last executing test programs: 782.908708ms ago: executing program 0 (id=8826): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 716.865149ms ago: executing program 0 (id=8834): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) 692.264809ms ago: executing program 0 (id=8835): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0xffffffffffffffff, 0x0, 0x60000007, 0x0) 678.553109ms ago: executing program 3 (id=8838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d61", @ANYBLOB="e8001a8048000a8014000700ff02"], 0x15c}}, 0x0) 641.73815ms ago: executing program 0 (id=8842): r0 = socket(0x10, 0x803, 0x0) bind$packet(r0, &(0x7f0000000380)={0x11, 0x19, 0x0, 0x1, 0xd4, 0x6, @broadcast}, 0x14) 627.195401ms ago: executing program 3 (id=8843): sigaltstack(&(0x7f00000008c0)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f0000001a00)={0x0, 0x80000002}, &(0x7f0000001b40)={0x0}) 600.627931ms ago: executing program 0 (id=8845): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) 593.798191ms ago: executing program 2 (id=8847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 574.011121ms ago: executing program 3 (id=8848): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@srh={0x3b, 0x0, 0x4, 0x0, 0x6a, 0x58, 0x9}, 0x8) 573.510541ms ago: executing program 2 (id=8849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @broadcast}, 0x11, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)='veth0_vlan\x00', 0xc, 0xfffffffffffffab2}) 550.854791ms ago: executing program 0 (id=8851): r0 = syz_mount_image$f2fs(&(0x7f0000010240), &(0x7f0000000000)='./file1\x00', 0x3210008, &(0x7f0000000080)=ANY=[], 0x0, 0x1022c, &(0x7f00000204c0)="$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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes256, 0x10, '\x00', @a}) 543.667432ms ago: executing program 3 (id=8852): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 543.232292ms ago: executing program 2 (id=8862): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) 490.109762ms ago: executing program 3 (id=8856): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f0000000240)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x20}, @loopback, 0x3, 0xe, 0xe0, 0x600, 0xd1e, 0x800000}) 482.784332ms ago: executing program 2 (id=8857): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000240), 0x10) 456.329353ms ago: executing program 3 (id=8859): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000), 0x0) 387.154404ms ago: executing program 2 (id=8864): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000001e005f0214fffffffffffff80700001c0d00000000000000080009a60d000000", 0x24) 368.273044ms ago: executing program 2 (id=8866): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x4, "f81a085e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 348.777925ms ago: executing program 4 (id=8868): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="0704", 0x2) 307.485245ms ago: executing program 4 (id=8869): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x81, {{0x29, 0x0, 0x5000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x88) 307.022635ms ago: executing program 1 (id=8870): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x77359400}, 0x10) 290.574326ms ago: executing program 1 (id=8871): personality(0x4000005) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f0000000000), 0x8}) 279.222046ms ago: executing program 4 (id=8872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x50, 0x10, 0x403, 0x70bd28, 0x40000, {0x0, 0x0, 0x4, 0x0, 0x3ef, 0x22100}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x9}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x4004850) 224.860987ms ago: executing program 1 (id=8873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000240)={0x7, 'vlan0\x00', {0x80}}) 146.072878ms ago: executing program 4 (id=8874): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xd3, 0x0, 0x0) 139.663708ms ago: executing program 1 (id=8875): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) pwritev2(r0, &(0x7f0000002880)=[{&(0x7f00000027c0)='&', 0x1}], 0x1, 0x6, 0x1, 0x12) 72.162369ms ago: executing program 1 (id=8876): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x2, 0x80) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000340)=ANY=[], 0x76) 70.903699ms ago: executing program 4 (id=8877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf457a000000", @ANYRES32=0x0, @ANYBLOB="0193050008c00000140012800b0001006272696467650000040002800500110002000000050010"], 0x44}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) 5.46663ms ago: executing program 1 (id=8878): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x19, 0x0, &(0x7f0000000280)) 0s ago: executing program 4 (id=8879): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='io\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): T664] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.614824][ T664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.624426][ T319] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 196.628787][ T664] usb 5-1: Product: syz [ 196.632931][ T319] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input20 [ 196.638620][ T664] usb 5-1: Manufacturer: syz [ 196.649496][ T664] usb 5-1: SerialNumber: syz [ 196.654205][ T319] input: failed to attach handler kbd to device input20, error: -5 [ 196.673829][ T319] usb 2-1: USB disconnect, device number 96 [ 196.865192][ T320] ums-sddr55 1-1:106.33: USB Mass Storage device detected [ 196.870783][ T8711] loop3: detected capacity change from 0 to 128 [ 196.881494][ T664] usb 5-1: 0:1 : does not exist [ 196.889443][ T320] ums-sddr55 1-1:106.33: Quirks match for vid 07c4 pid a103: 8 [ 196.902548][ T664] usb 5-1: USB disconnect, device number 98 [ 196.931389][ T320] usb 1-1: USB disconnect, device number 101 [ 196.975799][ T671] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 197.034721][ T8719] loop3: detected capacity change from 0 to 32768 [ 197.083834][ T28] audit: type=1400 audit(2000004243.723:259): avc: denied { create } for pid=8724 comm="syz.3.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.118672][ T28] audit: type=1400 audit(2000004243.751:260): avc: denied { write } for pid=8724 comm="syz.3.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.153234][ T8729] loop3: detected capacity change from 0 to 2048 [ 197.182123][ T671] usb 3-1: Using ep0 maxpacket: 8 [ 197.195826][ T671] usb 3-1: config 162 has an invalid interface number: 52 but max is 1 [ 197.215785][ T671] usb 3-1: config 162 has no interface number 1 [ 197.224648][ T671] usb 3-1: config 162 interface 52 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 197.250074][ T671] usb 3-1: config 162 interface 0 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 197.267925][ T671] usb 3-1: config 162 interface 0 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 197.284077][ T671] usb 3-1: config 162 interface 52 has no altsetting 0 [ 197.291833][ T671] usb 3-1: config 162 interface 0 has no altsetting 0 [ 197.312090][ T671] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=65.f0 [ 197.330029][ T671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.344622][ T671] usb 3-1: Product: syz [ 197.348859][ T671] usb 3-1: Manufacturer: syz [ 197.353540][ T671] usb 3-1: SerialNumber: syz [ 197.485404][ T28] audit: type=1400 audit(2000004244.101:261): avc: denied { read } for pid=8756 comm="syz.4.4063" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 197.525630][ T28] audit: type=1400 audit(2000004244.120:262): avc: denied { ioctl } for pid=8756 comm="syz.4.4063" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 197.598016][ T671] usb 3-1: USB disconnect, device number 97 [ 197.616615][ T28] audit: type=1400 audit(2000004244.166:263): avc: denied { write } for pid=8760 comm="syz.0.4065" name="netlink" dev="proc" ino=4026532414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 197.636303][ T8751] loop3: detected capacity change from 0 to 32768 [ 197.713790][ T28] audit: type=1400 audit(2000004244.175:264): avc: denied { setopt } for pid=8758 comm="syz.4.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.758378][ T8777] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4072'. [ 197.789470][ T28] audit: type=1400 audit(2000004244.351:265): avc: denied { write } for pid=8776 comm="syz.4.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.853686][ T28] audit: type=1400 audit(2000004244.351:266): avc: denied { nlmsg_write } for pid=8776 comm="syz.4.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.928820][ T28] audit: type=1400 audit(2000004244.406:267): avc: denied { write } for pid=8780 comm="syz.4.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 198.179116][ T8807] printk: syz.2.4088 (8807): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 198.210733][ T8769] loop3: detected capacity change from 0 to 40427 [ 198.237956][ T8769] F2FS-fs (loop3): invalid crc value [ 198.304897][ T8769] F2FS-fs (loop3): invalid journal entries nats 0 sits 518 [ 198.319396][ T8769] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-22) [ 198.761076][ T8835] loop3: detected capacity change from 0 to 256 [ 198.762098][ T8834] loop2: detected capacity change from 0 to 512 [ 198.865006][ T8837] loop3: detected capacity change from 0 to 2048 [ 199.118839][ T8789] loop4: detected capacity change from 0 to 131072 [ 199.162804][ T8789] F2FS-fs (loop4): Found nat_bits in checkpoint [ 199.285654][ T8789] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 199.445375][ T8865] binfmt_misc: register: failed to install interpreter file ./file0 [ 199.610139][ T8871] xt_policy: too many policy elements [ 199.771921][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4120'. [ 199.791779][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4120'. [ 200.036289][ T8909] Illegal XDP return value 4294967274 on prog (id 437) dev N/A, expect packet loss! [ 200.097854][ T8917] overlayfs: missing 'lowerdir' [ 200.210062][ T8934] netlink: 'syz.3.4146': attribute type 49 has an invalid length. [ 200.238701][ T8934] netlink: 'syz.3.4146': attribute type 49 has an invalid length. [ 200.439405][ T8961] netlink: 'syz.3.4161': attribute type 13 has an invalid length. [ 200.490331][ T8965] binder: 8964:8965 ioctl 400c620e 200000000280 returned -22 [ 200.807096][ T9025] loop3: detected capacity change from 0 to 256 [ 200.892294][ T9034] xt_limit: Overflow, try lower: 65536/2147483648 [ 201.055165][ T9064] loop2: detected capacity change from 0 to 256 [ 201.112751][ T9064] FAT-fs (loop2): Directory bread(block 64) failed [ 201.126738][ T9064] FAT-fs (loop2): Directory bread(block 65) failed [ 201.144277][ T9064] FAT-fs (loop2): Directory bread(block 66) failed [ 201.169235][ T9064] FAT-fs (loop2): Directory bread(block 67) failed [ 201.176038][ T9064] FAT-fs (loop2): Directory bread(block 68) failed [ 201.206659][ T9064] FAT-fs (loop2): Directory bread(block 69) failed [ 201.223392][ T9064] FAT-fs (loop2): Directory bread(block 70) failed [ 201.241007][ T9064] FAT-fs (loop2): Directory bread(block 71) failed [ 201.266870][ T9064] FAT-fs (loop2): Directory bread(block 72) failed [ 201.276266][ T9090] loop3: detected capacity change from 0 to 512 [ 201.277788][ T9064] FAT-fs (loop2): Directory bread(block 73) failed [ 201.306338][ T9090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.354152][ T9090] EXT4-fs (loop3): Test dummy encryption mode enabled [ 201.373010][ T9090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.425497][ T9090] EXT4-fs (loop3): 1 truncate cleaned up [ 201.431461][ T9090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 201.459591][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 201.459609][ T28] audit: type=1400 audit(2000004247.765:293): avc: denied { write } for pid=9089 comm="syz.3.4226" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.472793][ T9090] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 201.579233][ T9090] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.4226: bad entry in directory: inode out of bounds - offset=60, inode=33, rec_len=16, size=1024 fake=0 [ 201.605984][ T28] audit: type=1400 audit(2000004247.765:294): avc: denied { add_name } for pid=9089 comm="syz.3.4226" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.616488][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4242'. [ 201.686077][ T28] audit: type=1400 audit(2000004247.765:295): avc: denied { create } for pid=9089 comm="syz.3.4226" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 201.744634][ T285] EXT4-fs (loop3): unmounting filesystem. [ 201.792718][ T9140] xt_hashlimit: max too large, truncated to 1048576 [ 201.957886][ T28] audit: type=1400 audit(2000004248.227:296): avc: denied { setopt } for pid=9167 comm="syz.4.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.004626][ T28] audit: type=1326 audit(2000004248.254:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b438e929 code=0x7ffc0000 [ 202.085775][ T28] audit: type=1326 audit(2000004248.254:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b438e929 code=0x7ffc0000 [ 202.138620][ T28] audit: type=1326 audit(2000004248.264:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f26b438e929 code=0x7ffc0000 [ 202.197833][ T28] audit: type=1326 audit(2000004248.264:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b438e929 code=0x7ffc0000 [ 202.225469][ T28] audit: type=1326 audit(2000004248.264:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.0.