last executing test programs: 56.132817567s ago: executing program 4 (id=9403): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000d40)=[{0x6, 0x46, 0x38, 0x7fffffff}]}) geteuid() 55.992100186s ago: executing program 4 (id=9406): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x10002, 0x81, 0x80000, 0xc, "001c15a5ae0500000000000000000b00"}) 55.902665437s ago: executing program 4 (id=9411): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x6, 0x0, 0x7fffffff}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) 55.829866971s ago: executing program 4 (id=9413): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@errors_continue}, {@gid}, {@umask={'umask', 0x3d, 0x6}}, {@errors_remount}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@utf8}, {@gid}, {@keep_last_dots}], [{@uid_eq}]}, 0x20, 0x1528, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 55.540979688s ago: executing program 4 (id=9421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000000c0)="0500268dd6ff930800008000000000000000210d0000aaa9fa017242ba9380d4a40000000000000029", 0x29) 53.068919618s ago: executing program 4 (id=9429): ioperm(0x2, 0x8000, 0x7ff) ioperm(0x9, 0x6, 0x0) 52.975611988s ago: executing program 32 (id=9429): ioperm(0x2, 0x8000, 0x7ff) ioperm(0x9, 0x6, 0x0) 24.749426494s ago: executing program 1 (id=10580): madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) 24.698801163s ago: executing program 1 (id=10582): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x38, 0x10, 0x503, 0x70bd2c, 0x900, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 24.643512261s ago: executing program 1 (id=10586): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="110000001900010026bd7000000000001d"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) 24.587102899s ago: executing program 1 (id=10588): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@namecase}, {}, {@errors_remount}, {@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x506}}, {@allow_utime={'allow_utime', 0x3d, 0xce32}}]}, 0x1, 0x1528, &(0x7f0000000580)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 24.255311006s ago: executing program 1 (id=10597): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) 24.107795014s ago: executing program 1 (id=10602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x18268}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 23.899927009s ago: executing program 33 (id=10602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x18268}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 2.109526881s ago: executing program 0 (id=11751): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) write(r0, &(0x7f0000000040), 0xffffff4a) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0xfffffffffffffffc, 0x3, 0x3, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0x7, 0x7, 0x4000000000}, 0x0, 0x0, 0x0) 1.303720774s ago: executing program 0 (id=11808): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000080)) 1.300244333s ago: executing program 0 (id=11809): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r1, &(0x7f00000008c0)=0xfffffffffffffe01, r0, 0x0, 0x8, 0x0) 1.231807299s ago: executing program 0 (id=11812): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 1.199266722s ago: executing program 0 (id=11816): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x1008008, &(0x7f0000000040)=ANY=[], 0x1, 0x2ee, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 1.173829516s ago: executing program 0 (id=11819): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x10082, &(0x7f0000000000)=ANY=[@ANYBLOB="696e6c696e6563727970742c6e6f696e6c696e655f64656e7472792c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c0068f9e42d819469a61b133518a2fdff195a02ab169551ec8e5d1038e2a29605e556230ac181b672b9c209ba0802faf4390229e2a44361d033a5adc3698e6b1f9c2b84471c360f284e6d3bb4a8982de0a25c2d0fee33d7260cfe3d81617bbb6b21b8108421eede4c63c25a7028efcded0aac8a5d128166077e0012231865289f00f7906b9c1bdab7792758b5b922106ac372d3ce2b35f8f4be09093c7e96e0ebe3c6"], 0x1, 0x1059a, &(0x7f0000020c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fb) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)) 1.123729476s ago: executing program 2 (id=11820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x20, r1, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}]}]}, 0x20}}, 0x0) 1.123579755s ago: executing program 2 (id=11821): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x7, 0x80000000) 1.102969981s ago: executing program 2 (id=11823): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000001640)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 924.786642ms ago: executing program 2 (id=11828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000100)={0x4, 0xe, 0xfffffff8, 0xfffffffffffffff7, 0x4}) 867.081259ms ago: executing program 2 (id=11829): syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20060400) syz_clone(0x20044100, 0x0, 0x0, 0x0, 0x0, 0x0) 795.633714ms ago: executing program 6 (id=11832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1000000b}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 767.098457ms ago: executing program 6 (id=11834): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) 675.242938ms ago: executing program 5 (id=11836): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@typed={0xc, 0x149, 0x0, 0x0, @u64=0x6}]}, 0x1c}], 0x1, 0x0, 0x0, 0x400408d}, 0x40040) 604.854212ms ago: executing program 2 (id=11837): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) 547.775669ms ago: executing program 5 (id=11838): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) 540.426348ms ago: executing program 5 (id=11839): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0x15) 504.43522ms ago: executing program 5 (id=11840): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 311.793368ms ago: executing program 3 (id=11841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x89210339289433ec, 0x6, [@local, @remote, @broadcast, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @broadcast]}) 256.747896ms ago: executing program 3 (id=11842): r0 = inotify_init() ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) close_range(r0, 0xffffffffffffffff, 0x0) 218.443998ms ago: executing program 3 (id=11843): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 165.371256ms ago: executing program 6 (id=11844): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1d, 0x7fff, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 121.546946ms ago: executing program 3 (id=11845): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @loopback, 0x4}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) 121.404216ms ago: executing program 5 (id=11846): r0 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x821\x9f?\r\xf5q\xb8d\x1ct\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe\xb8\xbe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\a\x00\x00\x00\xa4O\x9f\x12@\x18\xbb&\xad\xf5a\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\x02p]\x87fg}v-\xfe\xa2i\a\xccp~W\x86', &(0x7f0000000080)='\xb0\xa2a\xdbgt\xa9\x98v\x8e\x0e\x05$Kk\x1bk\xb0\\1\\\x00\x00\x04\x1d\xc3', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 121.125506ms ago: executing program 6 (id=11847): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 106.138213ms ago: executing program 3 (id=11848): recvmmsg(0xffffffffffffffff, &(0x7f0000007c40)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x3}, {{&(0x7f0000000900)=@caif, 0x80, 0x0}, 0x7}], 0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 65.120014ms ago: executing program 6 (id=11849): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) 452.77µs ago: executing program 6 (id=11850): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r1, @ANYBLOB="08000b00e000000108000200a4141403290006"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 369.31µs ago: executing program 3 (id=11851): unshare(0x22020600) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) shutdown(r0, 0x0) 0s ago: executing program 5 (id=11852): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) kernel console output (not intermixed with test programs): 255] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 260.860591][T18308] R10: dffffc0000000000 R11: fffff520001e5f31 R12: dffffc0000000000 [ 260.878078][T18308] R13: 0000000000000000 R14: 0000000000040d40 R15: 1ffff920001e5f24 [ 260.886827][T18308] FS: 00007fbf84e3f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 260.897198][T18308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.904894][T18308] CR2: 0000200000001000 CR3: 000000011f960000 CR4: 00000000003506a0 [ 260.905194][T18255] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 260.913848][T18308] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 260.931101][T18308] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.940559][T18308] Call Trace: [ 260.944114][T18308] [ 260.947714][T18308] ? __cfi___alloc_pages+0x10/0x10 [ 260.953177][T18308] __kmalloc_large_node+0xa1/0x1c0 [ 260.958415][T18308] ? incfs_realloc_mount_info+0x99/0x440 [ 260.965036][T18308] __kmalloc+0xe0/0x1e0 [ 260.969523][T18308] incfs_realloc_mount_info+0x99/0x440 [ 260.975849][T18308] incfs_alloc_mount_info+0x476/0x540 [ 260.981891][T18308] incfs_mount_fs+0x3c6/0x890 [ 260.987167][T18308] ? __cfi_incfs_mount_fs+0x10/0x10 [ 260.993066][T18308] ? vfs_parse_fs_string+0x10b/0x170 [ 260.999027][T18308] legacy_get_tree+0xfe/0x1a0 [ 261.004232][T18308] ? __cfi_incfs_mount_fs+0x10/0x10 [ 261.010185][T18308] vfs_get_tree+0x9a/0x270 [ 261.014882][T18308] do_new_mount+0x25a/0xa20 [ 261.019922][T18308] path_mount+0x659/0xfc0 [ 261.024829][T18308] ? user_path_at_empty+0x161/0x1c0 [ 261.030886][T18308] __se_sys_mount+0x320/0x390 [ 261.030930][T18308] ? __this_cpu_preempt_check+0x13/0x20 [ 261.030952][T18308] ? __x64_sys_mount+0xd0/0xd0 [ 261.030978][T18308] ? __kasan_check_write+0x14/0x20 [ 261.030996][T18308] ? fpregs_restore_userregs+0x128/0x260 [ 261.031018][T18308] __x64_sys_mount+0xbf/0xd0 [ 261.031044][T18308] x64_sys_call+0x65d/0x9a0 [ 261.031066][T18308] do_syscall_64+0x4c/0xa0 [ 261.031088][T18308] ? clear_bhb_loop+0x30/0x80 [ 261.031109][T18308] ? clear_bhb_loop+0x30/0x80 [ 261.031127][T18308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.031155][T18308] RIP: 0033:0x7fbf83f9c799 [ 261.031172][T18308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.031189][T18308] RSP: 002b:00007fbf84e3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.031213][T18308] RAX: ffffffffffffffda RBX: 00007fbf84215fa0 RCX: 00007fbf83f9c799 [ 261.031230][T18308] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 00002000000000c0 [ 261.031245][T18308] RBP: 00007fbf84032bd9 R08: 0000200000000280 R09: 0000000000000000 [ 261.031259][T18308] R10: 0000000001018040 R11: 0000000000000246 R12: 0000000000000000 [ 261.031273][T18308] R13: 00007fbf84216038 R14: 00007fbf84215fa0 R15: 00007ffd24abba98 [ 261.031291][T18308] [ 261.031298][T18308] ---[ end trace 0000000000000000 ]--- [ 261.432451][T18335] loop2: detected capacity change from 0 to 256 [ 261.680665][T18351] xt_TCPMSS: Only works on TCP SYN packets [ 261.913476][T18368] loop1: detected capacity change from 0 to 256 [ 261.932999][T18368] FAT-fs (loop1): Directory bread(block 64) failed [ 261.948439][T18368] FAT-fs (loop1): Directory bread(block 65) failed [ 261.964581][T18308] incfs: Error allocating mount info. -12 [ 261.978111][T18308] incfs: mount failed -12 [ 261.990216][T18368] FAT-fs (loop1): Directory bread(block 66) failed [ 262.004863][T18368] FAT-fs (loop1): Directory bread(block 67) failed [ 262.028147][T18368] FAT-fs (loop1): Directory bread(block 68) failed [ 262.065751][T18375] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 262.073094][T18368] FAT-fs (loop1): Directory bread(block 69) failed [ 262.101467][T18376] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8720'. [ 262.113299][T18368] FAT-fs (loop1): Directory bread(block 70) failed [ 262.122844][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8720'. [ 262.142912][T18368] FAT-fs (loop1): Directory bread(block 71) failed [ 262.150542][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8720'. [ 262.155003][T18368] FAT-fs (loop1): Directory bread(block 72) failed [ 262.198184][T18368] FAT-fs (loop1): Directory bread(block 73) failed [ 262.426488][T18394] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8729'. [ 263.190069][ T334] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 263.273019][T18472] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.295500][T18472] IPv6: Can't replace route, no match found [ 263.346572][ T28] kauditd_printk_skb: 663 callbacks suppressed [ 263.346589][ T28] audit: type=1400 audit(275.477:7765): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.418018][T18487] xt_hashlimit: max too large, truncated to 1048576 [ 263.425362][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 263.435556][ T28] audit: type=1400 audit(275.487:7766): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.463195][ T334] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.478416][ T28] audit: type=1400 audit(275.487:7767): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.510915][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8776'. [ 263.523307][ T334] usb 3-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 263.542868][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.563522][ T334] usb 3-1: Product: syz [ 263.573240][ T334] usb 3-1: Manufacturer: syz [ 263.588222][ T28] audit: type=1400 audit(275.487:7768): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.634059][ T334] usb 3-1: SerialNumber: syz [ 263.700519][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.718032][ T28] audit: type=1400 audit(275.498:7769): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.729135][T18509] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 263.763628][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.766978][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.775323][ T286] audit: audit_lost=64 audit_rate_limit=0 audit_backlog_limit=64 [ 263.791846][ T283] audit: audit_lost=65 audit_rate_limit=0 audit_backlog_limit=64 [ 263.863044][ T334] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 263.874780][ T334] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 263.894574][ T334] usb 3-1: 2:1 : sample bitwidth 240 in over sample bytes 1 [ 263.937275][ T334] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 263.991058][ T334] usb 3-1: USB disconnect, device number 89 [ 264.210009][T18545] loop3: detected capacity change from 0 to 512 [ 264.220975][T16415] udevd[16415]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.261268][T18545] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 264.285856][T18545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 264.294876][T18545] System zones: 0-1, 15-15, 18-18, 34-34 [ 264.363413][T18545] EXT4-fs (loop3): orphan cleanup on readonly fs [ 264.428060][T18565] loop1: detected capacity change from 0 to 256 [ 264.428468][T18545] EXT4-fs warning (device loop3): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 264.524113][T18545] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 264.538687][T18545] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.8804: bad orphan inode 16 [ 264.573271][T18545] ext4_test_bit(bit=15, block=18) = 1 [ 264.592345][T18545] is_bad_inode(inode)=0 [ 264.596770][T18545] NEXT_ORPHAN(inode)=0 [ 264.619131][T18545] max_ino=32 [ 264.622487][T18545] i_nlink=2 [ 264.625666][T18545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 264.645415][T18580] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8821'. [ 264.741552][T18545] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 264.808412][ T285] EXT4-fs (loop3): unmounting filesystem. [ 265.147640][T18632] loop1: detected capacity change from 0 to 512 [ 265.185400][T18632] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 265.195080][T18632] EXT4-fs (loop1): 1 truncate cleaned up [ 265.205934][T18632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 265.209146][T18641] overlayfs: missing 'lowerdir' [ 265.224975][T18632] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 265.249314][ T283] EXT4-fs (loop1): unmounting filesystem. [ 265.274911][T18644] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 265.529629][T18660] loop4: detected capacity change from 0 to 512 [ 265.621355][T18660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.657382][T18660] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.8860: corrupted xattr block 32 [ 265.686155][T18660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 265.714652][T18660] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.8860: corrupted xattr block 32 [ 265.778989][T18660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 265.801146][T18660] EXT4-fs error (device loop4): ext4_xattr_block_find:1826: inode #15: comm syz.4.8860: corrupted xattr block 32 [ 265.865212][T18689] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8872'. [ 265.891065][ T286] EXT4-fs (loop4): unmounting filesystem. [ 266.007070][T18700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.010800][T18704] loop2: detected capacity change from 0 to 256 [ 266.014623][T18700] IPv6: NLM_F_CREATE should be set when creating new route [ 266.029402][T18700] IPv6: NLM_F_CREATE should be set when creating new route [ 266.153502][T18714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8886'. [ 266.230706][T18717] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8889'. [ 266.325608][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8890'. [ 266.336653][T18728] usb usb9: usbfs: process 18728 (syz.2.8891) did not claim interface 8 before use [ 266.448726][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8896'. [ 266.557363][T18745] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 266.638862][T18708] loop3: detected capacity change from 0 to 40427 [ 266.687646][T18708] F2FS-fs (loop3): Found nat_bits in checkpoint [ 266.804311][T18708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.232529][T18818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8936'. [ 267.245343][T18817] loop3: detected capacity change from 0 to 256 [ 267.296065][T18818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8936'. [ 267.304247][T18817] FAT-fs (loop3): Directory bread(block 64) failed [ 267.344252][T18817] FAT-fs (loop3): Directory bread(block 65) failed [ 267.351033][T18817] FAT-fs (loop3): Directory bread(block 66) failed [ 267.418244][T18817] FAT-fs (loop3): Directory bread(block 67) failed [ 267.444612][T18817] FAT-fs (loop3): Directory bread(block 68) failed [ 267.468032][T18817] FAT-fs (loop3): Directory bread(block 69) failed [ 267.474644][T18817] FAT-fs (loop3): Directory bread(block 70) failed [ 267.515023][T18817] FAT-fs (loop3): Directory bread(block 71) failed [ 267.522184][T18817] FAT-fs (loop3): Directory bread(block 72) failed [ 267.561228][T18817] FAT-fs (loop3): Directory bread(block 73) failed [ 267.601315][T18817] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.004505][T18889] netlink: 'syz.1.8970': attribute type 30 has an invalid length. [ 268.086317][T18896] loop1: detected capacity change from 0 to 256 [ 268.116353][ T28] kauditd_printk_skb: 900 callbacks suppressed [ 268.116381][ T28] audit: type=1400 audit(280.485:8659): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.151722][T18896] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 268.216114][ T28] audit: type=1400 audit(280.485:8660): avc: denied { mounton } for pid=18891 comm="syz.1.8973" path="/1933/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=9819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 268.263602][ T343] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 268.306227][T18913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8983'. [ 268.355531][ T28] audit: type=1400 audit(280.485:8661): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.444878][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.449760][ T28] audit: type=1400 audit(280.527:8663): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.474726][T18926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.481980][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 268.486858][T18926] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 268.492005][T18928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=63 sclass=netlink_audit_socket pid=18928 comm=syz.4.8990 [ 268.511806][ T285] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 268.529922][ T284] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 268.534928][T18928] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32 sclass=netlink_audit_socket pid=18928 comm=syz.4.8990 [ 268.558055][T18926] loop1: detected capacity change from 0 to 256 [ 268.565369][T18930] loop3: detected capacity change from 0 to 512 [ 268.601569][T18930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 268.636926][T18926] FAT-fs (loop1): Directory bread(block 64) failed [ 268.637063][ T285] EXT4-fs (loop3): unmounting filesystem. [ 268.682715][T18926] FAT-fs (loop1): Directory bread(block 65) failed [ 268.717002][T18926] FAT-fs (loop1): Directory bread(block 66) failed [ 268.730735][T18926] FAT-fs (loop1): Directory bread(block 67) failed [ 268.753541][T18941] netlink: 'syz.3.8994': attribute type 9 has an invalid length. [ 268.761828][T18926] FAT-fs (loop1): Directory bread(block 68) failed [ 268.789271][T18926] FAT-fs (loop1): Directory bread(block 69) failed [ 268.810165][T18926] FAT-fs (loop1): Directory bread(block 70) failed [ 268.829616][T18926] FAT-fs (loop1): Directory bread(block 71) failed [ 268.836263][T18926] FAT-fs (loop1): Directory bread(block 72) failed [ 268.867734][T18926] FAT-fs (loop1): Directory bread(block 73) failed [ 268.951273][T18926] syz.1.8989: attempt to access beyond end of device [ 268.951273][T18926] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 269.368728][T18998] loop1: detected capacity change from 0 to 256 [ 269.396002][T18998] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 269.437708][T19008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9029'. [ 269.539025][T19020] device bridge4 entered promiscuous mode [ 269.774179][T19050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.410811][ T320] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 270.425071][T19106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9077'. [ 270.612557][ T320] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 270.658863][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.687364][ T320] usb 5-1: config 0 descriptor?? [ 270.705190][T19128] netlink: 'syz.1.9088': attribute type 3 has an invalid length. [ 270.757504][T19132] binder: 19129:19132 ioctl c018620b 0 returned -14 [ 270.961625][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9099'. [ 271.098007][ T320] usb 5-1: Cannot set MAC address [ 271.103666][ T320] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 271.163048][ T320] usb 5-1: USB disconnect, device number 85 [ 271.295439][T19183] loop1: detected capacity change from 0 to 1024 [ 271.325447][ T561] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 271.363021][T19183] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 271.402801][ T283] EXT4-fs (loop1): unmounting filesystem. [ 271.436161][T19196] loop1: detected capacity change from 0 to 256 [ 271.515580][ T561] usb 3-1: Using ep0 maxpacket: 16 [ 271.526791][ T561] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 271.567328][ T561] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.593385][ T561] usb 3-1: config 1 has no interface number 0 [ 271.645360][ T561] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 271.657865][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9129'. [ 271.686163][ T561] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.739222][ T561] usb 3-1: config 1 interface 105 has no altsetting 0 [ 271.794365][ T561] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 271.842950][ T561] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 271.868383][T19230] overlayfs: conflicting options: userxattr,metacopy=on [ 271.875964][ T561] usb 3-1: Product: syz [ 271.885855][ T561] usb 3-1: Manufacturer: syz [ 271.921210][ T561] usb 3-1: SerialNumber: syz [ 271.978607][T19240] loop1: detected capacity change from 0 to 512 [ 272.074978][T19240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.155805][ T561] aqc111: probe of 3-1:1.105 failed with error -22 [ 272.192469][ T283] EXT4-fs (loop1): unmounting filesystem. [ 272.267125][T19264] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9151'. [ 272.296871][T19264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9151'. [ 272.332966][T19264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9151'. [ 272.368966][ T6] usb 3-1: USB disconnect, device number 90 [ 272.698104][T19315] xt_limit: Overflow, try lower: 2147483649/3300 [ 272.890145][ T28] kauditd_printk_skb: 997 callbacks suppressed [ 272.890162][ T28] audit: type=1400 audit(285.492:9648): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.939140][T19331] netlink: 'syz.4.9186': attribute type 3 has an invalid length. [ 272.957307][ T28] audit: type=1400 audit(285.492:9649): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.965985][T19331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.994979][ T28] audit: type=1400 audit(285.492:9650): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.028482][T19336] netlink: 'syz.2.9185': attribute type 5 has an invalid length. [ 273.049335][ T28] audit: type=1400 audit(285.513:9651): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.131303][ T28] audit: type=1400 audit(285.513:9652): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.211852][ T28] audit: type=1400 audit(285.513:9653): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.245918][T19354] bridge0: port 4(bond_slave_1) entered blocking state [ 273.265744][ T28] audit: type=1400 audit(285.524:9654): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.273838][T19348] loop4: detected capacity change from 0 to 8192 [ 273.295931][ T28] audit: type=1400 audit(285.524:9655): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.327761][T19354] bridge0: port 4(bond_slave_1) entered disabled state [ 273.367993][T19354] device bond_slave_1 entered promiscuous mode [ 273.397854][ T28] audit: type=1400 audit(285.524:9656): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.437300][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.954314][ T561] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 274.142335][T19422] xt_CT: No such helper "netbios-ns" [ 274.177128][ T561] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 274.207497][ T561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.240944][ T561] usb 3-1: Product: syz [ 274.245353][ T561] usb 3-1: Manufacturer: syz [ 274.269608][ T561] usb 3-1: SerialNumber: syz [ 274.300315][ T561] r8152-cfgselector 3-1: config 0 descriptor?? [ 274.616883][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9249'. [ 274.733322][ T561] r8152-cfgselector 3-1: Unknown version 0x0000 [ 274.751348][ T561] r8152-cfgselector 3-1: bad CDC descriptors [ 274.782838][ T561] r8152-cfgselector 3-1: Unknown version 0x0000 [ 274.802970][ T561] r8152-cfgselector 3-1: USB disconnect, device number 91 [ 274.822575][T19469] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 274.852694][T19475] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 274.996127][T19483] loop3: detected capacity change from 0 to 16 [ 275.020373][T19483] erofs: (device loop3): mounted with root inode @ nid 36. [ 275.146298][T19493] netlink: 'syz.4.9265': attribute type 11 has an invalid length. [ 275.527173][T19527] loop2: detected capacity change from 0 to 256 [ 275.533973][T19524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9282'. [ 275.535068][T19527] exfat: Deprecated parameter 'namecase' [ 275.574088][T19524] tc_dump_action: action bad kind [ 275.674164][T19536] netlink: 596 bytes leftover after parsing attributes in process `syz.4.9286'. [ 275.747142][T19406] loop1: detected capacity change from 0 to 131072 [ 275.764665][T19539] sit0: mtu greater than device maximum [ 275.793768][T19527] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 275.797849][T19406] F2FS-fs (loop1): invalid crc value [ 275.883667][T19544] netlink: 'syz.0.9291': attribute type 40 has an invalid length. [ 