][T11975] syz.3.5628 (11975) used greatest stack depth: 20768 bytes left [ 237.646156][T12020] SELinux: Context system_u: is not valid (left unmapped). [ 237.660353][T12022] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.207208][T12070] netlink: 'syz.3.5675': attribute type 4 has an invalid length. [ 238.243937][T12070] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5675'. [ 239.732676][ C0] sched: RT throttling activated [ 239.894278][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 239.894319][ T28] audit: type=1400 audit(2000000021.681:8170): avc: denied { read } for pid=12097 comm="syz.3.5691" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 240.010589][ T28] audit: type=1400 audit(2000000021.718:8171): avc: denied { open } for pid=12097 comm="syz.3.5691" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 240.080384][ T752] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 240.153761][ T28] audit: type=1400 audit(2000000021.727:8172): avc: denied { ioctl } for pid=12097 comm="syz.3.5691" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 240.291971][ T752] usb 3-1: Using ep0 maxpacket: 32 [ 240.304553][ T752] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.371048][ T752] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 240.432401][ T752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.479671][ T752] usb 3-1: Product: syz [ 240.506499][ T752] usb 3-1: Manufacturer: syz [ 240.511599][ T752] usb 3-1: SerialNumber: syz [ 240.579204][ T752] usb 3-1: config 0 descriptor?? [ 240.623698][ T752] rndis_host 3-1:0.0: skipping garbage [ 240.629224][ T752] usb 3-1: bad CDC descriptors [ 240.643911][T12146] IPv6: NLM_F_REPLACE set, but no existing node found! [ 240.861298][ T752] usb 3-1: USB disconnect, device number 75 [ 241.069559][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5726'. [ 241.346988][ C1] net_ratelimit: 69461 callbacks suppressed [ 241.347009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.365426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.377608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.389762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.401865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.414057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.426284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.438805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.451061][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.463226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.726307][ T752] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 241.738752][T12214] IPv6: sit2: Disabled Multicast RS [ 241.751769][T12216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.935415][ T752] usb 1-1: Using ep0 maxpacket: 16 [ 241.970641][ T752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.311963][T12216] device veth0_to_bridge left promiscuous mode [ 242.320802][ T752] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.439909][T12216] bridge0: port 3(veth0_to_bridge) entered disabled state [ 243.449148][ T752] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 243.465763][ T752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.481801][ T28] audit: type=1400 audit(2000000025.009:8173): avc: denied { create } for pid=12225 comm="syz.2.5753" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.485494][ T752] usb 1-1: Product: syz [ 243.505949][T12226] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 243.517830][T12226] FAT-fs (loop5): unable to read boot sector [ 243.524207][ T28] audit: type=1400 audit(2000000025.027:8174): avc: denied { mounton } for pid=12225 comm="syz.2.5753" path="/1006/file0" dev="tmpfs" ino=5131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.548569][ T752] usb 1-1: Manufacturer: syz [ 243.556744][ T752] usb 1-1: SerialNumber: syz [ 243.570362][T12216] device bridge_slave_0 left promiscuous mode [ 243.577875][T12216] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.586898][ T28] audit: type=1400 audit(2000000025.092:8175): avc: denied { unlink } for pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=5131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 243.622811][T12216] device bridge_slave_1 left promiscuous mode [ 243.636815][T12216] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.688554][ T28] audit: type=1326 audit(2000000025.193:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.3.5758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x0 [ 243.740305][T12244] IPv6: sit1: Disabled Multicast RS [ 243.781499][ T28] audit: type=1326 audit(2000000025.276:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.3.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 243.789993][ T752] usb 1-1: 0:2 : does not exist [ 243.812385][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5767'. [ 243.823116][ T28] audit: type=1326 audit(2000000025.276:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.3.