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b438e929 code=0x7ffc0000 [ 202.232761][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.251976][ T28] audit: type=1400 audit(2000004248.347:302): avc: denied { bind } for pid=9190 comm="syz.2.4271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.409179][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4287'. [ 202.444977][ T9230] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4288'. [ 202.454148][ T9230] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4288'. [ 202.463510][ T9230] netlink: 'syz.0.4288': attribute type 6 has an invalid length. [ 202.480209][ T9230] netlink: 'syz.0.4288': attribute type 5 has an invalid length. [ 202.489146][ T9230] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4288'. [ 202.553109][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4292'. [ 202.634182][ T9246] loop3: detected capacity change from 0 to 512 [ 202.661990][ T9246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.672319][ T9246] EXT4-fs: Ignoring removed i_version option [ 202.686823][ T9246] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 202.714081][ T9246] EXT4-fs (loop3): 1 orphan inode deleted [ 202.729621][ T9246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.737178][ C1] sched: RT throttling activated [ 204.864927][ T285] EXT4-fs (loop3): unmounting filesystem. [ 204.884782][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4315'. [ 204.894785][ T9284] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 204.916899][ T9284] overlayfs: missing 'lowerdir' [ 204.977251][ T9292] loop4: detected capacity change from 0 to 256 [ 205.105246][ T9312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4329'. [ 205.171797][ T9322] netlink: 'syz.3.4334': attribute type 32 has an invalid length. [ 205.318426][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4351'. [ 205.336679][ T9358] netlink: 'syz.1.4352': attribute type 1 has an invalid length. [ 205.387568][ T9369] xt_TCPMSS: Only works on TCP SYN packets [ 205.419191][ T9376] netlink: 'syz.3.4360': attribute type 3 has an invalid length. [ 205.444331][ T9376] netlink: 'syz.3.4360': attribute type 3 has an invalid length. [ 205.472310][ T9383] loop3: detected capacity change from 0 to 512 [ 205.512546][ T9383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 205.525237][ T320] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 205.532954][ T9383] ext4 filesystem being mounted at /910/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.570906][ T9399] loop2: detected capacity change from 0 to 128 [ 205.590476][ T9399] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 205.592743][ T9383] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.4365: corrupted xattr block 33 [ 205.608860][ T9399] FAT-fs (loop2): Filesystem has been set read-only [ 205.611320][ T9383] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 205.626621][ T9383] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.4365: corrupted xattr block 33 [ 205.627006][ T9383] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 205.627422][ T9383] EXT4-fs error (device loop3): ext4_xattr_block_find:1837: inode #15: comm syz.3.4365: corrupted xattr block 33 [ 205.646092][ T285] EXT4-fs (loop3): unmounting filesystem. [ 205.701984][ T9411] netlink: 'syz.2.4375': attribute type 2 has an invalid length. [ 205.742363][ T320] usb 5-1: Using ep0 maxpacket: 16 [ 205.748938][ T320] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 205.763710][ T320] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 205.793796][ T320] usb 5-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 205.812056][ T320] usb 5-1: config 1 interface 0 has no altsetting 0 [ 205.831796][ T320] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.846751][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.855029][ T320] usb 5-1: SerialNumber: syz [ 205.866252][ T9332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.873816][ T9332] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.980222][ T664] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 205.985685][ T9456] 9pnet_fd: Insufficient options for proto=fd [ 205.997325][ T9458] incfs: Options parsing error. -22 [ 206.006406][ T9458] incfs: mount failed -22 [ 206.011339][ T9451] loop3: detected capacity change from 0 to 8192 [ 206.035617][ T9451] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.054254][ T9451] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 206.065197][ T9451] FAT-fs (loop3): Filesystem has been set read-only [ 206.069495][ T9464] loop2: detected capacity change from 0 to 256 [ 206.102368][ T320] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 206.121885][ T320] usb 5-1: USB disconnect, device number 99 [ 206.198128][ T664] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 206.213055][ T664] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 206.235499][ T664] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 206.251904][ T664] usb 1-1: config 220 has no interface number 2 [ 206.258291][ T664] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.265240][ T9491] loop3: detected capacity change from 0 to 512 [ 206.294451][ T664] usb 1-1: config 220 interface 0 has no altsetting 0 [ 206.302941][ T9491] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.311913][ T664] usb 1-1: config 220 interface 76 has no altsetting 0 [ 206.319357][ T664] usb 1-1: config 220 interface 1 has no altsetting 0 [ 206.326442][ T9497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4419'. [ 206.331373][ T664] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 206.346168][ T9491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.362284][ T9491] ext4 filesystem being mounted at /923/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.373048][ T664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.381227][ T664] usb 1-1: Product: syz [ 206.385499][ T664] usb 1-1: Manufacturer: syz [ 206.390127][ T664] usb 1-1: SerialNumber: syz [ 206.397820][ T9491] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.4416: corrupted xattr block 19 [ 206.428257][ T9491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 206.450390][ T9491] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz.3.4416: corrupted xattr block 19 [ 206.475642][ T9491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 206.484945][ T9491] EXT4-fs error (device loop3): ext4_xattr_block_list:719: inode #15: comm syz.3.4416: corrupted xattr block 19 [ 206.503308][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4429'. [ 206.517417][ T285] EXT4-fs (loop3): unmounting filesystem. [ 206.622453][ T664] usb 1-1: selecting invalid altsetting 0 [ 206.630938][ T664] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 206.637331][ T664] usb 1-1: No valid video chain found. [ 206.685803][ T664] usb 1-1: USB disconnect, device number 102 [ 206.714793][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4447'. [ 206.736611][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4447'. [ 206.771703][ T9564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1006 sclass=netlink_audit_socket pid=9564 comm=syz.2.4451 [ 206.784521][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4449'. [ 206.958900][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 206.958918][ T28] audit: type=1400 audit(2000004252.841:323): avc: denied { bind } for pid=9598 comm="syz.4.4469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.022538][ T28] audit: type=1400 audit(2000004252.841:324): avc: denied { name_bind } for pid=9598 comm="syz.4.4469" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 207.075761][ T28] audit: type=1400 audit(2000004252.841:325): avc: denied { node_bind } for pid=9598 comm="syz.4.4469" saddr=ff01::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 207.076091][ T9615] loop2: detected capacity change from 0 to 256 [ 207.109996][ T9617] netlink: 'syz.3.4479': attribute type 1 has an invalid length. [ 207.117799][ T9617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4479'. [ 207.137933][ T28] audit: type=1400 audit(2000004252.924:326): avc: denied { setopt } for pid=9611 comm="syz.3.4476" lport=44 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.203118][ T28] audit: type=1400 audit(2000004252.933:327): avc: denied { write } for pid=9610 comm="syz.4.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.232686][ T9615] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 207.275151][ T9615] FAT-fs (loop2): Filesystem has been set read-only [ 207.297861][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4486'. [ 207.473162][ T28] audit: type=1400 audit(2000004253.312:328): avc: denied { checkpoint_restore } for pid=9659 comm="syz.2.4500" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.536050][ T28] audit: type=1326 audit(2000004253.367:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4e98e929 code=0x7ffc0000 [ 207.579236][ T9682] futex_wake_op: syz.1.4510 tries to shift op by 32; fix this program [ 207.619695][ T28] audit: type=1326 audit(2000004253.367:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4e98e929 code=0x7ffc0000 [ 207.681163][ T28] audit: type=1326 audit(2000004253.367:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7eff4e98e929 code=0x7ffc0000 [ 207.788183][ T28] audit: type=1326 audit(2000004253.367:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9670 comm="syz.4.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4e98e929 code=0x7ffc0000 [ 207.835995][ T9724] netlink: 'syz.3.4531': attribute type 4 has an invalid length. [ 207.901694][ T9740] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 207.924065][ T664] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.942593][ T664] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.958502][ T664] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.039707][ T9763] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 208.060660][ T671] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 208.072040][ T664] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.091682][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 208.212692][ T664] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.214803][ T9789] loop3: detected capacity change from 0 to 256 [ 208.228539][ T9790] netlink: 'syz.4.4563': attribute type 3 has an invalid length. [ 208.239872][ T9789] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 208.253012][ T9790] netlink: 'syz.4.4563': attribute type 3 has an invalid length. [ 208.278344][ T671] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 208.309938][ T671] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 208.322940][ T671] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 208.333045][ T671] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.350006][ T671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.392400][ T9711] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.406093][ T671] usb 1-1: invalid MIDI in EP 0 [ 208.413953][ T9816] tc_dump_action: action bad kind [ 208.431529][ T671] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 208.451092][ T2826] udevd[2826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 208.644300][ T671] usb 1-1: USB disconnect, device number 103 [ 208.876456][ T9898] xt_l2tp: invalid flags combination: 4 [ 208.911405][ T9907] loop3: detected capacity change from 0 to 256 [ 208.918534][ T9907] exfat: Deprecated parameter 'namecase' [ 208.957151][ T9907] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 209.139146][ T9941] loop3: detected capacity change from 0 to 256 [ 209.165699][ T9943] cgroup: noprefix used incorrectly [ 209.251199][ T9953] IPv6: sit2: Disabled Multicast RS [ 209.339769][ T9969] netlink: 'syz.3.4652': attribute type 5 has an invalid length. [ 209.362692][ T9969] device ip6erspan0 entered promiscuous mode [ 209.417630][ T9986] x_tables: unsorted underflow at hook 1 [ 209.421358][ T9989] loop3: detected capacity change from 0 to 256 [ 209.467757][ T9989] FAT-fs (loop3): Directory bread(block 64) failed [ 209.481490][ T9989] FAT-fs (loop3): Directory bread(block 65) failed [ 209.495507][ T9989] FAT-fs (loop3): Directory bread(block 66) failed [ 209.507912][ T9997] tc_dump_action: action bad kind [ 209.510570][ T9989] FAT-fs (loop3): Directory bread(block 67) failed [ 209.520713][ T9989] FAT-fs (loop3): Directory bread(block 68) failed [ 209.527540][ T9989] FAT-fs (loop3): Directory bread(block 69) failed [ 209.555450][ T9989] FAT-fs (loop3): Directory bread(block 70) failed [ 209.570450][ T9989] FAT-fs (loop3): Directory bread(block 71) failed [ 209.584301][ T9989] FAT-fs (loop3): Directory bread(block 72) failed [ 209.597896][ T9989] FAT-fs (loop3): Directory bread(block 73) failed [ 209.634951][T10017] tipc: Trying to set illegal importance in message [ 209.742909][T10035] tipc: Can't bind to reserved service type 0 [ 210.011124][ T664] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 210.026074][T10101] loop4: detected capacity change from 0 to 512 [ 210.045296][ T319] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 210.096800][T10101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.115530][T10101] ext4 filesystem being mounted at /914/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.133581][T10101] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.4719: corrupted xattr block 33 [ 