last executing test programs: 310.840415ms ago: executing program 3 (id=9176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x19, 0x8070bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x42bb7, 0x79269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xa}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) 267.285179ms ago: executing program 3 (id=9180): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 215.912232ms ago: executing program 3 (id=9186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500230800003c0012800b000100697036746e6c00002c0002801400030000000000000000000000ff1de100000214000200fe"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 215.565893ms ago: executing program 4 (id=9187): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000740)={[{@nodots}, {}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffff9}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@discard}, {@dots}, {@fat=@sys_immutable}, {@fat=@errors_remount}, {@fat=@dos1xfloppy}]}, 0x21, 0x24b, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x02\x00', 0x0) 192.536735ms ago: executing program 0 (id=9189): r0 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x400001, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) 180.609646ms ago: executing program 2 (id=9190): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) 180.452996ms ago: executing program 3 (id=9191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_delrule={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FRA_SRC={0x14, 0x2, @local}]}, 0x44}}, 0x0) 180.250535ms ago: executing program 1 (id=9192): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000003640)=""/4092, 0xffc}], 0x1, 0x18, 0x2) 173.566346ms ago: executing program 4 (id=9193): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000003fc0)}, 0xd) 159.921197ms ago: executing program 0 (id=9194): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @multicast}, 0x44, {0x2, 0x4e20, @local}, 'syz_tun\x00'}) 152.870928ms ago: executing program 1 (id=9195): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x5, 0x1}, {0x3, 0x4}, 0x10000004, 0x6}) 144.696099ms ago: executing program 2 (id=9196): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0) 131.53123ms ago: executing program 0 (id=9197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) 128.42248ms ago: executing program 3 (id=9198): setresgid(0x0, 0xee01, 0xee00) keyctl$session_to_parent(0x12) 120.81848ms ago: executing program 4 (id=9199): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c00010007000040"], 0x20}}, 0x0) 120.499121ms ago: executing program 2 (id=9200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x40}, 0x1, 0xffffffea, 0x0, 0x4}, 0x0) 105.492732ms ago: executing program 1 (id=9201): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 105.081091ms ago: executing program 4 (id=9202): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002b40)={0x1c, 0x76, 0x31f, 0x0, 0x2000, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xcd}]}, 0x1c}], 0x1}, 0x0) 97.473722ms ago: executing program 2 (id=9203): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x23, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x1d8, 0x1d8, 0x108, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [], [], 'macvtap0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 91.377213ms ago: executing program 0 (id=9204): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000280)={'wg2\x00'}) 64.677545ms ago: executing program 3 (id=9205): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 64.315445ms ago: executing program 1 (id=9206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000cd640600680012800b000100627269646765000058000280050016000000000005002e"], 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0xe4) 62.494545ms ago: executing program 4 (id=9207): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)={0x14, 0x3e, 0x321, 0x0, 0x0, {0xa}}, 0x14}}, 0x4004010) 59.849676ms ago: executing program 2 (id=9208): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000c00)="62a59ab48315033eabec7fb55220c933f10f7b484b271d31280a57", 0x1b}], 0x1) 57.462016ms ago: executing program 0 (id=9209): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) pidfd_send_signal(0xffffffffffffffff, 0x24, 0x0, 0x0) 34.398668ms ago: executing program 1 (id=9210): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000001a40)=ANY=[@ANYBLOB="2f446e1e726974790000000000000000000000000000007a000000000000400004"], 0x68) 19.076979ms ago: executing program 0 (id=9211): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 18.678559ms ago: executing program 4 (id=9212): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x3, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) 190.56µs ago: executing program 1 (id=9213): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 0s ago: executing program 2 (id=9214): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x98, 0x378, 0x2d8, 0x0, 0x2d8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) kernel console output (not intermixed with test programs): ted capacity change from 0 to 1024 [ 190.407029][T10630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4956'. [ 190.460296][T10624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 190.486058][T10624] EXT4-fs error (device loop3): ext4_get_first_dir_block:3605: inode #11: comm syz.3.4953: directory missing '..' [ 190.507485][ T286] EXT4-fs (loop3): unmounting filesystem. [ 190.544200][T10655] netlink: 'syz.3.4965': attribute type 5 has an invalid length. [ 190.598966][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4971'. [ 190.660665][T10679] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4979'. [ 190.701183][T10687] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 190.811707][T10706] loop3: detected capacity change from 0 to 256 [ 190.822424][T10709] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 190.835886][T10713] usb usb8: usbfs: process 10713 (syz.0.4996) did not claim interface 0 before use [ 190.850780][T10706] FAT-fs (loop3): Directory bread(block 64) failed [ 190.863237][T10709] syz.4.4994 (10709) used greatest stack depth: 20960 bytes left [ 190.871624][T10706] FAT-fs (loop3): Directory bread(block 65) failed [ 190.884541][T10706] FAT-fs (loop3): Directory bread(block 66) failed [ 190.901835][T10706] FAT-fs (loop3): Directory bread(block 67) failed [ 190.916439][T10706] FAT-fs (loop3): Directory bread(block 68) failed [ 190.932360][T10706] FAT-fs (loop3): Directory bread(block 69) failed [ 190.939147][T10706] FAT-fs (loop3): Directory bread(block 70) failed [ 190.946074][T10706] FAT-fs (loop3): Directory bread(block 71) failed [ 190.961505][T10706] FAT-fs (loop3): Directory bread(block 72) failed [ 190.970729][T10706] FAT-fs (loop3): Directory bread(block 73) failed [ 191.022047][T10739] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 191.245680][T10784] netlink: 'syz.4.5031': attribute type 1 has an invalid length. [ 191.356374][T10814] ipt_REJECT: ECHOREPLY no longer supported. [ 191.387685][T10822] loop2: detected capacity change from 0 to 1024 [ 191.409607][T10822] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 191.419649][T10822] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 191.442815][T10833] IPv6: sit2: Disabled Multicast RS [ 191.448338][T10822] EXT4-fs error (device loop2): ext4_get_journal_inode:5722: inode #5: comm syz.2.5049: unexpected bad inode w/o EXT4_IGET_BAD [ 191.467577][T10822] EXT4-fs (loop2): no journal found [ 191.477954][T10822] EXT4-fs (loop2): can't get journal size [ 191.490128][T10822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.499541][T10839] random: crng reseeded on system resumption [ 191.533565][ T287] EXT4-fs (loop2): unmounting filesystem. [ 191.610177][T10856] loop2: detected capacity change from 0 to 1024 [ 191.647341][T10856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.665334][T10856] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #11: comm syz.2.5068: directory missing '..' [ 191.701781][ T287] EXT4-fs (loop2): unmounting filesystem. [ 191.743382][T10874] xt_connbytes: Forcing CT accounting to be enabled [ 191.751715][T10874] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 191.812871][T10888] @: renamed from bond_slave_0 [ 191.830875][T10893] ipt_REJECT: TCP_RESET invalid for non-tcp [ 192.020175][T10931] binfmt_misc: register: failed to install interpreter file ./file0 [ 192.270385][T10985] netlink: 'syz.3.5129': attribute type 6 has an invalid length. [ 192.290726][ T622] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 192.367287][T11007] netlink: 'syz.3.5140': attribute type 5 has an invalid length. [ 192.411603][T11016] device bridge1 entered promiscuous mode [ 192.509244][ T622] usb 5-1: Using ep0 maxpacket: 32 [ 192.523414][ T622] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 192.534954][ T622] usb 5-1: config 4 has no interface number 0 [ 192.538031][T11041] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 192.541640][ T622] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.551651][T11041] overlayfs: missing 'lowerdir' [ 192.561720][ T622] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.576426][ T622] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.587213][ T622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.600897][ T622] hub 5-1:4.128: USB hub found [ 192.621333][T11049] bridge0: port 3(veth0_to_bridge) entered blocking state [ 192.628715][T11049] bridge0: port 3(veth0_to_bridge) entered disabled state [ 192.636435][T11049] device veth0_to_bridge entered promiscuous mode [ 192.643484][T11049] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.655925][T11049] bridge0: port 3(veth0_to_bridge) entered blocking state [ 192.663086][T11049] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 192.683107][T11055] SELinux: security_context_str_to_sid () failed with errno=-22 [ 192.719665][T11061] binder: 11060:11061 ioctl 400c620e 200000000500 returned -22 [ 192.764950][T11070] loop2: detected capacity change from 0 to 512 [ 192.780447][T11070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.797123][ T287] EXT4-fs (loop2): unmounting filesystem. [ 192.818287][ T622] hub 5-1:4.128: config failed, hub doesn't have any ports! (err -19) [ 192.941293][ T24] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 192.988522][T11108] loop2: detected capacity change from 0 to 512 [ 193.016443][T11108] EXT4-fs (loop2): orphan cleanup on readonly fs [ 193.025204][T11108] EXT4-fs error (device loop2): ext4_quota_enable:7009: inode #4: comm syz.2.5189: iget: special inode unallocated [ 193.042493][T11108] EXT4-fs error (device loop2): ext4_quota_enable:7012: comm syz.2.5189: Bad quota inode: 4, type: 1 [ 193.057018][T11108] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.071904][T11108] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 193.071928][T11108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.091026][ T287] EXT4-fs (loop2): unmounting filesystem. [ 193.174333][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 193.179532][ T622] usb 5-1: USB disconnect, device number 82 [ 193.191309][T11135] incfs: Options parsing error. -22 [ 193.198920][T11140] xt_ecn: cannot match TCP bits for non-tcp packets [ 193.199138][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.211630][T11135] incfs: mount failed -22 [ 193.212707][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 193.243108][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.265223][ T24] usb 4-1: config 0 descriptor?? [ 193.273029][T11053] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 193.343440][T11164] xt_CT: No such helper "syz0" [ 193.509003][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 193.519103][ T24] usbhid: probe of 4-1:0.0 failed with error -71 [ 193.530986][T11204] device vlan0 entered promiscuous mode [ 193.537063][ T24] usb 4-1: USB disconnect, device number 80 [ 193.565494][T11211] binder: 11209:11211 ioctl c018620c 200000000080 returned -1 [ 193.615296][T11221] loop4: detected capacity change from 0 to 1024 [ 193.631470][T11221] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 193.650878][T11221] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 193.654536][T11226] netlink: 'syz.0.5246': attribute type 27 has an invalid length. [ 193.666127][T11221] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.5244: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 193.693820][T11221] EXT4-fs (loop4): no journal found [ 193.699066][T11221] EXT4-fs (loop4): can't get journal size [ 193.713051][T11221] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.732619][T11233] xt_ecn: cannot match TCP bits for non-tcp packets [ 193.743006][ T285] EXT4-fs (loop4): unmounting filesystem. [ 193.809050][T11241] loop4: detected capacity change from 0 to 256 [ 193.828301][T11241] exfat: Deprecated parameter 'utf8' [ 193.835756][T11241] exfat: Deprecated parameter 'utf8' [ 193.863468][T11241] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 193.883387][ T19] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 193.980389][T11270] xt_TCPMSS: Only works on TCP SYN packets [ 194.100031][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 194.111772][ T19] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 194.132874][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.154029][ T19] usb 3-1: Product: syz [ 194.164078][ T19] usb 3-1: Manufacturer: syz [ 194.169437][ T19] usb 3-1: SerialNumber: syz [ 194.186171][ T19] usb 3-1: config 0 descriptor?? [ 194.201787][ T19] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 194.221683][ T19] usb 3-1: Detected FT232H [ 194.346287][T11348] device bridge0 entered promiscuous mode [ 194.414067][T11361] __nla_validate_parse: 15 callbacks suppressed [ 194.414086][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5311'. [ 194.444763][T11365] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5315'. [ 194.518818][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 194.518835][ T28] audit: type=1400 audit(191.770:537): avc: denied { read } for pid=11380 comm="syz.1.5323" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 194.561474][ T28] audit: type=1400 audit(191.770:538): avc: denied { open } for pid=11380 comm="syz.1.5323" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 194.604821][ T28] audit: type=1400 audit(191.770:539): avc: denied { ioctl } for pid=11380 comm="syz.1.5323" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 194.623276][T11401] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 194.635397][ T28] audit: type=1326 audit(191.844:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.1.