last executing test programs: 3m42.322920148s ago: executing program 2 (id=611): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3m42.221194321s ago: executing program 2 (id=618): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3m42.118072893s ago: executing program 4 (id=626): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m', 0x2, 0x0) 3m42.118017233s ago: executing program 2 (id=621): dup(0xffffffffffffffff) 3m42.114444454s ago: executing program 2 (id=627): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/acpi_thermal_rel', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/acpi_thermal_rel', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/acpi_thermal_rel', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/acpi_thermal_rel', 0x800, 0x0) 3m42.114343903s ago: executing program 4 (id=628): epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 3m42.092757544s ago: executing program 2 (id=630): mount_setattr(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 3m42.092665724s ago: executing program 4 (id=631): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl', 0x800, 0x0) 3m42.050257865s ago: executing program 4 (id=633): socket$qrtr(0x2a, 0x2, 0x0) 3m42.048654215s ago: executing program 4 (id=636): socket$inet_mptcp(0x2, 0x1, 0x106) 3m42.022970306s ago: executing program 2 (id=635): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 3m41.942706878s ago: executing program 4 (id=637): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 620.302325ms ago: executing program 1 (id=8843): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) 547.084746ms ago: executing program 6 (id=8846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 546.961817ms ago: executing program 5 (id=8847): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) 507.419158ms ago: executing program 1 (id=8849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800010002000000fcffff7f000000000000000014000200010000081500000002000000ff000019"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 498.041168ms ago: executing program 3 (id=8850): pipe(&(0x7f0000000080)={0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x1ed7, 0xfefffffffffffffe, 0xffffffffffffffff}) 476.193319ms ago: executing program 0 (id=8851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 447.338969ms ago: executing program 6 (id=8852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd3200000000000000000000000000000000000001000000000000000000000000000000000000000000000000090000000000000003000000000000000000000000000000000000000000f600fcffffffffffffff0000000000000000000000000000000000000000000000000700000000000000000000000001000000000000020000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0x138}}, 0x0) 427.8066ms ago: executing program 5 (id=8853): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)=0x28) 409.83892ms ago: executing program 3 (id=8854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 409.56632ms ago: executing program 1 (id=8855): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/current\x00') read$msr(r0, 0x0, 0x0) 369.794571ms ago: executing program 0 (id=8856): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000001c0)={0x12, {{0x29, 0x0, 0x4000000, @loopback, 0x1}}}, 0x88) 347.396662ms ago: executing program 6 (id=8857): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x6cf0842e, 0x25, 0x4000007, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}}) 310.922573ms ago: executing program 3 (id=8867): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000240)={'bridge0\x00', 0x1}) 304.683233ms ago: executing program 1 (id=8868): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xc}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) 304.387353ms ago: executing program 5 (id=8858): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0x70b, 0x80000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0x6, 0x2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x200, 0x80000e, 0x0, 0xffffffff, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x8, 0xd, 0x1, 0x9, 0x6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) 282.665853ms ago: executing program 0 (id=8859): r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0xffffffffffffff76, 0x3) 277.966353ms ago: executing program 3 (id=8860): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 235.960785ms ago: executing program 6 (id=8861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'wg0\x00', {0x2, 0x480, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 235.617765ms ago: executing program 5 (id=8862): r0 = fsopen(&(0x7f0000000340)='selinuxfs\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x2, 0x3) 217.330685ms ago: executing program 0 (id=8863): timer_create(0x1, &(0x7f0000000040)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000800)=0x0) timer_gettime(r0, &(0x7f0000000840)) 200.061425ms ago: executing program 1 (id=8864): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_targets\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106) 174.858716ms ago: executing program 6 (id=8865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x405, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) 115.369887ms ago: executing program 5 (id=8866): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 115.164117ms ago: executing program 0 (id=8869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52030}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}]}}}]}, 0x48}}, 0x8000) 85.617248ms ago: executing program 1 (id=8870): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='40', 0x2) 74.532748ms ago: executing program 3 (id=8871): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 70.884689ms ago: executing program 6 (id=8872): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f00000001c0)) 59.122438ms ago: executing program 5 (id=8873): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "7695"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x30, 0xd, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000c10}, 0x4040) 2.38263ms ago: executing program 0 (id=8874): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x20, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 0s ago: executing program 3 (id=8875): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x8000002}}, 0xa) kernel console output (not intermixed with test programs): 173.479137][ T7740] loop3: p102 start 3103784704 is beyond EOD, truncated [ 173.490616][ T7740] loop3: p103 start 3103784704 is beyond EOD, truncated [ 173.504240][ T7740] loop3: p104 start 3103784704 is beyond EOD, truncated [ 173.511512][ T7743] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.518717][ T7740] loop3: p105 start 3103784704 is beyond EOD, truncated [ 173.526593][ T7740] loop3: p106 start 3103784704 is beyond EOD, truncated [ 173.534602][ T1089] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 173.544425][ T1089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.553823][ T7740] loop3: p107 start 3103784704 is beyond EOD, truncated [ 173.560846][ T7740] loop3: p108 start 3103784704 is beyond EOD, truncated [ 173.572742][ T7740] loop3: p109 start 3103784704 is beyond EOD, truncated [ 173.577856][ T1089] usb 2-1: Product: syz [ 173.581591][ T7765] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 173.585393][ T1089] usb 2-1: Manufacturer: syz [ 173.593262][ T7740] loop3: p110 start 3103784704 is beyond EOD, truncated [ 173.604455][ T7740] loop3: p111 start 3103784704 is beyond EOD, truncated [ 173.611834][ T7770] EXT4-fs (loop6): Unsupported blocksize for fs-verity [ 173.619169][ T7740] loop3: p112 start 3103784704 is beyond EOD, truncated [ 173.630350][ T7740] loop3: p113 start 3103784704 is beyond EOD, truncated [ 173.637380][ T7740] loop3: p114 start 3103784704 is beyond EOD, truncated [ 173.644451][ T7740] loop3: p115 start 3103784704 is beyond EOD, truncated [ 173.648506][ T1089] usb 2-1: SerialNumber: syz [ 173.651571][ T7740] loop3: p116 start 3103784704 is beyond EOD, truncated [ 173.663119][ T7740] loop3: p117 start 3103784704 is beyond EOD, truncated [ 173.670078][ T7740] loop3: p118 start 3103784704 is beyond EOD, truncated [ 173.677084][ T7740] loop3: p119 start 3103784704 is beyond EOD, truncated [ 173.684405][ T7740] loop3: p120 start 3103784704 is beyond EOD, truncated [ 173.691405][ T7740] loop3: p121 start 3103784704 is beyond EOD, truncated [ 173.698427][ T7740] loop3: p122 start 3103784704 is beyond EOD, truncated [ 173.705582][ T7740] loop3: p123 start 3103784704 is beyond EOD, truncated [ 173.712585][ T7740] loop3: p124 start 3103784704 is beyond EOD, truncated [ 173.719545][ T7740] loop3: p125 start 3103784704 is beyond EOD, truncated [ 173.726527][ T7740] loop3: p126 start 3103784704 is beyond EOD, truncated [ 173.733517][ T7740] loop3: p127 start 3103784704 is beyond EOD, truncated [ 173.740543][ T7740] loop3: p128 start 3103784704 is beyond EOD, truncated [ 173.750182][ T7740] loop3: p129 start 3103784704 is beyond EOD, truncated [ 173.757157][ T7740] loop3: p130 start 3103784704 is beyond EOD, truncated [ 173.768856][ T7740] loop3: p131 start 3103784704 is beyond EOD, truncated [ 173.779006][ T7740] loop3: p132 start 3103784704 is beyond EOD, truncated [ 173.796251][ T7740] loop3: p133 start 3103784704 is beyond EOD, truncated [ 173.803521][ T7740] loop3: p134 start 3103784704 is beyond EOD, truncated [ 173.810663][ T7740] loop3: p135 start 3103784704 is beyond EOD, truncated [ 173.817720][ T7740] loop3: p136 start 3103784704 is beyond EOD, truncated [ 173.824709][ T7740] loop3: p137 start 3103784704 is beyond EOD, truncated [ 173.831750][ T1083] usb 1-1: USB disconnect, device number 58 [ 173.838004][ T7740] loop3: p138 start 3103784704 is beyond EOD, truncated [ 173.845122][ T7740] loop3: p139 start 3103784704 is beyond EOD, truncated [ 173.852203][ T7740] loop3: p140 start 3103784704 is beyond EOD, truncated [ 173.861565][ T7740] loop3: p141 start 3103784704 is beyond EOD, truncated [ 173.868683][ T7740] loop3: p142 start 3103784704 is beyond EOD, truncated [ 173.875801][ T7740] loop3: p143 start 3103784704 is beyond EOD, truncated [ 173.882909][ T7740] loop3: p144 start 3103784704 is beyond EOD, truncated [ 173.889965][ T7740] loop3: p145 start 3103784704 is beyond EOD, truncated [ 173.897421][ T7740] loop3: p146 start 3103784704 is beyond EOD, truncated [ 173.904497][ T7740] loop3: p147 start 3103784704 is beyond EOD, truncated [ 173.911540][ T7740] loop3: p148 start 3103784704 is beyond EOD, truncated [ 173.918587][ T7740] loop3: p149 start 3103784704 is beyond EOD, truncated [ 173.925604][ T7740] loop3: p150 start 3103784704 is beyond EOD, truncated [ 173.932625][ T7740] loop3: p151 start 3103784704 is beyond EOD, truncated [ 173.939624][ T7740] loop3: p152 start 3103784704 is beyond EOD, truncated [ 173.946622][ T7740] loop3: p153 start 3103784704 is beyond EOD, truncated [ 173.953611][ T7740] loop3: p154 start 3103784704 is beyond EOD, truncated [ 173.960592][ T7740] loop3: p155 start 3103784704 is beyond EOD, truncated [ 173.967549][ T7740] loop3: p156 start 3103784704 is beyond EOD, truncated [ 173.974557][ T7740] loop3: p157 start 3103784704 is beyond EOD, truncated [ 173.981538][ T7740] loop3: p158 start 3103784704 is beyond EOD, truncated [ 173.988570][ T7740] loop3: p159 start 3103784704 is beyond EOD, truncated [ 173.995518][ T7740] loop3: p160 start 3103784704 is beyond EOD, truncated [ 174.002500][ T7740] loop3: p161 start 3103784704 is beyond EOD, truncated [ 174.009484][ T7740] loop3: p162 start 3103784704 is beyond EOD, truncated [ 174.016459][ T7740] loop3: p163 start 3103784704 is beyond EOD, truncated [ 174.023415][ T7740] loop3: p164 start 3103784704 is beyond EOD, truncated [ 174.030582][ T7740] loop3: p165 start 3103784704 is beyond EOD, truncated [ 174.031132][ T1089] usb 2-1: unit 5 not found! [ 174.037574][ T7740] loop3: p166 start 3103784704 is beyond EOD, truncated [ 174.049176][ T7740] loop3: p167 start 3103784704 is beyond EOD, truncated [ 174.056156][ T7740] loop3: p168 start 3103784704 is beyond EOD, truncated [ 174.063142][ T7740] loop3: p169 start 3103784704 is beyond EOD, truncated [ 174.070103][ T7740] loop3: p170 start 3103784704 is beyond EOD, truncated [ 174.077118][ T7740] loop3: p171 start 3103784704 is beyond EOD, truncated [ 174.077642][ T1089] usb 2-1: USB disconnect, device number 55 [ 174.084248][ T7740] loop3: p172 start 3103784704 is beyond EOD, truncated [ 174.097011][ T7740] loop3: p173 start 3103784704 is beyond EOD, truncated [ 174.104623][ T7740] loop3: p174 start 3103784704 is beyond EOD, truncated [ 174.116231][ T7740] loop3: p175 start 3103784704 is beyond EOD, truncated [ 174.123297][ T7740] loop3: p176 start 3103784704 is beyond EOD, truncated [ 174.130424][ T7740] loop3: p177 start 3103784704 is beyond EOD, truncated [ 174.137951][ T7740] loop3: p178 start 3103784704 is beyond EOD, truncated [ 174.144975][ T7740] loop3: p179 start 3103784704 is beyond EOD, truncated [ 174.152013][ T7740] loop3: p180 start 3103784704 is beyond EOD, truncated [ 174.159682][ T964] udevd[964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 174.171677][ T7740] loop3: p181 start 3103784704 is beyond EOD, truncated [ 174.182629][ T7740] loop3: p182 start 3103784704 is beyond EOD, truncated [ 174.189888][ T7740] loop3: p183 start 3103784704 is beyond EOD, truncated [ 174.196999][ T7740] loop3: p184 start 3103784704 is beyond EOD, truncated [ 174.203982][ T7740] loop3: p185 start 3103784704 is beyond EOD, truncated [ 174.211183][ T7740] loop3: p186 start 3103784704 is beyond EOD, truncated [ 174.218302][ T7740] loop3: p187 start 3103784704 is beyond EOD, truncated [ 174.225374][ T7740] loop3: p188 start 3103784704 is beyond EOD, truncated [ 174.232452][ T7740] loop3: p189 start 3103784704 is beyond EOD, truncated [ 174.239494][ T7740] loop3: p190 start 3103784704 is beyond EOD, truncated [ 174.246549][ T7740] loop3: p191 start 3103784704 is beyond EOD, truncated [ 174.253611][ T7740] loop3: p192 start 3103784704 is beyond EOD, truncated [ 174.260549][ T7740] loop3: p193 start 3103784704 is beyond EOD, truncated [ 174.267666][ T7740] loop3: p194 start 3103784704 is beyond EOD, truncated [ 174.274656][ T7740] loop3: p195 start 3103784704 is beyond EOD, truncated [ 174.282043][ T7740] loop3: p196 start 3103784704 is beyond EOD, truncated [ 174.289002][ T7740] loop3: p197 start 3103784704 is beyond EOD, truncated [ 174.295971][ T7740] loop3: p198 start 3103784704 is beyond EOD, truncated [ 174.302951][ T7740] loop3: p199 start 3103784704 is beyond EOD, truncated [ 174.309889][ T7740] loop3: p200 start 3103784704 is beyond EOD, truncated [ 174.316956][ T7740] loop3: p201 start 3103784704 is beyond EOD, truncated [ 174.324340][ T7740] loop3: p202 start 3103784704 is beyond EOD, truncated [ 174.333261][ T7740] loop3: p203 start 3103784704 is beyond EOD, truncated [ 174.340340][ T7740] loop3: p204 start 3103784704 is beyond EOD, truncated [ 174.347381][ T7740] loop3: p205 start 3103784704 is beyond EOD, truncated [ 174.354759][ T7740] loop3: p206 start 3103784704 is beyond EOD, truncated [ 174.361819][ T7740] loop3: p207 start 3103784704 is beyond EOD, truncated [ 174.369027][ T1070] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 174.378710][ T1068] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 174.389321][ T7740] loop3: p208 start 3103784704 is beyond EOD, truncated [ 174.396303][ T7740] loop3: p209 start 3103784704 is beyond EOD, truncated [ 174.403709][ T7740] loop3: p210 start 3103784704 is beyond EOD, truncated [ 174.411016][ T7740] loop3: p211 start 3103784704 is beyond EOD, truncated [ 174.418250][ T7740] loop3: p212 start 3103784704 is beyond EOD, truncated [ 174.425723][ T7740] loop3: p213 start 3103784704 is beyond EOD, truncated [ 174.429958][ T7788] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 174.432811][ T7740] loop3: p214 start 3103784704 is beyond EOD, truncated [ 174.454902][ T7740] loop3: p215 start 3103784704 is beyond EOD, truncated [ 174.461990][ T7740] loop3: p216 start 3103784704 is beyond EOD, truncated [ 174.469410][ T7740] loop3: p217 start 3103784704 is beyond EOD, truncated [ 174.477505][ T7740] loop3: p218 start 3103784704 is beyond EOD, truncated [ 174.485123][ T7740] loop3: p219 start 3103784704 is beyond EOD, truncated [ 174.492230][ T7740] loop3: p220 start 3103784704 is beyond EOD, truncated [ 174.499161][ T7740] loop3: p221 start 3103784704 is beyond EOD, truncated [ 174.506302][ T7740] loop3: p222 start 3103784704 is beyond EOD, truncated [ 174.513653][ T7740] loop3: p223 start 3103784704 is beyond EOD, truncated [ 174.520844][ T7740] loop3: p224 start 3103784704 is beyond EOD, truncated [ 174.527883][ T7740] loop3: p225 start 3103784704 is beyond EOD, truncated [ 174.545874][ T7740] loop3: p226 start 3103784704 is beyond EOD, truncated [ 174.558152][ T7740] loop3: p227 start 3103784704 is beyond EOD, truncated [ 174.570447][ T7740] loop3: p228 start 3103784704 is beyond EOD, truncated [ 174.578963][ T7740] loop3: p229 start 3103784704 is beyond EOD, truncated [ 174.586000][ T7740] loop3: p230 start 3103784704 is beyond EOD, truncated [ 174.593442][ T7740] loop3: p231 start 3103784704 is beyond EOD, truncated [ 174.600618][ T7740] loop3: p232 start 3103784704 is beyond EOD, truncated [ 174.607726][ T7740] loop3: p233 start 3103784704 is beyond EOD, truncated [ 174.614752][ T7740] loop3: p234 start 3103784704 is beyond EOD, truncated [ 174.621935][ T7740] loop3: p235 start 3103784704 is beyond EOD, truncated [ 174.625343][ T1070] usb 7-1: Using ep0 maxpacket: 8 [ 174.630823][ T7740] loop3: p236 start 3103784704 is beyond EOD, truncated [ 174.641669][ T7740] loop3: p237 start 3103784704 is beyond EOD, truncated [ 174.656052][ T7740] loop3: p238 start 3103784704 is beyond EOD, truncated [ 174.663221][ T7740] loop3: p239 start 3103784704 is beyond EOD, truncated [ 174.670367][ T7740] loop3: p240 start 3103784704 is beyond EOD, truncated [ 174.677797][ T7740] loop3: p241 start 3103784704 is beyond EOD, truncated [ 174.684983][ T7740] loop3: p242 start 3103784704 is beyond EOD, truncated [ 174.692169][ T7740] loop3: p243 start 3103784704 is beyond EOD, truncated [ 174.699217][ T7740] loop3: p244 start 3103784704 is beyond EOD, truncated [ 174.706783][ T7740] loop3: p245 start 3103784704 is beyond EOD, truncated [ 174.718998][ T7740] loop3: p246 start 3103784704 is beyond EOD, truncated [ 174.726340][ T7740] loop3: p247 start 3103784704 is beyond EOD, truncated [ 174.744712][ T7740] loop3: p248 start 3103784704 is beyond EOD, truncated [ 174.753429][ T7740] loop3: p249 start 3103784704 is beyond EOD, truncated [ 174.761528][ T7740] loop3: p250 start 3103784704 is beyond EOD, truncated [ 174.769428][ T7740] loop3: p251 start 3103784704 is beyond EOD, truncated [ 174.776485][ T7740] loop3: p252 start 3103784704 is beyond EOD, truncated [ 174.794723][ T7740] loop3: p253 start 3103784704 is beyond EOD, truncated [ 174.809365][ T7740] loop3: p254 start 3103784704 is beyond EOD, truncated [ 174.815967][ T1068] usb 6-1: unable to get BOS descriptor or descriptor too short [ 174.817724][ T7740] loop3: p255 start 3103784704 is beyond EOD, truncated [ 174.853863][ T1068] usb 6-1: not running at top speed; connect to a high speed hub [ 174.872839][ T1070] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 174.881012][ T1070] usb 7-1: config 4 has no interface number 0 [ 174.887148][ T1070] usb 7-1: config 4 interface 44 has no altsetting 0 [ 174.897834][ T7793] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 174.905985][ T7793] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 174.914329][ T7793] F2FS-fs (loop0): fault_type options not supported [ 174.920978][ T7793] F2FS-fs (loop0): old and new quota format mixing [ 174.930008][ T1068] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 174.984799][ T1098] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 174.993268][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.004708][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.015885][ T964] buffer_io_error: 60 callbacks suppressed [ 175.015896][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.052003][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.063062][ T1070] usb 7-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice= 6.a7 [ 175.072811][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.080961][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.090980][ T1070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.100310][ T1070] usb 7-1: Product: syz [ 175.104623][ T1068] usb 6-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 175.113849][ T1070] usb 7-1: Manufacturer: syz [ 175.118489][ T1070] usb 7-1: SerialNumber: syz [ 175.123159][ T1069] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 175.139392][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.147489][ T1068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.169656][ T1068] usb 6-1: Product: syz [ 175.177197][ T1068] usb 6-1: Manufacturer: syz [ 175.191945][ T1068] usb 6-1: SerialNumber: syz [ 175.220625][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.233832][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.254928][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.351461][ T7807] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 175.362825][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 175.374214][ T1069] usb 2-1: Using ep0 maxpacket: 16 [ 175.377547][ T7807] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 175.379855][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.401369][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.402218][ T7807] F2FS-fs (loop0): invalid crc value [ 175.410294][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.425703][ T7807] F2FS-fs (loop0): invalid crc value [ 175.425717][ T7807] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 175.442093][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.473080][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.486248][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.501456][ T1070] usb 7-1: USB disconnect, device number 56 [ 175.539323][ T1068] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 175.546082][ T1077] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 175.549941][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.554364][ T1069] usb 2-1: unable to get BOS descriptor or descriptor too short [ 175.562879][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.570371][ T1068] usb 6-1: unit 48 not found! [ 175.588196][ T1068] usb 6-1: USB disconnect, device number 51 [ 175.646913][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 175.655066][ T1069] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 191, changing to 11 [ 175.667518][ T1069] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 175.683109][ T1069] usb 2-1: config 1 interface 0 has no altsetting 0 [ 175.720526][ T1069] usb 2-1: language id specifier not provided by device, defaulting to English [ 175.787895][ T2641] udevd[2641]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 175.901628][ T7826] F2FS-fs (loop0): Corrupted extension count (16777253 + 1 > 64) [ 175.909454][ T7826] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 175.920586][ T1077] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 175.940973][ T7826] F2FS-fs (loop0): invalid crc value [ 175.949480][ T1077] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.961349][ T1077] usb 4-1: config 0 has no interface number 0 [ 175.964436][ T7826] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.003006][ T7826] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 176.010199][ T7826] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.034582][ T1069] usb 2-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 176.043707][ T1069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.052022][ T1069] usb 2-1: Product: syz [ 176.056408][ T1069] usb 2-1: SerialNumber: syz [ 176.082303][ T7804] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 176.120389][ T1077] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 176.129817][ T1077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.137827][ T1077] usb 4-1: Product: syz [ 176.142128][ T1077] usb 4-1: Manufacturer: syz [ 176.146751][ T1077] usb 4-1: SerialNumber: syz [ 176.152359][ T1077] usb 4-1: config 0 descriptor?? [ 176.187451][ T1077] uvcvideo: Found UVC 0.00 device syz (046c:14e8) [ 176.193928][ T1077] uvcvideo: No valid video chain found. [ 176.225037][ T1068] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 176.381747][ T1077] usb 4-1: USB disconnect, device number 53 [ 176.501072][ T1069] usbhid 2-1:1.0: can't add hid device: -71 [ 176.507112][ T1069] usbhid: probe of 2-1:1.0 failed with error -71 [ 176.523500][ T1069] usb 2-1: USB disconnect, device number 56 [ 176.552459][ T24] audit: type=1400 audit(2000591234.856:306): avc: denied { ioctl } for pid=7855 comm="syz.0.3690" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 176.634622][ T1068] usb 7-1: unable to get BOS descriptor or descriptor too short [ 176.662941][ T1087] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 176.672570][ T1068] usb 7-1: not running at top speed; connect to a high speed hub [ 176.844304][ T1089] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 176.884359][ T7868] xt_hashlimit: size too large, truncated to 1048576 [ 176.891206][ T7868] xt_hashlimit: max too large, truncated to 1048576 [ 176.901099][ T1068] usb 7-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 176.910401][ T1068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.918801][ T1068] usb 7-1: Product: syz [ 176.923016][ T1068] usb 7-1: Manufacturer: syz [ 176.927642][ T1068] usb 7-1: SerialNumber: syz [ 176.948250][ T24] audit: type=1400 audit(2000591235.266:307): avc: denied { mounton } for pid=7871 comm="syz.3.3698" path="/565/file0" dev="tmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 176.948267][ T7872] SELinux: duplicate or incompatible mount options [ 177.002735][ T24] audit: type=1400 audit(2000591235.329:308): avc: denied { write } for pid=7875 comm="syz.3.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 177.036171][ T24] audit: type=1400 audit(2000591235.360:309): avc: denied { write } for pid=7877 comm="syz.3.