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 243.846346][ T752] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 243.853222][ T28] audit: type=1326 audit(2000000025.276:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.3.5766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1f98eb69 code=0x7ffc0000 [ 243.873034][ T752] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 243.919031][ T752] usb 1-1: USB disconnect, device number 74 [ 243.982019][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5780'. [ 243.999928][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5780'. [ 244.107385][T12300] xt_TCPMSS: Only works on TCP SYN packets [ 244.174559][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5795'. [ 244.191714][ T345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.207483][ T345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.240540][ T345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.271553][T12322] binder: 12321:12322 ioctl c0306201 200000000240 returned -14 [ 244.306287][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5805'. [ 244.315369][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5805'. [ 244.333818][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5808'. [ 244.337341][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5805'. [ 244.344586][ T345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.360992][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5808'. [ 244.370806][ T345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.595842][T12380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5831'. [ 244.606960][T12382] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 244.676587][T12393] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 244.761732][T12411] xt_TCPMSS: Only works on TCP SYN packets [ 244.772831][T12413] SELinux: policydb string length 0 does not match expected length 8 [ 244.781204][T12413] SELinux: failed to load policy [ 244.843252][T12428] netlink: 'syz.4.5854': attribute type 32 has an invalid length. [ 244.990821][T12453] device ip6tnl2 entered promiscuous mode [ 245.058266][T12466] xt_CT: No such helper "netbios-ns" [ 245.060805][T12468] loop1: detected capacity change from 0 to 256 [ 245.098582][T12468] FAT-fs (loop1): Directory bread(block 64) failed [ 245.108738][T12468] FAT-fs (loop1): Directory bread(block 65) failed [ 245.109984][T12475] xt_TCPMSS: Only works on TCP SYN packets [ 245.115547][T12468] FAT-fs (loop1): Directory bread(block 66) failed [ 245.135591][T12468] FAT-fs (loop1): Directory bread(block 67) failed [ 245.142486][T12468] FAT-fs (loop1): Directory bread(block 68) failed [ 245.159286][T12468] FAT-fs (loop1): Directory bread(block 69) failed [ 245.159387][T12479] random: crng reseeded on system resumption [ 245.166159][T12468] FAT-fs (loop1): Directory bread(block 70) failed [ 245.179028][T12468] FAT-fs (loop1): Directory bread(block 71) failed [ 245.186059][T12468] FAT-fs (loop1): Directory bread(block 72) failed [ 245.192852][T12468] FAT-fs (loop1): Directory bread(block 73) failed [ 245.204089][ T19] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 245.284989][T12488] device bridge2 entered promiscuous mode [ 245.394089][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 245.394106][ T28] audit: type=1400 audit(2000000026.762:8198): avc: denied { setattr } for pid=12499 comm="syz.0.5889" name="vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 245.424853][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 245.436496][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.442545][T12477] loop2: detected capacity change from 0 to 40427 [ 245.452352][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 245.478715][T12477] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384) [ 245.494160][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 245.500823][T12477] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 245.547175][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 245.570437][T12517] xt_limit: Overflow, try lower: 2147483649/3300 [ 245.589203][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.600965][T12477] F2FS-fs (loop2): Found nat_bits in checkpoint [ 245.610210][ T19] usb 5-1: Product: syz [ 245.633090][ T19] usb 5-1: Manufacturer: syz [ 245.637055][ T28] audit: type=1400 audit(2000000026.984:8199): avc: denied { read } for pid=12526 comm="syz.0.5901" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 245.648329][ T19] usb 5-1: SerialNumber: syz [ 245.673228][ T28] audit: type=1400 audit(2000000027.021:8200): avc: denied { open } for pid=12526 comm="syz.0.5901" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 245.693593][ T19] usb 5-1: config 0 descriptor?? [ 245.707722][ T28] audit: type=1400 audit(2000000027.021:8201): avc: denied { ioctl } for pid=12526 comm="syz.0.5901" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 245.737652][T12477] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 245.747781][T12477] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 245.755609][ T28] audit: type=1400 audit(2000000027.095:8202): avc: denied { mount } for pid=12476 comm="syz.2.5878" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 245.824778][ T28] audit: type=1400 audit(2000000027.169:8203): avc: denied { write } for pid=12476 comm="syz.2.5878" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.856418][ T28] audit: type=1400 audit(2000000027.169:8204): avc: denied { add_name } for pid=12476 comm="syz.2.5878" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.879935][ T282] syz-executor: attempt to access beyond end of device [ 245.879935][ T282] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.884727][ T28] audit: type=1400 audit(2000000027.169:8205): avc: denied { create } for pid=12476 comm="syz.2.5878" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.939113][ T28] audit: type=1400 audit(2000000027.169:8206): avc: denied { read append open } for pid=12476 comm="syz.2.5878" path="/1036/file2/blkio.bfq.avg_queue_size" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 245.989218][ T19] usb 5-1: USB disconnect, device number 75 [ 246.011840][ T28] audit: type=1400 audit(2000000027.196:8207): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 246.031298][T12562] netlink: 'syz.3.5918': attribute type 15 has an invalid length. [ 246.227169][T12596] device veth6 entered promiscuous mode [ 246.346149][T12621] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 246.643746][T12675] xt_l2tp: missing protocol rule (udp|l2tpip) [ 247.111642][T12768] net_ratelimit: 