last executing test programs: 1.126343561s ago: executing program 4 (id=7402): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pause() 470.648468ms ago: executing program 1 (id=7434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x20, 0x2, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x4000080) 395.73695ms ago: executing program 1 (id=7440): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@acl}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$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") 311.033102ms ago: executing program 1 (id=7447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000640)) 310.813102ms ago: executing program 2 (id=7448): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ip6_tables_matches\x00') read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 291.238702ms ago: executing program 0 (id=7450): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6_vti0\x00', 0x0}) 278.346633ms ago: executing program 3 (id=7451): r0 = openat$selinux_checkreqprot(0xffffff9c, &(0x7f0000000400), 0x101000, 0x0) setns(r0, 0x40000000) 275.699973ms ago: executing program 2 (id=7452): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f00000000c0)={'vlan0\x00', @random='\x00\x00\x00\x00\x00 '}) 258.738663ms ago: executing program 1 (id=7453): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 236.679244ms ago: executing program 3 (id=7454): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x8000f) 234.094694ms ago: executing program 0 (id=7455): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000700)="35a70a2699b47b9b24ef82814fc503e032f8bd842b804ed306f8a34d72eb5cafb019c78b82d5095c1ad1ddea425ca85b6eb7daf323ca50c14372a0c4bfd32fb7c5fc9f995cfb3979b8f9e8eae4d72dc2985f82258710d649b60ccb7b382067c93e58d4fa72f36d55f12accc16183688c0f6840fe84c2b43662a283f1", 0xfffffffffffffede, 0x0, &(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e1b}, 0x6e) 231.135694ms ago: executing program 2 (id=7456): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) 201.232684ms ago: executing program 4 (id=7457): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1489, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x20000000, 0x2, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) 184.800775ms ago: executing program 0 (id=7458): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x114, @local, 0x80000000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000280)="0bcf005c82232511bda6bcaa6f111c4797af16573bca394e0d4512d90733130e669cf9dfb07b8d4f3556e20b20f621b2c9ab5190d4ae49c0d380b20ec43b882cc781a82eb0beab53566b0736fe412965d4fb33118e5bf7f579d03dda19a48d732ef99793132440a02d6865761e99d57d7cf7b0108a01ff47e86d659e911066d97fff5e8349e6aac75cd8f4", 0x8b}, {&(0x7f0000000340)="48d8402ef85e5bc6566ea6aa0a8fefb4cb477ef3dcf03e0638ac9ba37fc010695e29bb950dc12e7b1930a27ff550b2317154009d973f86d182b5042124eee8f5daba757d6dc5f3786e0f0654edab46db2f1feae2bcc1a605dd0aad800e15544b8d4a0ea4a0c02c092a29e92ba5da4b1d49acfe1f2c25eca306c6a26cd08d213cefda2dcc4c734b90a01c0ecd1d2116adea2c859a41c7fe914669b3b359d3373497ebde45995b7530e6106c0ca5cdd76c73bcf2f352161e1be0098bd8803e2ac5429638d9b698d8dcaf7f777a33b89b0d372032f40c05e11a20d7cce5043fe2cdabdc", 0xe2}, {&(0x7f0000000440)="9be59ccf51d57e91690e", 0xa}], 0x3, &(0x7f00000004c0)=[@dstopts={{0xd8, 0x29, 0x37, {0x8, 0x20000000000000ab, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @calipso={0x7, 0x48, {0x2, 0x10, 0x74, 0x7fff, [0x0, 0x0, 0x9, 0x7, 0x7ffd, 0x3, 0x0, 0x8000000000000001]}}, @enc_lim={0x4, 0x1, 0xf}, @pad1, @ra={0x5, 0x2, 0xffff}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @calipso={0x7, 0x48, {0x0, 0x10, 0xff, 0xfb1e, [0x5, 0x5, 0x6, 0x94a, 0x1, 0x6b, 0x5, 0x8]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0xf0}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x76fc340a, @dev={0xfe, 0x80, '\x00', 0x15}, 0xffff}, 0x1c, 0x0}}], 0x2, 0x0) 183.850085ms ago: executing program 3 (id=7459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0xdc1facfaedcf09d1, 0x0, 0x0) 179.756365ms ago: executing program 2 (id=7460): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') writev(r0, 0x0, 0x0) 148.799366ms ago: executing program 1 (id=7461): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x2) 148.435296ms ago: executing program 4 (id=7462): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) 144.823946ms ago: executing program 3 (id=7463): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x16, 0x7, 0x7fff, 0x401}}) 144.507216ms ago: executing program 2 (id=7464): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) 118.304857ms ago: executing program 0 (id=7465): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x28, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x125, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) 111.494337ms ago: executing program 3 (id=7466): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x80000, 0x2af, 0x0, 0x4]}}) 111.109077ms ago: executing program 4 (id=7467): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 84.286188ms ago: executing program 1 (id=7468): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 80.300268ms ago: executing program 0 (id=7469): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x25dfdbff, {}, [@IFLA_XDP={0x12, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x17}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x5c}}, 0x0) 79.550698ms ago: executing program 4 (id=7470): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) fcntl$addseals(r0, 0x409, 0xe406666427716e58) 74.620558ms ago: executing program 2 (id=7471): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getpeername$packet(r0, 0x0, 0x0) 66.382638ms ago: executing program 3 (id=7472): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='40', 0x2) 90.93µs ago: executing program 0 (id=7473): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x2}) 0s ago: executing program 4 (id=7474): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81004e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): sed [ 176.757781][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'. [ 176.800736][ T1493] usb 4-1: Using ep0 maxpacket: 8 [ 176.807778][ T8163] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3570'. [ 176.842116][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3574'. [ 176.920795][ T1493] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.930598][ T1493] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.939697][ T1493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.957205][ T1493] usb 4-1: config 0 descriptor?? [ 177.041217][ T8187] device bridge2 entered promiscuous mode [ 177.162557][ T8113] overlayfs: overlapping lowerdir path [ 177.222907][ T1493] usb 4-1: USB disconnect, device number 60 [ 177.278002][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'. [ 177.331980][ T8237] EXT4-fs (loop4): Ignoring removed orlov option [ 177.354645][ T8237] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,init_itable,sysvgroups,orlov,,errors=continue [ 177.458886][ T8254] mmap: syz.2.3607 (8254) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 177.515481][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 177.794590][ T8316] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.823938][ T8320] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3645'. [ 177.902860][ T8336] netlink: 'syz.1.3652': attribute type 13 has an invalid length. [ 177.948507][ T8336] gretap0: refused to change device tx_queue_len [ 177.957476][ T8336] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.026194][ T8356] ipt_REJECT: TCP_RESET invalid for non-tcp [ 178.053206][ T8362] device bridge_slave_0 left promiscuous mode [ 178.063535][ T8362] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.075761][ T8362] device bridge_slave_1 left promiscuous mode [ 178.088113][ T8362] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.111330][ T8369] mmap: syz.3.3670 (8369): VmData 29081600 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 178.355153][ T8409] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 178.364799][ T8409] EXT4-fs (loop3): Ignoring removed oldalloc option [ 178.378257][ T8409] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 178.386755][ T8409] System zones: 0-5 [ 178.392334][ T8409] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsold,inlinecrypt,journal_dev=0x0000000000000006,noinit_itable,nombcache,minixdf,nodioread_nolock,errors=remount-ro,oldalloc,nolazytime,max_dir_size_kb=0x0000000000000001, [ 178.604736][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'. [ 178.629800][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3711'. [ 178.723946][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3723'. [ 178.765471][ T24] kauditd_printk_skb: 73 callbacks suppressed [ 178.765487][ T24] audit: type=1326 audit(1785664280.115:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.0.3728" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 178.810766][ T24] audit: type=1326 audit(1785664280.115:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.0.3728" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 178.851120][ T8500] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.933414][ T24] audit: type=1326 audit(1785664280.155:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.0.3728" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 178.973676][ T8523] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3743'. [ 179.007744][ T24] audit: type=1326 audit(1785664280.155:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.0.3728" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 179.057777][ T24] audit: type=1326 audit(1785664280.155:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8492 comm="syz.0.3728" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 179.082788][ T8536] xt_policy: too many policy elements [ 179.113010][ T24] audit: type=1400 audit(1785664280.215:439): avc: denied { getopt } for pid=8498 comm="syz.4.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.203998][ T24] audit: type=1400 audit(1785664280.555:440): avc: denied { setopt } for pid=8554 comm="syz.1.3761" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.204817][ T8558] xt_hashlimit: size too large, truncated to 1048576 [ 179.291691][ T24] audit: type=1400 audit(1785664280.585:441): avc: denied { create } for pid=8560 comm="syz.2.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.348102][ T24] audit: type=1400 audit(1785664280.585:442): avc: denied { getopt } for pid=8560 comm="syz.2.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.380118][ T8584] xt_socket: unknown flags 0x40 [ 179.436691][ T24] audit: type=1400 audit(1785664280.605:443): avc: denied { connect } for pid=8562 comm="syz.0.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.030609][ T8702] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 0 [ 180.092955][ T8708] netlink: 'syz.2.3835': attribute type 4 has an invalid length. [ 180.100766][ T8708] netlink: 'syz.2.3835': attribute type 5 has an invalid length. [ 180.255008][ T8692] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 180.268898][ T8692] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 180.293010][ T8692] F2FS-fs (loop0): invalid crc value [ 180.312002][ T8692] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.375123][ T8692] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 180.383563][ T8692] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 180.421306][ T8617] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 180.441829][ T8617] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 180.471437][ T8617] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.517201][ T8617] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 180.526672][ T8617] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 180.868750][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.883214][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.919012][ T8778] kernel read not supported for file /policy (pid: 8778 comm: syz.0.3866) [ 181.006324][ T8797] rtc_cmos 00:00: Alarms can be up to one day in the future [ 181.364133][ T8788] F2FS-fs (loop1): invalid crc value [ 181.389500][ T8788] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 181.434439][ T8788] F2FS-fs (loop1): recover fsync data on readonly fs [ 181.441384][ T8788] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 181.618200][ T8857] device bridge2 entered promiscuous mode [ 181.762677][ T8880] xt_SECMARK: invalid security context 'unconfined' [ 181.850138][ T8877] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 182.095673][ T8912] __nla_validate_parse: 6 callbacks suppressed [ 182.095684][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 182.266457][ T8945] x_tables: unsorted underflow at hook 4 [ 182.293293][ T8951] overlayfs: empty lowerdir [ 182.350668][ T8954] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.372399][ T8954] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 182.446485][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3956'. [ 182.460772][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3956'. [ 182.469974][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3956'. [ 182.494683][ T8969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.594861][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 182.623949][ T8992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3968'. [ 182.896788][ T9035] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 182.993850][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4000'. [ 183.029338][ T9064] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4004'. [ 183.233137][ T9095] netlink: 37 bytes leftover after parsing attributes in process `syz.0.4020'. [ 183.275891][ T9099] netlink: 'syz.2.4021': attribute type 15 has an invalid length. [ 183.294580][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4021'. [ 183.332902][ T9106] netlink: 'syz.3.4024': attribute type 4 has an invalid length. [ 183.438955][ T9120] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 183.475928][ T9123] netlink: 'syz.0.4035': attribute type 46 has an invalid length. [ 184.016781][ T9213] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 184.092968][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 184.092982][ T24] audit: type=1400 audit(1785664285.443:475): avc: granted { setsecparam } for pid=9225 comm="syz.0.4083" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 184.149459][ T9219] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 184.194616][ T24] audit: type=1400 audit(1785664285.543:476): avc: denied { write } for pid=9218 