last executing test programs: 498.687572ms ago: executing program 3 (id=11993): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000540)="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", 0xfc) 452.700342ms ago: executing program 1 (id=11996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="582a0500231a0500340012800e00010069703665727370616e00000020000280060003003000f133140007001502000000000000000000000000000108000a00", @ANYRES32], 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 439.894475ms ago: executing program 3 (id=11997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffffffffffffffee, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x0, 0x4, 0xfff}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4000, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 358.594612ms ago: executing program 1 (id=12001): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe) 358.501862ms ago: executing program 3 (id=12002): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) 356.550183ms ago: executing program 0 (id=12003): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x25, 0x1, 0x1, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 346.342025ms ago: executing program 2 (id=12004): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000140)) 341.295916ms ago: executing program 4 (id=12005): syz_emit_ethernet(0x86, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x78, 0x100, 0x2000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "50a271172e123757224a5b83e1d119672ba3ab78662fd2f8664d6ed50d3f11d9", "87dc23514b7d2cb0930ff8d214f3cc59", {"4ea9d687307fad4422680f3da2e8aece", "f28f95cedf1e38e75f5c3708d4da3941"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 331.495778ms ago: executing program 3 (id=12006): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x6, 0x9, 0x8, 0x7ff00001}]}) syz_io_uring_setup(0x2179, &(0x7f0000000400)={0x0, 0xfb33, 0x400, 0x1, 0xe0}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) 284.775258ms ago: executing program 4 (id=12007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x0, 0x10, 0x3, 0x3f, 0x6, "c5873c", 0xe4}}) 284.641998ms ago: executing program 0 (id=12008): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0x35, 0x207fff) 284.335398ms ago: executing program 2 (id=12009): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 239.912548ms ago: executing program 1 (id=12010): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) 237.464649ms ago: executing program 2 (id=12011): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)={0x24, 0x2a, 0x503, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@nested={0x10, 0xd3, 0x0, 0x1, [@nested={0x9, 0x8f, 0x0, 0x1, [@generic="5fa4b283fb"]}]}]}]}, 0x24}], 0x1}, 0x14008010) 220.482092ms ago: executing program 0 (id=12012): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x41, 0x3, 0x1e8, 0x98, 0x50020000, 0x0, 0x98, 0x0, 0x150, 0x1f0, 0x1f0, 0x150, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc6c4, 0xfffffff1, 0x1, 'snmp_trap\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 217.593543ms ago: executing program 4 (id=12013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@acquire={0x128, 0x17, 0x1, 0x70bd28, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d6, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x30}, {@in=@private=0xa010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x4, 0x4e23, 0x3, 0xa, 0xa0, 0xa0, 0x8}, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xffff, 0x4e20, 0x5, 0x2, 0x120, 0x20, 0x89}, {0xffffffffffffc230, 0x6, 0x525b, 0x100000000, 0x7f, 0x4, 0x4, 0x7}, {0xa, 0xe9, 0x37, 0x125}, 0x7fff, 0x6e6bb8, 0x3, 0x1, 0x0, 0x3}, 0x4a6f, 0x8, 0x9, 0x70bd2b}}, 0x128}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 179.703321ms ago: executing program 4 (id=12014): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 172.046343ms ago: executing program 2 (id=12015): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 146.106648ms ago: executing program 3 (id=12016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffffffe2, 0xc8f3}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 145.653448ms ago: executing program 1 (id=12017): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)={0x1c, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x8, 0x144, 0x0, 0x1, [@nested={0x4, 0xf3}]}]}, 0x1c}}, 0x4000080) 94.956939ms ago: executing program 0 (id=12018): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1}, 0x24}}, 0x0) 94.854859ms ago: executing program 2 (id=12019): r0 = socket(0x10, 0x803, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) 94.809619ms ago: executing program 4 (id=12020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 82.690482ms ago: executing program 1 (id=12021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0xfffffffc, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x4048050) 59.662507ms ago: executing program 3 (id=12022): mlockall(0x7) munlockall() 56.060048ms ago: executing program 0 (id=12023): r0 = socket(0x10, 0x3, 0x0) vmsplice(r0, &(0x7f0000000180)=[{0xffffffffffffffff}], 0x1, 0x2) 18.934116ms ago: executing program 1 (id=12024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x11e7d, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x8f}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 18.847845ms ago: executing program 2 (id=12025): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000300)="ed20f69b8ce294a9f3e399e9f6223f0f6dd5d20ea263ef8c600dfb1ab026c73ff5bfc253ae3ab392562a125c895e0590da134edf3103e45ec94b272f31ab949d6b977e01fb8d53b20e732ddc300a4c", 0x4f}, {0x0, 0x30}, {&(0x7f0000000680)}], 0x3) 13.640527ms ago: executing program 4 (id=12026): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) 0s ago: executing program 0 (id=12027): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0xc000486, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) kernel console output (not intermixed with test programs): ify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 273.269811][ T354] udevd[354]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 273.282728][ T5001] udevd[5001]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 273.292288][ T310] udevd[310]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 273.328870][T10109] loop1: detected capacity change from 0 to 256 [ 273.337292][ T30] audit: type=1400 audit(2000542403.608:285): avc: denied { mount } for pid=10108 comm="syz.1.4637" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 273.379571][ T30] audit: type=1400 audit(2000542403.645:286): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 273.426772][T10113] loop1: detected capacity change from 0 to 128 [ 273.490645][ T535] usb 1-1: unit 5 not found! [ 273.501746][ T535] usb 1-1: USB disconnect, device number 116 [ 273.511412][T10117] loop1: detected capacity change from 0 to 512 [ 273.536101][T10117] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.612205][T10122] loop1: detected capacity change from 0 to 128 [ 273.736363][ T524] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 273.861372][T10111] F2FS-fs (loop2): Found nat_bits in checkpoint [ 273.875289][ T307] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 273.922844][T10111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 273.950715][T10129] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.980191][T10129] ext4 filesystem being mounted at /920/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.142495][ T524] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.160031][ T524] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.239001][T10139] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.292085][ T307] usb 4-1: config 7 has an invalid descriptor of length 25, skipping remainder of the config [ 274.302319][ T307] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 274.334787][ T535] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 274.342553][ T307] usb 4-1: config 7 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.463111][ T524] usb 5-1: string descriptor 0 read error: -22 [ 274.470041][ T524] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 274.479197][ T524] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 274.487822][ T307] usb 4-1: New USB device found, idVendor=19d2, idProduct=0775, bcdDevice= 0.00 [ 274.521269][ T307] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 274.529565][ T307] usb 4-1: Product: syz [ 274.533821][ T307] usb 4-1: SerialNumber: syz [ 274.559845][ T524] uvcvideo 5-1:1.0: Found multiple Units with ID 1 [ 274.567188][ T524] usb 5-1: Found UVC 71.01 device (225a:e1d4) [ 274.574369][ T524] usb 5-1: No streaming interface found for terminal 2. [ 274.582036][ T307] usb 4-1: bad CDC descriptors [ 274.593936][T10137] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 274.605866][T10137] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 274.614451][T10137] F2FS-fs (loop0): Test dummy encryption mode enabled [ 274.622121][T10137] F2FS-fs (loop0): invalid crc value [ 274.627525][ T535] usb 2-1: Using ep0 maxpacket: 8 [ 274.648082][T10137] F2FS-fs (loop0): Found nat_bits in checkpoint [ 274.677926][T10147] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.695585][T10137] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 274.702918][T10137] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 274.786194][ T524] usb 5-1: USB disconnect, device number 124 [ 274.804421][ T307] usb 4-1: USB disconnect, device number 118 [ 274.826364][ T535] usb 2-1: unable to get BOS descriptor or descriptor too short [ 274.911863][ T535] usb 2-1: config 10 has an invalid interface number: 223 but max is 0 [ 274.920365][ T535] usb 2-1: config 10 has no interface number 0 [ 274.926809][ T535] usb 2-1: config 10 interface 223 has no altsetting 0 [ 275.115745][ T535] usb 2-1: New USB device found, idVendor=04a4, idProduct=0004, bcdDevice= 0.01 [ 275.126326][ T535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.134354][ T535] usb 2-1: Product: syz [ 275.138926][ T535] usb 2-1: Manufacturer: syz [ 275.143546][ T535] usb 2-1: SerialNumber: syz [ 275.179024][ T305] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 275.312471][T10159] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.369303][T10159] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 275.446487][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 275.489290][ T535] usb-storage 2-1:10.223: USB Mass Storage device detected [ 275.507287][ T535] usb-storage 2-1:10.223: Quirks match for vid 04a4 pid 0004: 1 [ 275.569933][ T535] usb 2-1: USB disconnect, device number 115 [ 275.576203][ T305] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 275.600223][ T305] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.612656][ T305] usb 3-1: config 0 has no interface number 0 [ 275.627130][ T305] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 275.651915][ T305] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.665343][ T305] usb 3-1: config 0 interface 196 has no altsetting 0 [ 275.841522][ T305] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 275.861505][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.872294][ T305] usb 3-1: Product: syz [ 275.883075][ T305] usb 3-1: Manufacturer: syz [ 275.888163][ T305] usb 3-1: SerialNumber: syz [ 275.893926][ T305] usb 3-1: config 0 descriptor?? [ 276.082048][T10175] F2FS-fs (loop4): Found nat_bits in checkpoint [ 276.088485][ T524] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 276.119486][ T535] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 276.133412][T10175] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.194478][ T305] ipheth 3-1:0.196: Unable to find endpoints [ 276.201763][ T305] usb 3-1: USB disconnect, device number 117 [ 276.268957][ T26] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 276.375819][ T535] usb 1-1: Using ep0 maxpacket: 32 [ 276.504122][ T535] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 276.512356][ T535] usb 1-1: config 0 has no interface number 0 [ 276.525466][ T524] usb 4-1: unable to get BOS descriptor or descriptor too short [ 276.533262][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 276.546866][ T535] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 276.589598][ T524] usb 4-1: not running at top speed; connect to a high speed hub [ 276.675115][ T524] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 276.707194][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.728529][ T535] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 276.737639][ T535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.746295][ T535] usb 1-1: Product: syz [ 276.750746][ T535] usb 1-1: Manufacturer: syz [ 276.755372][ T535] usb 1-1: SerialNumber: syz [ 276.761153][ T535] usb 1-1: config 0 descriptor?? [ 276.781953][T10187] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 276.867476][ T524] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 276.876591][ T524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.889134][ T524] usb 4-1: Product: syz [ 276.893388][ T524] usb 4-1: Manufacturer: syz [ 276.898174][ T524] usb 4-1: SerialNumber: syz [ 276.963609][ T26] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 276.972737][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.981148][ T26] usb 2-1: Product: syz [ 276.985692][ T26] usb 2-1: Manufacturer: syz [ 276.990313][ T26] usb 2-1: SerialNumber: syz [ 277.059782][ T535] asix: probe of 1-1:0.188 failed with error -71 [ 277.070911][ T535] usb 1-1: USB disconnect, device number 117 [ 277.241466][ T305] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 277.284223][ T524] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 277.293129][ T524] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 277.302075][ T524] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 277.310935][ T524] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 277.380333][ T524] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 277.467989][ T524] usb 4-1: USB disconnect, device number 119 [ 277.497852][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 277.520361][T10201] set_capacity_and_notify: 22 callbacks suppressed [ 277.520375][T10201] loop4: detected capacity change from 0 to 262144 [ 277.530250][ T26] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 277.600902][ T30] audit: type=1400 audit(2000542407.594:287): avc: denied { write } for pid=10218 comm="syz.0.