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.072449][ T1069] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 177.072672][ T1087] usb 6-1: unable to get BOS descriptor or descriptor too short [ 177.101100][ T1089] usb 1-1: Using ep0 maxpacket: 8 [ 177.153869][ T7888] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.161410][ T1087] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.173675][ T1087] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.189667][ T7888] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.3706: Allocating blocks 41-42 which overlap fs metadata [ 177.204241][ T7888] Quota error (device loop3): write_blk: dquota write failed [ 177.212028][ T7888] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 177.221435][ T7888] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.3706: Allocating blocks 41-42 which overlap fs metadata [ 177.235486][ T7888] Quota error (device loop3): write_blk: dquota write failed [ 177.242905][ T7888] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 177.252904][ T7888] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.3706: Failed to acquire dquot type 1 [ 177.264348][ T1089] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.265045][ T7888] EXT4-fs error (device loop3): mb_free_blocks:1540: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 177.286611][ T7888] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 177.295011][ T7888] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #12: comm syz.3.3706: mark_inode_dirty error [ 177.306653][ T7888] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 177.315001][ T7888] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #12: comm syz.3.3706: mark_inode_dirty error [ 177.326543][ T7888] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 177.334872][ T1069] usb 2-1: Using ep0 maxpacket: 16 [ 177.335283][ T7888] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 177.347842][ T1087] usb 6-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 177.350668][ T7888] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 177.357145][ T1087] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.365517][ T1068] usb 7-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 177.373869][ T1087] usb 6-1: Product: syz [ 177.381182][ T7888] EXT4-fs error (device loop3): ext4_truncate:4403: inode #12: comm syz.3.3706: mark_inode_dirty error [ 177.385039][ T1087] usb 6-1: Manufacturer: syz [ 177.396122][ T1068] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 177.400801][ T1087] usb 6-1: SerialNumber: syz [ 177.408275][ T7888] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3106: error 27 [ 177.420396][ T7888] EXT4-fs (loop3): 1 truncate cleaned up [ 177.426656][ T7888] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002 [ 177.431009][ T1068] usb 7-1: USB disconnect, device number 57 [ 177.520385][ T1089] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 177.529603][ T1089] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.537686][ T1089] usb 1-1: Product: syz [ 177.542433][ T1089] usb 1-1: Manufacturer: syz [ 177.547167][ T1089] usb 1-1: SerialNumber: syz [ 177.701247][ T1069] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 177.714322][ T1069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.722916][ T1069] usb 2-1: Product: syz [ 177.727192][ T1069] usb 2-1: Manufacturer: syz [ 177.732105][ T1069] usb 2-1: SerialNumber: syz [ 177.738296][ T1069] usb 2-1: config 0 descriptor?? [ 177.748865][ T1087] usb 6-1: MIDIStreaming interface descriptor not found [ 177.770164][ T1087] usb 6-1: USB disconnect, device number 52 [ 177.779796][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3715'. [ 177.816344][ T1089] usb 1-1: cannot find UAC_HEADER [ 177.821487][ T1089] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 177.829146][ T1089] usb 1-1: USB disconnect, device number 59 [ 177.835226][ T1083] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 177.973748][ T1068] usb 2-1: USB disconnect, device number 57 [ 178.053535][ T1090] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 178.072634][ T1083] usb 4-1: Using ep0 maxpacket: 8 [ 178.208701][ T7924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.226651][ T1083] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.242399][ T24] audit: type=1326 audit(2000591236.631:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.3723" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110a48be99 code=0x7ffc0000 [ 178.267493][ T24] audit: type=1326 audit(2000591236.631:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7925 comm="syz.5.3723" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110a48be99 code=0x7ffc0000 [ 178.292575][ T1090] usb 7-1: Using ep0 maxpacket: 8 [ 178.330228][ T1083] usb 4-1: config 4 has an invalid interface number: 105 but max is 0 [ 178.341980][ T1083] usb 4-1: config 4 has no interface number 0 [ 178.348137][ T1083] usb 4-1: config 4 interface 105 has no altsetting 0 [ 178.362156][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 178.444401][ T1090] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.511238][ T1083] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 178.520907][ T1090] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 178.532194][ T1083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.541005][ T1083] usb 4-1: Product: syz [ 178.545373][ T1083] usb 4-1: Manufacturer: syz [ 178.550329][ T1083] usb 4-1: SerialNumber: syz [ 178.553278][ T7953] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.3736: bad orphan inode 15 [ 178.570587][ T7951] FAT-fs (loop0): Directory bread(block 64) failed [ 178.575322][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3737'. [ 178.584758][ T7951] FAT-fs (loop0): Directory bread(block 65) failed [ 178.586746][ T7953] ext4_test_bit(bit=14, block=5) = 0 [ 178.593478][ T7951] FAT-fs (loop0): Directory bread(block 66) failed [ 178.598842][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3737'. [ 178.605146][ T7951] FAT-fs (loop0): Directory bread(block 67) failed [ 178.614182][ T7953] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,lazytime,usrquota,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 178.621550][ T7951] FAT-fs (loop0): Directory bread(block 68) failed [ 178.645579][ T7958] device ip6tnl1 entered promiscuous mode [ 178.656550][ T7953] 9pnet: p9_fd_create_unix (7953): problem connecting socket: ./file0: -111 [ 178.670903][ T7951] FAT-fs (loop0): Directory bread(block 69) failed [ 178.682770][ T7951] FAT-fs (loop0): Directory bread(block 70) failed [ 178.689336][ T7951] FAT-fs (loop0): Directory bread(block 71) failed [ 178.696239][ T1090] usb 7-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40 [ 178.702249][ T7951] FAT-fs (loop0): Directory bread(block 72) failed [ 178.707069][ T1090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.712033][ T7951] FAT-fs (loop0): Directory bread(block 73) failed [ 178.721661][ T1090] usb 7-1: Product: syz [ 178.731325][ T1090] usb 7-1: Manufacturer: syz [ 178.745437][ T7964] ip_tables: iptables: counters copy to user failed while replacing table [ 178.752759][ T1090] usb 7-1: SerialNumber: syz [ 178.844265][ T1083] ums-usbat 4-1:4.105: USB Mass Storage device detected [ 178.854000][ T7978] xt_TCPMSS: Only works on TCP SYN packets [ 178.865566][ T1083] ums-usbat 4-1:4.105: Quirks match for vid 0781 pid 0005: 1 [ 178.907347][ T1083] usb 4-1: USB disconnect, device number 54 [ 178.952510][ T7998] netlink: 'syz.5.3756': attribute type 15 has an invalid length. [ 178.960634][ T7998] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.979371][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3757'. [ 179.025380][ T1089] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 179.051695][ T1090] usb 7-1: USB disconnect, device number 58 [ 179.062721][ T8004] netlink: 'syz.5.3759': attribute type 1 has an invalid length. [ 179.092996][ T8008] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3761'. [ 179.132776][ T8014] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.149317][ T1087] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 179.253994][ T1089] usb 2-1: Using ep0 maxpacket: 16 [ 179.323531][ T8048] netlink: 2056 bytes leftover after parsing attributes in process `syz.5.3781'. [ 179.350799][ T8052] IPv6: sit1: Disabled Multicast RS [ 179.368050][ T1089] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 179.377420][ T1087] usb 1-1: Using ep0 maxpacket: 16 [ 179.386083][ T1089] usb 2-1: config 1 has no interface number 0 [ 179.398743][ T1089] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 179.418592][ T1089] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 179.440803][ T1089] usb 2-1: config 1 interface 105 has no altsetting 0 [ 179.491928][ T1087] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 179.505490][ T1087] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 179.516278][ T1087] usb 1-1: config 4 has no interface number 0 [ 179.522579][ T1087] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 179.578004][ T1087] usb 1-1: config 4 interface 51 has no altsetting 0 [ 179.596572][ T1089] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 179.612897][ T1089] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 179.625601][ T8081] netlink: 'syz.6.3798': attribute type 13 has an invalid length. [ 179.630941][ T1089] usb 2-1: Product: syz [ 179.644102][ T1089] usb 2-1: Manufacturer: syz [ 179.658701][ T1089] usb 2-1: SerialNumber: syz [ 179.691769][ T7962] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 179.705169][ T7962] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 179.758530][ T1087] usb 1-1: New USB device found, idVendor=d54f, idProduct=4199, bcdDevice= f.76 [ 179.767992][ T1087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.789179][ T1087] usb 1-1: Product: syz [ 179.793604][ T1087] usb 1-1: Manufacturer: syz [ 179.799587][ T8097] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 179.807721][ T1087] usb 1-1: SerialNumber: syz [ 179.818277][ T8097] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.3805: invalid indirect mapped block 256 (level 1) [ 179.831972][ T8097] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.3805: invalid indirect mapped block 2683928664 (level 1) [ 179.858341][ T8097] EXT4-fs (loop3): 1 truncate cleaned up [ 179.867417][ T8097] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x000000000000000c,norecovery,nodioread_nolock,min_batch_time=0x0000000000000031,usrjquota=.jqfmt=vfsv1,noauto_da_alloc,jqfmt=vfsv0,resuid=0x0000000000000000,,,errors=continue [ 179.928290][ T8103] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 179.945050][ T8103] FAT-fs (loop5): Filesystem has been set read-only [ 179.955345][ T8103] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 179.963712][ T1089] aqc111: probe of 2-1:1.105 failed with error -71 [ 179.970485][ T8103] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 179.974411][ T1089] usb 2-1: USB disconnect, device number 58 [ 179.997024][ T1380] print_req_error: 220 callbacks suppressed [ 179.997040][ T1380] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 180.028421][ T1380] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.039439][ T1380] buffer_io_error: 180 callbacks suppressed [ 180.039449][ T1380] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.071663][ T1380] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.092167][ T1380] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.101748][ T1087] cdc_eem: probe of 1-1:4.51 failed with error -22 [ 180.120469][ T1087] usb 1-1: USB disconnect, device number 60 [ 180.127318][ T1380] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.139462][ T1380] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.151609][ T1380] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.166342][ T1380] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.184633][ T1380] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.190563][ T8128] netlink: 'syz.5.3818': attribute type 1 has an invalid length. [ 180.197419][ T1380] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.221361][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 180.235002][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.246029][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.268882][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.293829][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.303201][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.314807][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.322984][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.331473][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 180.435136][ T1090] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 180.454662][ T8152] FAT-fs (loop5): Directory bread(block 64) failed [ 180.461327][ T8152] FAT-fs (loop5): Directory bread(block 65) failed [ 180.473001][ T8152] FAT-fs (loop5): Directory bread(block 66) failed [ 180.485447][ T8152] FAT-fs (loop5): Directory bread(block 67) failed [ 180.503103][ T8152] FAT-fs (loop5): Directory bread(block 68) failed [ 180.509707][ T8152] FAT-fs (loop5): Directory bread(block 69) failed [ 180.522883][ T8152] FAT-fs (loop5): Directory bread(block 70) failed [ 180.529442][ T8152] FAT-fs (loop5): Directory bread(block 71) failed [ 180.536082][ T8152] FAT-fs (loop5): Directory bread(block 72) failed [ 180.552229][ T8152] FAT-fs (loop5): Directory bread(block 73) failed [ 180.660070][ T8177] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3841'. [ 180.663551][ T1090] usb 7-1: Using ep0 maxpacket: 8 [ 180.741517][ T8193] netlink: 'syz.3.3849': attribute type 20 has an invalid length. [ 180.755377][ T8193] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.763402][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3852'. [ 180.778155][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3852'. [ 180.826987][ T8201] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 180.862334][ T8213] x_tables: unsorted entry at hook 1 [ 180.940409][ T1090] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 180.949886][ T1090] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.957967][ T1090] usb 7-1: Product: syz [ 180.962269][ T1090] usb 7-1: Manufacturer: syz [ 180.966987][ T1090] usb 7-1: SerialNumber: syz [ 181.043757][ T8242] netlink: 'syz.0.3873': attribute type 1 has an invalid length. [ 181.154135][ T8265] device vti0 entered promiscuous mode [ 181.312749][ T1090] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 181.335374][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 181.335387][ T24] audit: type=1400 audit(2000591239.875:342): avc: denied { getopt } for pid=8295 comm="syz.1.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.349427][ T1090] usb 7-1: unit 35 not found! [ 181.409684][ T1090] usb 7-1: USB disconnect, device number 59 [ 181.433500][ T24] audit: type=1326 audit(2000591239.917:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.3.3901" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7672fa7e99 code=0x7ffc0000 [ 181.474576][ T24] audit: type=1326 audit(2000591239.928:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.3.3901" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f7672fa7e99 code=0x7ffc0000 [ 181.513564][ T24] audit: type=1326 audit(2000591239.928:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8297 comm="syz.3.3901" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7672fa7e99 code=0x7ffc0000 [ 181.541087][ T8320] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 181.543557][ T24] audit: type=1400 audit(2000591240.012:346): avc: denied { write } for pid=8312 comm="syz.1.