comm="syz.4.4080" path="/929/file2/.pending_reads" dev="loop4" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.440631][ T9293] xt_ecn: cannot match TCP bits for non-tcp packets [ 184.650366][ T24] audit: type=1326 audit(1785665054.006:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.4140" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 184.712519][ T24] audit: type=1326 audit(1785665054.006:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.4140" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 184.737761][ T24] audit: type=1326 audit(1785665054.037:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.4140" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 184.762806][ T24] audit: type=1326 audit(1785665054.037:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.4140" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 184.788231][ T24] audit: type=1326 audit(1785665054.037:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.4140" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 184.837673][ T24] audit: type=1326 audit(1785665054.037:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.4140" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 184.864069][ T24] audit: type=1326 audit(1785665054.037:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.4140" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 184.896312][ T9356] xt_CONNSECMARK: invalid mode: 0 [ 184.907516][ T24] audit: type=1326 audit(1785665054.048:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9338 comm="syz.0.4140" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f878c375e99 code=0x7ffc0000 [ 185.013055][ T9382] usb usb7: usbfs: process 9382 (syz.3.4155) did not claim interface 0 before use [ 185.038155][ T9367] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.4151: Invalid block bitmap block 0 in block_group 0 [ 185.062965][ T9367] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 185.089622][ T9367] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #13: comm syz.2.4151: attempt to clear invalid blocks 983261 len 1 [ 185.094647][ T9387] xt_socket: unknown flags 0xc [ 185.109858][ T9367] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.4151: invalid indirect mapped block 2683928664 (level 0) [ 185.148170][ T9367] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.4151: Invalid inode table block 0 in block_group 0 [ 185.165134][ T9398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.182519][ T9367] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 185.206775][ T9367] EXT4-fs error (device loop2) in ext4_orphan_del:3292: Corrupt filesystem [ 185.229941][ T9367] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.4151: Invalid inode table block 0 in block_group 0 [ 185.231598][ T9409] device ip6gretap2 entered promiscuous mode [ 185.275895][ T9367] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 185.334483][ T9367] EXT4-fs error (device loop2): ext4_truncate:4403: inode #13: comm syz.2.4151: mark_inode_dirty error [ 185.367696][ T9367] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3106: Corrupt filesystem [ 185.380531][ T9367] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.4151: Invalid inode table block 0 in block_group 0 [ 185.393981][ T9367] EXT4-fs (loop2): 1 truncate cleaned up [ 185.393998][ T9367] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,,errors=continue [ 185.397128][ T9367] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.4151: Invalid inode bitmap blk 0 in block_group 0 [ 185.514737][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.634569][ T1490] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 185.730110][ T9494] xt_TCPMSS: Only works on TCP SYN packets [ 185.935179][ T9526] FAT-fs (loop4): Directory bread(block 64) failed [ 185.948255][ T9531] xt_TCPMSS: Only works on TCP SYN packets [ 185.951788][ T9526] FAT-fs (loop4): Directory bread(block 65) failed [ 185.961556][ T9526] FAT-fs (loop4): Directory bread(block 66) failed [ 185.968324][ T9526] FAT-fs (loop4): Directory bread(block 67) failed [ 185.975005][ T9526] FAT-fs (loop4): Directory bread(block 68) failed [ 185.978283][ T1490] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 185.982466][ T9526] FAT-fs (loop4): Directory bread(block 69) failed [ 185.999153][ T9526] FAT-fs (loop4): Directory bread(block 70) failed [ 185.999173][ T9526] FAT-fs (loop4): Directory bread(block 71) failed [ 185.999206][ T9526] FAT-fs (loop4): Directory bread(block 72) failed [ 185.999222][ T9526] FAT-fs (loop4): Directory bread(block 73) failed [ 186.117466][ T9492] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 186.142488][ T9492] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 186.152215][ T9492] F2FS-fs (loop3): invalid crc value [ 186.183660][ T9492] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 186.194247][ T1490] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 186.203765][ T1490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.213431][ T1490] usb 1-1: Product: syz [ 186.218104][ T1490] usb 1-1: Manufacturer: syz [ 186.222723][ T1490] usb 1-1: SerialNumber: syz [ 186.244172][ T9492] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 186.251441][ T9492] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 186.290027][ T9492] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 186.323062][ T9563] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 186.341823][ T9563] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 186.349340][ T9563] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.369394][ T9563] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,min_batch_time=0x0000000000000009,nomblk_io_submit,errors=remount-ro,dioread_nolock, [ 186.390725][ T9563] ext4 filesystem being mounted at /970/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.405382][ T9563] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4245: bg 0: block 112: padding at end of block bitmap is not set [ 186.445049][ T9563] EXT4-fs (loop4): Remounting filesystem read-only [ 186.451749][ T9563] EXT4-fs error (device loop4) in ext4_evict_inode:260: Readonly filesystem [ 186.462857][ T9580] netlink: 'syz.1.4252': attribute type 1 has an invalid length. [ 186.503471][ T9583] : renamed from team_slave_1 [ 186.587085][ T1490] usb 1-1: Can't get UAC3 power state for id 10 [ 186.644720][ T1490] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 186.659827][ T1490] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 186.676382][ T9613] device veth3 left promiscuous mode [ 186.686347][ T1490] usb 1-1: USB disconnect, device number 53 [ 186.807512][ T9633] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 186.838045][ T9637] netlink: 'syz.3.4280': attribute type 29 has an invalid length. [ 186.882817][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.924639][ T9652] tc_dump_action: action bad kind [ 187.070790][ T9681] __nla_validate_parse: 22 callbacks suppressed [ 187.070801][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4301'. [ 187.152003][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4309'. [ 187.183270][ T9698] 8021q: VLANs not supported on wg2 [ 187.238834][ T9715] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 187.330105][ T9730] netlink: 'syz.3.4325': attribute type 11 has an invalid length. [ 187.351359][ T9730] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4325'. [ 187.371381][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4329'. [ 187.450384][ T9753] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 187.479471][ T9759] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 187.693316][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4362'. [ 187.737459][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4362'. [ 187.957791][ T9830] FAT-fs (loop1): Directory bread(block 64) failed [ 187.964440][ T9830] FAT-fs (loop1): Directory bread(block 65) failed [ 187.971137][ T9830] FAT-fs (loop1): Directory bread(block 66) failed [ 187.977832][ T9830] FAT-fs (loop1): Directory bread(block 67) failed [ 187.984378][ T9830] FAT-fs (loop1): Directory bread(block 68) failed [ 187.991180][ T9830] FAT-fs (loop1): Directory bread(block 69) failed [ 188.015289][ T9830] FAT-fs (loop1): Directory bread(block 70) failed [ 188.022195][ T9830] FAT-fs (loop1): Directory bread(block 71) failed [ 188.029088][ T9830] FAT-fs (loop1): Directory bread(block 72) failed [ 188.035819][ T9830] FAT-fs (loop1): Directory bread(block 73) failed [ 188.075425][ T9783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 188.106724][ T9783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 188.143355][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4386'. [ 188.175222][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4387'. [ 188.201842][ T9862] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 188.207511][ T9783] attempt to access beyond end of device [ 188.207511][ T9783] loop0: rw=2049, want=45104, limit=40427 [ 188.230358][ T9842] attempt to access beyond end of device [ 188.230358][ T9842] loop0: rw=2049, want=45112, limit=40427 [ 188.425476][ T385] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 188.635842][ T9921] netlink: 'syz.4.4417': attribute type 3 has an invalid length. [ 188.653685][ T9925] xt_bpf: check failed: parse error [ 188.741493][ T385] usb 3-1: not running at top speed; connect to a high speed hub [ 188.935970][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 188.935984][ T24] audit: type=1400 audit(1785665058.510:500): avc: denied { read } for pid=9982 comm="syz.3.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.982357][ T385] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 188.998155][ T24] audit: type=1400 audit(1785665058.563:501): avc: denied { create } for pid=9992 comm="syz.0.4454" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.023702][ T9994] syz.4.4453 (9994): /proc/9990/oom_adj is deprecated, please use /proc/9990/oom_score_adj instead. [ 189.030285][ T385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.042954][ T385] usb 3-1: Product: syz [ 189.051720][ T24] audit: type=1400 audit(1785665058.584:502): avc: denied { mounton } for pid=9992 comm="syz.0.4454" path="/970/file0" dev="tmpfs" ino=4977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.079271][ T385] usb 3-1: Manufacturer: syz [ 189.084421][ T385] usb 3-1: SerialNumber: syz [ 189.093126][ T24] audit: type=1400 audit(1785665058.636:503): avc: denied { unlink } for pid=279 comm="syz-executor" name="file0" dev="tmpfs" ino=4977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.141060][ T24] audit: type=1400 audit(1785665058.720:504): avc: denied { listen } for pid=10007 comm="syz.3.4461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.161499][ T24] audit: type=1326 audit(1785665058.720:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz.1.4459" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649de92e99 code=0x7ffc0000 [ 189.209111][ T24] audit: type=1326 audit(1785665058.720:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz.1.4459" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f649de92e99 code=0x7ffc0000 [ 189.239469][ T24] audit: type=1326 audit(1785665058.730:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz.1.4459" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f649de92e99 code=0x7ffc0000 [ 189.311185][T10025] netlink: 'syz.4.4469': attribute type 6 has an invalid length. [ 189.378104][ T385] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 189.386585][ T385] usb 3-1: 1:1 : sample bitwidth 133 in over sample bytes 3 [ 189.408609][T10040] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 189.425805][ T385] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 189.457660][ T385] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 189.501959][ T385] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 189.519870][ T385] usb 3-1: 1:1 : sample bitwidth 133 in over sample bytes 3 [ 189.527442][ T385] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 189.558576][ T385] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 189.589056][ T385] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 189.601735][ T385] usb 3-1: 1:1 : sample bitwidth 133 in over sample bytes 3 [ 189.634981][ T385] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 189.663612][ T385] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 189.673068][ T385] usb 3-1: USB disconnect, device number 57 [ 189.717171][ T24] audit: type=1400 audit(1785665059.329:508): avc: denied { execute } for pid=10077 comm="syz.1.4496" name="file0" dev="tmpfs" ino=4712 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.762582][T10087] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4501'. [ 189.799607][T10092] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1009 sclass=netlink_audit_socket pid=10092 comm=syz.4.4502 [ 189.829354][T10096] xt_l2tp: wrong L2TP version: 0 [ 189.844075][ T24] audit: type=1107 audit(1785665059.455:509): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 189.913276][T10111] overlayfs: missing 'lowerdir' [ 190.061312][T10135] xt_hashlimit: overflow, try lower: 0/0 [ 190.074710][T10131] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.116842][T10131] device bridge2 left promiscuous mode [ 190.145103][T10145] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4529'. [ 190.162937][T10149] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 190.402375][T10186] netlink: 'syz.0.4543': attribute type 3 has an invalid length. [ 190.458821][T10198] syz.3.4554 (10198): attempted to duplicate a private mapping with mremap. This is not supported. [ 190.504293][T10200] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 190.775130][T10255] netlink: 'syz.1.4583': attribute type 3 has an invalid length. [ 190.973095][T10296] netlink: 'syz.2.4602': attribute type 7 has an invalid length. [ 190.997211][T10296] netlink: 'syz.2.4602': attribute type 8 has an invalid length. [ 191.265377][T10348] rtc_cmos 00:00: Alarms can be up to one day in the future [ 191.328721][T10359] device vlan0 entered promiscuous mode [ 191.588569][T10407] netlink: 'syz.4.4656': attribute type 4 has an invalid length. [ 191.612403][T10407] netlink: 'syz.4.4656': attribute type 5 has an invalid length. [ 191.625118][T10412] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 191.776366][T10439] Unsupported ieee802154 address type: 0 [ 191.816279][T10449] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 192.078359][T10510] netlink: 'syz.4.4708': attribute type 29 has an invalid length. [ 192.154743][T10529] : renamed from bond_slave_0 [ 192.197543][T10539] usb usb1: usbfs: process 10539 (syz.1.4721) did not claim