55826 callbacks suppressed [ 247.111665][T12768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.164873][T12778] loop1: detected capacity change from 0 to 512 [ 247.205080][T12785] netlink: 'syz.3.6027': attribute type 3 has an invalid length. [ 247.224794][T12778] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.255022][T12778] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 247.306669][T12778] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.6024: inode #15: comm syz.1.6024: iget: illegal inode # [ 247.349450][T12778] EXT4-fs (loop1): Remounting filesystem read-only [ 247.356021][T12778] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.6024: couldn't read orphan inode 15 (err -117) [ 247.381932][T12778] EXT4-fs (loop1): Remounting filesystem read-only [ 247.388569][T12778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 247.576736][ T347] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 247.728391][ T345] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 247.747596][T12882] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 247.783864][ T347] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 247.793310][T12893] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.808836][ T347] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 247.819497][ T347] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 247.857813][ T347] usb 4-1: config 220 has no interface number 2 [ 247.866120][ T347] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 247.918658][ T347] usb 4-1: config 220 interface 0 has no altsetting 0 [ 247.936704][ T347] usb 4-1: config 220 interface 76 has no altsetting 0 [ 247.946477][ T345] usb 2-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config [ 247.973266][ T347] usb 4-1: config 220 interface 1 has no altsetting 0 [ 247.988648][ T345] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.999865][ T347] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 248.021255][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.030153][ T345] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 248.044029][ T347] usb 4-1: Product: syz [ 248.048367][ T347] usb 4-1: Manufacturer: syz [ 248.054076][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.062829][ T345] usb 2-1: SerialNumber: syz [ 248.068418][ T347] usb 4-1: SerialNumber: syz [ 248.096766][ T345] usb 2-1: 0:2 : does not exist [ 248.108891][T12939] syz.4.6101[12939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.108998][T12939] syz.4.6101[12939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.153646][T12943] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 248.221288][T12953] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.305603][ T345] usb 2-1: USB disconnect, device number 71 [ 248.314864][ T347] usb 4-1: selecting invalid altsetting 0 [ 248.329627][ T347] usb 4-1: selecting invalid altsetting 0 [ 248.339549][ T347] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 248.347438][ T347] usb 4-1: No valid video chain found. [ 248.374067][ T347] usb 4-1: USB disconnect, device number 76 [ 248.437713][T12985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.746838][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.892687][ T283] EXT4-fs (loop1): unmounting filesystem. [ 249.035833][T13096] netlink: 'syz.2.6180': attribute type 7 has an invalid length. [ 249.070720][T13096] netlink: 'syz.2.6180': attribute type 5 has an invalid length. [ 249.189741][ T9303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.236771][T13137] tc_dump_action: action bad kind [ 249.280420][T13144] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 249.320924][T13130] loop1: detected capacity change from 0 to 8192 [ 249.378839][T13130] loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 249.379033][T13130] loop1: p1 start 4294967295 is beyond EOD, truncated [ 249.501535][T13130] loop1: p5 start 4294967295 is beyond EOD, truncated [ 249.526472][T13130] loop1: p7 start 4294967295 is beyond EOD, truncated [ 249.549755][T13130] loop1: p9 start 4294967295 is beyond EOD, truncated [ 249.562062][T13130] loop1: p11 start 4294967295 is beyond EOD, truncated [ 249.583895][T13130] loop1: p13 start 4294967295 is beyond EOD, truncated [ 249.614207][T13130] loop1: p15 start 4294967295 is beyond EOD, truncated [ 249.635097][T13130] loop1: p17 start 4294967295 is beyond EOD, truncated [ 249.651036][T13130] loop1: p19 start 4294967295 is beyond EOD, truncated [ 249.675068][T13130] loop1: p21 start 4294967295 is beyond EOD, truncated [ 249.682479][T13196] syz.4.6228 uses obsolete (PF_INET,SOCK_PACKET) [ 249.682861][T13193] netlink: 'syz.0.6227': attribute type 30 has an invalid length. [ 249.696827][T13130] loop1: p23 start 4294967295 is beyond EOD, truncated [ 249.705322][T13130] loop1: p25 start 4294967295 is beyond EOD, truncated [ 249.720201][T13130] loop1: p27 start 4294967295 is beyond EOD, truncated [ 249.740613][T13202] __nla_validate_parse: 15 callbacks suppressed [ 249.740633][T13202] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6232'. [ 249.748765][T13130] loop1: p29 start 4294967295 is beyond EOD, truncated [ 249.791789][T13130] loop1: p31 start 4294967295 is beyond EOD, truncated [ 249.816563][T13130] loop1: p33 start 4294967295 is beyond EOD, truncated [ 249.829224][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6239'. [ 249.840162][T13130] loop1: p35 start 4294967295 is beyond EOD, truncated [ 249.854849][T13130] loop1: p37 start 4294967295 is beyond EOD, truncated [ 249.875075][T13130] loop1: p39 start 4294967295 is beyond EOD, truncated [ 249.891247][T13130] loop1: p41 start 4294967295 is beyond EOD, truncated [ 249.892609][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6244'. [ 249.899142][T13130] loop1: p43 start 