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642338eb69 code=0x7ffc0000 [ 194.637869][T11397] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5330'. [ 194.659967][ T28] audit: type=1326 audit(191.844:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.1.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f642338eb69 code=0x7ffc0000 [ 194.696686][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 194.707671][ T19] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 194.715332][ T19] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 194.724730][ T19] usb 3-1: USB disconnect, device number 86 [ 194.740329][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 194.751240][ T28] audit: type=1326 audit(191.844:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.1.5329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642338eb69 code=0x7ffc0000 [ 194.778248][ T19] ftdi_sio 3-1:0.0: device disconnected [ 194.794532][ T28] audit: type=1326 audit(191.992:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.1.5339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642338eb69 code=0x7ffc0000 [ 194.797626][T11415] loop1: detected capacity change from 0 to 2048 [ 194.817752][ T28] audit: type=1326 audit(191.992:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.1.5339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f642338eb69 code=0x7ffc0000 [ 194.850936][ T28] audit: type=1326 audit(192.019:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.1.5339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f642338eba3 code=0x7ffc0000 [ 194.855852][T11421] IPv6: Can't replace route, no match found [ 194.873807][ T28] audit: type=1326 audit(192.029:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.1.5339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f642338d61f code=0x7ffc0000 [ 194.915784][T11415] loop1: p3 < > p4 < > [ 194.924365][T11415] loop1: partition table partially beyond EOD, truncated [ 194.931940][T11415] loop1: p3 start 4284289 is beyond EOD, truncated [ 195.145911][T11474] loop3: detected capacity change from 0 to 16 [ 195.147888][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5370'. [ 195.161349][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5370'. [ 195.192050][T11474] erofs: (device loop3): mounted with root inode @ nid 36. [ 195.261609][T11496] xt_hashlimit: size too large, truncated to 1048576 [ 195.268423][T11496] xt_hashlimit: invalid rate [ 195.282903][T11500] netlink: 600 bytes leftover after parsing attributes in process `syz.3.5381'. [ 195.313540][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5381'. [ 195.326054][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5381'. [ 195.335657][T11500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5381'. [ 195.605569][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5418'. [ 195.653209][T11584] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 195.891359][T11637] device bridge3 entered promiscuous mode [ 195.994167][T11661] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 196.156445][T11696] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.181338][T11696] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.188436][T11696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.350401][T11727] loop1: detected capacity change from 0 to 256 [ 196.365729][T11727] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.383437][T11727] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 196.423887][T11727] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 196.494656][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 196.519736][T11749] netlink: 'syz.4.5505': attribute type 9 has an invalid length. [ 196.538495][T11749] netlink: 'syz.4.5505': attribute type 7 has an invalid length. [ 196.546580][T11749] netlink: 'syz.4.5505': attribute type 8 has an invalid length. [ 196.554533][T11749] netlink: 'syz.4.5505': attribute type 13 has an invalid length. [ 196.627527][T11766] x_tables: unsorted underflow at hook 4 [ 196.722312][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 196.732723][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.740735][T11785] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.757762][ T24] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 196.777168][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.793035][ T24] usb 3-1: config 0 descriptor?? [ 196.867673][T11633] loop3: detected capacity change from 0 to 131072 [ 196.913645][T11633] F2FS-fs (loop3): Found nat_bits in checkpoint [ 197.013392][T11633] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 197.039061][ T19] usb 3-1: USB disconnect, device number 87 [ 197.761890][T11967] loop2: detected capacity change from 0 to 16 [ 197.781977][T11970] loop4: detected capacity change from 0 to 512 [ 197.799738][T11970] EXT4-fs (loop4): Test dummy encryption mode enabled [ 197.815760][T11967] erofs: (device loop2): mounted with root inode @ nid 36. [ 197.828096][T11970] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 197.840196][T11983] x_tables: unsorted underflow at hook 3 [ 197.871692][T11970] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 197.879418][T11970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 197.894901][T11970] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 197.949298][ T285] EXT4-fs (loop4): unmounting filesystem. [ 197.965385][T12010] No source specified [ 198.073296][T12038] loop3: detected capacity change from 0 to 512 [ 198.110509][T12038] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 198.128473][T12049] netlink: 'syz.2.5650': attribute type 3 has an invalid length. [ 198.131196][T12051] sock: sock_timestamping_bind_phc: sock not bind to device [ 198.158381][T12038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 198.173610][T12038] EXT4-fs (loop3): orphan cleanup on readonly fs [ 198.197198][T12038] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.5644: bad orphan inode 267 [ 198.252957][T12038] EXT4-fs (loop3): Remounting filesystem read-only [ 198.262983][T12038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.273500][T12038] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.5644: dx entry: limit 0 != root limit 125 [ 198.285531][T12038] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5644: Corrupt directory, running e2fsck is recommended [ 198.304525][ T286] EXT4-fs (loop3): unmounting filesystem. [ 198.459419][T12105] loop3: detected capacity change from 0 to 512 [ 198.496124][T12105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.541836][ T286] EXT4-fs (loop3): unmounting filesystem. [ 198.769043][T12147] device xfrm2 entered promiscuous mode [ 198.778816][T12150] raw_sendmsg: syz.0.5696 forgot to set AF_INET. Fix it! [ 198.874870][T12162] loop3: detected capacity change from 0 to 128 [ 198.880153][T12116] loop2: detected capacity change from 0 to 40427 [ 198.899627][T12116] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 198.954471][T12116] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 198.998024][T12116] F2FS-fs (loop2): invalid crc value [ 199.026602][T12116] F2FS-fs (loop2): Found nat_bits in checkpoint [ 199.110672][T12205] loop1: detected capacity change from 0 to 256 [ 199.127195][T12116] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 199.134512][T12116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.186634][T12205] FAT-fs (loop1): Directory bread(block 64) failed [ 199.208326][T12205] FAT-fs (loop1): Directory bread(block 65) failed [ 199.219273][T12205] FAT-fs (loop1): Directory bread(block 66) failed [ 199.225822][T12205] FAT-fs (loop1): Directory bread(block 67) failed [ 199.266763][T12205] FAT-fs (loop1): Directory bread(block 68) failed [ 199.279732][T12205] FAT-fs (loop1): Directory bread(block 69) failed [ 199.290974][T12205] FAT-fs (loop1): Directory bread(block 70) failed [ 199.299042][T12205] FAT-fs (loop1): Directory bread(block 71) failed [ 199.306443][T12205] FAT-fs (loop1): Directory bread(block 72) failed [ 199.322506][T12205] FAT-fs (loop1): Directory bread(block 73) failed [ 199.367895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.380085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.392311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.404354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.416472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.428521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.440638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.452692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.465138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.670663][T12266] loop2: detected capacity change from 0 to 512 [ 199.767235][T12266] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 199.913330][ T287] EXT4-fs (loop2): unmounting filesystem. [ 199.996238][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 199.996254][ T28] audit: type=1400 audit(196.828:619): avc: denied { read append } for pid=12291 comm="syz.2.5762" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 200.145421][ T28] audit: type=1400 audit(196.864:620): avc: denied { read append open } for pid=12291 comm="syz.2.5762" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 200.344251][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.353712][ T28] audit: type=1400 audit(196.864:621): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.508065][ T28] audit: type=1400 audit(196.864:622): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.654642][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.685225][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.698396][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.708492][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.715458][ T28] audit: type=1400 audit(196.864:623): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.742298][ T284] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 201.416950][ C1] net_ratelimit: 35070 callbacks suppressed [ 201.416970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.434941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.447135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.459266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.471310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.483388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.495510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.507654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.519708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.531762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.581119][ C1] bridge0: topology change detected, propagating [ 201.587496][ C1] bridge0: port 3(veth0_to_bridge) entered blocking state [ 201.686416][T12414] loop1: detected capacity change from 0 to 512 [ 201.712581][T12417] overlayfs: conflicting options: metacopy=on,redirect_dir=off [ 201.786263][T12414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.786803][T12432] device bridge4 entered promiscuous mode [ 201.845633][ T283] EXT4-fs (loop1): unmounting filesystem. [ 201.888554][T12442] netlink: 'syz.2.5837': attribute type 3 has an invalid length. [ 202.028100][T12457] loop4: detected capacity change from 0 to 256 [ 202.060922][T12462] __nla_validate_parse: 20 callbacks suppressed [ 202.060940][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5847'. [ 202.182121][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5847'. [ 202.193835][T12475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5852'. [ 202.310984][T12494] device sit0 left promiscuous mode [ 202.339663][T12494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.391148][T12494] device vlan0 left promiscuous mode [ 202.419899][T12494] device bridge1 left promiscuous mode [ 202.435203][T12507] netlink: 'syz.1.5869': attribute type 4 has an invalid length. [ 202.449629][T12507] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5869'. [ 202.462493][T12512] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5871'. [ 202.568497][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'. [ 202.615541][T12535] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5882'. [ 202.662240][T12542] loop4: detected capacity change from 0 to 512 [ 202.670407][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5888'. [ 202.694622][T12542] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.5886: bad orphan inode 15 [ 202.751175][T12542] ext4_test_bit(bit=14, block=5) = 0 [ 202.775545][T12542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.809937][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5902'. [ 202.820384][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5902'. [ 202.829386][T12575] tc_dump_action: action bad kind [ 202.872950][ T285] EXT4-fs (loop4): unmounting filesystem. [ 203.042119][T12615] loop3: detected capacity change from 0 to 256 [ 203.214428][T12650] device xfrm0 entered promiscuous mode [ 203.218019][T12653] incfs: Error accessing: ./file0/file0. [ 203.234917][T12653] incfs: mount failed -2 [ 203.280825][T12661] netlink: 'syz.4.5944': attribute type 3 has an invalid length. [ 203.317716][T12661] netlink: 'syz.4.5944': attribute type 3 has an invalid length. [ 203.488760][ T19] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 203.520687][T12699] xt_socket: unknown flags 0x8 [ 203.613733][T12713] tmpfs: Unknown parameter '' [ 