interface 4 before use [ 192.216421][ T1490] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 192.348842][T10567] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 192.482844][ T1490] usb 3-1: Using ep0 maxpacket: 32 [ 192.606592][ T1490] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 192.619205][T10628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.626493][T10628] IPv6: NLM_F_CREATE should be set when creating new route [ 192.633745][T10628] IPv6: NLM_F_CREATE should be set when creating new route [ 192.771614][T10657] netlink: 'syz.3.4780': attribute type 32 has an invalid length. [ 192.779700][ T1490] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 192.789610][ T1490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.798260][ T1490] usb 3-1: Product: syz [ 192.812847][ T1490] usb 3-1: Manufacturer: syz [ 192.819579][ T1490] usb 3-1: SerialNumber: syz [ 192.835687][T10481] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 192.863799][ T15] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 192.955528][T10684] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 193.029820][T10694] 9pnet: Could not find request transport: xen [ 193.099123][T10700] FAT-fs (loop3): Directory bread(block 64) failed [ 193.106000][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 193.106038][T10700] FAT-fs (loop3): Directory bread(block 65) failed [ 193.118416][T10700] FAT-fs (loop3): Directory bread(block 66) failed [ 193.125201][T10700] FAT-fs (loop3): Directory bread(block 67) failed [ 193.132098][T10700] FAT-fs (loop3): Directory bread(block 68) failed [ 193.138808][T10700] FAT-fs (loop3): Directory bread(block 69) failed [ 193.145881][T10700] FAT-fs (loop3): Directory bread(block 70) failed [ 193.152803][T10700] FAT-fs (loop3): Directory bread(block 71) failed [ 193.159559][T10700] FAT-fs (loop3): Directory bread(block 72) failed [ 193.166345][T10700] FAT-fs (loop3): Directory bread(block 73) failed [ 193.225733][ T1490] usb 3-1: MIDIStreaming interface descriptor not found [ 193.225950][ T15] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 193.244908][ T1490] usb 3-1: USB disconnect, device number 58 [ 193.251694][ T15] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 193.259041][ T15] usb 1-1: config 0 has no interface number 0 [ 193.344001][T10723] overlayfs: workdir and upperdir must be separate subtrees [ 193.354103][T10725] __nla_validate_parse: 7 callbacks suppressed [ 193.354114][T10725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4813'. [ 193.375434][T10725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.425631][ T15] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 193.438406][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.455958][ T15] usb 1-1: Product: syz [ 193.460193][ T15] usb 1-1: Manufacturer: syz [ 193.465063][ T15] usb 1-1: SerialNumber: syz [ 193.473688][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 193.481360][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4821'. [ 193.498848][ T15] usb 1-1: config 0 descriptor?? [ 193.524527][T10744] xt_TCPMSS: Only works on TCP SYN packets [ 193.596750][T10756] xt_CT: No such helper "pptp" [ 193.701809][T10779] netlink: 'syz.2.4840': attribute type 15 has an invalid length. [ 193.720017][T10779] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.733842][ T1491] usb 1-1: USB disconnect, device number 54 [ 193.755398][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'. [ 193.774368][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'. [ 193.787642][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4844'. [ 193.884977][T10809] xt_l2tp: missing protocol rule (udp|l2tpip) [ 193.940523][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4861'. [ 194.010458][T10830] netlink: 'syz.4.4867': attribute type 17 has an invalid length. [ 194.024719][T10830] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4867'. [ 194.034284][T10830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.123605][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'. [ 194.140898][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4873'. [ 194.191462][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 194.191477][ T24] audit: type=1326 audit(1785665064.033:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10861 comm="syz.3.4881" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bc1b0e99 code=0x7ffc0000 [ 194.270126][T10876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4886'. [ 194.282977][ T24] audit: type=1326 audit(1785665064.033:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10861 comm="syz.3.4881" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bc1b0e99 code=0x7ffc0000 [ 194.409613][ T24] audit: type=1326 audit(1785665064.064:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10861 comm="syz.3.4881" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fc0bc1b0e99 code=0x7ffc0000 [ 194.465880][T10909] device vlan1 entered promiscuous mode [ 194.492246][T10916] netlink: 'syz.1.4908': attribute type 5 has an invalid length. [ 194.500581][ T24] audit: type=1326 audit(1785665064.075:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10861 comm="syz.3.4881" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bc1b0e99 code=0x7ffc0000 [ 194.582228][ T24] audit: type=1326 audit(1785665064.075:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10861 comm="syz.3.4881" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0bc1b0e99 code=0x7ffc0000 [ 194.582322][T10925] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.632376][ T24] audit: type=1326 audit(1785665064.075:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10864 comm="syz.1.4879" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f649de92e99 code=0x0 [ 194.738932][ T24] audit: type=1326 audit(1785665064.075:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.2.4884" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcdf9fe99 code=0x7ffc0000 [ 194.841946][ T24] audit: type=1326 audit(1785665064.093:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.2.4884" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f1dcdf9fe99 code=0x7ffc0000 [ 194.867021][ T24] audit: type=1326 audit(1785665064.093:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.2.4884" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dcdf9fe99 code=0x7ffc0000 [ 194.892108][ T24] audit: type=1400 audit(1785665064.355:543): avc: denied { connect } for pid=10917 comm="syz.0.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.931674][T10968] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.962829][T10968] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.001261][T10982] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.297453][T11021] FAT-fs (loop3): Directory bread(block 64) failed [ 195.297961][T11033] IPv6: sit2: Disabled Multicast RS [ 195.304026][T11021] FAT-fs (loop3): Directory bread(block 65) failed [ 195.304170][T11021] FAT-fs (loop3): Directory bread(block 66) failed [ 195.347488][T11021] FAT-fs (loop3): Directory bread(block 67) failed [ 195.354269][T11021] FAT-fs (loop3): Directory bread(block 68) failed [ 195.362384][T11021] FAT-fs (loop3): Directory bread(block 69) failed [ 195.368996][T11021] FAT-fs (loop3): Directory bread(block 70) failed [ 195.376115][T11021] FAT-fs (loop3): Directory bread(block 71) failed [ 195.382925][T11021] FAT-fs (loop3): Directory bread(block 72) failed [ 195.389479][T11021] FAT-fs (loop3): Directory bread(block 73) failed [ 195.478672][T11041] EXT4-fs (loop2): 1 orphan inode deleted [ 195.498351][T11041] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,nombcache,delalloc,dioread_lock,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue [ 195.521402][T11041] EXT4-fs error (device loop2): ext4_add_entry:2442: inode #2: comm syz.2.4969: Directory hole found for htree leaf block 0 [ 195.706659][T11084] xt_hashlimit: max too large, truncated to 1048576 [ 195.769297][T11097] device bridge2 entered promiscuous mode [ 195.804851][T11101] xt_l2tp: missing protocol rule (udp|l2tpip) [ 195.972099][T11136] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.5015: bg 0: block 5: invalid block bitmap [ 195.984939][T11136] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 195.994201][T11136] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.5015: invalid indirect mapped block 3 (level 2) [ 196.008704][T11136] EXT4-fs (loop2): 1 orphan inode deleted [ 196.014664][T11136] EXT4-fs (loop2): 1 truncate cleaned up [ 196.020430][T11136] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 196.034972][T11136] fscrypt (loop2, inode 15): Error -61 getting encryption context [ 196.161227][T11159] EXT4-fs (loop3): Ignoring removed oldalloc option [ 196.194701][T11159] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c018, mo2=0003] [ 196.203299][T11159] EXT4-fs (loop3): orphan cleanup on readonly fs [ 196.211723][T11159] EXT4-fs warning (device loop3): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 196.226980][T11159] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 196.233947][T11159] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #13: comm syz.3.5025: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 196.252303][T11159] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.5025: couldn't read orphan inode 13 (err -117) [ 196.265022][T11159] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noblock_validity,nobarrier,debug,oldalloc,journal_ioprio=0x0000000000000006,delalloc,,errors=continue [ 196.287560][T11159] EXT4-fs error (device loop3): ext4_lookup:1834: inode #2: comm syz.3.5025: deleted inode referenced: 12 [ 196.440506][T11207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.703841][T11271] binfmt_misc: register: failed to install interpreter file ./file0 [ 196.715303][T11267] netlink: 'syz.1.5077': attribute type 46 has an invalid length. [ 196.748905][T11267] netlink: 'syz.1.5077': attribute type 28 has an invalid length. [ 196.824042][T11275] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 196.837467][T11275] EXT4-fs error (device loop3): ext4_get_journal_inode:5247: comm syz.3.5079: inode #1: comm syz.3.5079: iget: illegal inode # [ 196.855561][T11275] EXT4-fs (loop3): no journal found [ 196.860831][T11275] EXT4-fs (loop3): can't get journal size [ 196.914315][T11275] EXT4-fs (loop3): failed to initialize system zone (-22) [ 196.925515][T11275] EXT4-fs (loop3): mount failed [ 196.943141][T11291] device bridge2 entered promiscuous mode [ 197.089967][T11299] netlink: 'syz.4.5089': attribute type 4 has an invalid length. [ 197.127277][T11299] netlink: 'syz.4.5089': attribute type 30 has an invalid length. [ 197.174816][T11315] usb usb6: usbfs: process 11315 (syz.1.5098) did not claim interface 0 before use [ 197.521242][T11379] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.656887][T11398] exfat: Deprecated parameter 'utf8' [ 197.662391][T11398] exfat: Deprecated parameter 'utf8' [ 197.668136][T11398] exfat: Deprecated parameter 'utf8' [ 197.677981][ T15] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 197.713141][T11398] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 197.902638][T11419] device ip6gre1 entered promiscuous mode [ 197.934560][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 198.045008][T11451] xt_limit: Overflow, try lower: 268435456/13 [ 198.063346][ T15] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 190, changing to 7 [ 198.255295][ T15] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 198.280340][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.300685][ T15] usb 1-1: Product: syz [ 198.310265][ T15] usb 1-1: Manufacturer: syz [ 198.314934][ T15] usb 1-1: SerialNumber: syz [ 198.394627][T11520] xt_CT: No such helper "netbios-ns" [ 198.521792][T11550] netlink: 'syz.1.5212': attribute type 9 has an invalid length. [ 198.551884][T11550] netlink: 'syz.1.5212': attribute type 7 has an invalid length. [ 198.561070][T11550] netlink: 'syz.1.5212': attribute type 8 has an invalid length. [ 198.714889][ T15] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 198.793899][ T15] usb 1-1: USB disconnect, device number 55 [ 198.800328][T11600] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.848018][T11611] __nla_validate_parse: 37 callbacks suppressed [ 198.848028][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5242'. [ 198.976403][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 198.996234][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 199.021559][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 199.039627][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 199.055122][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 199.066650][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 199.075848][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 199.085655][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 199.095590][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5252'. [ 199.411259][T11698] device bridge_slave_1 left promiscuous mode [ 199.417585][T11698] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.443211][T11698] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 199.590229][ T24] kauditd_printk_skb: 85 callbacks suppressed [ 199.590244][ T24] audit: type=1400 audit(1785665069.080:629): avc: denied { read } for pid=11736 comm="syz.2.5304" dev="nsfs" ino=4026532450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.632747][T11728] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 199.661779][T11728] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 199.685390][ T24] audit: type=1400 audit(1785665069.117:630): avc: denied { open } for pid=11736 comm="syz.2.5304" path="net:[4026532450]" dev="nsfs" ino=4026532450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 199.689216][T11728] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.5300: mark_inode_dirty error [ 199.709697][ T24] audit: type=1400 audit(1785665069.117:631): avc: denied { create } for pid=11736 comm="syz.2.5304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.755410][ T24] audit: type=1400 audit(1785665069.117:632): avc: denied { bind } for pid=11736 comm="syz.2.5304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.777797][ T24] audit: type=1400 audit(1785665069.145:633): avc: denied { mount } for pid=11727 comm="syz.1.5300" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 199.795364][T11728] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 199.803781][ T24] audit: type=1400 audit(1785665069.145:634): avc: denied { write } for pid=11727 comm="syz.1.5300" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.819331][T11728] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #15: comm syz.1.5300: mark_inode_dirty error [ 199.840990][ T24] audit: type=1400 audit(1785665069.145:635): avc: denied { remove_name } for pid=11727 comm="syz.1.5300" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.880462][T11728] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 199.890828][T11728] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #15: comm syz.1.5300: mark_inode_dirty error [ 199.924704][T11728] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 199.933540][T11728] EXT4-fs error (device loop1): ext4_truncate:4403: inode #15: comm syz.1.5300: mark_inode_dirty error [ 199.943432][ T24] audit: type=1400 audit(1785665069.145:636): avc: denied { unlink } for pid=11727 comm="syz.1.5300" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.969177][ T24] audit: type=1400 audit(1785665069.173:637): avc: denied { write } for pid=11745 comm="syz.2.5308" name="softnet_stat" dev="proc" ino=4026532463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 199.993597][ T24] audit: type=1400 audit(1785665069.239:638): avc: denied { view } for pid=11748 comm="syz.3.5309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 200.030572][T11728] EXT4-fs error (device loop1): ext4_evict_inode:296: comm syz.1.5300: couldn't truncate inode 15 (err -27) [ 200.049915][T11769] FAT-fs (loop4): Directory bread(block 64) failed [ 200.056679][T11769] FAT-fs (loop4): Directory bread(block 65) failed [ 200.064718][T11769] FAT-fs (loop4): Directory bread(block 66) failed [ 200.071601][T11769] FAT-fs (loop4): Directory bread(block 67) failed [ 200.078937][T11769] FAT-fs (loop4): Directory bread(block 68) failed [ 200.087280][T11769] FAT-fs (loop4): Directory bread(block 69) failed [ 200.095847][T11769] FAT-fs (loop4): Directory bread(block 70) failed [ 200.102498][T11769] FAT-fs (loop4): Directory bread(block 71) failed [ 200.109319][T11769] FAT-fs (loop4): Directory bread(block 72) failed [ 200.127134][T11769] FAT-fs (loop4): Directory bread(block 73) failed [ 200.575465][T11862] netlink: 'syz.0.5365': attribute type 21 has an invalid length. [ 200.670232][T11876] xt_CT: No such helper "snmp_trap" [ 200.906187][ T300] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 200.965038][T11900] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 201.004978][T11900] FAT-fs (loop1): Filesystem has been set read-only [ 201.109525][T11919] 9pnet: p9_fd_create_unix (11919): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 201.217102][T11913] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 201.245283][T11913] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 201.270273][T11913] F2FS-fs (loop3): invalid crc value [ 201.280282][ T300] usb 5-1: not running at top speed; connect to a high speed hub [ 201.289328][T11930] FAT-fs (loop0): Directory bread(block 64) failed [ 201.291740][T11913] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.307355][T11930] FAT-fs (loop0): Directory bread(block 65) failed [ 201.331638][T11930] FAT-fs (loop0): Directory bread(block 66) failed [ 201.351554][T11930] FAT-fs (loop0): Directory bread(block 67) failed [ 201.363610][T11913] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 201.371023][T11930] FAT-fs (loop0): Directory bread(block 68) failed [ 201.377737][T11913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.387333][T11930] FAT-fs (loop0): Directory bread(block 69) failed [ 201.397110][T11930] FAT-fs (loop0): Directory bread(block 70) failed [ 201.397963][ T300] usb 5-1: config 3 has an invalid interface number: 199 but max is 0 [ 201.418760][T11930] FAT-fs (loop0): Directory bread(block 71) failed [ 201.425821][ T300] usb 5-1: config 3 has no interface number 0 [ 201.432033][ T300] usb 5-1: config 3 interface 199 has no altsetting 0 [ 201.447589][T11930] FAT-fs (loop0): Directory bread(block 72) failed [ 201.465129][T11930] FAT-fs (loop0): Directory bread(block 73) failed [ 201.488123][T11913] attempt to access beyond end of device [ 201.488123][T11913] loop3: rw=2049, want=45104, limit=40427 [ 201.611716][ T300] usb 5-1: New USB device found, idVendor=050d, idProduct=0004, bcdDevice=7c.d9 [ 201.620765][ T300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.628909][ T300] usb 5-1: Product: syz [ 201.633098][ T300] usb 5-1: Manufacturer: syz [ 201.637759][ T300] usb 5-1: SerialNumber: syz [ 201.716252][T11959] netlink: 'syz.0.5410': attribute type 12 has an invalid length. [ 201.890813][T11997] xt_ecn: cannot match TCP bits for non-tcp packets [ 201.976037][ T300] cdc_subset: probe of 5-1:3.199 failed with error -22 [ 202.005249][ T300] usb 5-1: USB disconnect, device number 55 [ 202.215939][T12047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.505364][T12104] xt_TCPMSS: Only works on TCP SYN packets [ 202.531701][T12109] 8021q: VLANs not supported on lo [ 202.560450][T12108] device veth1_macvtap left promiscuous mode [ 202.567033][T12108] device macsec0 entered promiscuous mode [ 202.618647][T12124] xt_TCPMSS: Only works on TCP SYN packets [ 202.627171][T12122] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 202.650434][T12115] FAT-fs (loop0): Directory bread(block 64) failed [ 202.669485][T12115] FAT-fs (loop0): Directory bread(block 65) failed [ 202.676411][T12115] FAT-fs (loop0): Directory bread(block 66) failed [ 202.683139][T12115] FAT-fs (loop0): Directory bread(block 67) failed [ 202.691010][T12115] FAT-fs (loop0): Directory bread(block 68) failed [ 202.697863][T12115] FAT-fs (loop0): Directory bread(block 69) failed [ 202.704679][T12115] FAT-fs (loop0): Directory bread(block 70) failed [ 202.711312][T12115] FAT-fs (loop0): Directory bread(block 71) failed [ 202.719110][T12115] FAT-fs (loop0): Directory bread(block 72) failed [ 202.725791][T12115] FAT-fs (loop0): Directory bread(block 73) failed [ 202.776799][T12138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.784077][T12138] IPv6: NLM_F_CREATE should be set when creating new route [ 202.889851][T12156] xt_hashlimit: invalid interval [ 203.040191][T12190] device bridge4 entered promiscuous mode [ 203.267369][T12235] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 203.508664][T12286] device vlan0 entered promiscuous mode [ 203.558562][T12292] binder: BC_ACQUIRE_RESULT not supported [ 203.558588][T12292] binder: 12289:12292 ioctl c0306201 200000000480 returned -22 [ 203.610153][T12297] netlink: 'syz.0.5574': attribute type 32 has an invalid length. [ 203.653933][T12276] loop3: p1 p2 p3 [ 203.657841][T12276] loop3: p1 start 51379968 is beyond EOD, truncated [ 203.707390][T12276] loop3: p3 size 100663552 extends beyond EOD, truncated [ 203.939286][ T329] print_req_error: 44 callbacks suppressed [ 203.939304][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 203.950653][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 203.963290][T12320] netlink: 'syz.0.5586': attribute type 7 has an invalid length. [ 203.981128][ T283] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 204.006283][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.017480][T12320] netlink: 'syz.0.5586': attribute type 5 has an invalid length. [ 204.039598][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.059395][ T329] buffer_io_error: 38 callbacks suppressed [ 204.059405][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 204.097299][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 204.146283][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 204.160778][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 204.191106][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.202771][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.230562][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 204.240175][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 204.275259][T12364] cgroup: name respecified [ 204.285495][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 204.308315][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 204.329148][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 204.352370][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 204.383096][ T1118] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 204.384484][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 204.451617][T12389] netlink: 'syz.1.5620': attribute type 3 has an invalid length. [ 204.469202][ T1118] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 204.475267][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 204.679536][T12417] x_tables: duplicate entry at hook 3 [ 204.819853][T12448] __nla_validate_parse: 130 callbacks suppressed [ 204.819865][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5650'. [ 204.874137][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5650'. [ 205.357730][T12538] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.375612][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 205.375626][ T24] audit: type=1400 audit(1785665074.496:694): avc: denied { write } for pid=12540 comm="syz.4.5694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.408736][T12538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.416024][T12538] IPv6: NLM_F_CREATE should be set when creating new route [ 205.423290][T12538] IPv6: NLM_F_CREATE should be set when creating new route [ 205.465181][ T24] audit: type=1400 audit(1785665074.581:695): avc: denied { setopt } for pid=12548 comm="syz.3.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 205.507892][T12552] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 205.534876][T12552] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 205.557950][T12557] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 205.570112][T12552] overlayfs: missing 'lowerdir' [ 205.620524][T12557] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.688380][T12557] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5701: bg 0: block 10: padding at end of block bitmap is not set [ 205.728106][ T24] audit: type=1400 audit(1785665074.833:696): avc: denied { bind } for pid=12576 comm="syz.3.5711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.773546][T12580] incfs: Options parsing error. -22 [ 205.795189][ T24] audit: type=1400 audit(1785665074.852:697): avc: denied { node_bind } for pid=12576 comm="syz.3.5711" saddr=100.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 205.812911][T12580] incfs: mount failed -22 [ 205.820136][T12557] Quota error (device loop2): write_blk: dquota write failed [ 205.833065][T12557] Quota error (device loop2): find_free_dqentry: Can't remove block (3) from entry free list [ 205.844977][ T24] audit: type=1400 audit(1785665074.880:698): avc: denied { getopt } for pid=12581 comm="syz.0.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.879808][T12557] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 205.896096][T12557] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.5701: Failed to acquire dquot type 0 [ 205.926946][T12557] Quota error (device loop2): write_blk: dquota write failed [ 205.944240][ T24] audit: type=1400 audit(1785665075.030:699): avc: granted { setsecparam } for pid=12592 comm="syz.0.5719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 205.973002][T12557] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.5701: Failed to acquire dquot type 0 [ 205.985044][T12557] EXT4-fs error (device loop2): ext4_free_blocks:5690: comm syz.2.5701: Freeing blocks not in datazone - block = 0, count = 4096 [ 206.004137][T12557] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.5701: Failed to acquire dquot type 0 [ 206.020082][T12557] EXT4-fs (loop2): 1 orphan inode deleted [ 206.026591][T12557] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 206.086272][T12557] EXT4-fs error (device loop2): ext4_lookup:1830: inode #15: comm syz.2.5701: iget: bad extended attribute block 6 [ 206.103950][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5724'. [ 206.121077][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5727'. [ 206.279553][T12626] netlink: 'syz.2.5738': attribute type 1 has an invalid length. [ 206.319645][T12626] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5738'. [ 206.345375][T12633] device ipip0 entered promiscuous mode [ 206.512189][T12666] device veth0_to_bond entered promiscuous mode [ 206.661094][T12549] F2FS-fs (loop4): invalid crc value [ 206.696721][T12549] F2FS-fs (loop4): Found nat_bits in checkpoint [ 206.755975][T12549] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 206.770092][T12549] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.814565][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5773'. [ 206.839077][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.861525][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.895115][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.904777][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.913772][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 206.923345][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.932306][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.941377][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.950374][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.959295][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.968283][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.977890][T12713] EXT4-fs (loop0): Test dummy encryption mode enabled [ 206.979977][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 206.993879][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 207.002946][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 207.012272][ T282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 207.036480][T12713] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 207.047150][T12723] IPv6: Can't replace route, no match found [ 207.060409][T12713] System zones: 0-5 [ 207.065121][T12713] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,nodiscard,abort,,errors=continue [ 207.101574][T12727] netlink: 'syz.2.5784': attribute type 5 has an invalid length. [ 207.118522][T12727] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5784'. [ 207.457103][T12764] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 207.469022][T12744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 207.500189][T12744] ext4 filesystem being mounted at /1025/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.626874][T12788] x_tables: duplicate entry at hook 2 [ 207.749418][T12816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12816 comm=syz.2.5825 [ 207.778545][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5826'. [ 207.799008][T12816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12816 comm=syz.2.5825 [ 207.887589][T12834] IPv6: sit1: Disabled