last executing test programs: 4m53.408004427s ago: executing program 0 (id=614): readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) 4m53.391669871s ago: executing program 0 (id=618): landlock_create_ruleset(&(0x7f0000000000), 0x0, 0x0) 4m53.391422801s ago: executing program 0 (id=622): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create', 0x2, 0x0) 4m53.236165702s ago: executing program 0 (id=625): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 4m53.12740622s ago: executing program 0 (id=629): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero', 0x800, 0x0) 4m53.0884642s ago: executing program 0 (id=630): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 4m52.969828131s ago: executing program 5 (id=632): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 420.982522ms ago: executing program 3 (id=8769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe200}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x0) 386.733921ms ago: executing program 3 (id=8773): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x40842300, 0x0, 0x0, 0x0, 0x0, 0x0) 228.430762ms ago: executing program 4 (id=8794): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) fcntl$dupfd(r0, 0x406, r0) 228.078512ms ago: executing program 2 (id=8795): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x5c, 0x100) 203.746418ms ago: executing program 4 (id=8797): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack_expect\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 202.403078ms ago: executing program 2 (id=8799): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2, 0x3a, '%{-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x43, 0x46]}, 0x2e) 183.246383ms ago: executing program 1 (id=8800): clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000780)={r0, r1+10000000}) 170.860037ms ago: executing program 4 (id=8802): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 164.257788ms ago: executing program 3 (id=8804): r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro-p\x00', 0x0) 150.144372ms ago: executing program 2 (id=8805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x1c, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x200408c8) 141.413654ms ago: executing program 1 (id=8806): ptrace(0x10, 0x1) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)) 133.766986ms ago: executing program 3 (id=8808): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000440)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c756d61736b3d30303030303030303030303030303030303030303030372c636f6465706167653d3836302c756e695f786c6174653d302c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c696f636861727365743d6b6f69382d722c666c7573682c6e6f6e756d7461696c3d302c00824ebbdddfe8db285caa5e4953b5c37599d1227f078942a9ed4c41"], 0x81, 0x2ae, &(0x7f0000001980)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) 126.637918ms ago: executing program 4 (id=8809): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2a, 0x1, 0x100, 0x4, {0x2}}, 0x14}}, 0x0) 120.05783ms ago: executing program 6 (id=8810): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 118.69839ms ago: executing program 1 (id=8811): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'}) 111.714032ms ago: executing program 2 (id=8812): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0x2, 0x4, 0x348, 0xffffffff, 0x1a8, 0x1a8, 0x0, 0xfeffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 98.551505ms ago: executing program 3 (id=8813): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, 0x0, 0x0, 0x0, 0x100000004000000) 97.083136ms ago: executing program 6 (id=8814): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './bus\x00'}, 0xffffffffffffff82) 90.738277ms ago: executing program 1 (id=8815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000140)) 82.245419ms ago: executing program 2 (id=8816): setuid(0xee01) setfsgid(0xee00) 79.314ms ago: executing program 4 (id=8817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x70bd2f, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xfc}}, @NDA_PORT={0x6, 0x6, 0x4e20}]}, 0x38}}, 0x20000000) 73.718941ms ago: executing program 6 (id=8818): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000800)="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", 0x55c, r0) 61.522854ms ago: executing program 2 (id=8819): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 49.089148ms ago: executing program 4 (id=8820): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x4e24, 0x9, 0x4e21, 0x5, 0xa, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xb782, 0x1, 0xe, 0x0, 0x8, 0x3ff}, {0xfb, 0x4, 0x0, 0x100}, 0x4, 0x6e6bb3, 0x3, 0x0, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x1, 0x5, 0x2, 0x5, 0x4}}, 0xe8) 48.985148ms ago: executing program 1 (id=8821): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000008c0)={{0x2, 0x4e23, @empty}, {0x1, @link_local}, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x4, 0x0}}, 'lo\x00'}) 48.709008ms ago: executing program 3 (id=8822): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) lchown(0x0, 0x0, 0x0) 35.144481ms ago: executing program 6 (id=8823): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x806, 0xffa9) 34.792811ms ago: executing program 6 (id=8824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x40881}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x4048050) 19.065455ms ago: executing program 1 (id=8825): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000008b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2570}}], 0x2, 0x40840) 0s ago: executing program 6 (id=8826): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xfffe, 0x181, 0x74d, 0x2}}) kernel console output (not intermixed with test programs): 20][T10677] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.635533][ T1306] usb 5-1: Using ep0 maxpacket: 8 [ 256.679556][T10673] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 256.699835][T10673] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 256.709156][T10673] F2FS-fs (loop6): invalid crc value [ 256.714766][T10673] F2FS-fs (loop6): invalid crc value [ 256.720082][T10673] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 256.774536][ T1306] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 256.782788][ T1306] usb 5-1: config 0 has no interface number 0 [ 256.966874][ T1306] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 256.975989][ T1306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.984259][ T1306] usb 5-1: Product: syz [ 256.988703][ T1306] usb 5-1: Manufacturer: syz [ 256.993307][ T1306] usb 5-1: SerialNumber: syz [ 257.003140][ T1306] usb 5-1: config 0 descriptor?? [ 257.027354][T10671] F2FS-fs (loop2): Found nat_bits in checkpoint [ 257.084690][T10671] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 257.340860][ T1306] usb 5-1: Found UVC 0.00 device syz (046d:08c3) [ 257.347275][ T1306] usb 5-1: No streaming interface found for terminal 6. [ 257.377707][ T1306] usb 5-1: USB disconnect, device number 114 [ 257.849410][T10718] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.143512][T10729] set_capacity_and_notify: 49 callbacks suppressed [ 258.143531][T10729] loop4: detected capacity change from 0 to 512 [ 258.185060][ T20] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 258.321441][T10731] loop4: detected capacity change from 0 to 256 [ 258.416984][T10733] loop4: detected capacity change from 0 to 128 [ 258.452196][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 258.503387][T10735] loop4: detected capacity change from 0 to 128 [ 258.601137][T10737] loop4: detected capacity change from 0 to 2048 [ 258.623286][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.660401][T10704] loop6: detected capacity change from 0 to 262144 [ 258.707708][T10739] loop4: detected capacity change from 0 to 512 [ 258.719389][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.740692][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.816505][T10743] loop4: detected capacity change from 0 to 256 [ 258.826529][T10710] loop2: detected capacity change from 0 to 262144 [ 258.886616][T10710] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.903063][T10746] loop4: detected capacity change from 0 to 128 [ 258.911780][ T20] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 258.926512][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.936823][ T20] usb 2-1: Product: syz [ 258.943212][ T20] usb 2-1: Manufacturer: syz [ 258.947952][ T20] usb 2-1: SerialNumber: syz [ 258.952608][T10710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 258.997754][ T20] usb 2-1: selecting invalid altsetting 1 [ 259.018596][ T1343] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 259.219259][ T20] usb 2-1: USB disconnect, device number 117 [ 259.307149][ T1343] usb 7-1: Using ep0 maxpacket: 16 [ 259.446043][ T1343] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.467025][ T1343] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.713186][ T1343] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.733074][ T1343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.743829][ T1343] usb 7-1: Product: syz [ 259.751917][ T1343] usb 7-1: Manufacturer: syz [ 259.762675][ T1343] usb 7-1: SerialNumber: syz [ 260.076452][ T20] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 260.129950][ T1343] usb 7-1: 0:2 : does not exist [ 260.134882][ T1343] usb 7-1: unit 9 not found! [ 260.159151][ T1343] usb 7-1: USB disconnect, device number 115 [ 260.512414][ T30] audit: type=1400 audit(2000001206.922:334): avc: denied { ioctl } for pid=10760 comm="syz.2.5267" path="socket:[46342]" dev="sockfs" ino=46342 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.514631][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.600127][ T20] usb 2-1: not running at top speed; connect to a high speed hub [ 260.615653][T10759] loop3: p1 p2 p3 [ 260.685640][ T20] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 260.706900][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.738525][ T30] audit: type=1400 audit(2000001207.128:335): avc: denied { write } for pid=10772 comm="syz.2.5274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.760001][ T1343] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 260.783052][ T1279] udevd[1279]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 260.794249][ T965] udevd[965]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 260.794254][ T961] udevd[961]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 260.804259][T10771] loop6: p1 p2 p3 [ 260.829735][ T30] audit: type=1400 audit(2000001207.222:336): avc: denied { bind } for pid=10776 comm="syz.3.5271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.829741][T10777] tipc: Can't bind to reserved service type 0 [ 260.891189][ T30] audit: type=1400 audit(2000001207.278:337): avc: denied { ioctl } for pid=10774 comm="syz.2.5275" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 260.910002][ T20] usb 2-1: New USB device found, idVendor=1430, idProduct=474a, bcdDevice= 0.40 [ 260.952881][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.966821][ T20] usb 2-1: Product: syz [ 260.971020][ T20] usb 2-1: Manufacturer: syz [ 260.979356][ T20] usb 2-1: SerialNumber: syz [ 261.003588][ T1279] udevd[1279]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 261.013485][T10755] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 261.015177][ T962] udevd[962]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 261.031903][ T961] udevd[961]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 261.048653][ T30] audit: type=1400 audit(2000001207.427:338): avc: denied { read } for pid=10787 comm="syz.6.5281" path="socket:[46076]" dev="sockfs" ino=46076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.143474][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5286'. [ 261.209236][ T1343] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 261.229563][ T1343] usb 5-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 261.348135][ T1343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.368008][ T1343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.378771][ T1343] usb 5-1: SerialNumber: syz [ 261.433677][ T20] usb 2-1: MIDIStreaming interface descriptor not found [ 261.452912][ T20] usb 2-1: USB disconnect, device number 118 [ 261.487040][ T60] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 261.553640][ T30] audit: type=1400 audit(2000001207.905:339): avc: denied { checkpoint_restore } for pid=10808 comm="syz.6.5291" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 261.627443][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5293'. [ 261.743779][ T1343] rndis_host 5-1:253.0: skipping garbage [ 261.759517][ T1343] usb 5-1: USB disconnect, device number 115 [ 261.914573][ T60] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.935850][ T26] usb 7-1: new full-speed USB device number 116 using dummy_hcd [ 261.946645][ T60] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 46322, setting to 64 [ 261.968084][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 261.977283][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.278305][ T60] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 262.297621][ T60] usb 3-1: USB disconnect, device number 115 [ 262.363382][ T26] usb 7-1: unable to get BOS descriptor or descriptor too short [ 262.385735][T10831] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.406153][T10831] ext4 filesystem being mounted at /992/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.427447][ T26] usb 7-1: not running at top speed; connect to a high speed hub [ 262.449317][ T30] audit: type=1400 audit(2000001208.737:340): avc: denied { write } for pid=10830 comm="syz.4.5303" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.501583][ T30] audit: type=1400 audit(2000001208.766:341): avc: denied { open } for pid=10830 comm="syz.4.5303" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.524447][ T26] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 262.558394][ T30] audit: type=1326 audit(2000001208.840:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.3.5307" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad98f5159 code=0x7ffc0000 [ 262.583405][ T30] audit: type=1326 audit(2000001208.840:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.3.5307" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5ad98f5159 code=0x7ffc0000 [ 262.649018][T10823] F2FS-fs (loop1): Found nat_bits in checkpoint [ 262.672486][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5312'. [ 262.692822][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5312'. [ 262.700308][T10823] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955 [ 262.712069][ T26] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 262.721775][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.732356][ T26] usb 7-1: Product: syz [ 262.736905][ T26] usb 7-1: Manufacturer: syz [ 262.759072][ T26] usb 7-1: SerialNumber: syz [ 263.143490][ T26] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 263.162218][ T26] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 263.176049][ T26] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 263.208104][ T26] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 263.273359][ T26] usb 7-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 263.335760][ T4266] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 263.350816][ T26] usb 7-1: USB disconnect, device number 116 [ 263.377540][ T1279] udevd[1279]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.635448][T11033] xt_hashlimit: invalid interval [ 263.696512][T11045] ipt_REJECT: ECHOREPLY no longer supported. [ 263.826077][T11072] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 263.827271][ T998] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 263.868820][T11076] netlink: 'syz.1.5419': attribute type 1 has an invalid length. [ 263.889601][T11082] xt_l2tp: unknown flags: 10 [ 263.966249][ T4266] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 263.975449][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.975477][ T4266] usb 4-1: Product: syz [ 263.975492][ T4266] usb 4-1: Manufacturer: syz [ 263.975506][ T4266] usb 4-1: SerialNumber: syz [ 264.084465][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5436'. [ 264.121019][T11122] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5441'. [ 264.131172][T11122] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 264.150800][ T998] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 264.246426][ T998] usb 3-1: config 0 has no interfaces? [ 264.329566][ T998] usb 3-1: config 0 has no interfaces? [ 264.415062][ T998] usb 3-1: config 0 has no interfaces? [ 264.419461][ T4266] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 264.437299][ T4266] usb 4-1: USB disconnect, device number 114 [ 264.500559][ T998] usb 3-1: config 0 has no interfaces? [ 264.543229][ T964] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 264.597046][ T998] usb 3-1: config 0 has no interfaces? [ 264.633286][T11211] set_capacity_and_notify: 11 callbacks suppressed [ 264.633306][T11211] loop6: detected capacity change from 0 to 256 [ 264.683236][T11211] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 264.703533][ T998] usb 3-1: config 0 has no interfaces? [ 264.724929][ T45] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 264.789029][ T998] usb 3-1: config 0 has no interfaces? [ 264.874545][ T998] usb 3-1: config 0 has no interfaces? [ 264.885660][ T998] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 264.895932][T11227] loop3: detected capacity change from 0 to 256 [ 264.898290][ T998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.939498][ T998] usb 3-1: config 0 descriptor?? [ 264.960044][ T964] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.977577][T11233] loop6: detected capacity change from 0 to 256 [ 264.990223][ T964] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.003203][ T964] usb 5-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 265.012573][ T964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.046164][T11239] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.053540][T11239] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.069920][ T964] usb 5-1: 0:1 : does not exist [ 265.175673][T11241] x_tables: unsorted entry at hook 2 [ 265.224273][ T964] usb 3-1: USB disconnect, device number 116 [ 265.276063][T11248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5502'. [ 265.301855][ T1191] usb 5-1: USB disconnect, device number 116 [ 265.404744][ T4266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 265.419933][ T4266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 265.440996][ T4266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 265.555271][T11281] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 265.717977][T11301] veth0: mtu less than device minimum [ 265.814234][T11213] loop1: detected capacity change from 0 to 262144 [ 265.885853][T11213] F2FS-fs (loop1): Found nat_bits in checkpoint [ 266.013576][T11213] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 266.125714][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 266.125732][ T30] audit: type=1400 audit(2000001212.181:369): avc: denied { append } for pid=11352 comm="syz.6.5554" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 266.156055][ T4266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 266.214258][ T30] audit: type=1400 audit(2000001212.256:370): avc: denied { bind } for pid=11358 comm="syz.6.5558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.234421][ T4266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 266.348275][T11375] loop2: detected capacity change from 0 to 256 [ 266.361445][ T30] audit: type=1400 audit(2000001212.396:371): avc: denied { getopt } for pid=11376 comm="syz.6.5566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.395699][T11381] xt_TCPMSS: Only works on TCP SYN packets [ 266.447695][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5570'. [ 266.457122][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5570'. [ 266.482434][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5570'. [ 266.561339][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5576'. [ 266.584246][T11395] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 266.690661][T11401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.697938][T11401] IPv6: NLM_F_CREATE should be set when creating new route [ 266.705532][T11401] IPv6: NLM_F_CREATE should be set when creating new route [ 266.952648][T11438] netlink: 'syz.1.5596': attribute type 3 has an invalid length. [ 267.038149][T11446] loop6: detected capacity change from 0 to 256 [ 267.066983][T11454] netlink: 'syz.1.5603': attribute type 3 has an invalid length. [ 267.100409][T11458] mip6: mip6_rthdr_init_state: spi is not 0: 128 [ 267.127292][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5608'. [ 267.235028][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.242392][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.296700][ T30] audit: type=1400 audit(2000001213.267:372): avc: denied { name_bind } for pid=11483 comm="syz.2.5619" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 267.344755][T11482] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5617'. [ 267.397927][ T30] audit: type=1400 audit(2000001213.370:373): avc: denied { ioctl } for pid=11487 comm="syz.2.5622" path="socket:[48652]" dev="sockfs" ino=48652 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.433672][T11492] netlink: 528 bytes leftover after parsing attributes in process `syz.1.5623'. [ 267.580828][ T30] audit: type=1400 audit(2000001213.538:374): avc: denied { setopt } for pid=11515 comm="syz.2.5635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.638851][ T30] audit: type=1400 audit(2000001213.585:375): avc: denied { nlmsg_read } for pid=11521 comm="syz.1.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.662052][T11528] xt_hashlimit: invalid rate [ 267.773504][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5648'. [ 267.804620][ T30] audit: type=1400 audit(2000001213.753:376): avc: denied { ioctl } for pid=11549 comm="syz.1.5652" path="socket:[49261]" dev="sockfs" ino=49261 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.119537][T11606] printk: syz.2.5680 (11606): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 268.164047][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5684'. [ 268.202351][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5684'. [ 268.254607][T11625] netlink: 9052 bytes leftover after parsing attributes in process `syz.1.5690'. [ 268.283744][T11307] loop3: detected capacity change from 0 to 262144 [ 268.304496][T11634] device macsec0 entered promiscuous mode [ 268.333278][ T30] audit: type=1400 audit(2000001214.240:377): avc: denied { setopt } for pid=11636 comm="syz.6.5696" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 268.387977][T11307] F2FS-fs (loop3): Found nat_bits in checkpoint [ 268.418557][T11643] device veth0_vlan left promiscuous mode [ 268.426030][T11651] loop1: detected capacity change from 0 to 512 [ 268.432648][T11643] device veth0_vlan entered promiscuous mode [ 268.438183][T11307] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 268.440017][T11643] device veth1_macvtap left promiscuous mode [ 268.454083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.466684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.490759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.512909][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.520017][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.544398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.553193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.561689][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.568761][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.571577][T11651] EXT4-fs (loop1): 1 orphan inode deleted [ 268.581925][T11651] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 268.593801][T11651] ext4 filesystem being mounted at /961/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.611482][ T30] audit: type=1400 audit(2000001214.502:378): avc: denied { write } for pid=11650 comm="syz.1.5702" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.612124][T11651] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #12: block 13: comm syz.1.5702: bad entry in directory: inode out of bounds - offset=24, inode=4294836237, rec_len=16, size=4096 fake=0 [ 268.641292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.667734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 268.701801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.710314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 268.718919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.727516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.735888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.752420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.774216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.799212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.823040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.848078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.859307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.868177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.882117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.890582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.899919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.913682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.922563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.931397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.939893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.948042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.955672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.964812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.974614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.983868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.052642][T11708] x_tables: unsorted underflow at hook 4 [ 269.101814][T11717] usb usb1: usbfs: process 11717 (syz.2.5730) did not claim interface 0 before use [ 269.298136][T11746] netlink: 'syz.2.5746': attribute type 2 has an invalid length. [ 269.306790][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5746'. [ 269.316143][T11746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.367675][T11754] device sit1 entered promiscuous mode [ 269.591569][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5776'. [ 269.795912][T11850] netlink: 'syz.2.5798': attribute type 1 has an invalid length. [ 269.982450][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 270.012794][T11890] netlink: 'syz.1.5816': attribute type 29 has an invalid length. [ 270.029279][T11890] netlink: 'syz.1.5816': attribute type 29 has an invalid length. [ 270.229319][T11915] futex_wake_op: syz.3.5829 tries to shift op by 144; fix this program [ 270.247868][T11915] futex_wake_op: syz.3.5829 tries to shift op by 144; fix this program [ 270.357083][T11934] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 270.477214][T11962] netlink: 'syz.6.5851': attribute type 1 has an invalid length. [ 270.488933][T11962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.648329][T11996] Zero length message leads to an empty skb [ 270.658334][T11999] loop1: detected capacity change from 0 to 256 [ 270.677417][T11999] exfat: Deprecated parameter 'namecase' [ 270.683778][T11999] exfat: Deprecated parameter 'namecase' [ 270.720027][T11999] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 270.763628][T12023] xt_hashlimit: overflow, try lower: 4/0 [ 270.854436][T12040] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.5888' sets config #8 [ 270.964734][T12052] device veth0_vlan left promiscuous mode [ 270.976072][T12052] device veth0_vlan entered promiscuous mode [ 270.988971][T12052] device veth1_macvtap left promiscuous mode [ 271.012645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.040491][ T4266] usb 7-1: new low-speed USB device number 117 using dummy_hcd [ 271.045152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.071485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.091403][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.098513][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.121094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.141383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.154927][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.162048][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.170238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.178958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 271.188366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.196774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 271.206330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.214769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.222972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.231144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.239256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.247379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.255703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.263974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.273129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.281586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.289585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.297684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.305582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.313696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.321958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.330477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.338355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.346268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.354196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.361828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.369898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.379581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.488915][T12115] loop2: detected capacity change