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.620823][ T26] usb 2-1: unit 37 not found! [ 277.625537][ T26] usb 2-1: unit 0 not found! [ 277.663130][T10221] loop0: detected capacity change from 0 to 8192 [ 277.679828][ T305] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.699509][ T26] usb 2-1: USB disconnect, device number 116 [ 277.737437][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4684'. [ 277.757760][T10221] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 277.784912][T10221] FAT-fs (loop0): Filesystem has been set read-only [ 277.799567][ T305] usb 3-1: config 3 has an invalid interface number: 189 but max is 3 [ 277.824404][ T30] audit: type=1400 audit(2000542407.810:288): avc: denied { checkpoint_restore } for pid=10227 comm="syz.3.4685" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.839881][ T305] usb 3-1: config 3 has an invalid interface number: 178 but max is 3 [ 277.866201][ T305] usb 3-1: config 3 has an invalid interface number: 199 but max is 3 [ 277.882611][ T20] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 277.892691][ T305] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 277.908509][T10232] loop3: detected capacity change from 0 to 128 [ 277.920881][ T305] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 277.940048][ T305] usb 3-1: config 3 has 3 interfaces, different from the descriptor's value: 4 [ 277.962581][ T305] usb 3-1: config 3 has no interface number 0 [ 277.980682][ T305] usb 3-1: config 3 has no interface number 1 [ 277.986855][ T305] usb 3-1: config 3 has no interface number 2 [ 278.013476][ T305] usb 3-1: config 3 interface 189 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 278.045110][ T30] audit: type=1400 audit(2000542408.015:289): avc: denied { write } for pid=10244 comm="syz.1.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 278.046443][ T305] usb 3-1: config 3 interface 189 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 278.103609][T10247] loop3: detected capacity change from 0 to 2048 [ 278.120639][ T305] usb 3-1: config 3 interface 178 altsetting 10 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 278.137565][ T305] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 278.153002][ T305] usb 3-1: config 3 interface 178 altsetting 10 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 278.181786][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 278.188806][ T30] audit: type=1326 audit(2000542408.146:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10252 comm="syz.0.4697" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43831a2159 code=0x7ffc0000 [ 278.192297][ T305] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 278.224576][ T305] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 278.238808][ T305] usb 3-1: config 3 interface 178 altsetting 10 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 278.256546][ T30] audit: type=1326 audit(2000542408.184:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10252 comm="syz.0.4697" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43831a2159 code=0x7ffc0000 [ 278.267557][ T305] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 278.342055][ T20] usb 5-1: config index 0 descriptor too short (expected 65307, got 36) [ 278.358426][ T305] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 278.370030][ T20] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 278.372721][ T30] audit: type=1326 audit(2000542408.193:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10252 comm="syz.0.4697" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43831a2159 code=0x7ffc0000 [ 278.412604][ T305] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 278.423934][ T305] usb 3-1: config 3 interface 178 altsetting 10 has an invalid endpoint with address 0x0, skipping [ 278.454207][ T305] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 278.467114][ T30] audit: type=1326 audit(2000542408.193:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10252 comm="syz.0.4697" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43831a2159 code=0x7ffc0000 [ 278.503552][ T305] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 278.515092][ T305] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 278.530945][ T30] audit: type=1326 audit(2000542408.193:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10252 comm="syz.0.4697" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f43831a2159 code=0x7ffc0000 [ 278.556107][ T305] usb 3-1: config 3 interface 199 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 278.566719][ T20] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 278.568072][ T305] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 278.586971][ T20] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=1 [ 278.587002][ T305] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 278.587032][ T20] usb 5-1: Manufacturer: syz [ 278.596411][ T305] usb 3-1: config 3 interface 199 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 278.621970][ T305] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 278.628880][ T20] usb 5-1: SerialNumber: syz [ 278.632906][ T305] usb 3-1: config 3 interface 199 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.651015][ T305] usb 3-1: config 3 interface 178 has no altsetting 0 [ 278.658058][ T305] usb 3-1: config 3 interface 199 has no altsetting 0 [ 278.695232][ T20] asix: probe of 5-1:2.0 failed with error -22 [ 278.833663][ T305] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=7e.0a [ 278.842799][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.851079][ T305] usb 3-1: Product: syz [ 278.855294][ T305] usb 3-1: Manufacturer: syz [ 278.859910][ T305] usb 3-1: SerialNumber: syz [ 278.876517][T10215] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 278.913751][ T524] usb 5-1: USB disconnect, device number 125 [ 279.289141][ T305] usb 3-1: USB disconnect, device number 118 [ 279.686161][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 279.686179][ T30] audit: type=1400 audit(2000542409.550:299): avc: denied { write } for pid=10277 comm="syz.1.4711" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.756902][ T30] audit: type=1400 audit(2000542409.578:300): avc: denied { ioctl } for pid=10277 comm="syz.1.4711" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.827669][ T30] audit: type=1400 audit(2000542409.644:301): avc: denied { create } for pid=10290 comm="syz.3.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.859340][T10302] loop1: detected capacity change from 0 to 16 [ 279.878873][ T30] audit: type=1400 audit(2000542409.653:302): avc: denied { write } for pid=10290 comm="syz.3.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.920614][ T30] audit: type=1400 audit(2000542409.653:303): avc: denied { nlmsg_write } for pid=10290 comm="syz.3.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.943505][T10310] xt_l2tp: missing protocol rule (udp|l2tpip) [ 279.963013][ T30] audit: type=1400 audit(2000542409.756:304): avc: denied { getopt } for pid=10304 comm="syz.0.4722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.982894][T10302] erofs: (device loop1): mounted with root inode @ nid 36. [ 280.009083][ T30] audit: type=1400 audit(2000542409.765:305): avc: denied { name_bind } for pid=10307 comm="syz.0.4724" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 280.127027][T10302] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 280.146045][T10316] netlink: 'syz.2.4728': attribute type 1 has an invalid length. [ 280.204313][ T318] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 280.233860][T10318] device bridge_slave_0 left promiscuous mode [ 280.243671][ T30] audit: type=1326 audit(2000542410.065:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.1.4729" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf8ee3159 code=0x7ffc0000 [ 280.277384][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.297063][T10318] device bridge_slave_1 left promiscuous mode [ 280.310962][ T30] audit: type=1326 audit(2000542410.065:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.1.4729" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf8ee3159 code=0x7ffc0000 [ 280.317796][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.385528][ T30] audit: type=1326 audit(2000542410.102:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.1.4729" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fdaf8ee3159 code=0x7ffc0000 [ 280.418802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 280.437659][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.456909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 280.475978][T10330] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 280.497725][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.505824][ T318] usb 4-1: Using ep0 maxpacket: 8 [ 280.522443][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.552403][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.586805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.603639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.619276][T10336] loop1: detected capacity change from 0 to 256 [ 280.671609][ T318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.765677][T10348] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4744'. [ 280.789163][ T318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.799378][T10350] netlink: 'syz.2.4745': attribute type 12 has an invalid length. [ 280.824247][ T318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.930187][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4749'. [ 280.947480][T10360] device vti0 entered promiscuous mode [ 281.002961][ T318] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 281.029411][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.046080][ T318] usb 4-1: Product: syz [ 281.056099][ T318] usb 4-1: Manufacturer: syz [ 281.061786][ T318] usb 4-1: SerialNumber: syz [ 281.462530][ T318] usb 4-1: 0:1 : does not exist [ 281.472444][ T318] usb 4-1: unit 5 not found! [ 281.483180][ T318] usb 4-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8214 device_setup=1 to enable and report any issues to g@b4.vu [ 281.538664][ T318] usb 4-1: USB disconnect, device number 120 [ 281.645429][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4777'. [ 281.654722][T10418] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 281.783633][ T354] udevd[354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 281.863992][T10283] loop4: detected capacity change from 0 to 262144 [ 281.875058][T10435] device bridge1 entered promiscuous mode [ 282.013609][T10447] loop1: detected capacity change from 0 to 512 [ 282.061735][T10453] netlink: 'syz.3.4795': attribute type 3 has an invalid length. [ 282.090041][T10312] loop0: detected capacity change from 0 to 262144 [ 282.149038][T10447] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.168317][T10447] ext4 filesystem being mounted at /1025/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.201562][T10447] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: comm syz.1.4791: directory missing '..' [ 282.258297][T10312] F2FS-fs (loop0): Found nat_bits in checkpoint [ 282.357787][T10312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 282.478594][T10482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4808'. [ 282.498479][T10484] loop3: detected capacity change from 0 to 256 [ 282.509600][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'. [ 282.543872][T10484] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 282.659966][T10500] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4812'. [ 282.757540][T10515] xt_ecn: cannot match TCP bits for non-tcp packets [ 282.769791][T10518] IPv6: Can't replace route, no match found [ 282.805422][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4826'. [ 283.147600][T10600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4805'. [ 283.312769][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.320103][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.378668][T10637] netlink: 'syz.3.4882': attribute type 7 has an invalid length. [ 283.392316][T10637] netlink: 'syz.3.4882': attribute type 5 has an invalid length. [ 283.444108][T10651] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4888'. [ 283.516814][T10663] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4894'. [ 283.561744][T10668] device ip6gretap1 entered promiscuous mode [ 283.615278][T10675] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4900'. [ 283.920328][T10741] device bridge_slave_0 left promiscuous mode [ 283.920396][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.927876][T10741] device bridge_slave_1 left promiscuous mode [ 283.927945][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.957911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 283.958210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.958487][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 283.958738][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.959015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.959269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.959517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.959776][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.142433][T10771] netlink: 'syz.2.4947': attribute type 3 has an invalid length. [ 284.142508][T10771] netlink: 'syz.2.4947': attribute type 3 has an invalid length. [ 284.354365][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4975'. [ 284.363626][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4975'. [ 284.794867][T10917] netlink: 'syz.4.5019': attribute type 3 has an invalid length. [ 285.017175][T10967] device bridge_slave_0 left promiscuous mode [ 285.030200][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5044'. [ 285.040324][T10967] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.055496][ T30] kauditd_printk_skb: 334 callbacks suppressed [ 285.055514][ T30] audit: type=1400 audit(2000542414.575:643): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.086898][T10967] device bridge_slave_1 left promiscuous mode [ 285.101378][ T30] audit: type=1400 audit(2000542414.585:644): avc: denied { create } for pid=10973 comm="syz.1.