last executing test programs: 4m3.020114037s ago: executing program 2 (id=112): mincore(0x0, 0x0, &(0x7f0000000000)) 4m3.019629377s ago: executing program 3 (id=113): socket$nl_crypto(0x10, 0x3, 0x15) 4m3.000773077s ago: executing program 2 (id=115): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current', 0x2, 0x0) 4m3.000526227s ago: executing program 3 (id=117): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load', 0x2, 0x0) 4m3.000135637s ago: executing program 2 (id=120): sched_setscheduler(0x0, 0x0, &(0x7f0000000000)) 4m2.978903337s ago: executing program 3 (id=123): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg', 0x800, 0x0) 4m2.978565657s ago: executing program 2 (id=125): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci', 0x800, 0x0) 4m2.978431787s ago: executing program 3 (id=126): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 4m2.978173187s ago: executing program 2 (id=128): shmdt(0x0) 4m2.84146928s ago: executing program 2 (id=130): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 4m2.607943453s ago: executing program 3 (id=131): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 4m2.347464947s ago: executing program 3 (id=140): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.755437973s ago: executing program 5 (id=8871): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) 1.574205776s ago: executing program 5 (id=8875): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r0, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f00000000000000000002fff4000d40ff000000", 0x24) 1.436033018s ago: executing program 5 (id=8878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}, {&(0x7f0000000300)="9943e0bb", 0x4}], 0x3) 1.251033111s ago: executing program 5 (id=8882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)={0x20, r1, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) 1.168550692s ago: executing program 6 (id=8884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) 1.056669534s ago: executing program 6 (id=8886): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="d0", 0x1}], 0x1}, 0x20040801) recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f00000006c0)=@abs, 0x6e, 0x0}, 0x41) 982.051565ms ago: executing program 5 (id=8888): unshare(0x64000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) 769.566978ms ago: executing program 6 (id=8893): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 662.25107ms ago: executing program 0 (id=8895): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@remote, 0x47, r1}) 638.99485ms ago: executing program 5 (id=8896): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 623.104641ms ago: executing program 6 (id=8897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100004000e5fffffff313000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) 572.023371ms ago: executing program 4 (id=8898): setuid(0xee01) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280)=0x8, 0x4) 552.947402ms ago: executing program 0 (id=8899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='sys_exit\x00', r1}, 0x18) 513.126572ms ago: executing program 6 (id=8900): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) 498.406013ms ago: executing program 1 (id=8901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="05070000000000000000010000000400030004000180080002800400018004000180480001801400020064766d727030000000000000000000001400020076657468315f6d61637674617001000014000200766574683100000000000000000000000800030003000000040003004c00028048000180080001000600000008000100050000003400014e080001000800000008000100070000e70700010001000000080001000200000008000100030000000800010008000000040003"], 0xc4}}, 0x0) 459.186693ms ago: executing program 4 (id=8902): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 430.973313ms ago: executing program 6 (id=8903): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9}, @global=@item_012={0x1, 0x1, 0x4, '['}]}}, 0x0}, 0x0) 424.772334ms ago: executing program 0 (id=8904): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 369.896405ms ago: executing program 1 (id=8905): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 341.201675ms ago: executing program 4 (id=8906): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f00000003c0)='{]]\x00', 0x0) 311.155845ms ago: executing program 0 (id=8907): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0x6) 272.420606ms ago: executing program 1 (id=8908): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001f00)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7}}]}, 0x190) 241.512007ms ago: executing program 4 (id=8909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0x11) 218.983247ms ago: executing program 1 (id=8910): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x0) 181.391657ms ago: executing program 0 (id=8911): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) sendmmsg$inet(r0, &(0x7f0000003080)=[{{&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001800)=[@ip_retopts={{0x10}}], 0x10}}, {{&(0x7f0000001880)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0x4000800) 152.343098ms ago: executing program 4 (id=8912): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) setgid(0xee00) 112.259279ms ago: executing program 1 (id=8913): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 99.680269ms ago: executing program 0 (id=8914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000080000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.39326ms ago: executing program 4 (id=8915): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9fef0076805268c98bd14f06558", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=8916): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = open(&(0x7f0000000f00)='./file0\x00', 0x80840, 0x8) mount$9p_fd(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000002600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): 194.678424][ T1269] usb 7-1: SerialNumber: syz [ 194.684351][ T28] audit: type=1326 audit(2000000029.308:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.1.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 194.883511][ T1269] usb 7-1: USB disconnect, device number 93 [ 195.191398][ T9482] xt_NFQUEUE: number of queues (65535) out of range (got 65541) [ 195.241156][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4611'. [ 195.284073][ T9494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4614'. [ 195.329646][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 195.420580][ T9510] netlink: 'syz.4.4631': attribute type 1 has an invalid length. [ 195.534453][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 195.541817][ T24] usb 2-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 195.560976][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.594967][ T24] usb 2-1: Product: syz [ 195.599004][ T24] usb 2-1: Manufacturer: syz [ 195.613916][ T24] usb 2-1: SerialNumber: syz [ 195.623346][ T24] usb 2-1: config 0 descriptor?? [ 195.638748][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 195.646470][ T24] usb 2-1: Detected FT232A [ 195.678234][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 195.717304][ T9542] 8021q: VLANs not supported on lo [ 195.800066][ T9512] loop6: detected capacity change from 0 to 40427 [ 195.828127][ T9512] F2FS-fs (loop6): Invalid log sectorsize (131081) [ 195.834908][ T24] usb 2-1: USB disconnect, device number 90 [ 195.841490][ T9512] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 195.843774][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 195.875976][ T24] ftdi_sio 2-1:0.0: device disconnected [ 195.885336][ T9512] F2FS-fs (loop6): invalid crc value [ 195.921418][ T9512] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 195.973560][ T9512] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 195.982566][ T9512] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 196.397345][ T9642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4686'. [ 196.416518][ T9644] loop1: detected capacity change from 0 to 512 [ 196.424721][ T9642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4686'. [ 196.425545][ T9646] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 196.476726][ T9644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.503639][ T9657] xt_hashlimit: overflow, rate too high: 0 [ 196.535594][ T9644] ext4 filesystem being mounted at /768/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.580430][ T9644] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #12: block 32: comm syz.1.4688: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 196.644781][ T9644] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz.1.4688: directory missing '.' [ 196.720943][ T997] EXT4-fs (loop1): unmounting filesystem. [ 196.727438][ T9690] loop6: detected capacity change from 0 to 512 [ 196.815439][ T9690] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.4708: casefold flag without casefold feature [ 196.867665][ T9690] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.4708: couldn't read orphan inode 15 (err -117) [ 196.917657][ T9690] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 196.999730][ T9715] Zero length message leads to an empty skb [ 197.006512][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 197.111502][ T9724] xt_TCPMSS: Only works on TCP SYN packets [ 197.846055][ T9777] netlink: 'syz.0.4749': attribute type 6 has an invalid length. [ 197.867778][ T9779] mmap: syz.6.4750 (9779): VmData 29085696 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 197.933607][ T9783] xt_l2tp: invalid flags combination: c [ 198.070534][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 198.070553][ T28] audit: type=1400 audit(2000000033.170:320): avc: denied { setopt } for pid=9788 comm="syz.6.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.359972][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4762'. [ 198.415811][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4762'. [ 198.856520][ T9822] Illegal XDP return value 991863873 on prog (id 438) dev N/A, expect packet loss! [ 198.977249][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4773'. [ 199.165831][ T9841] netlink: 'syz.6.4780': attribute type 3 has an invalid length. [ 199.222473][ T9846] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.257689][ T28] audit: type=1326 audit(2000000034.447:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9848 comm="syz.4.4784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12c238d169 code=0x0 [ 199.275826][ T9851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1006 sclass=netlink_audit_socket pid=9851 comm=syz.6.4785 [ 199.385543][ T9858] netlink: 'syz.6.4790': attribute type 1 has an invalid length. [ 199.415663][ T9713] loop5: detected capacity change from 0 to 262144 [ 199.445131][ T9861] netlink: 'syz.0.4788': attribute type 3 has an invalid length. [ 199.455964][ T9871] loop6: detected capacity change from 0 to 256 [ 199.472109][ T9713] F2FS-fs (loop5): Found nat_bits in checkpoint [ 199.532599][ T9703] loop1: detected capacity change from 0 to 262144 [ 199.644151][ T9713] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 199.684362][ T28] audit: type=1326 audit(2000000034.897:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.6.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 199.747269][ T28] audit: type=1326 audit(2000000034.908:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.6.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 199.818033][ T28] audit: type=1326 audit(2000000034.908:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.6.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 200.053216][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4825'. [ 200.129680][ T28] audit: type=1326 audit(2000000035.380:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.0.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 200.195613][ T28] audit: type=1326 audit(2000000035.412:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.0.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 200.271315][ T28] audit: type=1326 audit(2000000035.422:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.0.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 200.337171][ T28] audit: type=1326 audit(2000000035.422:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.0.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 200.401239][ T28] audit: type=1326 audit(2000000035.422:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9939 comm="syz.0.