4294967295 is beyond EOD, truncated [ 249.925686][T13130] loop1: p45 start 4294967295 is beyond EOD, truncated [ 249.955923][T13130] loop1: p47 start 4294967295 is beyond EOD, truncated [ 249.963654][T13130] loop1: p49 start 4294967295 is beyond EOD, truncated [ 249.971562][T13130] loop1: p51 start 4294967295 is beyond EOD, truncated [ 249.982645][T13130] loop1: p53 start 4294967295 is beyond EOD, truncated [ 250.002833][T13130] loop1: p55 start 4294967295 is beyond EOD, truncated [ 250.015625][T13130] loop1: p57 start 4294967295 is beyond EOD, truncated [ 250.017699][T13245] device bridge4 entered promiscuous mode [ 250.026411][T13130] loop1: p59 start 4294967295 is beyond EOD, truncated [ 250.037762][T13130] loop1: p61 start 4294967295 is beyond EOD, truncated [ 250.045306][T13130] loop1: p63 start 4294967295 is beyond EOD, truncated [ 250.052909][T13130] loop1: p65 start 4294967295 is beyond EOD, truncated [ 250.060410][T13130] loop1: p67 start 4294967295 is beyond EOD, truncated [ 250.067810][T13130] loop1: p69 start 4294967295 is beyond EOD, truncated [ 250.075622][T13130] loop1: p71 start 4294967295 is beyond EOD, truncated [ 250.082794][T13249] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.090937][T13249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.098229][T13249] IPv6: NLM_F_CREATE should be set when creating new route [ 250.105505][T13249] IPv6: NLM_F_CREATE should be set when creating new route [ 250.106299][T13130] loop1: p73 start 4294967295 is beyond EOD, truncated [ 250.120851][T13130] loop1: p75 start 4294967295 is beyond EOD, truncated [ 250.138824][T13130] loop1: p77 start 4294967295 is beyond EOD, truncated [ 250.156399][T13130] loop1: p79 start 4294967295 is beyond EOD, truncated [ 250.169650][T13130] loop1: p81 start 4294967295 is beyond EOD, truncated [ 250.178110][T13130] loop1: p83 start 4294967295 is beyond EOD, truncated [ 250.195711][T13130] loop1: p85 start 4294967295 is beyond EOD, truncated [ 250.203538][T13130] loop1: p87 start 4294967295 is beyond EOD, truncated [ 250.218971][T13130] loop1: p89 start 4294967295 is beyond EOD, truncated [ 250.227161][T13130] loop1: p91 start 4294967295 is beyond EOD, truncated [ 250.246556][T13130] loop1: p93 start 4294967295 is beyond EOD, truncated [ 250.264089][T13130] loop1: p95 start 4294967295 is beyond EOD, truncated [ 250.279359][T13130] loop1: p97 start 4294967295 is beyond EOD, truncated [ 250.298454][T13130] loop1: p99 start 4294967295 is beyond EOD, truncated [ 250.313579][T13130] loop1: p101 start 4294967295 is beyond EOD, truncated [ 250.331823][T13130] loop1: p103 start 4294967295 is beyond EOD, truncated [ 250.340171][T13130] loop1: p105 start 4294967295 is beyond EOD, truncated [ 250.357007][T13130] loop1: p107 start 4294967295 is beyond EOD, truncated [ 250.369172][T13130] loop1: p109 start 4294967295 is beyond EOD, truncated [ 250.380225][T13130] loop1: p111 start 4294967295 is beyond EOD, truncated [ 250.405488][T13130] loop1: p113 start 4294967295 is beyond EOD, truncated [ 250.423206][T13130] loop1: p115 start 4294967295 is beyond EOD, truncated [ 250.441637][T13295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6277'. [ 250.451846][T13130] loop1: p117 start 4294967295 is beyond EOD, truncated [ 250.459187][T13295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6277'. [ 250.476346][T13130] loop1: p119 start 4294967295 is beyond EOD, truncated [ 250.501340][T13130] loop1: p121 start 4294967295 is beyond EOD, truncated [ 250.512926][T13130] loop1: p123 start 4294967295 is beyond EOD, truncated [ 250.539662][T13130] loop1: p125 start 4294967295 is beyond EOD, truncated [ 250.569736][T13130] loop1: p127 start 4294967295 is beyond EOD, truncated [ 250.578634][T13317] xt_CT: No such helper "snmp" [ 250.587520][T13130] loop1: p129 start 4294967295 is beyond EOD, truncated [ 250.610978][T13130] loop1: p131 start 4294967295 is beyond EOD, truncated [ 250.639525][T13130] loop1: p133 start 4294967295 is beyond EOD, truncated [ 250.659088][T13130] loop1: p135 start 4294967295 is beyond EOD, truncated [ 250.689583][T13130] loop1: p137 start 4294967295 is beyond EOD, truncated [ 250.711295][T13130] loop1: p139 start 4294967295 is beyond EOD, truncated [ 250.732656][T13130] loop1: p141 start 4294967295 is beyond EOD, truncated [ 250.758997][T13130] loop1: p143 start 4294967295 is beyond EOD, truncated [ 250.768835][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6306'. [ 250.784093][T13130] loop1: p145 start 4294967295 is beyond EOD, truncated [ 250.804748][T13130] loop1: p147 start 4294967295 is beyond EOD, truncated [ 250.823999][T13130] loop1: p149 start 4294967295 is beyond EOD, truncated [ 250.844346][T13130] loop1: p151 start 4294967295 is beyond EOD, truncated [ 250.864606][T13130] loop1: p153 start 4294967295 is beyond EOD, truncated [ 250.892455][T13130] loop1: p155 start 4294967295 is beyond EOD, truncated [ 250.911046][T13130] loop1: p157 start 4294967295 is beyond EOD, truncated [ 250.934074][T13130] loop1: p159 start 4294967295 is beyond EOD, truncated [ 250.938271][T13378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.947359][T13130] loop1: p161 start 4294967295 is beyond EOD, truncated [ 250.961157][T13381] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 250.979105][T13130] loop1: p163 start 4294967295 is beyond EOD, truncated [ 251.009931][T13130] loop1: p165 start 4294967295 is beyond EOD, truncated [ 251.031816][T13130] loop1: p167 start 4294967295 is beyond EOD, truncated [ 251.057208][T13130] loop1: p169 start 4294967295 is beyond EOD, truncated [ 251.076665][T13130] loop1: p171 start 4294967295 is beyond EOD, truncated [ 251.089119][T13130] loop1: p173 start 4294967295 is beyond EOD, truncated [ 251.101827][T13130] loop1: p175 