from 0 to 512 [ 271.494288][T12116] 8021q: VLANs not supported on lo [ 271.508103][ T30] kauditd_printk_skb: 630 callbacks suppressed [ 271.508123][ T30] audit: type=1400 audit(2000001217.206:1009): avc: denied { mounton } for pid=12113 comm="syz.1.5927" path="/1010/file0" dev="tmpfs" ino=5183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 271.508235][T12117] overlayfs: './file0' not a directory [ 271.594201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 271.607408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.617496][ T4266] usb 7-1: config 7 has an invalid interface number: 112 but max is 1 [ 271.625696][ T4266] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 271.636399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 271.657272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.668018][ T4266] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 271.681914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.693219][ T4266] usb 7-1: config 7 has no interface number 0 [ 271.700314][T12115] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.711830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.719859][ T4266] usb 7-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.733407][T12115] ext4 filesystem being mounted at /1044/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 271.765829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.773931][ T4266] usb 7-1: config 7 interface 112 has no altsetting 0 [ 271.781313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.012950][ T30] audit: type=1400 audit(2000001217.693:1010): avc: denied { append } for pid=12163 comm="syz.2.5948" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 272.047946][ T4266] usb 7-1: string descriptor 0 read error: -22 [ 272.054735][ T4266] usb 7-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 272.073875][ T4266] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.080820][T12168] netlink: 'syz.1.5952': attribute type 7 has an invalid length. [ 272.102941][T12168] netlink: 'syz.1.5952': attribute type 8 has an invalid length. [ 272.131486][ T4266] usb 7-1: Found UVC 0.00 device (046d:089b) [ 272.138430][ T4266] usb 7-1: No valid video chain found. [ 272.209467][ T30] audit: type=1326 audit(2000001217.871:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.4.5959" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a0fab159 code=0x7ffc0000 [ 272.267544][ T30] audit: type=1326 audit(2000001217.871:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.4.5959" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a0fab159 code=0x7ffc0000 [ 272.267579][ T30] audit: type=1326 audit(2000001217.890:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.4.5959" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff2a0fab159 code=0x7ffc0000 [ 272.267605][ T30] audit: type=1326 audit(2000001217.890:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.4.5959" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a0fab159 code=0x7ffc0000 [ 272.267631][ T30] audit: type=1326 audit(2000001217.890:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.4.5959" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a0fab159 code=0x7ffc0000 [ 272.273446][T12192] loop1: detected capacity change from 0 to 1024 [ 272.351928][T12192] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 272.379854][ T4266] usb 7-1: USB disconnect, device number 117 [ 272.419093][T12192] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 272.433812][T12204] SELinux: security_context_str_to_sid(5] S9q#) failed for (dev ?, type ?) errno=-22 [ 272.435163][T12192] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 272.746300][T12234] mmap: syz.3.5982 (12234): VmData 29081600 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 272.882361][T12256] __nla_validate_parse: 10 callbacks suppressed [ 272.882382][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5993'. [ 273.134359][T12297] loop3: detected capacity change from 0 to 256 [ 273.200617][T12297] exfat: Deprecated parameter 'utf8' [ 273.206006][T12297] exfat: Deprecated parameter 'utf8' [ 273.223131][T12297] exfat: Deprecated parameter 'namecase' [ 273.223362][T12314] loop2: detected capacity change from 0 to 256 [ 273.228832][T12297] exfat: Deprecated parameter 'namecase' [ 273.249793][T12297] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 273.274484][T12314] exfat: Deprecated parameter 'utf8' [ 273.279872][T12314] exfat: Deprecated parameter 'utf8' [ 273.285283][ T30] audit: type=1400 audit(2000001218.872:1016): avc: denied { write } for pid=12296 comm="syz.3.6013" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.308397][T12314] exfat: Deprecated parameter 'namecase' [ 273.309014][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6029'. [ 273.314087][T12314] exfat: Deprecated parameter 'namecase' [ 273.323275][ T30] audit: type=1400 audit(2000001218.872:1017): avc: denied { add_name } for pid=12296 comm="syz.3.6013" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.350964][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6029'. [ 273.351682][ T30] audit: type=1400 audit(2000001218.872:1018): avc: denied { create } for pid=12296 comm="syz.3.6013" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 273.383933][ T1343] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 273.408896][T12314] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 273.426014][T12333] IPv6: sit1: Disabled Multicast RS [ 273.559226][T12360] loop3: detected capacity change from 0 to 256 [ 273.602453][T12365] netlink: 'syz.2.6048': attribute type 1 has an invalid length. [ 273.796937][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 273.808137][ T1343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 273.810322][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.830470][T12406] xt_TPROXY: Can be used only with -p tcp or -p udp [ 273.851178][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 273.860590][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.870877][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.880109][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.893210][ T1343] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 273.903841][T12414] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6072'. [ 273.910803][ T1343] usb 2-1: can't read configurations, error -71 [ 273.920579][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.934781][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.110761][T12449] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6089'. [ 274.133147][T12453] binfmt_misc: register: failed to install interpreter file ./file0 [ 274.174875][T12459] loop2: detected capacity change from 0 to 256 [ 274.325308][T12482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6105'. [ 274.343270][T12482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6105'. [ 274.363760][T12482] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6105'. [ 274.385675][T12489] loop1: detected capacity change from 0 to 256 [ 274.421565][T12489] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e7e, chksum : 0x06bedb5d, utbl_chksum : 0xe619d30d) [ 274.482719][T12505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.607488][T12523] loop4: detected capacity change from 0 to 16 [ 274.638900][T12523] erofs: (device loop4): mounted with root inode @ nid 36. [ 274.662738][T12523] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 274.694240][T12523] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851] [ 274.721075][T12523] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 274.732495][T12539] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.753492][T12533] kernel read not supported for file /policy (pid: 12533 comm: syz.1.6130) [ 274.914080][T12566] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.105768][T12603] loop3: detected capacity change from 0 to 1024 [ 275.134551][T12610] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 275.142254][T12610] SELinux: failed to load policy [ 275.229735][T12603] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 275.229735][T12603] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 275.229735][T12603] [ 275.249991][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6178'. [ 275.273153][T12603] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 275.273153][T12603] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 275.273153][T12603] [ 275.365941][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6186'. [ 275.406527][T12603] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,noacl,errors=remount-ro,stripe=0x0000000000000010,nouser_xattr,init_itable,. Quota mode: none. [ 275.632974][T12699] netlink: 'syz.6.6210': attribute type 1 has an invalid length. [ 275.664608][T12699] netlink: 'syz.6.6210': attribute type 3 has an invalid length. [ 275.928426][T12733] kernel read not supported for file /policy (pid: 12733 comm: syz.3.6221) [ 276.069511][T12707] set_capacity_and_notify: 2 callbacks suppressed [ 276.069530][T12707] loop1: detected capacity change from 0 to 40427 [ 276.120061][T12768] loop2: detected capacity change from 0 to 8192 [ 276.195720][T12707] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 276.218449][T12707] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 276.234809][T12707] F2FS-fs (loop1): invalid crc value [ 276.242128][T12707] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 276.314741][T12707] F2FS-fs (loop1): Start checkpoint disabled! [ 276.332485][T12815] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 276.345903][T12817] x_tables: duplicate underflow at hook 3 [ 276.369535][T12707] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 276.391010][T12707] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 276.423708][T12826] loop6: detected capacity change from 0 to 512 [ 276.472097][T12826] EXT4-fs error (device loop6): ext4_get_journal_inode:5178: comm syz.6.6272: inode #2147418112: comm syz.6.6272: iget: illegal inode # [ 276.497172][T12826] EXT4-fs (loop6): no journal found [ 276.504898][T12826] EXT4-fs (loop6): can't get journal size [ 276.547115][T12826] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 276.574183][T12826] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 276.601130][T12826] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 276.756773][T12879] loop3: detected capacity change from 0 to 1024 [ 276.795154][T12890] loop1: detected capacity change from 0 to 256 [ 276.801018][T12888] loop2: detected capacity change from 0 to 2048 [ 276.826792][T12879] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 276.844307][T12879] EXT4-fs error (device loop3): ext4_get_journal_inode:5178: inode #32: comm syz.3.6298: iget: special inode unallocated [ 276.873794][T12879] EXT4-fs (loop3): no journal found [ 276.880259][T12888] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,dioread_lock,,errors=continue. Quota mode: none. [ 276.903669][T12879] EXT4-fs (loop3): can't get journal size [ 276.918593][T12879] EXT4-fs (loop3): filesystem is read-only [ 276.924453][T12879] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,noblock_validity,grpjquota=,,errors=continue. Quota mode: none. [ 276.955857][T12879] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.6298: bad inode number: 12 [ 276.966803][T12888] ext4 filesystem being mounted at /1120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.073024][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 277.073043][ T30] audit: type=1400 audit(2000000001.955:1128): avc: denied { bind } for pid=12910 comm="syz.4.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.126443][ T30] audit: type=1400 audit(2000000001.983:1129): avc: denied { write } for pid=12914 comm="syz.3.6310" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.190271][ T30] audit: type=1400 audit(2000000002.021:1130): avc: denied { read write } for pid=12918 comm="syz.4.6316" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 277.226537][T12937] loop2: detected capacity change from 0 to 256 [ 277.233342][ T30] audit: type=1400 audit(2000000002.021:1131): avc: denied { ioctl open } for pid=12918 comm="syz.4.6316" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 277.247859][T12937] exfat: Deprecated parameter 'utf8' [ 277.299611][T12949] ip_tables: iptables: counters copy to user failed while replacing table [ 277.305291][T12937] exfat: Deprecated parameter 'utf8' [ 277.325664][T12953] netlink: 'syz.3.6332': attribute type 1 has an invalid length. [ 277.345143][T12937] exfat: Deprecated parameter 'namecase' [ 277.356416][T12955] netlink: 'syz.1.6334': attribute type 1 has an invalid length. [ 277.364203][ T30] audit: type=1400 audit(2000000002.227:1132): avc: denied { write } for pid=12956 comm="syz.4.6333" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.397710][ T30] audit: type=1400 audit(2000000002.227:1133): avc: denied { open } for pid=12956 comm="syz.4.6333" path="/dev/input/event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.422599][ T30] audit: type=1400 audit(2000000002.227:1134): avc: denied { ioctl } for pid=12956 comm="syz.4.6333" path="/dev/input/event2" dev="devtmpfs" ino=270 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 277.465075][T12937] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 277.485898][ T30] audit: type=1400 audit(2000000002.330:1135): avc: denied { read write } for pid=12972 comm="syz.3.6342" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 277.561609][T12985] loop6: detected capacity change from 0 to 256 [ 277.566239][ T30] audit: type=1400 audit(2000000002.330:1136): avc: denied { open } for pid=12972 comm="syz.3.6342" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 277.595089][ T30] audit: type=1326 audit(2000000002.376:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.4.6344" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a0fab159 code=0x7ffc0000 [ 277.860613][T13042] device vti0 entered promiscuous mode [ 278.165615][T13106] device bridge2 entered promiscuous mode [ 278.184384][T13110] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 278.224255][T13110] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 278.238389][T13123] netlink: 'syz.1.6417': attribute type 49 has an invalid length. [ 278.299077][T13133] loop4: detected capacity change from 0 to 256 [ 278.408653][T13151] loop2: detected capacity change from 0 to 4096 [ 278.410679][T13154] device bridge_slave_0 left promiscuous mode [ 278.440528][T13154] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.457036][T13154] device bridge_slave_1 left promiscuous mode [ 278.469036][T13154] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.482494][T13151] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 278.493667][T13151] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 278.496908][T13154] device macsec0 left promiscuous mode [ 278.513695][T13151] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,data_err=ignore,jqfmt=vfsv1,quota,nombcache,grpid,minixdf,debug_want_extra_isize=0x0000000000000040,data_err=abort,,errors=continue. Quota mode: writeback. [ 