Multicast RS [ 207.934535][T12842] xt_bpf: check failed: parse error [ 207.946186][T12844] device veth0_to_bond left promiscuous mode [ 208.131808][T12884] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5859'. [ 208.283723][T12916] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.5875'. [ 208.299644][T12920] x_tables: unsorted underflow at hook 2 [ 208.405731][T12937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.437690][T12949] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.461694][T12950] device ip6tnl2 entered promiscuous mode [ 208.517875][T12958] xt_hashlimit: overflow, try lower: 3/0 [ 208.636637][T12982] usb usb1: usbfs: process 12982 (syz.4.5908) did not claim interface 0 before use [ 208.704630][T12984] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,nombcache,dioread_lock,errors=remount-ro,nodiscard,block_validity, [ 208.784536][T12984] ext4 filesystem being mounted at /1111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.938205][T13036] overlayfs: conflicting options: nfs_export=on,index=off [ 209.004220][T13054] SELinux: failed to load policy [ 209.119819][T13071] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 209.180125][T13081] exfat: Deprecated parameter 'utf8' [ 209.180145][T13081] exfat: Deprecated parameter 'namecase' [ 209.180158][T13081] exfat: Deprecated parameter 'utf8' [ 209.182829][T13081] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 209.190867][T13081] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 209.306056][ T329] print_req_error: 270 callbacks suppressed [ 209.306073][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.324402][T13100] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 209.352258][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.369488][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.381141][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.421453][ T329] buffer_io_error: 131 callbacks suppressed [ 209.421464][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 209.506081][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.518887][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.553803][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.565811][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.594879][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 209.607226][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 209.752063][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.780400][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.811864][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 209.830783][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 209.874213][T13162] exfat: Deprecated parameter 'namecase' [ 209.896366][T13162] exfat: Deprecated parameter 'namecase' [ 209.959246][T13162] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 210.135681][T13187] netlink: 'syz.1.6007': attribute type 1 has an invalid length. [ 210.157565][T13189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.175586][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 210.190663][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 210.367762][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 210.390117][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 210.522612][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 210.722073][T13228] FAT-fs (loop1): Directory bread(block 64) failed [ 210.731868][T13228] FAT-fs (loop1): Directory bread(block 65) failed [ 210.738459][T13228] FAT-fs (loop1): Directory bread(block 66) failed [ 210.739052][ T24] kauditd_printk_skb: 238 callbacks suppressed [ 210.739093][ T24] audit: type=1400 audit(1785665079.501:933): avc: denied { ioctl } for pid=281 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.757405][T13228] FAT-fs (loop1): Directory bread(block 67) failed [ 210.783889][T13228] FAT-fs (loop1): Directory bread(block 68) failed [ 210.791317][T13228] FAT-fs (loop1): Directory bread(block 69) failed [ 210.798601][T13228] FAT-fs (loop1): Directory bread(block 70) failed [ 210.806070][T13228] FAT-fs (loop1): Directory bread(block 71) failed [ 210.813183][T13228] FAT-fs (loop1): Directory bread(block 72) failed [ 210.820392][T13228] FAT-fs (loop1): Directory bread(block 73) failed [ 210.858443][T13241] netlink: 'syz.3.6032': attribute type 7 has an invalid length. [ 210.874474][T13241] netlink: 'syz.3.6032': attribute type 7 has an invalid length. [ 210.904959][ T24] audit: type=1400 audit(1785665079.558:934): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 210.937891][ T24] audit: type=1400 audit(1785665079.604:935): avc: denied { mount } for pid=13224 comm="syz.1.6027" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 210.964462][ T24] audit: type=1400 audit(1785665079.604:936): avc: denied { read write } for pid=13224 comm="syz.1.6027" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.019582][T13251] __nla_validate_parse: 10 callbacks suppressed [ 211.019591][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6036'. [ 211.052667][ T24] audit: type=1400 audit(1785665079.604:937): avc: denied { read write open } for pid=13224 comm="syz.1.6027" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.099227][T13257] overlayfs: missing 'lowerdir' [ 211.144364][ T24] audit: type=1400 audit(1785665079.604:938): avc: denied { ioctl } for pid=13224 comm="syz.1.6027" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 211.197671][ T279] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.210486][ T279] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 211.218167][ T279] audit: backlog limit exceeded [ 211.237412][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 211.281057][T13280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6051'. [ 211.374810][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6054'. [ 211.421671][T13289] netlink: 'syz.0.6056': attribute type 12 has an invalid length. [ 211.718702][T13324] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.6071: bg 0: block 5: invalid block bitmap [ 211.731732][T13324] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 211.741619][T13324] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.6071: invalid indirect mapped block 3 (level 2) [ 211.755885][T13324] EXT4-fs (loop2): 2 truncates cleaned up [ 211.761649][T13324] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,bsdgroups,nodioread_nolock,stripe=0x0000000000000010,,errors=continue [ 211.899245][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6082'. [ 211.987337][T13356] device vti0 entered promiscuous mode [ 212.343574][ T1491] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 212.468785][T13416] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6116'. [ 212.483708][T13417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6117'. [ 212.739563][ T1491] usb 5-1: config 3 has an invalid interface number: 230 but max is 0 [ 212.753204][ T1491] usb 5-1: config 3 has no interface number 0 [ 212.775501][ T1491] usb 5-1: config 3 interface 230 altsetting 4 endpoint 0xD is Bulk; changing to Interrupt [ 212.814206][ T1491] usb 5-1: config 3 interface 230 has no altsetting 0 [ 212.825199][T13452] xt_hashlimit: max too large, truncated to 1048576 [ 212.831864][T13452] xt_hashlimit: overflow, try lower: 137438953472/8 [ 213.102596][ T1491] usb 5-1: string descriptor 0 read error: -22 [ 213.110315][ T1491] usb 5-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 213.139044][ T1491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.177713][T13364] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.220789][ T1491] hub 5-1:3.230: bad descriptor, ignoring hub [ 213.226954][ T1491] hub: probe of 5-1:3.230 failed with error -5 [ 213.387236][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6157'. [ 213.605108][ T1491] usb 5-1: USB disconnect, device number 56 [ 214.650345][T13604] netlink: 'syz.3.6208': attribute type 4 has an invalid length. [ 214.770188][ T329] print_req_error: 62 callbacks suppressed [ 214.770205][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 214.770257][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.770265][ T329] buffer_io_error: 25 callbacks suppressed [ 214.770275][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 214.780089][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 214.780140][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.780153][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 214.921968][T13628] x_tables: unsorted underflow at hook 1 [ 214.989937][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6223'. [ 215.315408][T13671] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6242'. [ 215.536268][T13694] netlink: 'syz.3.6256': attribute type 13 has an invalid length. [ 215.546856][T13694] netlink: 504 bytes leftover after parsing attributes in process `syz.3.6256'. [ 215.628643][T13696] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 215.674131][T13680] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 215.703417][T13680] FAT-fs (loop1): Filesystem has been set read-only [ 215.745883][ T1118] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 215.759755][ T301] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 215.794637][ T301] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.806917][ T1118] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.839240][ T301] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 215.842401][ T1118] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 215.949508][T13716] device ip6tnl3 entered promiscuous mode [ 216.099695][ T24] kauditd_printk_skb: 956 callbacks suppressed [ 216.099710][ T24] audit: type=1400 audit(1785665084.525:1884): avc: denied { read write } for pid=279 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.185069][ T24] audit: type=1400 audit(1785665084.563:1885): avc: denied { read write open } for pid=279 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.258669][ T24] audit: type=1400 audit(1785665084.563:1886): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.316737][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 216.333530][ T24] audit: type=1400 audit(1785665084.572:1887): avc: denied { create } for pid=13731 comm="syz.1.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.356978][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 216.400295][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 216.408719][ T24] audit: type=1400 audit(1785665084.581:1888): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.453191][T13757] IPv6: Can't replace route, no match found [ 216.482096][ T24] audit: type=1400 audit(1785665084.581:1889): avc: denied { read write open } for pid=281 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.511076][ T329] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 216.586579][ T24] audit: type=1400 audit(1785665084.581:1890): avc: denied { ioctl } for pid=281 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.629973][ T24] audit: type=1400 audit(1785665084.581:1891): avc: denied { write } for pid=13731 comm="syz.1.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.673767][ T281] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.684686][ T281] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 216.759569][T13783] __nla_validate_parse: 4 callbacks suppressed [ 216.759580][T13783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6295'. [ 216.825137][T13783] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 216.858728][T13788] tc_dump_action: action bad kind [ 216.923590][T13802] xt_TCPMSS: Only works on TCP SYN packets [ 217.148531][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 217.173319][T13833] netlink: 'syz.2.6322': attribute type 24 has an invalid length. [ 217.261984][T13844] netlink: 'syz.4.6326': attribute type 11 has an invalid length. [ 217.279769][T13850] netlink: 'syz.3.6328': attribute type 8 has an invalid length. [ 217.418520][ T329] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 217.572507][T13886] IPv6: Can't replace route, no match found [ 217.831691][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6362'. [ 218.167038][T13947] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 218.248508][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6389'. [ 218.372343][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6396'. [ 218.415503][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6396'. [ 218.730984][T14032] device vlan0 left promiscuous mode [ 218.746664][T14032] device vlan1 left promiscuous mode [ 218.752728][T14032] device ip6erspan0 left promiscuous mode [ 218.806623][T14032] device ip6gretap2 left promiscuous mode [ 218.843110][T14032] device bridge2 left promiscuous mode [ 218.873685][T14032] device ipip0 left promiscuous mode [ 218.903584][T14032] device ip6tnl2 left promiscuous mode [ 218.922403][T14032] device vti0 left promiscuous mode [ 218.928491][T14032] device ip6tnl3 left promiscuous mode [ 218.984870][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 219.078406][T14059] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.100525][T14059] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.118789][ T329] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 219.373418][T14084] netlink: 'syz.1.6441': attribute type 4 has an invalid length. [ 219.402291][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 219.839495][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6470'. [ 219.937040][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6473'. [ 219.946377][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6473'. [ 219.955623][T14050] F2FS-fs (loop3): invalid crc value [ 220.062395][T14050] F2FS-fs (loop3): Found nat_bits in checkpoint [ 220.136792][T14050] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 220.169988][T14163] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 220.189815][T14163] ext4 filesystem being mounted at /1324/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.235098][T14050] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 220.366357][T14163] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 18: comm syz.0.6481: lblock 23 mapped to illegal pblock 18 (length 1) [ 220.656531][T14206] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6500'. [ 220.841976][T14224] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 221.049434][T14240] netlink: 'syz.4.6516': attribute type 16 has an invalid length. [ 221.114118][T14246] IPv6: sit3: Disabled Multicast RS [ 221.163276][ T301] print_req_error: 14 callbacks suppressed [ 221.163295][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 221.163347][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.163355][ T301] buffer_io_error: 2 callbacks suppressed [ 221.163365][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 221.235297][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 221.235351][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.235362][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 221.281256][T14257] x_tables: duplicate underflow at hook 3 [ 221.384331][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 221.384384][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.384395][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 221.419488][ T1118] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 221.419541][ T1118] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.419553][ T1118] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 221.467011][ T24] kauditd_printk_skb: 1302 callbacks suppressed [ 221.467025][ T24] audit: type=1400 audit(2000000001.908:3184): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.475991][ T24] audit: type=1400 audit(2000000001.908:3185): avc: denied { read write open } for pid=281 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.476093][ T24] audit: type=1400 audit(2000000001.908:3186): avc: denied { read write } for pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.478916][ T24] audit: type=1400 audit(2000000001.908:3187): avc: denied { read write } for pid=279 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.478990][ T24] audit: type=1400 audit(2000000001.908:3188): avc: denied { open } for pid=279 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.483225][ T24] audit: type=1400 audit(2000000001.917:3189): avc: denied { ioctl } for pid=281 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.490655][ T24] audit: type=1400 audit(2000000001.917:3190): avc: denied { read write } for pid=282 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.500766][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 221.500817][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.500829][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 221.517113][ T24] audit: type=1400 audit(2000000001.945:3191): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.652819][T14278] netlink: 'syz.2.6535': attribute type 2 has an invalid length. [ 221.852366][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 221.968306][ T1118] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 221.979022][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 222.089242][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 222.101797][ T1118] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 222.178659][ T24] audit: type=1400 audit(2000000002.085:3192): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.178680][ T24] audit: type=1400 audit(2000000002.282:3193): avc: denied { read write } for pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.541538][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 222.562922][ T385] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 222.650793][ T15] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.044346][ T385] usb 3-1: unable to get BOS descriptor or descriptor too short [ 223.097922][ T385] usb 3-1: not running at top speed; connect to a high speed hub [ 223.185375][T14360] IPv6: Can't replace route, no match found [ 223.194004][ T385] usb 3-1: config 2 has an invalid interface number: 65 but max is 0 [ 223.203377][ T385] usb 3-1: config 2 has no interface number 0 [ 223.228270][ T385] usb 3-1: config 2 interface 65 has no altsetting 0 [ 223.450574][ T385] usb 3-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice= d.c9 [ 223.466663][ T385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.489693][ T385] usb 3-1: Product: syz [ 223.501407][ T385] usb 3-1: Manufacturer: syz [ 223.514348][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.523398][ T385] usb 3-1: SerialNumber: syz [ 223.728279][ T410] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 223.771002][ T15] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.785154][T14397] mip6: mip6_rthdr_init_state: state's mode is not 2: 1 [ 223.795809][ T15] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.889148][ T385] usb 3-1: NDI device with a latency value of 1 [ 223.922159][ T385] ftdi_sio 3-1:2.65: FTDI USB Serial Device converter detected [ 223.940949][ T385] usb 3-1: Detected FT232H [ 223.947826][T14403] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.6596: bg 0: block 127: padding at end of block bitmap is not set [ 223.963431][ T385] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 223.984782][ T385] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 223.992578][T14403] EXT4-fs (loop4): Remounting filesystem read-only [ 224.016837][ T410] usb 4-1: Using ep0 maxpacket: 16 [ 224.022546][ T385] ftdi_sio 3-1:2.65: GPIO initialisation failed: -71 [ 224.029398][T14403] EXT4-fs error (device loop4) in ext4_evict_inode:260: Readonly filesystem [ 224.039638][ T385] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 224.051357][ T385] usb 3-1: USB disconnect, device number 59 [ 224.058219][ T385] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 224.081603][T14403] EXT4-fs error (device loop4): ext4_xattr_block_set:2188: inode #15: comm syz.4.6596: bad block 0 [ 224.092344][ T385] ftdi_sio 3-1:2.65: device disconnected [ 224.102357][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.145728][T14403] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 224.171484][T14403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.6596: iget: bad extra_isize 58 (inode size 256) [ 224.186543][T14418] IPv6: NLM_F_REPLACE set, but no existing node found! [ 224.207849][T14403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.6596: error while reading EA inode 11 err=-117 [ 224.258397][T14403] EXT4-fs (loop4): 1 orphan inode deleted [ 224.273747][T14403] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,noquota,max_dir_size_kb=0x0000000000200004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,nodelalloc, [ 224.348635][ T410] usb 4-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 224.401592][ T410] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.410105][ T410] usb 4-1: Product: syz [ 224.455953][ T410] usb 4-1: Manufacturer: syz [ 224.460613][ T410] usb 4-1: SerialNumber: syz [ 224.484512][T14430] 9pnet: p9_fd_create_unix (14430): problem connecting socket: ./file0: -111 [ 224.602363][T14437] netlink: 'syz.2.6612': attribute type 1 has an invalid length. [ 224.638681][T14441] xt_limit: Overflow, try lower: 2/2147483648 [ 224.681638][T14443] __nla_validate_parse: 1 callbacks suppressed [ 224.681648][T14443] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6615'. [ 224.897985][ T410] usb 4-1: Can't get UAC3 power state for id 10 [ 224.946969][ T410] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 224.953810][ T410] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 224.995681][ T410] usb 4-1: USB disconnect, device number 61 [ 225.059530][T14477] netlink: 'syz.2.6632': attribute type 3 has an invalid length. [ 225.335265][T14505] netlink: 'syz.4.6645': attribute type 7 has an invalid length. [ 225.346324][T14505] netlink: 'syz.4.6645': attribute type 8 has an invalid length. [ 225.354611][T14505] netlink: 'syz.4.6645': attribute type 13 has an invalid length. [ 225.370897][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6646'. [ 225.380160][T14507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6646'. [ 225.421447][T14507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6646'. [ 225.565871][T14518] netlink: 320 bytes leftover after parsing attributes in process `syz.3.6652'. [ 225.578797][ T410] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 225.786328][T14531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.016262][ T410] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.112390][ T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.133359][ T410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.230395][T14560] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 226.337043][ T410] usb 2-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 226.361087][ T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.396776][ T410] usb 2-1: Product: syz [ 226.402871][ T1491] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 226.412995][ T410] usb 2-1: Manufacturer: syz [ 226.421044][ T410] usb 2-1: SerialNumber: syz [ 226.431504][T14566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6675'. [ 226.565028][ T329] print_req_error: 136 callbacks suppressed [ 226.565044][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 226.690703][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.725535][ T329] buffer_io_error: 63 callbacks suppressed [ 226.725546][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 226.807192][ T1491] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 226.818897][ T24] kauditd_printk_skb: 622 callbacks suppressed [ 226.818911][ T24] audit: type=1400 audit(2000000006.903:3817): avc: denied { ioctl } for pid=14550 comm="syz.3.6667" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.861817][ T24] audit: type=1400 audit(2000000006.893:3816): avc: denied { open } for pid=279 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 226.914082][ T410] usb 2-1: unit 34 not found! [ 226.924993][ T410] usb 2-1: unit 255 not found! [ 226.975514][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 226.994078][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 227.007052][ T24] audit: type=1400 audit(2000000006.903:3818): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.023686][ T410] usb 2-1: USB disconnect, device number 58 [ 227.053308][ T1491] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 227.068602][ T1491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.077793][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.084502][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.120619][ T1491] usb 4-1: Product: syz [ 227.140082][ T1491] usb 4-1: Manufacturer: syz [ 227.144778][ T1491] usb 4-1: SerialNumber: syz [ 227.159936][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 227.168368][ T24] audit: type=1400 audit(2000000006.903:3819): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.194097][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 227.247809][ T24] audit: type=1400 audit(2000000006.903:3820): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.336878][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 227.388213][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 227.391543][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.416644][ T24] audit: type=1400 audit(2000000006.912:3821): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.457090][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 227.499480][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 227.529690][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 227.541933][ T24] audit: type=1400 audit(2000000006.912:3822): avc: denied { read write open } for pid=281 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.674094][ T24] audit: type=1400 audit(2000000006.912:3823): avc: denied { ioctl } for pid=281 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.715796][ T1491] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 227.724649][ T2412] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 227.737979][ T1491] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 227.748097][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 227.768287][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6703'. [ 227.793677][ T1491] usb 4-1: USB disconnect, device number 62 [ 227.810321][ T282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.827127][T14624] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 227.838921][ T24] audit: type=1400 audit(2000000006.978:3824): avc: denied { ioctl } for pid=14550 comm="syz.3.6667" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.876154][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.911186][T14627] device syz_tun entered promiscuous mode [ 227.931112][T14627] syz_tun: refused to change device tx_queue_len [ 227.972477][T14627] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 227.998368][ T1118] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 227.998958][ T301] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 228.143516][T14640] device sit0 entered promiscuous mode [ 228.195480][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 228.245853][T14640] netlink: 'syz.4.6710': attribute type 1 has an invalid length. [ 228.282362][T14640] netlink: 'syz.4.6710': attribute type 3 has an invalid length. [ 228.305950][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6715'. [ 228.399820][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6721'. [ 228.620961][T14671] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 228.786978][T14679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6731'. [ 229.017113][T14694] x_tables: duplicate underflow at hook 2 [ 229.122899][T14702] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 229.286098][T14719] device macsec0 entered promiscuous mode [ 229.670805][T14741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.443276][T14787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 230.691754][T14826] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.700510][T14826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.707820][T14826] IPv6: NLM_F_CREATE should be set when creating new route [ 230.715203][T14826] IPv6: NLM_F_CREATE should be set when creating new route [ 230.734381][T14814] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.821224][T14831] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 230.842567][T14814] FAT-fs (loop2): FAT read failed (blocknr 1824) [ 230.977232][T14848] __nla_validate_parse: 6 callbacks suppressed [ 230.977241][T14848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6813'. [ 231.039221][T14848] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 231.066163][T14850] netlink: 'syz.2.6812': attribute type 17 has an invalid length. [ 231.089620][ T2412] udevd[2412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.201998][T14864] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.213110][T14865] xt_NFQUEUE: number of total queues is 0 [ 231.402481][T14878] EXT4-fs (loop0): Test dummy encryption mode enabled [ 231.416017][T14878] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 231.458729][T14878] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 231.512634][T14878] System zones: 0-5 [ 231.532511][T14878] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 