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 200.601769][ T9993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4854'. [ 200.939116][T10046] xt_TPROXY: Can be used only with -p tcp or -p udp [ 201.027036][T10064] overlayfs: missing 'lowerdir' [ 201.419404][T10147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.439863][T10152] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4931'. [ 201.495330][T10162] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4937'. [ 201.561990][T10177] loop6: detected capacity change from 0 to 256 [ 201.654537][T10192] device bridge1 entered promiscuous mode [ 201.734614][T10213] netlink: 'syz.5.4960': attribute type 1 has an invalid length. [ 201.825871][T10229] loop1: detected capacity change from 0 to 1024 [ 201.874132][T10242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4975'. [ 201.883531][T10229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 201.945291][ T997] EXT4-fs (loop1): unmounting filesystem. [ 202.011579][T10269] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4987'. [ 202.356326][T10340] xt_CONNSECMARK: invalid mode: 3 [ 202.529602][T10380] loop1: detected capacity change from 0 to 512 [ 202.556580][T10380] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.584919][T10380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 202.584983][T10380] System zones: 1-12 [ 202.586165][T10380] EXT4-fs (loop1): 1 truncate cleaned up [ 202.586188][T10380] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.622791][ T997] EXT4-fs (loop1): unmounting filesystem. [ 202.752685][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 202.752703][ T28] audit: type=1326 audit(2000000038.200:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 202.781759][T10417] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.810191][T10409] loop6: detected capacity change from 0 to 2048 [ 202.858925][ T28] audit: type=1326 audit(2000000038.232:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 202.861766][T10409] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 202.904067][ T28] audit: type=1326 audit(2000000038.232:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 202.973081][ T28] audit: type=1326 audit(2000000038.232:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 202.999905][ T28] audit: type=1326 audit(2000000038.232:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10410 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 203.023229][ T28] audit: type=1400 audit(2000000038.275:400): avc: denied { create } for pid=10420 comm="syz.1.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.043541][ T28] audit: type=1400 audit(2000000038.275:401): avc: denied { ioctl } for pid=10420 comm="syz.1.5061" path="socket:[46423]" dev="sockfs" ino=46423 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.082049][ T28] audit: type=1400 audit(2000000038.468:402): avc: denied { read write } for pid=10407 comm="syz.6.5055" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.117034][ T28] audit: type=1400 audit(2000000038.468:403): avc: denied { open } for pid=10407 comm="syz.6.5055" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.125869][T10437] loop1: detected capacity change from 0 to 8192 [ 203.152954][ T28] audit: type=1400 audit(2000000038.468:404): avc: denied { ioctl } for pid=10407 comm="syz.6.5055" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.229380][T10437] loop1: p1 < > p3 < > p4 < > [ 203.233995][T10437] loop1: partition table partially beyond EOD, truncated [ 203.237676][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5074'. [ 203.257459][T10437] loop1: p3 start 327168 is beyond EOD, truncated [ 203.292594][ T1257] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 203.347514][T10458] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 203.361381][ T1263] udevd[1263]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 203.368545][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 203.468169][T10471] loop5: detected capacity change from 0 to 512 [ 203.489284][ T1257] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.510497][ T1257] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.531159][T10471] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 203.531677][T10481] raw_sendmsg: syz.0.5088 forgot to set AF_INET. Fix it! [ 203.546848][ T1257] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.570917][ T1257] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.579599][T10471] ext4 filesystem being mounted at /851/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.591623][ T1257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.599445][ T1257] usb 7-1: Product: syz [ 203.610038][ T1257] usb 7-1: Manufacturer: syz [ 203.614483][ T1257] usb 7-1: SerialNumber: syz [ 203.627498][ T1257] cdc_ncm 7-1:1.0: skipping garbage [ 203.637931][ T1257] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 203.644555][ T1257] cdc_ncm 7-1:1.0: bind() failure [ 203.684790][ T998] EXT4-fs (loop5): unmounting filesystem. [ 203.696770][T10489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5093'. [ 203.739739][T10489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5093'. [ 203.818529][ T1257] usb 7-1: USB disconnect, device number 94 [ 203.890591][T10516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.892181][T10515] xt_TCPMSS: Only works on TCP SYN packets [ 204.306679][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 204.416013][T10614] loop5: detected capacity change from 0 to 512 [ 204.429145][T10616] ipt_REJECT: ECHOREPLY no longer supported. [ 204.440918][T10614] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 204.448303][T10620] tc_dump_action: action bad kind [ 204.462211][T10614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 204.472546][T10614] System zones: 1-12 [ 204.477767][T10614] EXT4-fs (loop5): 1 truncate cleaned up [ 204.483354][T10614] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 204.514875][ T998] EXT4-fs (loop5): unmounting filesystem. [ 204.601305][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5169'. [ 204.719644][ T19] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 204.906866][ T19] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 204.908238][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5195'. [ 204.924112][ T19] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 204.938143][ T19] usb 7-1: config 220 descriptor has 1 excess byte, ignoring [ 204.950816][ T19] usb 7-1: config 220 has no interface number 2 [ 204.957113][ T19] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 204.970512][ T19] usb 7-1: config 220 interface 0 has no altsetting 0 [ 205.004408][ T19] usb 7-1: config 220 interface 76 has no altsetting 0 [ 205.024385][ T19] usb 7-1: config 220 interface 1 has no altsetting 0 [ 205.042369][ T19] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 205.052974][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.085627][ T19] usb 7-1: Product: syz [ 205.089661][ T19] usb 7-1: Manufacturer: syz [ 205.121139][ T19] usb 7-1: SerialNumber: syz [ 205.127992][T10730] loop5: detected capacity change from 0 to 256 [ 205.177535][T10730] FAT-fs (loop5): Directory bread(block 64) failed [ 205.202819][T10730] FAT-fs (loop5): Directory bread(block 65) failed [ 205.231423][T10730] FAT-fs (loop5): Directory bread(block 66) failed [ 205.252174][T10730] FAT-fs (loop5): Directory bread(block 67) failed [ 205.266211][T10730] FAT-fs (loop5): Directory bread(block 68) failed [ 205.284006][T10730] FAT-fs (loop5): Directory bread(block 69) failed [ 205.299700][T10730] FAT-fs (loop5): Directory bread(block 70) failed [ 205.313089][T10730] FAT-fs (loop5): Directory bread(block 71) failed [ 205.342276][ T19] usb 7-1: selecting invalid altsetting 0 [ 205.353433][ T19] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 205.360456][T10730] FAT-fs (loop5): Directory bread(block 72) failed [ 205.372924][ T19] usb 7-1: No valid video chain found. [ 205.379167][T10730] FAT-fs (loop5): Directory bread(block 73) failed [ 205.393487][ T19] usb 7-1: USB disconnect, device number 95 [ 205.572961][T10793] binder: 10792:10793 ioctl 40046210 0 returned -14 [ 205.651130][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5247'. [ 207.587909][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5247'. [ 208.652110][ T28] kauditd_printk_skb: 442 callbacks suppressed [ 208.652130][ T28] audit: type=1400 audit(2000000044.527:847): avc: denied { getopt } for pid=10823 comm="syz.5.5255" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.815441][ T28] audit: type=1400 audit(2000000044.613:848): avc: denied { audit_control } for pid=10826 comm="syz.5.5259" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 208.976482][ T28] audit: type=1326 audit(2000000044.860:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.5268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12c238d169 code=0x0 [ 209.259687][ T28] audit: type=1326 audit(2000000045.171:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.5.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 209.298045][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5288'. [ 209.305414][T10891] x_tables: unsorted underflow at hook 1 [ 209.322541][T10890] device vlan0 entered promiscuous mode [ 209.330519][ T28] audit: type=1326 audit(2000000045.171:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.5.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 209.358439][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5288'. [ 209.401063][ T28] audit: type=1326 audit(2000000045.171:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.5.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 209.431271][ T28] audit: type=1326 audit(2000000045.171:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.5.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 209.458020][T10907] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.5298'. [ 209.470748][ T28] audit: type=1326 audit(2000000045.171:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10883 comm="syz.5.5285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 209.524202][T10919] xt_bpf: check failed: parse error [ 209.653203][T10937] xt_TCPMSS: Only works on TCP SYN packets [ 209.661839][ T28] audit: type=1400 audit(2000000045.599:855): avc: denied { execmem } for pid=10939 comm="syz.4.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 209.819650][T10966] loop6: detected capacity change from 0 to 1024 [ 209.836920][ T28] audit: type=1400 audit(2000000045.793:856): avc: denied { getattr } for pid=10969 comm="syz.0.5329" path="cgroup:[4026532292]" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 209.859784][T10966] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.933812][T10966] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 210.026366][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 210.205618][T11032] netlink: 'syz.6.5356': attribute type 3 has an invalid length. [ 210.313798][T11056] xt_ecn: cannot match TCP bits for non-tcp packets [ 210.327635][T11058] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5369'. [ 210.853115][T11158] block device autoloading is deprecated and will be removed. [ 210.866744][T11162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.974429][T11182] sock: sock_timestamping_bind_phc: sock not bind to device [ 211.032029][T11194] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5436'. [ 211.130250][T11210] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 211.268193][T11238] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 211.382576][T11261] xt_ecn: cannot match TCP bits for non-tcp packets [ 211.522004][T11287] netlink: 'syz.6.5482': attribute type 27 has an invalid length. [ 211.641478][T11310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.902307][T11368] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 212.026376][T11395] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5536'. [ 212.097058][T11409] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 212.502734][T11487] ------------[ cut here ]------------ [ 212.503085][T11490] netlink: 'syz.1.5582': attribute type 30 has an invalid length. [ 212.508068][T11487] WARNING: CPU: 1 PID: 11487 at mm/page_alloc.c:5813 __alloc_pages+0x3e7/0x610 [ 212.508120][T11487] Modules linked in: [ 212.508133][T11487] CPU: 1 PID: 11487 Comm: syz.4.5579 Not tainted 6.1.129-syzkaller-00049-g1c9aeb1ce34b #0 [ 212.538242][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.548246][T11487] RIP: 0010:__alloc_pages+0x3e7/0x610 [ 212.553450][T11487] Code: 00 48 8d 5c 24 60 0f 85 9f 00 00 00 89 d1 81 e1 7f ff ff ff a9 00 00 04 00 0f 44 ca 89 ca e9 90 00 00 00 c6 05 7f 98 d7 05 01 <0f> 0b e9 eb fc ff ff 43 0f b6 44 35 00 84 c0 8b 54 24 0c 0f 85 b8 [ 212.572889][T11487] RSP: 0018:ffffc90012b87860 EFLAGS: 00010246 [ 212.578765][T11487] RAX: 0000000000000000 RBX: ffffc90012b878c0 RCX: 0000000000000000 [ 212.586615][T11487] RDX: 0000000000040d40 RSI: 0000000000000000 RDI: ffffc90012b878e8 [ 212.594461][T11487] RBP: ffffc90012b87978 R08: dffffc0000000000 R09: ffffc90012b878c0 [ 212.602454][T11487] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000000f [ 212.610460][T11487] R13: 1ffff92002570f14 R14: 0000000000040d40 R15: 1ffff92002570f10 [ 212.618467][T11487] FS: 00007f12c31a86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 212.627437][T11487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.634017][T11487] CR2: 0000200000001000 CR3: 0000000140605000 CR4: 00000000003506a0 [ 212.642029][T11487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.649884][T11487] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.658053][T11487] Call Trace: [ 212.661163][T11487] [ 212.663939][T11487] ? show_regs+0x58/0x60 [ 212.668043][T11487] ? __warn+0x160/0x3d0 [ 212.672008][T11487] ? __alloc_pages+0x3e7/0x610 [ 212.676633][T11487] ? report_bug+0x4d5/0x7d0 [ 212.680951][T11487] ? __alloc_pages+0x3e7/0x610 [ 212.685730][T11487] ? handle_bug+0x41/0x70 [ 212.690426][T11487] ? exc_invalid_op+0x1b/0x50 [ 212.694975][T11487] ? asm_exc_invalid_op+0x1b/0x20 [ 212.699981][T11487] ? __alloc_pages+0x3e7/0x610 [ 212.704648][T11487] ? prep_new_page+0x110/0x110 [ 212.709283][T11487] __kmalloc_large_node+0x9e/0x1b0 [ 212.714555][T11487] ? incfs_realloc_mount_info+0xa7/0x470 [ 212.720035][T11487] __kmalloc+0xef/0x1e0 [ 212.724055][T11487] incfs_realloc_mount_info+0xa7/0x470 [ 212.729661][T11487] incfs_alloc_mount_info+0x481/0x550 [ 212.734996][T11487] incfs_mount_fs+0x416/0xa30 [ 212.739711][T11487] ? incfs_unlink+0x90/0x90 [ 212.744061][T11487] ? vfs_parse_fs_string+0x18c/0x220 [ 212.749209][T11487] ? cap_capable+0x1d2/0x270 [ 212.753913][T11487] legacy_get_tree+0xf1/0x190 [ 212.758496][T11487] ? incfs_unlink+0x90/0x90 [ 212.763077][T11487] vfs_get_tree+0x88/0x290 [ 212.767375][T11487] do_new_mount+0x2ba/0xb30 [ 212.771684][T11487] ? do_move_mount_old+0x160/0x160 [ 212.776736][T11487] ? security_capable+0x87/0xb0 [ 212.781718][T11487] ? ns_capable+0x89/0xe0 [ 212.786174][T11487] path_mount+0x671/0x1070 [ 212.790441][T11487] ? user_path_at_empty+0x14e/0x1a0 [ 212.795516][T11487] __se_sys_mount+0x2c4/0x3b0 [ 212.799979][T11487] ? __this_cpu_preempt_check+0x13/0x20 [ 212.805582][T11487] ? __x64_sys_mount+0xd0/0xd0 [ 212.810131][T11487] ? fpregs_restore_userregs+0x130/0x290 [ 212.815653][T11487] __x64_sys_mount+0xbf/0xd0 [ 212.820028][T11487] x64_sys_call+0x49d/0x9a0 [ 212.824402][T11487] do_syscall_64+0x3b/0xb0 [ 212.828617][T11487] ? clear_bhb_loop+0x55/0xb0 [ 212.833197][T11487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.838863][T11487] RIP: 0033:0x7f12c238d169 [ 212.843174][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.862577][T11487] RSP: 002b:00007f12c31a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.870856][T11487] RAX: ffffffffffffffda RBX: 00007f12c25a5fa0 RCX: 00007f12c238d169 [ 212.878611][T11487] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000000 [ 212.881408][T11518] x_tables: duplicate underflow at hook 2 [ 212.887096][T11487] RBP: 00007f12c240e2a0 R08: 0000200000000200 R09: 0000000000000000 [ 212.900448][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.908275][T11487] R13: 0000000000000000 R14: 00007f12c25a5fa0 R15: 00007ffdc9c0f518 [ 212.916038][T11487] [ 212.918925][T11487] ---[ end trace 0000000000000000 ]--- [ 213.025460][T11532] device veth1_macvtap left promiscuous mode [ 213.036771][T11487] incfs: Error allocating mount info. -12 [ 213.049494][T11487] incfs: mount failed -12 [ 213.164958][T11560] netlink: 'syz.0.5615': attribute type 49 has an invalid length. [ 213.196252][T11560] netlink: 'syz.0.5615': attribute type 49 has an invalid length. [ 213.580294][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 213.580313][ T28] audit: type=1326 audit(2000000049.810:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.0.