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 285.103046][T10967] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.144545][ T30] audit: type=1400 audit(2000542414.613:645): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.180800][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 285.182878][ T30] audit: type=1400 audit(2000542414.650:646): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.204793][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.256322][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 285.268928][ T30] audit: type=1400 audit(2000542414.688:647): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.276540][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.315431][ T30] audit: type=1400 audit(2000542414.688:648): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.335397][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.353290][ T30] audit: type=1400 audit(2000542414.744:649): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.354254][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.380582][ T30] audit: type=1400 audit(2000542414.744:650): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.387913][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.412362][ T30] audit: type=1400 audit(2000542414.753:651): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.441593][ T1295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.443549][ T30] audit: type=1400 audit(2000542414.819:652): avc: denied { read write } for pid=289 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.596791][T11014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5065'. [ 285.730778][T11039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5077'. [ 285.747598][T11039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5077'. [ 286.134923][T11088] device bridge1 entered promiscuous mode [ 286.161438][T11092] IPv6: NLM_F_REPLACE set, but no existing node found! [ 286.664422][T11170] device xfrm0 entered promiscuous mode [ 286.777928][T11184] xt_policy: output policy not valid in PREROUTING and INPUT [ 286.788890][T11181] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.796177][T11181] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.907106][T11193] netlink: 'syz.2.5153': attribute type 5 has an invalid length. [ 286.973638][T11196] device bridge_slave_0 left promiscuous mode [ 286.993836][T11196] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.025304][T11196] device bridge_slave_1 left promiscuous mode [ 287.040533][T11196] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.067152][T11196] device veth0_vlan left promiscuous mode [ 287.083471][T11196] device veth0_vlan entered promiscuous mode [ 287.095974][T11196] device veth1_macvtap left promiscuous mode [ 287.108408][T11196] device veth1_macvtap entered promiscuous mode [ 287.115635][T11196] device vti0 left promiscuous mode [ 287.121788][T11196] device bridge1 left promiscuous mode [ 287.129416][T11196] device ip6gretap1 left promiscuous mode [ 287.136404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.144437][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.158723][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.169568][T11222] netlink: 'syz.2.5168': attribute type 1 has an invalid length. [ 287.179647][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.201119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.211811][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.233134][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 287.252189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.260806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 287.269230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.278051][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.286571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.294920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.303692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.312383][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.320976][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.329682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.338122][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.346960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.355410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.364016][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.372780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.381162][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.389905][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.398729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.407189][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.415587][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.423408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.431505][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.440060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.448646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.521856][T11244] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 287.571229][T11256] netlink: 'syz.0.5186': attribute type 49 has an invalid length. [ 287.645774][T11274] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.671245][T11279] netlink: 'syz.3.5195': attribute type 25 has an invalid length. [ 287.873604][T11331] device lo entered promiscuous mode [ 287.889376][T11331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.015074][T11364] device batadv_slave_0 entered promiscuous mode [ 288.021701][T11364] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 288.131611][T11386] netlink: 'syz.1.5248': attribute type 10 has an invalid length. [ 288.501006][T11480] __nla_validate_parse: 5 callbacks suppressed [ 288.501028][T11480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5294'. [ 288.549855][T11488] device gretap1 entered promiscuous mode [ 288.712044][T11519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.943609][T11571] xt_ecn: cannot match TCP bits for non-tcp packets [ 288.991256][T11577] xt_TCPMSS: Only works on TCP SYN packets [ 289.032763][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5346'. [ 289.077338][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5350'. [ 289.077350][T11592] xt_TCPMSS: Only works on TCP SYN packets [ 289.323244][T11642] device bridge1 entered promiscuous mode [ 289.411130][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5385'. [ 289.559546][T11691] netlink: 'syz.3.5399': attribute type 15 has an invalid length. [ 289.633477][T11701] ipt_REJECT: ECHOREPLY no longer supported. [ 289.682524][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5408'. [ 289.700644][T11709] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5408'. [ 290.081838][T11771] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 290.173402][T11781] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.5444'. [ 290.197651][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5444'. [ 290.222626][T11781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5444'. [ 290.245422][T11781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5444'. [ 290.317654][T11795] device sit1 entered promiscuous mode [ 290.416139][ T30] kauditd_printk_skb: 483 callbacks suppressed [ 290.416160][ T30] audit: type=1400 audit(2000542419.591:1136): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.485112][ T30] audit: type=1400 audit(2000542419.591:1137): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.559610][ T30] audit: type=1400 audit(2000542419.601:1138): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.587857][ T30] audit: type=1400 audit(2000542419.638:1139): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.619275][ T30] audit: type=1400 audit(2000542419.638:1140): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.663134][ T30] audit: type=1400 audit(2000542419.647:1141): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.705209][ T30] audit: type=1400 audit(2000542419.647:1142): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.732430][ T30] audit: type=1400 audit(2000542419.676:1143): avc: denied { read write } for pid=289 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.732465][ T30] audit: type=1400 audit(2000542419.685:1144): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.732493][ T30] audit: type=1400 audit(2000542419.694:1145): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.811829][T11867] xt_hashlimit: max too large, truncated to 1048576 [ 291.120211][T11959] xt_hashlimit: max too large, truncated to 1048576 [ 291.274408][T12004] xt_socket: unknown flags 0xc [ 291.308452][T12008] device bridge3 entered promiscuous mode [ 291.374377][T12027] mmap: syz.4.5567 (12027): VmData 167485440 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 291.474279][T12054] xt_policy: neither incoming nor outgoing policy selected [ 291.542022][T12072] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 291.811882][T12150] xt_hashlimit: overflow, try lower: 4/0 [ 291.979583][T12197] SELinux: security_context_str_to_sid(defcontext) failed for (dev ?, type ?) errno=-22 [ 292.084725][T12225] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 292.221627][T12258] xt_bpf: check failed: parse error [ 292.566617][T12341] netlink: 'syz.4.5722': attribute type 10 has an invalid length. [ 292.604052][T12341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.730341][T12361] device bridge_slave_0 entered promiscuous mode [ 292.749767][T12361] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 293.175308][T12457] xt_TCPMSS: Only works on TCP SYN packets [ 293.499328][T12524] tc_dump_action: action bad kind [ 293.740810][T12592] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.756503][T12583] device bridge1 left promiscuous mode [ 293.766513][T12583] device bridge3 left promiscuous mode [ 293.843774][T12615] x_tables: duplicate underflow at hook 3 [ 293.892961][T12627] netlink: 'syz.1.5863': attribute type 17 has an invalid length. [ 293.907848][T12627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.927197][T12627] IPv6: ADDRCONF(NETDEV_CHANGE): gretap3: link becomes ready [ 294.062050][T12654] device veth0_vlan left promiscuous mode [ 294.068099][T12654] device veth0_vlan entered promiscuous mode [ 294.078721][T12654] device veth1_macvtap left promiscuous mode [ 294.087749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.111689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.124421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.143791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.152741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.168134][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.176972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 294.185461][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.194284][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 294.202658][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.211079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.225007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.233787][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.242365][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.251244][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.259989][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.268597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.277050][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.290842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.299426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.316914][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.326783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.335529][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.345543][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.354112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.362789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.371571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.379750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.387517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.396129][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.413505][T12676] __nla_validate_parse: 16 callbacks suppressed [ 294.413525][T12676] netlink: 3584 bytes leftover after parsing attributes in process `syz.1.5887'. [ 294.454855][T12684] device syz_tun entered promiscuous mode [ 294.462860][T12684] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 294.669675][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5917'. [ 294.852867][T12769] gretap0: refused to change device tx_queue_len [ 294.859268][T12769] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 295.009920][T12803] Zero length message leads to an empty skb [ 295.228416][T12859] device vlan0 entered promiscuous mode [ 295.260301][T12867] printk: syz.0.5981 (12867): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 