210.145660][T10101] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 210.156838][T10101] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.4719: corrupted xattr block 33 [ 210.170394][T10101] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 210.170697][T10101] EXT4-fs error (device loop4): ext4_xattr_block_find:1837: inode #15: comm syz.4.4719: corrupted xattr block 33 [ 210.188934][ T286] EXT4-fs (loop4): unmounting filesystem. [ 210.227808][ T664] usb 4-1: Using ep0 maxpacket: 16 [ 210.237937][ T664] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 210.250928][ T319] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 210.256337][ T664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.267421][ T319] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 210.268260][ T664] usb 4-1: Product: syz [ 210.281879][T10135] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.281994][T10135] IPv6: Can't replace route, no match found [ 210.296485][ T319] usb 1-1: config 220 has no interface number 2 [ 210.302790][ T319] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 210.302824][ T664] usb 4-1: Manufacturer: syz [ 210.320656][T10136] __nla_validate_parse: 9 callbacks suppressed [ 210.320675][T10136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4733'. [ 210.328943][ T319] usb 1-1: config 220 interface 0 has no altsetting 0 [ 210.335886][ T664] usb 4-1: SerialNumber: syz [ 210.347758][T10136] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4733'. [ 210.358184][ T319] usb 1-1: config 220 interface 76 has no altsetting 0 [ 210.360798][ T664] r8152-cfgselector 4-1: config 0 descriptor?? [ 210.372278][ T319] usb 1-1: config 220 interface 1 has no altsetting 0 [ 210.397884][ T319] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 210.414269][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.433509][ T319] usb 1-1: Product: syz [ 210.438366][ T319] usb 1-1: Manufacturer: syz [ 210.443005][ T319] usb 1-1: SerialNumber: syz [ 210.593663][ T664] r8152-cfgselector 4-1: Unknown version 0x0000 [ 210.673410][ T319] usb 1-1: selecting invalid altsetting 0 [ 210.679344][ T319] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 210.700254][ T319] usb 1-1: No valid video chain found. [ 210.728124][ T319] usb 1-1: USB disconnect, device number 104 [ 210.827332][ T664] r8152-cfgselector 4-1: Unknown version 0x0000 [ 210.833681][ T664] r8152-cfgselector 4-1: bad CDC descriptors [ 210.848452][ T664] r8152-cfgselector 4-1: Unknown version 0x0000 [ 210.868675][ T664] r8152-cfgselector 4-1: USB disconnect, device number 98 [ 210.921055][T10227] loop2: detected capacity change from 0 to 256 [ 210.955979][T10229] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 211.307424][T10271] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4801'. [ 211.322279][ T320] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 211.411094][ T319] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 211.526319][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4818'. [ 211.535373][ T320] usb 5-1: Using ep0 maxpacket: 32 [ 211.540620][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4818'. [ 211.553177][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4818'. [ 211.568178][ T320] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 211.569424][T10309] loop3: detected capacity change from 0 to 256 [ 211.576731][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4818'. [ 211.592914][ T320] usb 5-1: config 0 has no interface number 0 [ 211.597454][T10309] FAT-fs (loop3): Directory bread(block 64) failed [ 211.599927][ T320] usb 5-1: config 0 interface 2 has no altsetting 0 [ 211.606136][T10309] FAT-fs (loop3): Directory bread(block 65) failed [ 211.613629][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4818'. [ 211.619223][ T319] usb 3-1: Using ep0 maxpacket: 8 [ 211.633317][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4818'. [ 211.646102][T10309] FAT-fs (loop3): Directory bread(block 66) failed [ 211.648698][ T320] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 211.655128][ T319] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 211.663308][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.675458][T10309] FAT-fs (loop3): Directory bread(block 67) failed [ 211.679639][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4818'. [ 211.694605][ T320] usb 5-1: Product: syz [ 211.695904][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.698793][ T320] usb 5-1: Manufacturer: syz [ 211.698811][ T320] usb 5-1: SerialNumber: syz [ 211.711606][T10309] FAT-fs (loop3): Directory bread(block 68) failed [ 211.730777][ T320] usb 5-1: config 0 descriptor?? [ 211.736053][T10309] FAT-fs (loop3): Directory bread(block 69) failed [ 211.737400][ T319] usb 3-1: config 0 descriptor?? [ 211.743869][T10309] FAT-fs (loop3): Directory bread(block 70) failed [ 211.758975][T10309] FAT-fs (loop3): Directory bread(block 71) failed [ 211.765738][T10309] FAT-fs (loop3): Directory bread(block 72) failed [ 211.777468][T10309] FAT-fs (loop3): Directory bread(block 73) failed [ 211.964138][ T320] snd-usb-audio: probe of 5-1:0.2 failed with error -2 [ 211.987801][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 211.992477][ T320] usb 3-1: USB disconnect, device number 98 [ 212.045032][T10351] device vti0 entered promiscuous mode [ 212.185743][T10379] netlink: 'syz.0.4855': attribute type 3 has an invalid length. [ 212.194453][T10379] netlink: 'syz.0.4855': attribute type 2 has an invalid length. [ 212.207417][ T6] usb 5-1: USB disconnect, device number 100 [ 212.210769][T10379] netlink: 'syz.0.4855': attribute type 2 has an invalid length. [ 212.442487][T10419] netlink: 'syz.1.4875': attribute type 1 has an invalid length. [ 212.470849][ T319] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 212.494801][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 212.494819][ T28] audit: type=1400 audit(2000004257.954:436): avc: denied { read } for pid=10426 comm="syz.1.4879" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.526010][ T28] audit: type=1400 audit(2000004257.963:437): avc: denied { open } for pid=10426 comm="syz.1.4879" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.549650][ T28] audit: type=1400 audit(2000004257.982:438): avc: denied { ioctl } for pid=10426 comm="syz.1.4879" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.611675][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.612140][T10435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.691285][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.702952][ T319] usb 4-1: not running at top speed; connect to a high speed hub [ 212.719065][ T319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.729972][ T319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.750762][ T319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.762927][T10458] loop2: detected capacity change from 0 to 512 [ 212.764585][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.792245][ T319] usb 4-1: Product: syz [ 212.796655][ T319] usb 4-1: Manufacturer: syz [ 212.801351][ T319] usb 4-1: SerialNumber: syz [ 212.815241][T10458] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4894: invalid indirect mapped block 256 (level 2) [ 212.837080][T10458] EXT4-fs (loop2): 2 truncates cleaned up [ 212.843820][T10458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.035865][ T319] usb 4-1: 0:2 : does not exist [ 213.040828][ T319] usb 4-1: unit 244 not found! [ 213.060605][ T319] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 213.062208][T10510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.075872][T10510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.078014][ T319] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 213.111837][ T319] usb 4-1: USB disconnect, device number 99 [ 213.112753][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 213.127908][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.136609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 213.145017][ T664] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.153073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.161578][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.170502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.178951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.185971][ T6] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 213.187631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.204769][T10510] syz.4.4919 (10510) used greatest stack depth: 21856 bytes left [ 213.356117][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.383388][ T6] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 213.401359][ T6] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 213.418576][ T6] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 213.428981][ T28] audit: type=1400 audit(2000004258.812:439): avc: denied { setopt } for pid=10548 comm="syz.4.4938" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.455139][ T6] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.464562][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.482203][T10458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.492783][ T6] usb 3-1: invalid MIDI in EP 0 [ 213.511854][ T6] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 213.521158][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.555793][ T28] audit: type=1400 audit(2000004258.932:440): avc: denied { setopt } for pid=10564 comm="syz.0.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.578436][T10567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10567 comm=syz.1.4947 [ 213.686239][T10586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.706233][T10586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.724093][ T319] usb 3-1: USB disconnect, device number 99 [ 213.762859][T10586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 213.776391][T10587] device veth1_macvtap left promiscuous mode [ 213.792975][T10587] device macsec0 entered promiscuous mode [ 213.801122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.811922][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 213.828558][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.843907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 213.857837][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.866440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.878623][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.931895][T10586] syz.1.4956 (10586) used greatest stack depth: 21728 bytes left [ 213.943112][ T28] audit: type=1400 audit(2000004259.292:441): avc: denied { ioctl } for pid=10604 comm="syz.3.4967" path="socket:[46694]" dev="sockfs" ino=46694 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.974175][T10613] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 214.069897][ T28] audit: type=1326 audit(212.023:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.4.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4e98e929 code=0x7ffc0000 [ 214.093228][ T664] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.122627][T10638] bridge0: port 3(veth0_vlan) entered blocking state [ 214.133731][ T28] audit: type=1326 audit(212.023:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.4.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7eff4e98e929 code=0x7ffc0000 [ 214.172242][T10638] bridge0: port 3(veth0_vlan) entered disabled state [ 214.183678][T10638] bridge0: port 3(veth0_vlan) entered blocking state [ 214.190424][T10638] bridge0: port 3(veth0_vlan) entered forwarding state [ 214.204742][ T28] audit: type=1326 audit(212.023:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.4.