275.913011][T19406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 276.087333][T19563] netlink: 'syz.3.9298': attribute type 4 has an invalid length. [ 276.096360][T19406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 276.154585][T19563] netlink: 'syz.3.9298': attribute type 21 has an invalid length. [ 276.162882][T19563] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.9298'. [ 276.210658][T19406] F2FS-fs (loop1): Corrupted max_depth of 3: 458753 [ 276.476991][T19598] loop4: detected capacity change from 0 to 512 [ 276.530273][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9320'. [ 276.581878][T19598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 276.752133][ T286] EXT4-fs (loop4): unmounting filesystem. [ 276.837277][T19629] bridge0: port 3(gretap0) entered blocking state [ 276.844091][T19629] bridge0: port 3(gretap0) entered forwarding state [ 276.971214][T19629] device veth0_vlan left promiscuous mode [ 276.990693][T19629] device veth0_vlan entered promiscuous mode [ 277.017880][T19629] device veth1_macvtap entered promiscuous mode [ 277.106467][T19629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 277.118587][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.127509][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.136641][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.145944][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.155398][ T562] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.163156][ T562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.172162][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.181427][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.190546][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.197847][ T562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.206127][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.214746][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): c1ÿ: link becomes ready [ 277.222983][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.232061][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 277.240549][ T562] bridge0: port 4(bond_slave_1) entered blocking state [ 277.247538][ T562] bridge0: port 4(bond_slave_1) entered forwarding state [ 277.255076][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.263442][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.272110][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.281283][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.290136][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.298913][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.307884][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.316754][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.325275][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.334325][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.342762][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.351180][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.359958][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.369203][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.378493][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.387596][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.396215][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.404993][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.413010][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.421985][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.430622][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.438560][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 277.446313][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 277.454196][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 277.461920][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 277.470403][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9338'. [ 277.489141][T19645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9338'. [ 277.514488][ T561] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 277.663707][ T28] kauditd_printk_skb: 715 callbacks suppressed [ 277.663724][ T28] audit: type=1400 audit(290.510:10340): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.774676][T19680] loop3: detected capacity change from 0 to 256 [ 277.789208][ T28] audit: type=1400 audit(290.510:10341): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.847600][T19680] FAT-fs (loop3): Directory bread(block 64) failed [ 277.860176][ T28] audit: type=1400 audit(290.510:10342): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.869373][T19680] FAT-fs (loop3): Directory bread(block 65) failed [ 277.917013][ T561] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 277.922432][T19680] FAT-fs (loop3): Directory bread(block 66) failed [ 277.941346][T19680] FAT-fs (loop3): Directory bread(block 67) failed [ 277.960701][ T28] audit: type=1400 audit(290.521:10343): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 277.970937][T19680] FAT-fs (loop3): Directory bread(block 68) failed [ 278.012737][T19680] FAT-fs (loop3): Directory bread(block 69) failed [ 278.019510][T19680] FAT-fs (loop3): Directory bread(block 70) failed [ 278.034493][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.041439][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.052805][T19703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.060167][T19680] FAT-fs (loop3): Directory bread(block 71) failed [ 278.067144][T19680] FAT-fs (loop3): Directory bread(block 72) failed [ 278.069948][ T28] audit: type=1400 audit(290.521:10344): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.074921][ T286] audit: audit_lost=86 audit_rate_limit=0 audit_backlog_limit=64 [ 278.107717][T19703] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64 [ 278.115752][T19680] FAT-fs (loop3): Directory bread(block 73) failed [ 278.128010][ T561] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 278.150856][ T561] usb 1-1: config 2 has no interface number 0 [ 278.165898][ T561] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 278.212318][ T561] usb 1-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 278.244159][T19709] netlink: 'syz.2.9371': attribute type 5 has an invalid length. [ 278.279626][ T561] usb 1-1: config 2 interface 88 has no altsetting 0 [ 278.308711][ T561] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 278.361697][ T561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.390088][ T561] usb 1-1: Product: syz [ 278.434207][ T561] usb 1-1: Manufacturer: syz [ 278.439733][ T561] usb 1-1: SerialNumber: syz [ 278.464690][T19666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.488953][T19666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.638345][T19736] x_tables: duplicate underflow at hook 3 [ 278.724706][T19666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.755972][T19666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.797225][T19749] loop2: detected capacity change from 0 to 512 [ 278.798338][T19751] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.859630][T19749] EXT4-fs: Ignoring removed nobh option [ 278.929144][T19749] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #3: comm syz.2.9390: corrupted inode contents [ 278.972751][ T561] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 278.992001][T19749] EXT4-fs error (device loop2): ext4_dirty_inode:6139: inode #3: comm syz.2.9390: mark_inode_dirty error [ 279.020328][T19773] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9400'. [ 279.022093][ T561] asix: probe of 1-1:2.88 failed with error -71 [ 279.060945][T19749] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #3: comm syz.2.9390: corrupted inode contents [ 279.094713][T19749] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.9390: mark_inode_dirty error [ 279.108115][T19749] EXT4-fs error (device loop2): ext4_acquire_dquot:6822: comm syz.2.9390: Failed to acquire dquot type 0 [ 279.108277][ T561] usb 1-1: USB disconnect, device number 91 [ 279.120501][T19749] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #16: comm syz.2.9390: corrupted inode contents [ 279.184687][T19749] EXT4-fs error (device loop2): ext4_dirty_inode:6139: inode #16: comm syz.2.9390: mark_inode_dirty error [ 279.226781][T19749] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #16: comm syz.2.9390: corrupted inode contents [ 279.280940][T19749] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.9390: mark_inode_dirty error [ 279.316372][T19749] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #16: comm syz.2.9390: corrupted inode contents [ 279.345596][T19749] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 279.374997][T19749] EXT4-fs error (device loop2): ext4_do_update_inode:5274: inode #16: comm syz.2.9390: corrupted inode contents [ 279.417412][T19749] EXT4-fs error (device loop2): ext4_truncate:4320: inode #16: comm syz.2.9390: mark_inode_dirty error [ 279.447995][T19799] loop4: detected capacity change from 0 to 256 [ 279.457916][T19749] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 279.464792][T19799] exfat: Deprecated parameter 'utf8' [ 279.496515][T19749] EXT4-fs (loop2): 1 truncate cleaned up [ 279.498950][T19799] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 279.512965][T19749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 279.560185][T19749] EXT4-fs (loop2): unmounting filesystem. [ 281.212909][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 281.895486][T19818] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 282.015963][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9422'. [ 282.040515][T19817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9422'. [ 282.061287][T19817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9422'. [ 282.296020][T19839] netlink: 'syz.3.9435': attribute type 32 has an invalid length. [ 282.474330][ T28] kauditd_printk_skb: 435 callbacks suppressed [ 282.474349][ T28] audit: type=1400 audit(295.560:10717): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.533155][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9443'. [ 282.591126][ T28] audit: type=1400 audit(295.560:10718): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.631170][ T28] audit: type=1400 audit(295.560:10719): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.680551][T19856] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.680655][ T28] audit: type=1400 audit(295.602:10720): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.687726][T19856] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.733828][T19856] device bridge_slave_0 entered promiscuous mode [ 282.736984][ T28] audit: type=1400 audit(295.602:10721): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.751446][T19856] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.771757][T19856] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.798307][T19856] device bridge_slave_1 entered promiscuous mode [ 282.869422][ T562] device bridge_slave_1 left promiscuous mode [ 282.879514][ T562] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.899550][ T562] device bridge_slave_0 left promiscuous mode [ 282.910640][ T562] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.936989][ T28] audit: type=1400 audit(295.602:10722): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.954668][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.975670][T19883] audit: audit_backlog=65 > audit_backlog_limit=64 [ 282.982666][T19883] audit: audit_lost=108 audit_rate_limit=0 audit_backlog_limit=64 [ 282.987231][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.269272][T19906] netlink: 'syz.2.9467': attribute type 6 has an invalid length. [ 283.655505][T19942] loop3: detected capacity change from 0 to 256 [ 283.687781][T19946] x_tables: duplicate underflow at hook 3 [ 283.714468][T19942] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.726286][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.751168][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.777932][T19952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.844821][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.878293][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.912832][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.918742][T19961] loop2: detected capacity change from 0 to 256 [ 283.920755][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.986624][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.001798][T19961] FAT-fs (loop2): Directory bread(block 64) failed [ 284.039985][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.054439][T19961] FAT-fs (loop2): Directory bread(block 65) failed [ 284.063823][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.080730][T19961] FAT-fs (loop2): Directory bread(block 66) failed [ 284.088101][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.096087][ T562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.114351][T19961] FAT-fs (loop2): Directory bread(block 67) failed [ 284.123552][T19961] FAT-fs (loop2): Directory bread(block 68) failed [ 284.167210][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.185127][T19961] FAT-fs (loop2): Directory bread(block 69) failed [ 284.191921][T19961] FAT-fs (loop2): Directory bread(block 70) failed [ 284.201443][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.222752][T19980] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 284.250088][T19961] FAT-fs (loop2): Directory bread(block 71) failed [ 284.258049][T19961] FAT-fs (loop2): Directory bread(block 72) failed [ 284.271314][T19961] FAT-fs (loop2): Directory bread(block 73) failed [ 284.282337][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.300012][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.333635][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.357334][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.372649][T19990] netlink: 'syz.1.9503': attribute type 12 has an invalid length. [ 284.385149][T19856] device veth0_vlan entered promiscuous mode [ 284.413701][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.433844][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.467584][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.487136][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.510224][T19856] device veth1_macvtap entered promiscuous mode [ 