start 4294967295 is beyond EOD, truncated [ 251.123620][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6334'. [ 251.131229][T13130] loop1: p177 start 4294967295 is beyond EOD, truncated [ 251.144441][T13411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6334'. [ 251.146358][T13130] loop1: p179 start 4294967295 is beyond EOD, truncated [ 251.177847][T13130] loop1: p181 start 4294967295 is beyond EOD, truncated [ 251.203219][T13130] loop1: p183 start 4294967295 is beyond EOD, truncated [ 251.231269][T13130] loop1: p185 start 4294967295 is beyond EOD, truncated [ 251.265266][T13130] loop1: p187 start 4294967295 is beyond EOD, truncated [ 251.283497][T13130] loop1: p189 start 4294967295 is beyond EOD, truncated [ 251.301694][T13437] device bridge4 entered promiscuous mode [ 251.311124][T13130] loop1: p191 start 4294967295 is beyond EOD, truncated [ 251.327070][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6351'. [ 251.332497][T13130] loop1: p193 start 4294967295 is beyond EOD, truncated [ 251.350114][T13130] loop1: p195 start 4294967295 is beyond EOD, truncated [ 251.364664][T13130] loop1: p197 start 4294967295 is beyond EOD, truncated [ 251.404006][T13130] loop1: p199 start 4294967295 is beyond EOD, truncated [ 251.421882][T13130] loop1: p201 start 4294967295 is beyond EOD, truncated [ 251.451083][T13130] loop1: p203 start 4294967295 is beyond EOD, truncated [ 251.492910][T13130] loop1: p205 start 4294967295 is beyond EOD, truncated [ 251.500238][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 251.500257][ T28] audit: type=1400 audit(2000000032.393:8252): avc: denied { write } for pid=13467 comm="syz.0.6365" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 251.534627][T13471] binfmt_misc: register: failed to install interpreter file ./file0 [ 251.549202][T13130] loop1: p207 start 4294967295 is beyond EOD, truncated [ 251.578948][T13130] loop1: p209 start 4294967295 is beyond EOD, truncated [ 251.599386][T13482] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6369'. [ 251.608398][T13130] loop1: p211 start 4294967295 is beyond EOD, truncated [ 251.619120][T13130] loop1: p213 start 4294967295 is beyond EOD, truncated [ 251.641530][T13130] loop1: p215 start 4294967295 is beyond EOD, truncated [ 251.660005][T13130] loop1: p217 start 4294967295 is beyond EOD, truncated [ 251.684685][T13130] loop1: p219 start 4294967295 is beyond EOD, truncated [ 251.689086][ T28] audit: type=1400 audit(2000000032.577:8253): avc: denied { create } for pid=13492 comm="syz.0.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.698205][T13130] loop1: p221 start 4294967295 is beyond EOD, truncated [ 251.746899][T13130] loop1: p223 start 4294967295 is beyond EOD, truncated [ 251.756206][ T28] audit: type=1400 audit(2000000032.605:8254): avc: denied { setopt } for pid=13492 comm="syz.0.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.769962][T13130] loop1: p225 start 4294967295 is beyond EOD, truncated [ 251.802273][ T28] audit: type=1400 audit(2000000032.614:8255): avc: denied { write } for pid=13496 comm="syz.2.6378" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.807372][T13130] loop1: p227 start 4294967295 is beyond EOD, truncated [ 251.848565][T13503] xt_CT: No such helper "snmp_trap" [ 251.850031][T13130] loop1: p229 start 4294967295 is beyond EOD, truncated [ 251.867287][T13130] loop1: p231 start 4294967295 is beyond EOD, truncated [ 251.876654][T13130] loop1: p233 start 4294967295 is beyond EOD, truncated [ 251.889391][T13130] loop1: p235 start 4294967295 is beyond EOD, truncated [ 251.902954][T13130] loop1: p237 start 4294967295 is beyond EOD, truncated [ 251.921279][T13130] loop1: p239 start 4294967295 is beyond EOD, truncated [ 251.936392][T13130] loop1: p241 start 4294967295 is beyond EOD, truncated [ 251.942952][ T752] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 251.957153][T13130] loop1: p243 start 4294967295 is beyond EOD, truncated [ 251.987209][T13130] loop1: p245 start 4294967295 is beyond EOD, truncated [ 252.025435][T13130] loop1: p247 start 4294967295 is beyond EOD, truncated [ 252.050252][T13130] loop1: p249 start 4294967295 is beyond EOD, truncated [ 252.067825][T13130] loop1: p251 start 4294967295 is beyond EOD, truncated [ 252.088244][T13130] loop1: p253 start 4294967295 is beyond EOD, truncated [ 252.097897][T13542] usb usb8: usbfs: process 13542 (syz.3.6400) did not claim interface 0 before use [ 252.114184][T13130] loop1: p255 start 4294967295 is beyond EOD, truncated [ 252.158465][ T752] usb 5-1: config 0 has an invalid interface number: 152 but max is 0 [ 252.185328][ T752] usb 5-1: config 0 has no interface number 0 [ 252.205586][ T752] usb 5-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 252.221626][T13554] netlink: 'syz.2.6403': attribute type 2 has an invalid length. [ 252.229604][ T752] usb 5-1: config 0 interface 152 has no altsetting 0 [ 252.263363][ T752] usb 5-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 252.277493][ T752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.286617][ T752] usb 5-1: Product: syz [ 252.291371][ T752] usb 5-1: Manufacturer: syz [ 252.308984][ T752] usb 5-1: SerialNumber: syz [ 252.327988][ T752] usb 5-1: config 0 descriptor?? [ 252.344246][T13485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.413289][ T1706] udevd[1706]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 252.415622][ T816] udevd[816]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 252.430662][ T334] udevd[334]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 252.446611][ T1213] udevd[1213]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory [ 252.461001][ T1703] udevd[1703]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory [ 252.473597][ T531] udevd[531]: inotify_add_watch(7, /dev/loop1p14, 10) failed: No such file or directory [ 252.473631][ T533] udevd[533]: inotify_add_watch(7, /dev/loop1p12, 10) failed: No such file or directory [ 252.485900][ T352] udevd[352]: inotify_add_watch(7, /dev/loop1p18, 10) failed: No such file or directory [ 252.496635][ T1654] udevd[1654]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 252.505772][ T1655] udevd[1655]: inotify_add_watch(7, /dev/loop1p22, 10) failed: No such file or directory [ 252.545942][ T28] audit: type=1400 audit(2000000033.362:8256): avc: denied { getopt } for pid=13587 comm="syz.2.6424" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.579146][T13485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.618046][ T752] cdc_subset 5-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.4-1, Yopy, 9e:e4:65:5a:96:b7 [ 252.702116][ T28] audit: type=1400 audit(2000000033.519:8257): avc: denied { create } for pid=13601 comm="syz.0.6430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.730409][T13602] xt_CT: No such helper "netbios-ns" [ 252.815519][ T28] audit: type=1400 audit(2000000033.519:8258): avc: denied { write } for pid=13601 comm="syz.0.6430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.853073][ T752] usb 5-1: USB disconnect, device number 76 [ 252.870857][ T752] cdc_subset 5-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.4-1, Yopy [ 252.878075][ T28] audit: type=1400 audit(2000000033.602:8259): avc: denied { setopt } for pid=13612 comm="syz.0.6436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.955090][ T28] audit: type=1400 audit(2000000033.602:8260): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 253.049789][ T28] audit: type=1400 audit(2000000033.602:8261): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.104718][T13645] netlink: 'syz.0.6449': attribute type 9 has an invalid length. [ 253.168092][T13658] netlink: 'syz.1.6453': attribute type 29 has an invalid length. [ 253.192981][T13658] netlink: 'syz.1.6453': attribute type 3 has an invalid length. [ 253.652301][T13742] netlink: 'syz.3.6487': attribute type 9 has an invalid length. [ 253.668514][T13744] loop1: detected capacity change from 0 to 256 [ 253.689074][T13747] loop2: detected capacity change from 0 to 512 [ 253.716396][T13747] EXT4-fs: Ignoring removed oldalloc option [ 253.737625][T13747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c118, mo2=0002] [ 253.773986][T13747] System zones: 1-12 [ 253.824889][T13747] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.6491: Parent and EA inode have the same ino 15 [ 253.865688][T13747] EXT4-fs (loop2): 1 orphan inode deleted [ 253.891210][T13747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.999813][ T282] EXT4-fs (loop2): unmounting filesystem. [ 254.030385][T13795] netlink: 'syz.4.6512': attribute type 27 has an invalid length. [ 254.480763][T13846] loop2: detected capacity change from 0 to 512 [ 254.511271][T13846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.543337][T13846] EXT4-fs (loop2): Test dummy encryption mode enabled [ 254.582205][T13846] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 254.633283][T13846] EXT4-fs (loop2): 1 truncate cleaned up [ 254.653564][T13846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.666474][T13873] IPv6: sit3: Disabled Multicast RS [ 254.750830][ T282] EXT4-fs (loop2): unmounting filesystem. [ 254.994198][T13938] xt_hashlimit: size too large, truncated to 1048576 [ 255.010385][T13938] xt_hashlimit: max too large, truncated to 1048576 [ 255.118738][T13971] netlink: 'syz.4.6598': attribute type 30 has an invalid length. [ 255.133979][T13976] xt_ecn: cannot match TCP bits for non-tcp packets [ 255.162741][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 255.396893][T14041] __nla_validate_parse: 12 callbacks suppressed [ 255.396913][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6631'. [ 255.655725][T14109] netlink: 'syz.1.6667': attribute type 5 has an invalid length. [ 255.670673][T14109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6667'. [ 255.729324][T14129] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6674'. [ 255.748904][T14129] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6674'. [ 255.772217][T14129] netlink: 38 bytes leftover after parsing attributes in process `syz.4.6674'. [ 255.785801][T14140] xt_l2tp: v2 tid > 0xffff: 134217728 [ 255.816008][T14143] xt_hashlimit: max too large, truncated to 1048576 [ 255.871848][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6688'. [ 255.878515][T14157] netlink: 'syz.2.6689': attribute type 3 has an invalid length. [ 255.922397][T14165] device bridge2 entered promiscuous mode [ 255.962106][T14179] xt_socket: unknown flags 0x58 [ 256.001387][T14188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6704'. [ 256.103104][T14213] netlink: 'syz.4.6718': attribute type 5 has an invalid length. [ 256.141326][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6721'. [ 256.167737][T14231] xt_l2tp: v2 doesn't support IP mode [ 256.250397][T14252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6735'. [ 256.261973][T14252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6735'. [ 256.271866][T14252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.345336][T14270] device bridge2 entered promiscuous mode [ 256.431861][T14296] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 256.557362][T14325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.712762][T14361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.769890][T14372] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 256.934050][ T28] kauditd_printk_skb: 366 callbacks suppressed [ 256.934067][ T28] audit: type=1400 audit(2000000037.414:8628): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.982039][ T28] audit: type=1400 audit(2000000037.442:8629): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.007411][ T28] audit: type=1400 audit(2000000037.451:8630): avc: denied { bpf } for pid=14410 comm="syz.4.6816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 257.031505][ T28] audit: type=1400 audit(2000000037.451:8631): avc: denied { prog_load } for pid=14410 comm="syz.4.6816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.056693][ T28] audit: type=1400 audit(2000000037.451:8632): avc: denied { bpf } for pid=14410 comm="syz.4.6816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 257.082779][ T28] audit: type=1400 audit(2000000037.451:8633): avc: denied { read write } for pid=14406 comm="syz.1.6813" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 257.108237][T14431] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 257.114136][ T28] audit: type=1400 audit(2000000037.469:8634): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.148916][ T28] audit: type=1400 audit(2000000037.469:8635): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.173550][ T28] audit: type=1400 audit(2000000037.497:8636): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.208356][ T28] audit: type=1400 audit(2000000037.506:8637): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.250886][T14451] bridge0: port 1(syz_tun) entered blocking state [ 257.266433][T14451] bridge0: port 1(syz_tun) entered disabled state [ 257.282947][T14451] device syz_tun entered promiscuous mode [ 257.414216][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.423532][T14491] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.441694][T14493] device veth7 entered promiscuous mode [ 257.452992][T14495] xt_hashlimit: overflow, rate too high: 0 [ 257.662876][T14554] netlink: 'syz.1.6885': attribute type 27 has an invalid length. [ 257.768915][T14554] device xfrm0 left promiscuous mode [ 257.813773][T14565] device veth1_macvtap left promiscuous mode [ 257.822779][T14565] device macsec0 entered promiscuous mode [ 257.954381][T14622] netlink: 'syz.4.6919': attribute type 29 has an invalid length. [ 257.975887][T14622] netlink: 'syz.4.6919': attribute type 29 has an invalid length. [ 258.119667][T14665] sock: sock_timestamping_bind_phc: sock not bind to device [ 258.234836][T14682] netlink: 'syz.4.6950': attribute type 15 has an invalid length. [ 258.328091][T14712] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 258.348530][T14712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.473066][T14751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.483319][T14750] Zero length message leads to an empty skb [ 258.653179][T14795] netlink: 'syz.3.7005': attribute type 3 has an invalid length. [ 258.673106][T14795] netlink: 'syz.3.7005': attribute type 3 has an invalid length. [ 259.311485][T14976] IPv6: Can't replace route, no match found [ 259.361544][T14988] netlink: 'syz.3.7101': attribute type 5 has an invalid length. [ 259.521271][T15034] netlink: 'syz.2.7124': attribute type 27 has an invalid length. [ 259.578112][T15034] device macsec0 left promiscuous mode [ 259.585691][T15034] device ip6tnl2 left promiscuous mode [ 259.591544][T15034] device bridge4 left promiscuous mode [ 259.598558][T15034] device veth7 left promiscuous mode [ 259.604620][T15038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.611904][T15038] IPv6: NLM_F_CREATE should be set when creating new route [ 259.619272][T15038] IPv6: NLM_F_CREATE should be set when creating new route [ 259.659167][T15051] netlink: 'syz.4.7133': attribute type 12 has an invalid length. [ 259.669556][T15052] xt_hashlimit: max too large, truncated to 1048576 [ 259.676441][T15052] xt_hashlimit: overflow, try lower: 0/0 [ 259.793909][T15084] bridge0: port 1(syz_tun) entered blocking state [ 259.801610][T15084] bridge0: port 1(syz_tun) entered disabled state [ 259.809050][T15084] device syz_tun entered promiscuous mode [ 259.826402][T15086] netlink: 'syz.3.7149': attribute type 1 has an invalid length. [ 259.846001][T15086] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.864765][T15086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.363803][T15216] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 260.553911][T15266] device batadv_slave_0 entered promiscuous mode [ 260.584488][T15266] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 260.606238][T15275] x_tables: duplicate entry at hook 2 [ 260.648237][T15286] xt_hashlimit: invalid interval [ 260.681094][T15297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1006 sclass=netlink_audit_socket pid=15297 comm=syz.4.7256 [ 260.841571][T15343] xt_SECMARK: invalid mode: 2 [ 260.960758][T15370] xt_connbytes: Forcing CT accounting to be enabled [ 260.975141][T15374] xt_TCPMSS: Only works on TCP SYN packets [ 261.001172][T15379] __nla_validate_parse: 24 callbacks suppressed [ 261.001193][T15379] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7295'. [ 261.033105][T15379] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7295'. [ 261.148409][T15419] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 261.300947][T15461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.376870][T15483] xt_TPROXY: Can be used only with -p tcp or -p udp [ 261.548520][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7369'. [ 261.629833][T15549] x_tables: duplicate underflow at hook 3 [ 261.814350][T15598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.125235][T15656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.284889][T15676] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.316369][T15682] binfmt_misc: register: failed to install interpreter file ./file0 [ 262.355377][ T28] kauditd_printk_skb: 881 callbacks suppressed [ 262.355394][ T28] audit: type=1400 