295.328716][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 295.343667][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 295.362397][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 295.371600][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 295.381513][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 295.391017][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 295.400376][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 295.409758][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 295.429705][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.437256][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.448727][T12879] IPv6: ADDRCONF(NETDEV_CHANGE): gretap3: link becomes ready [ 295.671457][T12923] ip6t_REJECT: ECHOREPLY is not supported [ 295.765619][ T30] kauditd_printk_skb: 651 callbacks suppressed [ 295.765637][ T30] audit: type=1400 audit(287.891:1797): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 295.801029][ T30] audit: type=1400 audit(287.901:1798): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 295.835076][ T30] audit: type=1400 audit(287.957:1799): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 295.872072][ T30] audit: type=1400 audit(287.957:1800): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 295.914279][T12969] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 295.926802][ T30] audit: type=1400 audit(287.966:1801): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 295.963657][ T30] audit: type=1400 audit(287.985:1802): avc: denied { write } for pid=12959 comm="syz.0.6025" name="sockstat6" dev="proc" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 295.986786][ T30] audit: type=1400 audit(287.994:1803): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 296.017293][ T30] audit: type=1400 audit(288.004:1804): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 296.044177][T12983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.051649][ T30] audit: type=1400 audit(288.004:1805): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 296.084897][ T30] audit: type=1400 audit(288.022:1806): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 296.401625][T13067] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 296.570073][T13099] netlink: 'syz.0.6094': attribute type 13 has an invalid length. [ 297.323448][T13245] xt_hashlimit: invalid rate [ 297.396222][T13266] xt_TCPMSS: Only works on TCP SYN packets [ 297.445570][T13280] device vlan0 entered promiscuous mode [ 297.557915][T13309] netlink: 'syz.3.6198': attribute type 30 has an invalid length. [ 297.935582][T13416] netlink: 'syz.3.6254': attribute type 4 has an invalid length. [ 297.961638][T13416] netlink: 'syz.3.6254': attribute type 5 has an invalid length. [ 298.010416][T13438] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 298.029590][T13440] netlink: 'syz.4.6265': attribute type 4 has an invalid length. [ 298.077959][T13453] xt_TCPMSS: Only works on TCP SYN packets [ 298.122610][T13465] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 298.153073][T13473] xt_socket: unknown flags 0x40 [ 298.316582][T13512] netlink: 'syz.3.6300': attribute type 1 has an invalid length. [ 298.413528][T13538] ipt_REJECT: TCP_RESET invalid for non-tcp [ 298.465461][T13543] IPv6: sit2: Disabled Multicast RS [ 299.009094][T13661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.458509][T13783] device ip6tnl2 entered promiscuous mode [ 299.498925][T13792] xt_TCPMSS: Only works on TCP SYN packets [ 299.594219][T13819] netlink: 'syz.1.6447': attribute type 2 has an invalid length. [ 299.621495][T13822] xt_l2tp: invalid flags combination: c [ 300.205748][T13926] __nla_validate_parse: 72 callbacks suppressed [ 300.205771][T13926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6500'. [ 300.380144][T13951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6511'. [ 300.638852][T14009] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 300.822184][T14057] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 300.887712][T14071] x_tables: unsorted underflow at hook 1 [ 301.066069][T14123] xt_TCPMSS: Only works on TCP SYN packets [ 301.118515][ T30] kauditd_printk_skb: 723 callbacks suppressed [ 301.118533][ T30] audit: type=1400 audit(292.907:2530): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.180459][ T30] audit: type=1400 audit(292.907:2531): avc: denied { read write } for pid=289 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.228904][ T30] audit: type=1400 audit(292.945:2532): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.257141][T14145] netlink: 'syz.2.6608': attribute type 33 has an invalid length. [ 301.279167][T14145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.282782][ T30] audit: type=1400 audit(292.945:2533): avc: denied { mounton } for pid=14136 comm="syz.1.6604" path="/1413/file0" dev="tmpfs" ino=7229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 301.349096][ T30] audit: type=1400 audit(292.963:2534): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.406784][ T30] audit: type=1400 audit(292.991:2535): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.444857][T14159] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.474039][ T30] audit: type=1400 audit(293.001:2536): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.537123][ T30] audit: type=1400 audit(293.048:2537): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.537158][ T30] audit: type=1400 audit(293.104:2538): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.537186][ T30] audit: type=1400 audit(293.122:2539): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.948715][T14231] xt_time: unknown flags 0xc [ 302.290947][T14310] xt_NFQUEUE: number of total queues is 0 [ 302.426241][T14337] device lo left promiscuous mode [ 302.449375][T14337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.488553][T14340] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 302.598280][T14357] netlink: 'syz.2.6710': attribute type 1 has an invalid length. [ 302.669436][T14367] xt_l2tp: v2 tid > 0xffff: 134217728 [ 302.757741][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6724'. [ 302.776753][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6724'. [ 302.843468][T14406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6734'. [ 302.866060][T14406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6734'. [ 303.003120][T14438] netlink: 'syz.1.6750': attribute type 46 has an invalid length. [ 303.069099][T14455] netlink: 'syz.2.6757': attribute type 1 has an invalid length. [ 303.239229][T14486] netlink: 'syz.4.6774': attribute type 2 has an invalid length. [ 303.425762][T14531] netlink: 420 bytes leftover after parsing attributes in process `syz.3.6794'. [ 303.616114][T14584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6821'. [ 303.646391][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6826'. [ 303.693586][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6832'. [ 304.011118][T14685] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.081599][T14700] device sit0 entered promiscuous mode [ 304.210503][T14735] x_tables: unsorted entry at hook 3 [ 304.302837][T14752] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 304.378595][T14769] page size migration: [14769 (syz.4.6915)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 304.569893][T14808] kernel profiling enabled (shift: 23) [ 304.860475][T14862] tc_dump_action: action bad kind [ 304.936713][T14877] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 305.165435][T14941] futex_wake_op: syz.0.6997 tries to shift op by -1; fix this program [ 305.398458][T15005] netlink: 'syz.0.7027': attribute type 13 has an invalid length. [ 305.451923][T15013] netlink: 'syz.4.7031': attribute type 13 has an invalid length. [ 305.465375][T15013] netlink: 'syz.4.7031': attribute type 27 has an invalid length. [ 305.616645][T15049] __nla_validate_parse: 14 callbacks suppressed [ 305.616669][T15049] netlink: 3584 bytes leftover after parsing attributes in process `syz.0.7049'. [ 305.750212][T15077] netlink: 'syz.0.7062': attribute type 15 has an invalid length. [ 305.765116][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7062'. [ 305.845685][T15095] netlink: 37 bytes leftover after parsing attributes in process `syz.0.7072'. [ 306.004772][T15127] syz.0.7087 (15127): /proc/15127/oom_adj is deprecated, please use /proc/15127/oom_score_adj instead. [ 306.099246][T15149] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7099'. [ 306.139000][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7102'. [ 306.242516][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7113'. [ 306.471131][ T30] kauditd_printk_skb: 651 callbacks suppressed [ 306.471151][ T30] audit: type=1400 audit(297.917:3191): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.528920][T15247] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 306.538658][ T30] audit: type=1400 audit(297.945:3192): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.545096][T15245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7148'. [ 306.576706][ T30] audit: type=1400 audit(297.954:3193): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.638717][ T30] audit: type=1400 audit(297.954:3194): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.711669][ T30] audit: type=1400 audit(297.954:3195): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.711714][ T30] audit: type=1400 audit(297.973:3196): avc: denied { read write } for pid=289 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.711742][ T30] audit: type=1400 audit(298.048:3198): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.711770][ T30] audit: type=1400 audit(298.048:3197): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.711798][ T30] audit: type=1400 audit(298.057:3199): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.711826][ T30] audit: type=1400 audit(298.057:3200): avc: denied { read write } for pid=289 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 306.715813][T15275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7159'. [ 306.921760][T15287] xt_hashlimit: overflow, try lower: 18446744073709551613/9 [ 307.415954][T15385] device veth1_macvtap left promiscuous mode [ 307.424615][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.432506][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.452198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.471431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.483296][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.501121][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.515543][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 307.524810][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.538750][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 307.554287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.570226][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.583375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.592567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.600878][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.609215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.617891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.626472][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.635102][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.643847][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.652012][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.660531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.669002][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.677475][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.686204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.694782][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.703393][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.711797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.719727][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.727373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.736369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.745066][T15390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.760503][T15395] netlink: 588 bytes leftover after parsing attributes in process `syz.4.7219'. [ 307.772276][T15395] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 307.818944][T15405] binfmt_misc: register: failed to install interpreter file ./file0 [ 307.960149][T15443] device syz_tun left promiscuous mode [ 307.980904][T15443] device bridge_slave_0 left promiscuous mode [ 308.003195][T15443] device xfrm0 left promiscuous mode [ 308.019931][T15443] device vlan0 left promiscuous mode [ 308.037922][T15443] device veth1_macvtap entered promiscuous mode [ 308.055589][T15443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.070752][T15443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.090542][T15443] device sit1 left promiscuous mode [ 308.113799][T15443] device ip6tnl2 left promiscuous mode [ 308.135622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.169228][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 308.194380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 308.214621][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 308.241982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 308.255633][T15443] syz.3.7243 (15443) used greatest stack depth: 20456 bytes left [ 308.278938][T15467] netlink: 'syz.4.7256': attribute type 12 has an invalid length. [ 308.462036][T15495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.639967][T15537] netlink: 'syz.0.7290': attribute type 5 has an invalid length. [ 308.754914][T15561] netlink: 'syz.1.7302': attribute type 5 has an invalid length. [ 308.936787][ T524] ip6_tunnel:  xmit: Local address not yet configured! [ 308.951092][ T524] ip6_tunnel:  xmit: Local address not yet configured! [ 