203.693045][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 203.699493][ T19] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.735484][ T19] usb 3-1: config 179 has no interface number 0 [ 203.763209][ T19] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 203.794722][T12739] netlink: 'syz.1.5985': attribute type 1 has an invalid length. [ 203.802550][ T19] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 203.843251][ T19] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 203.883635][ T19] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.950889][ T19] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 203.991974][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.999839][T12764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.007236][T12764] IPv6: NLM_F_CREATE should be set when creating new route [ 204.014452][T12764] IPv6: NLM_F_CREATE should be set when creating new route [ 204.023837][T12647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.224634][T12796] loop1: detected capacity change from 0 to 512 [ 204.290827][ T8419] usb 3-1: USB disconnect, device number 88 [ 204.307166][T12796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.314674][T12807] incfs: Error accessing: ./file1. [ 204.343100][T12796] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.6011: corrupted xattr block 19 [ 204.363813][T12807] incfs: mount failed -2 [ 204.370461][T12796] EXT4-fs (loop1): Remounting filesystem read-only [ 204.382734][T12796] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 204.393039][T12796] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.6011: corrupted xattr block 19 [ 204.417167][T12796] EXT4-fs (loop1): Remounting filesystem read-only [ 204.425664][T12796] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 204.441579][T12796] EXT4-fs error (device loop1): ext4_xattr_block_find:1837: inode #15: comm syz.1.6011: corrupted xattr block 19 [ 204.459097][T12796] EXT4-fs (loop1): Remounting filesystem read-only [ 204.498766][ T283] EXT4-fs (loop1): unmounting filesystem. [ 204.516121][T12813] loop3: detected capacity change from 0 to 16 [ 204.571431][T12813] erofs: (device loop3): mounted with root inode @ nid 36. [ 204.644227][T12813] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 46 [ 204.838777][T12841] netlink: 'syz.1.6033': attribute type 16 has an invalid length. [ 204.889564][T12847] device ip6tnl2 entered promiscuous mode [ 204.896434][T12850] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 205.426360][ T28] kauditd_printk_skb: 1207 callbacks suppressed [ 205.426375][ T28] audit: type=1400 audit(201.833:1758): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.490186][T12939] xt_l2tp: v2 doesn't support IP mode [ 205.522418][ T28] audit: type=1400 audit(201.842:1759): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.609931][ T28] audit: type=1400 audit(201.842:1760): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.732225][ T28] audit: type=1400 audit(201.860:1761): avc: denied { read write open } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.785748][T12972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.799645][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.806283][T12972] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 205.814058][T12972] audit: backlog limit exceeded [ 205.819002][ T28] audit: type=1400 audit(201.860:1762): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 205.845516][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 206.036893][T12997] loop2: detected capacity change from 0 to 256 [ 206.126661][T12997] FAT-fs (loop2): Directory bread(block 64) failed [ 206.155745][T12997] FAT-fs (loop2): Directory bread(block 65) failed [ 206.184489][T12997] FAT-fs (loop2): Directory bread(block 66) failed [ 206.220954][T12997] FAT-fs (loop2): Directory bread(block 67) failed [ 206.227553][T12997] FAT-fs (loop2): Directory bread(block 68) failed [ 206.247453][T13021] netlink: 'syz.4.6122': attribute type 1 has an invalid length. [ 206.274326][T12997] FAT-fs (loop2): Directory bread(block 69) failed [ 206.280913][T12997] FAT-fs (loop2): Directory bread(block 70) failed [ 206.329024][T12997] FAT-fs (loop2): Directory bread(block 71) failed [ 206.362734][T12997] FAT-fs (loop2): Directory bread(block 72) failed [ 206.379412][T12997] FAT-fs (loop2): Directory bread(block 73) failed [ 208.042994][T13048] netlink: 'syz.4.6136': attribute type 4 has an invalid length. [ 208.059265][T13048] netlink: 'syz.4.6136': attribute type 5 has an invalid length. [ 208.067036][T13048] __nla_validate_parse: 9 callbacks suppressed [ 208.067051][T13048] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6136'. [ 208.248555][T13080] device bridge0 left promiscuous mode [ 208.255489][T13080] device xfrm2 left promiscuous mode [ 208.260929][T13079] netlink: 'syz.2.6150': attribute type 12 has an invalid length. [ 208.470665][T13104] netlink: 'syz.0.6161': attribute type 3 has an invalid length. [ 208.478851][T13109] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 208.516768][T13114] loop1: detected capacity change from 0 to 16 [ 208.556272][T13114] erofs: (device loop1): mounted with root inode @ nid 36. [ 208.584832][T13114] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 208.608301][T13126] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13126 comm=syz.3.6175 [ 208.630800][T13114] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 208.643566][T13129] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6174'. [ 208.660027][T13114] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 208.694753][T13133] loop3: detected capacity change from 0 to 16 [ 208.731149][T13139] netlink: 'syz.0.6180': attribute type 10 has an invalid length. [ 208.739994][T13133] erofs: (device loop3): mounted with root inode @ nid 36. [ 208.748948][T13140] device vlan0 entered promiscuous mode [ 208.762868][T13139] netlink: 'syz.0.6180': attribute type 10 has an invalid length. [ 208.765428][T13143] mmap: syz.4.6182 (13143): VmData 29077504 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 208.908303][T13155] loop1: detected capacity change from 0 to 256 [ 209.759381][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6196'. [ 210.183496][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6231'. [ 210.240077][T13252] xt_TCPMSS: Only works on TCP SYN packets [ 210.518067][T13286] loop4: detected capacity change from 0 to 8192 [ 210.552780][T13286] loop4: p4 < > [ 210.577459][T13303] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6259'. [ 210.606981][T13303] net_ratelimit: 760 callbacks suppressed [ 210.606996][T13303] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 210.684374][T13312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.691631][T13312] IPv6: NLM_F_CREATE should be set when creating new route [ 210.783435][T13323] loop2: detected capacity change from 0 to 256 [ 210.845085][T13323] FAT-fs (loop2): Directory bread(block 64) failed [ 210.858015][ T28] kauditd_printk_skb: 749 callbacks suppressed [ 210.858031][ T28] audit: type=1400 audit(206.854:2487): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.867112][T13323] FAT-fs (loop2): Directory bread(block 65) failed [ 210.918536][T13323] FAT-fs (loop2): Directory bread(block 66) failed [ 210.937992][T13323] FAT-fs (loop2): Directory bread(block 67) failed [ 210.946258][T13323] FAT-fs (loop2): Directory bread(block 68) failed [ 210.980785][T13323] FAT-fs (loop2): Directory bread(block 69) failed [ 211.001285][ T1627] udevd[1627]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 211.003125][T13323] FAT-fs (loop2): Directory bread(block 70) failed [ 211.032191][ T28] audit: type=1400 audit(206.854:2488): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.094080][T13323] FAT-fs (loop2): Directory bread(block 71) failed [ 211.127072][T13323] FAT-fs (loop2): Directory bread(block 72) failed [ 211.134057][ T28] audit: type=1400 audit(206.854:2489): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.153276][T13323] FAT-fs (loop2): Directory bread(block 73) failed [ 211.224450][ T28] audit: type=1400 audit(206.854:2490): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.275238][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.287297][ T283] audit: audit_lost=37 audit_rate_limit=0 audit_backlog_limit=64 [ 211.295576][ T28] audit: type=1400 audit(206.854:2491): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.301307][ T283] audit: backlog limit exceeded [ 211.320032][ T28] audit: type=1400 audit(206.854:2492): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.334999][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.428735][ T19] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 211.460901][T13376] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 211.474796][T13376] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 211.489679][T13376] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 211.512956][T13355] loop4: detected capacity change from 0 to 32768 [ 211.550358][T13386] usb usb8: usbfs: process 13386 (syz.2.6300) did not claim interface 0 before use [ 211.634599][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 211.641125][ T19] usb 1-1: config 0 has an invalid interface number: 193 but max is 1 [ 211.672852][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.703031][ T19] usb 1-1: config 0 has no interface number 1 [ 211.728355][ T19] usb 1-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.763548][ T19] usb 1-1: config 0 interface 193 has no altsetting 0 [ 211.768160][T13411] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 211.794166][ T19] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 211.794195][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.794215][ T19] usb 1-1: Product: syz [ 211.794229][ T19] usb 1-1: Manufacturer: syz [ 211.794243][ T19] usb 1-1: SerialNumber: syz [ 211.801444][ T19] usb 1-1: config 0 descriptor?? [ 211.928072][T13429] xt_TCPMSS: Only works on TCP SYN packets [ 212.028862][ T19] usb 1-1: unknown interface protocol 0xd7, assuming v1 [ 212.048243][ T19] usb 1-1: 193:2 : does not exist [ 212.069659][ T19] usb 1-1: cannot find UAC_HEADER [ 212.097162][ T19] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 212.116025][ T19] usb 1-1: USB disconnect, device number 84 [ 212.156611][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6339'. [ 212.350883][T13493] loop3: detected capacity change from 0 to 128 [ 212.384661][T13499] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 212.445695][ T437] udevd[437]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.193/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 212.787275][T13546] loop1: detected capacity change from 0 to 1024 [ 212.813737][T13546] EXT4-fs: Ignoring removed nobh option [ 212.832755][T13546] EXT4-fs: Ignoring removed bh option [ 212.855665][T13546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.945242][T13546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.101073][ T283] EXT4-fs (loop1): unmounting filesystem. [ 213.177172][T13600] netlink: 'syz.1.6403': attribute type 3 has an invalid length. [ 213.216487][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6408'. [ 213.262929][T13607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6408'. [ 213.399047][T13628] SELinux: security_context_str_to_sid () failed with errno=-22 [ 213.799177][T13692] netlink: 'syz.0.6451': attribute type 7 has an invalid length. [ 213.880814][T13703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.888091][T13703] IPv6: NLM_F_CREATE should be set when creating new route [ 213.895320][T13703] IPv6: NLM_F_CREATE should be set when creating new route [ 214.018159][ T19] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 214.214164][ T19] usb 5-1: not running at top speed; connect to a high speed hub [ 214.225045][ T19] usb 5-1: config 13 has an invalid interface number: 214 but max is 0 [ 214.233679][ T19] usb 5-1: config 13 has no interface number 0 [ 214.240851][ T19] usb 5-1: config 13 interface 214 has no altsetting 0 [ 214.251680][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=08d7, bcdDevice=9a.60 [ 214.261340][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.269873][ T19] usb 5-1: Product: syz [ 214.274189][ T19] usb 5-1: Manufacturer: ⷈ嘼仗拆㘬쥢秨⚡﨎㙨膭뱒鉰㏴ꤶꗇ搬럇﩮瘷ኺ휘ኅִ⫞뾶ṇꭽ퉉괣쿸ᔲ꿎㉍ﺓ㸟胴牤鞝繁ꪭ蠐秛넠륾匍욓폹㑴荍룳桸䣭Ꜵ [ 214.294713][ T19] usb 5-1: SerialNumber: syz [ 214.418136][T13768] usb usb7: usbfs: process 13768 (syz.2.6488) did not claim interface 0 before use [ 214.548742][ T19] usb 5-1: USB disconnect, device number 83 [ 214.850018][T13826] netlink: 'syz.3.6517': attribute type 3 has an invalid length. [ 215.323282][T13904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6556'. [ 215.380714][T13914] netlink: 'syz.0.6561': attribute type 4 has an invalid length. [ 215.404301][T13914] netlink: 2548 bytes leftover after parsing attributes in process `syz.0.6561'. [ 215.502424][ T6] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 215.556593][ T39] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 215.575166][T13940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6574'. [ 215.606696][T13940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6574'. [ 215.708223][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 215.715085][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.741818][ T6] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 215.779115][ T6] usb 2-1: config 1 has no interface number 1 [ 215.792133][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 215.796146][ T39] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 215.819097][ T6] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.849091][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.857118][ T6] usb 2-1: Product: syz [ 215.875987][ T39] usb 5-1: config 0 has no interface number 0 [ 215.885477][ T6] usb 2-1: Manufacturer: syz [ 215.890399][ T6] usb 2-1: SerialNumber: syz [ 215.900592][ T39] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=82.a0 [ 