last executing test programs: 505.799027ms ago: executing program 4 (id=7175): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x9) 505.452417ms ago: executing program 1 (id=7164): r0 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 453.222089ms ago: executing program 2 (id=7166): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000000ff", 0x24) 451.357958ms ago: executing program 3 (id=7167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x1, 0x3, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xd, 0x1, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "57fea939ad8c8b8f"}, 0x2}}]}, 0x154}}, 0x240448c8) 425.450819ms ago: executing program 1 (id=7168): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x1fc, 0x80000a, 0x0, 0x1, 0x400}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x1c, 0xd, 0x1, 0xa, 0xffffffff}}, {0x4}}]}]}, 0x68}}, 0x0) 379.1929ms ago: executing program 0 (id=7169): syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="5d3ec70048e8", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) syz_emit_ethernet(0xe7, &(0x7f00000007c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x1}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0xb1, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x2, 0x4}], "038d827d2978d75dc819152a1f299080b90fbc7f3d3af7af1d35c184fe9979997fce047f7bcb68af329931e4c09717ae6ad5db4f5a5d1f4451500d8c2ee647f4c84e576a0299fd9212d1c382ab01e6f721e373200d39a3b63acea7e93efe191cfc66c64664caff451258d799f0de08394c1920f5578027aaabe550a71672ed367a8b75f1c4b2d1e2e913e0330e1fe83937d5b62254e254b6ca76119889db2f45e7cac978d33ec2dee3"}}}}}, 0x0) 353.40676ms ago: executing program 3 (id=7171): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x6, 0x0, 0x0, 0x4c}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 353.33834ms ago: executing program 4 (id=7173): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$UHID_INPUT(r0, &(0x7f0000009580)={0x8, {"2e0d8c13b8074087617d8a09d521820b36850d88e7c970d21eb9a9e641ac493f3947fba5ad7c7a37e05fa548d8e9bffda006e80bbb4a75e21b43b9ee1f2ab184ac5b429646e5f254460d7f5bb1d3b8e8ddd9480a8e4d49bfeff033bc93fbfdfa9a960a19aa9a512254fdc503975412a0f9ee1594124024084dec372b22ee3d250a9b621cdb118f6ef9b85289734511dfcdbd7f0267e48dfe6db90ea7ad2165fc8cdf166788e9eeffb56e82e99c5d2fe08e6bd5bcfee8ef90a53f37d57eff478390aa81a878d058a77b710ad013cc35a592c420864f1ad7847740a0ba21949097d91cabc898977b34fb9a67c3917f9ae5fb8bde3c12a3ab1850937f09ba6be5939467085c1c186f7ac402e1d57dc310a070ece043e8c863c2d62cdafb610e09d476e108155cd99a3c133775680366d69082d78eb917bb6e2f92f598d1911c8d9a3b32c6ea5b2b79eba0fb1c85691933ce52cce92c784cc5ee0c0e5c00dab26ad6e8a3c5fbb445bcac0e9842b9fa701e35716a3b7c32eb561e88558cbb4a769a687545e46d3f2bccb108a1c60d4faa717e18948563cfbf4b6b7d9c9bb6f318a3b72c3b561fcc19ebc9f61ad01f1bbc423b867576395c48340ff4033fb207a14c90442f6731670e02b9c263c595468c361876915543d9d00cb1cc5b6b42d389fd756e027639805e8aff22cc90047df216b7d583a46d13bcccfa30c724c56af42b920c1d49e0c00968dd9f9fc8774c7fe7c9ef03b6b5285e160cd8165f7d29a47790f0d8386e8924042a54c1f5a7268f216e6823471261e1ff3d648c6ab5075fab3264beb34a181bbef9bc7f499d7ac7a7ee412643368a1e692ce15fb33051cf5a61dcdfe0a234b9d4266b971831225dbda05bf62bacc42517db66b87f836544af587d6c0fe8f8ac23377d2e9e64a509733a6f5e51a0b8b50de8f5c18fe638002e1eda5a2acb48c1149279fcf84d89ab0181907545e56c15d8dab92ad7631a19b6ddd2918e21d4ad6b890db906d7061942467f59c37a728c1650a5f98ee88384b241b3d8ae3055693f056a1fe5df88e569ca32ee05de1d0e5df8b831743e25e2eea397ecea2c5601bc8169b2b0c1229ad4bafee1da48c8b09a0e1dd67446769403777471ac2e858005917de2e673495e490955115f888960a97b6bf57c173cb727fa8b14ebdfa9dd15fbd8cb4ffc35a144a6bd42fbc6edc3330f8c3b880408605a3c564983604ffa982d2ec33531f3626fcb4ebc23c86b977baa5345927a402b313481640c88855f622b12db2082ea3cd5322f0b2526a466dcb52d16ff2f8132a3af6d3548accb32a1aee41146f8006bcf81eac486a2180eaf21a1d5fdd3fff381e9245670fa2a28c2e773fbe3d2d3394e27470d0dc00c2bccf3de9975504da181b88b63c703a53e3e1ef16c07de92f502cad5383b7df0a1d4bda105d5d8f72c9c9605880dd1f708d75412895090fa681e75190e2646758b11b085a865b7636f2a19e965134256cb695c72e26cbbd3adac7a09c9b586ff9132d2ede925b9fd47d4b80ccb4ae0e7145fcb48fbf9f90a536ffd7d2f82ff9b76d845c2fc91baf1603451c40622bcd056a0d2ae55b3d583f0294a3f0cffabbe650670438e415ed56bf260a3872baced70c1d06c49edb90962999a57c9766d69859cc7b77d9128e1956e39f0e3553e416360983476b37af72920e4d6b06cd3cb345e830e984198c75bccab60ca67ba5bec351bb8b9061f30bd94dde050033520420328a0f37f49168391cc9457f6056d2f634a217cfd1a5ac1dcf016dd0380b9b32633e080533fdfc113dd25ff04843f05344dba99525f84f9ad2d0b4b6e79e6cfe3917eeaec6aa9b045f006a72ffaf4e0141e6a8b7f6bd1a6b5aa73ade085ce6d1b0f5500caf03f85ee5f52b7fa0aef3f969cf1d2c8ad9f661106a611a968ee440c18fdbc391fdcf8f606e9685bd80158f841f872beb354c61b32329e4feb6c6a64bea9239b296987679ebbec3b842bc4f7845329018bbd1e744771030fb40c96eb2dc5e8612970315c25af43a8204b7e8074920779c6c9263c2b7beca943017572edd4bd7abcdb5265772e5a11bbcd63618d4643c935fa37261a688493d352d79788614a34474a61f21641ecd88894826d1603c0756985ecb5c1d8ba7d9a6c49e4906021ac7f4dfd714a265f8acfb25a620a45277953abae42fea2aca21c93ef26d523b86c525306e2d2837c4598a2a8b7578d61bcc0a4f8d78cfe14683b26c0d4f3b7dfdccd0d535f410e3bb185c30d8c0c7c5ddf5de54250c3988e35ebacc4fc38a2c7abbfd93bfd178fb3e2a071c6981fa14d4c3387fa6e10150faed16412087dea5d2a21237fdf059846e1a5b6d6c6d7a016de6ed61501716770733b165e97e46d78e3fed291d68113bce3f7c96c623328bfe26b7ce02eda543142449623c4427124c16a27fe7800329da87999a24820428792feac059ca5832d06d020d4d4a51b88a29ea0ed97caa19331804314a803d24e033da9e4fc49dfb85a410d3149249395e957fef425a6a42df8bffecce21907149ca3a86ee247fa9233550311de70a287bf40ae7759a3c90a67fe09c80bde8f2ad79d10e7e3c32286b165daa5d0574a0cabd34336c46be4f41ad66a890af670b5fa378eea44751e11bb6a39ea416c8dcf9dbe1ef91f75c39d1375f0e112b7d2f5272fb887690962fd2dc970555816098eb8f5e4cdeb74b8440aa2b1793173096ac9fcc8d82952b278cbb012d2e61cd86b061df4c5755429627b637aadfa88b635268265e4987d92bd25d23cd5845ff062dfbe6373e71843b00a439c8f65bcb530d816304230ab9f818915e3fe61f143ddb1fb8514a35791bfb23194185927cf1d1360bd153509cdb1483d172f416eec3378746f060aab8d87d8a5c08ea6dc2b0d5bb27e3b1fa0924d71fa3570b9b6d682d078f60de511a20b4d00b9659e25b46bbcb978d592c1275cddb9d6a0516c29c37122fe02fd25affb0f46e848bcd418c07631bff9f79c26618f86204f1a6b181c344735ff346ad5a9e16ec59bf486930622486d60f7c22166baa66517b6356f3f477a359b59ec85a796cf7227ace578c64e5cedbc5aea8920803062866ce852e637d74f2719378e63fe8fbd9ede6279b7c9eb5f44880ee25f4d282877e59c5061f500be62fb2830755e9698d5f526ac3d9667b9d283fc28f1816e56a50c4f19df51fb951047c9f180273fecaad50208214c871187850bc805fbc8902cfcc6a0b21be6f2949648c6b1a911a97a63692ece9ef4549de15edcd0cb6fc984d01800ed7882b1f63b523e3bc70b9d7d91fc3e68807c7d92b2693fa8db6ed58e0abaad560a5da7109f335558dd21cd7ea423bb2d011a07fa4cddde093d1d78316c506901187525e4a09cca1e218d530268217fb5c0ddb617472ffc08fee47fa30c970e5247d1bfc603c1cc8864c36f70f6465f47dc5861195f7b73370d7075427ff7f223999293b2283edfa3f6ebba6d7cdc9e4d1dc6c1939c38494ace377aff0b6b321676e7e47fb94cacf6d43e093b2fb8917791ae87276c5d255d3eceebf1ecfeb464327a34a5473c41329332e7871815bae3db19d3bf63f941bd303a12d2c6ad6d0e3f404d87dbae6d436975758ab4b3fcc73580ca8a112905eb83e5e72ed953cc0d8d02683cb5240ee61468ff2e418548d904a9c4e1a1dbd4c751ab09fe6fd4daef64069020ea4428f1da70872eb5d9d8c1b7c773dc1a6de59d96f4510eec905633a2712111a5d964b7affdab1e0e985ec5b496b0458533e93c1856fe0db93ea34f2db6ea9b29ea3b4a09b8491ec8c003ca0cbfa752882b1eaa413b64c0dc1f0ad169db5a5f3e0e76827ef5b9311797b86854598c8a4f4ea06e2a163ad4d994f9d39452c6f6fd72e12ab893d26e859e72555ee348dc42dab2669d3955bf719ef7d9f1c74ae014f105bc2db1f698d664c503c120378e8fd05cc163f6b853706bfcf1ba2b41ecf7f15d404ceed8f035406536f99f85d695be0dbb6c91ed5b260515f1c7f4e3c6b2419f63821cbadc548691627546d4ec38dd158f556a0d0b7e5b659ad49ab90bab925bfc073d55df0077f62677758d162cb34923ba6a9c83f5568cf3a8a95b0a24e01e8eaf406eb4781b5ef428f70e026f82aa302678827c370f86d647658dec98c46eb147b6d38f09f7a724ccaa499d04689217b9de4654d976170d28b3d04686dd84fbcb0fb908e3974d0bec71d5a63c1c18b3a0f62726828199d1de7a3e2c27196cc1fc7d19a2f65849b9b04a6a0d26fa7adf0f3837de0694f1b9261ea94c9d0e63172a0caa4b06d1e6d43153e0a95c8829122da2f37690c9885e9654d25fcd6e7453ad1e6435300fb819b87cbede24413b2c77c6ede35c6856db1ede1f3e2241b5e2fa75cc1c13b87da69f4f1c4f24d89fde326e0da6db09ebc3dda9ec1b287a10a9c23cf12521383e41b4a7591c05ec508c3619101c8d6e853667c4fd69c59af6b29930f45136f11dc27472336c332acca273976f48084428ebf69133c4267e69be9926a7c3027fe88a800c472ec76c8cbf5c50b44363e3e70b2a5dcb33e12d5a6c88400dfc2eb137ced49b90eab46b7b1bf01c1da6983acbef7c0d827b80a1d3c7b14c1435bfe0464d678ebfc35f10558518fa8bd2e19aa877709be693f7614583985957009e095efe79cd713177bbb9a5528ecd866b10a24faf8bb31fb7d30aa708e6d30b0d4932ddb822df21ad6ddd9e6ae7f23dca29e24c6c7e73bc50056cf4c049357382cebdb5be66ba6119d4a8521c50353dbb0b916e6dea3031412994cc8f2906e40ba00cade414387beb853c74a07b9062901e2af86cf594510e632d9d7a0f0a465cf2a57fd5ec9a9227d2556344878b1b574ce2e5b65839e6aed38e4ebe2e74c3cf99a79e32ca7d6ca23c0dbf28a631261e6719bc243918f2c1236893fdb130b5ba5a0a5e81b873f7e62b5115d725c40252baa5df7730a5b4cbd2f92a5b5fd196c2f72ef3e78b0ff2fe2bd2fa4033c84c4545b78eb3f47b5788cec29d3cec8994ca88be7421b938ebfc8a79ff62dead3076b61787b24914f70ffcb784b40c97b01eb91c8ec18432f03cd087ab9d2f0c568da61a1057f64f063b1a2fda1c838ae99613e39397d78b99b7cae57b2cf7283c077488e4d468b258707cecd25fc69c3b0fa2dfc2c24e938cb96a3cc26f83a097ad94ffa301b77405ea5fd8e99204b0c1714837e2752bd3b9924a90a46467f367aeb3cec35df42bbcd4ddb550d811a49fd3d4f28235d3a75dbf4eb1c1bcccd54fccbb5d84471ee6a6e6b3e5cffb1acc535f5da9ce647e561edf11b09fad0dcebe233f9072237e213891dddeeb45cc77fbf3707c1952ab9cd9df98756dc2caa7dadaebe225851a50367068e96c20e7f7cacb2dd0379afa2343c4148e1eeef02fed78b194e8d2eced1a1956f701406fdadbe2ae85ec224234c8628a17a7a1d1b32febe9a8999c4400b391109738f7b265cb36d3f4829f17baaf1791a048d4a7566c833f8a532f7e6a83fbfd4e7dd583f8c746667201b14599291329213e612c4d074cb1f28e4e756d4b5fc41244a8438fade0e071b7c6e1d92172c8fe43d185427aea5495a461e8e723bffe3e50ee9ada75366b698c29185544917d2fd1a00d4f60aa6543606c6504e986541b41ebc3b0e1f0d9684299809ad12b2227854a8c7c5d71895616c3f8cf65810cae2aaeb8532ab0c8be655ebe11490be7412272d1e7ce47d65633718b924bac6de7339c368e7773828914f00287f3737d271212520e1532e5eaf570b2ece4672d", 0x1000}}, 0x1006) 353.102001ms ago: executing program 1 (id=7174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x7, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa5e9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 349.586211ms ago: executing program 2 (id=7176): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)="d2b5", 0x2}], 0x1, 0x8, 0x6) 326.336412ms ago: executing program 0 (id=7177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000100039042000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e00010069703667726574617000000028000280060011004e20000014000700fee6"], 0x5c}}, 0x0) 296.052712ms ago: executing program 2 (id=7178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000014c0)) 278.032883ms ago: executing program 4 (id=7179): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0x1, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 268.693233ms ago: executing program 1 (id=7180): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x258, 0xfeffffff, 0x258, 0x0, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0xff000000, 'wg1\x00', 'bridge0\x00', {0xff}, {}, 0x88, 0x0, 0x41}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@ecn={{0x28}, {0x0, 0x0, 0x8, 0x3}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @port=0x4e21, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x258}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x847, 0x7, [0x3a, 0x5, 0x3e, 0x1a, 0x3, 0x16, 0x2d, 0x35, 0x1, 0x4, 0x3b, 0x3f, 0x28, 0x33, 0x3f, 0x5], 0x0, 0x2, 0x4}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x6c}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3735d29e2530a11, @empty, @empty, @icmp_id=0x67, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 254.982593ms ago: executing program 3 (id=7181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45}}) 245.904394ms ago: executing program 0 (id=7182): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000c00)={0x3, 0x0, 0x18, 0x1e, 0xf5, 0x0}) 233.693284ms ago: executing program 2 (id=7183): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 203.950195ms ago: executing program 4 (id=7184): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000005880)) 184.577675ms ago: executing program 3 (id=7185): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) 177.820835ms ago: executing program 1 (id=7186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000140)) 164.477365ms ago: executing program 0 (id=7187): r0 = fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 164.224876ms ago: executing program 2 (id=7188): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, 0xfffffffffffffffe) 141.924257ms ago: executing program 4 (id=7189): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@acl}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$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") 124.527077ms ago: executing program 1 (id=7190): r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 115.698587ms ago: executing program 0 (id=7191): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001c00)={0x5, 0x1ff, 0x8001, 0x3ff, 0x3, "60596f07e377b9dfae1b21a75f426a335035a7", 0x400, 0x5}) 104.534667ms ago: executing program 3 (id=7192): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_expedited', 0xc0201, 0x1fc) write$cgroup_pid(r0, &(0x7f0000008140)=0xffffffffffffffff, 0x12) 91.447707ms ago: executing program 2 (id=7193): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='40', 0x2) 53.895919ms ago: executing program 3 (id=7194): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xfffffffffffffffe) 53.447899ms ago: executing program 4 (id=7195): setresuid(0xee00, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) 0s ago: executing program 0 (id=7196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000040)=@newtaction={0x78, 0x58, 0x284f, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x8, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): T20] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 183.101853][ T20] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 183.123439][ T20] usb 2-1: USB disconnect, device number 70 [ 183.208598][ T54] usbhid 5-1:1.0: can't add hid device: -71 [ 183.214619][ T54] usbhid: probe of 5-1:1.0 failed with error -71 [ 183.240059][ T54] usb 5-1: USB disconnect, device number 69 [ 183.366835][ T7722] F2FS-fs (loop3): invalid crc value [ 183.380647][ T7754] overlayfs: missing 'lowerdir' [ 183.386183][ T7722] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 183.418283][ T7722] F2FS-fs (loop3): recover fsync data on readonly fs [ 183.425280][ T7722] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 183.641107][ T7780] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 183.656991][ T7780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02d, mo2=0002] [ 183.666130][ T7780] System zones: 1-12 [ 183.670671][ T7780] EXT4-fs (loop3): orphan cleanup on readonly fs [ 183.674350][ T7778] EXT4-fs (loop4): Invalid log cluster size: 50331654 [ 183.677213][ T7780] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.3364: bad orphan inode 3 [ 183.693994][ T7780] EXT4-fs (loop3): Remounting filesystem read-only [ 183.702344][ T7780] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,journal_dev=0x0000000000000040,nombcache,errors=remount-ro,jqfmt=vfsold [ 183.795040][ T20] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 183.945370][ T7807] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.3376: Failed to acquire dquot type 1 [ 183.957168][ T7807] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.3376: Failed to acquire dquot type 1 [ 183.968903][ T7807] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3376: bg 0: block 248: padding at end of block bitmap is not set [ 183.983395][ T7807] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 183.992447][ T7807] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.3376: Failed to acquire dquot type 1 [ 184.004170][ T7807] EXT4-fs (loop2): 1 orphan inode deleted [ 184.010145][ T7807] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 184.019229][ T7807] ext4 filesystem being mounted at /679/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.102174][ T308] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 184.111442][ T54] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 184.120800][ T1285] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 184.167837][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 