308.969357][ T26] ip6_tunnel:  xmit: Local address not yet configured! [ 309.105405][T15644] block device autoloading is deprecated and will be removed. [ 309.133146][T15658] device syz_tun entered promiscuous mode [ 309.152372][T15658] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 309.175474][T15666] netlink: 'syz.0.7355': attribute type 5 has an invalid length. [ 309.226098][T15673] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 309.256895][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7363'. [ 309.341914][T15706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.341931][T15706] IPv6: NLM_F_CREATE should be set when creating new route [ 309.341945][T15706] IPv6: NLM_F_CREATE should be set when creating new route [ 309.353289][ T26] ip6_tunnel:  xmit: Local address not yet configured! [ 309.457860][T15727] netlink: 'syz.1.7385': attribute type 3 has an invalid length. [ 309.598749][ T26] ip6_tunnel:  xmit: Local address not yet configured! [ 309.646358][T15781] 8021q: VLANs not supported on ip6tnl0 [ 309.702756][T15796] IPv6: Can't replace route, no match found [ 309.714586][T15797] netlink: 'syz.0.7420': attribute type 4 has an invalid length. [ 309.737392][T15805] x_tables: duplicate underflow at hook 2 [ 309.987466][T15867] device ip6gretap0 entered promiscuous mode [ 310.053282][T15867] syz.2.7455 (15867) used greatest stack depth: 20296 bytes left [ 310.759795][T16036] validate_nla: 7 callbacks suppressed [ 310.759817][T16036] netlink: 'syz.3.7540': attribute type 5 has an invalid length. [ 310.908352][T16071] netlink: 'syz.4.7555': attribute type 3 has an invalid length. [ 311.031877][T16093] __nla_validate_parse: 10 callbacks suppressed [ 311.031897][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7567'. [ 311.052251][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7567'. [ 311.114834][T16107] IPv6: sit2: Disabled Multicast RS [ 311.184894][T16123] incfs: iterate_incfs_dir / -22 [ 311.544998][T16189] IPv6: sit1: Disabled Multicast RS [ 311.621892][T16200] netlink: 'syz.2.7618': attribute type 11 has an invalid length. [ 311.665860][T16205] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7620'. [ 311.821403][ T30] kauditd_printk_skb: 7190 callbacks suppressed [ 311.821420][ T30] audit: type=1400 audit(302.914:10391): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 311.852925][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 311.856304][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 311.868558][ T140] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 311.873556][ T287] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 311.884586][ T287] audit: backlog limit exceeded [ 311.889715][ T30] audit: type=1400 audit(302.923:10392): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 311.899317][ T140] audit: backlog limit exceeded [ 311.929429][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 311.931953][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 311.971408][T16250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.978691][T16250] IPv6: NLM_F_CREATE should be set when creating new route [ 311.985979][T16250] IPv6: NLM_F_CREATE should be set when creating new route [ 312.510431][T16343] IPv6: sit3: Disabled Multicast RS [ 312.516506][T16339] xt_CT: No such helper "snmp_trap" [ 312.544190][T16345] device gre1 entered promiscuous mode [ 312.705262][T16367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.712650][T16367] IPv6: NLM_F_CREATE should be set when creating new route [ 312.719924][T16367] IPv6: NLM_F_CREATE should be set when creating new route [ 312.985295][T16406] xt_TCPMSS: Only works on TCP SYN packets [ 313.186678][T16424] device wireguard0 entered promiscuous mode [ 313.224576][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7734'. [ 313.233813][T16441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7734'. [ 313.381659][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 313.805405][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7777'. [ 313.824327][T16530] device dummy1 entered promiscuous mode [ 313.880834][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7781'. [ 314.091114][T16571] x_tables: unsorted entry at hook 2 [ 314.136176][T16579] netlink: 'syz.2.7803': attribute type 10 has an invalid length. [ 314.548937][T16653] netlink: 'syz.1.7837': attribute type 4 has an invalid length. [ 314.580195][T16653] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7837'. [ 314.760393][T16680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7849'. [ 314.857235][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7854'. [ 314.922259][T16699] xt_SECMARK: invalid mode: 2 [ 314.954086][T16703] device vlan0 left promiscuous mode [ 315.035384][T16711] netlink: 'syz.2.7865': attribute type 15 has an invalid length. [ 315.444925][T16776] netlink: 'syz.0.7896': attribute type 5 has an invalid length. [ 315.602988][T16792] netlink: 'syz.4.7903': attribute type 13 has an invalid length. [ 315.674791][T16800] device macsec0 entered promiscuous mode [ 315.790587][T16818] TCP: TCP_TX_DELAY enabled [ 315.875514][T16832] netlink: 'syz.4.7922': attribute type 3 has an invalid length. [ 315.889999][T16833] x_tables: unsorted underflow at hook 2 [ 315.981396][T16849] device gre2 entered promiscuous mode [ 316.025709][T16858] device gre2 entered promiscuous mode [ 316.151141][T16874] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 316.210992][T16877] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 316.576195][T16914] __nla_validate_parse: 5 callbacks suppressed [ 316.576215][T16914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7963'. [ 316.760354][T16932] netlink: 'syz.1.7970': attribute type 12 has an invalid length. [ 316.789886][T16934] netlink: 3612 bytes leftover after parsing attributes in process `syz.3.7971'. [ 317.175203][ T30] kauditd_printk_skb: 20241 callbacks suppressed [ 317.175219][ T30] audit: type=1400 audit(307.930:29679): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 317.216563][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.228677][ T140] audit: audit_lost=322 audit_rate_limit=0 audit_backlog_limit=64 [ 317.247500][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.250083][ T140] audit: backlog limit exceeded [ 317.255261][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.259184][ T30] audit: type=1400 audit(307.930:29680): avc: denied { read write } for pid=289 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 317.276542][ T287] audit: audit_lost=323 audit_rate_limit=0 audit_backlog_limit=64 [ 317.289680][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.300633][ T289] audit: audit_lost=324 audit_rate_limit=0 audit_backlog_limit=64 [ 317.504263][T17038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.660510][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8035'. [ 317.719785][T17071] netlink: 'syz.2.8036': attribute type 6 has an invalid length. [ 317.750982][T17071] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.763022][T17077] device veth1_macvtap left promiscuous mode [ 317.821301][T17079] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8042'. [ 317.978611][T17115] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8059'. [ 318.150335][T17150] netlink: 'syz.4.8077': attribute type 2 has an invalid length. [ 318.173248][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 318.207235][T17150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.348991][T17186] xt_hashlimit: size too large, truncated to 1048576 [ 318.384903][T17186] xt_hashlimit: max too large, truncated to 1048576 [ 318.461094][T17209] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.8105'. [ 318.701213][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8131'. [ 318.897650][T17307] IPv6: sit4: Disabled Multicast RS [ 318.924632][T17304] IPv6: sit5: Disabled Multicast RS [ 318.959923][T17314] 8021q: VLANs not supported on lo [ 318.967308][T17318] xt_TCPMSS: Only works on TCP SYN packets [ 319.155651][T17363] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 319.214492][T17374] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8187'. [ 319.786984][T17464] device syz_tun entered promiscuous mode [ 320.033319][T17488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.040660][T17488] IPv6: NLM_F_CREATE should be set when creating new route [ 320.048007][T17488] IPv6: NLM_F_CREATE should be set when creating new route [ 320.207716][T17510] xt_hashlimit: overflow, rate too high: 0 [ 320.318714][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8260'. [ 320.448715][T17540] device ipip0 entered promiscuous mode [ 320.462649][T17540] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 320.636433][T17574] device veth1_virt_wifi entered promiscuous mode [ 320.895672][T17611] device veth1_virt_wifi entered promiscuous mode [ 321.241834][T17643] netlink: 'syz.1.8317': attribute type 7 has an invalid length. [ 321.260467][T17643] netlink: 'syz.1.8317': attribute type 5 has an invalid length. [ 321.498867][T17675] device veth0_vlan left promiscuous mode [ 321.513481][T17675] device veth0_vlan entered promiscuous mode [ 321.570680][T17675] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl3: link becomes ready [ 321.588050][T17675] A link change request failed with some changes committed already. Interface ip6tnl3 may have been left with an inconsistent configuration, please check. [ 321.629743][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.640897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.661071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.679471][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.686601][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.711995][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.730799][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.749575][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.756688][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.782149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.801057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 321.818875][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.832641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 321.848143][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.862639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.877366][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.893994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.911038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.927580][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.946723][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.963547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.980291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.996643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.005086][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.014510][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.024897][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.033573][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.042204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.050981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.059437][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.067569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.075435][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.083265][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.091761][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.127064][T17709] __nla_validate_parse: 220 callbacks suppressed [ 322.127086][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8349'. [ 322.165501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.173742][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.222784][T17722] lo: Caught tx_queue_len zero misconfig [ 322.274479][T17730] x_tables: unsorted entry at hook 2 [ 322.370348][T17749] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 322.529754][ T30] kauditd_printk_skb: 21289 callbacks suppressed [ 322.529772][ T30] audit: type=1400 audit(312.946:49517): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 322.572213][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.578782][ T140] audit: audit_lost=809 audit_rate_limit=0 audit_backlog_limit=64 [ 322.586965][T17782] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.587566][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 322.601446][ T286] audit: audit_lost=810 audit_rate_limit=0 audit_backlog_limit=64 [ 322.609433][ T140] audit: backlog limit exceeded [ 322.615112][ T286] audit: backlog limit exceeded [ 322.620079][ T30] audit: type=1400 audit(312.965:49518): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 322.629966][T17782] audit: audit_lost=811 audit_rate_limit=0 audit_backlog_limit=64 [ 322.764281][T17807] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 323.280099][T17905] netlink: 'syz.3.8443': attribute type 16 has an invalid length. [ 323.312716][T17905] netlink: 'syz.3.8443': attribute type 17 has an invalid length. [ 324.137729][T17999] netlink: 'syz.1.8490': attribute type 16 has an invalid length. [ 324.168949][T17999] netlink: 'syz.1.8490': attribute type 17 has an invalid length. [ 324.257396][T18010] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 324.572102][T18038] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 325.184472][T18120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18120 comm=syz.3.8547 [ 325.351982][T18147] ip_tables: iptables: counters copy to user failed while replacing table [ 325.419075][T18163] netlink: 3568 bytes leftover after parsing attributes in process `syz.0.8570'. [ 325.520345][T18183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8581'. [ 325.611704][T18197] device syz_tun left promiscuous mode [ 