215.915222][T13881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 215.948017][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.956054][ T39] usb 5-1: Product: syz [ 215.997282][ T39] usb 5-1: Manufacturer: syz [ 216.007825][ T39] usb 5-1: SerialNumber: syz [ 216.023593][ T39] usb 5-1: config 0 descriptor?? [ 216.118327][T14000] loop3: detected capacity change from 0 to 256 [ 216.152764][T14004] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6606'. [ 216.171914][ T6] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 216.180667][T14000] FAT-fs (loop3): Directory bread(block 64) failed [ 216.184925][ T6] usb 2-1: 2:1 : invalid channels 0 [ 216.204125][T14000] FAT-fs (loop3): Directory bread(block 65) failed [ 216.213307][ T6] usb 2-1: USB disconnect, device number 83 [ 216.226160][T14010] xt_TCPMSS: Only works on TCP SYN packets [ 216.237754][T14000] FAT-fs (loop3): Directory bread(block 66) failed [ 216.258104][T14000] FAT-fs (loop3): Directory bread(block 67) failed [ 216.281287][ T39] usb 5-1: USB disconnect, device number 84 [ 216.286415][T14000] FAT-fs (loop3): Directory bread(block 68) failed [ 216.307310][T14000] FAT-fs (loop3): Directory bread(block 69) failed [ 216.316956][ T28] kauditd_printk_skb: 1277 callbacks suppressed [ 216.316971][ T28] audit: type=1400 audit(211.893:3768): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.363440][T14000] FAT-fs (loop3): Directory bread(block 70) failed [ 216.371591][T14000] FAT-fs (loop3): Directory bread(block 71) failed [ 216.378432][T14000] FAT-fs (loop3): Directory bread(block 72) failed [ 216.385880][T14000] FAT-fs (loop3): Directory bread(block 73) failed [ 216.390632][ T28] audit: type=1400 audit(211.893:3769): avc: denied { open } for pid=287 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.457912][ T1627] udevd[1627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 216.461432][ T28] audit: type=1400 audit(211.893:3770): avc: denied { ioctl } for pid=287 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.565514][ T28] audit: type=1400 audit(211.893:3771): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.626188][ T28] audit: type=1400 audit(211.893:3772): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.662557][T14048] cgroup: Name too long [ 216.672049][T14050] loop2: detected capacity change from 0 to 256 [ 216.675007][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.686824][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.688110][ T284] audit: audit_lost=39 audit_rate_limit=0 audit_backlog_limit=64 [ 216.693353][ T286] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 216.693366][ T286] audit: backlog limit exceeded [ 217.045904][T14103] SELinux: Context is not valid (left unmapped). [ 217.341568][T14147] 8021q: VLANs not supported on lo [ 217.383541][T14154] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6680'. [ 217.413826][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6680'. [ 217.441749][ T8419] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 217.446094][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6680'. [ 217.472526][T14164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6686'. [ 217.551539][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6689'. [ 217.649377][ T8419] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.676929][ T8419] usb 5-1: config 84 has an invalid interface number: 111 but max is 0 [ 217.694672][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.713045][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 217.720928][ T8419] usb 5-1: config 84 has no interface number 0 [ 217.730043][ T8419] usb 5-1: config 84 interface 111 has no altsetting 0 [ 217.756779][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.769937][ T8419] usb 5-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0 [ 217.778416][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 217.797310][ T8419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.802684][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.809497][ T8419] usb 5-1: Product: syz [ 217.814294][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.818417][ T8419] usb 5-1: Manufacturer: syz [ 217.826066][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.830135][ T8419] usb 5-1: SerialNumber: syz [ 217.838341][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.850715][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.859664][T14198] device vlan1 entered promiscuous mode [ 218.065781][ T8419] usb 5-1: bad CDC descriptors [ 218.080984][ T8419] usb 5-1: USB disconnect, device number 85 [ 218.085827][T14236] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.121689][T14236] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 218.143367][T14238] netlink: 'syz.2.6721': attribute type 4 has an invalid length. [ 218.340945][ T39] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 218.535976][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 218.556043][ T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.570642][ T39] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 218.591222][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.599862][ T39] usb 4-1: Product: syz [ 218.610478][ T39] usb 4-1: Manufacturer: syz [ 218.615335][ T39] usb 4-1: SerialNumber: syz [ 218.654906][ T39] usb 4-1: config 0 descriptor?? [ 218.668861][ T39] usb 4-1: bad CDC descriptors [ 218.673994][ T39] usb 4-1: unsupported MDLM descriptors [ 218.887747][ T8419] usb 4-1: USB disconnect, device number 81 [ 219.130738][T14364] netlink: 'syz.2.6781': attribute type 16 has an invalid length. [ 219.219717][T14376] netlink: 'syz.0.6787': attribute type 9 has an invalid length. [ 219.991745][T14482] loop1: detected capacity change from 0 to 256 [ 220.031685][T14482] FAT-fs (loop1): Directory bread(block 64) failed [ 220.052786][T14482] FAT-fs (loop1): Directory bread(block 65) failed [ 220.059365][T14482] FAT-fs (loop1): Directory bread(block 66) failed [ 220.088764][T14482] FAT-fs (loop1): Directory bread(block 67) failed [ 220.105076][T14482] FAT-fs (loop1): Directory bread(block 68) failed [ 220.117525][T14482] FAT-fs (loop1): Directory bread(block 69) failed [ 220.125215][T14482] FAT-fs (loop1): Directory bread(block 70) failed [ 220.133338][T14482] FAT-fs (loop1): Directory bread(block 71) failed [ 220.141766][T14482] FAT-fs (loop1): Directory bread(block 72) failed [ 220.153599][T14482] FAT-fs (loop1): Directory bread(block 73) failed [ 220.171924][ T39] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 220.377753][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 220.385591][ T39] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 220.426308][ T39] usb 3-1: config 179 has no interface number 0 [ 220.438672][ T39] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 220.476478][ T39] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 220.511529][ T39] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.550308][ T39] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 220.580287][T14529] Unsupported ieee802154 address type: 0 [ 220.586746][ T39] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 220.627213][ T39] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 220.660089][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.693567][T14464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.845894][T14561] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 220.981420][T14578] tmpfs: Unexpected value for 'inode32' [ 221.029520][T14583] device vcan0 entered promiscuous mode [ 221.042881][T14583] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 221.152963][T14598] __nla_validate_parse: 7 callbacks suppressed [ 221.152979][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6898'. [ 221.237987][ T39] usb 3-1: USB disconnect, device number 89 [ 221.238030][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 221.252250][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 221.274959][T14616] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6906'. [ 221.316209][T14614] device bridge2 entered promiscuous mode [ 221.435760][T14634] netlink: 'syz.3.6913': attribute type 3 has an invalid length. [ 221.643190][T14662] netlink: 284 bytes leftover after parsing attributes in process `syz.3.6928'. [ 221.646594][T14665] loop1: detected capacity change from 0 to 512 [ 221.716201][T14665] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.757631][ T28] kauditd_printk_skb: 1180 callbacks suppressed [ 221.757652][ T28] audit: type=1400 audit(216.914:4946): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.785784][T14680] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6937'. [ 221.797746][T14665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 221.830646][T14665] System zones: 1-12 [ 221.852164][T14665] EXT4-fs (loop1): 1 truncate cleaned up [ 221.857836][T14665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.933007][ T28] audit: type=1400 audit(216.914:4947): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.981228][ T28] audit: type=1400 audit(216.914:4948): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.984509][ T283] EXT4-fs (loop1): unmounting filesystem. [ 222.024203][ T28] audit: type=1400 audit(216.914:4949): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.027554][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.061695][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.063753][T14717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 222.068503][ T28] audit: type=1400 audit(216.914:4950): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.089589][T14717] audit: audit_lost=43 audit_rate_limit=0 audit_backlog_limit=64 [ 222.105326][ T286] audit: audit_lost=44 audit_rate_limit=0 audit_backlog_limit=64 [ 222.267121][T14732] loop1: detected capacity change from 0 to 256 [ 222.291219][T14737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6964'. [ 222.308017][T14732] FAT-fs (loop1): Directory bread(block 64) failed [ 222.320503][T14732] FAT-fs (loop1): Directory bread(block 65) failed [ 222.327097][T14732] FAT-fs (loop1): Directory bread(block 66) failed [ 222.360498][T14732] FAT-fs (loop1): Directory bread(block 67) failed [ 222.382754][T14732] FAT-fs (loop1): Directory bread(block 68) failed [ 222.389366][T14732] FAT-fs (loop1): Directory bread(block 69) failed [ 222.389414][T14732] FAT-fs (loop1): Directory bread(block 70) failed [ 222.389433][T14732] FAT-fs (loop1): Directory bread(block 71) failed [ 222.389475][T14732] FAT-fs (loop1): Directory bread(block 72) failed [ 222.389493][T14732] FAT-fs (loop1): Directory bread(block 73) failed [ 222.539332][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6983'. [ 222.583920][T14781] tc_dump_action: action bad kind [ 222.891363][ T6] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 222.898591][T14832] tipc: Can't bind to reserved service type 0 [ 223.087842][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7024'. [ 223.116775][ T6] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.148441][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.179523][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00 [ 223.218536][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.253362][ T6] usb 4-1: config 0 descriptor?? [ 223.374930][T14888] xt_CONNSECMARK: invalid mode: 66 [ 223.401220][T14890] x_tables: duplicate entry at hook 3 [ 223.483177][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 223.491396][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 223.512381][ T6] usb 4-1: USB disconnect, device number 82 [ 223.582755][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7050'. [ 223.601828][T14916] SELinux: failed to load policy [ 223.826122][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7061'. [ 225.441757][T14932] device vlan0 entered promiscuous mode [ 225.473341][T14932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7061'. [ 225.498746][T14950] x_tables: duplicate underflow at hook 4 [ 226.138890][T15060] netlink: 'syz.4.7124': attribute type 1 has an invalid length. [ 226.391057][T15082] xt_ecn: cannot match TCP bits for non-tcp packets [ 226.705249][T15074] loop2: detected capacity change from 0 to 40427 [ 226.725589][T15074] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 226.747390][T15074] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 226.795340][T15074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.819241][T15117] netlink: 'syz.0.7151': attribute type 2 has an invalid length. [ 226.891380][T15074] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 226.903146][T15074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.926198][T15074] SELinux: (dev loop2, type f2fs) getxattr errno 2 [ 227.001570][T15132] __nla_validate_parse: 3 callbacks suppressed [ 227.001588][T15132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7158'. [ 227.080092][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7158'. [ 227.116804][T15140] tc_dump_action: action bad kind [ 227.182266][ T28] kauditd_printk_skb: 881 callbacks suppressed [ 227.182281][ T28] audit: type=1400 audit(221.926:5768): avc: denied { setopt } for pid=15145 comm="syz.0.7164" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.265433][ T28] audit: type=1400 audit(221.945:5769): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.305300][T15160] loop2: detected capacity change from 0 to 512 [ 227.318453][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7173'. [ 227.341933][ T28] audit: type=1400 audit(221.945:5770): avc: denied { read write open } for pid=287 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.368272][T15162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 227.377757][T15162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.395139][T15160] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 227.462995][ T28] audit: type=1400 audit(221.945:5771): avc: denied { ioctl } for pid=287 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.467918][ T287] EXT4-fs (loop2): unmounting filesystem. [ 227.527264][ T28] audit: type=1400 