184.243113][ T7818] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 184.250466][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.253032][ T7818] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 184.263440][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.272441][ T7818] F2FS-fs (loop2): invalid crc value [ 184.285240][ T7818] F2FS-fs (loop2): invalid crc value [ 184.290938][ T7818] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 184.390838][ T7827] cgroup: Name too long [ 184.428353][ T20] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 184.438037][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.446082][ T20] usb 2-1: Product: syz [ 184.450861][ T20] usb 2-1: Manufacturer: syz [ 184.455582][ T20] usb 2-1: SerialNumber: syz [ 184.466136][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.476313][ T54] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.486723][ T54] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.493800][ T1285] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.495689][ T308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.577782][ T54] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.577825][ T1285] usb 5-1: config index 0 descriptor too short (expected 23058, got 18) [ 184.587052][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.595699][ T1285] usb 5-1: config 83 has too many interfaces: 43, using maximum allowed: 32 [ 184.603437][ T54] usb 1-1: SerialNumber: syz [ 184.613163][ T1285] usb 5-1: config 83 has an invalid interface number: 158 but max is 42 [ 184.625116][ T1285] usb 5-1: config 83 has 1 interface, different from the descriptor's value: 43 [ 184.634194][ T1285] usb 5-1: config 83 has no interface number 0 [ 184.689493][ T308] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 184.698655][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.706635][ T308] usb 4-1: Product: syz [ 184.708620][ T298] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 184.711553][ T308] usb 4-1: Manufacturer: syz [ 184.722969][ T308] usb 4-1: SerialNumber: syz [ 184.728324][ T20] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 184.735833][ T20] usb 2-1: USB disconnect, device number 71 [ 184.792001][ T1285] usb 5-1: New USB device found, idVendor=5dfc, idProduct=4932, bcdDevice=13.2a [ 184.801043][ T1285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.809086][ T1285] usb 5-1: Product: syz [ 184.813293][ T1285] usb 5-1: Manufacturer: syz [ 184.817883][ T1285] usb 5-1: SerialNumber: syz [ 184.876781][ T54] usb 1-1: 0:2 : does not exist [ 184.881680][ T54] usb 1-1: unit 5 not found! [ 184.892038][ T54] usb 1-1: USB disconnect, device number 63 [ 185.071449][ T308] usb 4-1: unit 5 not found! [ 185.080486][ T308] usb 4-1: USB disconnect, device number 66 [ 185.086055][ T1285] usb 5-1: USB disconnect, device number 70 [ 185.092622][ T298] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.137147][ T298] usb 3-1: not running at top speed; connect to a high speed hub [ 185.221084][ T298] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 185.295729][ T3030] udevd[3030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.373664][ T7841] EXT4-fs error (device loop0): ext4_map_blocks:742: inode #3: block 1: comm syz.0.3391: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.387861][ T298] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 185.396870][ T7841] __quota_error: 12 callbacks suppressed [ 185.396893][ T7841] Quota error (device loop0): write_blk: dquota write failed [ 185.397164][ T298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.403901][ T7841] Quota error (device loop0): find_free_dqentry: Can't write quota data block 1 [ 185.410266][ T298] usb 3-1: Product: syz [ 185.419306][ T7841] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 185.427738][ T20] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 185.431826][ T7841] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.3391: Failed to acquire dquot type 0 [ 185.458049][ T298] usb 3-1: Manufacturer: syz [ 185.465206][ T7841] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm syz.0.3391: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.479270][ T7841] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 185.488079][ T7841] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 185.498226][ T7841] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.3391: Failed to acquire dquot type 0 [ 185.504340][ T298] usb 3-1: SerialNumber: syz [ 185.510152][ T7841] EXT4-fs error (device loop0): ext4_free_blocks:5690: comm syz.0.3391: Freeing blocks not in datazone - block = 0, count = 4096 [ 185.527757][ T7841] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm syz.0.3391: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.541938][ T7841] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 185.550676][ T7841] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 185.560627][ T7841] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.3391: Failed to acquire dquot type 0 [ 185.572076][ T7841] EXT4-fs (loop0): 1 orphan inode deleted [ 185.577889][ T7841] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 185.677479][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 185.801306][ T7881] EXT4-fs (loop3): Test dummy encryption mode enabled [ 185.809171][ T7881] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 185.854835][ T54] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 185.887005][ T298] usb 3-1: USB disconnect, device number 70 [ 185.938373][ T20] usb 2-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 185.949627][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.957925][ T20] usb 2-1: Product: syz [ 185.962112][ T20] usb 2-1: Manufacturer: syz [ 185.967876][ T20] usb 2-1: SerialNumber: syz [ 186.022178][ T5] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 186.032568][ T7902] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 186.060957][ T7902] EXT4-fs error (device loop3): __ext4_iget:5034: inode #2: block 127754: comm syz.3.3420: invalid block [ 186.072627][ T7902] EXT4-fs (loop3): get root inode failed [ 186.078331][ T7902] EXT4-fs (loop3): mount failed [ 186.236589][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.245874][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 186.311382][ T20] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 186.311865][ T54] usb 5-1: config 1 has an invalid descriptor of length 82, skipping remainder of the config [ 186.328495][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 57864, setting to 1024 [ 186.340023][ T54] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 186.349081][ T20] usb 2-1: found format II with max.bitrate = 0, frame size=1 [ 186.350247][ T54] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.360164][ T20] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 186.371831][ T5] usb 1-1: config 1 has an invalid interface number: 6 but max is 1 [ 186.384598][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.394831][ T5] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 186.404927][ T308] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 186.407916][ T20] usb 2-1: USB disconnect, device number 72 [ 186.417959][ T5] usb 1-1: config 1 has no interface number 2 [ 186.426433][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.437514][ T5] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.450834][ T5] usb 1-1: config 1 interface 1 has no altsetting 0 [ 186.544554][ T54] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 186.553730][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.561719][ T54] usb 5-1: Product: syz [ 186.566098][ T54] usb 5-1: Manufacturer: syz [ 186.570700][ T54] usb 5-1: SerialNumber: syz [ 186.591026][ T7847] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 186.600244][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.609694][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.617699][ T5] usb 1-1: Product: syz [ 186.621920][ T5] usb 1-1: Manufacturer: syz [ 186.626532][ T5] usb 1-1: SerialNumber: syz [ 186.630745][ T477] udevd[477]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.687306][ T24] audit: type=1400 audit(1785183077.824:244): avc: denied { create } for pid=7918 comm="syz.1.3427" dev="anon_inodefs" ino=36104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.712343][ T307] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 186.749019][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.759631][ T308] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 186.870599][ T5] usb 1-1: selecting invalid altsetting 0 [ 186.877456][ T5] usb 1-1: selecting invalid altsetting 0 [ 186.883806][ T5] cdc_ncm 1-1:1.0: bind() failure [ 186.890258][ T54] usb 5-1: USB disconnect, device number 71 [ 186.907850][ T3029] udevd[3029]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.909478][ T5] cdc_ncm 1-1:1.6: bind() failure [ 186.929033][ T308] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 186.938135][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.947030][ T5] usb 1-1: selecting invalid altsetting 0 [ 186.952843][ T5] cdc_ncm: probe of 1-1:1.1 failed with error -22 [ 186.959395][ T308] usb 4-1: Product: syz [ 186.963638][ T308] usb 4-1: Manufacturer: syz [ 186.968262][ T308] usb 4-1: SerialNumber: syz [ 186.973190][ T5] usb 1-1: selecting invalid altsetting 0 [ 186.979136][ T5] cdc_mbim: probe of 1-1:1.1 failed with error -22 [ 186.989730][ T5] usb 1-1: USB disconnect, device number 64 [ 187.019965][ T298] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 187.022065][ T308] usb-storage 4-1:1.0: USB Mass Storage device detected [ 187.035424][ T308] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 187.043703][ T308] scsi host1: usb-storage 4-1:1.0 [ 187.103757][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.141129][ T307] usb 3-1: not running at top speed; connect to a high speed hub [ 187.212331][ T20] usb 4-1: USB disconnect, device number 67 [ 187.215920][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.228527][ T307] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.237717][ T307] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 187.392550][ T307] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 187.401628][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.409870][ T307] usb 3-1: Product: syz [ 187.414200][ T307] usb 3-1: Manufacturer: syz [ 187.418812][ T307] usb 3-1: SerialNumber: syz [ 187.439073][ T298] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.514052][ T298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.524237][ T298] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.533689][ T7942] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 187.543209][ T7942] F2FS-fs (loop0): invalid crc value [ 187.549061][ T7942] F2FS-fs (loop0): invalid crc value [ 187.554592][ T1285] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 187.560621][ T7942] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 187.663500][ T7947] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 187.682451][ T7947] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b, [ 187.700634][ T298] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 187.722428][ T298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.734077][ T298] usb 2-1: Product: syz [ 187.738923][ T298] usb 2-1: Manufacturer: syz [ 187.743643][ T298] usb 2-1: SerialNumber: syz [ 187.793743][ T307] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 187.807966][ T307] usb 3-1: 1:1 : format type 50 is not supported yet [ 187.839759][ T307] usb 3-1: 0:2 : does not exist [ 187.857188][ T307] usb 3-1: USB disconnect, device number 71 [ 187.932836][ T1285] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.943585][ T7954] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12 [ 187.951716][ T7954] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.963405][ T7954] F2FS-fs (loop3): invalid crc value [ 187.981412][ T7954] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 188.008172][ T298] usb 2-1: selecting invalid altsetting 1 [ 188.014154][ T1285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.024705][ T298] usb 2-1: unit 3 not found! [ 188.031066][ T1285] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.045022][ T7954] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 188.052125][ T7954] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 188.073072][ T477] udevd[477]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 188.078957][ T298] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 188.101721][ T298] usb 2-1: USB disconnect, device number 73 [ 188.190193][ T7978] fuse: Bad value for 'fd' [ 188.203257][ T1285] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 188.222344][ T1285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.230664][ T1285] usb 5-1: Product: syz [ 188.236941][ T1285] usb 5-1: Manufacturer: syz [ 188.241943][ T1285] usb 5-1: SerialNumber: syz [ 188.284091][ T7976] loop2: p1 < > p2 < > p3 p4 < > [ 188.289220][ T7976] loop2: partition table partially beyond EOD, truncated [ 188.297464][ T7976] loop2: p1 start 67108864 is beyond EOD, truncated [ 188.304931][ T7976] loop2: p3 start 100859904 is beyond EOD, truncated [ 188.315452][ T54] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 188.405462][ T3030] udevd[3030]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 188.411366][ T477] udevd[477]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 188.427226][ T7995] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.437216][ T7995] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 188.489901][ T8002] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 188.490592][ T3030] udevd[3030]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 188.509190][ T24] audit: type=1400 audit(1785183079.766:245): avc: denied { relabelto } for pid=8001 comm="syz.2.3460" name="700" dev="tmpfs" ino=3607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 188.512656][ T477] udevd[477]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 188.566482][ T24] audit: type=1400 audit(1785183079.809:246): avc: denied { associate } for pid=8001 comm="syz.2.3460" name="700" dev="tmpfs" ino=3607 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 188.599334][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 188.623239][ T1285] usb 5-1: MIDIStreaming interface descriptor not found [ 188.659777][ T1285] usb 5-1: USB disconnect, device number 72 [ 188.734512][ T54] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 188.756105][ T54] usb 1-1: config 0 has no interface number 0 [ 188.762260][ T54] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.789940][ T54] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 188.805546][ T54] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.827521][ T54] usb 1-1: config 0 interface 196 has no altsetting 0 [ 188.839614][ T8046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.851215][ T8046] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #11: comm syz.1.3482: corrupted in-inode xattr [ 188.863156][ T298] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 188.870595][ T8046] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.3482: couldn't read orphan inode 11 (err -117) [ 188.883300][ T8046] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,journal_ioprio=0x0000000000000001,acl,,errors=continue [ 188.998946][ T54] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 189.012772][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.030501][ T54] usb 1-1: Product: syz [ 189.039184][ T54] usb 1-1: Manufacturer: syz [ 189.044010][ T54] usb 1-1: SerialNumber: syz [ 189.057622][ T54] usb 1-1: config 0 descriptor?? [ 189.097891][ T298] usb 4-1: Using ep0 maxpacket: 8 [ 189.209695][ T298] usb 4-1: config 6 has an invalid interface number: 150 but max is 0 [ 189.217972][ T298] usb 4-1: config 6 has no interface number 0 [ 189.224125][ T298] usb 4-1: config 6 interface 150 has no altsetting 0 [ 189.230968][ T1285] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 189.303212][ T20] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 189.312535][ T5] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 189.321889][ T54] ipheth 1-1:0.196: Unable to find endpoints [ 189.330559][ T54] usb 1-1: USB disconnect, device number 65 [ 189.387345][ T298] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=ce.f2 [ 189.396544][ T298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.404661][ T298] usb 4-1: Product: syz [ 189.408975][ T298] usb 4-1: Manufacturer: syz [ 189.413912][ T298] usb 4-1: SerialNumber: syz [ 189.461526][ T1285] usb 3-1: Using ep0 maxpacket: 16 [ 189.535895][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 189.573342][ T1285] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 189.581493][ T1285] usb 3-1: config 0 has no interface number 0 [ 189.587697][ T1285] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 189.597682][ T1285] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.607674][ T20] usb 2-1: not running at top speed; connect to a high speed hub [ 189.615427][ T1285] usb 3-1: config 0 interface 41 has no altsetting 0 [ 189.666570][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.676973][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.694820][ T20] usb 2-1: config 6 has an invalid interface number: 192 but max is 0 [ 189.703175][ T20] usb 2-1: config 6 has no interface number 0 [ 189.709431][ T20] usb 2-1: config 6 interface 192 has no altsetting 0 [ 189.716609][ T298] rndis_host 4-1:6.150: skipping garbage [ 189.722424][ T298] usb 4-1: bad CDC descriptors [ 189.727469][ T298] cdc_acm 4-1:6.150: skipping garbage [ 189.734000][ T298] usb 4-1: USB disconnect, device number 68 [ 189.760228][ T20] usb 2-1: language id specifier not provided by device, defaulting to English [ 189.769392][ T1285] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 189.778432][ T1285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.786547][ T1285] usb 3-1: Product: syz [ 189.791015][ T1285] usb 3-1: Manufacturer: syz [ 189.795659][ T1285] usb 3-1: SerialNumber: syz [ 189.804405][ T1285] usb 3-1: config 0 descriptor?? [ 189.825478][ T8068] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 189.832682][ T8068] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 189.862238][ T5] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.871307][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.879348][ T5] usb 5-1: Product: syz [ 189.883543][ T5] usb 5-1: Manufacturer: syz [ 189.888120][ T5] usb 5-1: SerialNumber: syz [ 190.048741][ T1285] sr9700: probe of 3-1:0.41 failed with error -71 [ 190.056563][ T1285] usb 3-1: USB disconnect, device number 72 [ 190.076558][ T20] usb 2-1: New USB device found, idVendor=0f11, idProduct=2050, bcdDevice= 2.6a [ 190.077191][ T308] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 190.085634][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.102090][ T20] usb 2-1: Product: 셴⨿㯌붅휱䑩⽫P [ 190.108713][ T20] usb 2-1: SerialNumber: syz [ 190.198006][ T5] usb 5-1: 0:2 : does not exist [ 190.219210][ T5] usb 5-1: USB disconnect, device number 73 [ 190.275919][ T8092] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(184549378) root(3) [ 190.284588][ T8092] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 190.292882][ T8092] F2FS-fs (loop3): Unrecognized mount option "alloc_mQü%áN]kótÆ|¤ode=default" or missing value [ 190.415546][ T20] usb 2-1: USB disconnect, device number 74 [ 190.440558][ T308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.452061][ T8103] devtmpfs: Unknown parameter '´ËAJQ|ÕÉ ŠQZ¡3&LvªPÎ@ÃùëLT´bqBÖbã‚.¼žöŒ µzV~Yµ£éð [ 190.452061][ T8103] 4Ôìö! x¾¼ñyþ}äj' [ 190.459148][ T308] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.526949][ T8109] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.3514: iget: bogus i_mode (4) [ 190.540864][ T8109] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.3514: couldn't read orphan inode 15 (err -117) [ 190.553039][ T8109] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,stripe=0x0000000000000fff,norecovery,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,barrier,dioread_lock,noblock_validity,noquota,,errors=continue [ 190.654417][ T308] usb 1-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 190.663669][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.672275][ T308] usb 1-1: Product: syz [ 190.676538][ T308] usb 1-1: Manufacturer: syz [ 190.681280][ T308] usb 1-1: SerialNumber: syz [ 190.718234][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 190.718248][ T24] audit: type=1326 audit(1785183082.137:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.3.3525" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff281f35e99 code=0x0 [ 190.887585][ T5] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 190.896859][ T298] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 191.027613][ T20] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 191.045867][ T308] usb 1-1: 0:1 : does not exist [ 191.050922][ T308] usb 1-1: unit 5 not found! [ 191.055596][ T308] usb 1-1: unit 2 not found! [ 191.066145][ T308] usb 1-1: USB disconnect, device number 66 [ 191.092593][ T307] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 191.120341][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 191.120349][ T298] usb 5-1: Using ep0 maxpacket: 32 [ 191.242048][ T5] usb 3-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 191.252614][ T5] usb 3-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 191.254565][ T477] udevd[477]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 191.390857][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.401079][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.409865][ T5] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 191.419121][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.427124][ T5] usb 3-1: Product: syz [ 191.431489][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 191.438565][ T298] usb 5-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 191.441510][ T5] usb 3-1: Manufacturer: syz [ 191.454983][ T307] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 191.464873][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.470981][ T5] usb 3-1: SerialNumber: syz [ 191.477549][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 191.483187][ T298] usb 5-1: Product: syz [ 191.491897][ T307] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 191.495486][ T298] usb 5-1: Manufacturer: syz [ 191.506561][ T298] usb 5-1: SerialNumber: syz [ 191.568049][ T20] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 191.579182][ T24] audit: type=1400 audit(1785183339.066:251): avc: denied { create } for pid=8156 comm="syz.0.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 191.581865][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.607612][ T20] usb 4-1: Product: syz [ 191.611807][ T20] usb 4-1: Manufacturer: syz [ 191.616486][ T20] usb 4-1: SerialNumber: syz [ 191.679960][ T307] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 191.689033][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.697225][ T307] usb 2-1: Product: syz [ 191.701514][ T307] usb 2-1: Manufacturer: syz [ 191.706137][ T307] usb 2-1: SerialNumber: syz [ 191.717476][ T307] usb 2-1: config 0 descriptor?? [ 191.754697][ T307] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 191.784966][ T8161] loop0: p1 < > p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p21 [ 191.786483][ T8161] loop0: p5 size 16776960 extends beyond EOD, truncated [ 191.876555][ T298] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 191.883420][ T8161] loop0: p6 size 16776960 extends beyond EOD, truncated [ 191.894980][ T8161] loop0: p7 size 16776960 extends beyond EOD, truncated [ 191.902418][ T8161] loop0: p8 size 16776960 extends beyond EOD, truncated [ 191.905973][ T298] usb 5-1: 2:1: invalid format type 0x1003 is detected, processed as PCM [ 191.911500][ T8161] loop0: p9 size 16776960 extends beyond EOD, [ 191.917977][ T298] usb 5-1: 2:1 : sample bitwidth 127 in over sample bytes 6 [ 191.918351][ T8161] truncated [ 191.924381][ T298] usb 5-1: 2:1 : unsupported sample bitwidth 127 in 6 bytes [ 191.934577][ T8161] loop0: p10 size 16776960 extends beyond EOD, truncated [ 191.949909][ T8161] loop0: p11 size 16776960 extends beyond EOD, truncated [ 191.958333][ T298] usb 5-1: USB disconnect, device number 74 [ 191.966457][ T8161] loop0: p12 size 16776960 extends beyond EOD, truncated [ 191.976021][ T8161] loop0: p13 size 16776960 extends beyond EOD, truncated [ 191.985290][ T8161] loop0: p14 size 16776960 extends beyond EOD, truncated [ 191.993429][ T8161] loop0: p15 size 16776960 extends beyond EOD, truncated [ 192.000619][ T307] scsi host1: usb-storage 2-1:0.0 [ 192.004733][ T8161] loop0: p16 size 16776960 extends beyond EOD, truncated [ 192.013071][ T307] usb 2-1: USB disconnect, device number 75 [ 192.020008][ T8161] loop0: p17 size 16776960 extends beyond EOD, truncated [ 192.027711][ T8161] loop0: p18 size 16776960 extends beyond EOD, truncated [ 192.034146][ T5] usb 3-1: unit 2 not found! [ 192.036576][ T8161] loop0: p19 size 16776960 extends beyond EOD, truncated [ 192.050215][ T8161] loop0: p20 size 16776960 extends beyond EOD, truncated [ 192.055014][ T5] usb 3-1: USB disconnect, device number 73 [ 192.070955][ T8161] loop0: p21 size 16776960 extends beyond EOD, truncated [ 192.079175][ T8161] loop0: p22 size 16776960 extends beyond EOD, truncated [ 192.086935][ T8161] loop0: p23 size 16776960 extends beyond EOD, truncated [ 192.094589][ T8161] loop0: p24 size 16776960 extends beyond EOD, truncated [ 192.102365][ T8161] loop0: p25 size 16776960 extends beyond EOD, truncated [ 192.109979][ T8161] loop0: p26 size 16776960 extends beyond EOD, truncated [ 192.117506][ T8161] loop0: p27 size 16776960 extends beyond EOD, truncated [ 192.124700][ T20] usb 4-1: 0:1 : does not exist [ 192.126342][ T8161] loop0: p28 size 16776960 extends beyond EOD, truncated [ 192.129942][ T20] usb 4-1: unit 9 not found! [ 192.139019][ T8161] loop0: p29 size 16776960 extends beyond EOD, truncated [ 192.141949][ T20] usb 4-1: unit 0 not found! [ 192.150696][ T8161] loop0: p30 size 16776960 extends beyond EOD, truncated [ 192.161625][ T8161] loop0: p31 size 16776960 extends beyond EOD, truncated [ 192.171633][ T3029] udevd[3029]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:239.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 192.188701][ T8161] loop0: p32 size 16776960 extends beyond EOD, truncated [ 192.190094][ T20] usb 4-1: USB disconnect, device number 69 [ 192.203326][ T8161] loop0: p33 size 16776960 extends beyond EOD, truncated [ 192.211740][ T8161] loop0: p34 size 16776960 extends beyond EOD, truncated [ 192.219443][ T8161] loop0: p35 size 16776960 extends beyond EOD, truncated [ 192.227105][ T8161] loop0: p36 size 16776960 extends beyond EOD, truncated [ 192.234852][ T8161] loop0: p37 size 16776960 extends beyond EOD, truncated [ 192.242588][ T8161] loop0: p38 size 16776960 extends beyond EOD, truncated [ 192.250244][ T8161] loop0: p39 size 16776960 extends beyond EOD, truncated [ 192.258357][ T8161] loop0: p40 size 16776960 extends beyond EOD, truncated [ 192.266095][ T8161] loop0: p41 size 16776960 extends beyond EOD, truncated [ 192.273870][ T8161] loop0: p42 size 16776960 extends beyond EOD, truncated [ 192.284007][ T8161] loop0: p43 size 16776960 extends beyond EOD, truncated [ 192.291643][ T8161] loop0: p44 size 16776960 extends beyond EOD, truncated [ 192.299438][ T8161] loop0: p45 size 16776960 extends beyond EOD, truncated [ 192.317642][ T8161] loop0: p46 size 16776960 extends beyond EOD, truncated [ 192.330282][ T8161] loop0: p47 size 16776960 extends beyond EOD, truncated [ 192.339256][ T8161] loop0: p48 size 16776960 extends beyond EOD, truncated [ 192.348629][ T8161] loop0: p49 size 16776960 extends beyond EOD, truncated [ 192.358246][ T8161] loop0: p50 size 16776960 extends beyond EOD, truncated [ 192.365889][ T8161] loop0: p51 size 16776960 extends beyond EOD, truncated [ 192.373856][ T8161] loop0: p52 size 16776960 extends beyond EOD, truncated [ 192.383602][ T8161] loop0: p53 size 16776960 extends beyond EOD, truncated [ 192.392124][ T8173] exFAT-fs (loop2): Invalid exboot-signature(sector = 2): 0x1119abd0 [ 192.400675][ T8173] exFAT-fs (loop2): Invalid exboot-signature(sector = 5): 0x1119abd0 [ 192.409104][ T8173] exFAT-fs (loop2): Invalid exboot-signature(sector = 6): 0x00000000 [ 192.417344][ T3030] udevd[3030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 192.433542][ T8173] exFAT-fs (loop2): Invalid exboot-signature(sector = 7): 0x00000000 [ 192.441871][ T8173] exFAT-fs (loop2): Invalid exboot-signature(sector = 8): 0x00000000 [ 192.450321][ T8173] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e) [ 192.460903][ T8173] exFAT-fs (loop2): invalid boot region [ 192.464947][ T8161] loop0: p54 size 16776960 extends beyond EOD, truncated [ 192.466650][ T8173] exFAT-fs (loop2): failed to recognize exfat type [ 192.487259][ T8161] loop0: p55 size 16776960 extends beyond EOD, truncated [ 192.496744][ T8161] loop0: p56 size 16776960 extends beyond EOD, truncated [ 192.506007][ T8161] loop0: p57 size 16776960 extends beyond EOD, truncated [ 192.513808][ T8161] loop0: p58 size 16776960 extends beyond EOD, truncated [ 192.522102][ T8161] loop0: p59 size 16776960 extends beyond EOD, truncated [ 192.529697][ T8161] loop0: p60 size 16776960 extends beyond EOD, truncated [ 192.537137][ T8161] loop0: p61 size 16776960 extends beyond EOD, truncated [ 192.544875][ T8161] loop0: p62 size 16776960 extends beyond EOD, truncated [ 192.552544][ T8161] loop0: p63 size 16776960 extends beyond EOD, truncated [ 192.565686][ T8161] loop0: p64 size 16776960 extends beyond EOD, truncated [ 192.577056][ T8161] loop0: p65 size 16776960 extends beyond EOD, truncated [ 192.584660][ T8161] loop0: p66 size 16776960 extends beyond EOD, truncated [ 192.592119][ T8161] loop0: p67 size 16776960 extends beyond EOD, truncated [ 192.604713][ T8161] loop0: p68 size 16776960 extends beyond EOD, truncated [ 192.612690][ T8161] loop0: p69 size 16776960 extends beyond EOD, truncated [ 192.620616][ T8161] loop0: p70 size 16776960 extends beyond EOD, truncated [ 192.627885][ T8176] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fbfee48, utbl_chksum : 0xe619d30d) [ 192.644733][ T8161] loop0: p71 size 16776960 extends beyond EOD, truncated [ 192.652643][ T8176] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xff0006ff) [ 192.663286][ T8161] loop0: p72 size 16776960 extends beyond EOD, truncated [ 192.670709][ T8176] exFAT-fs (loop3): Filesystem has been set read-only [ 192.677576][ T8161] loop0: p73 size 16776960 extends beyond EOD, truncated [ 192.677625][ T8176] exFAT-fs (loop3): failed to initialize root inode [ 192.695764][ T8161] loop0: p74 size 16776960 extends beyond EOD, truncated [ 192.708666][ T8161] loop0: p75 size 16776960 extends beyond EOD, truncated [ 192.716720][ T8161] loop0: p76 size 16776960 extends beyond EOD, truncated [ 192.724091][ T298] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 192.726293][ T8161] loop0: p77 size 16776960 extends beyond EOD, truncated [ 192.739699][ T8161] loop0: p78 size 16776960 extends beyond EOD, truncated [ 192.747327][ T8161] loop0: p79 size 16776960 extends beyond EOD, truncated [ 192.761044][ T8184] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 192.767525][ T8161] loop0: p80 size 16776960 extends beyond EOD, truncated [ 192.778034][ T8161] loop0: p81 size 16776960 extends beyond EOD, truncated [ 192.785567][ T8161] loop0: p82 size 16776960 extends beyond EOD, truncated [ 192.793176][ T8161] loop0: p83 size 16776960 extends beyond EOD, truncated [ 192.800776][ T8161] loop0: p84 size 16776960 extends beyond EOD, truncated [ 192.808298][ T8161] loop0: p85 size 16776960 extends beyond EOD, truncated [ 192.815820][ T8161] loop0: p86 size 16776960 extends beyond EOD, truncated [ 192.823184][ T8184] EXT4-fs (loop2): Test dummy encryption mode enabled [ 192.824080][ T8161] loop0: p87 size 16776960 extends beyond EOD, truncated [ 192.837663][ T8161] loop0: p88 size 16776960 extends beyond EOD, truncated [ 192.845557][ T8161] loop0: p89 size 16776960 extends beyond EOD, truncated [ 192.853171][ T8161] loop0: p90 size 16776960 extends beyond EOD, truncated [ 192.860817][ T8161] loop0: p91 size 16776960 extends beyond EOD, truncated [ 192.868466][ T8161] loop0: p92 size 16776960 extends beyond EOD, truncated [ 192.876295][ T8161] loop0: p93 size 16776960 extends beyond EOD, truncated [ 192.884075][ T8161] loop0: p94 size 16776960 extends beyond EOD, truncated [ 192.891748][ T8161] loop0: p95 size 16776960 extends beyond EOD, truncated [ 192.899217][ T8184] EXT4-fs (loop2): can't mount with commit=7, fs mounted w/o journal [ 192.900672][ T8161] loop0: p96 size 16776960 extends beyond EOD, truncated [ 192.927897][ T8161] loop0: p97 size 16776960 extends beyond EOD, truncated [ 192.956598][ T8161] loop0: p98 size 16776960 extends beyond EOD, truncated [ 192.965045][ T8161] loop0: p99 size 16776960 extends beyond EOD, truncated [ 192.972818][ T8161] loop0: p100 size 16776960 extends beyond EOD, truncated [ 192.980470][ T8161] loop0: p101 size 16776960 extends beyond EOD, truncated [ 192.988239][ T8161] loop0: p102 size 16776960 extends beyond EOD, truncated [ 192.996000][ T8161] loop0: p103 size 16776960 extends beyond EOD, truncated [ 193.004107][ T8161] loop0: p104 size 16776960 extends beyond EOD, truncated [ 193.023465][ T8161] loop0: p105 size 16776960 extends beyond EOD, truncated [ 193.035062][ T8196] EXT4-fs (loop2): Ignoring removed nobh option [ 193.035598][ T8161] loop0: p106 size 16776960 extends beyond EOD, truncated [ 193.054009][ T8161] loop0: p107 size 16776960 extends beyond EOD, truncated [ 193.061416][ T298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.071974][ T8161] loop0: p108 size 16776960 extends beyond EOD, truncated [ 193.079968][ T8196] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 193.085135][ T298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 193.101881][ T8161] loop0: p109 size 16776960 extends beyond EOD, truncated [ 193.103131][ T8199] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 193.123414][ T8161] loop0: p110 size 16776960 extends beyond EOD, truncated [ 193.124891][ T8196] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #13: comm syz.2.3552: attempt to clear invalid blocks 1 len 1 [ 193.131931][ T8161] loop0: p111 size 16776960 extends beyond EOD, truncated [ 193.151125][ T8161] loop0: p112 size 16776960 extends beyond EOD, truncated [ 193.159098][ T8161] loop0: p113 size 16776960 extends beyond EOD, truncated [ 193.166768][ T8161] loop0: p114 size 16776960 extends beyond EOD, truncated [ 193.174449][ T8161] loop0: p115 size 16776960 extends beyond EOD, truncated [ 193.182146][ T8161] loop0: p116 size 16776960 extends beyond EOD, truncated [ 193.185645][ T8196] EXT4-fs (loop2): Remounting filesystem read-only [ 193.190608][ T8161] loop0: p117 size 16776960 extends beyond EOD, truncated [ 193.203480][ T8161] loop0: p118 size 16776960 extends beyond EOD, truncated [ 193.209037][ T8196] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 193.225380][ T8161] loop0: p119 size 16776960 extends beyond EOD, truncated [ 193.233061][ T8161] loop0: p120 size 16776960 extends beyond EOD, truncated [ 193.240745][ T8161] loop0: p121 size 16776960 extends beyond EOD, truncated [ 193.248546][ T8161] loop0: p122 size 16776960 extends beyond EOD, truncated [ 193.255897][ T8196] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.3552: invalid indirect mapped block 1819239214 (level 0) [ 193.256764][ T8161] loop0: p123 size 16776960 extends beyond EOD, truncated [ 193.277510][ T8161] loop0: p124 size 16776960 extends beyond EOD, truncated [ 193.284793][ T8196] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.3552: invalid indirect mapped block 1819239214 (level 1) [ 193.285250][ T8161] loop0: p125 size 16776960 extends beyond EOD, [ 193.299478][ T8196] EXT4-fs (loop2): 1 truncate cleaned up [ 193.311981][ T8196] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=.. [ 193.320642][ T8161] truncated [ 193.334945][ T298] usb 5-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice= 0.40 [ 193.348752][ T8161] loop0: p126 size 16776960 extends beyond EOD, truncated [ 193.357435][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.367787][ T8161] loop0: p127 size 16776960 extends beyond EOD, truncated [ 193.382823][ T298] usb 5-1: Product: syz [ 193.386259][ T8161] loop0: p128 size 16776960 extends beyond EOD, truncated [ 193.389040][ T298] usb 5-1: Manufacturer: syz [ 193.399975][ T8161] loop0: p129 size 16776960 extends beyond EOD, truncated [ 193.408575][ T298] usb 5-1: SerialNumber: syz [ 193.414256][ T8161] loop0: p130 size 16776960 extends beyond EOD, truncated [ 193.424361][ T8161] loop0: p131 size 16776960 extends beyond EOD, truncated [ 193.432447][ T8161] loop0: p132 size 16776960 extends beyond EOD, truncated [ 193.440070][ T8161] loop0: p133 size 16776960 extends beyond EOD, truncated [ 193.447877][ T8161] loop0: p134 size 16776960 extends beyond EOD, truncated [ 193.463393][ T8161] loop0: p135 size 16776960 extends beyond EOD, truncated [ 193.466687][ T24] audit: type=1400 audit(1785183341.094:252): avc: denied { mmap_zero } for pid=8204 comm="syz.2.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 193.485696][ T8161] loop0: p136 size 16776960 extends beyond EOD, truncated [ 193.507603][ T8161] loop0: p137 size 16776960 extends beyond EOD, truncated [ 193.516142][ T8161] loop0: p138 size 16776960 extends beyond EOD, truncated [ 193.523893][ T8161] loop0: p139 size 16776960 extends beyond EOD, truncated [ 193.531741][ T8161] loop0: p140 size 16776960 extends beyond EOD, truncated [ 193.544357][ T8161] loop0: p141 size 16776960 extends beyond EOD, truncated [ 193.552318][ T8161] loop0: p142 size 16776960 extends beyond EOD, truncated [ 193.560624][ T8161] loop0: p143 size 16776960 extends beyond EOD, truncated [ 193.568674][ T8161] loop0: p144 size 16776960 extends beyond EOD, truncated [ 193.576755][ T8161] loop0: p145 size 16776960 extends beyond EOD, truncated [ 193.584668][ T8161] loop0: p146 size 16776960 extends beyond EOD, truncated [ 193.592564][ T8161] loop0: p147 size 16776960 extends beyond EOD, truncated [ 193.600488][ T8192] F2FS-fs (loop3): Invalid uid value -1 [ 193.602896][ T8161] loop0: p148 size 16776960 extends beyond EOD, truncated [ 193.615065][ T8161] loop0: p149 size 16776960 extends beyond EOD, truncated [ 193.625775][ T8161] loop0: p150 size 16776960 extends beyond EOD, truncated [ 193.634179][ T8161] loop0: p151 size 16776960 extends beyond EOD, truncated [ 193.643312][ T8161] loop0: p152 size 16776960 extends beyond EOD, truncated [ 193.651203][ T8161] loop0: p153 size 16776960 extends beyond EOD, truncated [ 193.659109][ T8161] loop0: p154 size 16776960 extends beyond EOD, truncated [ 193.666851][ T8161] loop0: p155 size 16776960 extends beyond EOD, truncated [ 193.674403][ T8161] loop0: p156 size 16776960 extends beyond EOD, truncated [ 193.682168][ T8161] loop0: p157 size 16776960 extends beyond EOD, truncated [ 193.689931][ T8161] loop0: p158 size 16776960 extends beyond EOD, truncated [ 193.707804][ T8161] loop0: p159 size 16776960 extends beyond EOD, truncated [ 193.713260][ T298] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 193.722571][ T8161] loop0: p160 size 16776960 extends beyond EOD, truncated [ 193.732874][ T298] usb 5-1: USB disconnect, device number 75 [ 193.748495][ T8161] loop0: p161 size 16776960 extends beyond EOD, truncated [ 193.762114][ T8161] loop0: p162 size 16776960 extends beyond EOD, truncated [ 193.779056][ T8161] loop0: p163 size 16776960 extends beyond EOD, truncated [ 193.798183][ T8161] loop0: p164 size 16776960 extends beyond EOD, truncated [ 193.818051][ T8161] loop0: p165 size 16776960 extends beyond EOD, truncated [ 193.831201][ T8161] loop0: p166 size 16776960 extends beyond EOD, truncated [ 193.862158][ T8161] loop0: p167 size 16776960 extends beyond EOD, truncated [ 193.873442][ T8161] loop0: p168 size 16776960 extends beyond EOD, truncated [ 193.895288][ T8161] loop0: p169 size 16776960 extends beyond EOD, truncated [ 193.903727][ T8161] loop0: p170 size 16776960 extends beyond EOD, truncated [ 193.912095][ T8161] loop0: p171 size 16776960 extends beyond EOD, truncated [ 193.920062][ T8161] loop0: p172 size 16776960 extends beyond EOD, truncated [ 193.927838][ T8161] loop0: p173 size 16776960 extends beyond EOD, truncated [ 193.935542][ T8161] loop0: p174 size 16776960 extends beyond EOD, truncated [ 193.943070][ T8161] loop0: p175 size 16776960 extends beyond EOD, truncated [ 193.950735][ T8161] loop0: p176 size 16776960 extends beyond EOD, truncated [ 193.959348][ T8236] FAT-fs (loop2): bogus number of FAT sectors [ 193.968008][ T477] udevd[477]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 193.976809][ T8236] FAT-fs (loop2): Can't find a valid FAT filesystem [ 193.990870][ T8161] loop0: p177 size 16776960 extends beyond EOD, truncated [ 194.004259][ T8161] loop0: p178 size 16776960 extends beyond EOD, truncated [ 194.019153][ T8161] loop0: p179 size 16776960 extends beyond EOD, truncated [ 194.028940][ T8161] loop0: p180 size 16776960 extends beyond EOD, truncated [ 194.039387][ T8161] loop0: p181 size 16776960 extends beyond EOD, truncated [ 194.047288][ T8161] loop0: p182 size 16776960 extends beyond EOD, truncated [ 194.055491][ T8161] loop0: p183 size 16776960 extends beyond EOD, truncated [ 194.069135][ T8161] loop0: p184 size 16776960 extends beyond EOD, truncated [ 194.079555][ T8161] loop0: p185 size 16776960 extends beyond EOD, truncated [ 194.087342][ T8161] loop0: p186 size 16776960 extends beyond EOD, truncated [ 194.096120][ T8161] loop0: p187 size 16776960 extends beyond EOD, truncated [ 194.109302][ T8161] loop0: p188 size 16776960 extends beyond EOD, truncated [ 194.117484][ T8161] loop0: p189 size 16776960 extends beyond EOD, truncated [ 194.125677][ T8161] loop0: p190 size 16776960 extends beyond EOD, truncated [ 194.133514][ T8161] loop0: p191 size 16776960 extends beyond EOD, truncated [ 194.141987][ T8161] loop0: p192 size 16776960 extends beyond EOD, truncated [ 194.151475][ T8241] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 194.166624][ T8161] loop0: p193 size 16776960 extends beyond EOD, truncated [ 194.174407][ T8161] loop0: p194 size 16776960 extends beyond EOD, truncated [ 194.182334][ T8161] loop0: p195 size 16776960 extends beyond EOD, truncated [ 194.192827][ T8161] loop0: p196 size 16776960 extends beyond EOD, truncated [ 194.203215][ T8161] loop0: p197 size 16776960 extends beyond EOD, truncated [ 194.211486][ T8161] loop0: p198 size 16776960 extends beyond EOD, truncated [ 194.219532][ T8250] FAT-fs (loop2): bogus sectors per cluster 0 [ 194.225080][ T8161] loop0: p199 size 16776960 extends beyond EOD, truncated [ 194.226103][ T8250] FAT-fs (loop2): Can't find a valid FAT filesystem [ 194.234646][ T8161] loop0: p200 size 16776960 extends beyond EOD, truncated [ 194.247144][ T8161] loop0: p201 size 16776960 extends beyond EOD, truncated [ 194.254981][ T8161] loop0: p202 size 16776960 extends beyond EOD, truncated [ 194.262739][ T8161] loop0: p203 size 16776960 extends beyond EOD, truncated [ 194.270249][ T8161] loop0: p204 size 16776960 extends beyond EOD, truncated [ 194.277912][ T8161] loop0: p205 size 16776960 extends beyond EOD, truncated [ 194.285597][ T8253] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.295080][ T8253] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 1024 [ 194.297146][ T8161] loop0: p206 size 16776960 extends beyond EOD, truncated [ 194.311120][ T8161] loop0: p207 size 16776960 extends beyond EOD, truncated [ 194.318843][ T8161] loop0: p208 size 16776960 extends beyond EOD, truncated [ 194.326432][ T8161] loop0: p209 size 16776960 extends beyond EOD, truncated [ 194.334141][ T8161] loop0: p210 size 16776960 extends beyond EOD, truncated [ 194.341830][ T8161] loop0: p211 size 16776960 extends beyond EOD, truncated [ 194.349519][ T8161] loop0: p212 size 16776960 extends beyond EOD, truncated [ 194.357184][ T8161] loop0: p213 size 16776960 extends beyond EOD, truncated [ 194.381734][ T8161] loop0: p214 size 16776960 extends beyond EOD, truncated [ 194.397459][ T8161] loop0: p215 size 16776960 extends beyond EOD, truncated [ 194.407254][ T8161] loop0: p216 size 16776960 extends beyond EOD, truncated [ 194.417133][ T8161] loop0: p217 size 16776960 extends beyond EOD, truncated [ 194.424987][ T8161] loop0: p218 size 16776960 extends beyond EOD, truncated [ 194.432807][ T8161] loop0: p219 size 16776960 extends beyond EOD, truncated [ 194.440507][ T8161] loop0: p220 size 16776960 extends beyond EOD, truncated [ 194.448311][ T8161] loop0: p221 size 16776960 extends beyond EOD, truncated [ 194.458936][ T24] audit: type=1400 audit(1785183342.166:253): avc: denied { create } for pid=8263 comm="syz.2.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 194.483571][ T8268] 9pnet: p9_fd_create_tcp (8268): problem connecting socket to 127.0.0.1 [ 194.492513][ T8161] loop0: p222 size 16776960 extends beyond EOD, truncated [ 194.500276][ T8161] loop0: p223 size 16776960 extends beyond EOD, truncated [ 194.520221][ T8161] loop0: p224 size 16776960 extends beyond EOD, truncated [ 194.528197][ T8161] loop0: p225 size 16776960 extends beyond EOD, truncated [ 194.536097][ T8161] loop0: p226 size 16776960 extends beyond EOD, truncated [ 194.546364][ T8161] loop0: p227 size 16776960 extends beyond EOD, truncated [ 194.569415][ T8161] loop0: p228 size 16776960 extends beyond EOD, truncated [ 194.585143][ T8161] loop0: p229 size 16776960 extends beyond EOD, truncated [ 194.597569][ T8161] loop0: p230 size 16776960 extends beyond EOD, truncated [ 194.606354][ T8161] loop0: p231 size 16776960 extends beyond EOD, truncated [ 194.613984][ T8161] loop0: p232 size 16776960 extends beyond EOD, truncated [ 194.621668][ T8161] loop0: p233 size 16776960 extends beyond EOD, truncated [ 194.629297][ T8161] loop0: p234 size 16776960 extends beyond EOD, truncated [ 194.637014][ T8161] loop0: p235 size 16776960 extends beyond EOD, truncated [ 194.644615][ T8161] loop0: p236 size 16776960 extends beyond EOD, truncated [ 194.652313][ T8161] loop0: p237 size 16776960 extends beyond EOD, truncated [ 194.653056][ T20] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 194.663491][ T8161] loop0: p238 size 16776960 extends beyond EOD, truncated [ 194.674417][ T5] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 194.682775][ T8161] loop0: p239 size 16776960 extends beyond EOD, truncated [ 194.691749][ T8274] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #11: comm syz.2.3586: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 194.710473][ T8161] loop0: p240 size 16776960 extends beyond EOD, truncated [ 194.726182][ T8161] loop0: p241 size 16776960 extends beyond EOD, truncated [ 194.734024][ T8274] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3586: couldn't read orphan inode 11 (err -117) [ 194.746331][ T8274] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 194.746339][ T8161] loop0: p242 size 16776960 extends beyond EOD, truncated [ 194.771896][ T8161] loop0: p243 size 16776960 extends beyond EOD, truncated [ 194.779798][ T8161] loop0: p244 size 16776960 extends beyond EOD, truncated [ 194.787550][ T8161] loop0: p245 size 16776960 extends beyond EOD, truncated [ 194.795227][ T8161] loop0: p246 size 16776960 extends beyond EOD, truncated [ 194.802922][ T8161] loop0: p247 size 16776960 extends beyond EOD, truncated [ 194.810543][ T8161] loop0: p248 size 16776960 extends beyond EOD, truncated [ 194.818490][ T8161] loop0: p249 size 16776960 extends beyond EOD, truncated [ 194.826301][ T8161] loop0: p250 size 16776960 extends beyond EOD, truncated [ 194.833959][ T8161] loop0: p251 size 16776960 extends beyond EOD, truncated [ 194.841645][ T8161] loop0: p252 size 16776960 extends beyond EOD, truncated [ 194.850124][ T8161] loop0: p253 size 16776960 extends beyond EOD, truncated [ 194.858285][ T8161] loop0: p254 size 16776960 extends beyond EOD, truncated [ 194.871799][ T8161] loop0: p255 size 16776960 extends beyond EOD, truncated [ 194.912096][ T8266] F2FS-fs (loop4): invalid crc value [ 194.917747][ T8266] F2FS-fs (loop4): Wrong cp_pack_start_sum: 1 [ 194.924509][ T8266] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 194.951093][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 194.951998][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 195.064518][ T20] usb 2-1: config 3 has an invalid interface number: 127 but max is 0 [ 195.072735][ T20] usb 2-1: config 3 has no interface number 0 [ 195.086984][ T20] usb 2-1: config 3 interface 127 altsetting 42 bulk endpoint 0xC has invalid maxpacket 16 [ 195.091706][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.108578][ T20] usb 2-1: config 3 interface 127 has no altsetting 0 [ 195.116072][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 195.143382][ T477] udevd[477]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 195.154865][ T3030] udevd[3030]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 195.154882][ T3034] udevd[3034]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 195.167863][ T3033] udevd[3033]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 195.185635][ T3029] udevd[3029]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 195.196650][ T315] udevd[315]: inotify_add_watch(7, /dev/loop0p8, 