325.641671][T18197] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.654966][T18197] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.667965][T18197] device batadv_slave_0 left promiscuous mode [ 325.677654][T18197] device veth1_virt_wifi left promiscuous mode [ 325.687055][T18197] device macsec0 left promiscuous mode [ 325.694934][T18197] device bridge1 left promiscuous mode [ 325.702229][T18197] device gre2 left promiscuous mode [ 325.789065][T18219] bridge0: port 1(dummy0) entered blocking state [ 325.809634][T18219] bridge0: port 1(dummy0) entered disabled state [ 325.827396][T18219] device dummy0 entered promiscuous mode [ 326.161198][T18275] netlink: 3568 bytes leftover after parsing attributes in process `syz.1.8624'. [ 326.691909][T18299] futex_wake_op: syz.1.8636 tries to shift op by 32; fix this program [ 326.756923][T18302] device ip6tnl4 entered promiscuous mode [ 327.041282][T18334] netlink: 'syz.0.8653': attribute type 3 has an invalid length. [ 327.215644][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8662'. [ 327.273275][T18353] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.432965][T18367] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 327.882668][ T30] kauditd_printk_skb: 21016 callbacks suppressed [ 327.882686][ T30] audit: type=1400 audit(317.943:67639): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 327.928030][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.956139][ T140] audit: audit_lost=1777 audit_rate_limit=0 audit_backlog_limit=64 [ 327.959102][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.971719][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.978289][ T287] audit: audit_lost=1778 audit_rate_limit=0 audit_backlog_limit=64 [ 327.978772][ T140] audit: backlog limit exceeded [ 328.000087][ T285] audit: audit_lost=1779 audit_rate_limit=0 audit_backlog_limit=64 [ 328.000498][ T30] audit: type=1400 audit(317.971:67640): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 328.027674][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 328.098530][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8698'. [ 328.343473][T18458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.405674][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8717'. [ 328.642079][T18491] xt_hashlimit: max too large, truncated to 1048576 [ 328.906460][T18530] netlink: 45 bytes leftover after parsing attributes in process `syz.3.8750'. [ 329.037985][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8761'. [ 329.240852][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8777'. [ 329.347341][T18602] device sit0 entered promiscuous mode [ 329.377225][T18602] netlink: 'syz.1.8786': attribute type 1 has an invalid length. [ 329.413411][T18602] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8786'. [ 329.442680][T18603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8784'. [ 329.463446][T18603] tc_dump_action: action bad kind [ 330.201651][T18759] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8866'. [ 330.221470][T18760] netlink: 'syz.0.8865': attribute type 9 has an invalid length. [ 330.233461][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8865'. [ 330.309161][ T318] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 330.316858][ T318] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 330.355582][T18780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8875'. [ 330.355974][ T318] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 330.427765][ T318] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 330.576460][T18816] device veth3 entered promiscuous mode [ 330.618234][ T318] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 331.017243][T18914] netlink: 'syz.0.8944': attribute type 29 has an invalid length. [ 331.043529][T18914] netlink: 'syz.0.8944': attribute type 29 has an invalid length. [ 331.143453][T18937] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 332.079853][T19045] netlink: 'syz.1.9003': attribute type 3 has an invalid length. [ 332.340224][T19083] netlink: 'syz.0.9025': attribute type 3 has an invalid length. [ 332.545975][T19124] xt_l2tp: v2 sid > 0xffff: 262144 [ 332.854377][T19180] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.883006][T19184] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.893419][T19184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.900726][T19184] IPv6: NLM_F_CREATE should be set when creating new route [ 332.907997][T19184] IPv6: NLM_F_CREATE should be set when creating new route [ 333.031046][T19205] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 333.135979][T19216] xt_bpf: check failed: parse error [ 333.236382][ T30] kauditd_printk_skb: 20289 callbacks suppressed [ 333.236399][ T30] audit: type=1400 audit(322.968:86063): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 333.274799][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.284140][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.287511][ T140] audit: audit_lost=2402 audit_rate_limit=0 audit_backlog_limit=64 [ 333.300687][ T30] audit: type=1400 audit(322.968:86064): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 333.305643][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.325385][ T140] audit: backlog limit exceeded [ 333.332456][ T286] audit: audit_lost=2403 audit_rate_limit=0 audit_backlog_limit=64 [ 333.337078][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 333.350564][ T30] audit: type=1400 audit(322.968:86065): avc: denied { module_request } for pid=19229 comm="syz.3.9098" kmod="act_ctinfo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 333.417093][T19244] netlink: 'syz.0.9104': attribute type 5 has an invalid length. [ 333.540251][T19259] xt_CT: No such helper "netbios-ns" [ 333.626718][T19271] __nla_validate_parse: 11 callbacks suppressed [ 333.626738][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9117'. [ 334.068613][T19358] x_tables: unsorted entry at hook 3 [ 334.086868][T19360] netlink: 'syz.3.9162': attribute type 3 has an invalid length. [ 334.231223][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9170'. [ 334.262165][T19380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9170'. [ 334.283577][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9175'. [ 334.431093][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9187'. [ 334.482071][T19418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9191'. [ 334.497213][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 334.505255][T19418] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9191'. [ 334.517830][T19418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9191'. [ 334.540196][T19418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9191'. [ 334.606212][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9202'. [ 334.696564][T19459] xt_CT: No such helper "netbios-ns" [ 334.753774][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 334.803981][T19479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.851480][T19488] device vti0 entered promiscuous mode [ 334.978082][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 335.095642][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 335.437747][ T20] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 335.736781][ T318] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 335.791805][T19623] netlink: 'syz.4.9293': attribute type 49 has an invalid length. [ 335.875832][ T318] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 335.897116][T19633] netlink: 'syz.1.9298': attribute type 9 has an invalid length. [ 335.917984][T19633] netlink: 'syz.1.9298': attribute type 6 has an invalid length. [ 336.207650][ T318] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 336.215801][ T318] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 336.275175][T19704] xt_limit: Overflow, try lower: 2147483649/3300 [ 336.332653][T19711] netlink: 'syz.3.9336': attribute type 7 has an invalid length. [ 336.431580][ T318] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 336.933124][T19847] x_tables: unsorted underflow at hook 3 [ 336.956575][T19851] x_tables: duplicate entry at hook 2 [ 336.989727][ T318] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 337.001020][ T318] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 337.233243][T19892] netlink: 'syz.1.9425': attribute type 3 has an invalid length. [ 337.433611][T19934] device bridge7 entered promiscuous mode [ 337.470777][T19936] netlink: 'syz.3.9448': attribute type 4 has an invalid length. [ 337.493363][T19942] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 337.542776][T19954] xt_socket: unknown flags 0x58 [ 337.638767][T19972] netlink: 'syz.4.9465': attribute type 29 has an invalid length. [ 337.685511][T19982] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.694045][T19972] netlink: 'syz.4.9465': attribute type 29 has an invalid length. [ 337.745760][ T20] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 337.782522][T20000] x_tables: duplicate entry at hook 2 [ 337.958650][T20028] device ip6tnl4 left promiscuous mode [ 337.973126][T20028] device veth3 left promiscuous mode [ 338.012926][ T20] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 338.209235][T20084] netlink: 'syz.0.9519': attribute type 4 has an invalid length. [ 338.598288][ T30] kauditd_printk_skb: 19150 callbacks suppressed [ 338.598306][ T30] audit: type=1400 audit(327.975:103504): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 338.631685][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.639166][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.650101][T20177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.659797][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.665400][ T140] audit: audit_lost=2976 audit_rate_limit=0 audit_backlog_limit=64 [ 338.671762][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.674371][ T140] audit: backlog limit exceeded [ 338.682239][ T30] audit: type=1400 audit(327.984:103505): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.685962][ T289] audit: audit_lost=2977 audit_rate_limit=0 audit_backlog_limit=64 [ 339.114366][ T318] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 339.181598][T20273] __nla_validate_parse: 71 callbacks suppressed [ 339.181616][T20273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9613'. [ 339.268238][T20290] xt_hashlimit: invalid interval [ 340.248002][T20454] device ipip1 entered promiscuous mode [ 340.262494][T20456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9699'. [ 340.401159][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9710'. [ 340.594185][T20501] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.608584][T20501] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 340.679933][T20510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9727'. [ 341.013171][T20560] netlink: 'syz.0.9751': attribute type 29 has an invalid length. [ 341.121603][T20576] xt_ecn: cannot match TCP bits for non-tcp packets [ 341.336248][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 341.336266][ C0] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 341.354011][T20611] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 341.383856][T20611] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 341.395867][T20618] netlink: 'syz.3.9781': attribute type 1 has an invalid length. [ 341.406504][T20618] netlink: 'syz.3.9781': attribute type 2 has an invalid length. [ 341.549022][T20646] x_tables: unsorted underflow at hook 4 [ 341.664021][T20668] netlink: 'syz.3.9804': attribute type 29 has an invalid length. [ 341.894965][T20712] xt_TCPMSS: Only works on TCP SYN packets [ 342.110720][T20766] ipt_REJECT: TCP_RESET invalid for non-tcp [ 342.139832][T20771] netlink: 'syz.2.9855': attribute type 10 has an invalid length. [ 342.158684][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9855'. [ 342.225791][T20784] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9863'. [ 342.267591][T20784] netlink: 182 bytes leftover after parsing attributes in process `syz.3.9863'. [ 342.290806][T20796] netlink: 'syz.4.9868': attribute type 12 has an invalid length. [ 342.326572][T20804] netlink: 'syz.3.9873': attribute type 12 has an invalid length. [ 342.447595][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 342.462628][T20829] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9882'. [ 342.501557][T20831] netlink: 1040 bytes leftover after parsing attributes in process `syz.1.9886'. [ 342.679465][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9902'. [ 342.721342][T20867] netem: change failed [ 343.284195][T20977] device gre1 left promiscuous mode [ 343.289579][T20977] device wireguard0 left promiscuous mode [ 343.314078][T20977] device dummy1 left promiscuous mode [ 343.319662][T20977] device ipip0 left promiscuous mode [ 343.345024][T20977] device vti0 left promiscuous mode [ 343.350883][T20977] device ipip1 left promiscuous mode [ 343.377324][ T318] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 343.393211][ T318] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 343.452394][T21001] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.687512][ T318] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 343.962342][ T30] kauditd_printk_skb: 21589 callbacks suppressed [ 343.962358][ T30] audit: type=1400 audit(332.991:122071): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.997280][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.003845][ T140] audit: audit_lost=3987 audit_rate_limit=0 audit_backlog_limit=64 [ 344.018676][ T20] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 344.041016][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.050482][ T140] audit: backlog limit exceeded [ 344.055534][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.055816][ T30] audit: type=1400 audit(332.972:122070): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 