audit(221.963:5772): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.561742][ T28] audit: type=1400 audit(221.963:5773): avc: denied { read write open } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.570099][T15072] loop4: detected capacity change from 0 to 131072 [ 227.620307][ T28] audit: type=1400 audit(221.963:5774): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.646834][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.655847][ T287] audit: audit_lost=66 audit_rate_limit=0 audit_backlog_limit=64 [ 227.663866][ T28] audit: type=1400 audit(221.963:5775): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.665430][T15072] F2FS-fs (loop4): Found nat_bits in checkpoint [ 227.698514][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7184'. [ 227.920066][T15072] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 227.967777][T15231] loop1: detected capacity change from 0 to 512 [ 227.999642][T15231] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.041743][T15072] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 228.052792][T15231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.091247][T15248] netlink: 'syz.2.7211': attribute type 5 has an invalid length. [ 228.098355][T15231] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.7204: invalid block [ 228.113898][T15231] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7204: invalid indirect mapped block 4294967295 (level 1) [ 228.129231][T15231] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7204: invalid indirect mapped block 4294967295 (level 1) [ 228.157101][T15231] EXT4-fs (loop1): 2 truncates cleaned up [ 228.163669][T15245] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 228.167660][T15231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.241063][T15231] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz.1.7204: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 228.270881][T15231] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 228.318838][ T283] EXT4-fs (loop1): unmounting filesystem. [ 228.428634][T15273] loop2: detected capacity change from 0 to 16 [ 228.492665][T15273] erofs: (device loop2): mounted with root inode @ nid 36. [ 228.582943][T15291] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7235'. [ 228.907640][T15327] netlink: 'syz.1.7252': attribute type 13 has an invalid length. [ 229.056316][T15352] loop3: detected capacity change from 0 to 256 [ 229.067620][T15354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7264'. [ 229.090198][T15352] FAT-fs (loop3): Directory bread(block 64) failed [ 229.113428][T15352] FAT-fs (loop3): Directory bread(block 65) failed [ 229.130057][T15352] FAT-fs (loop3): Directory bread(block 66) failed [ 229.146548][T15352] FAT-fs (loop3): Directory bread(block 67) failed [ 229.181776][T15352] FAT-fs (loop3): Directory bread(block 68) failed [ 229.197435][T15352] FAT-fs (loop3): Directory bread(block 69) failed [ 229.220600][T15352] FAT-fs (loop3): Directory bread(block 70) failed [ 229.242572][T15352] FAT-fs (loop3): Directory bread(block 71) failed [ 229.257334][T15375] loop4: detected capacity change from 0 to 256 [ 229.267313][T15352] FAT-fs (loop3): Directory bread(block 72) failed [ 229.293021][T15352] FAT-fs (loop3): Directory bread(block 73) failed [ 229.305920][T15375] FAT-fs (loop4): Directory bread(block 64) failed [ 229.313647][T15375] FAT-fs (loop4): Directory bread(block 65) failed [ 229.328476][T15375] FAT-fs (loop4): Directory bread(block 66) failed [ 229.342072][T15375] FAT-fs (loop4): Directory bread(block 67) failed [ 229.356896][T15375] FAT-fs (loop4): Directory bread(block 68) failed [ 229.372073][T15375] FAT-fs (loop4): Directory bread(block 69) failed [ 229.396395][T15375] FAT-fs (loop4): Directory bread(block 70) failed [ 229.407497][T15381] loop3: detected capacity change from 0 to 512 [ 229.411225][T15375] FAT-fs (loop4): Directory bread(block 71) failed [ 229.431306][T15375] FAT-fs (loop4): Directory bread(block 72) failed [ 229.436352][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7279'. [ 229.446234][T15375] FAT-fs (loop4): Directory bread(block 73) failed [ 229.513352][T15381] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.7278: Failed to acquire dquot type 0 [ 229.536377][T15395] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 229.555619][T15381] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.7278: corrupted inode contents [ 229.620741][T15381] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.7278: mark_inode_dirty error [ 229.627201][T15397] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.634469][T15381] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.7278: corrupted inode contents [ 229.670390][T15381] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.7278: mark_inode_dirty error [ 229.687798][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): 1@: link becomes ready [ 229.696317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.719615][T15381] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.7278: corrupted inode contents [ 229.728094][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.757136][T15381] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 229.766413][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 229.783113][T15381] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.7278: corrupted inode contents [ 229.804524][T15411] loop1: detected capacity change from 0 to 256 [ 229.811196][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.823206][T15381] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.7278: mark_inode_dirty error [ 229.830001][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.843640][T15411] FAT-fs (loop1): Directory bread(block 1285) failed [ 229.856801][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.868574][T15381] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 229.878179][T15381] EXT4-fs (loop3): 1 truncate cleaned up [ 229.884937][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): 76: link becomes ready [ 229.887500][T15381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 229.893773][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.907112][T15411] FAT-fs (loop1): Directory bread(block 1285) failed [ 229.917308][T15411] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 229.987421][ T286] EXT4-fs (loop3): unmounting filesystem. [ 230.315610][T15465] loop3: detected capacity change from 0 to 1024 [ 230.352761][T15465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 230.388224][T15478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7325'. [ 230.398366][T15478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7325'. [ 230.408601][ T286] EXT4-fs (loop3): unmounting filesystem. [ 230.411812][T15478] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 230.465553][T15484] loop1: detected capacity change from 0 to 256 [ 230.489176][T15486] netlink: 'syz.4.7329': attribute type 2 has an invalid length. [ 230.549043][T15492] loop2: detected capacity change from 0 to 512 [ 230.552805][T15494] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7333'. [ 230.616280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.052674][T15563] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.267099][T15596] SELinux: Context system_u: is not valid (left unmapped). [ 231.277791][T15597] xt_NFQUEUE: number of total queues is 0 [ 231.464365][T15617] loop3: detected capacity change from 0 to 512 [ 231.491803][T15617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.566342][T15617] EXT4-fs (loop3): 1 truncate cleaned up [ 231.572234][T15617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 231.595311][ T286] EXT4-fs (loop3): unmounting filesystem. [ 231.754300][T15662] netlink: 'syz.0.7416': attribute type 4 has an invalid length. [ 231.851234][ T1468] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 232.002953][T15698] usb usb7: usbfs: process 15698 (syz.2.7434) did not claim interface 0 before use [ 232.048647][ T1468] usb 2-1: config 5 has an invalid interface number: 214 but max is 0 [ 232.073585][ T1468] usb 2-1: config 5 has no interface number 0 [ 232.095304][ T1468] usb 2-1: config 5 interface 214 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 232.139094][ T1468] usb 2-1: config 5 interface 214 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 232.186371][ T1468] usb 2-1: config 5 interface 214 has no altsetting 0 [ 232.217162][ T1468] usb 2-1: New USB device found, idVendor=3285, idProduct=f339, bcdDevice=56.70 [ 232.259565][ T1468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.284404][ T1468] usb 2-1: Product: syz [ 232.296001][ T1468] usb 2-1: Manufacturer: syz [ 232.317613][ T1468] usb 2-1: SerialNumber: syz [ 232.556122][ T1468] usb 2-1: USB disconnect, device number 84 [ 232.618450][ T28] kauditd_printk_skb: 1227 callbacks suppressed [ 232.618466][ T28] audit: type=1326 audit(226.931:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.4.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a36f8eb69 code=0x7ffc0000 [ 232.685494][ T28] audit: type=1326 audit(226.931:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.4.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a36f8eb69 code=0x7ffc0000 [ 232.739927][ T28] audit: type=1326 audit(226.931:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.4.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f3a36f8eb69 code=0x7ffc0000 [ 232.740175][T15789] __nla_validate_parse: 3 callbacks suppressed [ 232.740188][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7477'. [ 232.800346][ T28] audit: type=1326 audit(226.931:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.4.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a36f8eb69 code=0x7ffc0000 [ 232.829009][T15799] loop4: detected capacity change from 0 to 16 [ 232.844327][T15799] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 232.879580][ T28] audit: type=1326 audit(226.931:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15770 comm="syz.4.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a36f8eb69 code=0x7ffc0000 [ 232.916880][T15799] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 232.936068][ T28] audit: type=1400 audit(226.949:6972): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.963263][T15799] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 34359738624 [ 232.983182][T15808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.990081][ T28] audit: type=1400 audit(226.949:6973): avc: denied { read write open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.003355][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.021013][T15808] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 233.167864][T15831] xt_l2tp: invalid flags combination: c [ 233.187918][T15836] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 233.648555][T15917] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7543'. [ 233.680092][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7546'. [ 233.725568][ T1468] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 233.942303][ T1468] usb 3-1: Using ep0 maxpacket: 16 [ 233.949530][ T1468] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.992053][ T1468] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.006657][T15953] loop4: detected capacity change from 0 to 256 [ 234.029306][ T1468] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 234.040097][ T698] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 234.048268][ T1468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.091302][ T1468] usb 3-1: Product: syz [ 234.104940][ T1468] usb 3-1: Manufacturer: syz [ 234.109588][ T1468] usb 3-1: SerialNumber: syz [ 234.259568][ T698] usb 4-1: Using ep0 maxpacket: 32 [ 234.268476][ T698] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.317861][ T698] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 234.338777][ T698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.360482][ T1468] usb 3-1: 0:2 : does not exist [ 234.375767][ T1468] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 234.378358][ T698] usb 4-1: Product: syz [ 234.408536][ T698] usb 4-1: Manufacturer: syz [ 234.409977][ T1468] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 234.414098][ T698] usb 4-1: SerialNumber: syz [ 234.437355][ T698] usb 4-1: config 0 descriptor?? [ 234.459997][ T1468] usb 3-1: USB disconnect, device number 90 [ 234.480566][ T698] usb 4-1: bad CDC descriptors [ 234.495299][ T698] usb 4-1: unsupported MDLM descriptors [ 234.499218][T16000] loop4: detected capacity change from 0 to 512 [ 234.542381][T16000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.556235][T16003] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 234.570094][T16003] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 234.580180][T16000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.593446][T16003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 234.602261][T16003] device bridge_slave_0 left promiscuous mode [ 234.609145][T16003] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.632989][T16000] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.7583: invalid indirect mapped block 4294967295 (level 1) [ 234.658667][T16000] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.7583: invalid indirect mapped block 4294967295 (level 1) [ 234.701381][ T1627] udevd[1627]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 234.718987][T16000] EXT4-fs (loop4): 2 truncates cleaned up [ 234.733221][T16000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.757234][ T698] usb 4-1: USB disconnect, device number 83 [ 234.804472][T16000] EXT4-fs error (device loop4): empty_inline_dir:1877: inode #12: block 7: comm syz.4.7583: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 234.847056][T16000] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 234.896422][T16037] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.907550][ T285] EXT4-fs (loop4): unmounting filesystem. [ 234.908682][T16037] FAT-fs (loop3): unable to read boot sector [ 