10) failed: No such file or directory [ 195.286685][ T20] usb 2-1: New USB device found, idVendor=0582, idProduct=f1a4, bcdDevice=77.d8 [ 195.288093][ T5] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 195.300963][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.351886][ T20] usb 2-1: Product: syz [ 195.375129][ T5] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 195.421322][ T20] usb 2-1: Manufacturer: syz [ 195.442689][ T20] usb 2-1: SerialNumber: syz [ 195.457284][ T5] usb 4-1: Product: syz [ 195.461496][ T5] usb 4-1: SerialNumber: syz [ 195.482978][ T8260] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 195.665481][ T8316] loop2: p2 p3 [ 195.679622][ T8316] loop2: p3 start 100859904 is beyond EOD, truncated [ 195.755271][ T95] loop2: p2 p3 [ 195.759369][ T95] loop2: p3 start 100859904 is beyond EOD, truncated [ 195.790474][ T5] cdc_ncm 4-1:1.0: bind() failure [ 195.799649][ T5] usb 4-1: USB disconnect, device number 70 [ 195.837649][ T20] usb 2-1: USB disconnect, device number 76 [ 195.898600][ T8325] overlayfs: missing 'lowerdir' [ 196.108709][ T8327] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 196.138531][ T8327] F2FS-fs (loop2): invalid crc value [ 196.152833][ T8327] F2FS-fs (loop2): invalid crc value [ 196.158324][ T8327] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 196.312674][ T8302] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 196.331570][ T8302] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 196.352296][ T8323] F2FS-fs (loop0): invalid crc value [ 196.367419][ T8302] F2FS-fs (loop4): Encoding requested by superblock is unknown [ 196.386525][ T8323] F2FS-fs (loop0): SIT is corrupted node# 0 vs 1 [ 196.393051][ T8323] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 196.435407][ T8338] loop1: p1 < > p4 < > [ 196.640561][ T8346] erofs: (device loop3): mounted with root inode @ nid 36. [ 196.768585][ T8349] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 196.836561][ T3029] udevd[3029]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 196.837022][ T3033] udevd[3033]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 196.943951][ T8354] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 197.233651][ T8371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 197.273696][ T8360] F2FS-fs (loop4): invalid crc value [ 197.280504][ T8360] F2FS-fs (loop4): Found nat_bits in checkpoint [ 197.309336][ T305] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 197.352436][ T8360] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 197.366599][ T8360] SELinux: (dev loop4, type f2fs) getxattr errno 2 [ 197.373502][ T8363] F2FS-fs (loop1): LFS not compatible with checkpoint=disable [ 197.562868][ T477] udevd[477]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 197.573506][ T3029] udevd[3029]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 197.584229][ T3030] udevd[3030]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 197.591586][ T3034] udevd[3034]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 197.604877][ T310] udevd[310]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 197.615720][ T3033] udevd[3033]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 197.615738][ T3031] udevd[3031]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 197.628199][ T315] udevd[315]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 197.667942][ T8386] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 197.703266][ T8383] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 197.757558][ T305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 197.834572][ T8392] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 197.897170][ T8396] FAT-fs (loop0): bogus number of FAT sectors [ 197.905299][ T8396] FAT-fs (loop0): Can't find a valid FAT filesystem [ 197.990051][ T305] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 197.999234][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.007240][ T305] usb 4-1: Product: syz [ 198.013975][ T305] usb 4-1: Manufacturer: syz [ 198.022141][ T305] usb 4-1: SerialNumber: syz [ 198.134749][ T8402] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 198.409371][ T305] usb 4-1: MIDIStreaming interface descriptor not found [ 198.420290][ T305] usb 4-1: USB disconnect, device number 71 [ 198.680046][ T5] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 198.912537][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 199.024788][ T5] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 199.201830][ T5] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 199.214680][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.232907][ T5] usb 2-1: Product: syz [ 199.237139][ T5] usb 2-1: Manufacturer: syz [ 199.251744][ T5] usb 2-1: SerialNumber: syz [ 199.276147][ T8421] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.630253][ T5] usb 2-1: MIDIStreaming interface descriptor not found [ 199.650492][ T5] usb 2-1: USB disconnect, device number 77 [ 200.217916][ T8436] F2FS-fs (loop4): Allow to mount readonly mode only [ 200.401289][ T8450] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 200.479944][ T8423] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.516087][ T305] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 200.561768][ T8423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 200.925954][ T305] usb 5-1: not running at top speed; connect to a high speed hub [ 200.972805][ T5] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 201.010129][ T305] usb 5-1: config 5 has an invalid interface number: 201 but max is 0 [ 201.018502][ T305] usb 5-1: config 5 has no interface number 0 [ 201.024874][ T305] usb 5-1: config 5 interface 201 has no altsetting 0 [ 201.070059][ T8471] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 201.094883][ T24] audit: type=1400 audit(1785183349.276:254): avc: denied { create } for pid=8474 comm="syz.3.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.115714][ T24] audit: type=1400 audit(1785183349.276:255): avc: denied { write } for pid=8474 comm="syz.3.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.138411][ T24] audit: type=1400 audit(1785183349.276:256): avc: denied { nlmsg_write } for pid=8474 comm="syz.3.3658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.160198][ T8477] netlink: 'syz.3.3659': attribute type 5 has an invalid length. [ 201.178764][ T8479] netlink: 'syz.3.3660': attribute type 15 has an invalid length. [ 201.186806][ T8479] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.196567][ T305] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=4c.34 [ 201.205695][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.213702][ T305] usb 5-1: Product: syz [ 201.217970][ T305] usb 5-1: Manufacturer: syz [ 201.222592][ T305] usb 5-1: SerialNumber: syz [ 201.232109][ T8481] netlink: 'syz.3.3661': attribute type 10 has an invalid length. [ 201.234872][ T25] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 201.240655][ T8481] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3661'. [ 201.288339][ T24] audit: type=1400 audit(1785183349.480:257): avc: denied { read } for pid=8486 comm="syz.3.3664" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.312608][ T24] audit: type=1400 audit(1785183349.480:258): avc: denied { open } for pid=8486 comm="syz.3.3664" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.337269][ T24] audit: type=1400 audit(1785183349.480:259): avc: denied { ioctl } for pid=8486 comm="syz.3.3664" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.382398][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.392644][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.466577][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 201.532009][ T305] usb_ehset_test: probe of 5-1:5.201 failed with error -32 [ 201.540040][ T305] usb 5-1: USB disconnect, device number 76 [ 201.568726][ T5] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 201.577840][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.585905][ T5] usb 2-1: Product: syz [ 201.590241][ T5] usb 2-1: Manufacturer: syz [ 201.594848][ T5] usb 2-1: SerialNumber: syz [ 201.624688][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 201.867006][ T25] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 201.876211][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.884186][ T25] usb 1-1: Product: syz [ 201.888432][ T25] usb 1-1: Manufacturer: syz [ 201.893034][ T25] usb 1-1: SerialNumber: syz [ 201.923020][ T5] usb 2-1: 0:1 : does not exist [ 201.928034][ T5] usb 2-1: BAAD SPEAKER p_chmask mismatch [ 201.934107][ T5] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 201.942237][ T5] usb 2-1: USB disconnect, device number 78 [ 201.994060][ T24] audit: type=1400 audit(1785183350.242:260): avc: denied { create } for pid=8496 comm="syz.4.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.014723][ T24] audit: type=1400 audit(1785183350.242:261): avc: denied { write } for pid=8496 comm="syz.4.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.039604][ T24] audit: type=1400 audit(1785183350.295:262): avc: denied { ioctl } for pid=8498 comm="syz.4.3669" path="socket:[37917]" dev="sockfs" ino=37917 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.239778][ T25] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 202.277693][ T25] usb 1-1: unit 37 not found! [ 202.282400][ T25] usb 1-1: unit 0 not found! [ 202.287100][ T20] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 202.332746][ T25] usb 1-1: USB disconnect, device number 67 [ 202.354065][ T8505] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 202.519607][ T3033] udevd[3033]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 202.603782][ T307] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 202.622507][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.651557][ T20] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 202.689644][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.700644][ T8543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.716276][ T20] usb 5-1: config 0 descriptor?? [ 202.804324][ T8557] x_tables: unsorted entry at hook 3 [ 202.930113][ T305] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 202.944251][ T24] audit: type=1400 audit(1785183351.261:263): avc: denied { write } for pid=8568 comm="syz.0.3702" name="config" dev="proc" ino=4026532781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 202.978482][ T20] usb 5-1: string descriptor 0 read error: -71 [ 202.995939][ T20] rndis_host 5-1:0.0: skipping garbage [ 203.001483][ T20] usb 5-1: bad CDC descriptors [ 203.023673][ T20] usb 5-1: USB disconnect, device number 77 [ 203.051029][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.162834][ T307] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 203.179690][ T8593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.251861][ T8525] F2FS-fs (loop1): Test dummy encryption mode enabled [ 203.258969][ T8525] F2FS-fs (loop1): Test dummy encryption mode enabled [ 203.272882][ T8525] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.321208][ T305] usb 3-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 203.322478][ T8525] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 203.341197][ T305] usb 3-1: config 24 has an invalid descriptor of length 171, skipping remainder of the config [ 203.367494][ T305] usb 3-1: config 24 has 1 interface, different from the descriptor's value: 158 [ 203.376967][ T307] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 203.386030][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.412508][ T307] usb 4-1: Product: syz [ 203.437597][ T307] usb 4-1: Manufacturer: syz [ 203.442228][ T307] usb 4-1: SerialNumber: syz [ 203.505698][ T8618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.601415][ T305] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 203.610725][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.618773][ T305] usb 3-1: Product: syz [ 203.623386][ T305] usb 3-1: Manufacturer: syz [ 203.628006][ T305] usb 3-1: SerialNumber: syz [ 203.744015][ T307] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 203.770250][ T307] usb 4-1: USB disconnect, device number 72 [ 203.992125][ T305] usb 3-1: 0:1 : does not exist [ 203.997055][ T305] usb 3-1: unit 80 not found! [ 204.007204][ T305] usb 3-1: USB disconnect, device number 74 [ 204.116684][ T8675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.183291][ T8681] netlink: 'syz.4.3754': attribute type 10 has an invalid length. [ 204.191518][ T8681] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3754'. [ 204.210105][ T477] udevd[477]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:24.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 204.226108][ T20] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 204.429456][ T8673] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 204.451811][ T8713] usb usb9: usbfs: process 8713 (syz.2.3769) did not claim interface 0 before use [ 204.458195][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 204.467684][ T8673] F2FS-fs (loop1): invalid crc value [ 204.479556][ T8673] F2FS-fs (loop1): invalid crc value [ 204.484921][ T8673] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 204.570104][ T20] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 204.578338][ T20] usb 1-1: config 0 has no interface number 0 [ 204.617056][ T20] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 204.630154][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3779'. [ 204.644985][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.665965][ T20] usb 1-1: config 0 descriptor?? [ 204.700147][ T8744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3785'. [ 204.793004][ T8758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.888682][ T8775] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3801'. [ 204.902846][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3801'. [ 204.919530][ T20] usb 1-1: USB disconnect, device number 68 [ 204.939639][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3801'. [ 204.958099][ T8775] tc_dump_action: action bad kind [ 205.076055][ T8794] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 205.119725][ T8794] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #16: comm syz.4.3809: mark_inode_dirty error [ 205.138895][ T8794] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 205.150018][ T8794] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #16: comm syz.4.3809: mark_inode_dirty error [ 205.166975][ T8794] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 205.186055][ T8794] EXT4-fs error (device loop4) in ext4_orphan_del:3292: error 27 [ 205.202121][ T8794] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 205.211064][ T8794] EXT4-fs error (device loop4): ext4_truncate:4403: inode #16: comm syz.4.3809: mark_inode_dirty error [ 205.231700][ T8794] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3106: error 27 [ 205.251537][ T8794] EXT4-fs (loop4): 1 truncate cleaned up [ 205.257244][ T8794] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 205.293577][ T8848] device bridge1 entered promiscuous mode [ 205.309985][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3835'. [ 205.384013][ T8861] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 205.553761][ T8885] xt_l2tp: missing protocol rule (udp|l2tpip) [ 205.743254][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3871'. [ 205.786005][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 205.786021][ T24] audit: type=1400 audit(1785183354.308:335): avc: denied { read write } for pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.854761][ T8943] xt_nat: multiple ranges no longer supported [ 205.874188][ T24] audit: type=1400 audit(1785183354.319:336): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.930394][ T24] audit: type=1400 audit(1785183354.351:337): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.963707][ T8957] netlink: 'syz.1.3886': attribute type 27 has an invalid length. [ 206.002157][ T24] audit: type=1400 audit(1785183354.362:338): avc: denied { read write } for pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.066211][ T24] audit: type=1400 audit(1785183354.362:339): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.066231][ T24] audit: type=1400 audit(1785183354.372:340): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.066249][ T24] audit: type=1400 audit(1785183354.394:341): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.066268][ T24] audit: type=1400 audit(1785183354.394:342): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.094821][ T24] audit: type=1400 audit(1785183354.426:343): avc: denied { read write } for pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.094847][ T24] audit: type=1400 audit(1785183354.437:344): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 206.594128][ T9042] device bridge_slave_1 left promiscuous mode [ 206.610459][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.623468][ T9042] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 206.719484][ T9061] netlink: 'syz.1.3936': attribute type 17 has an invalid length. [ 206.766368][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3940'. [ 206.784947][ T9077] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 0 [ 206.794317][ T9073] netlink: 'syz.1.3942': attribute type 4 has an invalid length. [ 206.802554][ T9073] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3942'. [ 207.004124][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3963'. [ 207.058467][ T9129] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 207.404983][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4012'. [ 207.433056][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 207.529571][ T9238] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4024'. [ 207.590891][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4030'. [ 207.601672][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4029'. [ 207.627771][ T9248] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4030'. [ 207.753737][ T9276] xt_CT: No such helper "netbios-ns" [ 207.775762][ T9284] IPv6: sit1: Disabled Multicast RS [ 207.936087][ T9327] netlink: 'syz.1.4070': attribute type 17 has an invalid length. [ 207.944645][ T9327] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4070'. [ 207.954423][ T9327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.015621][ T9343] xt_hashlimit: max too large, truncated to 1048576 [ 208.408255][ T9453] device sit0 entered promiscuous mode [ 208.421307][ T9453] netlink: 'syz.3.4131': attribute type 1 has an invalid length. [ 208.588068][ T9493] xt_policy: output policy not valid in PREROUTING and INPUT [ 208.910003][ T9571] tc_dump_action: action bad kind [ 208.930730][ T9573] netlink: 'syz.3.4192': attribute type 3 has an invalid length. [ 208.942026][ T9573] netlink: 'syz.3.4192': attribute type 3 has an invalid length. [ 209.035035][ T9609] IPv6: A: Disabled Multicast RS [ 209.188585][ T9658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.195871][ T9658] IPv6: NLM_F_CREATE should be set when creating new route [ 209.203133][ T9658] IPv6: NLM_F_CREATE should be set when creating new route [ 209.379172][ T9705] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.443106][ T9723] device bridge2 entered promiscuous mode [ 209.460696][ T9727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.740892][ T9805] device sit0 left promiscuous mode [ 209.761316][ T9805] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.775446][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.797499][ T9805] device bridge1 left promiscuous mode [ 209.803467][ T9805] device bridge2 left promiscuous mode [ 209.811026][ T9818] device bridge1 entered promiscuous mode [ 209.957968][ T9862] netlink: 'syz.4.4334': attribute type 21 has an invalid length. [ 210.002868][ T9874] netlink: 'syz.0.4340': attribute type 5 has an invalid length. [ 210.061725][ T9890] netlink: 'syz.4.4348': attribute type 13 has an invalid length. [ 210.200197][ T9932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9932 comm=syz.0.4368 [ 210.368979][ T9984] device gre1 entered promiscuous mode [ 210.469772][ T24] kauditd_printk_skb: 622 callbacks suppressed [ 210.469787][ T24] audit: type=1400 audit(1785184127.316:967): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.473336][T10015] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.499079][ T24] audit: type=1400 audit(1785184127.337:968): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.511486][T10015] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 210.552347][ T24] audit: type=1400 audit(1785184127.358:969): avc: denied { read write } for pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.584265][ T24] audit: type=1400 audit(1785184127.442:970): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.640354][ T24] audit: type=1400 audit(1785184127.452:971): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.673978][ T24] audit: type=1400 audit(1785184127.473:972): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.699045][ T24] audit: type=1400 audit(1785184127.484:973): avc: denied { read write } for pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.734538][ T24] audit: type=1400 audit(1785184127.494:974): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.765764][T10047] device vlan0 entered promiscuous mode [ 210.780731][ T24] audit: type=1400 audit(1785184127.505:975): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.812735][ T24] audit: type=1400 audit(1785184127.505:976): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.176724][T10141] validate_nla: 1 callbacks suppressed [ 211.176734][T10141] netlink: 'syz.2.4473': attribute type 4 has an invalid length. [ 211.208004][T10141] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 211.230510][T10151] device vlan0 left promiscuous mode [ 211.751029][T10262] device vlan0 entered promiscuous mode [ 211.982412][T10311] netlink: 'syz.3.4557': attribute type 29 has an invalid length. [ 211.997666][T10311] __nla_validate_parse: 29 callbacks suppressed [ 211.997676][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4557'. [ 212.015164][T10311] netlink: 'syz.3.4557': attribute type 29 has an invalid length. [ 212.024175][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4557'. [ 212.414491][T10388] netlink: 'syz.4.4595': attribute type 3 has an invalid length. [ 212.602546][T10426] IPv6: sit1: Disabled Multicast RS [ 212.757528][T10458] tc_dump_action: action bad kind [ 212.891478][T10482] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.4641'. [ 212.938711][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4645'. [ 213.015482][T10502] xt_CONNSECMARK: invalid mode: 0 [ 213.062770][T10510] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.226432][T10544] netlink: 5412 bytes leftover after parsing attributes in process `syz.2.4671'. [ 213.251407][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 213.278859][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 213.298869][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 213.309043][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 213.326356][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'. [ 213.342509][T10550] device vlan0 left promiscuous mode [ 213.354487][T10550] device bridge1 left promiscuous mode [ 213.366980][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 213.380111][T10559] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 213.566187][T10598] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 214.147536][T10704] netlink: 'syz.2.4749': attribute type 1 has an invalid length. [ 214.213553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.233484][ T24] kauditd_printk_skb: 2741 callbacks suppressed [ 215.233498][ T24] audit: type=1400 audit(1785184132.334:3719): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 215.300585][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.303552][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.320531][ T134] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 215.332066][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.336140][ T134] audit: backlog limit exceeded [ 215.342456][ T24] audit: type=1400 audit(1785184132.355:3720): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 215.350100][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 215.368831][ T287] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 215.384924][ T286] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 215.410121][T10834] xt_ecn: cannot match TCP bits for non-tcp packets [ 215.720894][T10870] IPv6: sit1: Disabled Multicast RS [ 215.741258][T10874] 8021q: VLANs not supported on wg2 [ 215.933631][T10889] netlink: 'syz.4.4838': attribute type 3 has an invalid length. [ 216.378420][T10929] tc_dump_action: action bad kind [ 216.482078][T10939] netlink: 'syz.3.4863': attribute type 21 has an invalid length. [ 216.542870][T10944] xt_policy: too many policy elements [ 216.767314][T10973] __nla_validate_parse: 105 callbacks suppressed [ 216.767324][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4883'. [ 217.010525][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4895'. [ 217.159879][T11020] netlink: 'syz.3.4904': attribute type 2 has an invalid length. [ 217.686945][T11079] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 217.819354][T11091] ip_tables: iptables: counters copy to user failed while replacing table [ 217.959684][T11104] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.035161][T11109] xt_CT: No such helper "snmp_trap" [ 218.091112][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.196703][T11131] ip6t_rpfilter: unknown options [ 218.760121][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4993'. [ 219.116321][T11251] xt_l2tp: v2 doesn't support IP mode [ 219.191302][T11260] device bridge2 entered promiscuous mode [ 219.349511][T11280] veth0_vlan: mtu less than device minimum [ 219.434523][T11295] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5040'. [ 219.506688][T11295] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5040'. [ 219.547538][T11307] device bridge2 left promiscuous mode [ 219.557748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.595192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 219.631088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.662099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 219.684785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.708606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.730098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.751629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.772727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.797302][T11318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5052'. [ 219.820074][T11328] device batadv_slave_0 entered promiscuous mode [ 219.827173][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 219.976040][ T305] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 220.006433][ T24] kauditd_printk_skb: 9517 callbacks suppressed [ 220.006447][ T24] audit: type=1400 audit(2000000002.792:13050): avc: denied { create } for pid=11345 comm="syz.4.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 220.057600][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.072849][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.080059][ T134] audit: audit_lost=66 audit_rate_limit=0 audit_backlog_limit=64 [ 220.089594][ T24] audit: type=1400 audit(2000000002.823:13051): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 220.112714][ T284] audit: audit_lost=67 audit_rate_limit=0 audit_backlog_limit=64 [ 220.121163][ T283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 220.121498][ T134] audit: backlog limit exceeded [ 220.129052][ T283] audit: audit_lost=68 audit_rate_limit=0 audit_backlog_limit=64 [ 220.134279][ T284] audit: backlog limit exceeded [ 220.233561][ T305] ip6_tunnel:  xmit: Local address not yet configured! [ 220.244284][ T305] ip6_tunnel:  xmit: Local address not yet configured! [ 220.271319][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 220.300003][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 220.324623][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5080'. [ 220.385984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.517787][T11407] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5094'. [ 220.623817][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 220.875324][T11437] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 221.007347][ T305] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 221.023980][ T305] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 221.149611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 221.168707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.196787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 221.204672][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 221.230545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.257881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.284354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.305082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.327384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.363402][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5135'. [ 221.601843][T11513] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 221.648237][T11520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5152'. [ 221.667454][T11520] tc_dump_action: action bad kind [ 221.708258][T11524] mmap: syz.3.5154 (11524): VmData 29081600 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 221.931750][T11541] device gre1 left promiscuous mode [ 221.946750][T11541] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 221.970315][T11541] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 221.997783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 222.018328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.046116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 222.071623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.097346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.125166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.153825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.179177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.369276][T11588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5186'. [ 222.391245][T11590] netlink: 'syz.1.5184': attribute type 12 has an invalid length. [ 222.674604][T11632] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5208'. [ 222.734666][T11637] device bridge3 entered promiscuous mode [ 222.802786][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5214'. [ 222.899631][T11660] netlink: 'syz.3.5218': attribute type 3 has an invalid length. [ 222.985554][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5225'. [ 223.095830][T11686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5234'. [ 223.106844][T11685] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.113943][T11685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.273950][T11706] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5243'. [ 223.849709][T11789] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5284'. [ 224.017311][T11809] netlink: 'syz.2.5295': attribute type 4 has an invalid length. [ 224.268119][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5312'. [ 224.295465][T11845] netlink: 'syz.4.5313': attribute type 1 has an invalid length. [ 224.392713][T11854] xt_NFQUEUE: number of total queues is 0 [ 224.558960][T11879] xt_TCPMSS: Only works on TCP SYN packets [ 224.721741][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5341'. [ 224.777536][ T24] kauditd_printk_skb: 10954 callbacks suppressed [ 224.777549][ T24] audit: type=1400 audit(2000000007.800:23270): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 224.826397][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.829987][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.841136][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.841282][ T134] audit: audit_lost=314 audit_rate_limit=0 audit_backlog_limit=64 [ 224.855138][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.855869][ T24] audit: type=1400 audit(2000000007.831:23271): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 224.862159][ T284] audit: audit_lost=315 audit_rate_limit=0 audit_backlog_limit=64 [ 224.886990][ T287] audit: audit_lost=316 audit_rate_limit=0 audit_backlog_limit=64 [ 224.902852][ T134] audit: backlog limit exceeded [ 224.957565][ C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 224.957573][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 225.045351][T11932] xt_bpf: check failed: parse error [ 225.253885][T11961] x_tables: unsorted underflow at hook 4 [ 225.322862][T11972] netlink: 'syz.4.5375': attribute type 3 has an invalid length. [ 225.580906][T12000] xt_SECMARK: invalid mode: 2 [ 225.993649][T12046] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.035469][T12046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.042752][T12046] IPv6: NLM_F_CREATE should