344.082630][ T140] audit: audit_lost=3988 audit_rate_limit=0 audit_backlog_limit=64 [ 344.082664][ T140] audit: backlog limit exceeded [ 344.083480][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.478770][T21132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.804111][T21182] netlink: 'syz.1.10061': attribute type 5 has an invalid length. [ 344.881411][T21194] __nla_validate_parse: 176 callbacks suppressed [ 344.881431][T21194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10066'. [ 345.101437][T21241] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 345.231126][T21263] netlink: 'syz.1.10099': attribute type 49 has an invalid length. [ 345.263272][T21263] netlink: 'syz.1.10099': attribute type 49 has an invalid length. [ 346.092105][T21352] netlink: 'syz.2.10142': attribute type 3 has an invalid length. [ 346.521258][T21410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 346.707896][T21430] xt_limit: Overflow, try lower: 167772/2147483648 [ 347.235071][T21509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10218'. [ 347.328761][T21524] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.361098][T21530] xt_TCPMSS: Only works on TCP SYN packets [ 347.388268][T21534] device veth0_vlan left promiscuous mode [ 347.601307][T21569] validate_nla: 1 callbacks suppressed [ 347.601325][T21569] netlink: 'syz.0.10248': attribute type 30 has an invalid length. [ 347.678754][T21578] device macsec0 entered promiscuous mode [ 347.797970][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10259'. [ 347.823928][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10260'. [ 347.918854][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 348.110637][T21629] device vti1 entered promiscuous mode [ 348.160035][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10289'. [ 348.397122][T21662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10294'. [ 348.784300][T21714] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 349.043869][T21754] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 349.173463][T21773] netlink: 'syz.2.10358': attribute type 12 has an invalid length. [ 349.254097][T21779] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.309193][ T30] kauditd_printk_skb: 19243 callbacks suppressed [ 349.309211][ T30] audit: type=1400 audit(338.007:140135): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 349.342451][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 349.349008][ T140] audit: audit_lost=4383 audit_rate_limit=0 audit_backlog_limit=64 [ 349.359731][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 349.366400][ T289] audit: audit_lost=4384 audit_rate_limit=0 audit_backlog_limit=64 [ 349.375017][ T140] audit: backlog limit exceeded [ 349.380078][ T30] audit: type=1400 audit(338.035:140136): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 349.402257][ T289] audit: backlog limit exceeded [ 349.407414][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 349.414774][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 349.453636][T21796] xt_policy: too many policy elements [ 349.526154][T21807] netlink: 'syz.1.10363': attribute type 17 has an invalid length. [ 349.626015][ T318] ip6_tunnel: ; xmit: Local address not yet configured! [ 349.673293][T21819] netlink: 'syz.3.10371': attribute type 5 has an invalid length. [ 349.868399][T21847] netlink: 'syz.2.10385': attribute type 5 has an invalid length. [ 349.970587][ C0] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 350.031025][T21866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10393'. [ 350.244058][T21884] x_tables: duplicate underflow at hook 1 [ 350.257585][T21886] netlink: 'syz.4.10401': attribute type 5 has an invalid length. [ 350.493868][T21913] xt_l2tp: invalid flags combination: 4 [ 351.031381][T21982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 351.105190][T21991] xt_TCPMSS: Only works on TCP SYN packets [ 351.467048][T22038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.517945][T22043] IPv6: Can't replace route, no match found [ 351.588620][T22050] netlink: 'syz.4.10484': attribute type 11 has an invalid length. [ 351.823093][T22082] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10499'. [ 351.850984][T22082] device gretap0 entered promiscuous mode [ 351.889879][T22090] netlink: 'syz.2.10503': attribute type 14 has an invalid length. [ 352.024693][T22107] netlink: 'syz.3.10513': attribute type 17 has an invalid length. [ 352.095109][T22107] device veth0_vlan left promiscuous mode [ 352.101811][T22107] device veth0_vlan entered promiscuous mode [ 352.119936][T22107] device veth1_macvtap left promiscuous mode [ 352.130570][T22107] device veth1_macvtap entered promiscuous mode [ 352.204091][ T20] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 352.215252][ T20] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 352.259358][T22126] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 352.357566][T22134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10526'. [ 352.391904][T22139] netlink: 'syz.2.10528': attribute type 1 has an invalid length. [ 352.535266][ T20] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 352.774918][T22200] xt_l2tp: wrong L2TP version: 0 [ 352.835670][T22207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10562'. [ 352.950364][T22222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10569'. [ 353.020266][T22229] netlink: 'syz.0.10573': attribute type 17 has an invalid length. [ 353.123564][ T305] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 353.131864][ T26] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 353.142571][T22239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10579'. [ 353.167092][T22239] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 353.219184][ T20] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 353.315834][T22258] ip_tables: iptables: counters copy to user failed while replacing table [ 353.642201][T22285] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 353.725294][T22297] netlink: 'syz.0.10606': attribute type 5 has an invalid length. [ 353.807658][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10611'. [ 354.043220][T22332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10623'. [ 354.159660][ T305] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 354.244980][ C0] ip6_tunnel: ; xmit: Local address not yet configured! [ 354.562220][T22390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.661857][ T30] kauditd_printk_skb: 19763 callbacks suppressed [ 354.661875][ T30] audit: type=1400 audit(343.013:156944): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 354.712332][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.725873][ T140] audit: audit_lost=5371 audit_rate_limit=0 audit_backlog_limit=64 [ 354.738364][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.744936][ T289] audit: audit_lost=5372 audit_rate_limit=0 audit_backlog_limit=64 [ 354.753822][ T140] audit: backlog limit exceeded [ 354.760662][ T30] audit: type=1400 audit(343.013:156945): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.773021][T22408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.786542][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.791617][T22408] IPv6: NLM_F_CREATE should be set when creating new route [ 354.791651][T22408] IPv6: NLM_F_CREATE should be set when creating new route [ 354.819282][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 354.821070][ T140] audit: audit_lost=5373 audit_rate_limit=0 audit_backlog_limit=64 [ 355.105941][T22440] x_tables: ip6_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 352 [ 355.121386][ T318] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 355.139528][ T318] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 355.410407][T22468] xt_bpf: check failed: parse error [ 355.491326][T22475] xt_hashlimit: max too large, truncated to 1048576 [ 355.685182][T22499] xt_bpf: check failed: parse error [ 355.880522][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10715'. [ 355.895339][ T20] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 355.909653][ T20] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 355.926912][ T20] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 355.955813][ T20] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 356.031315][T22529] netlink: 'syz.0.10719': attribute type 3 has an invalid length. [ 356.065150][T22530] netlink: 'syz.4.10716': attribute type 17 has an invalid length. [ 356.125888][ T20] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 356.179580][ T318] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 356.205199][T22530] device veth0_vlan entered promiscuous mode [ 356.284198][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10721'. [ 356.312082][T22535] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10721'. [ 357.363454][T22670] __nla_validate_parse: 3 callbacks suppressed [ 357.363562][T22670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10788'. [ 357.369628][T22674] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.517918][T22692] netlink: 'syz.2.10798': attribute type 17 has an invalid length. [ 357.579793][T22692] bridge0: port 1(dummy0) entered blocking state [ 357.586220][T22692] bridge0: port 1(dummy0) entered forwarding state [ 357.628377][T22692] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 357.707806][T22692] device veth1_macvtap entered promiscuous mode [ 357.765276][T22692] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 358.069816][T22756] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 358.131924][T22767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10836'. [ 358.213483][T22776] x_tables: duplicate underflow at hook 4 [ 358.273414][T22779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.614651][T22829] veth0: mtu less than device minimum [ 358.661189][T22834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10870'. [ 358.892274][T22870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.019298][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10896'. [ 359.211280][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10908'. [ 359.220607][T22912] device bridge_slave_0 entered promiscuous mode [ 359.388232][T22933] device bridge4 entered promiscuous mode [ 359.447375][T22936] x_tables: duplicate entry at hook 1 [ 359.753588][T22971] xt_TPROXY: Can be used only with -p tcp or -p udp [ 359.975326][T23001] device bridge10 entered promiscuous mode [ 360.014179][T23008] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10957'. [ 360.023349][ T30] kauditd_printk_skb: 18597 callbacks suppressed [ 360.023367][ T30] audit: type=1400 audit(348.010:173685): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.051968][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.058645][ C0] ip6_tnl_xmit_ctl: 12 callbacks suppressed [ 360.058664][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 360.067851][T23008] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10957'. [ 360.081867][T23011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.098531][T23011] audit: audit_lost=5993 audit_rate_limit=0 audit_backlog_limit=64 [ 360.103490][ T30] audit: type=1400 audit(348.010:173686): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.120571][T23011] audit: backlog limit exceeded [ 360.131981][ T140] audit: audit_lost=5994 audit_rate_limit=0 audit_backlog_limit=64 [ 360.152951][ T140] audit: backlog limit exceeded [ 360.160368][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.166783][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.605876][T23078] netlink: 'syz.3.10990': attribute type 30 has an invalid length. [ 360.789773][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11002'. [ 360.945079][T23121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11011'. [ 360.995698][T23127] device bridge_slave_0 entered promiscuous mode [ 361.042313][T23127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11014'. [ 361.051419][T23127] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 361.498878][T23196] device bridge11 entered promiscuous mode [ 361.728239][T23230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.883135][T23247] bridge0: port 1(dummy0) entered disabled state [ 362.295352][T23293] netlink: 'syz.1.11102': attribute type 3 has an invalid length. [ 362.807977][T23360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.832250][T23365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.879307][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 363.061656][T23392] __nla_validate_parse: 3 callbacks suppressed [ 363.061678][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.120682][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.143122][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.170790][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.185580][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.214895][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.244341][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.275800][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.332104][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.393050][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 363.648782][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 363.991287][T23485] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 364.293415][T23527] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 364.634213][T23578] netlink: 'syz.2.11233': attribute type 8 has an invalid length. [ 364.732674][T23595] sock: sock_timestamping_bind_phc: sock not bind to device [ 364.825796][T23610] xt_CT: You must specify a L4 protocol and not use inversions on it [ 365.370166][ T30] kauditd_printk_skb: 16003 callbacks suppressed [ 365.370182][ T30] audit: type=1400 audit(353.036:189416): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 