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 213.621546][ T28] audit: type=1326 audit(2000000049.810:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.0.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 213.734189][ T28] audit: type=1326 audit(2000000049.810:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.0.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 213.826421][ T28] audit: type=1326 audit(2000000049.896:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 213.860131][ T28] audit: type=1326 audit(2000000049.896:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 213.903226][ T28] audit: type=1326 audit(2000000050.003:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 213.961499][T11689] netlink: 'syz.4.5680': attribute type 7 has an invalid length. [ 213.969074][T11689] netlink: 'syz.4.5680': attribute type 8 has an invalid length. [ 213.976973][ T28] audit: type=1326 audit(2000000050.003:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.0.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe607f8d169 code=0x7ffc0000 [ 214.037295][T11704] xt_l2tp: missing protocol rule (udp|l2tpip) [ 214.049123][T11705] futex_wake_op: syz.4.5688 tries to shift op by 32; fix this program [ 214.109171][T11717] xt_TCPMSS: Only works on TCP SYN packets [ 214.186630][T11731] netlink: 'syz.4.5701': attribute type 3 has an invalid length. [ 214.310998][T11756] netlink: 'syz.0.5712': attribute type 15 has an invalid length. [ 214.326735][T11761] xt_TCPMSS: Only works on TCP SYN packets [ 214.376237][T11771] loop5: detected capacity change from 0 to 512 [ 214.442052][T11771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 214.451616][T11771] ext4 filesystem being mounted at /990/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.482881][ T998] EXT4-fs (loop5): unmounting filesystem. [ 214.667935][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5746'. [ 214.770926][T11845] xt_l2tp: v2 doesn't support IP mode [ 215.198008][T11925] netlink: 'syz.6.5795': attribute type 3 has an invalid length. [ 215.318435][T11943] incfs: Options parsing error. -22 [ 215.334169][T11943] incfs: mount failed -22 [ 215.545678][T11987] netlink: 'syz.1.5824': attribute type 1 has an invalid length. [ 215.753628][ T28] audit: type=1400 audit(2000000052.137:908): avc: denied { read } for pid=12015 comm="syz.4.5840" lport=64 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.999970][T12058] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 216.283673][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5885'. [ 216.342149][ T28] audit: type=1326 audit(2000000052.770:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.4.5889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c238d169 code=0x7ffc0000 [ 216.403543][ T28] audit: type=1326 audit(2000000052.802:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.4.5889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c238d169 code=0x7ffc0000 [ 216.429575][T12135] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 216.837640][T12197] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 216.934072][T12211] loop5: detected capacity change from 0 to 512 [ 216.966175][T12211] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.018604][T12211] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 217.022785][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5938'. [ 217.027087][T12211] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 217.043357][T12211] System zones: 0-1, 15-15, 18-18, 34-34 [ 217.049810][T12211] EXT4-fs (loop5): orphan cleanup on readonly fs [ 217.056468][T12211] EXT4-fs warning (device loop5): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 217.071819][T12211] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 217.078821][T12211] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5933: bg 0: block 40: padding at end of block bitmap is not set [ 217.095066][T12211] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 217.104489][T12211] EXT4-fs (loop5): 1 truncate cleaned up [ 217.109988][T12211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 217.132671][T12211] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.5933: bad symlink. [ 217.152599][ T998] EXT4-fs (loop5): unmounting filesystem. [ 217.241800][T12246] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5949'. [ 217.307265][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5957'. [ 217.648040][T12338] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5994'. [ 217.680031][T12338] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5994'. [ 217.697752][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5994'. [ 218.259234][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 218.259253][ T28] audit: type=1326 audit(224.459:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 218.303306][ T28] audit: type=1326 audit(224.502:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 218.342697][ T28] audit: type=1326 audit(224.502:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12463 comm="syz.1.6057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 218.378935][ T28] audit: type=1400 audit(224.545:941): avc: denied { ioctl } for pid=12473 comm="syz.6.6062" path="socket:[52817]" dev="sockfs" ino=52817 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.512276][ T28] audit: type=1400 audit(224.738:942): avc: denied { wake_alarm } for pid=12507 comm="syz.1.6078" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.600867][ T28] audit: type=1326 audit(224.781:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.6079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 218.671647][ T28] audit: type=1326 audit(224.781:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.6079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 218.694797][T12536] ip6t_REJECT: ECHOREPLY is not supported [ 218.750646][ T28] audit: type=1326 audit(224.781:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.6079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 218.818074][ T28] audit: type=1326 audit(224.781:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.6079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 218.841120][ T28] audit: type=1326 audit(224.781:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.5.6079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac43f8d169 code=0x7ffc0000 [ 219.022387][T12601] xt_ecn: cannot match TCP bits for non-tcp packets [ 219.026465][T12602] xt_hashlimit: max too large, truncated to 1048576 [ 219.149724][T12628] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 219.294530][T12656] SELinux: Context : is not valid (left unmapped). [ 219.996293][T12785] device veth1_macvtap left promiscuous mode [ 220.277940][T12836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6239'. [ 220.301802][T12836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6239'. [ 220.326801][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6239'. [ 220.371832][T12854] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 220.448086][T12871] xt_hashlimit: max too large, truncated to 1048576 [ 220.454651][T12871] xt_hashlimit: overflow, try lower: 0/0 [ 220.859865][T12954] netlink: 'syz.6.6299': attribute type 16 has an invalid length. [ 221.340347][T13033] bridge0: port 3(dummy0) entered blocking state [ 221.348523][T13033] bridge0: port 3(dummy0) entered disabled state [ 221.355789][T13033] device dummy0 entered promiscuous mode [ 221.362740][T13033] bridge0: port 3(dummy0) entered blocking state [ 221.368938][T13033] bridge0: port 3(dummy0) entered listening state [ 221.948225][T13105] xt_connbytes: Forcing CT accounting to be enabled [ 221.949110][T13107] netlink: 'syz.4.6374': attribute type 9 has an invalid length. [ 222.006944][T13107] __nla_validate_parse: 4 callbacks suppressed [ 222.006965][T13107] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6374'. [ 222.394023][T13195] loop1: detected capacity change from 0 to 256 [ 222.403272][T13194] syz.6.6417 (13194): /proc/13191/oom_adj is deprecated, please use /proc/13191/oom_score_adj instead. [ 222.413399][T13195] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.431363][T13199] x_tables: unsorted entry at hook 2 [ 222.436778][T13195] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 222.482629][T13195] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 222.803849][T13266] loop5: detected capacity change from 0 to 512 [ 222.852432][T13266] EXT4-fs error (device loop5): ext4_init_orphan_info:586: comm syz.5.6451: inode #0: comm syz.5.6451: iget: illegal inode # [ 222.866247][T13266] EXT4-fs (loop5): get orphan inode failed [ 222.872367][T13266] EXT4-fs (loop5): mount failed [ 222.903156][T13284] netlink: 288 bytes leftover after parsing attributes in process `syz.4.6458'. [ 223.088102][T13323] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 223.090276][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 223.090296][ T28] audit: type=1400 audit(229.639:999): avc: denied { write } for pid=13319 comm="syz.5.6479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 223.390964][T13384] xt_connbytes: Forcing CT accounting to be enabled [ 223.403254][T13384] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 223.425055][ T19] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 223.462364][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6515'. [ 223.477978][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6515'. [ 223.520237][T13404] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 223.523290][ T28] audit: type=1326 audit(230.110:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13405 comm="syz.6.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 223.578437][ T28] audit: type=1326 audit(230.153:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13405 comm="syz.6.