278.537732][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.586884][T13173] netlink: 'syz.3.6442': attribute type 46 has an invalid length. [ 278.617705][ T998] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 278.627903][T13181] device bridge_slave_0 entered promiscuous mode [ 278.644800][T13181] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 278.714436][T13195] SELinux: Context Y7j is not valid (left unmapped). [ 278.800440][T13191] EXT4-fs (loop3): 1 orphan inode deleted [ 278.806946][T13191] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 278.819080][T13191] ext4 filesystem being mounted at /1128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.902397][T13236] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 278.958726][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 279.300722][ T26] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 279.421879][T13331] netlink: 'syz.4.6517': attribute type 5 has an invalid length. [ 279.534084][T13357] __nla_validate_parse: 8 callbacks suppressed [ 279.534102][T13357] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6529'. [ 279.550895][T13349] EXT4-fs (loop1): Test dummy encryption mode enabled [ 279.558911][ T26] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 279.568619][T13341] EXT4-fs (loop4): orphan cleanup on readonly fs [ 279.575212][T13351] EXT4-fs (loop2): Test dummy encryption mode enabled [ 279.575216][T13349] EXT4-fs (loop1): Ignoring removed oldalloc option [ 279.575951][T13341] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 279.601839][T13351] EXT4-fs (loop2): Ignoring removed bh option [ 279.602257][T13341] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #15: comm syz.4.6522: corrupted inode contents [ 279.616037][T13351] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 279.616037][T13351] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 279.616037][T13351] [ 279.634860][T13349] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.6525: inode has both inline data and extents flags [ 279.637656][T13351] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 279.656806][T13341] EXT4-fs error (device loop4): ext4_dirty_inode:6108: inode #15: comm syz.4.6522: mark_inode_dirty error [ 279.672766][T13351] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284e4028, mo2=0003] [ 279.681058][T13351] System zones: 0-5 [ 279.686485][T13351] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,usrjquota=,bh,noacl,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 279.690348][T13349] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.6525: couldn't read orphan inode 15 (err -117) [ 279.724377][T13349] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 279.726630][T13341] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #15: comm syz.4.6522: corrupted inode contents [ 279.769807][T13351] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.6526: bad entry in directory: inode out of bounds - offset=60, inode=65537, rec_len=16, size=4096 fake=0 [ 279.790236][T13351] EXT4-fs (loop2): Remounting filesystem read-only [ 279.800960][T13341] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2954: inode #15: comm syz.4.6522: mark_inode_dirty error [ 279.819321][T13341] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2957: inode #15: comm syz.4.6522: mark inode dirty (error -117) [ 279.832783][T13349] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 279.839673][T13341] EXT4-fs warning (device loop4): ext4_evict_inode:305: xattr delete (err -117) [ 279.859404][T13341] EXT4-fs (loop4): 1 orphan inode deleted [ 279.865258][T13341] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,auto_da_alloc=0x0000000000000004,debug_want_extra_isize=0x000000000000005c,delalloc,noauto_da_alloc,grpquota,init_itable=0x0000000000008d55,,errors=continue. Quota mode: writeback. [ 279.866335][T13373] device sit0 entered promiscuous mode [ 279.896585][T13373] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6536'. [ 279.953709][T13378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.960974][T13378] IPv6: NLM_F_CREATE should be set when creating new route [ 279.968337][T13378] IPv6: NLM_F_CREATE should be set when creating new route [ 280.006960][T13375] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 280.025148][T13375] ext4 filesystem being mounted at /1118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.100450][T13401] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6549'. [ 280.168040][T13413] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6555'. [ 280.320681][T13447] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.413712][ T1343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 280.441179][ T1343] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 280.464991][T13474] xt_policy: too many policy elements [ 280.743667][ T26] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 280.775181][T13525] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.809498][T13529] EXT4-fs (loop4): Test dummy encryption mode enabled [ 280.816313][T13529] EXT4-fs (loop4): Ignoring removed oldalloc option [ 280.824046][T13532] EXT4-fs (loop3): Test dummy encryption mode enabled [ 280.837695][T13532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 280.868484][T13532] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 211 vs 220 free clusters [ 280.892162][T13529] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.6612: inode has both inline data and extents flags [ 280.892989][T13532] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 280.940054][T13529] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.6612: couldn't read orphan inode 15 (err -117) [ 280.983173][T13532] EXT4-fs (loop3): 1 truncate cleaned up [ 280.988970][T13529] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 281.014290][T13569] ipt_REJECT: TCP_RESET invalid for non-tcp [ 281.015484][T13532] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,test_dummy_encryption,debug_want_extra_isize=0x000000000000006e,user_xattr,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 281.085391][T13576] device sit0 left promiscuous mode [ 281.132386][T13576] device bridge_slave_0 left promiscuous mode [ 281.150557][T13576] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.170501][T13576] device bridge_slave_1 left promiscuous mode [ 281.177768][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.236191][ T1343] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.444961][T13634] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 281.477602][T13614] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 281.493268][T13614] ext4 filesystem being mounted at /1178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.530528][T13648] set_capacity_and_notify: 13 callbacks suppressed [ 281.530544][T13648] loop6: detected capacity change from 0 to 256 [ 281.583910][T13659] kernel profiling enabled (shift: 63) [ 281.598184][T13659] profiling shift: 63 too large [ 281.608320][T13663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.777734][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6690'. [ 282.009155][T13733] loop6: detected capacity change from 0 to 256 [ 282.054044][T13747] device bridge_slave_0 left promiscuous mode [ 282.055448][T13749] loop4: detected capacity change from 0 to 512 [ 282.061281][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.085680][T13747] device bridge_slave_1 left promiscuous mode [ 282.091886][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.115061][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 282.133410][ T26] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 282.142706][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.162141][T13749] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 282.170237][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 282.182541][T13749] ext4 filesystem being mounted at /1318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.209349][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.218671][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.227057][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.235473][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.243869][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.463533][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6747'. [ 282.472829][T13812] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6747'. [ 282.490144][T13812] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6747'. [ 282.502198][T13814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6748'. [ 282.529309][T13821] netlink: 'syz.4.6749': attribute type 1 has an invalid length. [ 282.560898][T13827] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 282.578992][T13827] SELinux: failed to load policy [ 282.653543][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 282.653571][ T30] audit: type=1400 audit(2000000007.168:1204): avc: denied { append } for pid=13842 comm="syz.4.6762" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 282.665561][T13843] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.696101][T13847] loop2: detected capacity change from 0 to 256 [ 282.732454][T13847] exfat: Deprecated parameter 'utf8' [ 282.769933][T13847] exfat: Deprecated parameter 'utf8' [ 282.775744][T13847] exfat: Deprecated parameter 'namecase' [ 282.781985][T13847] exfat: Deprecated parameter 'namecase' [ 282.798877][T13847] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 282.833608][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6775'. [ 282.890348][T13883] loop4: detected capacity change from 0 to 256 [ 282.977377][ T964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.150914][T13933] netlink: 'syz.6.6808': attribute type 3 has an invalid length. [ 283.191096][T13941] loop6: detected capacity change from 0 to 128 [ 283.222819][T13948] exfat: Deprecated parameter 'debug' [ 283.235188][T13948] No source specified [ 283.260363][T13941] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.315469][T13941] ext4 filesystem being mounted at /1260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.422844][ T30] audit: type=1400 audit(2000000007.888:1205): avc: denied { write } for pid=13940 comm="syz.6.6811" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.588064][ T30] audit: type=1400 audit(2000000008.038:1206): avc: denied { getopt } for pid=14016 comm="syz.2.6848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 283.615729][ T30] audit: type=1326 audit(2000000008.075:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14022 comm="syz.1.6851" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f91159 code=0x7ffc0000 [ 283.647277][ T30] audit: type=1326 audit(2000000008.075:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14022 comm="syz.1.6851" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f91159 code=0x7ffc0000 [ 283.679366][ T30] audit: type=1326 audit(2000000008.075:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14022 comm="syz.1.6851" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1314f91159 code=0x7ffc0000 [ 283.714056][ T964] usb 7-1: new full-speed USB device number 118 using dummy_hcd [ 283.736254][ T30] audit: type=1326 audit(2000000008.075:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14022 comm="syz.1.6851" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f91159 code=0x7ffc0000 [ 283.777621][T14045] loop3: detected capacity change from 0 to 256 [ 283.787012][ T30] audit: type=1326 audit(2000000008.075:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14022 comm="syz.1.6851" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1314f91159 code=0x7ffc0000 [ 283.817140][T14045] exfat: Deprecated parameter 'namecase' [ 283.821807][ T30] audit: type=1400 audit(2000000008.141:1212): avc: denied { connect } for pid=14030 comm="syz.1.6855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.825950][T14045] exfat: Deprecated parameter 'namecase' [ 283.853901][ T30] audit: type=1400 audit(2000000008.178:1213): avc: denied { ioctl } for pid=14033 comm="syz.1.6857" path="socket:[56877]" dev="sockfs" ino=56877 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.876402][T14045] exfat: Deprecated parameter 'namecase' [ 283.894125][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.901405][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.914292][T14045] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 284.025361][T14059] loop1: detected capacity change from 0 to 256 [ 284.073270][T14059] FAT-fs (loop1): Directory bread(block 64) failed [ 284.088523][T14059] FAT-fs (loop1): Directory bread(block 65) failed [ 284.103000][T14059] FAT-fs (loop1): Directory bread(block 66) failed [ 284.109498][ T964] usb 7-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 284.109754][T14059] FAT-fs (loop1): Directory bread(block 67) failed [ 284.131598][ T964] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.133658][T14072] netem: change failed [ 284.145955][T14059] FAT-fs (loop1): Directory bread(block 68) failed [ 284.154347][T14059] FAT-fs (loop1): Directory bread(block 69) failed [ 284.155913][T14074] loop4: detected capacity change from 0 to 256 [ 284.160993][T14059] FAT-fs (loop1): Directory bread(block 70) failed [ 284.181515][T14059] FAT-fs (loop1): Directory bread(block 71) failed [ 284.192343][T14059] FAT-fs (loop1): Directory bread(block 72) failed [ 284.199153][T14059] FAT-fs (loop1): Directory bread(block 73) failed [ 284.210864][T14074] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 284.227012][ T964] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 284.247521][ T964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.269282][ T964] usb 7-1: SerialNumber: syz [ 284.327811][ T964] usb 7-1: 0:2 : does not exist [ 284.332754][ T964] usb 7-1: unit 92 not found! [ 284.553818][ T964] usb 7-1: USB disconnect, device number 118 [ 284.575734][T14128] device bridge_slave_0 left promiscuous mode [ 284.593027][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.608721][T14128] device bridge_slave_1 left promiscuous mode [ 284.617017][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.655118][T14128] device veth0_vlan left promiscuous mode [ 284.661157][T14128] device veth0_vlan entered promiscuous mode [ 284.674652][T14128] device veth1_macvtap entered promiscuous mode [ 284.689437][T14128] device vti0 left promiscuous mode [ 284.695133][T14128] device bridge2 left promiscuous mode [ 284.702732][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.711782][ T26] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 284.721976][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.730092][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.738430][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.747130][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.764620][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.775188][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 284.795508][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.818857][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 