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.765297][ T24] audit: type=1326 audit(2000591240.327:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.3928" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae0eb8e99 code=0x7ffc0000 [ 181.855462][ T24] audit: type=1326 audit(2000591240.358:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.3928" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae0eb8e99 code=0x7ffc0000 [ 181.898702][ T1069] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 181.916640][ T1069] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 181.924250][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 182.015912][ T24] audit: type=1326 audit(2000591240.358:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.3928" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae0eb8e99 code=0x7ffc0000 [ 182.096488][ T24] audit: type=1326 audit(2000591240.358:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.3928" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faae0e796ce code=0x7ffc0000 [ 182.168409][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 182.187072][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 182.196667][ T24] audit: type=1326 audit(2000591240.358:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.0.3928" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faae0eb8e99 code=0x7ffc0000 [ 182.268842][ T8448] mip6: mip6_destopt_init_state: spi is not 0: 3540254720 [ 182.341004][ T8452] netlink: 'syz.0.3969': attribute type 12 has an invalid length. [ 182.515389][ T1069] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 182.597427][ T8493] __nla_validate_parse: 10 callbacks suppressed [ 182.597436][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3989'. [ 182.758767][ T1069] usb 4-1: Using ep0 maxpacket: 32 [ 182.920809][ T1069] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.036831][ T8583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.216483][ T1069] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 183.225568][ T1069] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.291890][ T1069] usb 4-1: Product: syz [ 183.303234][ T1069] usb 4-1: Manufacturer: syz [ 183.307903][ T1069] usb 4-1: SerialNumber: syz [ 183.349802][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.360674][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.370034][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.380083][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.389128][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.398611][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.415863][ T8626] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 183.437561][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.444580][ T8626] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 183.447229][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.462664][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4056'. [ 183.474971][ T8626] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,mblk_io_submit,quota,,errors=continue [ 183.487584][ T8626] ext4 filesystem being mounted at /783/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.497674][ T8631] device ip6tnl1 left promiscuous mode [ 183.530066][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 183.720863][ T1069] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 183.732022][ T8663] netlink: 'syz.1.4071': attribute type 4 has an invalid length. [ 183.768213][ T1069] usb 4-1: unit 37 not found! [ 183.773011][ T1069] usb 4-1: unit 0 not found! [ 183.845493][ T1069] usb 4-1: USB disconnect, device number 55 [ 184.191164][ T8736] device vlan0 entered promiscuous mode [ 184.200349][ T8723] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue [ 184.223583][ T8741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.248031][ T8723] EXT4-fs warning (device loop0): dx_probe:836: inode #2: comm syz.0.4100: Unimplemented hash flags: 0x0001 [ 184.286499][ T8739] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 184.295809][ T8723] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.4100: Corrupt directory, running e2fsck is recommended [ 184.357453][ T8760] netlink: 'syz.6.4114': attribute type 12 has an invalid length. [ 184.382908][ T8764] netlink: 'syz.5.4118': attribute type 10 has an invalid length. [ 184.406688][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 184.435912][ T8773] syz.0.4122 (8773): /proc/8773/oom_adj is deprecated, please use /proc/8773/oom_score_adj instead. [ 184.479966][ T8766] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.514792][ T8781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.522072][ T8781] IPv6: NLM_F_CREATE should be set when creating new route [ 184.529313][ T8781] IPv6: NLM_F_CREATE should be set when creating new route [ 184.580776][ T8793] xt_l2tp: v2 doesn't support IP mode [ 184.636225][ T1089] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 184.783627][ T8815] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 184.804706][ T8815] ext4 filesystem being mounted at /604/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.817376][ T8828] netlink: 'syz.1.4148': attribute type 15 has an invalid length. [ 184.882883][ T1089] usb 7-1: Using ep0 maxpacket: 16 [ 184.920807][ T964] print_req_error: 259 callbacks suppressed [ 184.920824][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 184.953279][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.964591][ T964] buffer_io_error: 214 callbacks suppressed [ 184.964602][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 184.978686][ T8844] netlink: 'syz.3.4156': attribute type 2 has an invalid length. [ 184.991043][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.015567][ T8848] netlink: 'syz.3.4158': attribute type 13 has an invalid length. [ 185.016063][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.033953][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.049384][ T1089] usb 7-1: unable to get BOS descriptor or descriptor too short [ 185.064073][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.072408][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.088291][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.096619][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.112613][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.127858][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 185.140060][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.154597][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.165113][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.188318][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.206874][ T964] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.227623][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.248919][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.267031][ T964] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 185.295050][ T8869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.302113][ T1089] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 185.302346][ T8869] IPv6: NLM_F_CREATE should be set when creating new route [ 185.317765][ T1089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.318604][ T8869] IPv6: NLM_F_CREATE should be set when creating new route [ 185.332314][ T8872] x_tables: duplicate underflow at hook 3 [ 185.339631][ T1089] usb 7-1: Product: syz [ 185.345293][ T1089] usb 7-1: Manufacturer: syz [ 185.355638][ T1089] usb 7-1: SerialNumber: syz [ 185.854064][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 185.901967][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 186.103947][ T24] kauditd_printk_skb: 87 callbacks suppressed [ 186.103962][ T24] audit: type=1400 audit(2000591244.883:439): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.140619][ T1089] snd-usb-audio: probe of 7-1:1.0 failed with error -2 [ 186.148022][ T24] audit: type=1400 audit(2000591244.883:440): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.177125][ T1089] usb 7-1: USB disconnect, device number 60 [ 186.222130][ T24] audit: type=1400 audit(2000591244.936:441): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.247924][ T24] audit: type=1400 audit(2000591244.967:442): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.292096][ T24] audit: type=1400 audit(2000591244.978:443): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.319949][ T24] audit: type=1400 audit(2000591244.978:444): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.344876][ T24] audit: type=1400 audit(2000591244.988:445): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.377859][ T24] audit: type=1400 audit(2000591244.999:446): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.402734][ T24] audit: type=1400 audit(2000591245.009:447): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.437071][ T24] audit: type=1400 audit(2000591245.051:448): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 186.990974][ T9155] netlink: 'syz.3.4310': attribute type 5 has an invalid length. [ 187.013787][ T1087] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.117360][ T9193] device bridge1 entered promiscuous mode [ 187.207017][ T9220] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.219520][ T9220] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.298144][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 187.317484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 187.334047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.349183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 187.362793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.381779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.403516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.422362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.433688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.442533][ T9241] __nla_validate_parse: 216 callbacks suppressed [ 187.442542][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.465056][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.475055][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.490048][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.501469][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.511069][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.520356][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.529891][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.539324][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.548604][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 187.590852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.660998][ T9290] netlink: 'syz.5.4377': attribute type 1 has an invalid length. [ 187.703371][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.876669][ T9348] device bridge2 entered promiscuous mode [ 187.954302][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.973074][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.236096][ T9445] netlink: 'syz.5.4454': attribute type 9 has an invalid length. [ 188.441102][ T9499] xt_hashlimit: max too large, truncated to 1048576 [ 188.539696][ T9526] tc_dump_action: action bad kind [ 188.611048][ T9541] xt_TCPMSS: Only works on TCP SYN packets [ 188.890752][ T9620] netlink: 'syz.5.4539': attribute type 3 has an invalid length. [ 188.990824][ T9646] IPv6: Can't replace route, no match found [ 189.045438][ T9659] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 189.221617][ T9696] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 189.331293][ T9717] netlink: 'syz.1.4588': attribute type 27 has an invalid length. [ 189.370472][ T9731] xt_TCPMSS: Only works on TCP SYN packets [ 189.477090][ T9754] syz.6.4603 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 189.636120][ T9794] netlink: 'syz.0.4623': attribute type 13 has an invalid length. [ 189.901714][ T9856] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.393033][ T9957] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 190.750720][T10047] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 190.867600][T10073] xt_hashlimit: max too large, truncated to 1048576 [ 190.874342][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.889492][ T24] kauditd_printk_skb: 697 callbacks suppressed [ 190.889507][ T24] audit: type=1400 audit(2000591249.902:1146): avc: denied { read write } for pid=10018 comm="syz.3.4734" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.938145][ T24] audit: type=1400 audit(2000591249.944:1147): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.963192][ T24] audit: type=1400 audit(2000591249.944:1148): avc: denied { module_request } for pid=10072 comm="syz.6.4761" kmod="ipt_TCPOPTSTRIP" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 191.023676][ T24] audit: type=1400 audit(2000591249.955:1149): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.060519][ T24] audit: type=1400 audit(2000591249.955:1150): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.114086][ T24] audit: type=1400 audit(2000591250.017:1151): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.167223][ T24] audit: type=1400 audit(2000591250.028:1152): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.207172][ T24] audit: type=1400 audit(2000591250.028:1153): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.257118][ T24] audit: type=1400 audit(2000591250.038:1154): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.322342][ T24] audit: type=1400 audit(2000591250.049:1155): avc: denied { read } for pid=10078 comm="syz.1.4764" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 191.432245][T10150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.447762][T10144] device macsec0 entered promiscuous mode [ 191.920367][T10249] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 192.263057][T10354] __nla_validate_parse: 58 callbacks suppressed [ 192.263067][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4898'. [ 192.458160][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4923'. [ 192.485475][T10414] IPv6: addrconf: prefix option has invalid lifetime [ 192.580801][T10442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4938'. [ 192.608576][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4942'. [ 192.617663][T10447] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4942'. [ 192.796797][T10483] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4956'. [ 192.879255][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4967'. [ 192.892030][T10505] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4967'. [ 192.904225][T10505] device ip6tnl3 entered promiscuous mode [ 193.026525][T10543] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 193.036479][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 193.059489][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4990'. [ 193.106200][T10565] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 