235.092427][T16056] xt_SECMARK: invalid security context 'unconfined' [ 235.117144][T16058] loop4: detected capacity change from 0 to 256 [ 235.165792][T16062] IPv6: sit3: Disabled Multicast RS [ 235.233576][T16068] loop2: detected capacity change from 0 to 256 [ 235.418531][T16091] IPv6: NLM_F_REPLACE set, but no existing node found! [ 235.581779][T16118] IPv6: sit1: Disabled Multicast RS [ 235.716149][T16143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7653'. [ 235.870763][ T39] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 236.071217][T16186] netlink: 'syz.2.7675': attribute type 5 has an invalid length. [ 236.081059][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 236.088867][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.115630][ T39] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 236.134067][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.151860][ T39] usb 1-1: Product: syz [ 236.160985][ T39] usb 1-1: Manufacturer: syz [ 236.171517][ T39] usb 1-1: SerialNumber: syz [ 236.183474][ T39] usb 1-1: config 0 descriptor?? [ 236.195436][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7681'. [ 236.207919][ T39] rndis_host 1-1:0.0: skipping garbage [ 236.213447][ T39] usb 1-1: bad CDC descriptors [ 236.363414][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7689'. [ 236.391495][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.401931][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.423467][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.446387][ T19] usb 1-1: USB disconnect, device number 85 [ 236.542757][T16204] loop2: detected capacity change from 0 to 40427 [ 236.560939][T16204] F2FS-fs (loop2): fault_injection options not supported [ 236.577611][T16204] F2FS-fs (loop2): Image doesn't support compression [ 236.604784][T16204] F2FS-fs (loop2): invalid crc value [ 236.622608][T16204] F2FS-fs (loop2): Found nat_bits in checkpoint [ 236.719235][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7704'. [ 236.737537][ T698] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.745142][T16246] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 236.756668][T16204] F2FS-fs (loop2): Start checkpoint disabled! [ 236.762427][T16247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7704'. [ 236.763650][T16204] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 236.781678][T16247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7704'. [ 236.925936][T16261] binder: 16258:16261 ioctl c0306201 200000000240 returned -14 [ 236.987744][T16266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.102596][T16289] netlink: 'syz.2.7725': attribute type 10 has an invalid length. [ 237.211252][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7734'. [ 237.339771][T16328] loop4: detected capacity change from 0 to 256 [ 237.363454][T16328] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 237.550124][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.820929][ T698] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 238.038530][ T28] kauditd_printk_skb: 1273 callbacks suppressed [ 238.038574][ T28] audit: type=1400 audit(231.948:8217): avc: denied { write } for pid=16433 comm="syz.4.7798" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.067387][ T698] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 238.089673][ T698] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 238.121334][ T698] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 238.168818][ T28] audit: type=1400 audit(231.948:8218): avc: denied { ioctl } for pid=16360 comm="syz.0.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.210988][ T698] usb 1-1: config 220 has no interface number 2 [ 238.217295][ T698] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 238.252929][T16450] loop2: detected capacity change from 0 to 256 [ 238.269354][ T698] usb 1-1: config 220 interface 0 has no altsetting 0 [ 238.272577][T16454] netlink: 'syz.1.7807': attribute type 32 has an invalid length. [ 238.276723][ T28] audit: type=1400 audit(231.957:8219): avc: denied { ioctl } for pid=16360 comm="syz.0.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.327166][ T698] usb 1-1: config 220 interface 76 has no altsetting 0 [ 238.339195][T16450] FAT-fs (loop2): Directory bread(block 64) failed [ 238.351747][ T698] usb 1-1: config 220 interface 1 has no altsetting 0 [ 238.369340][T16450] FAT-fs (loop2): Directory bread(block 65) failed [ 238.371206][ T698] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 238.416792][ T698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.417301][T16450] FAT-fs (loop2): Directory bread(block 66) failed [ 238.424906][ T28] audit: type=1400 audit(231.957:8220): avc: denied { read write open } for pid=287 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.458627][T16414] loop3: detected capacity change from 0 to 40427 [ 238.465148][ T698] usb 1-1: Product: syz [ 238.474372][ T698] usb 1-1: Manufacturer: syz [ 238.480721][ T698] usb 1-1: SerialNumber: syz [ 238.486100][T16450] FAT-fs (loop2): Directory bread(block 67) failed [ 238.492849][ T28] audit: type=1400 audit(231.957:8221): avc: denied { ioctl } for pid=287 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.512159][T16450] FAT-fs (loop2): Directory bread(block 68) failed [ 238.521949][ T28] audit: type=1400 audit(231.957:8222): avc: denied { write } for pid=16435 comm="syz.1.7799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.544516][T16414] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 238.553022][T16414] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 238.562411][T16450] FAT-fs (loop2): Directory bread(block 69) failed [ 238.564605][ T28] audit: type=1400 audit(231.966:8223): avc: denied { ioctl } for pid=16360 comm="syz.0.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.597968][ T28] audit: type=1400 audit(231.966:8224): avc: denied { ioctl } for pid=16360 comm="syz.0.7761" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.615515][T16450] FAT-fs (loop2): Directory bread(block 70) failed [ 238.623259][ T28] audit: type=1400 audit(231.976:8225): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.653452][ T28] audit: type=1400 audit(231.976:8226): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.694801][T16414] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.712986][T16450] FAT-fs (loop2): Directory bread(block 71) failed [ 238.719773][T16450] FAT-fs (loop2): Directory bread(block 72) failed [ 238.752936][ T698] usb 1-1: selecting invalid altsetting 0 [ 238.754002][T16450] FAT-fs (loop2): Directory bread(block 73) failed [ 238.758806][ T698] usb 1-1: selecting invalid altsetting 0 [ 238.794319][ T698] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 238.801544][ T698] usb 1-1: No valid video chain found. [ 238.818246][T16414] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 238.825369][T16414] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 238.829953][T16487] xt_TCPMSS: Only works on TCP SYN packets [ 238.855088][ T698] usb 1-1: USB disconnect, device number 86 [ 238.923935][ T286] syz-executor: attempt to access beyond end of device [ 238.923935][ T286] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.210731][T16524] xt_limit: Overflow, try lower: 2147483649/3300 [ 239.219170][T16521] device ip6tnl1 entered promiscuous mode [ 239.272019][T16530] loop2: detected capacity change from 0 to 512 [ 239.316317][T16530] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.7844: casefold flag without casefold feature [ 239.342404][T16530] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.7844: couldn't read orphan inode 15 (err -117) [ 239.370797][T16530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 239.398569][T16546] SELinux: policydb string length 0 does not match expected length 8 [ 239.413294][ T287] EXT4-fs (loop2): unmounting filesystem. [ 239.468145][T16546] SELinux: failed to load policy [ 239.565784][T16569] xt_TCPMSS: Only works on TCP SYN packets [ 239.582536][T16574] loop1: detected capacity change from 0 to 512 [ 239.620148][T16574] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.700435][T16574] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 239.746633][ T283] EXT4-fs (loop1): unmounting filesystem. [ 239.871315][T16608] loop4: detected capacity change from 0 to 256 [ 239.886992][T16607] loop3: detected capacity change from 0 to 512 [ 239.934618][T16608] FAT-fs (loop4): Directory bread(block 64) failed [ 239.941172][T16608] FAT-fs (loop4): Directory bread(block 65) failed [ 239.968248][T16607] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.980976][T16608] FAT-fs (loop4): Directory bread(block 66) failed [ 239.993776][T16608] FAT-fs (loop4): Directory bread(block 67) failed [ 240.021730][T16607] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 240.029944][T16608] FAT-fs (loop4): Directory bread(block 68) failed [ 240.046478][T16608] FAT-fs (loop4): Directory bread(block 69) failed [ 240.062425][T16607] EXT4-fs (loop3): orphan cleanup on readonly fs [ 240.084771][T16608] FAT-fs (loop4): Directory bread(block 70) failed [ 240.094922][T16607] EXT4-fs warning (device loop3): ext4_enable_quotas:7053: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 240.124435][T16608] FAT-fs (loop4): Directory bread(block 71) failed [ 240.150428][T16608] FAT-fs (loop4): Directory bread(block 72) failed [ 240.158296][T16607] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 240.175100][T16608] FAT-fs (loop4): Directory bread(block 73) failed [ 240.192228][T16607] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.7878: bg 0: block 40: padding at end of block bitmap is not set [ 240.247472][T16607] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 240.290279][T16607] EXT4-fs (loop3): 1 truncate cleaned up [ 240.313581][T16607] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.322660][T16654] netlink: 'syz.2.7901': attribute type 15 has an invalid length. [ 240.368561][T16607] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #16: comm syz.3.7878: corrupted xattr block 31 [ 240.414346][T16607] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 240.464540][T16607] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #16: comm syz.3.7878: corrupted xattr block 31 [ 240.477436][T16672] device bridge5 entered promiscuous mode [ 240.516357][T16607] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 240.532058][T16607] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.7878: bad symlink. [ 240.544591][T16676] device veth2 entered promiscuous mode [ 240.587026][ T286] EXT4-fs (loop3): unmounting filesystem. [ 240.595824][T16683] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 240.756991][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.787197][T16714] xt_l2tp: missing protocol rule (udp|l2tpip) [ 240.990974][T16748] __nla_validate_parse: 6 callbacks suppressed [ 240.990989][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7947'. [ 241.038702][ T698] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 241.165576][T16774] loop4: detected capacity change from 0 to 1024 [ 241.240192][T16774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.248702][ T698] usb 4-1: Using ep0 maxpacket: 16 [ 241.255366][ T698] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.265606][ T698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 241.325571][ T698] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 241.410498][ T285] EXT4-fs (loop4): unmounting filesystem. [ 241.442351][ T698] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 241.454877][T16807] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7977'. [ 241.502431][ T698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.510822][T16815] netlink: 'syz.1.7980': attribute type 3 has an invalid length. [ 241.535534][ T698] usb 4-1: Product: syz [ 241.564256][ T698] usb 4-1: Manufacturer: syz [ 241.568902][ T698] usb 4-1: SerialNumber: syz [ 241.602190][ T698] usb 4-1: config 0 descriptor?? [ 241.776418][T16844] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7993'. [ 241.807386][T16844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.845785][ T1468] usb 4-1: USB disconnect, device number 84 [ 241.959946][T16866] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.169470][T16895] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 242.214805][T16907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8023'. [ 242.390135][T16930] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8036'. [ 242.470148][T16940] loop2: detected capacity change from 0 to 256 [ 242.531168][T16948] loop3: detected capacity change from 0 to 256 [ 242.674328][T16960] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.756461][T16977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8058'. [ 242.874385][T16993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.928040][T17001] syz.3.8071[17001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.928940][T17001] syz.3.8071[17001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.121754][T17029] loop4: detected capacity change from 0 to 512 [ 243.168440][T17038] netlink: 448 bytes leftover after parsing attributes in process `syz.1.8089'. [ 243.228950][T17029] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.279828][T17029] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 243.321379][T17029] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.8086: inode #15: comm syz.4.8086: iget: illegal inode # [ 243.348989][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.402908][T17029] EXT4-fs (loop4): Remounting filesystem read-only [ 243.409466][T17029] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8086: couldn't read orphan inode 15 (err -117) [ 243.440482][T17029] EXT4-fs (loop4): Remounting filesystem read-only [ 243.452519][T17029] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 243.471212][ T28] kauditd_printk_skb: 1196 callbacks suppressed [ 243.471226][ T28] audit: type=1400 audit(236.951:9392): avc: denied { mount } for pid=17027 