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4e98e929 code=0x7ffc0000 [ 214.267541][ T28] audit: type=1400 audit(212.060:445): avc: denied { write } for pid=10634 comm="syz.0.4980" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 214.300845][ T283] EXT4-fs (loop2): unmounting filesystem. [ 214.449613][T10680] device bridge2 entered promiscuous mode [ 214.458877][T10682] loop3: detected capacity change from 0 to 512 [ 214.475404][ T565] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 214.488871][T10682] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5002: invalid indirect mapped block 256 (level 2) [ 214.502808][T10682] EXT4-fs (loop3): 2 truncates cleaned up [ 214.509388][T10682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.671726][ T565] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 214.692546][ T565] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 214.697704][T10721] loop4: detected capacity change from 0 to 16 [ 214.703445][ T565] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 214.716794][T10721] erofs: (device loop4): mounted with root inode @ nid 36. [ 214.733325][T10723] device bridge1 entered promiscuous mode [ 214.752181][ T565] usb 2-1: config 220 has no interface number 2 [ 214.781484][ T565] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 214.800729][ T565] usb 2-1: config 220 interface 0 has no altsetting 0 [ 214.823274][ T565] usb 2-1: config 220 interface 76 has no altsetting 0 [ 214.843684][ T671] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 214.846025][ T565] usb 2-1: config 220 interface 1 has no altsetting 0 [ 214.860315][T10739] device vlan0 entered promiscuous mode [ 214.888034][ T565] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 214.905657][ T565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.928516][T10748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.936049][ T565] usb 2-1: Product: syz [ 214.940412][ T565] usb 2-1: Manufacturer: syz [ 214.945772][ T565] usb 2-1: SerialNumber: syz [ 214.953359][T10748] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.988399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 214.997448][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.006081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 215.019953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.030985][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.039950][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.048831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.057117][ T671] usb 4-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 215.067271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.078835][ T671] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 215.079223][T10755] netlink: 'syz.4.5038': attribute type 30 has an invalid length. [ 215.101193][ T671] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 215.125494][ T671] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.152545][ T671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.174162][ T565] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 215.182751][ T565] usb 2-1: No valid video chain found. [ 215.187340][T10682] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 215.188340][ T565] usb 2-1: selecting invalid altsetting 0 [ 215.210272][ T671] usb 4-1: invalid MIDI in EP 0 [ 215.213784][T10772] bridge0: port 3(veth0_vlan) entered blocking state [ 215.222428][T10772] bridge0: port 3(veth0_vlan) entered disabled state [ 215.225011][ T671] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 215.231029][ T565] usb 2-1: USB disconnect, device number 97 [ 215.250523][T10772] bridge0: port 3(veth0_vlan) entered blocking state [ 215.257466][T10772] bridge0: port 3(veth0_vlan) entered forwarding state [ 215.275303][ T2826] udevd[2826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.437173][ T664] usb 4-1: USB disconnect, device number 100 [ 215.466461][T10801] netlink: 'syz.4.5058': attribute type 4 has an invalid length. [ 215.474679][T10801] netlink: 'syz.4.5058': attribute type 5 has an invalid length. [ 215.726876][T10843] netlink: 'syz.2.5079': attribute type 12 has an invalid length. [ 215.770117][T10851] mmap: syz.2.5083 (10851): VmData 29073408 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 215.854905][T10869] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.911075][T10882] netlink: 'syz.1.5099': attribute type 3 has an invalid length. [ 216.003735][ T285] EXT4-fs (loop3): unmounting filesystem. [ 216.027729][T10903] cgroup: Invalid name [ 216.110571][T10919] __nla_validate_parse: 28 callbacks suppressed [ 216.110594][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5118'. [ 216.117197][T10921] loop2: detected capacity change from 0 to 256 [ 216.138192][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5118'. [ 216.147283][T10919] tc_dump_action: action bad kind [ 216.167945][T10921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 216.353234][T10953] netlink: 'syz.0.5135': attribute type 12 has an invalid length. [ 216.479650][ T565] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 216.563170][T10984] bridge0: port 3(veth1_macvtap) entered blocking state [ 216.585069][T10984] bridge0: port 3(veth1_macvtap) entered disabled state [ 216.687126][ T565] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 216.713282][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.718664][ T565] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 216.731934][T10999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.774497][ T565] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 216.787098][T10999] device veth1_macvtap entered promiscuous mode [ 216.805275][ T565] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 216.820969][ T565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.827058][T10999] device macsec0 left promiscuous mode [ 216.841035][T10999] device ip6erspan0 left promiscuous mode [ 216.851659][T10925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.860489][T10999] device vti0 left promiscuous mode [ 216.872913][ T565] usb 2-1: invalid MIDI in EP 0 [ 216.878549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 216.892547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.905491][ T565] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 216.925150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 216.947588][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.976951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.994092][ T969] udevd[969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 217.001723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.035352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.053196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.071592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.097933][ T664] usb 2-1: USB disconnect, device number 98 [ 217.182172][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5172'. [ 217.253381][T11034] loop3: detected capacity change from 0 to 1024 [ 217.281467][ T671] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 217.302041][T11041] gretap0: refused to change device tx_queue_len [ 217.315352][T11041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 217.362656][T11034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 217.412529][T11034] EXT4-fs error (device loop3): ext4_empty_dir:3166: inode #11: block 448: comm syz.3.5174: Attempting to read directory block (448) that is past i_size (458760) [ 217.449685][ T285] EXT4-fs (loop3): unmounting filesystem. [ 217.498525][ T671] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.505162][ T671] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 217.539971][ T671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.568534][ T671] usb 5-1: config 0 descriptor?? [ 217.725788][ T287] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 217.737059][ T287] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 217.760363][ T664] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 217.795277][ T671] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 217.821690][ T671] usb 5-1: USB disconnect, device number 101 [ 217.924623][ T28] kauditd_printk_skb: 276 callbacks suppressed [ 217.924641][ T28] audit: type=1400 audit(215.586:722): avc: denied { ioctl } for pid=11099 comm="syz.1.5205" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 218.036923][T11108] device bridge2 entered promiscuous mode [ 218.038492][ T28] audit: type=1400 audit(215.614:723): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.047883][T11105] loop2: detected capacity change from 0 to 512 [ 218.066520][ T28] audit: type=1400 audit(215.614:724): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.073108][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 218.101337][ T28] audit: type=1400 audit(215.614:725): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.195558][ T28] audit: type=1400 audit(215.632:726): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.219289][ T28] audit: type=1400 audit(215.632:727): avc: denied { read write open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.221209][T11105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 218.244047][ T671] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 218.260293][ T28] audit: type=1400 audit(215.632:728): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.285268][ T28] audit: type=1400 audit(215.632:729): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.308848][ T28] audit: type=1400 audit(215.632:730): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.335522][ T28] audit: type=1400 audit(215.632:731): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.429871][ T287] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 218.537698][ T283] EXT4-fs (loop2): unmounting filesystem. [ 218.899154][T11192] xt_hashlimit: overflow, rate too high: 0 [ 218.930987][T11197] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.951604][T11197] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 218.996617][T11203] xt_TCPMSS: Only works on TCP SYN packets [ 219.064001][T11210] loop2: detected capacity change from 0 to 512 [ 219.115075][T11210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.190681][ T283] EXT4-fs (loop2): unmounting filesystem. [ 219.410940][T11248] loop3: detected capacity change from 0 to 256 [ 219.548729][T11264] xt_TCPMSS: Only works on TCP SYN packets [ 219.550281][T11265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.598546][T11265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.670715][T11265] device bridge1 left promiscuous mode [ 219.690920][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 219.712769][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.743759][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 219.765964][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.785282][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.803641][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.813222][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.822294][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.831656][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 219.844491][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 219.867237][T11289] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 219.900107][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5297'. [ 220.306219][T11335] loop4: detected capacity change from 0 to 256 [ 220.399778][T11347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.658064][T11373] xt_hashlimit: max too large, truncated to 1048576 [ 220.686452][T11373] xt_hashlimit: overflow, try lower: 0/0 [ 221.205714][T11435] xt_bpf: check failed: parse error [ 221.299262][T11445] random: crng reseeded on system resumption [ 221.582872][T11470] device ip6tnl2 entered promiscuous mode [ 221.696561][T11303] loop2: detected capacity change from 0 to 131072 [ 221.732586][T11303] F2FS-fs (loop2): Test dummy encryption mode enabled [ 221.768103][T11303] F2FS-fs (loop2): invalid crc value [ 221.816698][T11303] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.993300][T11303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 222.146095][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.194091][T11521] loop4: detected capacity change from 0 to 256 [ 222.232666][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 222.247909][T11521] FAT-fs (loop4): Directory bread(block 64) failed [ 222.270815][T11521] FAT-fs (loop4): Directory bread(block 65) failed [ 222.304666][T11521] FAT-fs (loop4): Directory bread(block 66) failed [ 222.321038][T11521] FAT-fs (loop4): Directory bread(block 67) failed [ 222.360368][T11521] FAT-fs (loop4): Directory bread(block 68) failed [ 222.384153][T11521] FAT-fs (loop4): Directory bread(block 69) failed [ 222.406981][T11521] FAT-fs (loop4): Directory bread(block 70) failed [ 222.413601][T11531] validate_nla: 3 callbacks suppressed [ 222.413619][T11531] netlink: 'syz.3.5414': attribute type 3 has an invalid length. [ 222.438526][T11521] FAT-fs (loop4): Directory bread(block 71) failed [ 222.445128][T11521] FAT-fs (loop4): Directory bread(block 72) failed [ 222.460188][T11521] FAT-fs (loop4): Directory bread(block 73) failed [ 222.756194][T11552] netlink: 'syz.0.5425': attribute type 4 has an invalid length. [ 222.798257][T11552] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5425'. [ 223.047444][T11584] loop4: detected capacity change from 0 to 2048 [ 223.066757][T11591] netlink: 'syz.0.5442': attribute type 13 has an invalid length. [ 223.076076][T11591] netlink: 'syz.0.5442': attribute type 27 has an invalid length. [ 223.101389][T11584] loop4: p1 < > p3 [ 223.120747][T11584] loop4: p3 size 134217728 extends beyond EOD, truncated [ 223.171052][ T102] loop4: p1 < > p3 [ 223.176416][T11598] loop3: detected capacity change from 0 to 1024 [ 223.184212][ T102] loop4: p3 size 134217728 extends beyond EOD, truncated [ 223.225640][T11608] SELinux: Context @ is not valid (left unmapped). [ 223.235852][T11610] xt_TCPMSS: Only works on TCP SYN packets [ 223.250002][ T420] udevd[420]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 223.270199][ T2826] udevd[2826]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 223.313790][T11598] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 223.352328][ T28] kauditd_printk_skb: 1002 callbacks suppressed [ 223.352389][ T28] audit: type=1400 audit(222.469:1734): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 223.362356][T11619] device bridge3 entered promiscuous mode [ 223.384514][ T285] EXT4-fs (loop3): unmounting filesystem. [ 223.430362][ T420] udevd[420]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 223.436637][ T28] audit: type=1400 audit(222.506:1735): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 223.450924][ T2826] udevd[2826]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 223.501362][T11629] netlink: 'syz.3.5460': attribute type 29 has an invalid length. [ 223.538175][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5460'. [ 223.567780][ T28] audit: type=1400 audit(222.506:1736): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 223.595504][T11629] netlink: 