193.416217][T10647] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 193.445425][T10647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.616478][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 193.626801][T10692] netlink: 'syz.6.5060': attribute type 3 has an invalid length. [ 193.708030][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5069'. [ 193.817270][T10742] netlink: 'syz.3.5086': attribute type 4 has an invalid length. [ 193.921172][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 194.078654][T10829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1009 sclass=netlink_audit_socket pid=10829 comm=syz.3.5127 [ 194.194303][T10861] device vlan0 entered promiscuous mode [ 194.365248][T10913] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.497736][T10952] netlink: 'syz.5.5188': attribute type 12 has an invalid length. [ 194.583238][T10977] x_tables: duplicate entry at hook 2 [ 194.609155][T10985] netlink: 'syz.5.5205': attribute type 1 has an invalid length. [ 194.622733][T10987] netlink: 'syz.1.5207': attribute type 11 has an invalid length. [ 194.630672][T10985] netlink: 'syz.5.5205': attribute type 1 has an invalid length. [ 194.700689][T11006] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.718843][T11006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.726125][T11006] IPv6: NLM_F_CREATE should be set when creating new route [ 194.928979][T11061] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 195.021331][T11090] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.104284][T11110] netlink: 'syz.5.5268': attribute type 5 has an invalid length. [ 195.148013][T11123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.268187][T11160] netlink: 'syz.6.5294': attribute type 3 has an invalid length. [ 195.290134][T11171] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 195.369868][T11189] xt_socket: unknown flags 0x40 [ 195.425763][T11200] device bridge3 entered promiscuous mode [ 195.500016][T11214] page size migration: [11214 (syz.1.5303)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 195.561266][T11227] xt_CONNSECMARK: invalid mode: 66 [ 195.638903][T11241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11241 comm=syz.5.5332 [ 195.658444][ T24] kauditd_printk_skb: 723 callbacks suppressed [ 195.658457][ T24] audit: type=1400 audit(2000591254.979:1879): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.697144][T11245] 8021q: VLANs not supported on lo [ 195.732186][ T24] audit: type=1400 audit(2000591255.010:1880): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.786699][ T24] audit: type=1400 audit(2000591255.031:1881): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.835759][ T24] audit: type=1400 audit(2000591255.031:1882): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.891820][ T24] audit: type=1400 audit(2000591255.031:1883): avc: denied { create } for pid=11246 comm="syz.1.5335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 195.934600][ T24] audit: type=1400 audit(2000591255.042:1884): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.983852][ T24] audit: type=1400 audit(2000591255.042:1885): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 196.040818][ T24] audit: type=1400 audit(2000591255.052:1886): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 196.085888][ T24] audit: type=1400 audit(2000591255.084:1887): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 196.112735][T11293] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 196.140403][T11293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.154030][ T24] audit: type=1400 audit(2000591255.094:1888): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 196.224126][T11310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.231404][T11310] IPv6: NLM_F_CREATE should be set when creating new route [ 196.261216][T11315] xt_hashlimit: overflow, try lower: 0/0 [ 196.567129][T11371] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 196.663285][T11385] IPv6: sit2: Disabled Multicast RS [ 196.740471][T11400] ipt_REJECT: ECHOREPLY no longer supported. [ 196.849790][T11423] device vlan0 entered promiscuous mode [ 196.920806][T11442] xt_limit: Overflow, try lower: 1/0 [ 196.932025][T11444] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 196.948711][T11448] netlink: 'syz.3.5435': attribute type 3 has an invalid length. [ 197.102250][T11480] netlink: 'syz.1.5451': attribute type 4 has an invalid length. [ 197.111962][T11480] netlink: 'syz.1.5451': attribute type 5 has an invalid length. [ 197.142364][T11480] __nla_validate_parse: 22 callbacks suppressed [ 197.142373][T11480] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5451'. [ 197.408359][T11537] device macsec0 entered promiscuous mode [ 197.414422][T11537] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 197.533223][T11561] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 197.612068][T11573] xt_TCPMSS: Only works on TCP SYN packets [ 197.786448][T11606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5513'. [ 197.891424][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5520'. [ 197.966703][T11636] x_tables: duplicate entry at hook 3 [ 198.083708][T11655] device batadv_slave_0 entered promiscuous mode [ 198.099222][T11654] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 198.129760][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5537'. [ 198.161123][T11665] device ipip0 entered promiscuous mode [ 198.335815][T11720] xt_TCPMSS: Only works on TCP SYN packets [ 198.431893][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5583'. [ 198.661639][T11812] validate_nla: 4 callbacks suppressed [ 198.661648][T11812] netlink: 'syz.1.5613': attribute type 13 has an invalid length. [ 198.683751][T11812] gretap0: refused to change device tx_queue_len [ 198.691275][T11812] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.831007][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5637'. [ 198.840544][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5637'. [ 198.890757][T11872] netlink: 'syz.6.5644': attribute type 2 has an invalid length. [ 198.985876][T11900] xt_ecn: cannot match TCP bits for non-tcp packets [ 199.102702][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.175837][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5684'. [ 199.221494][T11964] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5690'. [ 199.244251][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5691'. [ 199.276071][T11972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.299388][T11976] TCP: TCP_TX_DELAY enabled [ 199.383274][T11998] device bridge4 entered promiscuous mode [ 199.391866][T12001] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 199.450023][T12009] netlink: 'syz.1.5713': attribute type 4 has an invalid length. [ 199.458275][T12009] netlink: 'syz.1.5713': attribute type 30 has an invalid length. [ 199.627701][T12045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.428475][ T24] kauditd_printk_skb: 1085 callbacks suppressed [ 200.428490][ T24] audit: type=1400 audit(2000591259.986:2974): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.486104][ T24] audit: type=1400 audit(2000591260.007:2975): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.545095][T12253] xt_l2tp: v2 doesn't support IP mode [ 200.556273][ T24] audit: type=1400 audit(2000591260.007:2976): avc: denied { write } for pid=12233 comm="syz.6.5824" name="igmp" dev="proc" ino=4026532738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 200.583280][T12255] x_tables: unsorted entry at hook 2 [ 200.617823][ T24] audit: type=1400 audit(2000591260.028:2977): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.661062][T12272] device vlan1 entered promiscuous mode [ 200.676934][T12276] IPv6: NLM_F_REPLACE set, but no existing node found! [ 200.680889][ T24] audit: type=1400 audit(2000591260.039:2978): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.721416][ T24] audit: type=1400 audit(2000591260.049:2979): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.773390][ T24] audit: type=1400 audit(2000591260.060:2980): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.846287][ T24] audit: type=1400 audit(2000591260.070:2981): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.887708][ T24] audit: type=1400 audit(2000591260.081:2982): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.912815][ T24] audit: type=1400 audit(2000591260.081:2983): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 201.174624][T12367] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 201.293558][T12393] netlink: 'syz.5.5900': attribute type 3 has an invalid length. [ 201.698690][T12508] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.717870][T12508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.725141][T12508] IPv6: NLM_F_CREATE should be set when creating new route [ 201.732473][T12508] IPv6: NLM_F_CREATE should be set when creating new route [ 201.893562][T12564] netlink: 'syz.6.5986': attribute type 9 has an invalid length. [ 201.939536][T12577] xt_TCPMSS: Only works on TCP SYN packets [ 201.947664][T12581] __nla_validate_parse: 7 callbacks suppressed [ 201.947675][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5994'. [ 201.988001][T12589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5997'. [ 202.008142][T12594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.203574][T12648] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 202.250907][T12659] mmap: syz.1.6032 (12659): VmData 40828928 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 202.264615][T12658] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6033'. [ 202.299636][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6038'. [ 202.341023][T12669] netlink: 15 bytes leftover after parsing attributes in process `syz.6.6038'. [ 202.460615][T12705] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6054'. [ 202.481569][T12705] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6054'. [ 202.491001][T12705] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6054'. [ 202.501028][T12705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.756770][T12783] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6093'. [ 202.945333][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6121'. [ 203.328518][T12936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.488151][T12974] bridge0: port 3(veth0_to_bridge) entered blocking state [ 203.501569][T12974] bridge0: port 3(veth0_to_bridge) entered disabled state [ 203.519365][T12974] device veth0_to_bridge entered promiscuous mode [ 203.529914][T12974] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.562386][T12974] bridge0: port 3(veth0_to_bridge) entered blocking state [ 203.569579][T12974] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 203.628286][T12994] Zero length message leads to an empty skb [ 203.651430][T12997] netlink: 'syz.3.6200': attribute type 5 has an invalid length. [ 203.832802][T13029] device ipip0 entered promiscuous mode [ 204.173558][T13103] netlink: 'syz.1.6247': attribute type 4 has an invalid length. [ 204.183218][T13103] netlink: 'syz.1.6247': attribute type 6 has an invalid length. [ 204.193024][T13103] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.229357][T13102] bridge0: port 3(veth0_to_bridge) entered disabled state [ 204.236690][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.243915][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.400234][T13135] xt_ecn: cannot match TCP bits for non-tcp packets [ 204.762743][T13209] netlink: 'syz.0.6303': attribute type 3 has an invalid length. [ 204.850955][T13227] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 205.054703][T13275] netlink: 'syz.3.6334': attribute type 16 has an invalid length. [ 205.317153][T13328] xt_l2tp: v2 tid > 0xffff: 262144 [ 205.452862][T13355] xt_bpf: check failed: parse error [ 205.476238][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 205.487481][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.497780][ T24] kauditd_printk_skb: 668 callbacks suppressed [ 205.497794][ T24] audit: type=1400 audit(2000591265.002:3652): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.519663][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 205.569191][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.571227][ T24] audit: type=1400 audit(2000591265.040:3653): avc: denied { read } for pid=13360 comm="syz.0.6379" dev="nsfs" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 205.595363][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.624928][ T24] audit: type=1400 audit(2000591265.058:3654): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.642352][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.649537][ T24] audit: type=1400 audit(2000591265.058:3655): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.675129][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.694077][ T24] audit: type=1400 audit(2000591265.068:3656): avc: denied { prog_load } for pid=13364 comm="syz.6.6382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 205.706463][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.713583][ T24] audit: type=1400 audit(2000591265.096:3657): avc: denied { read write } for pid=13364 comm="syz.6.6382" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 205.744856][ T24] audit: type=1400 audit(2000591265.105:3658): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.771494][ T24] audit: type=1400 audit(2000591265.114:3659): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.808705][ T24] audit: type=1400 audit(2000591265.283:3660): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.843229][ T24] audit: type=1400 audit(2000591265.320:3661): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.976105][T13390] netlink: 'syz.0.6394': attribute type 4 has an invalid length. [ 206.219125][T13429] netlink: 'syz.0.6412': attribute type 29 has an invalid length. [ 206.244300][T13429] netlink: 'syz.0.6412': attribute type 29 has an invalid length. [ 206.317029][T13441] IPv6: sit1: Disabled Multicast RS [ 206.401443][T13455] device vti0 entered promiscuous mode [ 206.420486][T13461] xt_TCPMSS: Only works on TCP SYN packets [ 