231.868459][T14938] TCP: TCP_TX_DELAY enabled [ 231.974388][ T329] print_req_error: 82 callbacks suppressed [ 231.974406][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 232.002926][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 232.028788][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.052749][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.098935][ T301] buffer_io_error: 37 callbacks suppressed [ 232.098947][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 232.176210][ T24] kauditd_printk_skb: 630 callbacks suppressed [ 232.176225][ T24] audit: type=1400 audit(2000000011.926:4432): avc: denied { read write } for pid=14970 comm="syz.3.6872" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.238689][ T24] audit: type=1400 audit(2000000011.926:4433): avc: denied { read write open } for pid=14970 comm="syz.3.6872" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.263750][ T24] audit: type=1400 audit(2000000011.926:4434): avc: denied { ioctl } for pid=14970 comm="syz.3.6872" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.290308][ T24] audit: type=1400 audit(2000000011.926:4435): avc: denied { mounton } for pid=14970 comm="syz.3.6872" path="/1285/file1" dev="tmpfs" ino=6533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 232.313245][ T24] audit: type=1400 audit(2000000011.926:4436): avc: denied { mount } for pid=14970 comm="syz.3.6872" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 232.336649][ T24] audit: type=1400 audit(2000000011.926:4437): avc: denied { read write } for pid=14970 comm="syz.3.6872" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.360925][ T24] audit: type=1400 audit(2000000011.926:4438): avc: denied { open } for pid=14970 comm="syz.3.6872" path="/dev/loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.384992][ T24] audit: type=1400 audit(2000000011.926:4439): avc: denied { ioctl } for pid=14970 comm="syz.3.6872" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.422041][ T24] audit: type=1400 audit(2000000011.963:4440): avc: denied { read write open } for pid=279 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.457748][ T24] audit: type=1400 audit(2000000011.963:4441): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.523006][T14981] xt_hashlimit: max too large, truncated to 1048576 [ 232.589639][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 232.631334][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 232.644653][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.677747][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.687036][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 232.706617][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 232.824285][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 232.852382][T15011] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 232.853491][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 232.890422][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 232.932224][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 232.946684][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.233554][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 233.247924][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 233.278934][T15049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.438767][T15071] xt_CONNSECMARK: invalid mode: 254 [ 233.452697][T15073] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 233.502233][T15080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6922'. [ 233.510309][T15073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.624242][T15095] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.674977][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 233.710211][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 233.730451][T15103] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 233.895824][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 235.086256][T15135] Zero length message leads to an empty skb [ 235.364713][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6963'. [ 235.779710][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6979'. [ 236.012559][T15213] Unsupported ieee802154 address type: 0 [ 236.376298][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.446858][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.468757][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.527325][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.553635][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.581695][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.642435][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.669917][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.701938][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.742172][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7007'. [ 236.794380][T15247] device macsec0 left promiscuous mode [ 236.971129][T15271] netlink: 'syz.1.7019': attribute type 3 has an invalid length. [ 237.003115][T15271] netlink: 'syz.1.7019': attribute type 3 has an invalid length. [ 237.327997][T15296] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.474423][ T329] print_req_error: 114 callbacks suppressed [ 237.474441][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 237.506836][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 237.541240][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.549098][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.566366][ T24] kauditd_printk_skb: 867 callbacks suppressed [ 237.566381][ T24] audit: type=1400 audit(2000000016.958:5309): avc: denied { read write } for pid=282 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.576501][ T329] buffer_io_error: 51 callbacks suppressed [ 237.576533][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 237.622479][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 237.647995][ T24] audit: type=1400 audit(2000000016.996:5310): avc: denied { read write open } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.755437][ T24] audit: type=1400 audit(2000000016.996:5311): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.789199][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.828117][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 237.840719][ T24] audit: type=1400 audit(2000000017.033:5312): avc: denied { read write } for pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.872663][ T1118] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 237.916871][ T1118] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.925935][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.971447][ T1118] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 237.975656][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 237.983571][ T24] audit: type=1400 audit(2000000017.033:5313): avc: denied { open } for pid=280 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.106510][ T364] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 238.119362][ T24] audit: type=1400 audit(2000000017.033:5314): avc: denied { ioctl } for pid=280 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.132991][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 238.179543][ T364] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 238.237609][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 238.247087][ T24] audit: type=1400 audit(2000000017.071:5315): avc: denied { read write } for pid=282 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.330148][ T24] audit: type=1400 audit(2000000017.071:5316): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.425248][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 238.458018][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 238.469545][ T24] audit: type=1400 audit(2000000017.071:5317): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.530338][ T24] audit: type=1400 audit(2000000017.108:5318): avc: denied { read write } for pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.571215][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 238.579888][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 238.735780][T15315] netlink: 'syz.0.7040': attribute type 9 has an invalid length. [ 239.213467][T15369] PM: Enabling pm_trace changes system date and time during resume. [ 239.213467][T15369] PM: Correct system time has to be restored manually after resume. [ 239.247559][T15373] x_tables: duplicate entry at hook 3 [ 239.332582][T15382] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 239.620459][T15416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.812288][T15437] xt_hashlimit: size too large, truncated to 1048576 [ 239.836314][T15437] xt_hashlimit: invalid rate [ 240.347582][T15391] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 240.400402][T15391] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 240.411051][T15391] F2FS-fs (loop2): invalid crc value [ 240.448411][T15391] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 240.529153][T15391] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 240.566596][T15391] F2FS-fs (loop2): Start checkpoint disabled! [ 240.613449][T15391] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 240.641778][T15391] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 240.715348][T15520] xt_nat: multiple ranges no longer supported [ 240.801416][T15391] F2FS-fs (loop2): switch extent_cache option is not allowed [ 241.270278][T15585] device sit0 entered promiscuous mode [ 241.291980][T15585] netlink: 'syz.1.7166': attribute type 1 has an invalid length. [ 241.698117][T15645] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 241.706407][T15645] FAT-fs (loop0): Filesystem has been set read-only [ 241.813233][T15653] EXT4-fs warning (device loop2): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 241.831574][T15667] __nla_validate_parse: 73 callbacks suppressed [ 241.831584][T15667] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7201'. [ 241.870269][T15653] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it [ 241.880399][T15653] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.7200: Corrupt directory, running e2fsck is recommended [ 242.002522][T15653] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 242.040740][T15653] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.7200: corrupted in-inode xattr [ 242.087595][T15653] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.7200: couldn't read orphan inode 15 (err -117) [ 242.138016][T15653] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.journal_dev=0x00000000000001ff,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue [ 242.341532][T15703] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 242.358265][T15703] EXT4-fs (loop0): orphan cleanup on readonly fs [ 242.391940][T15703] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 242.415930][T15703] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 242.436707][T15703] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2914: inode #16: comm syz.0.7221: corrupted xattr block 31 [ 242.459606][T15703] EXT4-fs (loop0): Remounting filesystem read-only [ 242.466273][T15703] EXT4-fs warning (device loop0): ext4_evict_inode:305: xattr delete (err -117) [ 242.511922][T15703] EXT4-fs (loop0): 1 orphan inode deleted [ 242.517727][T15703] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,errors=remount-ro, [ 242.568947][T15703] EXT4-fs error (device loop0): ext4_lookup:1834: inode #2: comm syz.0.7221: deleted inode referenced: 16 [ 242.637177][T15731] device bridge2 entered promiscuous mode [ 242.776629][T15747] x_tables: duplicate underflow at hook 3 [ 242.877203][T15756] FAT-fs (loop4): bogus logical sector size 0 [ 242.883362][T15756] FAT-fs (loop4): Can't find a valid FAT filesystem [ 242.901967][T15761] usb usb9: usbfs: process 15761 (syz.1.7248) did not claim interface 0 before use [ 242.919311][ T24] kauditd_printk_skb: 822 callbacks suppressed [ 242.919325][ T24] audit: type=1400 audit(2000000021.972:6141): avc: denied { read write } for pid=279 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.949801][ T24] audit: type=1400 audit(2000000021.972:6142): avc: denied { open } for pid=279 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.974980][ T24] audit: type=1400 audit(2000000021.991:6143): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.999608][ T24] audit: type=1400 audit(2000000021.991:6144): avc: denied { open } for pid=281 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.024020][ T24] audit: type=1400 audit(2000000022.000:6145): avc: denied { read write } for pid=15752 comm="syz.4.7244" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.069345][T15768] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 243.104656][ T24] audit: type=1400 audit(2000000022.000:6146): avc: denied { read write open } for pid=15752 comm="syz.4.7244" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.178918][ T24] audit: type=1400 audit(2000000022.000:6147): avc: denied { ioctl } for pid=15752 comm="syz.4.7244" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.238514][ T24] audit: type=1400 audit(2000000022.000:6148): avc: denied { read write } for pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.301407][ T24] audit: type=1400 audit(2000000022.000:6149): avc: denied { open } for pid=280 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.314193][T15794] device bridge5 entered promiscuous mode [ 243.364557][ T24] audit: type=1400 audit(2000000022.047:6150): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.450874][T15807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7271'. [ 243.780870][ T329] print_req_error: 82 callbacks suppressed [ 243.780888][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 243.820976][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 243.862976][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7299'. [ 243.882508][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.918043][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.956975][ T329] buffer_io_error: 36 callbacks suppressed [ 243.956987][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 243.986000][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 244.185234][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 244.203582][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 244.254170][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.288865][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.328949][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 244.352974][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 244.492676][ T301] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 244.511492][ T329] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 244.545439][T15908] netlink: 288 bytes leftover after parsing attributes in process `syz.3.7323'. [ 244.558425][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 244.585578][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 244.759261][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7329'. [ 244.782804][ T301] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 244.816577][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 245.049932][ T1113] Buffer I/O error on dev loop3p3, logical block 1008, async page read [ 245.059850][ T329] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 245.733078][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7353'. [ 245.733153][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7353'. [ 245.733210][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7353'. [ 245.733266][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7353'. [ 245.733320][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7353'. [ 245.960440][T15982] netlink: 'syz.3.7358': attribute type 12 has an invalid length. [ 247.257860][T16107] __nla_validate_parse: 63 callbacks suppressed [ 247.257869][T16107] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7418'. [ 247.523982][T16132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7431'. [ 247.988777][T16214] ================================================================== [ 247.996937][T16214] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 248.005120][T16214] Read of size 4 at addr ffff88813e678470 by task syz.3.7472/16214 [ 248.013026][T16214] [ 248.015382][T16214] CPU: 0 PID: 16214 Comm: syz.3.7472 Tainted: G W syzkaller #0 [ 248.024284][T16214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 248.034363][T16214] Call Trace: [ 248.037712][T16214] __dump_stack+0x21/0x24 [ 248.042066][T16214] dump_stack_lvl+0x1a7/0x208 [ 248.046769][T16214] ? show_regs_print_info+0x18/0x18 [ 248.051995][T16214] ? thaw_kernel_threads+0x220/0x220 [ 248.057307][T16214] print_address_description+0x7f/0x2c0 [ 248.062872][T16214] ? unaccount_page_cache_page+0x9dc/0xac0 [ 248.068729][T16214] kasan_report+0x100/0x140 [ 248.073303][T16214] ? xas_store+0xd0c/0x18d0 [ 248.077831][T16214] ? unaccount_page_cache_page+0x9dc/0xac0 [ 248.083928][T16214] __asan_report_load4_noabort+0x14/0x20 [ 248.089589][T16214] unaccount_page_cache_page+0x9dc/0xac0 [ 248.095249][T16214] __delete_from_page_cache+0xc3/0x470 [ 248.100732][T16214] ? memset+0x35/0x40 [ 248.104736][T16214] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 248.111778][T16214] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 248.117260][T16214] ? __kasan_check_read+0x11/0x20 [ 248.122301][T16214] ? workingset_eviction+0x3dc/0x940 [ 248.127602][T16214] __remove_mapping+0x581/0x6b0 [ 248.132465][T16214] shrink_page_list+0x21ee/0x4160 [ 248.137514][T16214] ? shrink_page_list+0x1f41/0x4160 [ 248.142854][T16214] ? reclaim_clean_pages_from_list+0x740/0x740 [ 248.149063][T16214] ? shrink_inactive_list+0xef0/0xef0 [ 248.154456][T16214] ? _raw_spin_lock_irq+0x95/0xf0 [ 248.159512][T16214] ? __count_memcg_events+0x89/0x210 [ 248.164825][T16214] shrink_inactive_list+0x90c/0xef0 [ 248.170048][T16214] ? __this_cpu_preempt_check+0x13/0x20 [ 248.175623][T16214] ? shrink_active_list+0xe00/0xe00 [ 248.180845][T16214] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 248.186503][T16214] ? __kasan_check_read+0x11/0x20 [ 248.191548][T16214] ? lruvec_lru_size+0x230/0x250 [ 248.196515][T16214] ? blk_start_plug+0x5a/0x170 [ 248.201383][T16214] shrink_lruvec+0x2806/0x2d70 [ 248.206192][T16214] ? set_next_entity+0xb4/0x5d0 [ 248.211067][T16214] ? finish_task_switch+0x1b7/0x5a0 [ 248.216366][T16214] ? __switch_to_asm+0x3a/0x60 [ 248.221148][T16214] ? __schedule+0xc0b/0x13e0 [ 248.225754][T16214] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 248.231320][T16214] ? __sched_text_start+0x8/0x8 [ 248.236193][T16214] ? __this_cpu_preempt_check+0x13/0x20 [ 248.241851][T16214] ? tracing_record_taskinfo+0x7c/0x220 [ 248.247421][T16214] ? preempt_schedule_common+0xbe/0xf0 [ 248.252909][T16214] ? __kasan_check_read+0x11/0x20 [ 248.257949][T16214] ? inactive_is_low+0x17a/0x2f0 [ 248.262913][T16214] ? __kasan_check_write+0x14/0x20 [ 248.268044][T16214] shrink_node+0xee0/0x2690 [ 248.272566][T16214] ? __switch_to+0x53e/0x10a0 [ 248.277249][T16214] do_try_to_free_pages+0x602/0x1590 [ 248.282562][T16214] ? try_to_free_pages+0xc20/0xc20 [ 248.287685][T16214] try_to_free_mem_cgroup_pages+0x261/0x610 [ 248.293586][T16214] ? shrink_lruvec+0x2d70/0x2d70 [ 248.298535][T16214] mem_cgroup_resize_max+0x309/0x3e0 [ 248.303843][T16214] mem_cgroup_write+0x1ed/0x230 [ 248.308707][T16214] ? mem_cgroup_reset+0x130/0x130 [ 248.313738][T16214] ? mem_cgroup_reset+0x130/0x130 [ 248.318782][T16214] cgroup_file_write+0x294/0x560 [ 248.323731][T16214] ? cgroup_seqfile_stop+0xc0/0xc0 [ 248.328853][T16214] ? mutex_lock+0x92/0xf0 [ 248.333193][T16214] ? mutex_trylock+0xb0/0xb0 [ 248.337792][T16214] ? __kasan_check_write+0x14/0x20 [ 248.342914][T16214] ? cgroup_seqfile_stop+0xc0/0xc0 [ 248.348028][T16214] kernfs_fop_write_iter+0x2bd/0x400 [ 248.353333][T16214] vfs_write+0x770/0xd70 [ 248.357596][T16214] ? kernel_write+0x3c0/0x3c0 [ 248.362414][T16214] ? mutex_trylock+0xb0/0xb0 [ 248.367020][T16214] ? __fget_files+0x2e1/0x340 [ 248.371706][T16214] ? __fdget_pos+0x2d2/0x380 [ 248.376302][T16214] ? ksys_write+0x70/0x260 [ 248.380725][T16214] ksys_write+0x14a/0x260 [ 248.385072][T16214] ? __ia32_sys_read+0x90/0x90 [ 248.389847][T16214] ? __kasan_check_read+0x11/0x20 [ 248.394873][T16214] __x64_sys_write+0x7b/0x90 [ 248.399503][T16214] do_syscall_64+0x31/0x40 [ 248.403941][T16214] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 248.409935][T16214] RIP: 0033:0x7fc0bc1b0e99 [ 248.414359][T16214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.433994][T16214] RSP: 002b:00007fc0bac0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.442419][T16214] RAX: ffffffffffffffda RBX: 00007fc0bc438fa0 RCX: 00007fc0bc1b0e99 [ 248.450451][T16214] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 248.458452][T16214] RBP: 00007fc0bc246eaf R08: 0000000000000000 R09: 0000000000000000 [ 248.466453][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.474458][T16214] R13: 00007fc0bc439038 R14: 00007fc0bc438fa0 R15: 00007ffdf7ba3988 [ 248.482443][T16214] [ 248.484777][T16214] Allocated by task 399: [ 248.489033][T16214] __kasan_slab_alloc+0xb7/0xe0 [ 248.493905][T16214] slab_post_alloc_hook+0x5d/0x2f0 [ 248.499025][T16214] kmem_cache_alloc+0x15a/0x2d0 [ 248.503881][T16214] mempool_alloc_slab+0x1d/0x30 [ 248.508745][T16214] mempool_alloc+0x128/0x490 [ 248.513352][T16214] bvec_alloc+0x13e/0x180 [ 248.517691][T16214] bio_alloc_bioset+0x32b/0x570 [ 248.522549][T16214] ext4_bio_write_page+0xd00/0x1890 [ 248.527752][T16214] mpage_submit_page+0x1a8/0x240 [ 248.532692][T16214] ext4_writepages+0x18ea/0x2f00 [ 248.537634][T16214] do_writepages+0x12e/0x280 [ 248.542226][T16214] __writeback_single_inode+0xd9/0xa30 [ 248.547699][T16214] writeback_sb_inodes+0x96d/0x1680 [ 248.552939][T16214] wb_writeback+0x4be/0xb80 [ 248.557942][T16214] wb_workfn+0xa49/0xf30 [ 248.562290][T16214] process_one_work+0x6fd/0xbc0 [ 248.567186][T16214] worker_thread+0xa8e/0x13c0 [ 248.571873][T16214] kthread+0x324/0x3b0 [ 248.575951][T16214] ret_from_fork+0x1f/0x30 [ 248.580506][T16214] [ 248.582843][T16214] The buggy address belongs to the object at ffff88813e678000 [ 248.582843][T16214] which belongs to the cache biovec-max of size 4096 [ 248.597041][T16214] The buggy address is located 1136 bytes inside of [ 248.597041][T16214] 4096-byte region [ffff88813e678000, ffff88813e679000) [ 248.610491][T16214] The buggy address belongs to the page: [ 248.616159][T16214] page:ffffea0004f99e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13e678 [ 248.626412][T16214] head:ffffea0004f99e00 order:3 compound_mapcount:0 compound_pincount:0 [ 248.634829][T16214] flags: 0x4000000000010200(slab|head) [ 248.640393][T16214] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888107d92000 [ 248.648996][T16214] raw: 0000000000000000 0000000080070007 00000001ffffffff 0000000000000000 [ 248.657581][T16214] page dumped because: kasan: bad access detected [ 248.664001][T16214] page_owner tracks the page as allocated [ 248.669750][T16214] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9, ts 182662342148, free_ts 182392912104 [ 248.689639][T16214] prep_new_page+0x176/0x190 [ 248.694265][T16214] get_page_from_freelist+0x225f/0x23f0 [ 248.699840][T16214] __alloc_pages_nodemask+0x29a/0x640 [ 248.705240][T16214] new_slab+0x84/0x3f0 [ 248.709325][T16214] ___slab_alloc+0x2f8/0x4c0 [ 248.713933][T16214] __slab_alloc+0x63/0xa0 [ 248.718271][T16214] kmem_cache_alloc+0x1a4/0x2d0 [ 248.723141][T16214] mempool_alloc_slab+0x1d/0x30 [ 248.727997][T16214] mempool_alloc+0x128/0x490 [ 248.732591][T16214] bvec_alloc+0x13e/0x180 [ 248.736924][T16214] bio_alloc_bioset+0x32b/0x570 [ 248.741783][T16214] ext4_bio_write_page+0xd00/0x1890 [ 248.746980][T16214] mpage_submit_page+0x1a8/0x240 [ 248.751919][T16214] mpage_process_page_bufs+0x6b2/0x7f0 [ 248.757389][T16214] mpage_prepare_extent_to_map+0x9be/0xcb0 [ 248.763213][T16214] ext4_writepages+0xa34/0x2f00 [ 248.768177][T16214] page last free stack trace: [ 248.772869][T16214] __free_pages_ok+0x80b/0x830 [ 248.777654][T16214] __free_pages+0xd8/0x390 [ 248.782130][T16214] __free_slab+0xcf/0x190 [ 248.786565][T16214] unfreeze_partials+0x150/0x180 [ 248.791524][T16214] put_cpu_partial+0xc1/0x180 [ 248.796210][T16214] __slab_free+0x2c9/0x3a0 [ 248.800630][T16214] ___cache_free+0x10e/0x130 [ 248.805234][T16214] qlink_free+0x50/0x90 [ 248.809397][T16214] qlist_free_all+0x5f/0xb0 [ 248.813999][T16214] kasan_quarantine_reduce+0x14a/0x160 [ 248.819473][T16214] __kasan_slab_alloc+0x2f/0xe0 [ 248.824326][T16214] slab_post_alloc_hook+0x5d/0x2f0 [ 248.829541][T16214] kmem_cache_alloc+0x15a/0x2d0 [ 248.834399][T16214] dup_task_struct+0x57/0xbd0 [ 248.839080][T16214] copy_process+0x5dd/0x3320 [ 248.843669][T16214] kernel_clone+0x233/0x950 [ 248.848169][T16214] [ 248.850498][T16214] Memory state around the buggy address: [ 248.856137][T16214] ffff88813e678300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.864212][T16214] ffff88813e678380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.872280][T16214] >ffff88813e678400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.880340][T16214] ^ [ 248.888059][T16214] ffff88813e678480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.896150][T16214] ffff88813e678500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.904211][T16214] ================================================================== [ 248.912284][T16214] Disabling lock debugging due to kernel taint [ 248.960152][ T24] kauditd_printk_skb: 326 callbacks suppressed [ 248.960166][ T24] audit: type=1400 audit(2000000027.622:6468): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 May 18 03:33:47 syzkaller kern.a[ 248.990711][ T24] audit: type=1400 audit(2000000027.650:6469): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 lert kernel: [ 248.664001][T16214] page_owner tracks the page as allocated May 18 03:33:47 syzkaller kern.alert kernel: [ 248.669750][T16214] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9, ts 182662342148, free_ts 182392912104 May 18 03:33:47 syzkaller kern.alert kernel: [ 248.768177][T16214] page last free stack trace: [ 249.056339][ T24] audit: type=1400 audit(2000000027.669:6470): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 249.768579][ T304] device bridge_slave_1 left promiscuous mode [ 249.774813][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.782484][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.790535][ T304] device veth1_macvtap left promiscuous mode [ 249.796654][ T304] device veth0_vlan left promiscuous mode [ 250.577776][ T24] audit: type=1400 audit(2000000029.128:6471): avc: denied { search } for pid=16219 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 250.612327][ T24] audit: type=1400 audit(2000000029.137:6472): avc: denied { search } for pid=16220 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 250.636996][ T24] audit: type=1400 audit(2000000029.137:6473): avc: denied { search } for pid=16220 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 250.661513][ T24] audit: type=1400 audit(2000000029.137:6474): avc: denied { search } for pid=16220 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 250.687779][ T24] audit: type=1400 audit(2000000029.137:6475): avc: denied { search } for pid=16220 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 250.710673][ T24] audit: type=1400 audit(2000000029.137:6476): avc: denied { search } for pid=16220 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 250.733836][ T24] audit: type=1400 audit(2000000029.137:6477): avc: denied { search } for pid=16220 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 251.151335][ T304] device bridge_slave_1 left promiscuous mode [ 251.157547][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.166055][ T304] device bridge_slave_0 left promiscuous mode [ 251.172439][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.182719][ T304] device bridge_slave_1 left promiscuous mode [ 251.188877][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.197474][ T304] device bridge_slave_0 left promiscuous mode [ 251.203923][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.215061][ T304] device bridge_slave_0 left promiscuous mode [ 251.221228][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.231829][ T304] device veth1_macvtap left promiscuous mode [ 254.313998][ T24] kauditd_printk_skb: 41260 callbacks suppressed [ 254.314013][ T24] audit: type=1400 audit(2000000032.636:47312): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.329769][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.342817][ T24] audit: type=1400 audit(2000000032.636:47313): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.348625][ T134] audit: audit_lost=163 audit_rate_limit=0 audit_backlog_limit=64 [ 254.370322][ T24] audit: type=1400 audit(2000000032.636:47314): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.377108][ T134] audit: backlog limit exceeded [ 254.399080][ T24] audit: type=1400 audit(2000000032.636:47315): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.404850][ T134] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.425060][ T24] audit: type=1400 audit(2000000032.636:47316): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.431097][ T134] audit: audit_lost=164 audit_rate_limit=0 audit_backlog_limit=64