284.827679][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.837181][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.845387][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.845591][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.864323][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.874389][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.882788][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.891751][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.904335][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.913704][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.922094][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.930284][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.938563][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.946881][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.955287][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.963857][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.971966][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.979982][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.985631][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 284.987532][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.999861][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.008131][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.016259][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.023950][T14137] netlink: 'syz.3.6907': attribute type 14 has an invalid length. [ 285.031904][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 285.031919][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 285.047235][T14159] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.072635][T14165] __nla_validate_parse: 70 callbacks suppressed [ 285.072657][T14165] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6920'. [ 285.106217][T14169] futex_wake_op: syz.4.6922 tries to shift op by 32; fix this program [ 285.178094][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.260529][T14192] loop1: detected capacity change from 0 to 256 [ 285.274196][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.317518][ T4266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 285.460413][ T26] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 285.489290][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.508834][ T26] usb 3-1: Product: syz [ 285.519929][ T26] usb 3-1: Manufacturer: syz [ 285.530833][ T26] usb 3-1: SerialNumber: syz [ 285.555083][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.565939][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.575196][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.585324][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.596283][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.606368][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.616721][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.627370][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.637242][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6945'. [ 285.769934][T14231] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 285.798689][T14231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c01c, mo2=0002] [ 285.807215][T14231] EXT4-fs (loop6): orphan cleanup on readonly fs [ 285.816061][T14231] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #13: comm syz.6.6954: iget: bad i_size value: 12154761577498 [ 285.835174][T14231] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.6954: couldn't read orphan inode 13 (err -117) [ 285.864032][T14231] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noblock_validity,nodelalloc,,errors=continue. Quota mode: none. [ 285.925254][T14231] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.6954: dx entry: limit 65535 != root limit 120 [ 285.938864][T14231] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6954: Corrupt directory, running e2fsck is recommended [ 286.085861][T14270] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 286.095294][ T26] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 286.128865][ T26] usb 3-1: USB disconnect, device number 117 [ 286.139908][ T4266] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 286.179015][T14270] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 286.197205][T14270] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.358469][T14323] netlink: 'syz.1.6997': attribute type 16 has an invalid length. [ 286.366496][T14323] netlink: 'syz.1.6997': attribute type 17 has an invalid length. [ 286.401428][T14323] device bridge_slave_0 left promiscuous mode [ 286.416317][T14323] device veth0_vlan left promiscuous mode [ 286.422663][T14323] device veth0_vlan entered promiscuous mode [ 286.429920][T14331] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 286.430230][T14323] device veth1_macvtap left promiscuous mode [ 286.449212][T14323] device veth1_macvtap entered promiscuous mode [ 286.459630][T14325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.475575][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.488391][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.496154][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.504662][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.513150][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.521808][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.531000][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 286.539295][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.551015][T14335] FAT-fs (loop3): Directory bread(block 64) failed [ 286.552682][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 286.572859][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.576974][T14335] FAT-fs (loop3): Directory bread(block 65) failed [ 286.584400][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.595547][T14335] FAT-fs (loop3): Directory bread(block 66) failed [ 286.597662][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.619637][T14335] FAT-fs (loop3): Directory bread(block 67) failed [ 286.625910][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.643874][T14335] FAT-fs (loop3): Directory bread(block 68) failed [ 286.646250][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.658858][T14335] FAT-fs (loop3): Directory bread(block 69) failed [ 286.665641][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.675151][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.693694][T14335] FAT-fs (loop3): Directory bread(block 70) failed [ 286.717672][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.729063][T14335] FAT-fs (loop3): Directory bread(block 71) failed [ 286.734392][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.743053][T14335] FAT-fs (loop3): Directory bread(block 72) failed [ 286.745111][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.750520][T14335] FAT-fs (loop3): Directory bread(block 73) failed [ 286.760931][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.781629][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.793379][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.802050][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.810969][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.819650][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.829220][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.838159][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.845861][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.853362][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.867946][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.876206][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.911170][ T4266] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 286.983833][T14382] set_capacity_and_notify: 4 callbacks suppressed [ 286.983850][T14382] loop4: detected capacity change from 0 to 256 [ 287.122946][ T964] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 287.141349][T14382] FAT-fs (loop4): Directory bread(block 64) failed [ 287.155506][T14382] FAT-fs (loop4): Directory bread(block 65) failed [ 287.186652][T14382] FAT-fs (loop4): Directory bread(block 66) failed [ 287.201518][T14382] FAT-fs (loop4): Directory bread(block 67) failed [ 287.214211][T14382] FAT-fs (loop4): Directory bread(block 68) failed [ 287.241095][T14382] FAT-fs (loop4): Directory bread(block 69) failed [ 287.257421][T14382] FAT-fs (loop4): Directory bread(block 70) failed [ 287.272948][T14382] FAT-fs (loop4): Directory bread(block 71) failed [ 287.279918][T14382] FAT-fs (loop4): Directory bread(block 72) failed [ 287.294318][T14382] FAT-fs (loop4): Directory bread(block 73) failed [ 287.319103][T14424] usb usb9: usbfs: process 14424 (syz.3.7046) did not claim interface 0 before use [ 287.358133][ T964] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 287.422067][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.456097][T14450] binfmt_misc: register: failed to install interpreter file ./cgroup [ 287.545313][T14469] mip6: mip6_rthdr_init_state: state's mode is not 2: 1 [ 287.599240][T14480] loop6: detected capacity change from 0 to 256 [ 287.620223][T14485] ipt_REJECT: TCP_RESET invalid for non-tcp [ 287.660500][T14493] netlink: 'syz.1.7081': attribute type 3 has an invalid length. [ 287.679165][T14493] netlink: 'syz.1.7081': attribute type 3 has an invalid length. [ 287.721796][T14505] netlink: 'syz.4.7085': attribute type 15 has an invalid length. [ 287.828339][T14526] xt_TCPMSS: Only works on TCP SYN packets [ 287.908632][T14537] loop6: detected capacity change from 0 to 256 [ 288.012918][T14552] netlink: 'syz.4.7111': attribute type 1 has an invalid length. [ 288.039662][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 288.039679][ T30] audit: type=1400 audit(2000000012.212:1299): avc: denied { watch watch_reads } for pid=14559 comm="syz.2.7114" path="/1254" dev="tmpfs" ino=6408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 288.145900][ T30] audit: type=1400 audit(2000000012.315:1300): avc: denied { read } for pid=14576 comm="syz.1.7123" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.189179][ T30] audit: type=1400 audit(2000000012.315:1301): avc: denied { open } for pid=14576 comm="syz.1.7123" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.226665][ T30] audit: type=1400 audit(2000000012.315:1302): avc: denied { ioctl } for pid=14576 comm="syz.1.7123" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.257243][ T30] audit: type=1400 audit(2000000012.333:1303): avc: denied { read } for pid=14582 comm="syz.2.7126" dev="nsfs" ino=4026532591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 288.357285][ T30] audit: type=1400 audit(2000000012.333:1304): avc: denied { open } for pid=14582 comm="syz.2.7126" path="net:[4026532591]" dev="nsfs" ino=4026532591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 288.392743][ T30] audit: type=1400 audit(2000000012.333:1305): avc: denied { create } for pid=14582 comm="syz.2.7126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 288.425256][ T30] audit: type=1400 audit(2000000012.343:1306): avc: denied { setopt } for pid=14582 comm="syz.2.7126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 288.445703][ T30] audit: type=1400 audit(2000000012.343:1307): avc: denied { read write } for pid=14581 comm="syz.4.7124" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 288.454628][T14623] loop6: detected capacity change from 0 to 512 [ 288.472825][ T30] audit: type=1400 audit(2000000012.343:1308): avc: denied { open } for pid=14581 comm="syz.4.7124" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 288.504324][T14623] EXT4-fs (loop6): Test dummy encryption mode enabled [ 288.514496][T14623] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 288.530234][ T964] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 288.553075][T14646] xt_TCPMSS: Only works on TCP SYN packets [ 288.561445][ T964] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 288.568155][T14623] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.7144: bad orphan inode 131083 [ 288.580476][T14623] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 288.738732][T14674] loop1: detected capacity change from 0 to 1024 [ 288.802485][T14674] EXT4-fs (loop1): Ignoring removed nobh option [ 288.832654][T14674] EXT4-fs (loop1): Ignoring removed orlov option [ 288.858825][T14700] netlink: 'syz.4.7178': attribute type 3 has an invalid length. [ 288.867725][T14674] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobh,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 288.919147][T14709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.952008][T14713] netlink: 'syz.6.7186': attribute type 5 has an invalid length. [ 288.997167][T14723] kernel profiling enabled (shift: 23) [ 289.084640][T14733] netlink: 'syz.6.7195': attribute type 16 has an invalid length. [ 289.110832][T14733] netlink: 'syz.6.7195': attribute type 17 has an invalid length. [ 289.175007][ T60] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 289.226771][T14755] xt_CT: No such helper "netbios-ns" [ 289.272853][T14759] loop4: detected capacity change from 0 to 256 [ 289.285577][T14763] SELinux: syz.2.7210 (14763) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 289.668424][T14833] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 289.688725][T14837] device vlan0 entered promiscuous mode [ 289.736039][T14847] loop4: detected capacity change from 0 to 1024 [ 289.829932][T14847] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.840318][T14876] SELinux: policydb string length 0 does not match expected length 8 [ 289.867710][T14876] SELinux: failed to load policy [ 289.890246][T14881] device vti0 entered promiscuous mode [ 290.061180][T14924] xt_ecn: cannot match TCP bits for non-tcp packets [ 290.196914][T14951] netlink: 'syz.3.7302': attribute type 16 has an invalid length. [ 290.223326][T14951] netlink: 'syz.3.7302': attribute type 17 has an invalid length. [ 290.261941][T14951] device veth0_vlan left promiscuous mode [ 290.277825][T14951] device veth0_vlan entered promiscuous mode [ 290.302839][T14951] device veth1_macvtap entered promiscuous mode [ 290.310096][T14951] device sit1 left promiscuous mode [ 290.319834][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.328169][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.335259][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.344323][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 290.353841][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.364783][T14951] syz.3.7302 (14951) used greatest stack depth: 20864 bytes left [ 290.384082][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.392088][ T985] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.402574][T14963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.419474][T14964] IPv6: sit3: Disabled Multicast RS [ 290.424201][T14971] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 290.435940][T14971] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 290.454180][T14971] overlayfs: missing 'lowerdir' [ 290.468999][T14977] netlink: 'syz.6.7316': attribute type 13 has an invalid length. [ 290.536342][T14991] netlink: 'syz.1.7324': attribute