206.645593][T13501] device syz_tun entered promiscuous mode [ 206.685020][T13501] syz_tun: refused to change device tx_queue_len [ 206.696573][T13501] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 206.713605][T13511] device vlan0 entered promiscuous mode [ 207.091867][T13589] netlink: 'syz.1.6492': attribute type 6 has an invalid length. [ 207.230402][T13616] __nla_validate_parse: 19 callbacks suppressed [ 207.230413][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6507'. [ 207.270312][T13618] device bridge6 entered promiscuous mode [ 207.292080][T13621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6509'. [ 207.308518][T13621] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6509'. [ 207.328422][T13621] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6509'. [ 207.397351][T13641] xt_l2tp: invalid flags combination: 8 [ 207.826207][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6561'. [ 207.894913][T13740] netlink: 'syz.6.6567': attribute type 24 has an invalid length. [ 207.948094][T13752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6574'. [ 207.966843][T13752] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6574'. [ 208.632530][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6610'. [ 208.693019][T13831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.786600][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6617'. [ 208.920327][T13857] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.930709][T13859] device gre2 entered promiscuous mode [ 209.060969][T13883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6638'. [ 209.493065][T13969] x_tables: duplicate underflow at hook 2 [ 209.596078][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 209.620472][T13992] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.859978][T14037] device vlan0 left promiscuous mode [ 209.866183][T14037] device vlan1 left promiscuous mode [ 209.875798][T14037] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 209.883371][T14037] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 209.894434][T14037] device bridge2 left promiscuous mode [ 209.902177][T14037] device ip6tnl3 left promiscuous mode [ 209.911281][T14037] device bridge3 left promiscuous mode [ 209.926170][T14037] device ipip0 left promiscuous mode [ 209.939525][T14037] device vti0 left promiscuous mode [ 209.946566][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.956332][ T642] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.963442][ T642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.971615][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.984587][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): pimreg: link becomes ready [ 209.993902][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 210.001761][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 210.010143][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 210.020570][T14045] ip6gretap0: refused to change device tx_queue_len [ 210.130580][T14063] validate_nla: 1 callbacks suppressed [ 210.130589][T14063] netlink: 'syz.3.6727': attribute type 2 has an invalid length. [ 210.145956][T14063] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 210.342432][T14100] device tunl0 entered promiscuous mode [ 210.354013][T14100] netlink: 'syz.3.6746': attribute type 4 has an invalid length. [ 210.857813][ T24] kauditd_printk_skb: 1078 callbacks suppressed [ 210.857828][ T24] audit: type=1400 audit(2000591270.016:4740): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.890913][ T24] audit: type=1400 audit(2000591270.016:4741): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.951252][ T24] audit: type=1400 audit(2000591270.016:4742): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 210.981038][ T24] audit: type=1400 audit(2000591270.072:4743): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.071616][ T24] audit: type=1400 audit(2000591270.072:4744): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.149872][ T24] audit: type=1400 audit(2000591270.100:4745): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.214592][ T24] audit: type=1400 audit(2000591270.128:4746): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.255338][ T24] audit: type=1400 audit(2000591270.138:4747): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.280191][ T24] audit: type=1400 audit(2000591270.147:4748): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.334427][ T24] audit: type=1400 audit(2000591270.156:4749): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 211.466203][T14259] netlink: 'syz.1.6825': attribute type 46 has an invalid length. [ 211.582267][T14285] IPv6: NLM_F_REPLACE set, but no existing node found! [ 211.703735][T14308] device sit0 entered promiscuous mode [ 211.713124][T14308] netlink: 'syz.1.6848': attribute type 1 has an invalid length. [ 211.932182][T14353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 211.958885][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 212.054908][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 212.164743][T14402] netlink: 'syz.5.6894': attribute type 4 has an invalid length. [ 212.660164][T14500] __nla_validate_parse: 148 callbacks suppressed [ 212.660176][T14500] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6944'. [ 212.900158][T14549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6967'. [ 212.973903][T14563] netlink: 'syz.0.6974': attribute type 4 has an invalid length. [ 213.004640][T14569] device macsec0 left promiscuous mode [ 213.059711][T14579] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.071513][T14581] netlink: 'syz.6.6983': attribute type 7 has an invalid length. [ 213.086839][T14581] netlink: 'syz.6.6983': attribute type 8 has an invalid length. [ 213.154843][T14594] binfmt_misc: register: failed to install interpreter file ./file0 [ 213.491002][T14666] device veth8 entered promiscuous mode [ 213.637702][T14692] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.763906][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7049'. [ 214.145022][T14764] IPv6: Can't replace route, no match found [ 214.317142][T14781] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 214.536305][T14803] kernel profiling enabled (shift: 16) [ 215.324114][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7137'. [ 215.358002][T14892] netlink: 'syz.6.7135': attribute type 11 has an invalid length. [ 215.402402][T14896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.231160][ T24] kauditd_printk_skb: 479 callbacks suppressed [ 216.231196][ T24] audit: type=1400 audit(2000591275.039:5229): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.274684][ T24] audit: type=1400 audit(2000591275.039:5230): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.327565][ T24] audit: type=1400 audit(2000591275.123:5231): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.363379][ T24] audit: type=1400 audit(2000591275.161:5232): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.422337][ T24] audit: type=1400 audit(2000591275.217:5233): avc: denied { read write } for pid=14978 comm="syz.5.7180" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.463728][ T24] audit: type=1400 audit(2000591275.254:5234): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.523230][ T24] audit: type=1400 audit(2000591275.292:5235): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.564698][T14983] device gretap2 entered promiscuous mode [ 216.599326][ T24] audit: type=1400 audit(2000591275.385:5236): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.649972][ T24] audit: type=1400 audit(2000591275.413:5237): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.694099][T14986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7183'. [ 216.697727][ T24] audit: type=1400 audit(2000591275.479:5238): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 216.726095][T14986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7183'. [ 216.796082][T14992] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.122253][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.283202][T15037] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7207'. [ 217.323241][T15041] device tunl0 left promiscuous mode [ 217.342178][T15041] device syz_tun left promiscuous mode [ 217.343955][T15043] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 217.373468][T15041] device vlan0 left promiscuous mode [ 217.395156][T15041] device macsec0 left promiscuous mode [ 217.476112][T15052] x_tables: unsorted underflow at hook 3 [ 218.160745][T15124] xt_TPROXY: Can be used only with -p tcp or -p udp [ 218.870210][T15203] netlink: 'syz.1.7291': attribute type 10 has an invalid length. [ 218.878266][T15203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7291'. [ 218.923634][T15207] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 219.158764][T15231] bridge0: port 3(dummy0) entered blocking state [ 219.173425][T15231] bridge0: port 3(dummy0) entered disabled state [ 219.196654][T15231] device dummy0 entered promiscuous mode [ 219.368730][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7312'. [ 219.568156][T15271] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7325'. [ 219.588274][T15271] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7325'. [ 219.613171][T15271] netlink: 38 bytes leftover after parsing attributes in process `syz.6.7325'. [ 219.929973][T15303] x_tables: unsorted underflow at hook 4 [ 220.182466][T15323] netlink: 'syz.3.7350': attribute type 46 has an invalid length. [ 220.206018][T15323] netlink: 'syz.3.7350': attribute type 28 has an invalid length. [ 220.217020][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7350'. [ 220.540341][T15356] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 220.728218][T15378] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 220.898854][T15396] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7387'. [ 220.963846][T15401] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.7388'. [ 221.347440][T15436] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 221.588603][ T24] kauditd_printk_skb: 279 callbacks suppressed [ 221.588618][ T24] audit: type=1400 audit(2000000003.554:5518): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.648253][ T24] audit: type=1400 audit(2000000003.554:5519): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.710066][ T24] audit: type=1400 audit(2000000003.657:5520): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.734349][T15469] device vlan0 entered promiscuous mode [ 221.741459][ T24] audit: type=1400 audit(2000000003.666:5521): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.765785][ T24] audit: type=1400 audit(2000000003.666:5522): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.833433][ T24] audit: type=1400 audit(2000000003.760:5523): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.901352][ T24] audit: type=1400 audit(2000000003.769:5524): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 221.977215][ T24] audit: type=1400 audit(2000000003.825:5525): avc: denied { create } for pid=15478 comm="syz.3.7429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 222.042986][ T24] audit: type=1400 audit(2000000003.825:5526): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.109246][ T24] audit: type=1400 audit(2000000003.835:5527): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 222.164339][T15503] xt_SECMARK: invalid security context 'unconfined' [ 222.287536][T15515] ip6t_REJECT: ECHOREPLY is not supported [ 222.658089][T15556] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 222.698555][T15560] xt_TCPMSS: Only works on TCP SYN packets [ 222.849404][T15574] xt_l2tp: missing protocol rule (udp|l2tpip) [ 222.857862][T15577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7473'. [ 222.884718][T15578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7477'. [ 223.015526][T15590] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 223.329506][T15615] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.513724][T15631] xt_limit: Overflow, try lower: 2/2147483648 [ 223.590571][T15639] xt_CONNSECMARK: invalid mode: 254 [ 223.771980][T15658] PM: Enabling pm_trace changes system date and time during resume. [ 223.771980][T15658] PM: Correct system time has to be restored manually after resume. [ 223.830205][T15662] x_tables: duplicate underflow at hook 4 [ 223.925612][T15671] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 224.247782][T15699] xt_TCPMSS: Only works on TCP SYN packets [ 224.340236][T15709] __nla_validate_parse: 142 callbacks suppressed [ 224.340247][T15709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7540'. [ 224.377093][T15709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7540'. [ 224.563999][T15730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7550'. [ 224.701050][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7557'. [ 224.841291][ T1077] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 225.117737][T15783] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7577'. [ 225.235224][T15796] xt_l2tp: missing protocol rule (udp|l2tpip) [ 225.759482][T15850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.626598][T15948] netlink: 'syz.5.7658': attribute type 29 has an invalid length. [ 226.649461][T15950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7660'. [ 226.943472][ T24] kauditd_printk_skb: 311 callbacks suppressed [ 226.943486][ T24] audit: type=1400 audit(2000000008.568:5839): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.006936][T15984] x_tables: unsorted underflow at hook 4 [ 227.033105][ T24] audit: type=1400 audit(2000000008.615:5840): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.115186][ T24] audit: type=1400 audit(2000000008.643:5841): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.158927][T15996] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 227.182258][ T24] audit: type=1400 audit(2000000008.643:5842): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.255522][ T24] audit: type=1326 audit(2000000008.689:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.5.7678" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110a48be99 code=0x7ffc0000 [ 227.268536][T16003] netlink: 'syz.6.7686': attribute