284.615060][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.631686][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.649788][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.678711][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.688539][T20001] loop1: detected capacity change from 0 to 8192 [ 284.704558][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.715772][T20001] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.123978][T20056] netlink: 'syz.0.9535': attribute type 1 has an invalid length. [ 285.263324][T20065] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 285.375490][ T320] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 285.509260][T20087] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 285.569468][ T320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 285.594523][ T320] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.653759][ T320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 285.690590][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 285.708050][ T320] usb 4-1: Product: syz [ 285.713394][ T320] usb 4-1: Manufacturer: syz [ 285.722798][ T320] usb 4-1: SerialNumber: syz [ 285.973094][ T320] usb 4-1: USB disconnect, device number 91 [ 286.057569][T20142] netlink: 'syz.1.9576': attribute type 1 has an invalid length. [ 286.574003][T20188] usb usb9: usbfs: process 20188 (syz.2.9599) did not claim interface 7 before use [ 287.024690][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9623'. [ 287.141681][T20251] netlink: 'syz.2.9630': attribute type 29 has an invalid length. [ 287.180952][T20255] usb usb8: usbfs: process 20255 (syz.1.9633) did not claim interface 0 before use [ 287.194536][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9630'. [ 287.234069][T20251] netlink: 'syz.2.9630': attribute type 29 has an invalid length. [ 287.247366][ T28] kauditd_printk_skb: 954 callbacks suppressed [ 287.247383][ T28] audit: type=1400 audit(300.567:11648): avc: denied { read write open } for pid=283 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.288638][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9630'. [ 287.350287][ T28] audit: type=1400 audit(300.578:11649): avc: denied { read write } for pid=20260 comm="syz.3.9636" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 287.446797][ T28] audit: type=1400 audit(300.578:11650): avc: denied { read write open } for pid=20260 comm="syz.3.9636" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 287.537894][ T28] audit: type=1400 audit(300.578:11651): avc: denied { ioctl } for pid=20260 comm="syz.3.9636" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 287.570166][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.570997][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.578852][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.592281][ T282] audit: audit_lost=119 audit_rate_limit=0 audit_backlog_limit=64 [ 287.592376][T20285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.600923][ T283] audit: audit_lost=120 audit_rate_limit=0 audit_backlog_limit=64 [ 287.686695][T20293] loop3: detected capacity change from 0 to 512 [ 287.708843][T20293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.740108][T20293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 287.825321][T20293] EXT4-fs (loop3): 1 truncate cleaned up [ 287.831027][T20293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.872348][T20306] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9658'. [ 287.921505][T20306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9658'. [ 288.001435][T20317] loop5: detected capacity change from 0 to 1024 [ 288.039723][ T285] EXT4-fs (loop3): unmounting filesystem. [ 288.056417][T20317] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 288.065858][T20328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9667'. [ 288.090902][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9667'. [ 288.146667][T20335] netlink: 11 bytes leftover after parsing attributes in process `syz.1.9671'. [ 288.198999][T19856] EXT4-fs (loop5): unmounting filesystem. [ 288.432060][T20364] device ip6tnl6 entered promiscuous mode [ 288.585095][T20380] ipt_REJECT: TCP_RESET invalid for non-tcp [ 288.685951][T20391] device bridge2 entered promiscuous mode [ 288.693241][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9700'. [ 288.728652][T20394] device ipip0 entered promiscuous mode [ 288.743914][T20397] netlink: 'syz.5.9701': attribute type 3 has an invalid length. [ 288.766421][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.866472][T20409] netlink: 'syz.2.9707': attribute type 7 has an invalid length. [ 288.894158][T20409] netlink: 'syz.2.9707': attribute type 8 has an invalid length. [ 288.917459][T20409] netlink: 'syz.2.9707': attribute type 13 has an invalid length. [ 289.054272][T20426] device veth1_to_bond entered promiscuous mode [ 289.228124][T20446] loop2: detected capacity change from 0 to 256 [ 289.415134][T20462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9734'. [ 289.955032][T20520] overlayfs: missing 'lowerdir' [ 290.089791][T20532] x_tables: unsorted underflow at hook 3 [ 290.469701][T20579] loop3: detected capacity change from 0 to 512 [ 290.534425][T20579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.664972][T20579] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.9791: iget: checksum invalid [ 290.776836][ T285] EXT4-fs (loop3): unmounting filesystem. [ 290.905662][T20615] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.912957][T20615] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.043488][T20629] device bridge_slave_1 left promiscuous mode [ 291.056366][T20629] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.098602][T20629] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 291.170542][T20641] loop1: detected capacity change from 0 to 256 [ 291.195084][T20641] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.214337][T20641] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 291.272056][T20641] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 291.723251][T20686] loop3: detected capacity change from 0 to 4096 [ 291.774955][T20686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 291.864667][ T285] EXT4-fs (loop3): unmounting filesystem. [ 291.869568][T20705] __nla_validate_parse: 4 callbacks suppressed [ 291.869587][T20705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9855'. [ 291.886666][T20705] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9855'. [ 291.968234][T20709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.015891][ T28] kauditd_printk_skb: 974 callbacks suppressed [ 292.015908][ T28] audit: type=1400 audit(305.575:12614): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.120473][ T28] audit: type=1400 audit(305.575:12615): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.212443][T20732] loop3: detected capacity change from 0 to 512 [ 292.232165][ T28] audit: type=1400 audit(305.575:12616): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.260651][T20732] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.9867: Directory hole found for htree index block 0 [ 292.282023][T20732] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 292.290260][T20732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 292.308542][T20732] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.315599][ T28] audit: type=1400 audit(305.575:12617): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.316171][T20732] audit: audit_lost=125 audit_rate_limit=0 audit_backlog_limit=64 [ 292.348748][T20732] audit: backlog limit exceeded [ 292.350126][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.353901][T20732] EXT4-fs error (device loop3): ext4_xattr_set_entry:1617: inode #2: comm syz.3.9867: corrupted xattr entries [ 292.373643][ T28] audit: type=1400 audit(305.585:12618): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.379983][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.487739][ T285] EXT4-fs (loop3): unmounting filesystem. [ 292.648429][T20767] loop3: detected capacity change from 0 to 256 [ 293.452867][T20850] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9923'. [ 293.505498][T20855] loop3: detected capacity change from 0 to 256 [ 293.587866][T20855] FAT-fs (loop3): Directory bread(block 64) failed [ 293.612171][T20855] FAT-fs (loop3): Directory bread(block 65) failed [ 293.622608][T20865] netlink: 'syz.0.9930': attribute type 2 has an invalid length. [ 293.647958][T20855] FAT-fs (loop3): Directory bread(block 66) failed [ 293.652900][T20865] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9930'. [ 293.657933][T20855] FAT-fs (loop3): Directory bread(block 67) failed [ 293.690058][T20871] loop5: detected capacity change from 0 to 512 [ 293.704430][T20855] FAT-fs (loop3): Directory bread(block 68) failed [ 293.710787][T20873] netlink: 'syz.2.9933': attribute type 11 has an invalid length. [ 293.718904][T20855] FAT-fs (loop3): Directory bread(block 69) failed [ 293.758794][T20871] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.779265][T20875] loop1: detected capacity change from 0 to 256 [ 293.787212][T20855] FAT-fs (loop3): Directory bread(block 70) failed [ 293.793854][T20855] FAT-fs (loop3): Directory bread(block 71) failed [ 293.817547][T20871] FAT-fs (loop5): FAT read failed (blocknr 1568) [ 293.827193][T20855] FAT-fs (loop3): Directory bread(block 72) failed [ 293.833863][T20855] FAT-fs (loop3): Directory bread(block 73) failed [ 293.956073][T20885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9942'. [ 294.177928][T20904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9949'. [ 294.596148][ T6] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 294.786570][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 294.813026][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 294.853988][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 294.895238][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.939380][ T6] usb 4-1: config 0 descriptor?? [ 294.959657][ T6] usb-storage 4-1:0.0: USB Mass Storage device detected [ 295.069278][T21007] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10000'. [ 295.093562][T21010] netlink: 'syz.0.10001': attribute type 10 has an invalid length. [ 295.120569][T21010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.143013][T21014] netlink: 'syz.2.10003': attribute type 3 has an invalid length. [ 295.181904][ T6] usb 4-1: USB disconnect, device number 92 [ 295.456077][T21049] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 295.591770][T21056] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10025'. [ 295.606102][ T320] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 295.639090][T21056] device vlan0 entered promiscuous mode [ 295.653864][T21057] netlink: 'syz.0.10024': attribute type 10 has an invalid length. [ 295.691039][T21061] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10027'. [ 295.800880][T21070] netlink: 180 bytes leftover after parsing attributes in process `syz.5.10031'. [ 295.816639][ T320] usb 3-1: config 1 has an invalid interface number: 94 but max is 0 [ 295.818641][T21073] loop3: detected capacity change from 0 to 512 [ 295.827518][ T320] usb 3-1: config 1 has no interface number 0 [ 295.853214][T21073] EXT4-fs: Ignoring removed nobh option [ 295.883341][ T320] usb 3-1: config 1 interface 94 altsetting 233 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 295.930715][T21073] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #3: comm syz.3.10033: corrupted inode contents [ 295.972156][ T320] usb 3-1: config 1 interface 94 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.016585][T21073] EXT4-fs error (device loop3): ext4_dirty_inode:6139: inode #3: comm syz.3.10033: mark_inode_dirty error [ 296.046133][ T320] usb 3-1: config 1 interface 94 has no altsetting 0 [ 296.051788][T21096] xt_l2tp: invalid flags combination: 4 [ 296.087762][ T320] usb 3-1: New USB device found, idVendor=2100, idProduct=9e66, bcdDevice=c7.28 [ 296.102206][T21073] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #3: comm syz.3.10033: corrupted inode contents [ 296.115112][ T320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.123717][T21073] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.10033: mark_inode_dirty error [ 296.193384][T21073] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.10033: Failed to acquire dquot type 0 [ 296.230381][T21073] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #16: comm syz.3.10033: corrupted inode contents [ 296.266209][T21073] EXT4-fs error (device loop3): ext4_dirty_inode:6139: inode #16: comm syz.3.10033: mark_inode_dirty error [ 296.293151][T21073] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #16: comm syz.3.10033: corrupted inode contents [ 296.305960][T21073] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.10033: mark_inode_dirty error [ 296.322067][T21073] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #16: comm syz.3.10033: corrupted inode contents [ 296.334907][T21073] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 296.344823][T21073] EXT4-fs error (device loop3): ext4_do_update_inode:5274: inode #16: comm syz.3.10033: corrupted inode contents [ 296.354832][ T320] usb 3-1: string descriptor 0 read error: -71 [ 296.357917][T21073] EXT4-fs error (device loop3): ext4_truncate:4320: inode #16: comm syz.3.10033: mark_inode_dirty error [ 296.375158][ T320] ftdi_sio 3-1:1.94: FTDI USB Serial Device converter detected [ 296.390361][T21073] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 296.416107][ T320] ftdi_sio ttyUSB0: unknown device type: 0xc728 [ 296.420404][T21073] EXT4-fs (loop3): 1 truncate cleaned up [ 296.424475][ T320] usb 3-1: USB disconnect, device number 92 [ 296.436432][ T320] ftdi_sio 3-1:1.94: device disconnected [ 296.463640][T21073] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.600336][ T285] EXT4-fs (loop3): unmounting filesystem. [ 296.797483][ T28] kauditd_printk_skb: 911 callbacks suppressed [ 296.797500][ T28] audit: type=1400 audit(310.593:13524): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.820196][T21160] loop5: detected capacity change from 0 to 1024 [ 296.856078][T21160] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #3: block 3: comm syz.5.10074: lblock 3 mapped to illegal pblock 3 (length 1) [ 296.872997][ T28] audit: type=1400 audit(310.593:13525): avc: denied { read write } for pid=19856 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.882112][T21160] Quota error (device loop5): write_blk: dquota write failed [ 296.907828][ T28] audit: type=1400 audit(310.593:13526): avc: denied { open } for pid=19856 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.932419][ T28] audit: type=1400 audit(310.593:13527): avc: denied { ioctl } for pid=19856 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.959614][ T28] audit: type=1400 audit(310.593:13528): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 296.985693][ T28] audit: type=1400 audit(310.593:13529): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.015394][ T28] audit: type=1400 audit(310.593:13530): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.061046][ T28] audit: type=1400 audit(310.593:13531): avc: denied { create } for pid=21161 comm="syz.3.10073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 297.072081][T21160] Quota error (device loop5): find_free_dqentry: Can't write quota data block 3 [ 297.129883][T21160] EXT4-fs error (device loop5): ext4_acquire_dquot:6822: comm syz.5.10074: Failed to acquire dquot type 0 [ 297.154086][T21160] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 3: comm syz.5.10074: lblock 3 mapped to illegal pblock 3 (length 1) [ 297.176746][T21185] loop2: detected capacity change from 0 to 16 [ 297.187486][T21160] EXT4-fs error (device loop5): ext4_acquire_dquot:6822: comm syz.5.10074: Failed to acquire dquot type 0 [ 297.199236][T21185] erofs: (device loop2): mounted with root inode @ nid 36. [ 297.221742][T21160] EXT4-fs error (device loop5): ext4_free_blocks:6221: comm syz.5.10074: Freeing blocks not in datazone - block = 0, count = 4096 [ 297.247576][T21185] syz.2.10084: attempt to access beyond end of device [ 297.247576][T21185] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 297.271843][T21160] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 3: comm syz.5.10074: lblock 3 mapped to illegal pblock 3 (length 1) [ 297.289041][T21185] syz.2.10084: attempt to access beyond end of device [ 297.289041][T21185] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 297.351242][T21160] EXT4-fs error (device loop5): ext4_acquire_dquot:6822: comm syz.5.10074: Failed to acquire dquot type 0 [ 297.367516][T21160] EXT4-fs (loop5): 1 orphan inode deleted [ 297.373956][T21160] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 297.463638][T21160] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #3: block 3: comm syz.5.10074: lblock 3 mapped to illegal pblock 3 (length 1) [ 297.520770][T21160] EXT4-fs error (device loop5): ext4_acquire_dquot:6822: comm syz.5.10074: Failed to acquire dquot type 0 [ 297.605707][T19856] EXT4-fs (loop5): unmounting filesystem. [ 297.755645][T21230] device veth3 entered promiscuous mode [ 297.863436][ T320] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 298.065338][ T320] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 298.104443][ T320] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 298.128792][ T320] usb 4-1: config 3 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.190568][ T320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.209791][ T320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.253331][ T320] usb 4-1: Product: syz [ 298.267487][ T320] usb 4-1: Manufacturer: syz [ 298.269458][T21272] overlayfs: missing 'lowerdir' [ 298.272211][ T320] usb 4-1: SerialNumber: syz [ 298.308344][ T320] cdc_ncm 4-1:3.0: invalid descriptor buffer length [ 298.338262][ T320] cdc_ncm 4-1:3.0: CDC Union missing and no IAD found [ 298.358958][ T320] cdc_ncm 4-1:3.0: bind() failure [ 298.510380][ T320] usb 4-1: USB disconnect, device number 93 [ 298.654009][T21308] xt_TCPMSS: Only works on TCP SYN packets [ 298.682558][ T334] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 298.807510][T21324] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10154'. [ 298.835822][T21324] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 298.872952][ T334] usb 2-1: Using ep0 maxpacket: 32 [ 298.879604][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.909774][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.939851][ T334] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 298.942707][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10162'. [ 298.959214][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.008432][ T334] usb 2-1: config 0 descriptor?? [ 299.026679][ T334] hub 2-1:0.0: USB hub found [ 299.065385][T21350] loop3: detected capacity change from 0 to 512 [ 299.112410][T21356] device veth1_macvtap entered promiscuous mode [ 299.123011][T21350] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.212204][ T334] hub 2-1:0.0: 1 port detected [ 299.227149][T21350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 299.317808][T21350] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.10167: corrupted xattr block 32 [ 299.332024][T21350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 299.335039][T21376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10177'. [ 299.342083][T21350] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.10167: corrupted xattr block 32 [ 299.368552][T21376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10177'. [ 299.378433][T21376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10177'. [ 299.397744][T21350] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 299.414174][T21350] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2916: inode #15: comm syz.3.10167: corrupted xattr block 32 [ 299.416055][ T334] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 299.429336][T21350] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 299.453991][ T334] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 299.489540][ T334] usbhid 2-1:0.0: can't add hid device: -71 [ 299.530645][ T334] usbhid: probe of 2-1:0.0 failed with error -71 [ 299.578526][ T334] usb 2-1: USB disconnect, device number 92 [ 299.607392][T21395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.636706][ T285] EXT4-fs (loop3): unmounting filesystem. [ 299.654853][ T343] EXT4-fs error (device loop3): ext4_release_dquot:6858: comm kworker/u4:3: Failed to release dquot type 1 [ 299.768166][T21408] loop5: detected capacity change from 0 to 256 [ 299.792320][T21408] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.045718][T21432] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.081857][T21432] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 300.223208][T21450] loop3: detected capacity change from 0 to 128 [ 300.224834][T21447] usb usb9: usbfs: process 21447 (syz.5.10215) did not claim interface 0 before use [ 300.258954][T21450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 300.286244][T21450] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.10216: No space for directory leaf checksum. Please run e2fsck -D. [ 300.302953][T21450] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.10216: checksumming directory block 0 [ 300.327675][ T285] EXT4-fs (loop3): unmounting filesystem. [ 300.675528][T21498] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 300.691619][T21502] xt_NFQUEUE: number of total queues is 0 [ 301.150132][ T6] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 301.210510][T21565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10270'. [ 301.245037][T21565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10270'. [ 301.330690][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 301.338407][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 301.376146][ T6] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 301.404755][ T6] usb 1-1: config 0 has no interface number 0 [ 301.415889][ T6] usb 1-1: config 0 interface 105 has no altsetting 0 [ 301.458158][ T6] usb 1-1: New USB device found, idVendor=20dc, idProduct=079c, bcdDevice=a6.f5 [ 301.459617][T21593] loop3: detected capacity change from 0 to 512 [ 301.480491][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.511541][ T6] usb 1-1: Product: syz [ 301.515753][ T6] usb 1-1: Manufacturer: syz [ 301.520457][ T6] usb 1-1: SerialNumber: syz [ 301.533605][T21593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 301.543803][ T6] usb 1-1: config 0 descriptor?? [ 301.575951][ T28] kauditd_printk_skb: 978 callbacks suppressed [ 301.575967][ T28] audit: type=1400 audit(315.611:14505): avc: denied { read write } for pid=283 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.644120][ T285] EXT4-fs (loop3): unmounting filesystem. [ 301.712064][ T28] audit: type=1400 audit(315.642:14506): avc: denied { setattr } for pid=21591 comm="syz.3.10285" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.727106][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10294'. [ 301.760698][ T6] usb-storage 1-1:0.105: USB Mass Storage device detected [ 301.807251][ T28] audit: type=1400 audit(315.642:14507): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.854901][ T28] audit: type=1400 audit(315.642:14508): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.879076][ T28] audit: type=1400 audit(315.642:14509): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.905469][ T6] usb 1-1: USB disconnect, device number 92 [ 301.983208][ T28] audit: type=1400 audit(315.642:14510): avc: denied { read write open } for pid=283 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 301.999359][T21644] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 302.029220][ T28] audit: type=1400 audit(315.642:14511): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.071663][T21650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.074985][T21644] overlayfs: overlapping lowerdir path [ 302.091894][T21650] audit: audit_lost=128 audit_rate_limit=0 audit_backlog_limit=64 [ 302.103269][T19856] audit: audit_backlog=65 > audit_backlog_limit=64 [ 302.440493][T21682] SELinux: Context › is not valid (left unmapped). [ 302.735495][T21711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10341'. [ 302.778884][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.835650][ T6] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 302.979441][T21728] netlink: 'syz.1.10350': attribute type 29 has an invalid length. [ 303.012602][T21728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10350'. [ 303.023865][ T6] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 303.045228][ T6] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 303.074371][T21728] netlink: 'syz.1.10350': attribute type 29 has an invalid length. [ 303.093551][ T6] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 303.145912][ T6] usb 1-1: config 220 has no interface number 2 [ 303.178511][ T6] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 303.231766][ T6] usb 1-1: config 220 interface 0 has no altsetting 0 [ 303.264041][ T6] usb 1-1: config 220 interface 76 has no altsetting 0 [ 303.296503][ T6] usb 1-1: config 220 interface 1 has no altsetting 0 [ 303.338853][ T6] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 303.343752][T21747] loop2: detected capacity change from 0 to 256 [ 303.375941][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.403375][ T6] usb 1-1: Product: syz [ 303.426581][ T6] usb 1-1: Manufacturer: syz [ 303.451891][ T6] usb 1-1: SerialNumber: syz [ 303.589955][T21759] __nla_validate_parse: 1 callbacks suppressed [ 303.589975][T21759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10365'. [ 303.635997][T21761] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10366'. [ 303.672584][ T6] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 303.683389][ T6] usb 1-1: No valid video chain found. [ 303.692610][ T6] usb 1-1: selecting invalid altsetting 0 [ 303.741139][ T6] usb 1-1: USB disconnect, device number 93 [ 304.160207][T21799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10385'. [ 304.363627][T21677] loop3: detected capacity change from 0 to 131072 [ 304.370072][T21819] overlayfs: missing 'lowerdir' [ 304.398345][T21677] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 304.406732][T21677] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 304.463489][T21677] F2FS-fs (loop3): Found nat_bits in checkpoint [ 304.495757][T21832] loop2: detected capacity change from 0 to 256 [ 304.542088][T21832] exfat: Deprecated parameter 'namecase' [ 304.560147][T21832] exfat: Deprecated parameter 'namecase' [ 304.589701][T21832] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 304.596264][T21677] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 304.605140][T21836] loop5: detected capacity change from 0 to 512 [ 304.611591][T21677] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 304.618106][ T6] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 304.739080][T21836] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 304.782159][T21836] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.782899][T21844] loop2: detected capacity change from 0 to 512 [ 304.826752][T21844] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.838601][T19856] EXT4-fs (loop5): unmounting filesystem. [ 304.855880][ T6] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 304.884913][T21844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 304.892899][T21844] System zones: 1-12 [ 304.897667][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.915143][T21844] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 304.926787][ T6] usb 2-1: Product: syz [ 304.940922][ T6] usb 2-1: Manufacturer: syz [ 304.959540][T21844] EXT4-fs (loop2): 1 truncate cleaned up [ 304.969471][ T6] usb 2-1: SerialNumber: syz [ 304.978571][T21844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 305.073228][ T284] EXT4-fs (loop2): unmounting filesystem. [ 305.265232][ T6] usb 2-1: USB disconnect, device number 93 [ 305.326513][T21877] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 305.405860][T21886] device ip6gretap2 entered promiscuous mode [ 305.565470][T21901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10431'. [ 305.645560][T21907] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.678150][T21907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 