type 12 has an invalid length. [ 290.550847][T14989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.638792][T15011] netlink: 'syz.1.7333': attribute type 30 has an invalid length. [ 290.855711][T15060] usb usb7: usbfs: process 15060 (syz.1.7356) did not claim interface 7 before use [ 290.928187][ T60] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 290.928205][ T60] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 290.951511][ T60] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 290.966645][ T998] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 290.980911][ T26] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 290.994314][T15087] loop4: detected capacity change from 0 to 16 [ 291.027352][T15094] loop6: detected capacity change from 0 to 256 [ 291.107039][T15087] erofs: (device loop4): mounted with root inode @ nid 36. [ 291.217230][T15142] xt_socket: unknown flags 0x58 [ 291.375967][ T26] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 291.392456][T15174] loop4: detected capacity change from 0 to 512 [ 291.394308][ T26] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 291.416553][T15174] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 291.435067][T15174] ext4 filesystem being mounted at /1458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.456558][T15186] __nla_validate_parse: 61 callbacks suppressed [ 291.456578][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7418'. [ 291.568340][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.588063][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 291.610345][ T26] usb 4-1: Product: syz [ 291.621907][ T26] usb 4-1: Manufacturer: syz [ 291.635132][T15217] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7433'. [ 291.697764][T15227] xt_l2tp: v2 tid > 0xffff: 134217728 [ 291.921406][ T26] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 291.934537][ T26] usb 4-1: USB disconnect, device number 115 [ 291.943215][T15229] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 291.953307][ T60] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 291.962865][ T60] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 291.970059][T15229] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 291.991184][T15229] F2FS-fs (loop1): invalid crc value [ 291.998377][T15229] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 292.047095][T15229] F2FS-fs (loop1): Start checkpoint disabled! [ 292.074251][T15274] device vti0 left promiscuous mode [ 292.079894][T15229] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 292.088404][T15229] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 292.102963][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.275491][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7478'. [ 292.335094][T15313] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 292.476621][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 292.524860][T15303] set_capacity_and_notify: 1 callbacks suppressed [ 292.524878][T15303] loop6: detected capacity change from 0 to 40427 [ 292.572968][T15346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7498'. [ 292.586697][T15303] F2FS-fs (loop6): fault_injection options not supported [ 292.596820][T15303] F2FS-fs (loop6): fault_type options not supported [ 292.612944][T15303] F2FS-fs (loop6): invalid crc value [ 292.626259][T15303] F2FS-fs (loop6): Found nat_bits in checkpoint [ 292.643003][T15358] xt_TCPMSS: Only works on TCP SYN packets [ 292.659587][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7503'. [ 292.674618][T15303] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 292.682225][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7503'. [ 292.724135][T15363] overlayfs: failed to resolve './bus': -2 [ 292.774319][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7511'. [ 292.807967][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 293.060816][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7533'. [ 293.115266][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7533'. [ 293.166250][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7541'. [ 293.353764][T15433] device vlan0 left promiscuous mode [ 293.387212][T15435] device bridge1 entered promiscuous mode [ 293.602786][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 293.602803][ T30] audit: type=1400 audit(2000000017.424:1418): avc: denied { getopt } for pid=15463 comm="syz.1.7555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.693392][ T30] audit: type=1400 audit(2000000017.499:1419): avc: denied { getopt } for pid=15480 comm="syz.3.7564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 293.775909][T15496] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 293.790002][ T30] audit: type=1400 audit(2000000017.593:1420): avc: denied { write } for pid=15504 comm="syz.1.7575" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 293.870976][ T30] audit: type=1326 audit(2000000017.621:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.6.7577" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc569f5159 code=0x7ffc0000 [ 293.909665][ T30] audit: type=1326 audit(2000000017.621:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.6.7577" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc569f5159 code=0x7ffc0000 [ 293.977138][ T30] audit: type=1326 audit(2000000017.621:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.6.7577" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc569f5159 code=0x7ffc0000 [ 294.023898][ T30] audit: type=1326 audit(2000000017.621:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.6.7577" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fbc569f5159 code=0x7ffc0000 [ 294.063738][ T30] audit: type=1326 audit(2000000017.621:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.6.7577" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc569f5159 code=0x7ffc0000 [ 294.099582][ T30] audit: type=1326 audit(2000000017.621:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.6.7577" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc569f5159 code=0x7ffc0000 [ 294.145105][ T30] audit: type=1326 audit(2000000017.621:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.6.7577" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbc569f5159 code=0x7ffc0000 [ 294.218395][ T26] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 294.357285][ T998] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 294.496234][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 294.496420][T15634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.635191][ T26] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 294.649218][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.662360][ T26] usb 5-1: config 0 has no interface number 0 [ 294.673354][ T26] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 294.688227][ T26] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 294.699420][ T26] usb 5-1: config 0 interface 98 has no altsetting 0 [ 294.721291][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.728543][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.784936][ T998] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.798206][ T998] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 294.808653][ T998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.870274][ T26] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 294.879371][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.888033][ T998] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 294.938002][T15679] loop3: detected capacity change from 0 to 1024 [ 294.941635][ T26] usb 5-1: Product: syz [ 294.948671][ T26] usb 5-1: Manufacturer: syz [ 294.953326][ T26] usb 5-1: SerialNumber: syz [ 294.958804][ T26] usb 5-1: config 0 descriptor?? [ 294.964558][T15679] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 294.964558][T15679] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 294.964558][T15679] [ 294.983035][T15679] EXT4-fs (loop3): Ignoring removed orlov option [ 294.983090][T15522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 294.996637][T15522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 295.005118][T15679] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,norecovery,nouser_xattr,orlov,nombcache,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 295.119700][ T20] usb 7-1: USB disconnect, device number 119 [ 295.269111][T15522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 295.276136][T15522] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 295.369761][T15750] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 295.423108][T15758] loop2: detected capacity change from 0 to 256 [ 295.543517][ T26] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 295.556176][ T26] asix: probe of 5-1:0.98 failed with error -71 [ 295.563668][ T26] usb 5-1: USB disconnect, device number 117 [ 295.639622][ T6] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 295.778232][T15812] lo: Caught tx_queue_len zero misconfig [ 295.823121][T15818] xt_l2tp: v2 doesn't support IP mode [ 296.740403][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.782975][ C0] sched: RT throttling activated [ 296.857973][T15817] device xfrm0 entered promiscuous mode [ 296.864923][T15822] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.965702][T15844] loop6: detected capacity change from 0 to 256 [ 296.997229][T15850] __nla_validate_parse: 122 callbacks suppressed [ 296.997251][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7740'. [ 297.018244][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 297.026321][T15856] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 297.093042][ T6] usb 4-1: not running at top speed; connect to a high speed hub [ 297.162005][T15881] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.199899][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.218647][T15893] netlink: 45 bytes leftover after parsing attributes in process `syz.1.7761'. [ 297.228414][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.275512][T15900] xt_l2tp: invalid flags combination: c [ 297.302608][T15904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7767'. [ 297.331350][T15910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7770'. [ 297.373922][T15922] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7774'. [ 297.391720][T15922] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7774'. [ 297.445627][ T6] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 297.461527][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.478476][ T6] usb 4-1: Product: syz [ 297.489249][ T6] usb 4-1: Manufacturer: syz [ 297.494251][ T6] usb 4-1: SerialNumber: syz [ 297.506693][T15939] loop2: detected capacity change from 0 to 512 [ 297.541271][T15946] loop4: detected capacity change from 0 to 512 [ 297.609130][T15946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.622740][T15946] ext4 filesystem being mounted at /1498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.671493][T15939] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.7784: inode #1: comm syz.2.7784: iget: illegal inode # [ 297.703713][T15939] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.7784: error while reading EA inode 1 err=-117 [ 297.725013][T15939] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.7784: inode #1: comm syz.2.7784: iget: illegal inode # [ 297.743684][T15939] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.7784: error while reading EA inode 1 err=-117 [ 297.756800][T15939] EXT4-fs (loop2): 1 orphan inode deleted [ 297.757090][T15969] validate_nla: 6 callbacks suppressed [ 297.757104][T15969] netlink: 'syz.4.7793': attribute type 10 has an invalid length. [ 297.762553][T15939] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,bsdgroups,noinit_itable,,errors=continue. Quota mode: writeback. [ 297.848395][T15973] loop6: detected capacity change from 0 to 512 [ 297.969956][T15992] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.7807'. [ 297.995281][T15973] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 298.031995][T15973] ext4 filesystem being mounted at /1435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.042664][ T6] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x300, type = 4 [ 298.071181][ T6] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 298.133528][ T6] usb 4-1: USB disconnect, device number 116 [ 298.169122][ T1156] udevd[1156]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.377436][T16030] loop6: detected capacity change from 0 to 256 [ 298.463625][T16030] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 298.532790][T16059] xt_TCPMSS: Only works on TCP SYN packets [ 298.560536][T16063] netlink: 'syz.4.7844': attribute type 10 has an invalid length. [ 298.563619][T15965] loop1: detected capacity change from 0 to 131072 [ 298.580019][T16063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.612990][T16071] xt_l2tp: v2 doesn't support IP mode [ 298.667407][T15965] F2FS-fs (loop1): invalid crc value [ 298.691709][T15965] F2FS-fs (loop1): Found nat_bits in checkpoint [ 298.818519][T16110] xt_TCPMSS: Only works on TCP SYN packets [ 298.829783][T15965] F2FS-fs (loop1): recover fsync data on readonly fs [ 298.854051][T15965] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 298.918099][T15965] F2FS-fs (loop1): Corrupted max_depth of 3: 16842753 [ 298.965858][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 298.965875][ T30] audit: type=1400 audit(2000000022.440:1469): avc: denied { write } for pid=16133 comm="syz.2.7877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.101210][ T30] audit: type=1400 audit(2000000022.562:1470): avc: denied { getopt } for pid=16147 comm="syz.3.7885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 299.104507][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7886'. [ 299.177584][T16153] device vti1 entered promiscuous mode [ 299.186140][T16158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.269578][T16168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7895'. [ 299.274930][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7896'. [ 299.349230][T16176] loop6: detected capacity change from 0 to 256 [ 299.432195][T16176] FAT-fs (loop6): Directory bread(block 64) failed [ 299.440252][ T30] audit: type=1400 audit(2000000022.880:1471): avc: denied { sys_module } for pid=16196 comm="syz.2.7908" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 299.443600][T16176] FAT-fs (loop6): Directory bread(block 65) failed [ 299.507762][T16176] FAT-fs (loop6): Directory bread(block 66) failed [ 299.509030][T16209] x_tables: duplicate entry at hook 4 [ 299.525542][ T30] audit: type=1400 audit(2000000022.964:1472): avc: denied { create } for pid=16210 comm="syz.3.7916" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 299.542311][T16212] netlink: 'syz.2.7915': attribute type 3 has an invalid length. [ 299.549667][T16211] loop3: detected capacity change from 0 to 512 [ 299.554250][T16176] FAT-fs (loop6): Directory bread(block 67) failed [ 299.572179][T16176] FAT-fs (loop6): Directory bread(block 68) failed [ 299.583091][T16176] FAT-fs (loop6): Directory bread(block 