be set when creating new route [ 226.050114][T12046] IPv6: NLM_F_CREATE should be set when creating new route [ 226.737422][T12119] device bridge3 entered promiscuous mode [ 227.332014][T12192] 8021q: VLANs not supported on lo [ 227.399394][T12201] x_tables: unsorted underflow at hook 3 [ 227.512216][T12214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5496'. [ 227.538469][T12219] device vlan0 entered promiscuous mode [ 227.548504][T12220] netlink: 'syz.2.5497': attribute type 1 has an invalid length. [ 227.674658][T12238] netlink: 'syz.3.5506': attribute type 3 has an invalid length. [ 227.998472][T12280] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5526'. [ 228.035041][T12280] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5526'. [ 228.061503][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.078516][T12286] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 228.264218][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5542'. [ 228.824805][T12388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5580'. [ 229.020524][T12417] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 229.265021][T12450] xt_CT: No such helper "pptp" [ 229.279532][T12452] netlink: 'syz.0.5613': attribute type 4 has an invalid length. [ 229.330467][T12452] netlink: 'syz.0.5613': attribute type 5 has an invalid length. [ 229.338248][T12452] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5613'. [ 229.556216][ T24] kauditd_printk_skb: 13200 callbacks suppressed [ 229.556230][ T24] audit: type=1400 audit(2000000012.807:34824): avc: denied { read write } for pid=286 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.610756][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.622448][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.629761][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.642605][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.645451][ T287] audit: audit_lost=866 audit_rate_limit=0 audit_backlog_limit=64 [ 229.651908][ T134] audit: audit_lost=867 audit_rate_limit=0 audit_backlog_limit=64 [ 229.660359][ T24] audit: type=1400 audit(2000000012.807:34825): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 229.673870][ T284] audit: audit_lost=868 audit_rate_limit=0 audit_backlog_limit=64 [ 229.697445][ T287] audit: backlog limit exceeded [ 229.737562][T12500] netlink: 'syz.0.5636': attribute type 7 has an invalid length. [ 229.746515][T12500] netlink: 'syz.0.5636': attribute type 8 has an invalid length. [ 229.759412][T12500] netlink: 'syz.0.5636': attribute type 13 has an invalid length. [ 230.355198][T12586] netlink: 3721 bytes leftover after parsing attributes in process `syz.1.5680'. [ 230.544725][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5693'. [ 230.591911][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5693'. [ 230.648734][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5693'. [ 230.888133][T12640] xt_bpf: check failed: parse error [ 230.966497][T12648] xt_TCPMSS: Only works on TCP SYN packets [ 231.361173][T12682] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 231.655500][T12711] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 232.197158][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 232.197300][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 232.555887][T12840] __nla_validate_parse: 51 callbacks suppressed [ 232.555897][T12840] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5805'. [ 233.198986][T12912] netlink: 2160 bytes leftover after parsing attributes in process `syz.2.5839'. [ 233.220140][T12912] netlink: 2160 bytes leftover after parsing attributes in process `syz.2.5839'. [ 233.416276][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 233.699954][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5864'. [ 233.897318][T12987] xt_TCPMSS: Only works on TCP SYN packets [ 234.064583][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5885'. [ 234.266990][T13027] netlink: 37 bytes leftover after parsing attributes in process `syz.3.5897'. [ 234.322028][ T24] kauditd_printk_skb: 14075 callbacks suppressed [ 234.322041][ T24] audit: type=1400 audit(2000000017.825:47127): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 234.388664][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.401290][ T134] audit: audit_lost=1460 audit_rate_limit=0 audit_backlog_limit=64 [ 234.409887][ T24] audit: type=1400 audit(2000000017.825:47128): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 234.444372][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5903'. [ 234.462537][ T134] audit: backlog limit exceeded [ 234.469929][ T284] audit: audit_backlog=66 > audit_backlog_limit=64 [ 234.474807][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5903'. [ 234.484760][ T134] audit: audit_backlog=66 > audit_backlog_limit=64 [ 234.495553][ T284] audit: audit_lost=1461 audit_rate_limit=0 audit_backlog_limit=64 [ 234.506084][T13044] audit: audit_backlog=66 > audit_backlog_limit=64 [ 234.512669][ T134] audit: audit_lost=1462 audit_rate_limit=0 audit_backlog_limit=64 [ 234.521913][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5903'. [ 234.539081][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5903'. [ 234.594222][T13050] netlink: 'syz.4.5908': attribute type 3 has an invalid length. [ 234.624266][T13052] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 234.779725][T13068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.786995][T13068] IPv6: NLM_F_CREATE should be set when creating new route [ 234.794280][T13068] IPv6: NLM_F_CREATE should be set when creating new route [ 235.098546][T13104] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 235.792332][T13198] xt_l2tp: missing protocol rule (udp|l2tpip) [ 235.958605][T13219] netlink: 'syz.0.5990': attribute type 3 has an invalid length. [ 236.234961][T13251] device macsec0 entered promiscuous mode [ 236.356734][T13266] device ipip0 entered promiscuous mode [ 236.569968][T13290] netlink: 'syz.3.6023': attribute type 3 has an invalid length. [ 236.672551][T13299] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 236.736472][T13305] device bridge3 entered promiscuous mode [ 238.199135][T13411] __nla_validate_parse: 55 callbacks suppressed [ 238.199145][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6084'. [ 238.245948][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6084'. [ 238.271093][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6084'. [ 238.354877][T13424] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 238.371633][T13428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 238.399582][T13426] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.421706][T13426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.428997][T13426] IPv6: NLM_F_CREATE should be set when creating new route [ 238.526480][T13438] device ipip0 entered promiscuous mode [ 238.580985][T13442] netlink: 'syz.2.6099': attribute type 4 has an invalid length. [ 238.630819][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6098'. [ 238.664632][T13440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6098'. [ 238.697114][T13446] netlink: 4192 bytes leftover after parsing attributes in process `syz.4.6101'. [ 238.826882][T13461] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 239.093947][ T24] kauditd_printk_skb: 9854 callbacks suppressed [ 239.093962][ T24] audit: type=1400 audit(2000000022.833:56976): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.141800][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.148361][ T134] audit: audit_lost=1465 audit_rate_limit=0 audit_backlog_limit=64 [ 239.163641][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.170707][ T24] audit: type=1400 audit(2000000022.864:56977): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 239.192529][ T134] audit: backlog limit exceeded [ 239.197593][ T287] audit: audit_lost=1466 audit_rate_limit=0 audit_backlog_limit=64 [ 239.206427][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.213044][ T287] audit: backlog limit exceeded [ 239.218673][ T134] audit: audit_lost=1467 audit_rate_limit=0 audit_backlog_limit=64 [ 239.528826][T13521] x_tables: unsorted underflow at hook 2 [ 239.704296][T13546] printk: syz.0.6152 (13546): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 239.727337][T13551] netlink: 57 bytes leftover after parsing attributes in process `syz.1.6150'. [ 239.797574][T13558] xt_TCPMSS: Only works on TCP SYN packets [ 239.919285][T13574] xt_limit: Overflow, try lower: 1/0 [ 240.270913][ T5] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.306286][ T5] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 240.322400][ T5] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 240.341798][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 240.366050][T13624] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 240.379560][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 241.198318][T13706] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 241.198879][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 241.308605][T13717] netlink: 'syz.0.6232': attribute type 15 has an invalid length. [ 241.344950][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6232'. [ 241.593942][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6243'. [ 241.616503][T13739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6243'. [ 241.951765][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.375426][T13802] device bridge1 entered promiscuous mode [ 242.524322][T13817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.531598][T13817] IPv6: NLM_F_CREATE should be set when creating new route [ 242.538849][T13817] IPv6: NLM_F_CREATE should be set when creating new route [ 243.492924][T13891] __nla_validate_parse: 2 callbacks suppressed [ 243.492934][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6315'. [ 243.529922][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6315'. [ 243.556618][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6315'. [ 243.866417][ T24] kauditd_printk_skb: 11742 callbacks suppressed [ 243.866430][ T24] audit: type=1400 audit(2000000027.840:68446): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.920337][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.927334][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.942525][ T134] audit: audit_lost=1559 audit_rate_limit=0 audit_backlog_limit=64 [ 243.950576][ T134] audit: backlog limit exceeded [ 243.953683][ T286] audit: audit_lost=1560 audit_rate_limit=0 audit_backlog_limit=64 [ 243.963482][ T24] audit: type=1400 audit(2000000027.872:68447): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 243.963557][ T24] audit: type=1400 audit(2000000027.872:68448): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 244.009119][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.026512][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.033725][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 244.084952][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 244.302479][T13940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6342'. [ 244.623124][T13971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6357'. [ 244.668937][T13971] netlink: 'syz.3.6357': attribute type 5 has an invalid length. [ 244.917266][T14000] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6371'. [ 245.057078][T14016] device veth0_to_bond entered promiscuous mode [ 245.586335][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6408'. [ 245.829161][T14105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6423'. [ 246.053416][T14138] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.187009][T14155] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 246.218961][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 246.228131][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 246.318892][T14167] ipt_REJECT: TCP_RESET invalid for non-tcp [ 247.040165][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6490'. [ 247.122180][T14244] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.6493'. [ 247.969783][T14359] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.070004][T14371] netlink: 'syz.1.6556': attribute type 3 has an invalid length. [ 248.094288][T14373] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.206986][T14388] netlink: 'syz.0.6563': attribute type 9 has an invalid length. [ 248.639075][ T24] kauditd_printk_skb: 11367 callbacks suppressed [ 248.639089][ T24] audit: type=1400 audit(2000000032.848:79520): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 248.675777][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.682531][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.694004][ T285] audit: audit_lost=1660 audit_rate_limit=0 audit_backlog_limit=64 [ 248.704412][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.704423][ T284] audit: audit_lost=1661 audit_rate_limit=0 audit_backlog_limit=64 [ 248.704429][ T284] audit: backlog limit exceeded [ 248.714768][ T134] audit: audit_lost=1662 audit_rate_limit=0 audit_backlog_limit=64 [ 248.714776][ T134] audit: backlog limit exceeded [ 248.715060][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.782529][T14458] netlink: 'syz.1.6596': attribute type 13 has an invalid length. [ 248.883190][T14463] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.897351][T14463] __nla_validate_parse: 2 callbacks suppressed [ 248.897363][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6600'. [ 248.953056][T14463] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.302467][T14517] x_tables: unsorted underflow at hook 1 [ 249.326530][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6627'. [ 249.398045][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6632'. [ 249.513390][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 249.532227][T14549] xt_TCPMSS: Only works on TCP SYN packets [ 249.536131][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 249.549304][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 249.570553][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 249.581577][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 249.597302][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 249.617534][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'. [ 249.819107][T14573] device ip6gre2 entered promiscuous mode [ 250.138930][T14612] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.495102][T14664] netlink: 'syz.0.6699': attribute type 5 has an invalid length. [ 250.614895][T14679] xt_TCPMSS: Only works on TCP SYN packets [ 250.719677][T14695] device ip6gretap1 entered promiscuous mode [ 250.815634][T14707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.096273][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 251.167418][T14756] xt_TCPMSS: Only works on TCP SYN packets [ 251.625121][T14807] device macsec0 entered promiscuous mode [ 251.650726][T14807] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 251.715314][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.883481][T14839] syz.3.6788 (14839): /proc/14839/oom_adj is deprecated, please use /proc/14839/oom_score_adj instead. [ 252.130326][T14871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.194837][T14877] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.224767][T14877] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.277388][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 252.315475][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 252.566522][T14925] xt_ecn: cannot match TCP bits for non-tcp packets [ 252.828675][ T25] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 253.165511][T14988] netlink: 'syz.1.6861': attribute type 1 has an invalid length. [ 253.229781][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 253.412498][ T24] kauditd_printk_skb: 12269 callbacks suppressed [ 253.412511][ T24] audit: type=1400 audit(2000000037.855:90929): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.453577][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.476006][ T134] audit: audit_lost=1950 audit_rate_limit=0 audit_backlog_limit=64 [ 253.483700][ T24] audit: type=1400 audit(2000000037.855:90930): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.502460][ T134] audit: backlog limit exceeded [ 253.528222][ T24] audit: type=1400 audit(2000000037.855:90931): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.533753][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.569156][ T284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.575328][ T24] audit: type=1400 