audit(2000000003.719:9519): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.420094][ T28] audit: type=1400 audit(2000000003.719:9520): avc: denied { read write } for pid=284 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.480201][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7459'. [ 262.490036][ T28] audit: type=1400 audit(2000000003.719:9521): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.562832][ T28] audit: type=1400 audit(2000000003.747:9522): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.623357][ T28] audit: type=1400 audit(2000000003.747:9523): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.632512][T15742] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7476'. [ 262.665958][ T28] audit: type=1400 audit(2000000003.756:9524): avc: denied { read } for pid=15649 comm="syz.1.7430" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 262.719503][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7485'. [ 262.738890][ T28] audit: type=1400 audit(2000000003.756:9525): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.773893][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7488'. [ 262.795941][T15768] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 262.807671][ T28] audit: type=1400 audit(2000000003.765:9526): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.885110][ T28] audit: type=1400 audit(2000000003.775:9527): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.924570][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7499'. [ 262.941552][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7501'. [ 262.957561][ T28] audit: type=1400 audit(2000000003.775:9528): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 263.175562][T15834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7522'. [ 263.199097][T15834] device vlan0 entered promiscuous mode [ 263.384779][T15887] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.405166][T15892] tc_dump_action: action bad kind [ 263.817906][T16013] validate_nla: 3 callbacks suppressed [ 263.817925][T16013] netlink: 'syz.3.7611': attribute type 13 has an invalid length. [ 263.836619][T16017] xt_bpf: check failed: parse error [ 264.041327][T16073] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.088186][ T2612] ------------[ cut here ]------------ [ 264.093718][ T2612] kernel BUG at fs/buffer.c:2714! [ 264.114595][ T2612] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 264.120774][ T2612] CPU: 0 PID: 2612 Comm: kmmpd-loop0 Not tainted 6.1.145-syzkaller-00039-g39e817cf9025 #0 [ 264.130791][ T2612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.141418][ T2612] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 264.146837][ T2612] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 38 e8 ff e9 b0 fe ff ff e8 0e d5 a3 ff 0f 0b e8 07 d5 a3 ff <0f> 0b e8 00 d5 a3 ff 0f 0b e8 f9 d4 a3 ff 0f 0b e8 f2 d4 a3 ff 0f [ 264.166515][ T2612] RSP: 0000:ffffc900010dfca0 EFLAGS: 00010293 [ 264.172673][ T2612] RAX: ffffffff81cc2d79 RBX: 0000000000000000 RCX: ffff8881378ce540 [ 264.180781][ T2612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.188809][ T2612] RBP: ffffc900010dfcf0 R08: dffffc0000000000 R09: ffffed10228d9055 [ 264.196902][ T2612] R10: ffffed10228d9055 R11: 1ffff110228d9054 R12: 0000000000000000 [ 264.204900][ T2612] R13: 1ffff110228d9054 R14: ffff8881146c82a0 R15: 0000000000003801 [ 264.212907][ T2612] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 264.222302][ T2612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.228933][ T2612] CR2: 00007fdf20780f98 CR3: 0000000110249000 CR4: 00000000003506b0 [ 264.236924][ T2612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.244915][ T2612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.252910][ T2612] Call Trace: [ 264.256215][ T2612] [ 264.259161][ T2612] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 264.265089][ T2612] submit_bh+0x1f/0x30 [ 264.269175][ T2612] write_mmp_block_thawed+0x34a/0x4c0 [ 264.274659][ T2612] ? read_mmp_block+0x6d0/0x6d0 [ 264.279538][ T2612] ? __cfi_process_timeout+0x10/0x10 [ 264.284847][ T2612] write_mmp_block+0x138/0x2b0 [ 264.289641][ T2612] kmmpd+0x3ce/0x950 [ 264.293549][ T2612] kthread+0x281/0x320 [ 264.297629][ T2612] ? __cfi_kmmpd+0x10/0x10 [ 264.302056][ T2612] ? __cfi_kthread+0x10/0x10 [ 264.306660][ T2612] ret_from_fork+0x1f/0x30 [ 264.311090][ T2612] [ 264.314141][ T2612] Modules linked in: [ 264.321991][ T2612] ---[ end trace 0000000000000000 ]--- [ 264.327706][ T2612] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 264.333104][ T2612] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 38 e8 ff e9 b0 fe ff ff e8 0e d5 a3 ff 0f 0b e8 07 d5 a3 ff <0f> 0b e8 00 d5 a3 ff 0f 0b e8 f9 d4 a3 ff 0f 0b e8 f2 d4 a3 ff 0f [ 264.353034][ T2612] RSP: 0000:ffffc900010dfca0 EFLAGS: 00010293 [ 264.359448][ T2612] RAX: ffffffff81cc2d79 RBX: 0000000000000000 RCX: ffff8881378ce540 [ 264.367539][ T2612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.376273][ T2612] RBP: ffffc900010dfcf0 R08: dffffc0000000000 R09: ffffed10228d9055 [ 264.384560][ T2612] R10: ffffed10228d9055 R11: 1ffff110228d9054 R12: 0000000000000000 [ 264.392755][ T2612] R13: 1ffff110228d9054 R14: ffff8881146c82a0 R15: 0000000000003801 [ 264.400869][ T2612] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 264.409950][ T2612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.416855][ T2612] CR2: 0000555564b174a8 CR3: 0000000110249000 CR4: 00000000003506a0 [ 264.424886][ T2612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 264.432967][ T2612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 264.441006][ T2612] Kernel panic - not syncing: Fatal exception [ 264.447477][ T2612] Kernel Offset: disabled [ 264.451816][ T2612] Rebooting in 86400 seconds..