'syz.3.5460': attribute type 29 has an invalid length. [ 223.619943][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5460'. [ 223.650246][ T28] audit: type=1400 audit(222.506:1737): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 223.740767][T11651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5470'. [ 223.750810][ T28] audit: type=1400 audit(222.525:1738): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 223.776846][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.789701][ T282] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 223.806534][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.813765][ T282] audit: backlog limit exceeded [ 223.828853][ T283] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 223.862592][T11665] xt_l2tp: wrong L2TP version: 0 [ 223.902362][T11666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5480'. [ 223.911387][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5480'. [ 224.088200][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5489'. [ 224.097410][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5489'. [ 224.106387][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5489'. [ 224.126050][T11694] netlink: 'syz.2.5492': attribute type 27 has an invalid length. [ 224.341597][T11719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.600955][T11746] loop3: detected capacity change from 0 to 256 [ 224.616652][ T3654] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 224.661679][T11746] FAT-fs (loop3): Directory bread(block 64) failed [ 224.666921][T11752] loop2: detected capacity change from 0 to 256 [ 224.679198][T11746] FAT-fs (loop3): Directory bread(block 65) failed [ 224.704762][T11746] FAT-fs (loop3): Directory bread(block 66) failed [ 224.718714][T11752] FAT-fs (loop2): Directory bread(block 64) failed [ 224.724374][T11746] FAT-fs (loop3): Directory bread(block 67) failed [ 224.732421][T11752] FAT-fs (loop2): Directory bread(block 65) failed [ 224.734510][T11746] FAT-fs (loop3): Directory bread(block 68) failed [ 224.740580][T11752] FAT-fs (loop2): Directory bread(block 66) failed [ 224.747489][T11746] FAT-fs (loop3): Directory bread(block 69) failed [ 224.759262][T11746] FAT-fs (loop3): Directory bread(block 70) failed [ 224.765862][T11746] FAT-fs (loop3): Directory bread(block 71) failed [ 224.780878][T11752] FAT-fs (loop2): Directory bread(block 67) failed [ 224.787488][T11752] FAT-fs (loop2): Directory bread(block 68) failed [ 224.788709][T11746] FAT-fs (loop3): Directory bread(block 72) failed [ 224.801186][T11746] FAT-fs (loop3): Directory bread(block 73) failed [ 224.812779][T11752] FAT-fs (loop2): Directory bread(block 69) failed [ 224.819447][T11752] FAT-fs (loop2): Directory bread(block 70) failed [ 224.833173][T11752] FAT-fs (loop2): Directory bread(block 71) failed [ 224.843672][ T3654] usb 5-1: Using ep0 maxpacket: 16 [ 224.858175][ T3654] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 224.867695][T11752] FAT-fs (loop2): Directory bread(block 72) failed [ 224.881153][ T3654] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 224.893678][T11752] FAT-fs (loop2): Directory bread(block 73) failed [ 224.906072][ T3654] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 224.928368][ T3654] usb 5-1: config 0 has no interface number 0 [ 224.936017][ T3654] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 224.961578][ T3654] usb 5-1: config 0 interface 104 has no altsetting 1 [ 224.987821][ T3654] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 225.017092][ T3654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.041845][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5528'. [ 225.052133][ T3654] usb 5-1: Product: syz [ 225.061920][ T3654] usb 5-1: Manufacturer: syz [ 225.071467][ T3654] usb 5-1: SerialNumber: syz [ 225.089046][ T3654] usb 5-1: config 0 descriptor?? [ 225.256205][T11789] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 225.287935][T11794] device sit0 entered promiscuous mode [ 225.327796][ T3654] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 225.360638][ T3654] asix: probe of 5-1:0.104 failed with error -71 [ 225.379539][ T3654] usb 5-1: USB disconnect, device number 102 [ 225.607316][T11827] loop3: detected capacity change from 0 to 2048 [ 225.637265][T11831] SELinux: failed to load policy [ 225.664855][T11827] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 225.723930][ T285] EXT4-fs (loop3): unmounting filesystem. [ 227.044322][T11975] netlink: 'syz.2.5627': attribute type 12 has an invalid length. [ 227.125596][T11979] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 227.247042][T11990] IPv6: sit2: Disabled Multicast RS [ 227.506922][T12016] xt_hashlimit: invalid interval [ 227.596709][T12026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.605029][T12026] IPv6: NLM_F_CREATE should be set when creating new route [ 227.612320][T12026] IPv6: NLM_F_CREATE should be set when creating new route [ 227.943342][T12078] random: crng reseeded on system resumption [ 228.063458][T12090] netlink: 'syz.3.5684': attribute type 6 has an invalid length. [ 228.112710][T12096] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 228.144619][T12101] cgroup: Unexpected value for 'favordynmods' [ 228.338620][T12126] xt_ecn: cannot match TCP bits for non-tcp packets [ 228.555653][T12154] xt_l2tp: unknown flags: 17 [ 228.799180][ T28] kauditd_printk_skb: 1061 callbacks suppressed [ 228.799196][ T28] audit: type=1400 audit(227.500:2781): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.882824][ T28] audit: type=1400 audit(227.500:2782): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.891200][T12201] loop2: detected capacity change from 0 to 256 [ 228.911831][ T28] audit: type=1400 audit(227.500:2783): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.945658][T12203] loop4: detected capacity change from 0 to 256 [ 228.954612][T12203] exfat: Deprecated parameter 'utf8' [ 228.960012][T12203] exfat: Deprecated parameter 'utf8' [ 228.966697][T12203] exfat: Deprecated parameter 'utf8' [ 229.013516][ T28] audit: type=1400 audit(227.500:2784): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.026863][T12203] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 229.053902][T12209] __nla_validate_parse: 6 callbacks suppressed [ 229.053924][T12209] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5744'. [ 229.075255][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5744'. [ 229.086839][ T28] audit: type=1400 audit(227.518:2785): avc: denied { read write open } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.112514][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5744'. [ 229.122069][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5744'. [ 229.131784][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5744'. [ 229.141461][ T28] audit: type=1400 audit(227.518:2786): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.174579][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5744'. [ 229.183795][ T28] audit: type=1400 audit(227.527:2787): avc: denied { write } for pid=12188 comm="syz.3.5733" name="nf_conntrack_expect" dev="proc" ino=4026532587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 229.218444][ T28] audit: type=1400 audit(227.527:2788): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.271636][ T28] audit: type=1400 audit(227.527:2789): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.302858][T12222] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.946536][T12261] netlink: 'syz.3.5769': attribute type 30 has an invalid length. [ 230.110586][T12273] netlink: 'syz.0.5775': attribute type 16 has an invalid length. [ 230.132307][T12273] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5775'. [ 230.143860][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5776'. [ 230.169486][T12276] netlink: 'syz.3.5776': attribute type 3 has an invalid length. [ 230.538133][T12313] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5793'. [ 230.631594][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5799'. [ 231.027356][T12362] loop3: detected capacity change from 0 to 256 [ 231.173219][T12380] fuse: blksize only supported for fuseblk [ 231.409546][T12401] netlink: 'syz.1.5838': attribute type 27 has an invalid length. [ 231.526877][T12414] loop3: detected capacity change from 0 to 512 [ 231.591675][T12418] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.647907][T12414] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 231.677847][ T285] EXT4-fs (loop3): unmounting filesystem. [ 231.853604][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 231.987856][T12456] loop3: detected capacity change from 0 to 1024 [ 232.083642][T12456] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.207628][T12456] EXT4-fs warning (device loop3): empty_inline_dir:1866: bad inline directory (dir #12) - no `..' [ 232.288247][ T285] EXT4-fs (loop3): unmounting filesystem. [ 232.315097][T12479] netlink: 'syz.0.5875': attribute type 13 has an invalid length. [ 232.827802][T12535] xt_bpf: check failed: parse error [ 232.866508][T12539] loop2: detected capacity change from 0 to 256 [ 232.981381][ T6] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 233.124661][T12563] xt_hashlimit: size too large, truncated to 1048576 [ 233.149699][T12565] loop3: detected capacity change from 0 to 256 [ 233.188608][T12565] exFAT-fs (loop3): failed to read boot sector [ 233.205052][T12565] exFAT-fs (loop3): failed to recognize exfat type [ 233.207796][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 233.229698][ T6] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 233.241260][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.291585][ T6] usb 2-1: config 0 descriptor?? [ 233.308369][ T6] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 233.448106][T12591] xt_TCPMSS: Only works on TCP SYN packets [ 233.517570][T12596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.529321][ T6] usb 2-1: Detected FT232A [ 233.537748][ T6] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 233.694557][T12612] tc_dump_action: action bad kind [ 233.700548][T12601] syz.4.5935 (12601) used greatest stack depth: 21312 bytes left [ 233.766869][ T6] usb 2-1: USB disconnect, device number 99 [ 233.793089][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 233.802603][ T6] ftdi_sio 2-1:0.0: device disconnected [ 234.035959][T12658] netlink: 'syz.2.5964': attribute type 11 has an invalid length. [ 234.146510][T12671] IPv6: sit3: Disabled Multicast RS [ 234.235007][ T28] kauditd_printk_skb: 8955 callbacks suppressed [ 234.235025][ T28] audit: type=1400 audit(232.512:11704): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.270964][T12680] netlink: 'syz.3.5975': attribute type 5 has an invalid length. [ 234.289594][T12690] device vti0 entered promiscuous mode [ 234.347449][ T28] audit: type=1400 audit(232.512:11705): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.486802][ T28] audit: type=1400 audit(232.512:11706): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.565391][T12710] __nla_validate_parse: 12 callbacks suppressed [ 234.565414][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5990'. [ 234.613190][ T28] audit: type=1400 audit(232.530:11707): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.668430][T12718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.697067][T12724] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.703980][T12723] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.710523][T12723] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 234.722062][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.728763][T12718] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.736127][T12724] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 234.743968][ T28] audit: type=1400 audit(232.530:11708): avc: denied { read write open } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.809360][T12718] device vlan0 left promiscuous mode [ 234.865844][ T671] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.877780][ T671] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.984574][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.006261][ T671] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.056093][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6013'. [ 235.101606][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6015'. [ 235.631261][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6046'. [ 235.679231][ T664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.840617][ T664] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.931418][T12861] 9pnet_fd: Insufficient options for proto=fd [ 236.024275][T12873] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6071'. [ 236.046142][T12873] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6071'. [ 236.071165][T12873] netlink: 'syz.1.6071': attribute type 3 has an invalid length. [ 236.086821][T12873] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6071'. [ 236.199207][T12890] netlink: 'syz.4.6075': attribute type 1 has an invalid length. [ 236.378072][T12908] xt_CT: No such helper "snmp" [ 236.619409][T12936] xt_TCPMSS: Only works on TCP SYN packets [ 236.793958][ T664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.815564][ T664] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.049542][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'. [ 237.126002][T12985] loop4: detected capacity change