305.687178][T21907] device xfrm1 left promiscuous mode [ 305.705147][T21907] device ip6gretap2 left promiscuous mode [ 306.154504][T21965] loop3: detected capacity change from 0 to 256 [ 306.238465][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10466'. [ 306.248030][T21976] loop3: detected capacity change from 0 to 256 [ 306.268967][T21976] FAT-fs (loop3): Directory bread(block 64) failed [ 306.269005][T21976] FAT-fs (loop3): Directory bread(block 65) failed [ 306.269059][T21976] FAT-fs (loop3): Directory bread(block 66) failed [ 306.269078][T21976] FAT-fs (loop3): Directory bread(block 67) failed [ 306.269111][T21976] FAT-fs (loop3): Directory bread(block 68) failed [ 306.269129][T21976] FAT-fs (loop3): Directory bread(block 69) failed [ 306.269160][T21976] FAT-fs (loop3): Directory bread(block 70) failed [ 306.269179][T21976] FAT-fs (loop3): Directory bread(block 71) failed [ 306.269213][T21976] FAT-fs (loop3): Directory bread(block 72) failed [ 306.269231][T21976] FAT-fs (loop3): Directory bread(block 73) failed [ 306.341905][ T28] kauditd_printk_skb: 800 callbacks suppressed [ 306.341923][ T28] audit: type=1400 audit(2000000004.251:15291): avc: denied { bpf } for pid=21977 comm="syz.5.10470" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.342133][ T28] audit: type=1400 audit(2000000004.251:15292): avc: denied { perfmon } for pid=21977 comm="syz.5.10470" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.342265][ T28] audit: type=1400 audit(2000000004.251:15293): avc: denied { bpf } for pid=21977 comm="syz.5.10470" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.342931][ T28] audit: type=1400 audit(2000000004.251:15294): avc: denied { prog_run } for pid=21977 comm="syz.5.10470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 306.361439][ T28] audit: type=1400 audit(2000000004.272:15295): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 306.367021][ T28] audit: type=1400 audit(2000000004.272:15296): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.367138][ T28] audit: type=1400 audit(2000000004.272:15297): avc: denied { read write open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.367241][ T28] audit: type=1400 audit(2000000004.272:15298): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.384360][ T28] audit: type=1400 audit(2000000004.293:15299): avc: denied { read write } for pid=19856 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.386303][ T28] audit: type=1400 audit(2000000004.293:15300): avc: denied { read write open } for pid=19856 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 307.304617][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10481'. [ 307.345786][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10481'. [ 307.391147][T22005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10481'. [ 307.554474][T22025] loop5: detected capacity change from 0 to 512 [ 307.591197][T22025] FAT-fs (loop5): Directory bread(block 576) failed [ 307.619814][T22025] FAT-fs (loop5): Directory bread(block 577) failed [ 307.656727][T22025] FAT-fs (loop5): Directory bread(block 578) failed [ 307.679238][T22025] FAT-fs (loop5): Directory bread(block 579) failed [ 307.704239][T22025] FAT-fs (loop5): Directory bread(block 580) failed [ 307.745424][T22025] FAT-fs (loop5): Directory bread(block 581) failed [ 307.764868][T22025] FAT-fs (loop5): Directory bread(block 582) failed [ 307.784259][T22025] FAT-fs (loop5): Directory bread(block 583) failed [ 307.835154][T22025] FAT-fs (loop5): Directory bread(block 576) failed [ 307.853305][T22043] overlayfs: missing 'lowerdir' [ 307.871250][T22025] FAT-fs (loop5): Directory bread(block 577) failed [ 307.918121][T22047] loop2: detected capacity change from 0 to 128 [ 307.981703][T22047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 308.003194][T22047] ext4 filesystem being mounted at /2007/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.100570][T22056] xt_connbytes: Forcing CT accounting to be enabled [ 308.173561][T22058] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.208339][T22058] exFAT-fs (loop5): unable to read boot sector [ 308.234755][T22058] exFAT-fs (loop5): failed to read boot sector [ 308.254186][T22058] exFAT-fs (loop5): failed to recognize exfat type [ 308.379597][ T6] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 308.572349][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.608008][ T6] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.658673][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.684627][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.707222][ T6] usb 3-1: Product: syz [ 308.711540][ T6] usb 3-1: Manufacturer: syz [ 308.736055][ T6] usb 3-1: SerialNumber: syz [ 308.750563][ T6] cdc_ncm 3-1:1.0: skipping garbage [ 308.782946][ T6] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 308.783412][T21984] loop3: detected capacity change from 0 to 262144 [ 308.799169][ T6] cdc_ncm 3-1:1.0: bind() failure [ 308.818784][ T6] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 308.834427][T21984] F2FS-fs (loop3): invalid crc value [ 308.862208][ T6] cdc_ncm 3-1:1.1: bind() failure [ 308.871152][T21984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 308.955774][T22090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10523'. [ 308.965233][ T6] usb 3-1: USB disconnect, device number 93 [ 309.008578][T21984] F2FS-fs (loop3): Start checkpoint disabled! [ 309.029043][T21984] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 309.066871][T21984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 309.105553][T22098] ipt_REJECT: TCP_RESET invalid for non-tcp [ 309.144556][T22019] loop1: detected capacity change from 0 to 131072 [ 309.165187][T22019] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 309.196843][T22019] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 309.236181][T22019] F2FS-fs (loop1): invalid crc value [ 309.285735][T22019] F2FS-fs (loop1): Found nat_bits in checkpoint [ 309.378836][T22019] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 309.396216][T22019] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 309.489302][ T284] EXT4-fs (loop2): unmounting filesystem. [ 309.532472][ T283] F2FS-fs (loop1): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:1407713280 [ 309.759414][T22138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10546'. [ 309.807610][T22142] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10549'. [ 310.143202][T22166] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 310.162884][T22165] netlink: 'syz.0.10561': attribute type 29 has an invalid length. [ 310.193736][T22165] netlink: 'syz.0.10561': attribute type 29 has an invalid length. [ 310.299583][T22180] overlayfs: conflicting options: userxattr,redirect_dir=off [ 310.565114][T22214] loop5: detected capacity change from 0 to 512 [ 310.618171][T22214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.657509][T22228] loop1: detected capacity change from 0 to 256 [ 310.661880][T22214] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.673717][T22228] exfat: Deprecated parameter 'utf8' [ 310.679559][T22228] exfat: Deprecated parameter 'namecase' [ 310.711565][T22228] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 310.734287][T22214] EXT4-fs error (device loop5): ext4_acquire_dquot:6822: comm syz.5.10583: Failed to acquire dquot type 1 [ 310.822566][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 310.862753][T22226] loop2: detected capacity change from 0 to 40427 [ 310.888308][T22226] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 310.893289][T22214] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 310.911973][T22226] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 310.925030][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 310.931720][T22214] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #12: comm syz.5.10583: corrupted inode contents [ 310.993828][T22226] F2FS-fs (loop2): invalid crc value [ 311.036173][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.051226][T22226] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 311.076128][T22214] EXT4-fs error (device loop5): ext4_dirty_inode:6139: inode #12: comm syz.5.10583: mark_inode_dirty error [ 311.113793][ T28] kauditd_printk_skb: 593 callbacks suppressed [ 311.113810][ T28] audit: type=1400 audit(2000000009.248:15892): avc: denied { read open } for pid=22253 comm="syz.0.10601" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 311.200017][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.206717][T22214] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #12: comm syz.5.10583: corrupted inode contents [ 311.225075][T22226] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 311.237608][T22226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 311.239772][ T28] audit: type=1400 audit(2000000009.290:15893): avc: denied { ioctl } for pid=22253 comm="syz.0.10601" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 311.288361][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.299449][T22214] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.10583: mark_inode_dirty error [ 311.311534][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.321340][ T28] audit: type=1400 audit(2000000009.311:15894): avc: denied { setopt } for pid=22252 comm="syz.3.10600" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.340860][T22214] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #12: comm syz.5.10583: corrupted inode contents [ 311.357616][T22226] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 311.404168][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.411106][ T28] audit: type=1400 audit(2000000009.332:15895): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.437685][T22214] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 311.450910][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.467430][T22214] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #12: comm syz.5.10583: corrupted inode contents [ 311.494673][ T28] audit: type=1400 audit(2000000009.332:15896): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.542501][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.549225][T22214] EXT4-fs error (device loop5): ext4_truncate:4320: inode #12: comm syz.5.10583: mark_inode_dirty error [ 311.599936][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.606509][T22214] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 311.644998][ T28] audit: type=1400 audit(2000000009.332:15897): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.673098][T22214] EXT4-fs (loop5): Remounting filesystem read-only [ 311.700985][T22214] EXT4-fs (loop5): 1 truncate cleaned up [ 311.729683][T22214] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 311.737894][ T28] audit: type=1400 audit(2000000009.332:15898): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.772016][ T343] device dummy0 left promiscuous mode [ 311.781125][ T343] bridge0: port 3(dummy0) entered disabled state [ 311.792003][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 311.798637][ T285] audit: audit_lost=136 audit_rate_limit=0 audit_backlog_limit=64 [ 311.812510][ T343] device bridge_slave_1 left promiscuous mode [ 311.819355][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.824235][T22284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 311.857680][T19856] EXT4-fs (loop5): unmounting filesystem. [ 312.192325][T22287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10617'. [ 312.201602][T22287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10617'. [ 312.210674][T22287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10617'. [ 312.219980][T22287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10617'. [ 312.229386][T22287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10617'. [ 312.238838][T22287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10617'. [ 312.248010][T22287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10617'. [ 312.262317][T22304] netlink: 'syz.0.10626': attribute type 7 has an invalid length. [ 312.270582][T22304] netlink: 'syz.0.10626': attribute type 8 has an invalid length. [ 312.379945][T22312] xt_TPROXY: Can be used only with -p tcp or -p udp [ 312.529491][T22274] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.533157][T22331] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 312.546817][T22274] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.561748][T22274] device bridge_slave_0 entered promiscuous mode [ 312.570384][T22274] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.578085][T22274] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.586294][T22274] device bridge_slave_1 entered promiscuous mode [ 312.593802][T22334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.624507][T22331] overlayfs: missing 'lowerdir' [ 312.679489][T22341] netlink: 'syz.3.10642': attribute type 46 has an invalid length. [ 312.839139][T22349] loop5: detected capacity change from 0 to 4096 [ 312.903107][T22349] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 312.958095][T22274] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.965315][T22274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.972643][T22274] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.979766][T22274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.039259][T19856] EXT4-fs (loop5): unmounting filesystem. [ 313.202004][T22378] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 313.295869][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.322389][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.349575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.390930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.413002][T22395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.456625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.471505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.496069][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.503366][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.522313][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.555726][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.577093][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.584249][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.623787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.646062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.688661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.719013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.902481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.924299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.952195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.975457][T22439] syz.5.10688[22439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.975626][T22439] syz.5.10688[22439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.991299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.025775][T22274] device