69) failed [ 299.602119][T16176] FAT-fs (loop6): Directory bread(block 70) failed [ 299.623708][T16176] FAT-fs (loop6): Directory bread(block 71) failed [ 299.635853][T16221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.641006][T16176] FAT-fs (loop6): Directory bread(block 72) failed [ 299.643117][T16221] IPv6: NLM_F_CREATE should be set when creating new route [ 299.649696][T16176] FAT-fs (loop6): Directory bread(block 73) failed [ 299.656912][T16221] IPv6: NLM_F_CREATE should be set when creating new route [ 299.677175][T16211] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,journal_path=./file0,,errors=continue. Quota mode: writeback. [ 299.694596][T16211] ext4 filesystem being mounted at /1383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.766748][ T30] audit: type=1400 audit(2000000023.189:1473): avc: denied { bind } for pid=16237 comm="syz.2.7927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 299.822773][ T30] audit: type=1400 audit(2000000023.189:1474): avc: denied { unlink } for pid=1010 comm="syz-executor" name="file0" dev="tmpfs" ino=7084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 301.037346][ T30] audit: type=1400 audit(2000000023.226:1475): avc: denied { write } for pid=16239 comm="syz.3.7925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 302.165906][ T30] audit: type=1400 audit(2000000025.435:1476): avc: denied { write } for pid=16286 comm="syz.3.7951" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 302.284498][T16302] gretap0: refused to change device tx_queue_len [ 302.314466][T16302] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.387543][T16324] x_tables: duplicate underflow at hook 2 [ 302.500444][T16334] loop2: detected capacity change from 0 to 512 [ 302.529731][T16340] loop6: detected capacity change from 0 to 256 [ 302.579147][T16334] EXT4-fs (loop2): Ignoring removed nobh option [ 302.607364][T16334] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 302.644970][T16334] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.7972: attempt to clear invalid blocks 1 len 1 [ 302.714061][T16334] EXT4-fs (loop2): Remounting filesystem read-only [ 302.720741][T16334] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 302.736025][T16363] __nla_validate_parse: 2 callbacks suppressed [ 302.736043][T16363] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7987'. [ 302.746060][T16334] EXT4-fs (loop2): Remounting filesystem read-only [ 302.789259][T16334] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.7972: invalid indirect mapped block 1819239214 (level 0) [ 302.832470][T16334] EXT4-fs (loop2): Remounting filesystem read-only [ 302.848879][ T30] audit: type=1400 audit(2000000026.071:1477): avc: denied { read write } for pid=16378 comm="syz.6.7995" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 302.849688][T16334] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.7972: invalid indirect mapped block 1819239214 (level 1) [ 302.891927][T16381] binder: 16378:16381 ioctl c018620c 2000000000c0 returned -1 [ 302.894490][T16383] netlink: 'syz.4.7997': attribute type 49 has an invalid length. [ 302.913322][ T30] audit: type=1400 audit(2000000026.071:1478): avc: denied { open } for pid=16378 comm="syz.6.7995" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 302.923803][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7999'. [ 302.967115][T16334] EXT4-fs (loop2): Remounting filesystem read-only [ 302.984007][T16334] EXT4-fs (loop2): 1 truncate cleaned up [ 303.005208][T16334] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 303.048060][T16397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.055323][T16397] IPv6: NLM_F_CREATE should be set when creating new route [ 303.062578][T16397] IPv6: NLM_F_CREATE should be set when creating new route [ 303.175760][T16415] x_tables: duplicate entry at hook 3 [ 303.200755][T16419] netlink: 'syz.4.8015': attribute type 5 has an invalid length. [ 303.490266][T16461] loop1: detected capacity change from 0 to 512 [ 303.555410][T16424] loop6: detected capacity change from 0 to 40427 [ 303.563313][T16461] EXT4-fs (loop1): Ignoring removed bh option [ 303.572273][T16461] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (0) [ 303.648365][T16424] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 303.670027][T16499] device syz_tun entered promiscuous mode [ 303.673916][T16424] F2FS-fs (loop6): invalid crc value [ 303.675960][T16461] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 303.691427][T16499] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 303.707703][T16461] SELinux: security_context_str_to_sid(user_u) failed for (dev bpf, type bpf) errno=-22 [ 303.729075][T16497] loop2: detected capacity change from 0 to 2048 [ 303.745163][T16424] F2FS-fs (loop6): Found nat_bits in checkpoint [ 303.804476][T16424] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 303.812286][T16424] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 303.831662][T16523] loop1: detected capacity change from 0 to 16 [ 303.832125][T16424] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 303.871875][T16497] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000ffc,abort,,errors=continue. Quota mode: none. [ 303.873588][T16536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8068'. [ 303.970729][T16523] erofs: (device loop1): mounted with root inode @ nid 36. [ 304.004898][T16523] attempt to access beyond end of device [ 304.004898][T16523] loop1: rw=0, want=34359738368, limit=16 [ 304.140126][T16572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8087'. [ 304.182237][T16576] netlink: 'syz.4.8089': attribute type 5 has an invalid length. [ 304.249373][T16582] loop2: detected capacity change from 0 to 4096 [ 304.291867][T16600] netlink: 'syz.3.8101': attribute type 15 has an invalid length. [ 304.309678][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8101'. [ 304.319071][T16582] EXT4-fs (loop2): Test dummy encryption mode enabled [ 304.341858][T16582] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 304.357723][T16582] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 304.387377][T16582] EXT4-fs (loop2): Test dummy encryption mode enabled [ 304.403876][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8107'. [ 304.419901][T16582] EXT4-fs (loop2): re-mounted. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,. Quota mode: writeback. [ 304.446736][T16623] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8111'. [ 304.479198][T16625] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.503423][T16632] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8117'. [ 304.522712][T16632] netlink: 'syz.4.8117': attribute type 1 has an invalid length. [ 304.575438][T16643] netlink: 'syz.6.8121': attribute type 1 has an invalid length. [ 304.619761][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8127'. [ 304.642033][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8127'. [ 304.663585][T16662] loop2: detected capacity change from 0 to 512 [ 304.667903][T16654] netlink: 'syz.4.8127': attribute type 2 has an invalid length. [ 304.712971][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 304.712988][ T30] audit: type=1326 audit(2000000027.821:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16670 comm="syz.3.8136" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad98f5159 code=0x7ffc0000 [ 304.759615][ T30] audit: type=1326 audit(2000000027.821:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16670 comm="syz.3.8136" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad98f5159 code=0x7ffc0000 [ 304.784972][ T30] audit: type=1400 audit(2000000027.840:1499): avc: denied { nlmsg_write } for pid=16676 comm="syz.1.8139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 304.806021][ T30] audit: type=1400 audit(2000000027.840:1500): avc: denied { audit_write } for pid=16676 comm="syz.1.8139" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 304.875461][T16662] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 304.947439][T16662] ext4 filesystem being mounted at /1519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.995302][ T30] audit: type=1107 audit(2000000027.840:1501): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 304.995683][ T30] audit: type=1326 audit(2000000027.849:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16670 comm="syz.3.8136" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5ad98f5159 code=0x7ffc0000 [ 305.010830][T16662] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.8130: corrupted xattr block 33 [ 305.127508][ T30] audit: type=1326 audit(2000000027.858:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16670 comm="syz.3.8136" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad98f5159 code=0x7ffc0000 [ 305.139523][T16662] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 305.158363][ T30] audit: type=1326 audit(2000000027.858:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16670 comm="syz.3.8136" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad98f5159 code=0x7ffc0000 [ 305.191400][T16662] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.8130: corrupted xattr block 33 [ 305.206040][T16662] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 305.225728][T16719] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 305.227538][T16662] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.8130: corrupted xattr block 33 [ 305.236900][T16721] loop6: detected capacity change from 0 to 256 [ 305.247883][T16662] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.8130: corrupted xattr block 33 [ 305.278752][T16662] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 305.287907][T16662] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.8130: corrupted xattr block 33 [ 305.307677][T16662] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 305.329347][T16721] FAT-fs (loop6): Directory bread(block 64) failed [ 305.357300][T16721] FAT-fs (loop6): Directory bread(block 65) failed [ 305.374648][T16721] FAT-fs (loop6): Directory bread(block 66) failed [ 305.386433][T16721] FAT-fs (loop6): Directory bread(block 67) failed [ 305.394065][T16721] FAT-fs (loop6): Directory bread(block 68) failed [ 305.408327][ T30] audit: type=1400 audit(2000000028.466:1505): avc: denied { ioctl } for pid=16738 comm="syz.3.8169" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 305.447055][T16721] FAT-fs (loop6): Directory bread(block 69) failed [ 305.487823][T16721] FAT-fs (loop6): Directory bread(block 70) failed [ 305.516562][T16721] FAT-fs (loop6): Directory bread(block 71) failed [ 305.523182][T16721] FAT-fs (loop6): Directory bread(block 72) failed [ 305.560847][T16721] FAT-fs (loop6): Directory bread(block 73) failed [ 305.665307][T16791] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 305.714088][T16798] : renamed from bond_slave_0 [ 305.890975][T16833] loop2: detected capacity change from 0 to 512 [ 305.942538][T16833] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 305.954590][T16833] EXT4-fs (loop2): 1 truncate cleaned up [ 305.960333][T16833] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 305.982499][T16833] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.8214: Logical block already allocated [ 306.004521][T16833] EXT4-fs (loop2): Remounting filesystem read-only [ 306.164120][T16868] netlink: 'syz.3.8231': attribute type 3 has an invalid length. [ 306.264282][T16886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.657527][T16949] netlink: 'syz.1.8272': attribute type 33 has an invalid length. [ 306.665492][T16949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.699443][T16954] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 306.740689][ T30] audit: type=1400 audit(2000000029.711:1506): avc: denied { read } for pid=16959 comm="syz.1.8278" path="socket:[65929]" dev="sockfs" ino=65929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.840035][T16981] netlink: 'syz.1.8289': attribute type 12 has an invalid length. [ 306.901420][T16992] ip_tables: iptables: counters copy to user failed while replacing table [ 306.941835][T16996] overlayfs: unrecognized mount option "smackfstransmute=\&" or missing value [ 306.956488][T16998] netlink: 'syz.1.8296': attribute type 4 has an invalid length. [ 307.360729][T17056] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 307.398590][T16854] loop4: detected capacity change from 0 to 131072 [ 307.400608][T17056] SELinux: failed to load policy [ 307.426813][T16854] F2FS-fs (loop4): invalid crc value [ 307.481908][T16854] F2FS-fs (loop4): Found nat_bits in checkpoint [ 307.565111][T16854] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 307.634463][T17090] xt_l2tp: wrong L2TP version: 0 [ 307.671153][T16854] F2FS-fs (loop4): Corrupted max_depth of 3: 16842753 [ 307.824706][T17102] loop3: detected capacity change from 0 to 8192 [ 307.904621][T17102] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 307.923762][T17102] FAT-fs (loop3): Filesystem has been set read-only [ 308.147923][T17132] x_tables: duplicate entry at hook 1 [ 308.197412][T16987] loop6: detected capacity change from 0 to 131072 [ 308.582681][T17214] __nla_validate_parse: 20 callbacks suppressed [ 308.582701][T17214] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.8402'. [ 308.614076][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8402'. [ 308.637743][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8402'. [ 308.647119][T17214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8402'. [ 308.680976][T17230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8411'. [ 308.741453][T17244] validate_nla: 4 callbacks suppressed [ 308.741472][T17244] netlink: 'syz.6.8415': attribute type 30 has an invalid length. [ 308.976722][T17313] tc_dump_action: action bad kind [ 309.074655][T17339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8465'. [ 309.094454][T17343] netlink: 'syz.2.8466': attribute type 13 has an invalid length. [ 309.114267][T17347] x_tables: unsorted entry at hook 4 [ 309.116935][T17343] netlink: 'syz.2.8466': attribute type 27 has an invalid length. [ 309.136355][T17351] netlink: 'syz.1.8470': attribute type 2 has an invalid length. [ 309.202544][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8478'. [ 309.377261][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8507'. [ 309.597653][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8526'. [ 309.616984][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8526'. [ 310.082428][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 310.082443][ T30] audit: type=1400 audit(2000000032.846:1721): avc: denied { read write } for pid=1009 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.150709][ T30] audit: type=1400 audit(2000000032.874:1722): avc: denied { read write } for pid=1007 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.204024][ T30] audit: type=1400 audit(2000000032.902:1723): avc: denied { read write } for pid=1009 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.250044][ T30] audit: type=1400 audit(2000000032.949:1724): avc: denied { read write } for pid=1009 