from 0 to 512 [ 237.196494][T12985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.256741][ T286] EXT4-fs (loop4): unmounting filesystem. [ 237.287293][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6135'. [ 237.347928][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6134'. [ 237.465633][ T671] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.653155][T13037] loop4: detected capacity change from 0 to 4096 [ 237.722441][T13037] EXT4-fs: Ignoring removed oldalloc option [ 237.752673][T13037] EXT4-fs (loop4): Test dummy encryption mode enabled [ 237.808825][T13037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.828710][T13037] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.6146: Failed to acquire dquot type 1 [ 237.898162][ T286] EXT4-fs (loop4): unmounting filesystem. [ 238.084761][T13094] xt_limit: Overflow, try lower: 2147483649/3300 [ 238.180596][ T3654] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 238.386460][ T3654] usb 4-1: Using ep0 maxpacket: 8 [ 238.393418][ T3654] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.410615][ T3654] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 238.419668][ T3654] usb 4-1: config 0 has no interface number 0 [ 238.430298][ T3654] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 238.442250][ T3654] usb 4-1: config 0 interface 122 altsetting 187 has an invalid endpoint with address 0x95, skipping [ 238.466769][ T3654] usb 4-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 238.490294][ T3654] usb 4-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 238.512034][ T3654] usb 4-1: config 0 interface 122 has no altsetting 0 [ 238.529169][ T3654] usb 4-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 238.546556][ T3654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.558797][ T3654] usb 4-1: Product: syz [ 238.563475][ T3654] usb 4-1: Manufacturer: syz [ 238.581903][ T3654] usb 4-1: SerialNumber: syz [ 238.594295][T13146] netlink: 'syz.1.6200': attribute type 5 has an invalid length. [ 238.604644][ T3654] usb 4-1: config 0 descriptor?? [ 238.610713][T13070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 238.634242][T13070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 238.773077][T13165] loop4: detected capacity change from 0 to 256 [ 238.860330][T13165] FAT-fs (loop4): Directory bread(block 64) failed [ 238.870521][T13165] FAT-fs (loop4): Directory bread(block 65) failed [ 238.879435][ T3654] pl2303 4-1:0.122: required endpoints missing [ 238.883062][T13165] FAT-fs (loop4): Directory bread(block 66) failed [ 238.896296][ T3654] usb 4-1: USB disconnect, device number 101 [ 238.935015][T13177] netlink: 'syz.0.6216': attribute type 1 has an invalid length. [ 238.943024][T13165] FAT-fs (loop4): Directory bread(block 67) failed [ 238.953925][T13177] netlink: 'syz.0.6216': attribute type 2 has an invalid length. [ 238.969017][T13179] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 238.987470][T13165] FAT-fs (loop4): Directory bread(block 68) failed [ 239.005448][T13165] FAT-fs (loop4): Directory bread(block 69) failed [ 239.012074][T13165] FAT-fs (loop4): Directory bread(block 70) failed [ 239.044744][T13165] FAT-fs (loop4): Directory bread(block 71) failed [ 239.052417][T13165] FAT-fs (loop4): Directory bread(block 72) failed [ 239.067312][T13165] FAT-fs (loop4): Directory bread(block 73) failed [ 239.655248][ T28] kauditd_printk_skb: 1132 callbacks suppressed [ 239.655266][ T28] audit: type=1400 audit(237.524:12808): avc: denied { bpf } for pid=13249 comm="syz.3.6253" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.758846][ T28] audit: type=1400 audit(237.524:12809): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.856049][ T28] audit: type=1400 audit(237.524:12810): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.975810][ T28] audit: type=1400 audit(237.524:12811): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.006003][T13295] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.008288][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.013698][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.019271][ T285] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 240.033626][ T28] audit: type=1400 audit(237.551:12812): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.061947][T13296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 240.174182][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.703546][T13374] __nla_validate_parse: 9 callbacks suppressed [ 240.703565][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6312'. [ 240.748412][ T671] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 240.954212][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.962179][ T671] usb 2-1: Using ep0 maxpacket: 16 [ 240.976586][ T671] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 240.986394][ T671] usb 2-1: config 0 has no interface number 0 [ 240.995844][ T671] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 241.007768][ T671] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 241.022805][ T664] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 241.073610][ T671] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 241.076794][T13409] loop2: detected capacity change from 0 to 256 [ 241.082683][ T671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.101762][ T671] usb 2-1: Product: syz [ 241.107030][ T671] usb 2-1: Manufacturer: syz [ 241.112474][ T671] usb 2-1: SerialNumber: syz [ 241.123132][T13409] FAT-fs (loop2): Directory bread(block 64) failed [ 241.130566][ T671] usb 2-1: config 0 descriptor?? [ 241.136112][T13350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.138432][ T320] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 241.151607][T13350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.164365][T13409] FAT-fs (loop2): Directory bread(block 65) failed [ 241.172324][T13409] FAT-fs (loop2): Directory bread(block 66) failed [ 241.179341][T13409] FAT-fs (loop2): Directory bread(block 67) failed [ 241.194365][T13409] FAT-fs (loop2): Directory bread(block 68) failed [ 241.201524][T13409] FAT-fs (loop2): Directory bread(block 69) failed [ 241.208690][T13409] FAT-fs (loop2): Directory bread(block 70) failed [ 241.215830][T13409] FAT-fs (loop2): Directory bread(block 71) failed [ 241.222405][T13409] FAT-fs (loop2): Directory bread(block 72) failed [ 241.237660][T13409] FAT-fs (loop2): Directory bread(block 73) failed [ 241.247382][ T664] usb 5-1: not running at top speed; connect to a high speed hub [ 241.256402][ T664] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.276140][ T664] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 241.287392][ T664] usb 5-1: config 1 has no interface number 1 [ 241.295781][ T664] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 241.308801][ T664] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8192, setting to 64 [ 241.337763][ T664] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.349118][ T664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.358358][ T664] usb 5-1: Product: syz [ 241.362599][ T664] usb 5-1: Manufacturer: syz [ 241.375684][ T664] usb 5-1: SerialNumber: syz [ 241.381126][ T320] usb 4-1: Using ep0 maxpacket: 16 [ 241.388724][ T320] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 241.408216][ T320] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.422751][ T320] usb 4-1: config 0 has no interface number 0 [ 241.425829][T13350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.453691][T13350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.474351][ T320] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 241.492641][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.518234][ T320] usb 4-1: Product: syz [ 241.536743][ T320] usb 4-1: Manufacturer: syz [ 241.546139][ T320] usb 4-1: SerialNumber: syz [ 241.568129][ T320] usb 4-1: config 0 descriptor?? [ 241.637217][ T664] usb 5-1: USB disconnect, device number 103 [ 241.682484][T13439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.705511][ T671] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 241.728823][ T671] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 241.762601][ T671] asix: probe of 2-1:0.251 failed with error -5 [ 241.791405][ T671] usb 2-1: USB disconnect, device number 100 [ 241.829085][ T320] usb 4-1: USB disconnect, device number 102 [ 241.864862][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.212640][T13490] netlink: 'syz.4.6371': attribute type 7 has an invalid length. [ 242.220591][T13490] netlink: 'syz.4.6371': attribute type 5 has an invalid length. [ 242.238209][T13490] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6371'. [ 242.473507][T13517] xt_l2tp: v2 doesn't support IP mode [ 242.682524][T13548] xt_socket: unknown flags 0x40 [ 242.834643][T13565] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6408'. [ 242.969154][T13582] xt_TCPMSS: Only works on TCP SYN packets [ 243.400495][T13629] ipt_REJECT: TCP_RESET invalid for non-tcp [ 243.444441][T13634] rtc_cmos 00:00: Alarms can be up to one day in the future [ 243.491227][T13643] TCP: TCP_TX_DELAY enabled [ 243.556783][T13650] device ip6tnl3 entered promiscuous mode [ 243.634072][T13660] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6455'. [ 243.808661][T13682] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6467'. [ 244.351226][T13752] netlink: 'syz.0.6501': attribute type 1 has an invalid length. [ 244.499913][T13766] binder: 13765:13766 ioctl c0046209 0 returned -22 [ 244.522434][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6511'. [ 244.575190][T13776] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 245.023399][T13838] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6544'. [ 245.046372][T13838] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6544'. [ 245.072432][T13838] netlink: 38 bytes leftover after parsing attributes in process `syz.2.6544'. [ 245.083816][ T28] kauditd_printk_skb: 1183 callbacks suppressed [ 245.083834][ T28] audit: type=1400 audit(242.530:13938): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.115360][ T3654] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 245.176212][ T28] audit: type=1400 audit(242.530:13939): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.255983][T13858] random: crng reseeded on system resumption [ 245.264675][ T28] audit: type=1400 audit(242.530:13940): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.331992][ T3654] usb 1-1: Using ep0 maxpacket: 8 [ 245.339127][ T3654] usb 1-1: unable to get BOS descriptor or descriptor too short [ 245.362571][ T28] audit: type=1400 audit(242.530:13941): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.369150][ T3654] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.428880][ T3654] usb 1-1: config 1 has no interface number 1 [ 245.440404][ T28] audit: type=1400 audit(242.530:13942): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.463806][ T3654] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 245.487220][ T28] audit: type=1400 audit(242.530:13943): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.520132][ T28] audit: type=1400 audit(242.567:13944): avc: denied { ioctl } for pid=13808 comm="syz.0.6530" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.529346][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.545767][ T28] audit: type=1400 audit(242.576:13945): avc: denied { mounton } for pid=13839 comm="syz.3.6545" path="/1327" dev="tmpfs" ino=6752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 245.555341][ T285] audit: audit_lost=56 audit_rate_limit=0 audit_backlog_limit=64 [ 245.585271][ T3654] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.596165][ T3654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.609144][ T3654] usb 1-1: Product: syz [ 245.615721][ T3654] usb 1-1: Manufacturer: syz [ 245.630721][ T3654] usb 1-1: SerialNumber: syz [ 245.653410][T13810] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.914119][ T3654] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 245.923719][ T3654] usb 1-1: 2:1 : invalid channels 0 [ 245.964509][ T3654] usb 1-1: USB disconnect, device number 105 [ 246.000402][T13920] loop2: detected capacity change from 0 to 128 [ 246.038929][T13920] FAT-fs (loop2): Directory bread(block 11554) failed [ 246.051634][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6586'. [ 246.056611][T13920] FAT-fs (loop2): Directory bread(block 11555) failed [ 246.084606][T13920] FAT-fs (loop2): Directory bread(block 11556) failed [ 246.101463][T13920] FAT-fs (loop2): Directory bread(block 11557) failed [ 246.108378][T13920] FAT-fs (loop2): Directory bread(block 11558) failed [ 246.148435][T13920] FAT-fs (loop2): Directory bread(block 11559) failed [ 246.170258][T13920] FAT-fs (loop2): Directory bread(block 11560) failed [ 246.177105][T13920] FAT-fs (loop2): Directory bread(block 11561) failed [ 246.191693][T13920] FAT-fs (loop2): Directory bread(block 11562) failed [ 246.198597][T13920] FAT-fs (loop2): Directory bread(block 11563) failed [ 246.217515][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 246.306143][T13943] random: crng reseeded on system resumption [ 246.330046][T13945] loop3: detected capacity change from 0 to 256 [ 246.448328][ T6] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 246.686679][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 246.694867][ T6] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 246.714204][T13983] loop3: detected capacity change from 0 to 512 [ 246.740090][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.776291][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.785620][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.793633][ T6] usb 5-1: Product: syz [ 246.798244][ T6] usb 5-1: Manufacturer: syz [ 246.803190][ T6] usb 5-1: SerialNumber: syz [ 246.808678][T13983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.849441][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6624'. [ 246.858581][T14001] netlink: 'syz.2.6624': attribute type 1 has an invalid length. [ 246.867335][T14001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6624'. [ 246.938358][ T285] EXT4-fs (loop3): unmounting filesystem. [ 247.042162][ T6] usb 5-1: 0:2 : does not exist [ 247.054109][ T6] usb 5-1: unit 97 not found! [ 247.059843][T14013] usb usb8: usbfs: process 14013 (syz.3.6627) did not claim interface 0 before use [ 247.076397][ T6] usb 5-1: USB disconnect, device number 104 [ 247.327162][ T420] udevd[420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 247.446603][T14092] sock: sock_timestamping_bind_phc: sock not bind to device [ 247.567418][T14117] netlink: 'syz.1.6681': attribute type 2 has an invalid length. [ 247.635805][T14130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.648101][T14130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 247.656551][T14130] device bridge3 left promiscuous mode [ 247.724802][T14139] netlink: 'syz.1.6690': attribute type 5 has an invalid length. [ 247.732821][T14139] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6690'. [ 247.756679][T14142] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.079090][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6724'. [ 248.152017][T14216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.161310][T14216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.215146][ T671] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.220149][T14227] syz.3.6734 uses obsolete (PF_INET,SOCK_PACKET) [ 248.231802][ T671] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.313743][T14244] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6743'. [ 248.397183][T14258] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.449927][T14270] netlink: 'syz.2.6756': attribute type 5 has an invalid length. [ 248.499087][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6761'. [ 248.518154][ T320] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.540005][T14279] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6761'. [ 248.554984][T14288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6763'. [ 248.576458][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6763'. [ 248.590339][T14288] IPv6: sit3: Disabled Multicast RS [ 248.607284][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6768'. [ 248.744349][T14323] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 249.005944][T14379] xt_CT: No such helper "syz0" [ 249.018406][T14381] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.050455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.071168][ T3654] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.084028][ T3654] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.130055][T14396] device ipip0 entered promiscuous mode [ 249.158415][T14402] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 249.233952][ T3654] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.261710][T14421] device sit0 left promiscuous mode [ 249.277570][T14421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.294895][T14421] device ip6tnl2 left promiscuous mode [ 249.309463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 249.320688][ T671] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 249.328697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 249.513253][T14459] xt_TCPMSS: Only works on TCP SYN packets [ 249.536353][T14463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.679458][T14485] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 249.883607][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.934155][T14525] netlink: 'syz.2.6883': attribute type 9 has an invalid length. [ 249.963839][T14525] netlink: 'syz.2.6883': attribute type 6 has an invalid length. [ 249.981152][ T3654] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.005358][T14525] netlink: 'syz.2.6883': attribute type 7 has an invalid length. [ 250.037399][T14525] netlink: 'syz.2.6883': attribute type 8 has an invalid length. [ 250.088804][T14544] netlink: 'syz.0.6891': attribute type 12 has an invalid length. [ 250.223684][T14578] netlink: 'syz.1.6909': attribute type 6 has an invalid length. [ 250.231962][ T671] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 250.514993][ T28] kauditd_printk_skb: 778 callbacks suppressed [ 250.515011][ T28] audit: type=1400 audit(247.540:14699): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.597506][ T28] audit: type=1400 audit(247.540:14700): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.707201][ T28] audit: type=1400 audit(247.540:14701): avc: denied { read open } for pid=14641 comm="syz.0.6941" path="net:[4026532404]" dev="nsfs" ino=4026532404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 250.762482][ T28] audit: type=1400 audit(247.568:14702): avc: denied { create } for pid=14642 comm="syz.4.6942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 250.787810][T14683] netlink: 'syz.0.6961': attribute type 3 has an invalid length. [ 250.828855][ T28] audit: type=1400 audit(247.568:14703): avc: denied { write } for pid=14640 comm="syz.2.6940" name="sockstat" dev="proc" ino=4026532422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 250.902910][ T28] audit: type=1400 audit(247.568:14704): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.928569][T14706] xt_socket: unknown flags 0x8 [ 250.963163][ T28] audit: type=1400 audit(247.586:14705): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.011613][ T28] audit: type=1400 audit(247.586:14706): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.039022][T14726] netlink: 'syz.4.6982': attribute type 15 has an invalid length. [ 251.067265][ T28] audit: type=1400 audit(247.586:14707): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.115062][ T28] audit: type=1400 audit(247.614:14708): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 251.290648][T14776] xt_ecn: cannot match TCP bits for non-tcp packets [ 251.395532][T14795] device batadv_slave_0 entered promiscuous mode [ 251.414389][T14795] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 252.155805][T14939] device ip6tnl4 entered promiscuous mode [ 252.627247][T15035] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.654295][T15035] bridge0: port 3(veth0_vlan) entered disabled state [ 252.667276][T15041] __nla_validate_parse: 11 callbacks suppressed [ 252.667300][T15041] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7136'. [ 252.703202][T15048] IPv6: NLM_F_REPLACE set, but no existing node found! [ 252.829181][T15072] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7153'. [ 252.971503][T15100] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 253.257970][T15155] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7194'. [ 253.366315][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7202'. [ 253.426501][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7202'. [ 253.473391][T15186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7208'. [ 253.535075][T15199] device bridge6 entered promiscuous mode [ 253.595894][T15211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.614256][T15211] device bridge_slave_0 left promiscuous mode [ 253.624058][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.643577][T15211] device bridge_slave_1 left promiscuous mode [ 253.661820][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.672407][T15222] xt_SECMARK: invalid security context 'unconfined' [ 253.692890][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7221'. [ 253.781191][T15240] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7234'. [ 253.878759][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7245'. [ 254.181826][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7279'. [ 254.462498][T15394] xt_policy: neither incoming nor outgoing policy selected [ 254.484442][T15397] validate_nla: 5 callbacks suppressed [ 254.484506][T15397] netlink: 'syz.1.7313': attribute type 9 has an invalid length. [ 254.500745][T15397] netlink: 'syz.1.7313': attribute type 6 has an invalid length. [ 254.532896][T15405] xt_l2tp: missing protocol rule (udp|l2tpip) [ 254.537111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.562322][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.569433][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.587362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.693369][T15431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.700656][T15431] IPv6: NLM_F_CREATE should be set when creating new route [ 254.707915][T15431] IPv6: NLM_F_CREATE should be set when creating new route [ 254.758150][T15442] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 254.808569][T15448] xt_hashlimit: size too large, truncated to 1048576 [ 254.829377][T15448] xt_hashlimit: max too large, truncated to 1048576 [ 255.273503][T15552] x_tables: unsorted entry at hook 2 [ 255.336842][T15565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 255.484883][T15597] ipt_REJECT: ECHOREPLY no longer supported. [ 255.644910][T15635] netlink: 'syz.4.7434': attribute type 15 has an invalid length. [ 255.945312][ T28] kauditd_printk_skb: 655 callbacks suppressed [ 255.945330][ T28] audit: type=1400 audit(252.553:15364): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.038000][ T28] audit: type=1400 audit(252.562:15365): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.075423][T15714] netlink: 'syz.1.7470': attribute type 3 has an invalid length. [ 256.097498][ T28] audit: type=1400 audit(252.599:15366): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.168716][ T28] audit: type=1400 audit(252.599:15367): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.222238][ T28] audit: type=1400 audit(252.608:15368): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.286440][ T28] audit: type=1400 audit(252.608:15369): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.352865][ T28] audit: type=1400 audit(252.617:15370): avc: denied { create } for pid=15703 comm="syz.4.7467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 256.396668][ T28] audit: type=1400 audit(252.636:15371): avc: denied { bpf } for pid=15708 comm="syz.3.7468" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 256.447196][ T28] audit: type=1400 audit(252.636:15372): avc: denied { prog_load } for pid=15708 comm="syz.3.7468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 256.469698][T15782] device bridge_slave_1 left promiscuous mode [ 256.483615][T15782] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.490829][ T28] audit: type=1400 audit(252.636:15373): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.514931][T15782] device bridge_slave_0 left promiscuous mode [ 256.529212][T15782] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.778903][T15838] netlink: 'syz.4.7534': attribute type 3 has an invalid length. [ 256.822368][T15846] device vti1 entered promiscuous mode [ 256.828823][T15843] netlink: 'syz.0.7536': attribute type 3 has an invalid length. [ 257.003386][T15885] netlink: 'syz.0.7557': attribute type 6 has an invalid length. [ 257.163727][T15920] device bridge0 entered promiscuous mode [ 257.285511][T15943] xt_l2tp: v2 tid > 0xffff: 134217728 [ 257.343910][T15956] syz.0.7592 (15956) used greatest stack depth: 20896 bytes left [ 257.398612][T15968] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.420358][T15974] netlink: 'syz.3.7600': attribute type 12 has an invalid length. [ 257.452135][T15980] xt_bpf: check failed: parse error [ 258.351701][T16173] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.369704][T16173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 258.429002][T16187] __nla_validate_parse: 9 callbacks suppressed [ 258.429022][T16187] netlink: 308 bytes leftover after parsing attributes in process `syz.0.7706'. [ 258.449240][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7706'. [ 258.462801][T16187] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 258.511622][T16195] netlink: 'syz.3.7711': attribute type 5 has an invalid length. [ 258.534289][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7713'. [ 258.548051][T16202] netlink: 'syz.4.7714': attribute type 5 has an invalid length. [ 258.954646][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7751'. [ 259.094077][T16304] device vlan0 entered promiscuous mode [ 259.534139][T16388] xt_CT: No such helper "netbios-ns" [ 259.660066][T16410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 260.004985][T16459] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 260.472763][T16525] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7876'. [ 260.723617][T16564] netlink: 'syz.4.7894': attribute type 23 has an invalid length. [ 260.743586][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7895'. [ 260.876978][T16599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7910'. [ 260.952992][T16612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.963247][T16612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.081876][T16636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7929'. [ 