veth0_vlan entered promiscuous mode [ 314.033109][T22442] __nla_validate_parse: 93 callbacks suppressed [ 314.033130][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10689'. [ 314.056680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.077740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.117634][T22447] loop2: detected capacity change from 0 to 256 [ 314.183065][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 314.205635][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.241174][T22274] device veth1_macvtap entered promiscuous mode [ 314.244540][T22461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10699'. [ 314.257751][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 314.313196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 314.347511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.381597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.417077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.462283][T22473] loop3: detected capacity change from 0 to 4096 [ 314.510280][T22473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 314.610425][ T285] EXT4-fs (loop3): unmounting filesystem. [ 314.950612][T22519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10725'. [ 314.988208][T22519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10725'. [ 315.097342][T22532] netlink: 'syz.6.10730': attribute type 3 has an invalid length. [ 315.183357][T22535] loop2: detected capacity change from 0 to 512 [ 315.211738][T22539] x_tables: duplicate underflow at hook 4 [ 315.228372][T22535] EXT4-fs: Ignoring removed nobh option [ 315.243799][T22535] EXT4-fs: Ignoring removed bh option [ 315.287830][T22535] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 315.302429][T22535] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.10734: invalid indirect mapped block 256 (level 1) [ 315.327121][T22535] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.10734: invalid indirect mapped block 2683928664 (level 1) [ 315.384429][T22535] EXT4-fs (loop2): 1 truncate cleaned up [ 315.407648][T22535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 315.464065][T22550] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10741'. [ 315.524453][T22550] tc_dump_action: action bad kind [ 315.563984][T22535] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 315.639665][ T284] EXT4-fs (loop2): unmounting filesystem. [ 315.741708][T22574] loop5: detected capacity change from 0 to 512 [ 315.764707][T22574] EXT4-fs warning (device loop5): ext4_xattr_inode_get:492: inode #11: comm syz.5.10753: ea_inode file size=4 entry size=6 [ 315.781187][T22574] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #15: comm syz.5.10753: corrupted inode contents [ 315.848511][T22574] EXT4-fs error (device loop5): ext4_dirty_inode:6139: inode #15: comm syz.5.10753: mark_inode_dirty error [ 315.913817][ T28] kauditd_printk_skb: 790 callbacks suppressed [ 315.913835][ T28] audit: type=1400 audit(2000000014.287:16668): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.946102][T22574] EXT4-fs error (device loop5): ext4_do_update_inode:5274: inode #15: comm syz.5.10753: corrupted inode contents [ 315.981894][T22574] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2945: inode #15: comm syz.5.10753: mark_inode_dirty error [ 316.029503][T22574] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2948: inode #15: comm syz.5.10753: mark inode dirty (error -117) [ 316.039322][ T28] audit: type=1400 audit(2000000014.308:16669): avc: denied { read write } for pid=22482 comm="syz.0.10709" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.067557][T22574] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 316.124273][T22574] EXT4-fs (loop5): 1 orphan inode deleted [ 316.136748][T22574] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 316.142933][ T28] audit: type=1400 audit(2000000014.308:16670): avc: denied { read write open } for pid=22482 comm="syz.0.10709" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.249389][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10769'. [ 316.268756][T19856] EXT4-fs (loop5): unmounting filesystem. [ 316.276951][ T28] audit: type=1400 audit(2000000014.308:16671): avc: denied { ioctl } for pid=22482 comm="syz.0.10709" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.376186][T22616] loop6: detected capacity change from 0 to 512 [ 316.404033][ T28] audit: type=1400 audit(2000000014.308:16672): avc: denied { ioctl } for pid=22482 comm="syz.0.10709" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.500604][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 316.521043][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 316.527971][ T28] audit: type=1400 audit(2000000014.329:16673): avc: denied { write } for pid=22586 comm="syz.6.10759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 316.550504][T22616] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 316.554402][T19856] audit: audit_backlog=65 > audit_backlog_limit=64 [ 316.573061][T22616] System zones: 0-2, 18-18, 34-35 [ 316.579668][T22616] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 316.591624][ T284] audit: audit_lost=144 audit_rate_limit=0 audit_backlog_limit=64 [ 316.651393][T22616] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.680413][T22274] EXT4-fs (loop6): unmounting filesystem. [ 316.682829][T22633] netlink: 'syz.3.10781': attribute type 3 has an invalid length. [ 317.115027][ T320] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 317.224985][T22650] loop2: detected capacity change from 0 to 40427 [ 317.234699][T22650] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(512) [ 317.243814][T22650] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 317.253300][T22650] F2FS-fs (loop2): invalid crc value [ 317.288958][T22650] F2FS-fs (loop2): Found nat_bits in checkpoint [ 317.306775][ T320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 317.328542][ T320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 317.364621][ T320] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 317.387177][ T320] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.403745][T22695] loop3: detected capacity change from 0 to 256 [ 317.410953][ T320] usb 7-1: Product: syz [ 317.415394][ T320] usb 7-1: Manufacturer: syz [ 317.420419][T22650] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 317.427712][T22650] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 317.435781][ T320] usb 7-1: SerialNumber: syz [ 317.441781][ T320] usb 7-1: config 0 descriptor?? [ 317.461621][ T320] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 317.462920][T22695] FAT-fs (loop3): Directory bread(block 64) failed [ 317.534713][T22695] FAT-fs (loop3): Directory bread(block 65) failed [ 317.550501][T22695] FAT-fs (loop3): Directory bread(block 66) failed [ 317.563223][T22695] FAT-fs (loop3): Directory bread(block 67) failed [ 317.580092][T22695] FAT-fs (loop3): Directory bread(block 68) failed [ 317.592551][T22695] FAT-fs (loop3): Directory bread(block 69) failed [ 317.599343][T22695] FAT-fs (loop3): Directory bread(block 70) failed [ 317.617198][T22695] FAT-fs (loop3): Directory bread(block 71) failed [ 317.656946][T22695] FAT-fs (loop3): Directory bread(block 72) failed [ 317.696028][T22695] FAT-fs (loop3): Directory bread(block 73) failed [ 317.801798][T22715] binder: 22714:22715 ioctl c018620c 200000000080 returned -22 [ 317.879062][ T320] usb 7-1: USB disconnect, device number 2 [ 317.987264][T22732] device wg1 left promiscuous mode [ 318.002683][T22736] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 318.181734][ T19] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 318.233015][T22756] loop3: detected capacity change from 0 to 512 [ 318.301930][T22756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.351955][T22756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 318.372356][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 318.393057][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.418399][ T19] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.444020][ T19] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 318.448479][T22769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10846'. [ 318.458281][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.471243][ T285] EXT4-fs (loop3): unmounting filesystem. [ 318.471473][ T19] usb 1-1: Product: syz [ 318.482588][ T19] usb 1-1: Manufacturer: syz [ 318.492732][ T19] usb 1-1: SerialNumber: syz [ 318.522448][ T19] r8152-cfgselector 1-1: config 0 descriptor?? [ 318.679754][T22783] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 318.875455][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10860'. [ 319.016058][ T561] usb 1-1: USB disconnect, device number 94 [ 319.177815][T22824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10873'. [ 319.206887][T22824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10873'. [ 319.387839][T22841] loop3: detected capacity change from 0 to 256 [ 319.398047][T22839] loop2: detected capacity change from 0 to 256 [ 319.415203][T22839] exfat: Deprecated parameter 'namecase' [ 319.420673][T22845] netlink: 37 bytes leftover after parsing attributes in process `syz.6.10881'. [ 319.447292][T22841] FAT-fs (loop3): Directory bread(block 64) failed [ 319.457887][T22841] FAT-fs (loop3): Directory bread(block 65) failed [ 319.459483][T22839] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfca4b811, utbl_chksum : 0xe619d30d) [ 319.464478][T22841] FAT-fs (loop3): Directory bread(block 66) failed [ 319.504843][T22841] FAT-fs (loop3): Directory bread(block 67) failed [ 319.545760][T22841] FAT-fs (loop3): Directory bread(block 68) failed [ 319.566408][T22851] netlink: 'syz.0.10886': attribute type 5 has an invalid length. [ 319.580112][T22841] FAT-fs (loop3): Directory bread(block 69) failed [ 319.598919][T22841] FAT-fs (loop3): Directory bread(block 70) failed [ 319.619207][T22841] FAT-fs (loop3): Directory bread(block 71) failed [ 319.638706][T22841] FAT-fs (loop3): Directory bread(block 72) failed [ 319.651214][T22841] FAT-fs (loop3): Directory bread(block 73) failed [ 319.690456][T22857] loop6: detected capacity change from 0 to 256 [ 319.717681][T22860] netlink: 'syz.0.10890': attribute type 1 has an invalid length. [ 319.725724][T22857] exfat: Deprecated parameter 'namecase' [ 319.744739][T22857] exfat: Deprecated parameter 'namecase' [ 319.765508][T22857] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 319.791330][T22841] syz.3.10882: attempt to access beyond end of device [ 319.791330][T22841] loop3: rw=2051, sector=1160, nr_sectors = 32 limit=256 [ 319.922206][T22875] xt_hashlimit: overflow, rate too high: 1 [ 320.025001][T22885] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 320.052786][T22889] loop2: detected capacity change from 0 to 256 [ 320.067663][T22885] SELinux: failed to load policy [ 320.115799][T22896] netlink: 'syz.6.10909': attribute type 13 has an invalid length. [ 320.136252][T22889] FAT-fs (loop2): Directory bread(block 64) failed [ 320.160781][T22889] FAT-fs (loop2): Directory bread(block 65) failed [ 320.168401][T22896] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10909'. [ 320.173797][T22889] FAT-fs (loop2): Directory bread(block 66) failed [ 320.206617][T22907] netlink: 'syz.3.10913': attribute type 9 has an invalid length. [ 320.223672][T22889] FAT-fs (loop2): Directory bread(block 67) failed [ 320.247499][T22889] FAT-fs (loop2): Directory bread(block 68) failed [ 320.264620][T22889] FAT-fs (loop2): Directory bread(block 69) failed [ 320.287868][T22914] overlayfs: missing 'workdir' [ 320.293260][T22889] FAT-fs (loop2): Directory bread(block 70) failed [ 320.303403][T22889] FAT-fs (loop2): Directory bread(block 71) failed [ 320.330842][T22889] FAT-fs (loop2): Directory bread(block 72) failed [ 320.338848][T22889] FAT-fs (loop2): Directory bread(block 73) failed [ 320.568013][T22938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.621295][T22945] netlink: 'syz.6.10931': attribute type 7 has an invalid length. [ 320.637024][T22945] netlink: 'syz.6.10931': attribute type 5 has an invalid length. [ 320.649624][T22945] netlink: 17 bytes leftover after parsing attributes in process `syz.6.10931'. [ 320.686508][ T28] kauditd_printk_skb: 818 callbacks suppressed [ 320.686525][ T28] audit: type=1400 audit(2000000019.295:17466): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.740773][T22957] loop5: detected capacity change from 0 to 256 [ 320.754494][T22959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10939'. [ 320.779553][ T28] audit: type=1400 audit(2000000019.295:17467): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.828975][T22957] FAT-fs (loop5): Directory bread(block 64) failed [ 320.858401][T22957] FAT-fs (loop5): Directory bread(block 65) failed [ 320.864999][T22957] FAT-fs (loop5): Directory bread(block 66) failed [ 320.876830][ T28] audit: type=1400 audit(2000000019.305:17468): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.929245][T22957] FAT-fs (loop5): Directory bread(block 67) failed [ 320.953413][T22957] FAT-fs (loop5): Directory bread(block 68) failed [ 320.961067][T22957] FAT-fs (loop5): Directory bread(block 69) failed [ 320.972137][ T28] audit: type=1400 audit(2000000019.316:17469): avc: denied { create } for pid=22952 comm="syz.2.10937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.998478][T22957] FAT-fs (loop5): Directory bread(block 70) failed [ 321.019824][T22957] FAT-fs (loop5): Directory bread(block 71) failed [ 321.036251][T22957] FAT-fs (loop5): Directory bread(block 72) failed [ 321.048389][ T28] audit: type=1400 audit(2000000019.316:17470): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.074740][T22957] FAT-fs (loop5): Directory bread(block 73) failed [ 321.078667][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.082680][T22979] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.095625][ T284] audit: audit_lost=154 audit_rate_limit=0 audit_backlog_limit=64 [ 321.103256][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 321.104293][ T284] audit: backlog limit exceeded [ 321.202972][T22989] loop6: detected capacity change from 0 to 512 [ 321.235759][T22989] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 321.268419][T22996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10957'. [ 321.275349][T22989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.287627][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10957'. [ 321.341368][T22989] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.10954: invalid indirect mapped block 4294967295 (level 1) [ 321.357635][T22989] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.10954: invalid indirect mapped block 4294967295 (level 1) [ 321.374004][T22989] EXT4-fs (loop6): 2 truncates cleaned up [ 321.380017][T22989] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 321.429543][T23011] netlink: 'syz.5.10966': attribute type 15 has an invalid length. [ 321.441312][T22989] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.10954: bg 0: block 5: invalid block bitmap [ 321.454463][T23011] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10966'. [ 321.473039][T22274] EXT4-fs (loop6): unmounting filesystem. [ 321.621268][T23027] tc_dump_action: action bad kind [ 321.677250][ T6] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 321.782131][ T19] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 321.814083][T23059] xt_CONNSECMARK: invalid mode: 66 [ 322.031671][T23085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.717329][T23185] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 323.125685][ T19] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 323.141588][T23255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.149176][T23255] IPv6: NLM_F_CREATE should be set when creating new route [ 323.156811][T23255] IPv6: NLM_F_CREATE should be set when creating new route [ 323.206271][T23269] xt_TCPMSS: Only works on TCP SYN packets [ 323.353842][ T19] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 323.396617][T23307] device vlan0 entered promiscuous mode [ 323.813742][T23387] __nla_validate_parse: 2 callbacks suppressed [ 323.813764][T23387] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11149'. [ 323.888485][ T6] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 324.114983][T23441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11179'. [ 324.127798][T23441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11179'. [ 324.138534][T23441] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11179'. [ 324.214908][T23461] xt_l2tp: v2 tid > 0xffff: 134217728 [ 324.344745][ T6] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 324.352946][ T6] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 324.665436][T23530] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 324.811525][ T6] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 325.470877][ T28] kauditd_printk_skb: 554 callbacks suppressed [ 325.470893][ T28] audit: type=1400 audit(2000000024.360:18015): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.531371][ T28] audit: type=1400 audit(2000000024.360:18016): avc: denied { read write } for pid=23498 comm="syz.5.11206" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.587644][ T28] audit: type=1400 audit(2000000024.402:18017): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.652739][ T28] audit: type=1400 audit(2000000024.413:18018): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.691401][ T28] audit: type=1400 audit(2000000024.423:18019): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.761565][ T28] audit: type=1400 audit(2000000024.486:18020): avc: denied { read write } for pid=22274 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.836974][ T28] audit: type=1400 audit(2000000024.486:18021): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.893063][ T28] audit: type=1400 audit(2000000024.518:18022): avc: denied { wake_alarm } for pid=23605 comm="syz.6.11258" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 325.915250][ T28] audit: type=1400 audit(2000000024.528:18023): avc: denied { read write } for pid=22274 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.972201][ T28] audit: type=1400 audit(2000000024.539:18024): avc: denied { create } for pid=23607 comm="syz.0.11259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 326.319979][T23699] IPv6: sit1: Disabled Multicast RS [ 326.769212][T23764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11335'. [ 327.103682][T23810] bridge_slave_0: default FDB implementation only supports local addresses [ 327.179498][T23820] erspan0: default FDB implementation only supports local addresses [ 328.078500][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 328.134073][T24005] device bridge0 entered promiscuous mode [ 328.155111][T24005] device bridge0 left promiscuous mode [ 328.178108][T24014] netlink: 'syz.5.11454': attribute type 22 has an invalid length. [ 328.186919][T24014] netlink: 'syz.5.11454': attribute type 22 has an invalid length. [ 328.194968][T24014] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11454'. [ 328.320763][T24032] sch_fq: defrate 0 ignored. [ 328.343659][T24035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11465'. [ 329.003730][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11515'. [ 329.079176][T24151] device vlan2 entered promiscuous mode [ 329.126522][T24153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11525'. [ 329.203553][T24167] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11529'. [ 329.612154][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.817253][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11564'. [ 330.243579][ T28] kauditd_printk_skb: 646 callbacks suppressed [ 330.243598][ T28] audit: type=1400 audit(2000000029.368:18671): avc: denied { read write } for pid=22274 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 330.314519][ T28] audit: type=1400 audit(2000000029.410:18672): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 330.345578][T24294] kernel profiling enabled (shift: 3) [ 330.363417][ T28] audit: type=1400 audit(2000000029.420:18673): avc: denied { bpf } for pid=24288 comm="syz.6.11587" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 330.406070][ T28] audit: type=1400 audit(2000000029.420:18674): avc: denied { map_create } for pid=24288 comm="syz.6.11587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 330.454377][ T28] audit: type=1400 audit(2000000029.420:18675): avc: denied { bpf } for pid=24288 comm="syz.6.11587" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 330.488523][ T28] audit: type=1400 audit(2000000029.420:18676): avc: denied { prog_load } for pid=24288 comm="syz.6.11587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 330.512182][ T28] audit: type=1400 audit(2000000029.431:18677): avc: denied { bpf } for pid=24288 comm="syz.6.11587" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 330.533969][ T28] audit: type=1400 audit(2000000029.431:18678): avc: denied { read } for pid=24290 comm="syz.0.11588" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 330.556859][ T28] audit: type=1400 audit(2000000029.452:18679): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 330.586563][ T28] audit: type=1400 audit(2000000029.473:18680): avc: denied { read write } for pid=22274 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 330.721872][T24346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11615'. [ 330.825367][T24358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11621'. [ 331.328612][T24412] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 332.439496][T24521] netlink: 'syz.2.11701': attribute type 4 has an invalid length. [ 332.457482][T24521] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11701'. [ 332.603957][T24542] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 332.648502][T24549] netlink: 'syz.6.11714': attribute type 29 has an invalid length. [ 332.922660][T24590] device syz_tun entered promiscuous mode [ 332.942705][T24590] device syz_tun left promiscuous mode [ 332.952693][T24593] device syz_tun entered promiscuous mode [ 332.962435][T24593] device syz_tun left promiscuous mode [ 333.255877][T24654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11765'. [ 333.280000][T24654] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 333.722191][T24718] futex_wake_op: syz.6.11796 tries to shift op by 32; fix this program [ 335.020192][ T28] kauditd_printk_skb: 469 callbacks suppressed [ 335.020211][ T28] audit: type=1400 audit(2000000034.386:19150): avc: denied { read write } for pid=24821 comm="syz.3.11843" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.067097][ T28] audit: type=1400 audit(2000000034.428:19151): avc: denied { read write } for pid=22274 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.118686][T24828] overlayfs: unrecognized mount option "\']*=°¢aÛgt©˜vŽ$Kkk°\1\" or missing value [ 335.128495][ T28] audit: type=1400 audit(2000000034.428:19152): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.154300][ T28] audit: type=1400 audit(2000000034.428:19153): avc: denied { read write } for pid=19856 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.184756][ T3617] ------------[ cut here ]------------ [ 335.190352][ T3617] kernel BUG at fs/buffer.c:2714! [ 335.190445][ T28] audit: type=1400 audit(2000000034.470:19154): avc: denied { name_bind } for pid=24824 comm="syz.3.11845" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 335.218779][ T28] audit: type=1400 audit(2000000034.470:19155): avc: denied { read write } for pid=22274 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.231071][ T3617] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 335.249364][ T3617] CPU: 1 PID: 3617 Comm: kmmpd-loop0 Tainted: G W syzkaller #0 [ 335.258410][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.261606][ T28] audit: type=1400 audit(2000000034.480:19156): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.268570][ T3617] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 335.293021][ T28] audit: type=1400 audit(2000000034.501:19157): avc: denied { create } for pid=24831 comm="syz.3.11848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 335.298263][ T3617] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 dc e7 ff e9 b0 fe ff ff e8 de a9 a2 ff 0f 0b e8 d7 a9 a2 ff <0f> 0b e8 d0 a9 a2 ff 0f 0b e8 c9 a9 a2 ff 0f 0b e8 c2 a9 a2 ff 0f [ 335.298284][ T3617] RSP: 0018:ffffc9000e877ca0 EFLAGS: 00010293 [ 335.320679][ T28] audit: type=1400 audit(2000000034.501:19158): avc: denied { read write } for pid=22274 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.338216][ T3617] [ 335.338229][ T3617] RAX: ffffffff81cec329 RBX: 0000000000000000 RCX: ffff888119546540 [ 335.338247][ T3617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.338259][ T3617] RBP: ffffc9000e877cf0 R08: ffff8881332382a7 R09: 1ffff11026647054 [ 335.338273][ T3617] R10: dffffc0000000000 R11: ffffed1026647055 R12: 0000000000000000 [ 335.338286][ T3617] R13: 1ffff11026647054 R14: ffff8881332382a0 R15: 0000000000003801 [ 335.338299][ T3617] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 335.338315][ T3617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.338328][ T3617] CR2: 00007fe67885cb2c CR3: 00000001309e3000 CR4: 00000000003506a0 [ 335.338346][ T3617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.338356][ T3617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.338368][ T3617] Call Trace: [ 335.338374][ T3617] [ 335.338383][ T3617] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 335.348904][T24841] netlink: 'syz.6.11850': attribute type 11 has an invalid length. [ 335.369954][ T3617] submit_bh+0x1f/0x30 [ 335.369992][ T3617] write_mmp_block_thawed+0x397/0x510 [ 335.372754][ T28] audit: type=1400 audit(2000000034.554:19159): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 335.380413][ T3617] ? __cfi_schedule_timeout+0x10/0x10 [ 335.380450][ T3617] ? read_mmp_block+0x720/0x720 [ 335.380471][ T3617] ? __cfi_process_timeout+0x10/0x10 [ 335.388759][T24841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11850'. [ 335.396598][ T3617] write_mmp_block+0x138/0x2b0 [ 335.396625][ T3617] kmmpd+0x3ce/0x950 [ 335.396648][ T3617] kthread+0x281/0x320 [ 335.396667][ T3617] ? __cfi_kmmpd+0x10/0x10 [ 335.396688][ T3617] ? __cfi_kthread+0x10/0x10 [ 335.552591][ T3617] ret_from_fork+0x1f/0x30 [ 335.557006][ T3617] [ 335.560016][ T3617] Modules linked in: [ 335.567345][ T3617] ---[ end trace 0000000000000000 ]--- [ 335.572945][ T3617] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 335.578440][ T3617] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 38 dc e7 ff e9 b0 fe ff ff e8 de a9 a2 ff 0f 0b e8 d7 a9 a2 ff <0f> 0b e8 d0 a9 a2 ff 0f 0b e8 c9 a9 a2 ff 0f 0b e8 c2 a9 a2 ff 0f [ 335.598144][ T3617] RSP: 0018:ffffc9000e877ca0 EFLAGS: 00010293 [ 335.604500][ T3617] RAX: ffffffff81cec329 RBX: 0000000000000000 RCX: ffff888119546540 [ 335.612579][ T3617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.620659][ T3617] RBP: ffffc9000e877cf0 R08: ffff8881332382a7 R09: 1ffff11026647054 [ 335.628835][ T3617] R10: dffffc0000000000 R11: ffffed1026647055 R12: 0000000000000000 [ 335.636912][ T3617] R13: 1ffff11026647054 R14: ffff8881332382a0 R15: 0000000000003801 [ 335.644999][ T3617] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 335.654032][ T3617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.660834][ T3617] CR2: 0000001b2e91fff8 CR3: 000000000700f000 CR4: 00000000003506a0 [ 335.669044][ T3617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.677112][ T3617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.685314][ T3617] Kernel panic - not syncing: Fatal exception [ 335.691900][ T3617] Kernel Offset: disabled [ 335.696312][ T3617] Rebooting in 86400 seconds..