audit(2000000037.855:90932): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 253.578592][ T284] audit: audit_lost=1951 audit_rate_limit=0 audit_backlog_limit=64 [ 254.108483][T15034] netlink: 'syz.4.6882': attribute type 46 has an invalid length. [ 254.222015][T15048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.461515][T15078] __nla_validate_parse: 76 callbacks suppressed [ 254.461527][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6905'. [ 254.506440][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6905'. [ 254.540518][T15086] netlink: 'syz.0.6910': attribute type 46 has an invalid length. [ 254.596608][T15092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.640938][T15096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6914'. [ 255.064414][T15149] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 255.508266][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6970'. [ 255.616083][T15218] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6976'. [ 255.640588][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6978'. [ 255.688763][T15226] netlink: 'syz.0.6979': attribute type 3 has an invalid length. [ 255.824940][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6990'. [ 256.210874][T15303] xt_TCPMSS: Only works on TCP SYN packets [ 256.334656][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7026'. [ 256.385656][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7026'. [ 256.427937][T15328] device vlan0 entered promiscuous mode [ 256.887777][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 257.332899][T15435] device macsec0 entered promiscuous mode [ 257.354877][T15435] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 257.410228][T15438] netlink: 'syz.3.7085': attribute type 2 has an invalid length. [ 257.443914][T15438] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 257.661996][T15464] x_tables: duplicate underflow at hook 3 [ 257.672831][T15467] netlink: 'syz.0.7098': attribute type 4 has an invalid length. [ 257.695059][T15467] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7098'. [ 258.178048][T15533] netlink: 'syz.0.7132': attribute type 12 has an invalid length. [ 258.183728][ T24] kauditd_printk_skb: 10705 callbacks suppressed [ 258.183761][ T24] audit: type=1400 audit(2000000042.863:101191): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.248938][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.255560][ T134] audit: audit_lost=2101 audit_rate_limit=0 audit_backlog_limit=64 [ 258.264299][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.264791][ T134] audit: backlog limit exceeded [ 258.276819][ T24] audit: type=1400 audit(2000000042.905:101192): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 258.287983][ T286] audit: audit_lost=2102 audit_rate_limit=0 audit_backlog_limit=64 [ 258.307854][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.314418][ T134] audit: audit_lost=2103 audit_rate_limit=0 audit_backlog_limit=64 [ 258.323099][ T286] audit: backlog limit exceeded [ 258.986819][T15620] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.069606][T15632] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 259.267223][T15658] ================================================================== [ 259.275371][T15658] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 259.283543][T15658] Read of size 4 at addr ffff88812cb4f470 by task syz.2.7193/15658 [ 259.291436][T15658] [ 259.293784][T15658] CPU: 0 PID: 15658 Comm: syz.2.7193 Tainted: G W syzkaller #0 [ 259.302651][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 259.312806][T15658] Call Trace: [ 259.316117][T15658] __dump_stack+0x21/0x24 [ 259.320487][T15658] dump_stack_lvl+0x1a7/0x208 [ 259.325258][T15658] ? show_regs_print_info+0x18/0x18 [ 259.330464][T15658] ? thaw_kernel_threads+0x220/0x220 [ 259.335780][T15658] print_address_description+0x7f/0x2c0 [ 259.341333][T15658] ? unaccount_page_cache_page+0x9dc/0xac0 [ 259.347147][T15658] kasan_report+0x100/0x140 [ 259.351656][T15658] ? xas_store+0xd0c/0x18d0 [ 259.356179][T15658] ? unaccount_page_cache_page+0x9dc/0xac0 [ 259.361996][T15658] __asan_report_load4_noabort+0x14/0x20 [ 259.367643][T15658] unaccount_page_cache_page+0x9dc/0xac0 [ 259.373296][T15658] __delete_from_page_cache+0xc3/0x470 [ 259.378770][T15658] ? memset+0x35/0x40 [ 259.382779][T15658] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 259.389810][T15658] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 259.395281][T15658] ? __kasan_check_read+0x11/0x20 [ 259.400335][T15658] ? workingset_eviction+0x3dc/0x940 [ 259.405714][T15658] __remove_mapping+0x581/0x6b0 [ 259.410689][T15658] shrink_page_list+0x21ee/0x4160 [ 259.415721][T15658] ? shrink_page_list+0x1f41/0x4160 [ 259.420933][T15658] ? reclaim_clean_pages_from_list+0x740/0x740 [ 259.427108][T15658] ? shrink_inactive_list+0xef0/0xef0 [ 259.432513][T15658] ? _raw_spin_lock_irq+0x95/0xf0 [ 259.437548][T15658] ? __count_memcg_events+0x89/0x210 [ 259.442842][T15658] shrink_inactive_list+0x90c/0xef0 [ 259.448058][T15658] ? __this_cpu_preempt_check+0x13/0x20 [ 259.453614][T15658] ? shrink_active_list+0xe00/0xe00 [ 259.458821][T15658] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 259.464487][T15658] ? __kasan_check_read+0x11/0x20 [ 259.469519][T15658] ? lruvec_lru_size+0x230/0x250 [ 259.474481][T15658] ? blk_start_plug+0x5a/0x170 [ 259.479259][T15658] shrink_lruvec+0x2806/0x2d70 [ 259.484045][T15658] ? set_next_entity+0xb4/0x5d0 [ 259.488905][T15658] ? _raw_spin_unlock_irq+0x4e/0x70 [ 259.494105][T15658] ? finish_task_switch+0x12e/0x5a0 [ 259.499304][T15658] ? __switch_to_asm+0x3a/0x60 [ 259.504075][T15658] ? __schedule+0xc0b/0x13e0 [ 259.508675][T15658] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 259.514230][T15658] ? __sched_text_start+0x8/0x8 [ 259.519095][T15658] ? __this_cpu_preempt_check+0x13/0x20 [ 259.524650][T15658] ? tracing_record_taskinfo+0x7c/0x220 [ 259.530203][T15658] ? preempt_schedule_common+0xbe/0xf0 [ 259.535674][T15658] ? __kasan_check_read+0x11/0x20 [ 259.540702][T15658] ? inactive_is_low+0x17a/0x2f0 [ 259.545645][T15658] ? __kasan_check_write+0x14/0x20 [ 259.550809][T15658] shrink_node+0xee0/0x2690 [ 259.555341][T15658] do_try_to_free_pages+0x602/0x1590 [ 259.560644][T15658] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 259.566462][T15658] ? try_to_free_pages+0xc20/0xc20 [ 259.571577][T15658] try_to_free_mem_cgroup_pages+0x261/0x610 [ 259.577479][T15658] ? shrink_lruvec+0x2d70/0x2d70 [ 259.582426][T15658] mem_cgroup_resize_max+0x309/0x3e0 [ 259.588159][T15658] mem_cgroup_write+0x1ed/0x230 [ 259.593029][T15658] ? mem_cgroup_reset+0x130/0x130 [ 259.598080][T15658] ? mem_cgroup_reset+0x130/0x130 [ 259.603110][T15658] cgroup_file_write+0x294/0x560 [ 259.608054][T15658] ? cgroup_seqfile_stop+0xc0/0xc0 [ 259.613171][T15658] ? mutex_lock+0x92/0xf0 [ 259.617521][T15658] ? mutex_trylock+0xb0/0xb0 [ 259.622121][T15658] ? __kasan_check_write+0x14/0x20 [ 259.627242][T15658] ? cgroup_seqfile_stop+0xc0/0xc0 [ 259.632363][T15658] kernfs_fop_write_iter+0x2bd/0x400 [ 259.637657][T15658] vfs_write+0x770/0xd70 [ 259.641915][T15658] ? kernel_write+0x3c0/0x3c0 [ 259.646605][T15658] ? mutex_trylock+0xb0/0xb0 [ 259.651203][T15658] ? __fget_files+0x2e1/0x340 [ 259.655887][T15658] ? __fdget_pos+0x2d2/0x380 [ 259.660502][T15658] ? ksys_write+0x70/0x260 [ 259.664923][T15658] ksys_write+0x14a/0x260 [ 259.669259][T15658] ? __ia32_sys_read+0x90/0x90 [ 259.674031][T15658] ? __kasan_check_read+0x11/0x20 [ 259.679062][T15658] __x64_sys_write+0x7b/0x90 [ 259.683659][T15658] do_syscall_64+0x31/0x40 [ 259.688084][T15658] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 259.693984][T15658] RIP: 0033:0x7f30575e6e99 [ 259.698416][T15658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.718073][T15658] RSP: 002b:00007f3056040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.726501][T15658] RAX: ffffffffffffffda RBX: 00007f305786efa0 RCX: 00007f30575e6e99 [ 259.734479][T15658] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 259.742463][T15658] RBP: 00007f305767ceaf R08: 0000000000000000 R09: 0000000000000000 [ 259.750438][T15658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.758418][T15658] R13: 00007f305786f038 R14: 00007f305786efa0 R15: 00007ffe198c62d8 [ 259.766401][T15658] [ 259.768734][T15658] Allocated by task 8349: [ 259.773085][T15658] __kasan_kmalloc+0xd4/0x100 [ 259.777772][T15658] kmem_cache_alloc_trace+0x179/0x2e0 [ 259.783153][T15658] add_partition+0x1c7/0xa40 [ 259.787746][T15658] blk_add_partitions+0xa9b/0x1150 [ 259.792857][T15658] bdev_disk_changed+0x3d5/0x4d0 [ 259.797805][T15658] loop_set_status+0x6b6/0x8d0 [ 259.802571][T15658] lo_ioctl+0xd41/0x1f40 [ 259.806814][T15658] blkdev_ioctl+0x2e0/0x630 [ 259.811315][T15658] block_ioctl+0xae/0x100 [ 259.815660][T15658] __se_sys_ioctl+0x121/0x1a0 [ 259.820363][T15658] __x64_sys_ioctl+0x7b/0x90 [ 259.824984][T15658] do_syscall_64+0x31/0x40 [ 259.829414][T15658] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 259.835310][T15658] [ 259.837649][T15658] Freed by task 24: [ 259.841555][T15658] kasan_set_track+0x4a/0x70 [ 259.846151][T15658] kasan_set_free_info+0x23/0x40 [ 259.851093][T15658] ____kasan_slab_free+0x125/0x160 [ 259.856212][T15658] __kasan_slab_free+0x11/0x20 [ 259.860985][T15658] slab_free_freelist_hook+0xc5/0x190 [ 259.866366][T15658] kfree+0xc0/0x270 [ 259.870180][T15658] skb_release_data+0x53b/0x690 [ 259.875038][T15658] kfree_skb+0xb9/0x2f0 [ 259.879201][T15658] kauditd_hold_skb+0x116/0x210 [ 259.884059][T15658] kauditd_send_queue+0x28c/0x2e0 [ 259.889088][T15658] kauditd_thread+0x4e4/0x870 [ 259.893799][T15658] kthread+0x324/0x3b0 [ 259.897880][T15658] ret_from_fork+0x1f/0x30 [ 259.902297][T15658] [ 259.904651][T15658] Last potentially related work creation: [ 259.910378][T15658] kasan_save_stack+0x3a/0x60 [ 259.915066][T15658] __kasan_record_aux_stack+0xd2/0x100 [ 259.920549][T15658] kasan_record_aux_stack_noalloc+0xb/0x10 [ 259.926378][T15658] insert_work+0x51/0x320 [ 259.930729][T15658] __queue_work+0x91f/0xca0 [ 259.935249][T15658] rcu_work_rcufn+0x47/0x50 [ 259.939765][T15658] rcu_do_batch+0x488/0xaf0 [ 259.944277][T15658] rcu_core+0x50a/0xca0 [ 259.948441][T15658] rcu_core_si+0x9/0x10 [ 259.952603][T15658] __do_softirq+0x255/0x563 [ 259.957188][T15658] [ 259.959518][T15658] Second to last potentially related work creation: [ 259.966115][T15658] kasan_save_stack+0x3a/0x60 [ 259.970798][T15658] __kasan_record_aux_stack+0xd2/0x100 [ 259.976259][T15658] kasan_record_aux_stack_noalloc+0xb/0x10 [ 259.982069][T15658] call_rcu+0x11a/0x1090 [ 259.986343][T15658] queue_rcu_work+0x86/0xa0 [ 259.990856][T15658] hd_struct_free+0x187/0x1c0 [ 259.995538][T15658] percpu_ref_switch_to_atomic_rcu+0x5a3/0x5b0 [ 260.001693][T15658] rcu_do_batch+0x488/0xaf0 [ 260.006204][T15658] rcu_core+0x50a/0xca0 [ 260.010451][T15658] rcu_core_si+0x9/0x10 [ 260.014622][T15658] __do_softirq+0x255/0x563 [ 260.019124][T15658] [ 260.021463][T15658] The buggy address belongs to the object at ffff88812cb4f000 [ 260.021463][T15658] which belongs to the cache kmalloc-2k of size 2048 [ 260.035526][T15658] The buggy address is located 1136 bytes inside of [ 260.035526][T15658] 2048-byte region [ffff88812cb4f000, ffff88812cb4f800) [ 260.048995][T15658] The buggy address belongs to the page: [ 260.054654][T15658] page:ffffea0004b2d200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12cb48 [ 260.064908][T15658] head:ffffea0004b2d200 order:3 compound_mapcount:0 compound_pincount:0 [ 260.073270][T15658] flags: 0x4000000000010200(slab|head) [ 260.078746][T15658] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 260.087343][T15658] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 260.095929][T15658] page dumped because: kasan: bad access detected [ 260.102368][T15658] page_owner tracks the page as allocated [ 260.108136][T15658] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1680, ts 52828074573, free_ts 52778299357 [ 260.128633][T15658] prep_new_page+0x176/0x190 [ 260.133240][T15658] get_page_from_freelist+0x225f/0x23f0 [ 260.138792][T15658] __alloc_pages_nodemask+0x29a/0x640 [ 260.144174][T15658] new_slab+0x84/0x3f0 [ 260.148248][T15658] ___slab_alloc+0x2f8/0x4c0 [ 260.152847][T15658] __slab_alloc+0x63/0xa0 [ 260.157323][T15658] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 260.162708][T15658] copy_verifier_state+0x711/0xc20 [ 260.168663][T15658] push_stack+0x19b/0x4f0 [ 260.173009][T15658] do_check+0xbc1b/0xe320 [ 260.177353][T15658] do_check_common+0x94e/0x1190 [ 260.182216][T15658] bpf_check+0x97ea/0xdce0 [ 260.186640][T15658] bpf_prog_load+0x1004/0x14e0 [ 260.191412][T15658] __se_sys_bpf+0x49a/0x740 [ 260.195923][T15658] __x64_sys_bpf+0x7b/0x90 [ 260.200344][T15658] do_syscall_64+0x31/0x40 [ 260.204760][T15658] page last free stack trace: [ 260.209635][T15658] __free_pages_ok+0x80b/0x830 [ 260.214425][T15658] __free_pages+0xd8/0x390 [ 260.218932][T15658] __free_slab+0xcf/0x190 [ 260.223265][T15658] unfreeze_partials+0x150/0x180 [ 260.228204][T15658] put_cpu_partial+0xc1/0x180 [ 260.232914][T15658] __slab_free+0x2c9/0x3a0 [ 260.237333][T15658] ___cache_free+0x10e/0x130 [ 260.241931][T15658] qlink_free+0x50/0x90 [ 260.246093][T15658] qlist_free_all+0x5f/0xb0 [ 260.250602][T15658] kasan_quarantine_reduce+0x14a/0x160 [ 260.256068][T15658] __kasan_slab_alloc+0x2f/0xe0 [ 260.260923][T15658] slab_post_alloc_hook+0x5d/0x2f0 [ 260.266061][T15658] kmem_cache_alloc+0x15a/0x2d0 [ 260.270926][T15658] getname_flags+0xba/0x510 [ 260.275431][T15658] user_path_at_empty+0x2f/0x50 [ 260.280311][T15658] vfs_statx+0x10a/0x530 [ 260.284553][T15658] [ 260.286902][T15658] Memory state around the buggy address: [ 260.292545][T15658] ffff88812cb4f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.300629][T15658] ffff88812cb4f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.308696][T15658] >ffff88812cb4f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.316758][T15658] ^ [ 260.324473][T15658] ffff88812cb4f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.332541][T15658] ffff88812cb4f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.340610][T15658] ================================================================== [ 260.348681][T15658] Disabling lock debugging due to kernel taint [ 260.403545][T15664] netlink: 'syz.0.7196': attribute type 1 has an invalid length. [ 262.955627][ T24] kauditd_printk_skb: 32015 callbacks suppressed [ 262.955642][ T24] audit: type=1400 audit(2000000047.870:133195): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 262.984185][ T24] audit: type=1400 audit(2000000047.870:133196): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.005932][ T24] audit: type=1400 audit(2000000047.870:133197): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.021650][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 263.028206][ T24] audit: type=1400 audit(2000000047.881:133198): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.036259][ T134] audit: audit_lost=2108 audit_rate_limit=0 audit_backlog_limit=64 [ 263.056267][ T24] audit: type=1400 audit(2000000047.881:133199): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.065299][ T134] audit: backlog limit exceeded [ 263.085251][ T24] audit: type=1400 audit(2000000047.881:133200): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 263.095111][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.117871][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 266.346892][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.556424][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 267.727500][ T24] kauditd_printk_skb: 55920 callbacks suppressed [ 267.727514][ T24] audit: type=1400 audit(2000000052.889:189119): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.755935][ T24] audit: type=1400 audit(2000000052.889:189120): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.777799][ T24] audit: type=1400 audit(2000000052.889:189121): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.794872][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.800093][ T24] audit: type=1400 audit(2000000052.889:189122): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.807795][ T134] audit: audit_lost=2110 audit_rate_limit=0 audit_backlog_limit=64 [ 267.827838][ T24] audit: type=1400 audit(2000000052.889:189123): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.837179][ T134] audit: backlog limit exceeded [ 267.857020][ T24] audit: type=1400 audit(2000000052.889:189124): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 267.866524][ T134] audit: audit_backlog=65 > audit_backlog_limit=64