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 223.603311][ T19] usb 2-1: config 0 has an invalid interface number: 234 but max is 0 [ 223.617131][ T19] usb 2-1: config 0 has no interface number 0 [ 223.638871][ T19] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=b7.44 [ 223.658237][ T28] audit: type=1326 audit(230.153:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13405 comm="syz.6.6520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 223.667767][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.738646][ T19] usb 2-1: Product: syz [ 223.745502][ T19] usb 2-1: Manufacturer: syz [ 223.749937][ T19] usb 2-1: SerialNumber: syz [ 223.768772][ T19] usb 2-1: config 0 descriptor?? [ 223.784226][ T19] usb 2-1: bad CDC descriptors [ 223.789817][ T19] usb 2-1: unsupported MDLM descriptors [ 223.845118][T13457] syz.5.6544 uses obsolete (PF_INET,SOCK_PACKET) [ 223.855519][ T28] audit: type=1400 audit(230.464:1003): avc: denied { write } for pid=13456 comm="syz.5.6544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.888165][T13461] netlink: 'syz.5.6547': attribute type 1 has an invalid length. [ 223.951784][T13473] xt_l2tp: invalid flags combination: 4 [ 223.974915][ T19] usb 2-1: USB disconnect, device number 91 [ 224.097500][T13498] netlink: 'syz.5.6565': attribute type 3 has an invalid length. [ 224.105167][T13498] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6565'. [ 224.120708][T13500] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 224.205752][T13512] xt_l2tp: missing protocol rule (udp|l2tpip) [ 224.277306][ T28] audit: type=1400 audit(230.925:1004): avc: denied { read write } for pid=998 comm="syz-executor" name="loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.286087][T13520] xt_TPROXY: Can be used only with -p tcp or -p udp [ 224.316805][ T28] audit: type=1400 audit(230.925:1005): avc: denied { open } for pid=998 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.351284][ T28] audit: type=1400 audit(230.925:1006): avc: denied { ioctl } for pid=998 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.377343][ T28] audit: type=1400 audit(230.958:1007): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.399870][ T28] audit: type=1400 audit(231.033:1008): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 224.606584][T13550] tc_dump_action: action bad kind [ 224.961741][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6618'. [ 225.626050][T13705] loop1: detected capacity change from 0 to 512 [ 225.641110][T13705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.649210][T13702] loop6: detected capacity change from 0 to 512 [ 225.671696][T13702] EXT4-fs error (device loop6): ext4_init_orphan_info:586: comm syz.6.6665: inode #0: comm syz.6.6665: iget: illegal inode # [ 225.685655][T13702] EXT4-fs (loop6): get orphan inode failed [ 225.691954][T13702] EXT4-fs (loop6): mount failed [ 225.702315][T13705] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.742053][ T997] EXT4-fs (loop1): unmounting filesystem. [ 225.839620][T13727] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.6677'. [ 226.205219][T13800] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6710'. [ 226.335484][T13823] x_tables: duplicate entry at hook 2 [ 226.411639][T13835] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 226.564426][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6741'. [ 226.578021][T13864] xt_CT: No such helper "netbios-ns" [ 226.579277][T13862] tc_dump_action: action bad kind [ 226.919681][T13921] xt_TCPMSS: Only works on TCP SYN packets [ 227.077886][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6784'. [ 227.112617][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6784'. [ 227.131279][T13952] tc_dump_action: action bad kind [ 227.433047][T14014] xt_connbytes: Forcing CT accounting to be enabled [ 227.688607][T14075] device veth0_vlan left promiscuous mode [ 227.830043][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 227.830060][ T28] audit: type=1400 audit(234.732:1057): avc: denied { map_read map_write } for pid=14102 comm="syz.0.6858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 227.877428][ T28] audit: type=1326 audit(234.765:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.1.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 227.906187][ T28] audit: type=1326 audit(234.765:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.1.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 227.942896][ T28] audit: type=1326 audit(234.765:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.1.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 227.977891][ T28] audit: type=1326 audit(234.765:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.1.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 228.058292][ T28] audit: type=1326 audit(234.765:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.1.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff527f8d169 code=0x7ffc0000 [ 228.092641][ T28] audit: type=1400 audit(234.925:1063): avc: denied { wake_alarm } for pid=14128 comm="syz.1.6871" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.133130][ T28] audit: type=1400 audit(234.947:1064): avc: denied { mount } for pid=14130 comm="syz.5.6872" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 228.241958][ T28] audit: type=1326 audit(235.172:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.4.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c238d169 code=0x7ffc0000 [ 228.329350][ T28] audit: type=1326 audit(235.172:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.4.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f12c238d169 code=0x7ffc0000 [ 228.479845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.186196][T14365] netlink: 'syz.1.6988': attribute type 12 has an invalid length. [ 229.414992][T14344] loop5: detected capacity change from 0 to 40427 [ 229.431516][T14344] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 229.454019][T14344] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 229.548168][T14344] F2FS-fs (loop5): Found nat_bits in checkpoint [ 229.579805][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7020'. [ 229.704856][T14344] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 229.719778][T14344] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 229.745896][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7031'. [ 229.812428][T14344] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 229.826856][T14344] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 229.902668][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7045'. [ 230.119032][T14522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7067'. [ 230.421038][T14581] netlink: 'syz.1.7093': attribute type 1 has an invalid length. [ 230.436599][T14583] xt_bpf: check failed: parse error [ 230.529923][T14600] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7102'. [ 230.754843][T14631] device bridge1 entered promiscuous mode [ 230.784943][T14635] device ip6erspan0 entered promiscuous mode [ 230.898048][T14656] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 231.234816][T14717] netlink: 'syz.6.7158': attribute type 5 has an invalid length. [ 231.712075][T14812] xt_CT: No such helper "syz0" [ 231.809947][T14827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.253800][T14890] xt_policy: neither incoming nor outgoing policy selected [ 232.329096][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7248'. [ 232.599839][T14939] xt_hashlimit: size too large, truncated to 1048576 [ 232.622472][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 232.622489][ T28] audit: type=1400 audit(239.869:1127): avc: denied { sqpoll } for pid=14942 comm="syz.5.7269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.628797][T14939] xt_hashlimit: max too large, truncated to 1048576 [ 232.692933][ T28] audit: type=1400 audit(239.901:1128): avc: denied { create } for pid=14942 comm="syz.5.7269" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 232.760904][ T28] audit: type=1400 audit(239.901:1129): avc: denied { map } for pid=14942 comm="syz.5.7269" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 232.857456][ T28] audit: type=1400 audit(239.901:1130): avc: denied { read write } for pid=14942 comm="syz.5.7269" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 232.935054][ T28] audit: type=1326 audit(240.127:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 233.004959][ T28] audit: type=1326 audit(240.127:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 233.015845][T14992] xt_bpf: check failed: parse error [ 233.081229][ T28] audit: type=1326 audit(240.127:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14971 comm="syz.6.7284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241ad8d169 code=0x7ffc0000 [ 233.147181][T15015] loop6: detected capacity change from 0 to 256 [ 233.164510][ T28] audit: type=1400 audit(240.427:1134): avc: denied { listen } for pid=15009 comm="syz.0.7304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 233.226882][T15015] FAT-fs (loop6): Directory bread(block 64) failed [ 233.241863][T15015] FAT-fs (loop6): Directory bread(block 65) failed [ 233.261686][T15015] FAT-fs (loop6): Directory bread(block 66) failed [ 233.276240][ T28] audit: type=1400 audit(240.577:1135): avc: denied { getopt } for pid=15029 comm="syz.4.7311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.301868][T15015] FAT-fs (loop6): Directory bread(block 67) failed [ 233.331277][T15015] FAT-fs (loop6): Directory bread(block 68) failed [ 233.338610][T15015] FAT-fs (loop6): Directory bread(block 69) failed [ 233.345077][T15015] FAT-fs (loop6): Directory bread(block 70) failed [ 233.352025][T15015] FAT-fs (loop6): Directory bread(block 71) failed [ 233.363184][ T28] audit: type=1400 audit(240.663:1136): avc: denied { create } for pid=15041 comm="syz.4.7317" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 233.394085][T15044] tmpfs: Bad value for 'context' [ 233.394301][T15015] FAT-fs (loop6): Directory bread(block 72) failed [ 233.416919][T15015] FAT-fs (loop6): Directory bread(block 73) failed [ 233.525591][T15054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7322'. [ 233.573447][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7322'. [ 233.941046][T15095] netlink: 'syz.1.7343': attribute type 4 has an invalid length. [ 234.569416][T15167] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7378'. [ 234.620815][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7378'. [ 234.639951][T15111] loop6: detected capacity change from 0 to 40427 [ 234.656948][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7378'. [ 234.674910][T15111] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 234.694102][T15111] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 234.730658][T15111] F2FS-fs (loop6): Found nat_bits in checkpoint [ 234.839730][T15111] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 234.839759][T15111] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 234.896642][T15111] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 234.917768][T15111] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 234.941871][ T19] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 235.050290][T15240] netlink: 'syz.4.7414': attribute type 1 has an invalid length. [ 235.130513][ T19] usb 6-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 235.147931][ T19] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 235.157245][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 235.169681][T15257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7421'. [ 235.211651][ T19] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 235.232032][ T19] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 235.240745][ T19] usb 6-1: Product: syz [ 235.244736][ T19] usb 6-1: Manufacturer: syz [ 235.253895][ T19] usb 6-1: SerialNumber: syz [ 235.268436][ T19] usb 6-1: config 0 descriptor?? [ 235.474192][ T19] snd-usb-audio: probe of 6-1:0.0 failed with error -2 [ 235.504712][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 235.662748][ T24] usb 6-1: USB disconnect, device number 90 [ 235.687408][T15352] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7467'. [ 235.705985][ C0] bridge0: port 3(dummy0) entered learning state [ 235.719349][T15354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7469'. [ 235.728327][T15352] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7467'. [ 235.747483][T15352] netlink: 'syz.6.7467': attribute type 2 has an invalid length. [ 235.844619][T15378] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.7479' sets config #1 [ 236.130101][T15442] netlink: 'syz.6.7510': attribute type 30 has an invalid length. [ 236.264011][T15471] xt_limit: Overflow, try lower: 167772/2147483648 [ 236.451878][ T24] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 236.639446][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.657388][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.677684][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 236.695373][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.713276][ T24] usb 7-1: SerialNumber: syz [ 236.724231][ T24] usb 7-1: 0:2 : does not exist [ 237.064555][T15495] loop1: detected capacity change from 0 to 131072 [ 237.099328][ T24] usb 7-1: USB disconnect, device number 96 [ 237.109222][T15495] F2FS-fs (loop1): invalid crc value [ 237.143673][T15495] F2FS-fs (loop1): Found nat_bits in checkpoint [ 237.273204][T15495] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 237.373178][T15624] __nla_validate_parse: 2 callbacks suppressed [ 237.373198][T15624] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7600'. [ 237.402742][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7600'. [ 237.424130][T15624] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7600'. [ 237.438230][T15624] netlink: 'syz.4.7600': attribute type 3 has an invalid length. [ 237.446198][T15624] netlink: 'syz.4.7600': attribute type 2 has an invalid length. [ 237.468599][T15624] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7600'. [ 237.513842][T15642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7607'. [ 237.731463][T15672] xt_connbytes: Forcing CT accounting to be enabled [ 237.766277][T15672] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 237.788962][T15680] xt_TCPMSS: Only works on TCP SYN packets [ 237.904293][T15704] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 237.937110][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 237.937127][ T28] audit: type=1400 audit(245.574:1198): avc: denied { mounton } for pid=15708 comm="syz.4.7639" path="/1366/bus" dev="tmpfs" ino=6929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 237.937151][T15707] loop1: detected capacity change from 0 to 128 [ 237.943142][T15710] virtio-fs: tag <(null)> not found [ 238.161437][ T28] audit: type=1400 audit(245.810:1199): avc: denied { accept } for pid=15728 comm="syz.0.7649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 238.249207][T15742] xt_policy: too many policy elements [ 238.537657][ T28] audit: type=1400 audit(246.218:1200): avc: granted { setsecparam } for pid=15784 comm="syz.5.7678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 238.593433][ T28] audit: type=1400 audit(246.229:1201): avc: granted { setsecparam } for pid=15784 comm="syz.5.7678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 238.623009][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7683'. [ 238.791023][T15830] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7699'. [ 