261.113812][T16638] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7930'. [ 261.182656][T16651] ip_tunnel: non-ECT from 10.1.1.1 with TOS=0x9a [ 261.369856][ T28] kauditd_printk_skb: 606 callbacks suppressed [ 261.369875][ T28] audit: type=1400 audit(257.567:15980): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.426615][ T28] audit: type=1400 audit(257.567:15981): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.451456][ T28] audit: type=1400 audit(257.576:15982): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.476451][T16700] xt_CT: No such helper "snmp_trap" [ 261.482444][ T28] audit: type=1400 audit(257.603:15983): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.510253][ T28] audit: type=1400 audit(257.603:15984): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.540568][ T28] audit: type=1400 audit(257.613:15985): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.577318][ T28] audit: type=1400 audit(257.640:15986): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.626953][ T28] audit: type=1400 audit(257.650:15987): avc: denied { module_request } for pid=16699 comm="syz.0.7961" kmod="nfct-helper-snmp_trap" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 261.681899][T16725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7970'. [ 261.682933][ T28] audit: type=1400 audit(257.650:15988): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.731127][ T28] audit: type=1400 audit(257.687:15989): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.768046][T16733] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 261.918886][T16765] xt_connbytes: Forcing CT accounting to be enabled [ 261.938820][T16765] xt_nat: multiple ranges no longer supported [ 262.028582][T16787] 8021q: VLANs not supported on lo [ 262.906561][T16972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.043752][T17002] device bridge6 entered promiscuous mode [ 263.141496][T17026] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 263.305266][T17059] xt_policy: output policy not valid in PREROUTING and INPUT [ 263.487314][T17100] ip6t_REJECT: ECHOREPLY is not supported [ 263.519111][T17105] device vlan0 entered promiscuous mode [ 263.582146][T17121] x_tables: duplicate underflow at hook 4 [ 263.682595][T17142] sock: sock_timestamping_bind_phc: sock not bind to device [ 263.792407][T17167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.853967][T17180] xt_bpf: check failed: parse error [ 264.199056][T17243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.233399][T17250] netlink: 'syz.2.8233': attribute type 3 has an invalid length. [ 264.249984][T17250] __nla_validate_parse: 8 callbacks suppressed [ 264.250004][T17250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8233'. [ 264.463829][T17276] device wg1 entered promiscuous mode [ 264.600661][T17286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8251'. [ 264.634771][T17286] tc_dump_action: action bad kind [ 265.334577][T17401] device veth3 entered promiscuous mode [ 265.364200][T17406] x_tables: unsorted entry at hook 3 [ 265.429766][T17420] xt_l2tp: missing protocol rule (udp|l2tpip) [ 265.477529][T17432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8323'. [ 265.549582][T17446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8331'. [ 265.565575][T17446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8331'. [ 265.621928][T17462] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 265.643822][T17465] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 265.808939][T17493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8355'. [ 265.824827][T17493] device vlan0 entered promiscuous mode [ 265.883697][T17506] netlink: 328 bytes leftover after parsing attributes in process `syz.2.8359'. [ 266.024004][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8372'. [ 266.040262][T17529] device vlan0 entered promiscuous mode [ 266.052168][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8372'. [ 266.360241][T17576] xt_TCPMSS: Only works on TCP SYN packets [ 266.617689][T17629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.800749][ T28] kauditd_printk_skb: 605 callbacks suppressed [ 266.800766][ T28] audit: type=1400 audit(2000000003.101:16595): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.834856][ T28] audit: type=1400 audit(2000000003.110:16596): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.860450][ T28] audit: type=1400 audit(2000000003.119:16597): avc: denied { create } for pid=17664 comm="syz.3.8440" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 266.882177][ T28] audit: type=1400 audit(2000000003.128:16598): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.882214][ T28] audit: type=1400 audit(2000000003.147:16599): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.892306][ T28] audit: type=1400 audit(2000000003.175:16600): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 266.971293][ T28] audit: type=1400 audit(2000000003.175:16601): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 267.000335][ T28] audit: type=1400 audit(2000000003.221:16602): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 267.044845][ T28] audit: type=1400 audit(2000000003.258:16603): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 267.070833][ T28] audit: type=1400 audit(2000000003.258:16604): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 267.218963][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 267.218983][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.259721][T17727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.789663][T17835] xt_l2tp: invalid flags combination: c [ 267.889486][T17856] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8531'. [ 268.123239][T17907] xt_TCPMSS: Only works on TCP SYN packets [ 268.442033][T17976] netlink: 'syz.2.8591': attribute type 10 has an invalid length. [ 268.628177][T18016] device bridge5 entered promiscuous mode [ 268.676967][T18024] device veth3 entered promiscuous mode [ 268.875934][T18063] bridge0: port 1(veth0_to_bridge) entered blocking state [ 268.909077][T18063] bridge0: port 1(veth0_to_bridge) entered disabled state [ 268.915889][T18069] netlink: 'syz.4.8639': attribute type 3 has an invalid length. [ 268.916797][T18063] device veth0_to_bridge entered promiscuous mode [ 268.974353][T18063] bridge0: port 1(veth0_to_bridge) entered blocking state [ 268.981524][T18063] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 268.997201][T18075] device ipip1 entered promiscuous mode [ 269.003766][T18077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.732126][T18162] __nla_validate_parse: 1 callbacks suppressed [ 269.732149][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8684'. [ 269.984810][T18199] device macsec0 entered promiscuous mode [ 270.133936][T18224] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 270.241013][T18242] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 270.449791][T18279] netlink: 'syz.0.8740': attribute type 12 has an invalid length. [ 270.490135][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8744'. [ 270.591307][T18297] netlink: 'syz.4.8753': attribute type 3 has an invalid length. [ 270.599093][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8753'. [ 270.714133][T18316] x_tables: duplicate entry at hook 2 [ 270.909902][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8774'. [ 270.937191][T18340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.083280][T18354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8780'. [ 271.239908][T18366] xt_TCPMSS: Only works on TCP SYN packets [ 271.250421][T18368] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 271.336954][T18376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.547148][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8802'. [ 271.621911][T18405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.708884][T18420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8813'. [ 271.770745][T18429] xt_TCPMSS: Only works on TCP SYN packets [ 272.232074][T18523] xt_hashlimit: max too large, truncated to 1048576 [ 272.244189][ T28] kauditd_printk_skb: 513 callbacks suppressed [ 272.244206][ T28] audit: type=1400 audit(2000000008.122:17118): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 272.288205][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8867'. [ 272.303052][ T28] audit: type=1400 audit(2000000008.131:17119): avc: denied { read write } for pid=283 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 272.353370][ T28] audit: type=1400 audit(2000000008.140:17120): avc: denied { read write } for pid=18526 comm="syz.2.8866" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 272.378795][ T28] audit: type=1326 audit(2000000008.140:17121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.1.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9f58e929 code=0x7ffc0000 [ 272.381898][T18540] device ip6tnl3 entered promiscuous mode [ 272.411076][ T28] audit: type=1326 audit(2000000008.150:17122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.1.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f8e9f58e929 code=0x7ffc0000 [ 272.441532][ T28] audit: type=1326 audit(2000000008.150:17123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz.1.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e9f58e929 code=0x7ffc0000 [ 272.466647][ T28] audit: type=1400 audit(2000000008.150:17124): avc: denied { module_request } for pid=18520 comm="syz.4.8863" kmod="ipt_addrtype" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 272.501370][ T28] audit: type=1400 audit(2000000008.159:17125): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 272.527484][ T28] audit: type=1400 audit(2000000008.159:17126): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 272.592937][ T577] ------------[ cut here ]------------ [ 272.594102][ T28] audit: type=1400 audit(2000000008.205:17128): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 272.598453][ T577] kernel BUG at fs/buffer.c:2714! [ 272.644201][ T577] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 272.650459][ T577] CPU: 1 PID: 577 Comm: kmmpd-loop0 Not tainted 6.1.141-syzkaller-00025-g45271a2c461a #0 [ 272.660291][ T577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.670385][ T577] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 272.675799][ T577] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d8 38 e8 ff e9 b0 fe ff ff e8 ce de a3 ff 0f 0b e8 c7 de a3 ff <0f> 0b e8 c0 de a3 ff 0f 0b e8 b9 de a3 ff 0f 0b e8 b2 de a3 ff 0f [ 272.696487][ T577] RSP: 0018:ffffc90010f27ca0 EFLAGS: 00010293 [ 272.702588][ T577] RAX: ffffffff81cc1859 RBX: 0000000000000000 RCX: ffff88811d950000 [ 272.710584][ T577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.718584][ T577] RBP: ffffc90010f27cf0 R08: dffffc0000000000 R09: ffffed1022676e6a [ 272.726591][ T577] R10: ffffed1022676e6a R11: 1ffff11022676e69 R12: 0000000000000000 [ 272.734598][ T577] R13: 1ffff11022676e69 R14: ffff8881133b7348 R15: 0000000000003801 [ 272.742598][ T577] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 272.751558][ T577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.758167][ T577] CR2: 00007ffcf498dbc8 CR3: 00000001203e7000 CR4: 00000000003506a0 [ 272.766182][ T577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.774197][ T577] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.782980][ T577] Call Trace: [ 272.786279][ T577] [ 272.789236][ T577] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 272.795081][ T577] submit_bh+0x1f/0x30 [ 272.799177][ T577] write_mmp_block_thawed+0x34a/0x4c0 [ 272.804582][ T577] ? read_mmp_block+0x6d0/0x6d0 [ 272.809461][ T577] ? __cfi_process_timeout+0x10/0x10 [ 272.814773][ T577] write_mmp_block+0x138/0x2b0 [ 272.819573][ T577] kmmpd+0x3ce/0x950 [ 272.823496][ T577] kthread+0x281/0x320 [ 272.827594][ T577] ? __cfi_kmmpd+0x10/0x10 [ 272.832029][ T577] ? __cfi_kthread+0x10/0x10 [ 272.836647][ T577] ret_from_fork+0x1f/0x30 [ 272.841092][ T577] [ 272.844151][ T577] Modules linked in: [ 272.851526][ T577] ---[ end trace 0000000000000000 ]--- [ 272.857091][ T577] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 272.871487][ T577] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d8 38 e8 ff e9 b0 fe ff ff e8 ce de a3 ff 0f 0b e8 c7 de a3 ff <0f> 0b e8 c0 de a3 ff 0f 0b e8 b9 de a3 ff 0f 0b e8 b2 de a3 ff 0f [ 272.892705][ T577] RSP: 0018:ffffc90010f27ca0 EFLAGS: 00010293 [ 272.898892][ T577] RAX: ffffffff81cc1859 RBX: 0000000000000000 RCX: ffff88811d950000 [ 272.907272][ T577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.915839][ T577] RBP: ffffc90010f27cf0 R08: dffffc0000000000 R09: ffffed1022676e6a [ 272.924001][ T577] R10: ffffed1022676e6a R11: 1ffff11022676e69 R12: 0000000000000000 [ 272.932208][ T577] R13: 1ffff11022676e69 R14: ffff8881133b7348 R15: 0000000000003801 [ 272.940346][ T577] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 272.949349][ T577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.956085][ T577] CR2: 00007eff4eb80ab8 CR3: 0000000130032000 CR4: 00000000003506a0 [ 272.970455][ T577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.982881][ T577] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.990987][ T577] Kernel panic - not syncing: Fatal exception [ 272.997357][ T577] Kernel Offset: disabled [ 273.001691][ T577] Rebooting in 86400 seconds..