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.318713][ T30] audit: type=1400 audit(2000000033.062:1725): avc: denied { read write } for pid=1006 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.374981][ T30] audit: type=1400 audit(2000000033.090:1726): avc: denied { read write } for pid=1006 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.382963][T17519] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 310.431133][ T30] audit: type=1400 audit(2000000033.108:1727): avc: denied { read write } for pid=1009 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.492525][ T30] audit: type=1400 audit(2000000033.155:1728): avc: denied { read write } for pid=1006 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.551840][ T30] audit: type=1400 audit(2000000033.202:1729): avc: denied { read write } for pid=1006 comm="syz-executor" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.628557][ T30] audit: type=1400 audit(2000000033.239:1730): avc: denied { read write } for pid=1009 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 310.688072][T17547] device syz_tun entered promiscuous mode [ 310.695044][T17547] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 310.725445][T17551] IPv6: NLM_F_REPLACE set, but no existing node found! [ 310.756173][T17547] syz.6.8566 (17547) used greatest stack depth: 20736 bytes left [ 310.832535][T17565] IPv6: sit4: Disabled Multicast RS [ 310.997523][T17578] netlink: 'syz.6.8581': attribute type 12 has an invalid length. [ 311.387436][T17634] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 311.474449][T17647] device veth1_virt_wifi entered promiscuous mode [ 312.220056][T17763] netlink: 'syz.3.8671': attribute type 3 has an invalid length. [ 312.488211][T17821] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 312.591073][T17841] xt_ecn: cannot match TCP bits for non-tcp packets [ 312.631537][T17851] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 312.897091][T17912] device lo entered promiscuous mode [ 312.899003][T17912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.919957][T17913] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 313.205935][T17986] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 313.335331][T18017] binfmt_misc: register: failed to install interpreter file ./file0 [ 313.409767][T18047] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 313.467524][T18062] ================================================================== [ 313.475641][T18062] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 313.483830][T18062] Read of size 4 at addr ffff8881157f1470 by task syz.2.8819/18062 [ 313.491746][T18062] [ 313.494089][T18062] CPU: 0 PID: 18062 Comm: syz.2.8819 Tainted: G W syzkaller #0 [ 313.503058][T18062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.513923][T18062] Call Trace: [ 313.517229][T18062] [ 313.520178][T18062] __dump_stack+0x21/0x30 [ 313.524534][T18062] dump_stack_lvl+0x110/0x170 [ 313.529254][T18062] ? show_regs_print_info+0x20/0x20 [ 313.534501][T18062] ? load_image+0x3f0/0x3f0 [ 313.539046][T18062] print_address_description+0x7f/0x2c0 [ 313.544629][T18062] ? unaccount_page_cache_page+0x6f1/0x760 [ 313.550460][T18062] kasan_report+0x10f/0x150 [ 313.554987][T18062] ? unaccount_page_cache_page+0x6f1/0x760 [ 313.560800][T18062] __asan_report_load4_noabort+0x14/0x20 [ 313.566446][T18062] unaccount_page_cache_page+0x6f1/0x760 [ 313.572212][T18062] __delete_from_page_cache+0xbe/0x470 [ 313.577680][T18062] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 313.584792][T18062] ? __kasan_check_write+0x14/0x20 [ 313.589908][T18062] ? __kasan_check_read+0x11/0x20 [ 313.594932][T18062] ? workingset_eviction+0x402/0x9f0 [ 313.600219][T18062] __remove_mapping+0x601/0x990 [ 313.605092][T18062] ? page_remove_rmap+0xf40/0xf40 [ 313.610119][T18062] ? remove_mapping+0xa0/0xa0 [ 313.614818][T18062] ? __kasan_check_read+0x11/0x20 [ 313.619844][T18062] shrink_page_list+0x2a24/0x5800 [ 313.624872][T18062] ? shrink_page_list+0x931/0x5800 [ 313.629991][T18062] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 313.636148][T18062] ? __this_cpu_preempt_check+0x13/0x20 [ 313.641700][T18062] ? __mod_zone_page_state+0x8e/0xd0 [ 313.647082][T18062] ? isolate_lru_pages+0xff1/0x11f0 [ 313.652460][T18062] ? should_run_aging+0x410/0x410 [ 313.657495][T18062] ? cgroup_rstat_updated+0xe0/0x360 [ 313.662786][T18062] ? _raw_spin_lock_irq+0x95/0xf0 [ 313.667809][T18062] ? __this_cpu_preempt_check+0x13/0x20 [ 313.673359][T18062] ? __count_memcg_events+0xad/0x120 [ 313.678643][T18062] shrink_lruvec+0x1297/0x3a40 [ 313.683414][T18062] ? sched_group_set_idle+0x600/0x600 [ 313.688792][T18062] ? mem_cgroup_shrink_node+0x550/0x550 [ 313.694339][T18062] ? __kasan_check_write+0x14/0x20 [ 313.699459][T18062] ? _raw_spin_lock+0x94/0xf0 [ 313.704139][T18062] ? _raw_spin_trylock_bh+0x150/0x150 [ 313.709507][T18062] ? __this_cpu_preempt_check+0x13/0x20 [ 313.715058][T18062] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 313.720865][T18062] ? inactive_is_low+0x160/0x2f0 [ 313.725820][T18062] ? css_next_descendant_pre+0x1e1/0x210 [ 313.731481][T18062] ? mem_cgroup_iter+0x465/0x6c0 [ 313.736419][T18062] shrink_node+0x11ee/0x2a40 [ 313.741022][T18062] ? allow_direct_reclaim+0x370/0x370 [ 313.746394][T18062] do_try_to_free_pages+0x5a7/0x1580 [ 313.751681][T18062] ? try_to_free_pages+0xc50/0xc50 [ 313.756791][T18062] ? propagate_protected_usage+0x84/0x250 [ 313.762538][T18062] try_to_free_mem_cgroup_pages+0x261/0x610 [ 313.768442][T18062] ? shrink_lruvec+0x3a40/0x3a40 [ 313.773392][T18062] ? mutex_unlock+0x8f/0x230 [ 313.777986][T18062] ? __kasan_check_read+0x11/0x20 [ 313.783012][T18062] ? page_counter_set_max+0x65/0x140 [ 313.788298][T18062] mem_cgroup_resize_max+0x309/0x3e0 [ 313.793583][T18062] mem_cgroup_write+0x1ed/0x230 [ 313.798436][T18062] ? mem_cgroup_reset+0x130/0x130 [ 313.803468][T18062] ? __kasan_check_write+0x14/0x20 [ 313.808582][T18062] ? _copy_from_iter+0x4a4/0x10a0 [ 313.813609][T18062] ? mem_cgroup_reset+0x130/0x130 [ 313.818635][T18062] cgroup_file_write+0x294/0x560 [ 313.823575][T18062] ? cgroup_seqfile_stop+0xc0/0xc0 [ 313.828683][T18062] ? mutex_lock+0x9b/0x1c0 [ 313.833100][T18062] ? wait_for_completion_killable_timeout+0x10/0x10 [ 313.839689][T18062] ? __kasan_check_write+0x14/0x20 [ 313.844801][T18062] ? cgroup_seqfile_stop+0xc0/0xc0 [ 313.849998][T18062] kernfs_fop_write_iter+0x2bd/0x400 [ 313.855285][T18062] vfs_write+0x831/0xfd0 [ 313.859525][T18062] ? file_end_write+0x1b0/0x1b0 [ 313.864374][T18062] ? wait_for_completion_killable_timeout+0x10/0x10 [ 313.870964][T18062] ? __fget_files+0x2e1/0x340 [ 313.875642][T18062] ? __fdget_pos+0x2d2/0x380 [ 313.880227][T18062] ? ksys_write+0x70/0x260 [ 313.884640][T18062] ksys_write+0x14a/0x260 [ 313.888967][T18062] ? __ia32_sys_read+0x90/0x90 [ 313.893729][T18062] ? __kasan_check_write+0x14/0x20 [ 313.898838][T18062] ? switch_fpu_return+0x15d/0x2c0 [ 313.903954][T18062] __x64_sys_write+0x7b/0x90 [ 313.908561][T18062] x64_sys_call+0x8ef/0x9a0 [ 313.913079][T18062] do_syscall_64+0x4c/0xa0 [ 313.917509][T18062] ? clear_bhb_loop+0x50/0xa0 [ 313.922192][T18062] ? clear_bhb_loop+0x50/0xa0 [ 313.926870][T18062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.932764][T18062] RIP: 0033:0x7fe13e5c7159 [ 313.937178][T18062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.956781][T18062] RSP: 002b:00007fe13d020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.965199][T18062] RAX: ffffffffffffffda RBX: 00007fe13e84efa0 RCX: 00007fe13e5c7159 [ 313.973175][T18062] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 313.981143][T18062] RBP: 00007fe13e65e06b R08: 0000000000000000 R09: 0000000000000000 [ 313.989115][T18062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.997084][T18062] R13: 00007fe13e84f038 R14: 00007fe13e84efa0 R15: 00007ffc63a38f78 [ 314.005062][T18062] [ 314.008077][T18062] [ 314.010396][T18062] Allocated by task 1009: [ 314.014775][T18062] __kasan_kmalloc+0xd4/0x100 [ 314.019473][T18062] __kmalloc_track_caller+0x13c/0x2c0 [ 314.024851][T18062] __alloc_skb+0x210/0x730 [ 314.029266][T18062] audit_log_start+0x407/0x8a0 [ 314.034027][T18062] common_lsm_audit+0xd2/0x1670 [ 314.038873][T18062] slow_avc_audit+0x1c4/0x240 [ 314.043548][T18062] audit_inode_permission+0x1a3/0x270 [ 314.048914][T18062] selinux_inode_permission+0x50c/0x5f0 [ 314.054453][T18062] security_inode_permission+0xa0/0x100 [ 314.060007][T18062] inode_permission+0xef/0x4a0 [ 314.064768][T18062] may_open+0x2a4/0x3f0 [ 314.068932][T18062] path_openat+0x2631/0x2f80 [ 314.073519][T18062] do_filp_open+0x1df/0x400 [ 314.078015][T18062] do_sys_openat2+0x15e/0x7f0 [ 314.082685][T18062] __x64_sys_openat+0x136/0x160 [ 314.087532][T18062] x64_sys_call+0x219/0x9a0 [ 314.092035][T18062] do_syscall_64+0x4c/0xa0 [ 314.096585][T18062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.102503][T18062] [ 314.104827][T18062] Freed by task 30: [ 314.108636][T18062] kasan_set_track+0x4a/0x70 [ 314.113249][T18062] kasan_set_free_info+0x23/0x40 [ 314.118280][T18062] ____kasan_slab_free+0x125/0x160 [ 314.123399][T18062] __kasan_slab_free+0x11/0x20 [ 314.128164][T18062] slab_free_freelist_hook+0xc2/0x190 [ 314.133531][T18062] kfree+0xc4/0x270 [ 314.137337][T18062] skb_release_data+0x7bd/0xa20 [ 314.142186][T18062] kfree_skb+0xb9/0x2f0 [ 314.146424][T18062] kauditd_hold_skb+0x116/0x210 [ 314.151269][T18062] kauditd_send_queue+0x28c/0x2e0 [ 314.156289][T18062] kauditd_thread+0x4ea/0x880 [ 314.160962][T18062] kthread+0x3f5/0x4f0 [ 314.165049][T18062] ret_from_fork+0x1f/0x30 [ 314.169462][T18062] [ 314.171960][T18062] Last potentially related work creation: [ 314.177668][T18062] kasan_save_stack+0x3a/0x60 [ 314.182341][T18062] __kasan_record_aux_stack+0xd2/0x100 [ 314.187799][T18062] kasan_record_aux_stack_noalloc+0xb/0x10 [ 314.193604][T18062] insert_work+0x51/0x310 [ 314.197932][T18062] __queue_work+0x8e1/0xc60 [ 314.202429][T18062] queue_work_on+0xde/0x150 [ 314.206928][T18062] destroy_super_rcu+0xd1/0xe0 [ 314.211690][T18062] rcu_do_batch+0x4c1/0xbf0 [ 314.216205][T18062] rcu_core+0x4a3/0xef0 [ 314.220358][T18062] rcu_core_si+0x9/0x10 [ 314.224511][T18062] handle_softirqs+0x250/0x560 [ 314.229273][T18062] __irq_exit_rcu+0x52/0xf0 [ 314.233775][T18062] irq_exit_rcu+0x9/0x10 [ 314.238106][T18062] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 314.243734][T18062] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 314.249711][T18062] [ 314.252032][T18062] Second to last potentially related work creation: [ 314.258605][T18062] kasan_save_stack+0x3a/0x60 [ 314.263278][T18062] __kasan_record_aux_stack+0xd2/0x100 [ 314.268732][T18062] kasan_record_aux_stack_noalloc+0xb/0x10 [ 314.274539][T18062] call_rcu+0x10b/0xf60 [ 314.278689][T18062] __put_super+0x26b/0x2d0 [ 314.283103][T18062] deactivate_locked_super+0xd4/0x100 [ 314.288478][T18062] mount_bdev+0x2ab/0x3c0 [ 314.292918][T18062] ext4_mount+0x34/0x40 [ 314.297085][T18062] legacy_get_tree+0xed/0x190 [ 314.301774][T18062] vfs_get_tree+0x89/0x260 [ 314.306282][T18062] do_new_mount+0x251/0xb40 [ 314.310783][T18062] path_mount+0x640/0xff0 [ 314.315111][T18062] __se_sys_mount+0x320/0x390 [ 314.319782][T18062] __x64_sys_mount+0xbf/0xd0 [ 314.324368][T18062] x64_sys_call+0x6bf/0x9a0 [ 314.328865][T18062] do_syscall_64+0x4c/0xa0 [ 314.333280][T18062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.339172][T18062] [ 314.341491][T18062] The buggy address belongs to the object at ffff8881157f1000 [ 314.341491][T18062] which belongs to the cache kmalloc-2k of size 2048 [ 314.355714][T18062] The buggy address is located 1136 bytes inside of [ 314.355714][T18062] 2048-byte region [ffff8881157f1000, ffff8881157f1800) [ 314.369163][T18062] The buggy address belongs to the page: [ 314.374783][T18062] page:ffffea000455fc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1157f0 [ 314.385016][T18062] head:ffffea000455fc00 order:3 compound_mapcount:0 compound_pincount:0 [ 314.393336][T18062] flags: 0x4000000000010200(slab|head|zone=1) [ 314.399405][T18062] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043200 [ 314.408017][T18062] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 314.416675][T18062] page dumped because: kasan: bad access detected [ 314.423425][T18062] page_owner tracks the page as allocated [ 314.429133][T18062] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1011, ts 24955127277, free_ts 24170010819 [ 314.449617][T18062] post_alloc_hook+0x192/0x1b0 [ 314.454381][T18062] prep_new_page+0x1c/0x110 [ 314.458878][T18062] get_page_from_freelist+0x2c3a/0x2cd0 [ 314.464421][T18062] __alloc_pages+0x1a2/0x460 [ 314.469004][T18062] new_slab+0xa0/0x4d0 [ 314.473066][T18062] ___slab_alloc+0x3ac/0x840 [ 314.477655][T18062] __slab_alloc+0x49/0x90 [ 314.481979][T18062] kmem_cache_alloc_trace+0x146/0x270 [ 314.487350][T18062] alloc_super+0x5e/0x840 [ 314.491673][T18062] sget_fc+0x2c9/0x700 [ 314.495912][T18062] get_tree_nodev+0x2a/0x160 [ 314.500499][T18062] shmem_get_tree+0x1c/0x20 [ 314.504994][T18062] vfs_get_tree+0x89/0x260 [ 314.509405][T18062] do_new_mount+0x251/0xb40 [ 314.513905][T18062] path_mount+0x640/0xff0 [ 314.518318][T18062] __se_sys_mount+0x320/0x390 [ 314.522997][T18062] page last free stack trace: [ 314.527668][T18062] free_unref_page_prepare+0x5fa/0x600 [ 314.533146][T18062] free_unref_page+0xae/0x540 [ 314.537819][T18062] __free_pages+0x6c/0x100 [ 314.542233][T18062] __free_slab+0xe5/0x1e0 [ 314.546560][T18062] __unfreeze_partials+0x15a/0x190 [ 314.551673][T18062] put_cpu_partial+0xc6/0x120 [ 314.556348][T18062] __slab_free+0x1d4/0x290 [ 314.560764][T18062] ___cache_free+0x104/0x120 [ 314.565349][T18062] qlink_free+0x4d/0x90 [ 314.569499][T18062] qlist_free_all+0x5f/0xb0 [ 314.573999][T18062] kasan_quarantine_reduce+0x14a/0x170 [ 314.579460][T18062] __kasan_slab_alloc+0x2f/0xe0 [ 314.584304][T18062] slab_post_alloc_hook+0x4f/0x2b0 [ 314.589415][T18062] kmem_cache_alloc+0xf7/0x260 [ 314.594184][T18062] __alloc_skb+0xe4/0x730 [ 314.598508][T18062] inet_netconf_notify_devconf+0x169/0x220 [ 314.604310][T18062] [ 314.606629][T18062] Memory state around the buggy address: [ 314.612253][T18062] ffff8881157f1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.620397][T18062] ffff8881157f1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.628451][T18062] >ffff8881157f1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.636503][T18062] ^ [ 314.644208][T18062] ffff8881157f1480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.652266][T18062] ffff8881157f1500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.660317][T18062] ================================================================== [ 314.668365][T18062] Disabling lock debugging due to kernel taint May 18 03:33:57 syzkaller kern.alert kernel: [ 314.423425][T18062] page_owner tracks the page as allocated May 18 03:33:57 syzkaller kern.alert kernel: [ 314.429133][T18062] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1011, ts 24955127277, free_ts 2417001 May 18 03:33:57 syzkaller kern.alert kernel: [ 314.522997][T18062] page last free stack trace: [ 315.888904][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!