type 4 has an invalid length. [ 227.311782][T16003] netlink: 'syz.6.7686': attribute type 5 has an invalid length. [ 227.319569][T16003] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.7686'. [ 227.353160][ T24] audit: type=1326 audit(2000000008.689:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.5.7678" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f110a48be99 code=0x7ffc0000 [ 227.402588][ T24] audit: type=1326 audit(2000000008.689:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15986 comm="syz.5.7678" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110a48be99 code=0x7ffc0000 [ 227.431508][T16013] netlink: 'syz.3.7692': attribute type 21 has an invalid length. [ 227.461771][ T24] audit: type=1400 audit(2000000008.699:5846): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.524632][ T24] audit: type=1400 audit(2000000008.708:5847): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.585392][ T24] audit: type=1400 audit(2000000008.717:5848): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 227.659784][T16028] netlink: 'syz.6.7697': attribute type 3 has an invalid length. [ 227.674691][T16028] netlink: 'syz.6.7697': attribute type 3 has an invalid length. [ 227.687872][T16034] netlink: 'syz.3.7702': attribute type 30 has an invalid length. [ 227.958421][T16062] IPv6: sit3: Disabled Multicast RS [ 227.965412][T16059] netlink: 'syz.6.7714': attribute type 46 has an invalid length. [ 227.984000][T16059] netlink: 'syz.6.7714': attribute type 28 has an invalid length. [ 228.003589][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7714'. [ 228.204281][T16080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7724'. [ 228.358795][T16094] netlink: 'syz.5.7728': attribute type 1 has an invalid length. [ 228.486063][T16110] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.7740'. [ 228.543141][T16116] xt_policy: output policy not valid in PREROUTING and INPUT [ 228.756263][T16136] device bridge6 entered promiscuous mode [ 229.095772][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 229.382626][T16209] 8021q: VLANs not supported on wg2 [ 229.697161][T16238] __nla_validate_parse: 2 callbacks suppressed [ 229.697171][T16238] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7804'. [ 229.862160][T16256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.089972][T16277] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7822'. [ 230.109922][T16277] netlink: 27 bytes leftover after parsing attributes in process `syz.6.7822'. [ 230.195618][T16287] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 230.598203][T16326] xt_l2tp: missing protocol rule (udp|l2tpip) [ 230.754794][T16341] xt_limit: Overflow, try lower: 2/2147483648 [ 231.031525][T16367] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7866'. [ 231.246707][T16385] netlink: 45 bytes leftover after parsing attributes in process `syz.5.7873'. [ 231.337151][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7883'. [ 231.668938][T16432] device sit0 entered promiscuous mode [ 231.690577][T16432] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7898'. [ 232.092039][ T1084] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.225304][T16487] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 232.259677][T16489] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 232.322595][ T24] kauditd_printk_skb: 303 callbacks suppressed [ 232.322628][ T24] audit: type=1400 audit(2000000013.600:6152): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.383251][ T24] audit: type=1400 audit(2000000013.638:6153): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.453454][ T24] audit: type=1400 audit(2000000013.656:6154): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.496157][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7930'. [ 232.510105][ T24] audit: type=1400 audit(2000000013.694:6155): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.551019][ T24] audit: type=1400 audit(2000000013.731:6156): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.604144][ T24] audit: type=1400 audit(2000000013.778:6157): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.655837][ T24] audit: type=1400 audit(2000000013.815:6158): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.712483][ T24] audit: type=1400 audit(2000000013.853:6159): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.748360][ T24] audit: type=1400 audit(2000000013.862:6160): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.784096][ T24] audit: type=1400 audit(2000000013.900:6161): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 232.948333][T16532] validate_nla: 1 callbacks suppressed [ 232.948343][T16532] netlink: 'syz.3.7955': attribute type 2 has an invalid length. [ 232.987982][T16535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.068167][T16543] device bridge_slave_1 left promiscuous mode [ 233.085015][T16543] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.095573][T16543] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 233.874773][T16633] xt_socket: unknown flags 0x58 [ 234.180621][T16666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8013'. [ 234.310637][T16677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8021'. [ 234.389840][T16685] netlink: 'syz.3.8025': attribute type 12 has an invalid length. [ 234.773083][T16727] xt_l2tp: unknown flags: 17 [ 234.819008][T16734] netlink: 'syz.1.8048': attribute type 4 has an invalid length. [ 234.839330][T16734] netlink: 'syz.1.8048': attribute type 5 has an invalid length. [ 234.941085][T16746] bridge0: port 1(bridge_slave_0) entered listening state [ 234.982231][T16746] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.094531][T16761] netlink: 'syz.3.8062': attribute type 3 has an invalid length. [ 235.114806][T16761] netlink: 'syz.3.8062': attribute type 3 has an invalid length. [ 235.138461][T16767] xt_SECMARK: invalid mode: 2 [ 235.422532][T16796] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 235.518536][T16805] netlink: 'syz.0.8083': attribute type 30 has an invalid length. [ 235.664726][T16820] xt_hashlimit: max too large, truncated to 1048576 [ 235.690559][T16820] xt_hashlimit: overflow, try lower: 137438953472/8 [ 235.828473][T16834] netlink: 'syz.0.8097': attribute type 1 has an invalid length. [ 235.958009][T16847] IPv6: sit1: Disabled Multicast RS [ 235.993286][T16854] device bridge8 entered promiscuous mode [ 236.023269][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.107015][T16864] netlink: 'syz.1.8123': attribute type 3 has an invalid length. [ 236.381960][T16888] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 236.416377][T16896] __nla_validate_parse: 2 callbacks suppressed [ 236.416387][T16896] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.8128'. [ 236.664167][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8139'. [ 236.830400][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8149'. [ 236.923279][T16946] 8021q: VLANs not supported on wg2 [ 237.132171][T16970] netlink: 'syz.5.8166': attribute type 12 has an invalid length. [ 237.211554][T16976] xt_policy: too many policy elements [ 237.309217][T16986] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8174'. [ 237.648431][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 237.677066][ T24] kauditd_printk_skb: 309 callbacks suppressed [ 237.677080][ T24] audit: type=1400 audit(2000000018.605:6471): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.756175][ T24] audit: type=1400 audit(2000000018.642:6472): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.836334][ T24] audit: type=1400 audit(2000000018.661:6473): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.903555][ T24] audit: type=1400 audit(2000000018.661:6474): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.964699][ T24] audit: type=1400 audit(2000000018.679:6475): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.998557][ T24] audit: type=1400 audit(2000000018.726:6476): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 238.031688][ T24] audit: type=1400 audit(2000000018.754:6477): avc: denied { execute } for pid=17032 comm="syz.6.8197" dev="tmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 238.098375][T17057] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 238.112809][ T24] audit: type=1400 audit(2000000018.754:6478): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 238.181687][ T24] audit: type=1400 audit(2000000018.782:6479): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 238.236220][ T24] audit: type=1400 audit(2000000018.801:6480): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 238.371118][T17077] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 238.512332][T17089] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8223'. [ 238.547270][T17089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.715771][T17112] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8235'. [ 238.749886][T17112] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8235'. [ 239.175765][T17162] validate_nla: 2 callbacks suppressed [ 239.175774][T17162] netlink: 'syz.5.8262': attribute type 3 has an invalid length. [ 239.303969][T17178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8268'. [ 239.355868][ T1090] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 239.708116][T17220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8290'. [ 239.796908][T17229] IPv6: sit4: Disabled Multicast RS [ 240.536498][T17308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8332'. [ 240.743855][T17331] device bridge8 entered promiscuous mode [ 240.832409][T17338] x_tables: duplicate underflow at hook 2 [ 241.036013][T17361] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.043110][T17361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.919867][T17451] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.947502][T17456] xt_socket: unknown flags 0x58 [ 241.973428][T17451] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.006962][T17451] device vlan0 left promiscuous mode [ 242.055821][T17451] device veth8 left promiscuous mode [ 242.075282][T17451] device bridge6 left promiscuous mode [ 242.081234][T17451] device bridge8 left promiscuous mode [ 242.408010][T17496] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.744807][T17536] netlink: 'syz.1.8445': attribute type 3 has an invalid length. [ 242.760960][T17536] netlink: 'syz.1.8445': attribute type 3 has an invalid length. [ 242.873988][T17546] xt_hashlimit: invalid interval [ 243.027479][ T24] kauditd_printk_skb: 315 callbacks suppressed [ 243.027493][ T24] audit: type=1400 audit(2000000023.618:6796): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.120509][ T24] audit: type=1400 audit(2000000023.646:6797): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.196651][ T24] audit: type=1400 audit(2000000023.656:6798): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.279492][ T24] audit: type=1400 audit(2000000023.665:6799): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.326328][ T24] audit: type=1400 audit(2000000023.693:6800): avc: denied { module_request } for pid=17568 comm="syz.3.8465" kmod="tcp_cu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 243.349135][ T24] audit: type=1400 audit(2000000023.731:6801): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.378400][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 243.403358][ T24] audit: type=1400 audit(2000000023.759:6802): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.460674][ T24] audit: type=1400 audit(2000000023.759:6803): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.528502][ T24] audit: type=1400 audit(2000000023.768:6804): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.581603][ T24] audit: type=1400 audit(2000000023.796:6805): avc: denied { module_request } for pid=17576 comm="syz.1.8467" kmod=6E65746465762D61D7F529AA scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 243.835652][T17631] x_tables: duplicate underflow at hook 3 [ 244.259697][T17676] xt_CT: No such helper "netbios-ns" [ 244.490212][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.490218][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 244.536307][T17703] __nla_validate_parse: 67 callbacks suppressed [ 244.536316][T17703] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8530'. [ 244.669063][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8536'. [ 244.694524][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8536'. [ 244.717021][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8536'. [ 244.945144][T17739] netlink: 'syz.5.8546': attribute type 12 has an invalid length. [ 245.239102][T17766] PM: Enabling pm_trace changes system date and time during resume. [ 245.239102][T17766] PM: Correct system time has to be restored manually after resume. [ 245.975591][T17841] netlink: 'syz.3.8595': attribute type 30 has an invalid length. [ 245.985311][T17839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8596'. [ 245.998011][T17839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.071389][T17844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.925971][T17930] netlink: 'syz.0.8638': attribute type 3 has an invalid length. [ 246.973350][T17934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8643'. [ 246.995198][T17934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8643'. [ 247.094213][T17942] IPv6: sit3: Disabled Multicast RS [ 247.157574][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8653'. [ 247.536096][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8666'. [ 247.824569][T18017] device sit0 left promiscuous mode [ 247.841424][T18017] device vlan0 left promiscuous mode [ 247.860106][T18017] device bridge4 left promiscuous mode [ 247.865883][T18017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 247.881437][T18017] device bridge6 left promiscuous mode [ 247.887604][T18017] device gretap2 left promiscuous mode [ 247.890653][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 247.894595][T18017] device bridge8 left promiscuous mode [ 248.141710][T18044] device vlan0 entered promiscuous mode [ 248.150901][T18044] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 248.264508][T18054] netlink: 5412 bytes leftover after