comm="syz.4.8086" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 243.518561][T17086] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8111'. [ 243.542491][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8116'. [ 243.551563][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8111'. [ 243.580243][ T28] audit: type=1400 audit(236.951:9393): avc: denied { read write } for pid=17027 comm="syz.4.8086" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.640984][ T28] audit: type=1400 audit(236.951:9394): avc: denied { read write open } for pid=17027 comm="syz.4.8086" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.719987][T17110] netlink: 'syz.0.8124': attribute type 7 has an invalid length. [ 243.742914][ T28] audit: type=1400 audit(236.951:9395): avc: denied { ioctl } for pid=17027 comm="syz.4.8086" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.754346][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.771093][T17112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.781207][ T1468] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 243.788902][T17110] netlink: 'syz.0.8124': attribute type 5 has an invalid length. [ 243.789403][ T286] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64 [ 243.797454][T17112] audit: audit_lost=100 audit_rate_limit=0 audit_backlog_limit=64 [ 243.806377][ T286] audit: backlog limit exceeded [ 243.812787][T17029] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.949261][T17132] tc_dump_action: action bad kind [ 244.019684][ T1468] usb 5-1: config 1 has an invalid descriptor of length 222, skipping remainder of the config [ 244.056129][ T1468] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.086658][ T1468] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 244.117159][ T1468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.149699][ T1468] usb 5-1: SerialNumber: syz [ 244.171457][ T1468] usb 5-1: 0:2 : does not exist [ 244.442067][ T1468] usb 5-1: USB disconnect, device number 86 [ 244.733717][T17228] xt_CT: No such helper "snmp" [ 244.751943][T17230] device vlan0 entered promiscuous mode [ 244.843322][T17242] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.853389][T17242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.860610][T17242] IPv6: NLM_F_CREATE should be set when creating new route [ 244.867872][T17242] IPv6: NLM_F_CREATE should be set when creating new route [ 245.005688][ T285] EXT4-fs (loop4): unmounting filesystem. [ 245.079050][T17268] device bridge3 entered promiscuous mode [ 245.350367][T17311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 245.382943][T17314] loop4: detected capacity change from 0 to 512 [ 245.407390][T17314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.471268][T17314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 245.522459][ T285] EXT4-fs (loop4): unmounting filesystem. [ 246.008262][T17409] binfmt_misc: register: failed to install interpreter file ./file0 [ 246.461812][T17463] __nla_validate_parse: 12 callbacks suppressed [ 246.461830][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8298'. [ 246.584963][T17478] loop3: detected capacity change from 0 to 1024 [ 246.593698][T17478] EXT4-fs: Ignoring removed i_version option [ 246.619938][T17478] EXT4-fs (loop3): Test dummy encryption mode enabled [ 246.642741][T17487] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8310'. [ 246.656891][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8310'. [ 246.667434][T17487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8310'. [ 246.667834][T17478] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.714814][T17487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8310'. [ 246.791800][T17502] xt_CT: No such helper "snmp_trap" [ 246.820329][T17505] loop1: detected capacity change from 0 to 8192 [ 246.864689][ T286] EXT4-fs (loop3): unmounting filesystem. [ 246.880822][T17505] loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 246.880969][T17505] loop1: p1 start 4294967295 is beyond EOD, [ 247.098184][T17535] loop3: detected capacity change from 0 to 512 [ 247.120096][T17505] truncated [ 247.128822][T17505] loop1: p5 start 4294967295 is beyond EOD, truncated [ 247.139143][T17505] loop1: p7 start 4294967295 is beyond EOD, truncated [ 247.165757][T17505] loop1: p9 start 4294967295 is beyond EOD, truncated [ 247.193143][T17505] loop1: p11 start 4294967295 is beyond EOD, truncated [ 247.214692][T17505] loop1: p13 start 4294967295 is beyond EOD, truncated [ 247.225963][T17535] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 247.255458][T17505] loop1: p15 start 4294967295 is beyond EOD, truncated [ 247.262792][T17549] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8341'. [ 247.290909][T17535] EXT4-fs (loop3): 1 truncate cleaned up [ 247.301456][T17505] loop1: p17 start 4294967295 is beyond EOD, truncated [ 247.322644][T17535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.334373][T17505] loop1: p19 start 4294967295 is beyond EOD, truncated [ 247.356437][T17505] loop1: p21 start 4294967295 is beyond EOD, truncated [ 247.368387][T17560] loop4: detected capacity change from 0 to 256 [ 247.393779][T17505] loop1: p23 start 4294967295 is beyond EOD, truncated [ 247.402023][ T286] EXT4-fs (loop3): unmounting filesystem. [ 247.430339][T17505] loop1: p25 start 4294967295 is beyond EOD, truncated [ 247.438526][T17563] netlink: 'syz.0.8347': attribute type 9 has an invalid length. [ 247.461897][T17505] loop1: p27 start 4294967295 is beyond EOD, truncated [ 247.491487][T17505] loop1: p29 start 4294967295 is beyond EOD, truncated [ 247.520736][T17505] loop1: p31 start 4294967295 is beyond EOD, truncated [ 247.538172][T17505] loop1: p33 start 4294967295 is beyond EOD, truncated [ 247.554148][T17505] loop1: p35 start 4294967295 is beyond EOD, truncated [ 247.571171][T17574] xt_CT: No such helper "netbios-ns" [ 247.597110][T17505] loop1: p37 start 4294967295 is beyond EOD, truncated [ 247.622453][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8356'. [ 247.642987][T17505] loop1: p39 start 4294967295 is beyond EOD, truncated [ 247.659304][T17505] loop1: p41 start 4294967295 is beyond EOD, truncated [ 247.707184][T17505] loop1: p43 start 4294967295 is beyond EOD, truncated [ 247.754105][T17505] loop1: p45 start 4294967295 is beyond EOD, truncated [ 247.805807][T17505] loop1: p47 start 4294967295 is beyond EOD, truncated [ 247.844005][T17505] loop1: p49 start 4294967295 is beyond EOD, truncated [ 247.864131][T17505] loop1: p51 start 4294967295 is beyond EOD, truncated [ 247.895026][T17505] loop1: p53 start 4294967295 is beyond EOD, truncated [ 247.929954][T17505] loop1: p55 start 4294967295 is beyond EOD, truncated [ 247.949522][T17505] loop1: p57 start 4294967295 is beyond EOD, truncated [ 247.974204][T17505] loop1: p59 start 4294967295 is beyond EOD, truncated [ 247.984362][T17505] loop1: p61 start 4294967295 is beyond EOD, truncated [ 247.999976][T17629] netlink: 'syz.2.8380': attribute type 9 has an invalid length. [ 248.015120][T17505] loop1: p63 start 4294967295 is beyond EOD, truncated [ 248.032030][T17505] loop1: p65 start 4294967295 is beyond EOD, truncated [ 248.048466][T17629] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8380'. [ 248.060390][T17505] loop1: p67 start 4294967295 is beyond EOD, truncated [ 248.070963][T17505] loop1: p69 start 4294967295 is beyond EOD, truncated [ 248.086889][T17505] loop1: p71 start 4294967295 is beyond EOD, truncated [ 248.095830][T17505] loop1: p73 start 4294967295 is beyond EOD, truncated [ 248.152490][T17505] loop1: p75 start 4294967295 is beyond EOD, truncated [ 248.169480][T17645] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8387'. [ 248.179577][T17505] loop1: p77 start 4294967295 is beyond EOD, truncated [ 248.187544][T17505] loop1: p79 start 4294967295 is beyond EOD, truncated [ 248.206491][T17505] loop1: p81 start 4294967295 is beyond EOD, truncated [ 248.229032][T17505] loop1: p83 start 4294967295 is beyond EOD, truncated [ 248.254626][T17505] loop1: p85 start 4294967295 is beyond EOD, truncated [ 248.279641][T17505] loop1: p87 start 4294967295 is beyond EOD, truncated [ 248.306023][T17505] loop1: p89 start 4294967295 is beyond EOD, truncated [ 248.306182][T17662] IPv6: sit2: Disabled Multicast RS [ 248.327481][T17505] loop1: p91 start 4294967295 is beyond EOD, truncated [ 248.350163][T17505] loop1: p93 start 4294967295 is beyond EOD, truncated [ 248.374374][T17505] loop1: p95 start 4294967295 is beyond EOD, truncated [ 248.396301][T17505] loop1: p97 start 4294967295 is beyond EOD, truncated [ 248.420654][T17505] loop1: p99 start 4294967295 is beyond EOD, truncated [ 248.447046][T17505] loop1: p101 start 4294967295 is beyond EOD, truncated [ 248.474399][T17505] loop1: p103 start 4294967295 is beyond EOD, truncated [ 248.499542][T17505] loop1: p105 start 4294967295 is beyond EOD, truncated [ 248.522239][T17505] loop1: p107 start 4294967295 is beyond EOD, truncated [ 248.547799][T17505] loop1: p109 start 4294967295 is beyond EOD, truncated [ 248.569348][T17505] loop1: p111 start 4294967295 is beyond EOD, truncated [ 248.601392][T17505] loop1: p113 start 4294967295 is beyond EOD, truncated [ 248.623412][T17505] loop1: p115 start 4294967295 is beyond EOD, truncated [ 248.646011][T17505] loop1: p117 start 4294967295 is beyond EOD, truncated [ 248.669125][T17505] loop1: p119 start 4294967295 is beyond EOD, truncated [ 248.681397][T17505] loop1: p121 start 4294967295 is beyond EOD, truncated [ 248.713887][T17505] loop1: p123 start 4294967295 is beyond EOD, truncated [ 248.736378][T17505] loop1: p125 start 4294967295 is beyond EOD, truncated [ 248.758428][T17505] loop1: p127 start 4294967295 is beyond EOD, truncated [ 248.783474][T17505] loop1: p129 start 4294967295 is beyond EOD, truncated [ 248.811829][T17505] loop1: p131 start 4294967295 is beyond EOD, truncated [ 248.833733][T17505] loop1: p133 start 4294967295 is beyond EOD, truncated [ 248.847741][T17505] loop1: p135 start 4294967295 is beyond EOD, truncated [ 248.857912][T17505] loop1: p137 start 4294967295 is beyond EOD, truncated [ 248.866999][T17505] loop1: p139 start 4294967295 is beyond EOD, truncated [ 248.874680][T17739] netlink: 'syz.2.8436': attribute type 27 has an invalid length. [ 248.887688][T17505] loop1: p141 start 4294967295 is beyond EOD, truncated [ 248.897333][ T28] kauditd_printk_skb: 1245 callbacks suppressed [ 248.897349][ T28] audit: type=1400 audit(241.963:10635): avc: denied { bpf } for pid=17741 comm="syz.3.8437" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 248.905697][T17505] loop1: p143 start 4294967295 is beyond EOD, truncated [ 248.935372][T17739] device sit0 left promiscuous mode [ 248.947380][T17505] loop1: p145 start 4294967295 is beyond EOD, truncated [ 248.962454][T17505] loop1: p147 start 4294967295 is beyond EOD, truncated [ 248.970885][ T28] audit: type=1400 audit(241.990:10636): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.983305][T17505] loop1: p149 start 4294967295 is beyond EOD, truncated [ 249.004613][ T28] audit: type=1400 audit(241.999:10637): avc: denied { bpf } for pid=17744 comm="syz.4.8438" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 249.014371][T17505] loop1: p151 start 4294967295 is beyond EOD, [ 249.024906][ T28] audit: type=1400 audit(241.999:10638): avc: denied { prog_load } for pid=17744 comm="syz.4.8438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.025917][T17505] truncated [ 249.031134][ T28] audit: type=1400 audit(242.009:10639): avc: denied { bpf } for pid=17744 comm="syz.4.8438" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 249.067833][T17505] loop1: p153 start 4294967295 is beyond EOD, truncated [ 249.087591][T17505] loop1: p155 start 4294967295 is beyond EOD, truncated [ 249.090548][ T28] audit: type=1400 audit(242.009:10640): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.098344][T17505] loop1: p157 start 4294967295 is beyond EOD, [ 249.118305][ T28] audit: type=1400 audit(242.009:10641): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.132256][T17505] truncated [ 249.148180][ T28] audit: type=1400 audit(242.055:10642): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.162229][T17505] loop1: p159 start 4294967295 is beyond EOD, [ 249.175597][ T28] audit: type=1400 audit(242.110:10643): avc: denied { read write } for pid=17750 comm="syz.4.8441" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.185787][T17505] truncated [ 249.206080][ T28] audit: type=1400 audit(242.203:10644): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.214676][T17505] loop1: p161 start 4294967295 is beyond EOD, truncated [ 249.246812][T17739] device vlan0 left promiscuous mode [ 249.254558][T17505] loop1: p163 start 4294967295 is beyond EOD, truncated [ 249.261755][T17739] device vlan1 left promiscuous mode [ 249.269032][T17505] loop1: p165 start 4294967295 is beyond EOD, truncated [ 249.278805][T17505] loop1: p167 start 4294967295 is beyond EOD, truncated [ 249.287387][T17505] loop1: p169 start 4294967295 is beyond EOD, truncated [ 249.296119][T17505] loop1: p171 start 4294967295 is beyond EOD, truncated [ 249.304872][T17505] loop1: p173 start 4294967295 is beyond EOD, truncated [ 249.325270][T17505] loop1: p175 start 4294967295 is beyond EOD, truncated [ 249.346794][T17505] loop1: p177 start 4294967295 is beyond EOD, truncated [ 249.366557][T17505] loop1: p179 start 4294967295 is beyond EOD, truncated [ 249.375218][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8450'. [ 249.377409][T17505] loop1: p181 start 4294967295 is beyond EOD, truncated [ 249.407940][T17505] loop1: p183 start 4294967295 is beyond EOD, truncated [ 249.419686][T17505] loop1: p185 start 4294967295 is beyond EOD, truncated [ 249.437211][T17505] loop1: p187 start 4294967295 is beyond EOD, truncated [ 249.450570][T17505] loop1: p189 start 4294967295 is beyond EOD, truncated [ 249.469367][T17505] loop1: p191 start 4294967295 is beyond EOD, truncated [ 249.488925][T17505] loop1: p193 start 4294967295 is beyond EOD, truncated [ 249.501588][T17505] loop1: p195 start 4294967295 is beyond EOD, truncated [ 249.519228][T17505] loop1: p197 start 4294967295 is beyond EOD, truncated [ 249.534371][T17505] loop1: p199 start 4294967295 is beyond EOD, truncated [ 249.543850][T17505] loop1: p201 start 4294967295 is beyond EOD, truncated [ 249.553075][T17505] loop1: p203 start 4294967295 is beyond EOD, truncated [ 249.562770][T17505] loop1: p205 start 4294967295 is beyond EOD, truncated [ 249.578209][T17505] loop1: p207 start 4294967295 is beyond EOD, truncated [ 249.600649][T17808] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 249.605162][T17505] loop1: p209 start 4294967295 is beyond EOD, truncated [ 249.653540][T17505] loop1: p211 start 4294967295 is beyond EOD, truncated [ 249.677841][T17505] loop1: p213 start 4294967295 is beyond EOD, truncated [ 249.694018][T17833] netlink: 'syz.3.8481': attribute type 30 has an invalid length. [ 249.700588][T17505] loop1: p215 start 4294967295 is beyond EOD, truncated [ 249.722101][T17836] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.733425][T17505] loop1: p217 start 4294967295 is beyond EOD, truncated [ 249.747943][T17505] loop1: p219 start 4294967295 is beyond EOD, truncated [ 249.765359][T17505] loop1: p221 start 4294967295 is beyond EOD, truncated [ 249.786510][T17505] loop1: p223 start 4294967295 is beyond EOD, truncated [ 249.806924][T17505] loop1: p225 start 4294967295 is beyond EOD, truncated [ 249.826780][T17505] loop1: p227 start 4294967295 is beyond EOD, truncated [ 249.839890][T17505] loop1: p229 start 4294967295 is beyond EOD, truncated [ 249.860746][T17505] loop1: p231 start 4294967295 is beyond EOD, truncated [ 249.874128][T17505] loop1: p233 start 4294967295 is beyond EOD, truncated [ 249.895839][T17505] loop1: p235 start 4294967295 is beyond EOD, truncated [ 249.904637][T17505] loop1: p237 start 4294967295 is beyond EOD, truncated [ 249.917373][T17875] netlink: 'syz.3.8502': attribute type 5 has an invalid length. [ 249.924397][T17505] loop1: p239 start 4294967295 is beyond EOD, truncated [ 249.946515][T17505] loop1: p241 start 4294967295 is beyond EOD, truncated [ 249.949951][T17879] xt_hashlimit: max too large, truncated to 1048576 [ 249.964769][T17505] loop1: p243 start 4294967295 is beyond EOD, truncated [ 249.979155][T17505] loop1: p245 start 4294967295 is beyond EOD, truncated [ 249.993296][T17505] loop1: p247 start 4294967295 is beyond EOD, truncated [ 250.011013][T17505] loop1: p249 start 4294967295 is beyond EOD, truncated [ 250.030175][T17505] loop1: p251 start 4294967295 is beyond EOD, truncated [ 250.047338][T17505] loop1: p253 start 4294967295 is beyond EOD, truncated [ 250.066993][T17505] loop1: p255 start 4294967295 is beyond EOD, truncated [ 250.533587][T17934] xt_l2tp: v2 tid > 0xffff: 134217728 [ 250.798735][T17958] netlink: 'syz.0.8542': attribute type 5 has an invalid length. [ 250.864796][T17960] xt_l2tp: v2 doesn't support IP mode [ 251.562800][T18005] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 251.669019][T18010] device vlan0 entered promiscuous mode [ 251.726488][T18011] bridge0: port 4(syz_tun) entered blocking state [ 251.790288][T18011] bridge0: port 4(syz_tun) entered disabled state [ 251.815104][T18011] device syz_tun entered promiscuous mode [ 251.843903][T18011] bridge0: port 4(syz_tun) entered blocking state [ 251.850390][T18011] bridge0: port 4(syz_tun) entered listening state [ 251.887536][T18026] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 251.927546][T18031] device veth3 entered promiscuous mode [ 252.159266][T18094] __nla_validate_parse: 6 callbacks suppressed [ 252.159283][T18094] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8608'. [ 252.180655][T18094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.253601][T18108] sock: sock_timestamping_bind_phc: sock not bind to device [ 252.323110][T18128] netlink: 'syz.4.8625': attribute type 15 has an invalid length. [ 252.363744][T18138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8630'. [ 252.393852][T18138] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8630'. [ 252.422768][T18150] netlink: 'syz.0.8636': attribute type 29 has an invalid length. [ 252.447132][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8636'. [ 252.464058][T18160] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 252.486800][T18160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.499559][T18150] netlink: 'syz.0.8636': attribute type 29 has an invalid length. [ 252.522558][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8636'. [ 252.531834][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8643'. [ 252.765856][T18230] Zero length message leads to an empty skb [ 252.815060][T18246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.940221][T18279] netlink: 'syz.3.8701': attribute type 3 has an invalid length. [ 252.954103][T18279] netlink: 'syz.3.8701': attribute type 3 has an invalid length. [ 253.096127][T18322] xt_policy: neither incoming nor outgoing policy selected [ 253.246857][T18360] xt_hashlimit: max too large, truncated to 1048576 [ 253.254082][T18360] xt_hashlimit: overflow, try lower: 0/0 [ 253.293474][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8744'. [ 253.312814][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8747'. [ 253.429166][T18391] IPv6: Can't replace route, no match found [ 253.496466][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8761'. [ 253.598416][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8769'. [ 253.683744][T18440] device batadv_slave_0 entered promiscuous mode [ 253.721513][T18440] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 253.779791][T18449] netlink: 'syz.0.8784': attribute type 27 has an invalid length. [ 253.834784][T18449] bridge0: port 4(syz_tun) entered disabled state [ 253.849795][T18449] bridge0: port 3(veth0_to_bridge) entered disabled state [ 253.857127][T18449] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.864294][T18449] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.919419][T18449] device veth3 left promiscuous mode [ 253.925946][T18474] netlink: 'syz.4.8796': attribute type 5 has an invalid length. [ 254.028617][T18501] device ip6gre1 entered promiscuous mode [ 254.056927][T18510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.064194][T18510] IPv6: NLM_F_CREATE should be set when creating new route [ 254.071395][T18510] IPv6: NLM_F_CREATE should be set when creating new route [ 254.203047][T18543] device bridge_slave_0 entered promiscuous mode [ 254.210937][T18543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.230829][T18543] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 254.324261][ T28] kauditd_printk_skb: 508 callbacks suppressed [ 254.324275][ T28] audit: type=1400 audit(2000000001.375:11153): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.399181][ T28] audit: type=1400 audit(2000000001.375:11154): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.454488][ T28] audit: type=1400 audit(2000000001.375:11155): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.527674][ T28] audit: type=1400 audit(2000000001.402:11156): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.585073][ T28] audit: type=1400 audit(2000000001.412:11157): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.610398][ T28] audit: type=1400 audit(2000000001.412:11158): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.650850][ T28] audit: type=1400 audit(2000000001.421:11159): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.706289][ T28] audit: type=1400 audit(2000000001.430:11160): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.739987][T18631] xt_connbytes: Forcing CT accounting to be enabled [ 254.744477][ T28] audit: type=1400 audit(2000000001.439:11161): avc: denied { read write } for pid=284 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.796579][T18647] xt_hashlimit: invalid interval [ 254.809634][T18646] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 254.820169][ T28] audit: type=1400 audit(2000000001.439:11162): avc: denied { read write } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.889811][T18667] xt_SECMARK: invalid mode: 2 [ 255.008705][T18698] xt_TCPMSS: Only works on TCP SYN packets [ 255.046119][T18709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1006 sclass=netlink_audit_socket pid=18709 comm=syz.1.8913 [ 255.279961][T18759] validate_nla: 2 callbacks suppressed [ 255.279978][T18759] netlink: 'syz.4.8938': attribute type 27 has an invalid length. [ 255.373704][T18759] device bridge_slave_0 left promiscuous mode [ 255.402388][T18759] device batadv_slave_0 left promiscuous mode [ 255.446544][T18759] device vlan0 left promiscuous mode [ 255.461721][T18759] device bridge3 left promiscuous mode [ 255.486129][T18759] device bridge4 left promiscuous mode [ 255.511008][T18759] device ip6tnl2 left promiscuous mode [ 255.568406][T18804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.699643][T18828] netlink: 'syz.0.8973': attribute type 5 has an invalid length. [ 255.726455][T18832] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.817806][T18846] netlink: 'syz.1.8980': attribute type 27 has an invalid length. [ 255.848700][T18850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 255.887431][T18846] device bridge_slave_1 left promiscuous mode [ 255.930277][T18846] device xfrm0 left promiscuous mode [ 255.956024][T18846] device vlan0 left promiscuous mode [ 255.984717][T18846] device vti0 left promiscuous mode [ 255.985701][T18868] ip6t_REJECT: ECHOREPLY is not supported [ 256.122870][T18885] x_tables: duplicate underflow at hook 3 [ 256.236530][T18907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.808766][T19029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.224323][T19129] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.254262][T19134] netlink: 'syz.3.9124': attribute type 13 has an invalid length. [ 257.761494][T19225] __nla_validate_parse: 19 callbacks suppressed [ 257.761511][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9168'. [ 257.810946][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9174'. [ 257.838465][T19236] device vlan0 entered promiscuous mode [ 257.853266][T19244] tc_dump_action: action bad kind [ 257.904492][T19250] netlink: 'syz.2.9181': attribute type 27 has an invalid length. [ 257.913738][T19257] xt_bpf: check failed: parse error [ 258.036516][T19290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9201'. [ 258.091823][ T2973] ------------[ cut here ]------------ [ 258.097441][ T2973] kernel BUG at fs/buffer.c:2714! [ 258.123134][ T2973] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 258.129241][ T2973] CPU: 1 PID: 2973 Comm: kmmpd-loop0 Not tainted 6.1.145-syzkaller-00039-g39e817cf9025 #0 [ 258.139174][ T2973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.149244][ T2973] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 258.154623][ T2973] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 38 e8 ff e9 b0 fe ff ff e8 0e d5 a3 ff 0f 0b e8 07 d5 a3 ff <0f> 0b e8 00 d5 a3 ff 0f 0b e8 f9 d4 a3 ff 0f 0b e8 f2 d4 a3 ff 0f [ 258.174226][ T2973] RSP: 0018:ffffc9001318fca0 EFLAGS: 00010293 [ 258.180281][ T2973] RAX: ffffffff81cc2d79 RBX: 0000000000000000 RCX: ffff88811a171440 [ 258.188237][ T2973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.196188][ T2973] RBP: ffffc9001318fcf0 R08: dffffc0000000000 R09: ffffed1021df8855 [ 258.204144][ T2973] R10: ffffed1021df8855 R11: 1ffff11021df8854 R12: 0000000000000000 [ 258.212125][ T2973] R13: 1ffff11021df8854 R14: ffff88810efc42a0 R15: 0000000000003801 [ 258.220083][ T2973] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 258.229003][ T2973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.235567][ T2973] CR2: 00007f589cb61f98 CR3: 000000010fcd0000 CR4: 00000000003506a0 [ 258.243527][ T2973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.251480][ T2973] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.259435][ T2973] Call Trace: [ 258.262698][ T2973] [ 258.265614][ T2973] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 258.271411][ T2973] submit_bh+0x1f/0x30 [ 258.275474][ T2973] write_mmp_block_thawed+0x34a/0x4c0 [ 258.280851][ T2973] ? read_mmp_block+0x6d0/0x6d0 [ 258.285689][ T2973] ? __cfi_process_timeout+0x10/0x10 [ 258.290962][ T2973] write_mmp_block+0x138/0x2b0 [ 258.295709][ T2973] kmmpd+0x3ce/0x950 [ 258.299590][ T2973] kthread+0x281/0x320 [ 258.303650][ T2973] ? __cfi_kmmpd+0x10/0x10 [ 258.308046][ T2973] ? __cfi_kthread+0x10/0x10 [ 258.312622][ T2973] ret_from_fork+0x1f/0x30 [ 258.317026][ T2973] [ 258.320038][ T2973] Modules linked in: [ 258.331611][ T2973] ---[ end trace 0000000000000000 ]--- [ 258.337583][ T2973] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 258.343885][T19315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 258.353535][ T2973] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 38 e8 ff e9 b0 fe ff ff e8 0e d5 a3 ff 0f 0b e8 07 d5 a3 ff <0f> 0b e8 00 d5 a3 ff 0f 0b e8 f9 d4 a3 ff 0f 0b e8 f2 d4 a3 ff 0f [ 258.376844][ T2973] RSP: 0018:ffffc9001318fca0 EFLAGS: 00010293 [ 258.382935][ T2973] RAX: ffffffff81cc2d79 RBX: 0000000000000000 RCX: ffff88811a171440 [ 258.391188][ T2973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.399210][ T2973] RBP: ffffc9001318fcf0 R08: dffffc0000000000 R09: ffffed1021df8855 [ 258.407247][ T2973] R10: ffffed1021df8855 R11: 1ffff11021df8854 R12: 0000000000000000 [ 258.415216][ T2973] R13: 1ffff11021df8854 R14: ffff88810efc42a0 R15: 0000000000003801 [ 258.423224][ T2973] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 258.432183][ T2973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.438921][ T2973] CR2: 00005555610384a8 CR3: 000000012fe2f000 CR4: 00000000003506a0 [ 258.446880][ T2973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.454879][ T2973] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.462934][ T2973] Kernel panic - not syncing: Fatal exception [ 258.469206][ T2973] Kernel Offset: disabled [ 258.473520][ T2973] Rebooting in 86400 seconds..