238.913738][T15848] netlink: 'syz.0.7706': attribute type 9 has an invalid length. [ 238.941619][T15848] netlink: 'syz.0.7706': attribute type 6 has an invalid length. [ 239.100442][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7718'. [ 239.129520][T15821] loop5: detected capacity change from 0 to 40427 [ 239.156115][T15821] F2FS-fs (loop5): invalid crc value [ 239.180081][T15876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7722'. [ 239.190209][T15821] F2FS-fs (loop5): Found nat_bits in checkpoint [ 239.311128][T15897] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7731'. [ 239.341757][ T28] audit: type=1400 audit(247.076:1202): avc: denied { lock } for pid=15900 comm="syz.0.7733" path="socket:[63826]" dev="sockfs" ino=63826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 239.377314][T15821] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 239.423178][ T28] audit: type=1400 audit(247.129:1203): avc: denied { mount } for pid=15820 comm="syz.5.7695" name="/" dev="loop5" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 239.482090][ T28] audit: type=1400 audit(247.129:1204): avc: denied { read write } for pid=15820 comm="syz.5.7695" name="loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.514971][ T28] audit: type=1400 audit(247.129:1205): avc: denied { read write open } for pid=15820 comm="syz.5.7695" path="/dev/loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.610263][ T28] audit: type=1400 audit(247.129:1206): avc: denied { ioctl } for pid=15820 comm="syz.5.7695" path="/dev/loop5" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 239.706395][ T28] audit: type=1400 audit(247.140:1207): avc: denied { create } for pid=15903 comm="syz.6.7734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 239.778355][T15930] x_tables: unsorted underflow at hook 3 [ 242.620655][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 242.620675][ T28] audit: type=1400 audit(250.593:1263): avc: denied { read write } for pid=15945 comm="syz.1.7763" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.675605][ T28] audit: type=1400 audit(250.625:1264): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 242.701079][ T28] audit: type=1400 audit(250.625:1265): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.723077][ T28] audit: type=1400 audit(250.625:1266): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.723778][T15954] kernel profiling enabled (shift: 17) [ 242.744611][ T28] audit: type=1400 audit(250.625:1267): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.774094][ T28] audit: type=1400 audit(250.625:1268): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.796606][ T28] audit: type=1400 audit(250.647:1269): avc: denied { create } for pid=15951 comm="syz.5.7754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 242.816399][ T28] audit: type=1400 audit(250.647:1270): avc: denied { read write open } for pid=15945 comm="syz.1.7763" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.842483][ T28] audit: type=1400 audit(250.647:1271): avc: denied { ioctl } for pid=15945 comm="syz.1.7763" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.867691][ T28] audit: type=1400 audit(250.647:1272): avc: denied { getopt } for pid=15951 comm="syz.5.7754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 242.908533][T15960] xt_hashlimit: max too large, truncated to 1048576 [ 242.941979][ T754] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 243.119718][ T754] usb 2-1: Using ep0 maxpacket: 16 [ 243.133549][ T754] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 243.166343][ T754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.193635][ T754] usb 2-1: Product: syz [ 243.197681][ T754] usb 2-1: Manufacturer: syz [ 243.226516][ T754] usb 2-1: SerialNumber: syz [ 243.248975][ T754] r8152-cfgselector 2-1: config 0 descriptor?? [ 243.576896][T16031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7796'. [ 243.646702][ T754] r8152-cfgselector 2-1: Unknown version 0x0000 [ 243.661085][ T754] r8152-cfgselector 2-1: bad CDC descriptors [ 243.697996][ T754] r8152-cfgselector 2-1: Unknown version 0x0000 [ 243.717285][ T754] r8152-cfgselector 2-1: USB disconnect, device number 92 [ 243.835171][T16063] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 243.881417][T16070] IPv6: sit1: Disabled Multicast RS [ 243.926694][T16074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7816'. [ 243.985158][T16078] netlink: 'syz.5.7819': attribute type 5 has an invalid length. [ 244.530489][T16157] @ÿ: renamed from bond_slave_0 [ 244.622354][T16168] xt_l2tp: v2 tid > 0xffff: 134217728 [ 244.901683][T16203] netlink: 'syz.1.7879': attribute type 6 has an invalid length. [ 245.757692][T16319] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 245.985212][T16342] incfs: Options parsing error. -22 [ 245.990283][T16342] incfs: mount failed -22 [ 246.012954][T16348] netlink: 'syz.1.7949': attribute type 9 has an invalid length. [ 246.037499][T16348] netlink: 'syz.1.7949': attribute type 7 has an invalid length. [ 246.065465][T16348] netlink: 'syz.1.7949': attribute type 8 has an invalid length. [ 246.256828][T16377] sock: sock_timestamping_bind_phc: sock not bind to device [ 246.394283][T16392] loop6: detected capacity change from 0 to 512 [ 246.412345][T16392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.452698][T16392] EXT4-fs: Ignoring removed i_version option [ 246.500125][T16392] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 246.515036][T16392] EXT4-fs (loop6): 1 orphan inode deleted [ 246.520600][T16392] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 246.616037][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 247.095275][T16489] netlink: 'syz.6.8018': attribute type 32 has an invalid length. [ 247.121152][T16494] xt_hashlimit: max too large, truncated to 1048576 [ 247.156708][T16494] xt_limit: Overflow, try lower: 0/0 [ 247.306642][ T28] kauditd_printk_skb: 849 callbacks suppressed [ 247.306659][ T28] audit: type=1400 audit(255.624:2122): avc: denied { read write } for pid=997 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.419306][ T28] audit: type=1400 audit(255.667:2123): avc: denied { create } for pid=16514 comm="syz.0.8033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.440172][T16525] xt_hashlimit: max too large, truncated to 1048576 [ 247.441083][ T28] audit: type=1400 audit(255.677:2124): avc: denied { write } for pid=16514 comm="syz.0.8033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.441113][ T28] audit: type=1400 audit(255.677:2125): avc: denied { read write open } for pid=997 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.441142][ T28] audit: type=1400 audit(255.677:2126): avc: denied { ioctl } for pid=997 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.441171][ T28] audit: type=1400 audit(255.688:2127): avc: denied { read write } for pid=999 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.441206][ T28] audit: type=1400 audit(255.688:2128): avc: denied { read write open } for pid=999 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.441235][ T28] audit: type=1400 audit(255.688:2129): avc: denied { ioctl } for pid=999 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.441263][ T28] audit: type=1400 audit(255.720:2130): avc: denied { read write } for pid=998 comm="syz-executor" name="loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.441290][ T28] audit: type=1400 audit(255.720:2131): avc: denied { open } for pid=998 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.532987][T16534] loop5: detected capacity change from 0 to 512 [ 247.706949][T16534] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 247.736505][T16534] EXT4-fs (loop5): 1 truncate cleaned up [ 247.741995][T16534] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 247.805774][ T998] EXT4-fs (loop5): unmounting filesystem. [ 248.195812][T16600] netlink: 292 bytes leftover after parsing attributes in process `syz.0.8072'. [ 248.358548][T16619] @ÿ: renamed from bond_slave_0 [ 248.480172][T16632] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8088'. [ 248.571826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.592957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.658805][T16655] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 248.885784][T16687] loop5: detected capacity change from 0 to 256 [ 248.914646][T16687] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 248.998051][T16702] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 248.998333][T16699] loop6: detected capacity change from 0 to 1024 [ 249.035462][T16705] xt_hashlimit: invalid interval [ 249.040901][T16702] overlayfs: missing 'lowerdir' [ 249.068206][T16699] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 249.113507][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 249.145516][T16719] ipt_REJECT: TCP_RESET invalid for non-tcp [ 249.333086][T16737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.340314][T16737] IPv6: NLM_F_CREATE should be set when creating new route [ 249.347340][T16737] IPv6: NLM_F_CREATE should be set when creating new route [ 249.553935][T16766] xt_hashlimit: max too large, truncated to 1048576 [ 249.849571][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8170'. [ 250.026594][ C0] bridge0: port 3(dummy0) entered forwarding state [ 250.032942][ C0] bridge0: topology change detected, propagating [ 250.113847][T16835] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8187'. [ 250.278782][T16858] x_tables: duplicate underflow at hook 3 [ 252.272892][ T28] kauditd_printk_skb: 575 callbacks suppressed [ 252.272912][ T28] audit: type=1400 audit(260.924:2707): avc: denied { bpf } for pid=16911 comm="syz.4.8226" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 252.302721][T16917] xt_l2tp: v2 doesn't support IP mode [ 254.116229][T16925] netlink: 'syz.1.8228': attribute type 2 has an invalid length. [ 254.165703][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8233'. [ 254.175595][ T28] audit: type=1400 audit(260.924:2708): avc: denied { prog_load } for pid=16911 comm="syz.4.8226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 254.195351][ T28] audit: type=1400 audit(260.924:2709): avc: denied { bpf } for pid=16911 comm="syz.4.8226" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.220327][ T28] audit: type=1400 audit(260.924:2710): avc: denied { perfmon } for pid=16911 comm="syz.4.8226" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.243797][ T28] audit: type=1400 audit(260.924:2711): avc: denied { prog_run } for pid=16911 comm="syz.4.8226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 254.263537][ T28] audit: type=1400 audit(260.945:2712): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 254.357707][ T28] audit: type=1400 audit(260.945:2713): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.427103][ T28] audit: type=1400 audit(260.945:2714): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 254.456450][ T998] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.461039][T16957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.570355][T16973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.577430][T16973] IPv6: NLM_F_CREATE should be set when creating new route [ 254.584477][T16973] IPv6: NLM_F_CREATE should be set when creating new route [ 255.027828][T17040] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8285'. [ 255.223318][T17072] netlink: 'syz.5.8301': attribute type 3 has an invalid length. [ 255.266956][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8304'. [ 255.340980][T17083] loop5: detected capacity change from 0 to 1024 [ 255.389347][T17083] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 255.417828][T17083] EXT4-fs (loop5): orphan cleanup on readonly fs [ 255.458661][T17083] EXT4-fs warning (device loop5): ext4_enable_quotas:7017: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 255.480537][T17096] xt_NFQUEUE: number of total queues is 0 [ 255.497461][T17083] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 255.533891][T17083] EXT4-fs (loop5): 1 truncate cleaned up [ 255.549459][T17083] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.580662][T17103] bridge0: port 3(veth0_to_bridge) entered blocking state [ 255.597188][T17083] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.8306: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 255.621346][T17103] bridge0: port 3(veth0_to_bridge) entered disabled state [ 255.629477][T17103] device veth0_to_bridge entered promiscuous mode [ 255.636259][T17103] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.680173][ T998] EXT4-fs (loop5): unmounting filesystem. [ 255.689235][T17103] bridge0: port 3(veth0_to_bridge) entered blocking state [ 255.696216][T17103] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 255.796645][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8326'. [ 255.899885][T17135] netlink: 'syz.5.8331': attribute type 3 has an invalid length. [ 256.042352][T17149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.091712][T17157] loop6: detected capacity change from 0 to 2048 [ 256.175737][T17157] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 256.309201][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 256.593685][T17219] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8371'. [ 256.783140][T17245] tc_dump_action: action bad kind [ 256.914045][T17265] netlink: 'syz.6.8394': attribute type 10 has an invalid length. [ 256.934927][ T28] kauditd_printk_skb: 531 callbacks suppressed [ 256.934945][ T28] audit: type=1400 audit(265.956:3241): avc: denied { create } for pid=17266 comm="syz.0.8395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.050608][ T28] audit: type=1400 audit(265.956:3242): avc: denied { write } for pid=17266 comm="syz.0.8395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.137946][ T28] audit: type=1400 audit(265.956:3243): avc: denied { read } for pid=17266 comm="syz.0.8395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.198721][ T28] audit: type=1400 audit(265.956:3244): avc: denied { read write } for pid=998 comm="syz-executor" name="loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.209994][T17299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.236810][ T999] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.247669][T17300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.256681][ T999] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 257.258037][ T28] audit: type=1400 audit(265.956:3245): avc: denied { open } for pid=998 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.273204][T17299] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 257.368559][T17308] netlink: 165 bytes leftover after parsing attributes in process `syz.0.8414'. [ 257.772613][ T1017] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 257.940181][ T1017] usb 5-1: Using ep0 maxpacket: 16 [ 257.948025][ T1017] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 257.980479][ T1017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.991961][T17379] netlink: 'syz.0.8448': attribute type 153 has an invalid length. [ 258.004649][ T1017] usb 5-1: Product: syz [ 258.018726][ T1017] usb 5-1: Manufacturer: syz [ 258.024591][ T1017] usb 5-1: SerialNumber: syz [ 258.036760][ T1017] r8152-cfgselector 5-1: config 0 descriptor?? [ 258.135383][T17390] netlink: 'syz.0.8453': attribute type 5 has an invalid length. [ 258.367783][T17414] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8466'. [ 258.452997][ T1017] r8152-cfgselector 5-1: Unknown version 0x0000 [ 258.461110][ T1017] r8152-cfgselector 5-1: bad CDC descriptors [ 258.469199][T17424] loop5: detected capacity change from 0 to 1024 [ 258.485345][ T1017] r8152-cfgselector 5-1: Unknown version 0x0000 [ 258.492087][T17428] loop1: detected capacity change from 0 to 512 [ 258.497792][ T1017] r8152-cfgselector 5-1: USB disconnect, device number 89 [ 258.507952][T17427] loop6: detected capacity change from 0 to 512 [ 258.554430][T17424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 258.609323][T17427] EXT4-fs (loop6): 1 orphan inode deleted [ 258.619547][T15944] EXT4-fs error (device loop6): ext4_release_dquot:6805: comm kworker/u4:6: Failed to release dquot type 1 [ 258.635880][T17427] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 258.665819][ T998] EXT4-fs (loop5): unmounting filesystem. [ 258.717924][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 258.991889][T17474] loop6: detected capacity change from 0 to 128 [ 259.045298][T17474] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 259.171615][T17488] incfs: Can't find or create .index dir in ./file0 [ 259.178080][T17488] incfs: mount failed -1 [ 259.323327][T17506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8507'. [ 259.502035][T17526] xt_hashlimit: size too large, truncated to 1048576 [ 259.599286][ T1017] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 259.657611][T17516] loop6: detected capacity change from 0 to 40427 [ 259.685999][T17516] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 259.693704][T17516] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 259.710753][T17516] F2FS-fs (loop6): invalid crc value [ 259.739193][T17516] F2FS-fs (loop6): Found nat_bits in checkpoint [ 259.785695][ T1017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 259.812161][ T1017] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.830507][ T1017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.856769][T17516] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 259.865881][T17516] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 259.865895][ T1017] usb 2-1: Product: syz [ 259.865915][ T1017] usb 2-1: Manufacturer: syz [ 259.904932][ T1017] usb 2-1: SerialNumber: syz [ 259.919230][ T1017] usb 2-1: config 0 descriptor?? [ 259.932578][T17549] loop5: detected capacity change from 0 to 1024 [ 259.952402][T17549] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 259.962625][ T1002] syz-executor: attempt to access beyond end of device [ 259.962625][ T1002] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.963750][T17549] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 259.996767][T17549] EXT4-fs error (device loop5): ext4_get_journal_inode:5710: inode #5: comm syz.5.8525: unexpected bad inode w/o EXT4_IGET_BAD [ 260.046686][T17549] EXT4-fs (loop5): no journal found [ 260.051733][T17549] EXT4-fs (loop5): can't get journal size [ 260.059533][T17549] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 260.084755][T17559] No source specified [ 260.129461][ T998] EXT4-fs (loop5): unmounting filesystem. [ 260.321779][ T1017] usb 2-1: USB disconnect, device number 93 [ 260.361565][T17580] netlink: 'syz.6.8527': attribute type 153 has an invalid length. [ 260.407712][T17583] loop5: detected capacity change from 0 to 256 [ 260.444929][T17583] exfat: Deprecated parameter 'utf8' [ 260.478310][T17583] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 261.021017][T17645] loop6: detected capacity change from 0 to 128 [ 261.046031][T17648] netlink: 'syz.1.8573': attribute type 8 has an invalid length. [ 261.073723][T17645] EXT4-fs: Ignoring removed nobh option [ 261.102625][T17645] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 261.155915][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 261.462941][T17684] tipc: Enabling of bearer rejected, failed to enable media [ 261.611146][ T28] kauditd_printk_skb: 1068 callbacks suppressed [ 261.611162][ T28] audit: type=1400 audit(270.966:4309): avc: denied { read write } for pid=998 comm="syz-executor" name="loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.688439][ T28] audit: type=1400 audit(270.966:4310): avc: denied { bpf } for pid=17696 comm="syz.0.8596" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.726274][T17705] loop5: detected capacity change from 0 to 1024 [ 261.734810][ T28] audit: type=1400 audit(270.977:4311): avc: denied { read write } for pid=999 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.801399][ T28] audit: type=1400 audit(270.977:4312): avc: denied { open } for pid=999 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.832082][T17705] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 261.844447][ T28] audit: type=1400 audit(270.977:4313): avc: denied { ioctl } for pid=999 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.874459][ T28] audit: type=1400 audit(270.998:4314): avc: denied { read write open } for pid=998 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.913860][ T28] audit: type=1400 audit(270.998:4315): avc: denied { ioctl } for pid=998 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.943526][ T28] audit: type=1400 audit(271.020:4316): avc: denied { bpf } for pid=17694 comm="syz.6.8594" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.964544][ T84] audit: audit_backlog=65 > audit_backlog_limit=64 [ 261.967197][T17720] audit: audit_backlog=66 > audit_backlog_limit=64 [ 261.971776][ T998] EXT4-fs (loop5): unmounting filesystem. [ 262.081684][T17732] loop5: detected capacity change from 0 to 512 [ 262.143081][T17732] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 262.232076][T17732] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.8609: corrupted xattr block 33 [ 262.247637][T17732] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 262.256889][T17732] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.8609: corrupted xattr block 33 [ 262.269560][T17756] loop1: detected capacity change from 0 to 128 [ 262.276112][T17732] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 262.287269][T17732] EXT4-fs error (device loop5): ext4_xattr_block_list:719: inode #15: comm syz.5.8609: corrupted xattr block 33 [ 262.361450][ T998] EXT4-fs (loop5): unmounting filesystem. [ 262.429946][T17768] loop5: detected capacity change from 0 to 128 [ 262.466859][T17768] EXT4-fs: Ignoring removed nobh option [ 262.493688][T17768] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 262.592126][ T998] EXT4-fs (loop5): unmounting filesystem. [ 263.342936][T17838] loop1: detected capacity change from 0 to 128 [ 263.381749][T17838] EXT4-fs: Ignoring removed nobh option [ 263.413336][T17838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 263.419992][T17843] loop5: detected capacity change from 0 to 128 [ 263.459002][T17843] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 263.469734][ T997] EXT4-fs (loop1): unmounting filesystem. [ 263.495222][ T754] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 263.516817][T17843] EXT4-fs warning (device loop5): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 263.555041][ T998] EXT4-fs (loop5): unmounting filesystem. [ 263.681175][ T754] usb 5-1: Using ep0 maxpacket: 32 [ 263.687590][ T754] usb 5-1: config 0 interface 0 altsetting 140 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.710898][ T754] usb 5-1: config 0 interface 0 altsetting 140 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.731140][ T754] usb 5-1: config 0 interface 0 has no altsetting 0 [ 263.744465][ T754] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 263.766250][ T754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.781665][ T754] usb 5-1: config 0 descriptor?? [ 263.799733][T17861] tipc: Enabling of bearer rejected, failed to enable media [ 263.961196][T17871] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 264.069386][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8678'. [ 264.181722][ T754] isku 0003:1E7D:3264.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.4-1/input0 [ 264.292806][T17894] loop1: detected capacity change from 0 to 256 [ 264.371047][ T754] usb 5-1: USB disconnect, device number 90 [ 264.373271][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8688'. [ 264.401040][T17894] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 264.489999][T17906] overlayfs: workdir and upperdir must be separate subtrees [ 264.576330][T17912] loop5: detected capacity change from 0 to 512 [ 264.645175][T17912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.664739][T17919] device veth1_macvtap left promiscuous mode [ 264.670798][T17919] device macsec0 entered promiscuous mode [ 264.698252][T17919] device veth1_macvtap entered promiscuous mode [ 264.715216][T17919] device macsec0 left promiscuous mode [ 264.721667][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.722180][T17912] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 264.778383][T17931] netlink: 'syz.0.8702': attribute type 1 has an invalid length. [ 264.891240][ T998] EXT4-fs (loop5): unmounting filesystem. [ 265.069277][T17964] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8719'. [ 265.116421][T17964] device veth1_to_hsr entered promiscuous mode [ 265.122942][ T1257] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 265.145190][T17964] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8719'. [ 265.167233][T17964] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 265.196169][T17977] loop5: detected capacity change from 0 to 512 [ 265.213766][T17977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 265.253952][T17977] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 265.286366][T17986] incfs: Backing dir is not set, filesystem can't be mounted. [ 265.296390][T17977] EXT4-fs (loop5): orphan cleanup on readonly fs [ 265.303534][ T1257] usb 1-1: Using ep0 maxpacket: 16 [ 265.309644][T17977] EXT4-fs warning (device loop5): ext4_enable_quotas:7017: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 265.311477][ T1257] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 265.326170][T17986] incfs: mount failed -2 [ 265.337422][T17977] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 265.345013][T17977] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.8724: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 265.370440][T17977] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.8724: couldn't read orphan inode 13 (err -117) [ 265.432504][ T1257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.442943][T17977] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 265.482336][ T1257] usb 1-1: Product: syz [ 265.486336][ T1257] usb 1-1: Manufacturer: syz [ 265.493039][T17977] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.8724: bg 0: block 248: padding at end of block bitmap is not set [ 265.511632][ T1257] usb 1-1: SerialNumber: syz [ 265.522249][ T1257] r8152-cfgselector 1-1: config 0 descriptor?? [ 265.555586][ T998] EXT4-fs (loop5): unmounting filesystem. [ 265.925171][ T1257] r8152-cfgselector 1-1: Unknown version 0x0000 [ 265.933336][ T1257] r8152-cfgselector 1-1: bad CDC descriptors [ 265.940220][ T1257] r8152-cfgselector 1-1: Unknown version 0x0000 [ 265.956202][ T1257] r8152-cfgselector 1-1: USB disconnect, device number 92 [ 265.974022][ T1017] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 266.143837][ T1017] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 266.154654][ T1017] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.164722][ T1017] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 266.177825][ T1017] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.184419][ T1017] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 266.193445][ T1017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.202931][ T1017] usb 5-1: config 0 descriptor?? [ 266.389565][ T28] kauditd_printk_skb: 940 callbacks suppressed [ 266.389600][ T28] audit: type=1400 audit(276.095:5253): avc: denied { read write } for pid=1002 comm="syz-executor" name="loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.487766][ T28] audit: type=1400 audit(276.095:5254): avc: denied { open } for pid=1002 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.551898][ T28] audit: type=1400 audit(276.095:5255): avc: denied { ioctl } for pid=1002 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.617165][ T28] audit: type=1400 audit(276.105:5256): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 266.643191][ T1017] apple 0003:05AC:0241.0002: item fetching failed at offset 0/2 [ 266.651967][ T1017] apple 0003:05AC:0241.0002: parse failed [ 266.666264][ T1017] apple: probe of 0003:05AC:0241.0002 failed with error -22 [ 266.671446][T18041] loop6: detected capacity change from 0 to 512 [ 266.700251][T18041] EXT4-fs: Ignoring removed bh option [ 266.705716][ T28] audit: type=1400 audit(276.105:5257): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.739348][T18041] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 266.769656][T18041] EXT4-fs (loop6): 1 truncate cleaned up [ 266.775184][T18041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 266.799543][ T28] audit: type=1400 audit(276.105:5258): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.800468][ T1002] EXT4-fs (loop6): unmounting filesystem. [ 266.832234][ T754] usb 5-1: USB disconnect, device number 91 [ 266.893033][ T28] audit: type=1400 audit(276.105:5259): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.985654][ T28] audit: type=1400 audit(276.105:5260): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.993212][T18027] loop5: detected capacity change from 0 to 32768 [ 267.035671][ T28] audit: type=1400 audit(276.138:5261): avc: denied { ioctl } for pid=18014 comm="syz.4.8742" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.060463][T18058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.565105][T18090] loop6: detected capacity change from 0 to 32768 [ 267.663284][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8778'. [ 268.044339][T18078] loop5: detected capacity change from 0 to 131072 [ 268.085138][T18078] F2FS-fs (loop5): Found nat_bits in checkpoint [ 268.167996][T18078] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 268.226879][T18078] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 268.245832][T18078] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 268.258245][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8785'. [ 268.455925][T18133] devpts: called with bogus options [ 268.537018][T18139] tipc: Enabling of bearer rejected, failed to enable media [ 268.555333][T18141] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8797'. [ 268.584549][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8797'. [ 268.693204][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 268.740943][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 268.779775][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8801'. [ 268.841252][T18163] incfs: Options parsing error. -22 [ 268.869305][T18163] incfs: mount failed -22 [ 268.990556][T18175] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8813'. [ 269.007070][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8813'. [ 269.030359][T18175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8813'. [ 269.040327][T18175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8813'. [ 269.125000][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.254852][T18203] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8826'. [ 269.500499][T18230] tipc: Started in network mode [ 269.521386][T18230] tipc: Node identity -, cluster identity 4711 [ 269.667426][T18249] netlink: 'syz.6.8847': attribute type 7 has an invalid length. [ 269.684156][T18249] netlink: 'syz.6.8847': attribute type 5 has an invalid length. [ 269.692509][T18249] netlink: 17 bytes leftover after parsing attributes in process `syz.6.8847'. [ 269.900965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.913106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.922964][T18268] syz.1.8857[18268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.925149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.926036][T18268] syz.1.8857[18268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.936532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.971306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.976816][T18268] futex_wake_op: syz.1.8857 tries to shift op by 144; fix this program [ 269.983220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.003045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.014943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.026884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.038782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.602737][ C1] net_ratelimit: 4469 callbacks suppressed [ 275.602761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.620405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.632430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.644314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.656064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.668015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.679908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.691803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.703550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.715419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.750985][ T28] kauditd_printk_skb: 621 callbacks suppressed [ 275.751012][ T28] audit: type=1400 audit(286.137:5854): avc: denied { read write } for pid=999 comm="syz-executor" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.973642][ T28] audit: type=1400 audit(286.169:5855): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 276.151618][ T28] audit: type=1400 audit(286.169:5856): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.299361][ T28] audit: type=1400 audit(286.169:5857): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.375604][ T28] audit: type=1400 audit(286.169:5858): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.467295][ T997] audit: audit_backlog=65 > audit_backlog_limit=64 [ 276.493390][ T997] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 276.517914][ T998] audit: audit_backlog=65 > audit_backlog_limit=64 [ 276.524370][T18321] audit: audit_backlog=65 > audit_backlog_limit=64 [ 276.539789][ T28] audit: type=1400 audit(286.169:5859): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.902257][T18339] netlink: 'syz.0.8889': attribute type 10 has an invalid length. [ 277.690020][ T19] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 280.407975][ C1] net_ratelimit: 28942 callbacks suppressed [ 280.408002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.425684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.437525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.449412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.461288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.473176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.484913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.496812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.508629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.520507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.131415][ C1] net_ratelimit: 52 callbacks suppressed [ 285.131441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.148869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.160724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.172601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.184482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.196349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.208108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.219990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.231873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.243742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.655427][ C1] net_ratelimit: 34 callbacks suppressed [ 290.655453][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.672874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.684719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.696586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.708535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 290.720502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.732372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.744118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.755910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.767728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 299.664976][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P18391 } 2348 jiffies s: 10433 root: 0x0/T [ 299.676684][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 299.919065][ C1] net_ratelimit: 34 callbacks suppressed [ 299.919089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 299.936639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.948536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.960401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.972261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.984531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 299.996493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.008361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.020118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.031996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.973810][ C1] net_ratelimit: 325 callbacks suppressed [ 304.973831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 304.991456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.003358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.015115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.027024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.038937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 305.051028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.063075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.074987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.087097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.867341][ T28] kauditd_printk_skb: 297 callbacks suppressed [ 308.867365][ T28] audit: type=1400 audit(316.919:6098): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 316.623033][ C1] net_ratelimit: 126 callbacks suppressed [ 316.623059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.640647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.652517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.664500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.676322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 316.688208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.700107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.711978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.723739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.735604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.621614][ C1] net_ratelimit: 37 callbacks suppressed [ 332.621641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.639149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.651047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.662775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.674645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.686496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 332.698597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.710494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.722363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.734118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.346213][ C1] net_ratelimit: 203 callbacks suppressed [ 338.346239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.363762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.375803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 338.387774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.399759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.411756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.423621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.435523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.447444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 338.459408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.472590][ C1] net_ratelimit: 38 callbacks suppressed [ 351.472616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.490055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.502124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 351.514069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.526050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.538057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.549948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.561859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.573948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 351.585982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.507624][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P18391 } 9091 jiffies s: 10433 root: 0x0/T [ 362.519389][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 369.546963][ C1] net_ratelimit: 1022 callbacks suppressed [ 369.546995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.564764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.576723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 