parsing attributes in process `syz.1.8711'. [ 248.361584][T18063] netlink: 'syz.5.8705': attribute type 5 has an invalid length. [ 248.410017][ T24] kauditd_printk_skb: 284 callbacks suppressed [ 248.410031][ T24] audit: type=1400 audit(2000000028.651:7090): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.415402][T18069] xt_ecn: cannot match TCP bits for non-tcp packets [ 248.442551][ T24] audit: type=1400 audit(2000000028.679:7091): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.508748][ T24] audit: type=1400 audit(2000000028.707:7092): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.561135][ T24] audit: type=1400 audit(2000000028.707:7093): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.595417][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 248.624503][ T24] audit: type=1400 audit(2000000028.819:7094): avc: denied { read write } for pid=1098 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.676238][ T24] audit: type=1400 audit(2000000028.819:7095): avc: denied { read write } for pid=1097 comm="syz-executor" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.727593][ T24] audit: type=1400 audit(2000000028.847:7096): avc: denied { read write } for pid=1100 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.789466][ T24] audit: type=1400 audit(2000000028.885:7097): avc: denied { read write } for pid=1101 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.856562][T18094] device bridge5 entered promiscuous mode [ 248.862911][ T24] audit: type=1400 audit(2000000028.894:7098): avc: denied { read write } for pid=1099 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 248.916137][ T24] audit: type=1326 audit(2000000028.922:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18082 comm="syz.3.8714" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7672fa7e99 code=0x7ffc0000 [ 248.999461][T18103] device bridge4 entered promiscuous mode [ 249.316678][T18135] xt_TCPMSS: Only works on TCP SYN packets [ 249.533393][T18160] device ip6erspan0 entered promiscuous mode [ 250.190551][T18232] __nla_validate_parse: 2 callbacks suppressed [ 250.190562][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8788'. [ 250.202542][T18231] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.353835][T18247] xt_hashlimit: invalid interval [ 250.710955][T18286] netlink: 'syz.6.8818': attribute type 9 has an invalid length. [ 250.744198][T18286] netlink: 'syz.6.8818': attribute type 7 has an invalid length. [ 250.756312][T18286] netlink: 'syz.6.8818': attribute type 8 has an invalid length. [ 251.047477][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8833'. [ 251.753248][T18391] xt_CT: No such helper "netbios-ns" [ 251.847272][T18402] netlink: 'syz.5.8873': attribute type 7 has an invalid length. [ 251.857836][T18401] ================================================================== [ 251.865953][T18401] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 251.874231][T18401] Read of size 4 at addr ffff88811e6dc470 by task syz.1.8870/18401 [ 251.882127][T18401] [ 251.884506][T18401] CPU: 1 PID: 18401 Comm: syz.1.8870 Tainted: G W syzkaller #0 [ 251.893370][T18401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 251.903451][T18401] Call Trace: [ 251.906773][T18401] __dump_stack+0x21/0x24 [ 251.911122][T18401] dump_stack_lvl+0x1a7/0x208 [ 251.912633][T18402] netlink: 'syz.5.8873': attribute type 8 has an invalid length. [ 251.915876][T18401] ? show_regs_print_info+0x18/0x18 [ 251.928759][T18401] ? thaw_kernel_threads+0x220/0x220 [ 251.934080][T18401] print_address_description+0x7f/0x2c0 [ 251.939653][T18401] ? unaccount_page_cache_page+0x9dc/0xac0 [ 251.945507][T18401] kasan_report+0x100/0x140 [ 251.950058][T18401] ? xas_store+0xd0c/0x18d0 [ 251.954588][T18401] ? unaccount_page_cache_page+0x9dc/0xac0 [ 251.955380][T18402] netlink: 'syz.5.8873': attribute type 13 has an invalid length. [ 251.960413][T18401] __asan_report_load4_noabort+0x14/0x20 [ 251.960466][T18401] unaccount_page_cache_page+0x9dc/0xac0 [ 251.979527][T18401] __delete_from_page_cache+0xc3/0x470 [ 251.985017][T18401] ? memset+0x35/0x40 [ 251.989031][T18401] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 251.996072][T18401] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 252.001555][T18401] ? __kasan_check_read+0x11/0x20 [ 252.006605][T18401] ? workingset_eviction+0x3dc/0x940 [ 252.011911][T18401] __remove_mapping+0x581/0x6b0 [ 252.016787][T18401] shrink_page_list+0x21ee/0x4160 [ 252.021829][T18401] ? shrink_page_list+0x1f41/0x4160 [ 252.027063][T18401] ? reclaim_clean_pages_from_list+0x740/0x740 [ 252.033240][T18401] ? shrink_inactive_list+0xef0/0xef0 [ 252.038637][T18401] ? __count_memcg_events+0x89/0x210 [ 252.043945][T18401] shrink_inactive_list+0x90c/0xef0 [ 252.049170][T18401] ? __this_cpu_preempt_check+0x13/0x20 [ 252.054743][T18401] ? shrink_active_list+0xe00/0xe00 [ 252.059971][T18401] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 252.065628][T18401] ? __kasan_check_read+0x11/0x20 [ 252.070669][T18401] ? lruvec_lru_size+0x230/0x250 [ 252.075628][T18401] ? blk_start_plug+0x5a/0x170 [ 252.080416][T18401] shrink_lruvec+0x2806/0x2d70 [ 252.085201][T18401] ? set_next_entity+0xb4/0x5d0 [ 252.090074][T18401] ? finish_task_switch+0x1b7/0x5a0 [ 252.095296][T18401] ? __switch_to_asm+0x3a/0x60 [ 252.100086][T18401] ? __schedule+0xc0b/0x13e0 [ 252.104728][T18401] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 252.110301][T18401] ? __sched_text_start+0x8/0x8 [ 252.115174][T18401] ? __this_cpu_preempt_check+0x13/0x20 [ 252.120751][T18401] ? tracing_record_taskinfo+0x7c/0x220 [ 252.126316][T18401] ? preempt_schedule_common+0xbe/0xf0 [ 252.131792][T18401] ? __kasan_check_read+0x11/0x20 [ 252.136837][T18401] ? inactive_is_low+0x17a/0x2f0 [ 252.141801][T18401] ? __kasan_check_write+0x14/0x20 [ 252.146940][T18401] shrink_node+0xee0/0x2690 [ 252.151473][T18401] do_try_to_free_pages+0x602/0x1590 [ 252.156779][T18401] ? try_to_free_pages+0xc20/0xc20 [ 252.161914][T18401] try_to_free_mem_cgroup_pages+0x261/0x610 [ 252.167830][T18401] ? shrink_lruvec+0x2d70/0x2d70 [ 252.172791][T18401] mem_cgroup_resize_max+0x309/0x3e0 [ 252.178102][T18401] mem_cgroup_write+0x1ed/0x230 [ 252.182981][T18401] ? mem_cgroup_reset+0x130/0x130 [ 252.188036][T18401] ? mem_cgroup_reset+0x130/0x130 [ 252.193077][T18401] cgroup_file_write+0x294/0x560 [ 252.198032][T18401] ? cgroup_seqfile_stop+0xc0/0xc0 [ 252.203191][T18401] ? mutex_lock+0x92/0xf0 [ 252.207543][T18401] ? mutex_trylock+0xb0/0xb0 [ 252.212160][T18401] ? __kasan_check_write+0x14/0x20 [ 252.217298][T18401] ? cgroup_seqfile_stop+0xc0/0xc0 [ 252.222425][T18401] kernfs_fop_write_iter+0x2bd/0x400 [ 252.227731][T18401] vfs_write+0x770/0xd70 [ 252.232000][T18401] ? kernel_write+0x3c0/0x3c0 [ 252.236733][T18401] ? mutex_trylock+0xb0/0xb0 [ 252.241371][T18401] ? __fget_files+0x2e1/0x340 [ 252.246078][T18401] ? __fdget_pos+0x2d2/0x380 [ 252.250691][T18401] ? ksys_write+0x70/0x260 [ 252.255125][T18401] ksys_write+0x14a/0x260 [ 252.259476][T18401] ? __ia32_sys_read+0x90/0x90 [ 252.264271][T18401] ? __kasan_check_read+0x11/0x20 [ 252.269317][T18401] __x64_sys_write+0x7b/0x90 [ 252.273924][T18401] do_syscall_64+0x31/0x40 [ 252.278362][T18401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 252.284270][T18401] RIP: 0033:0x7f9579fd9e99 [ 252.288719][T18401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.308486][T18401] RSP: 002b:00007f9578a33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.316926][T18401] RAX: ffffffffffffffda RBX: 00007f957a261fa0 RCX: 00007f9579fd9e99 [ 252.324920][T18401] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 252.332915][T18401] RBP: 00007f957a06feaf R08: 0000000000000000 R09: 0000000000000000 [ 252.340914][T18401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.348906][T18401] R13: 00007f957a262038 R14: 00007f957a261fa0 R15: 00007ffd17e0f3b8 [ 252.357032][T18401] [ 252.359376][T18401] Allocated by task 1099: [ 252.363730][T18401] __kasan_kmalloc+0xd4/0x100 [ 252.368427][T18401] __kmalloc+0x19f/0x330 [ 252.372725][T18401] kvmalloc_node+0x88/0x130 [ 252.377243][T18401] alloc_fdtable+0xea/0x2a0 [ 252.381762][T18401] dup_fd+0x7a2/0xab0 [ 252.385766][T18401] copy_files+0xcf/0x170 [ 252.390027][T18401] copy_process+0x12d6/0x3320 [ 252.394723][T18401] kernel_clone+0x233/0x950 [ 252.399252][T18401] __x64_sys_clone+0x198/0x210 [ 252.404039][T18401] do_syscall_64+0x31/0x40 [ 252.408484][T18401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 252.414422][T18401] [ 252.416775][T18401] Freed by task 17497: [ 252.420865][T18401] kasan_set_track+0x4a/0x70 [ 252.425484][T18401] kasan_set_free_info+0x23/0x40 [ 252.430443][T18401] ____kasan_slab_free+0x125/0x160 [ 252.435573][T18401] __kasan_slab_free+0x11/0x20 [ 252.440352][T18401] slab_free_freelist_hook+0xc5/0x190 [ 252.445743][T18401] kfree+0xc0/0x270 [ 252.449574][T18401] kvfree+0x35/0x40 [ 252.453404][T18401] put_files_struct+0x275/0x310 [ 252.458276][T18401] exit_files+0x80/0xa0 [ 252.462452][T18401] do_exit+0xa45/0x24e0 [ 252.466665][T18401] do_group_exit+0x149/0x310 [ 252.471273][T18401] __x64_sys_exit_group+0x3f/0x40 [ 252.476319][T18401] do_syscall_64+0x31/0x40 [ 252.480743][T18401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 252.486619][T18401] [ 252.488940][T18401] Last potentially related work creation: [ 252.494666][T18401] kasan_save_stack+0x3a/0x60 [ 252.499346][T18401] __kasan_record_aux_stack+0xd2/0x100 [ 252.504886][T18401] kasan_record_aux_stack_noalloc+0xb/0x10 [ 252.510689][T18401] insert_work+0x51/0x320 [ 252.515033][T18401] __queue_work+0x91f/0xca0 [ 252.519574][T18401] queue_work_on+0xe6/0x140 [ 252.524080][T18401] destroy_super_rcu+0xd1/0xe0 [ 252.528857][T18401] rcu_do_batch+0x488/0xaf0 [ 252.533351][T18401] rcu_core+0x50a/0xca0 [ 252.537499][T18401] rcu_core_si+0x9/0x10 [ 252.541650][T18401] __do_softirq+0x255/0x563 [ 252.546151][T18401] [ 252.548473][T18401] Second to last potentially related work creation: [ 252.555053][T18401] kasan_save_stack+0x3a/0x60 [ 252.559725][T18401] __kasan_record_aux_stack+0xd2/0x100 [ 252.565194][T18401] kasan_record_aux_stack_noalloc+0xb/0x10 [ 252.570994][T18401] call_rcu+0x11a/0x1090 [ 252.575233][T18401] __put_super+0x254/0x2b0 [ 252.579664][T18401] deactivate_locked_super+0xd4/0x100 [ 252.585165][T18401] deactivate_super+0xaf/0xe0 [ 252.589836][T18401] cleanup_mnt+0x44f/0x500 [ 252.594246][T18401] __cleanup_mnt+0x19/0x20 [ 252.598657][T18401] task_work_run+0x127/0x190 [ 252.603243][T18401] exit_to_user_mode_loop+0xcb/0xe0 [ 252.608458][T18401] exit_to_user_mode_prepare+0x76/0xa0 [ 252.613913][T18401] syscall_exit_to_user_mode+0x1d/0x40 [ 252.619362][T18401] do_syscall_64+0x3d/0x40 [ 252.623778][T18401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 252.629740][T18401] [ 252.632065][T18401] The buggy address belongs to the object at ffff88811e6dc000 [ 252.632065][T18401] which belongs to the cache kmalloc-2k of size 2048 [ 252.646109][T18401] The buggy address is located 1136 bytes inside of [ 252.646109][T18401] 2048-byte region [ffff88811e6dc000, ffff88811e6dc800) [ 252.659544][T18401] The buggy address belongs to the page: [ 252.665202][T18401] page:ffffea000479b600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e6d8 [ 252.675453][T18401] head:ffffea000479b600 order:3 compound_mapcount:0 compound_pincount:0 [ 252.683773][T18401] flags: 0x4000000000010200(slab|head) [ 252.689241][T18401] raw: 4000000000010200 0000000000000000 0000000400000001 ffff888100042d80 [ 252.697826][T18401] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 252.706401][T18401] page dumped because: kasan: bad access detected [ 252.712823][T18401] page_owner tracks the page as allocated [ 252.718552][T18401] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 279, ts 27778567949, free_ts 27328292251 [ 252.736974][T18401] prep_new_page+0x176/0x190 [ 252.741555][T18401] get_page_from_freelist+0x225f/0x23f0 [ 252.747091][T18401] __alloc_pages_nodemask+0x29a/0x640 [ 252.752460][T18401] new_slab+0x84/0x3f0 [ 252.756525][T18401] ___slab_alloc+0x2f8/0x4c0 [ 252.761107][T18401] __slab_alloc+0x63/0xa0 [ 252.765430][T18401] __kmalloc_track_caller+0x1e4/0x310 [ 252.770815][T18401] __alloc_skb+0xdc/0x520 [ 252.775155][T18401] audit_log_start+0x41b/0x840 [ 252.779926][T18401] common_lsm_audit+0xd4/0x1850 [ 252.784776][T18401] slow_avc_audit+0x1c4/0x240 [ 252.789455][T18401] avc_has_perm+0x215/0x3d0 [ 252.793960][T18401] selinux_mount+0x3c8/0x510 [ 252.798557][T18401] security_sb_mount+0x86/0xc0 [ 252.803479][T18401] path_mount+0xc0/0xca0 [ 252.807721][T18401] __se_sys_mount+0x320/0x390 [ 252.812385][T18401] page last free stack trace: [ 252.817144][T18401] free_unref_page_prepare+0x2b7/0x2d0 [ 252.822600][T18401] __free_pages+0x146/0x390 [ 252.827097][T18401] __vunmap+0x801/0x980 [ 252.831249][T18401] vfree+0x61/0x90 [ 252.834981][T18401] kcov_mmap+0x8f/0x130 [ 252.839145][T18401] mmap_file+0x60/0xb0 [ 252.843212][T18401] mmap_region+0x11fd/0x19c0 [ 252.847797][T18401] do_mmap+0x85f/0xf50 [ 252.851858][T18401] vm_mmap_pgoff+0x1f4/0x350 [ 252.856439][T18401] ksys_mmap_pgoff+0x16f/0x1e0 [ 252.861203][T18401] __x64_sys_mmap+0xfa/0x110 [ 252.865788][T18401] do_syscall_64+0x31/0x40 [ 252.870196][T18401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 252.876167][T18401] [ 252.878491][T18401] Memory state around the buggy address: [ 252.884115][T18401] ffff88811e6dc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.892172][T18401] ffff88811e6dc380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.900245][T18401] >ffff88811e6dc400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.908298][T18401] ^ [ 252.916025][T18401] ffff88811e6dc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.924105][T18401] ffff88811e6dc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 252.932162][T18401] ================================================================== [ 252.940239][T18401] Disabling lock debugging due to kernel taint [ 252.946605][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 253.384851][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 254.753461][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 260.911139][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!