369.588620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.600455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.612428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.624405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.636409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.648359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 369.660234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.951723][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 370.958500][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18391 [ 370.965876][ C1] (detected by 1, t=10003 jiffies, g=52385, q=536 ncpus=2) [ 370.973004][ C1] task:syz.0.8914 state:R running task stack:25264 pid:18391 ppid:996 flags:0x00004000 [ 370.983584][ C1] Call Trace: [ 370.986706][ C1] [ 370.989487][ C1] __schedule+0xcbd/0x1560 [ 370.993741][ C1] ? irqentry_exit+0x30/0x40 [ 370.998162][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 371.003808][ C1] ? __kasan_check_write+0x14/0x20 [ 371.008754][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 371.014053][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 371.020037][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 371.024720][ C1] ? set_normalized_timespec64+0x115/0x1e0 [ 371.030363][ C1] ? ns_to_timespec64+0xb0/0xb0 [ 371.035050][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 371.040691][ C1] ? __bpf_ringbuf_reserve+0x478/0x520 [ 371.045985][ C1] ? ktime_get_coarse_ts64+0xe6/0x100 [ 371.051195][ C1] ? bpf_ringbuf_notify+0x30/0x30 [ 371.056056][ C1] ? bpf_ktime_get_coarse_ns+0x7e/0x120 [ 371.061433][ C1] ? bpf_ktime_get_boot_ns+0x10/0x10 [ 371.066557][ C1] ? bpf_ringbuf_output+0x2b/0x1f0 [ 371.071500][ C1] ? bpf_prog_0bd33db1052c6611+0x42/0x46 [ 371.076969][ C1] ? bpf_test_run+0x4ab/0xa40 [ 371.081488][ C1] ? convert___skb_to_skb+0x670/0x670 [ 371.086689][ C1] ? eth_type_trans+0x342/0x710 [ 371.091381][ C1] ? eth_get_headlen+0x240/0x240 [ 371.096150][ C1] ? convert___skb_to_skb+0x44/0x670 [ 371.101277][ C1] ? build_skb+0xde/0x220 [ 371.105438][ C1] ? bpf_prog_test_run_skb+0xaf1/0x13a0 [ 371.110827][ C1] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 371.116548][ C1] ? __kasan_check_write+0x14/0x20 [ 371.121492][ C1] ? fput+0x15b/0x1b0 [ 371.125311][ C1] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 371.131046][ C1] ? bpf_prog_test_run+0x3b0/0x630 [ 371.135991][ C1] ? bpf_prog_query+0x260/0x260 [ 371.140674][ C1] ? selinux_bpf+0xd2/0x100 [ 371.145015][ C1] ? security_bpf+0x82/0xb0 [ 371.149355][ C1] ? __sys_bpf+0x59f/0x7f0 [ 371.153608][ C1] ? bpf_link_show_fdinfo+0x300/0x300 [ 371.158824][ C1] ? fpregs_restore_userregs+0x130/0x290 [ 371.164287][ C1] ? __x64_sys_bpf+0x7c/0x90 [ 371.168711][ C1] ? x64_sys_call+0x87f/0x9a0 [ 371.173312][ C1] ? do_syscall_64+0x3b/0xb0 [ 371.177737][ C1] ? clear_bhb_loop+0x55/0xb0 [ 371.182249][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.188159][ C1] [ 381.808373][ C1] net_ratelimit: 252 callbacks suppressed [ 381.808399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.825915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.837763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.849636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.861484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 381.873346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.885234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.897147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.909023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.920902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.642181][ C1] net_ratelimit: 518 callbacks suppressed [ 386.642210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.659720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.671596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.683494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.695446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 386.707310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.719245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.731119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.742879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.754752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.405335][ C1] net_ratelimit: 660 callbacks suppressed [ 395.405363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 395.422850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.434773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.446700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.458471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.470432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.482465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 395.494340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.506192][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.518065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.663511][ C1] net_ratelimit: 36 callbacks suppressed [ 406.663536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.680982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.692950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 406.704826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.716686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.728576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.740586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.752498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.764361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:a8:1f:a6:6f:b1, vlan:0) [ 406.776241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 408.699872][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 140s! [ 408.708606][ C0] Showing busy workqueues and worker pools: [ 408.714342][ C0] workqueue events: flags=0x0 [ 408.718872][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=7/256 refcnt=8 [ 408.718917][ C0] in-flight: 40:rht_deferred_worker [ 408.718950][ C0] pending: bpf_prog_free_deferred, kfree_rcu_monitor, psi_avgs_work, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 408.719063][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 408.719104][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 408.719187][ C0] workqueue events_long: flags=0x0 [ 408.767945][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=5/256 refcnt=6 [ 408.767992][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 408.768092][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 408.768126][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 408.768213][ C0] workqueue events_unbound: flags=0x2 [ 408.811058][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=3/512 refcnt=5 [ 408.811092][ C0] in-flight: 898:fsnotify_mark_destroy_workfn [ 408.811125][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 408.811168][ C0] workqueue events_power_efficient: flags=0x80 [ 408.837701][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=5/256 refcnt=6 [ 408.837740][ C0] pending: neigh_managed_work, neigh_periodic_work, wg_ratelimiter_gc_entries, reg_check_chans_work, check_lifetime [ 408.837851][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 408.837883][ C0] pending: neigh_managed_work, neigh_periodic_work, gc_worker [ 408.837945][ C0] workqueue rcu_gp: flags=0x8 [ 408.877324][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2 [ 408.877366][ C0] pending: process_srcu [ 408.877394][ C0] workqueue mm_percpu_wq: flags=0x8 [ 408.894150][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2 [ 408.894191][ C0] pending: vmstat_update [ 408.894224][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 408.894256][ C0] pending: vmstat_update [ 408.894288][ C0] workqueue writeback: flags=0x4a [ 408.922980][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=4 MAYDAY [ 408.923022][ C0] pending: wb_workfn [ 408.923050][ C0] workqueue kblockd: flags=0x18 [ 408.939386][ C0] pwq 3: cpus=1 node=0 flags=0x1 nice=-20 active=1/256 refcnt=2 [ 408.939425][ C0] in-flight: 41:blk_mq_timeout_work [ 408.939461][ C0] workqueue usb_hub_wq: flags=0x4 [ 408.957265][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 408.957302][ C0] in-flight: 19:hub_event hub_event [ 408.957359][ C0] workqueue dm_bufio_cache: flags=0x8 [ 408.975317][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2 [ 408.975357][ C0] pending: work_fn [ 408.975386][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 408.992169][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/1 refcnt=4 [ 408.992206][ C0] pending: addrconf_verify_work [ 408.992237][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 408.992286][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 408.992319][ C0] pending: addrconf_verify_work [ 408.992347][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 408.992401][ C0] workqueue wg-kex-wg0: flags=0x6 [ 409.035943][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.035980][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.036032][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 409.056951][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2 [ 409.056993][ C0] pending: wg_packet_tx_worker [ 409.057021][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 409.057053][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 409.057100][ C0] workqueue wg-kex-wg1: flags=0x6 [ 409.089005][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=3/256 refcnt=5 [ 409.089040][ C0] in-flight: 15944:wg_packet_handshake_send_worker [ 409.089074][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.089121][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 409.116689][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 409.116726][ C0] pending: wg_packet_encrypt_worker [ 409.116757][ C0] workqueue wg-kex-wg0: flags=0x6 [ 409.134394][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.134427][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.134478][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 409.155489][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2 [ 409.155526][ C0] pending: wg_packet_tx_worker [ 409.155556][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 409.155587][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 409.155638][ C0] workqueue wg-kex-wg2: flags=0x6 [ 409.187553][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.187588][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.187645][ C0] workqueue wg-kex-wg2: flags=0x6 [ 409.208284][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.208315][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.208364][ C0] workqueue wg-kex-wg0: flags=0x6 [ 409.229027][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.229059][ C0] in-flight: 8:wg_packet_handshake_send_worker [ 409.229089][ C0] pending: wg_packet_handshake_send_worker [ 409.229116][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 409.253515][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 409.253551][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 409.253598][ C0] workqueue wg-kex-wg1: flags=0x6 [ 409.273045][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.273077][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.273124][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 409.294034][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2 [ 409.294073][ C0] pending: wg_packet_encrypt_worker [ 409.294103][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 409.294136][ C0] pending: wg_packet_decrypt_worker [ 409.294163][ C0] workqueue wg-kex-wg0: flags=0x6 [ 409.324613][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3 [ 409.324647][ C0] pending: wg_packet_handshake_send_worker [ 409.324680][ C0] workqueue wg-kex-wg1: flags=0x6 [ 409.342466][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=3/256 refcnt=5 [ 409.342496][ C0] in-flight: 884:wg_packet_handshake_send_worker [ 409.342528][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.342574][ C0] workqueue wg-kex-wg2: flags=0x6 [ 409.369719][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3 [ 409.369753][ C0] pending: wg_packet_handshake_send_worker [ 409.369782][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 409.387861][ C0] pwq 2: cpus=1 node=0 flags=0x1 nice=0 active=1/256 refcnt=2 [ 409.387897][ C0] pending: wg_packet_tx_worker [ 409.387926][ C0] workqueue wg-kex-wg2: flags=0x6 [ 409.405130][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.405163][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.405212][ C0] workqueue wg-kex-wg0: flags=0x6 [ 409.425872][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.425903][ C0] in-flight: 450:wg_packet_handshake_send_worker [ 409.425936][ C0] pending: wg_packet_handshake_send_worker [ 409.425964][ C0] workqueue wg-kex-wg1: flags=0x6 [ 409.450352][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3 [ 409.450387][ C0] in-flight: 10:wg_packet_handshake_send_worker [ 409.450423][ C0] workqueue wg-kex-wg2: flags=0x24 [ 409.468768][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 409.468808][ C0] pending: wg_packet_handshake_receive_worker [ 409.468840][ C0] workqueue wg-kex-wg2: flags=0x6 [ 409.487451][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=2/256 refcnt=4 [ 409.487496][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 409.487550][ C0] workqueue loop4: flags=0x6 [ 409.507759][ C0] pwq 4: cpus=0-1 flags=0x5 nice=0 active=1/256 refcnt=3 [ 409.507795][ C0] pending: loop_rootcg_workfn [ 409.507827][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=141s workers=6 idle: 2355 1017 6 1603 1062 [ 409.507892][ C0] pool 2: cpus=1 node=0 flags=0x1 nice=0 hung=117s workers=7 manager: 1018 idle: 1257 1269 666 24 754 [ 409.507955][ C0] pool 3: cpus=1 node=0 flags=0x1 nice=-20 hung=0s workers=2 manager: 25 [ 409.507991][ C0] pool 4: cpus=0-1 flags=0x5 nice=0 hung=19s workers=7 manager: 43