365.410707][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.427292][ T140] audit: audit_lost=6087 audit_rate_limit=0 audit_backlog_limit=64 [ 365.439300][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.445904][ T140] audit: backlog limit exceeded [ 365.450887][ T30] audit: type=1400 audit(353.036:189417): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.479424][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.486266][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.489892][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.495306][ T285] audit: audit_lost=6088 audit_rate_limit=0 audit_backlog_limit=64 [ 365.653476][T23729] ip_tables: iptables: counters copy to user failed while replacing table [ 365.725928][T23737] netlink: 'syz.2.11313': attribute type 3 has an invalid length. [ 365.736679][T23738] netlink: 'syz.1.11312': attribute type 1 has an invalid length. [ 365.768926][T23738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.902361][T23762] netlink: 'syz.4.11325': attribute type 10 has an invalid length. [ 366.118065][T23791] netlink: 'syz.4.11340': attribute type 3 has an invalid length. [ 366.384409][ C0] ip6_tunnel: ip6gretap6 xmit: Local address not yet configured! [ 366.745855][T23867] IPv6: sit2: Disabled Multicast RS [ 366.964472][T23898] tc_dump_action: action bad kind [ 367.053234][T23908] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 367.068834][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 367.245751][T23930] netlink: 'syz.2.11409': attribute type 12 has an invalid length. [ 367.364124][T23946] xt_TPROXY: Can be used only with -p tcp or -p udp [ 367.681056][T23992] xt_hashlimit: max too large, truncated to 1048576 [ 368.436183][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 368.460300][T24076] __nla_validate_parse: 87 callbacks suppressed [ 368.460319][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11478'. [ 368.495786][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11478'. [ 368.537179][T24078] netlink: 'syz.0.11480': attribute type 7 has an invalid length. [ 368.549267][T24078] netlink: 'syz.0.11480': attribute type 8 has an invalid length. [ 368.664686][T24090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11485'. [ 368.689457][T24090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11485'. [ 368.768501][T24098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.775807][T24098] IPv6: NLM_F_CREATE should be set when creating new route [ 368.783094][T24098] IPv6: NLM_F_CREATE should be set when creating new route [ 369.154787][T24142] netlink: 'syz.4.11512': attribute type 16 has an invalid length. [ 369.188818][T24142] netlink: 'syz.4.11512': attribute type 17 has an invalid length. [ 369.225624][T24142] device sit0 left promiscuous mode [ 369.262195][T24142] device syz_tun left promiscuous mode [ 369.297692][T24142] device bridge_slave_0 left promiscuous mode [ 369.327646][T24142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.351372][T24142] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 369.400307][T24142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.436733][T24142] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 369.468369][T24142] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 369.503146][T24142] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 369.526228][ T524] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 369.544462][T24142] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 369.568034][T24142] device bridge7 left promiscuous mode [ 369.599122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.622747][ T26] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 369.778184][T24173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11527'. [ 369.868536][ T26] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 369.881934][ T26] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 370.192740][T24215] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 370.366664][T24235] binfmt_misc: register: failed to install interpreter file ./file0 [ 370.722874][ T30] kauditd_printk_skb: 18502 callbacks suppressed [ 370.722892][ T30] audit: type=1400 audit(358.033:206836): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 370.761644][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.774173][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.784200][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.792637][T24298] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.798676][ T140] audit: audit_lost=6451 audit_rate_limit=0 audit_backlog_limit=64 [ 370.800021][ T30] audit: type=1400 audit(358.042:206837): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 370.811142][ T285] audit: audit_lost=6452 audit_rate_limit=0 audit_backlog_limit=64 [ 370.828895][T24299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11591'. [ 370.835634][T24298] audit: audit_lost=6453 audit_rate_limit=0 audit_backlog_limit=64 [ 370.835652][T24298] audit: backlog limit exceeded [ 371.027763][T24324] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 371.222751][T24350] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 371.278935][T24351] bridge0: port 1(dummy0) entered blocking state [ 371.285379][T24351] bridge0: port 1(dummy0) entered forwarding state [ 371.315659][T24351] device veth1_macvtap left promiscuous mode [ 371.333728][T24354] netlink: 'syz.0.11617': attribute type 1 has an invalid length. [ 371.387951][T24365] xt_l2tp: missing protocol rule (udp|l2tpip) [ 371.659177][T24399] netlink: 'syz.0.11640': attribute type 5 has an invalid length. [ 371.752156][T24410] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 371.794268][T24414] netlink: 'syz.3.11645': attribute type 3 has an invalid length. [ 371.855584][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 372.064401][T24454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.170101][T24466] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 372.184588][T24470] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11676'. [ 372.211987][T24470] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11676'. [ 372.570297][T24523] xt_SECMARK: invalid security context 'unconfined' [ 372.696520][T24543] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 372.829681][T24563] x_tables: unsorted underflow at hook 3 [ 373.186035][T24611] device ipip1 entered promiscuous mode [ 374.201211][T24744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11809'. [ 374.223556][T24744] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11809'. [ 374.413331][T24776] xt_l2tp: missing protocol rule (udp|l2tpip) [ 374.890268][T24852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11862'. [ 374.989187][T24865] netlink: 'syz.0.11869': attribute type 46 has an invalid length. [ 375.009967][T24865] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11869'. [ 375.032596][T24870] netlink: 'syz.2.11872': attribute type 3 has an invalid length. [ 375.059469][T24870] netlink: 'syz.2.11872': attribute type 3 has an invalid length. [ 375.249672][T24897] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11885'. [ 375.257775][T24896] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 375.277138][T24899] netlink: 276 bytes leftover after parsing attributes in process `syz.2.11886'. [ 375.704996][T24949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11911'. [ 375.839846][T24969] binfmt_misc: register: failed to install interpreter file ./cgroup [ 376.077422][ T30] kauditd_printk_skb: 19589 callbacks suppressed [ 376.077441][ T30] audit: type=1400 audit(363.058:224722): avc: denied { read write } for pid=286 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 376.121139][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.127723][ T285] audit: audit_lost=7022 audit_rate_limit=0 audit_backlog_limit=64 [ 376.136363][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.143106][ T140] audit: audit_lost=7023 audit_rate_limit=0 audit_backlog_limit=64 [ 376.151073][ T140] audit: backlog limit exceeded [ 376.152134][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.158185][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.169594][ T285] audit: backlog limit exceeded [ 376.174945][ T30] audit: type=1400 audit(363.058:224723): avc: denied { read write } for pid=289 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 376.223558][T25016] netlink: 'syz.1.11943': attribute type 6 has an invalid length. [ 376.234598][T25016] netlink: 'syz.1.11943': attribute type 5 has an invalid length. [ 376.249451][T25016] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.11943'. [ 376.422705][T25041] netlink: 3584 bytes leftover after parsing attributes in process `syz.3.11957'. [ 376.464399][T25045] netlink: 'syz.2.11958': attribute type 5 has an invalid length. [ 376.574907][T25061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11965'. [ 376.670252][T25069] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 376.742027][T25073] IPv6: sit5: Disabled Multicast RS [ 377.255685][T25153] xt_TCPMSS: Only works on TCP SYN packets [ 377.339043][T25163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.477155][T25180] IPv6: sit1: Disabled Multicast RS [ 377.484553][T25182] ================================================================== [ 377.492776][T25182] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 377.501157][T25182] Read of size 4 at addr ffff888140a7d470 by task syz.4.12026/25182 [ 377.509168][T25182] [ 377.511601][T25182] CPU: 1 PID: 25182 Comm: syz.4.12026 Tainted: G W syzkaller #0 [ 377.520572][T25182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 377.530680][T25182] Call Trace: [ 377.534089][T25182] [ 377.537093][T25182] __dump_stack+0x21/0x30 [ 377.541618][T25182] dump_stack_lvl+0x110/0x170 [ 377.546355][T25182] ? show_regs_print_info+0x20/0x20 [ 377.551593][T25182] ? load_image+0x3f0/0x3f0 [ 377.556149][T25182] print_address_description+0x7f/0x2c0 [ 377.561737][T25182] ? unaccount_page_cache_page+0x6f1/0x760 [ 377.567665][T25182] kasan_report+0x10f/0x150 [ 377.572324][T25182] ? unaccount_page_cache_page+0x6f1/0x760 [ 377.578186][T25182] __asan_report_load4_noabort+0x14/0x20 [ 377.583862][T25182] unaccount_page_cache_page+0x6f1/0x760 [ 377.589544][T25182] __delete_from_page_cache+0xbe/0x470 [ 377.595058][T25182] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 377.602134][T25182] ? __kasan_check_write+0x14/0x20 [ 377.607352][T25182] ? __kasan_check_read+0x11/0x20 [ 377.612479][T25182] ? workingset_eviction+0x402/0x9f0 [ 377.617896][T25182] __remove_mapping+0x601/0x990 [ 377.622870][T25182] ? remove_mapping+0xa0/0xa0 [ 377.627590][T25182] ? __kasan_check_read+0x11/0x20 [ 377.632659][T25182] shrink_page_list+0x2a24/0x5800 [ 377.637877][T25182] ? shrink_page_list+0x8a1/0x5800 [ 377.643070][T25182] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 377.649278][T25182] ? __this_cpu_preempt_check+0x13/0x20 [ 377.654959][T25182] ? __mod_zone_page_state+0x8e/0xd0 [ 377.660292][T25182] ? isolate_lru_pages+0xff1/0x11f0 [ 377.665558][T25182] ? should_run_aging+0x410/0x410 [ 377.670653][T25182] ? cgroup_rstat_updated+0xc0/0x360 [ 377.676074][T25182] ? _raw_spin_lock_irq+0x95/0xf0 [ 377.681264][T25182] ? __this_cpu_preempt_check+0x13/0x20 [ 377.686862][T25182] ? __count_memcg_events+0xad/0x120 [ 377.692287][T25182] shrink_lruvec+0x11eb/0x3b00 [ 377.697087][T25182] ? release_firmware_map_entry+0x190/0x190 [ 377.703127][T25182] ? mem_cgroup_shrink_node+0x550/0x550 [ 377.708689][T25182] ? preempt_schedule_common+0xbe/0xf0 [ 377.714162][T25182] ? schedule_preempt_disabled+0x20/0x20 [ 377.719812][T25182] ? __kasan_check_write+0x14/0x20 [ 377.724944][T25182] ? _raw_spin_lock+0x94/0xf0 [ 377.729651][T25182] ? _raw_spin_trylock_bh+0x150/0x150 [ 377.735046][T25182] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 377.740880][T25182] ? inactive_is_low+0x160/0x2f0 [ 377.745839][T25182] ? css_next_descendant_pre+0x1e1/0x210 [ 377.751508][T25182] ? mem_cgroup_iter+0x465/0x6c0 [ 377.756471][T25182] shrink_node+0x11ee/0x2a40 [ 377.761111][T25182] ? allow_direct_reclaim+0x370/0x370 [ 377.766519][T25182] ? _raw_spin_lock_irq+0x95/0xf0 [ 377.771575][T25182] ? _raw_spin_lock_irqsave+0x130/0x130 [ 377.777166][T25182] do_try_to_free_pages+0x5a7/0x1580 [ 377.782473][T25182] ? _raw_spin_lock_irqsave+0x130/0x130 [ 377.788046][T25182] ? try_to_free_pages+0xc50/0xc50 [ 377.793178][T25182] ? propagate_protected_usage+0x84/0x250 [ 377.798924][T25182] try_to_free_mem_cgroup_pages+0x261/0x610 [ 377.804852][T25182] ? shrink_lruvec+0x3b00/0x3b00 [ 377.809808][T25182] ? mutex_unlock+0x8f/0x230 [ 377.814426][T25182] mem_cgroup_force_empty_write+0x130/0x170 [ 377.820428][T25182] ? memcg_stat_show+0x1360/0x1360 [ 377.825556][T25182] cgroup_file_write+0x294/0x560 [ 377.830532][T25182] ? cgroup_seqfile_stop+0xc0/0xc0 [ 377.835664][T25182] ? mutex_lock+0x9b/0x1c0 [ 377.840102][T25182] ? wait_for_completion_killable_timeout+0x10/0x10 [ 377.846721][T25182] ? __kasan_check_write+0x14/0x20 [ 377.851854][T25182] ? cgroup_seqfile_stop+0xc0/0xc0 [ 377.856991][T25182] kernfs_fop_write_iter+0x2bd/0x400 [ 377.862387][T25182] vfs_write+0x831/0xfd0 [ 377.866704][T25182] ? file_end_write+0x1b0/0x1b0 [ 377.871595][T25182] ? wait_for_completion_killable_timeout+0x10/0x10 [ 377.878224][T25182] ? __fget_files+0x2e1/0x340 [ 377.882984][T25182] ? __fdget_pos+0x2d2/0x380 [ 377.887592][T25182] ? ksys_write+0x70/0x260 [ 377.892032][T25182] ksys_write+0x14a/0x260 [ 377.896399][T25182] ? __ia32_sys_read+0x90/0x90 [ 377.901185][T25182] ? __kasan_check_write+0x14/0x20 [ 377.906317][T25182] ? switch_fpu_return+0x15d/0x2c0 [ 377.911535][T25182] __x64_sys_write+0x7b/0x90 [ 377.916141][T25182] x64_sys_call+0x8ef/0x9a0 [ 377.920684][T25182] do_syscall_64+0x4c/0xa0 [ 377.925122][T25182] ? clear_bhb_loop+0x50/0xa0 [ 377.929819][T25182] ? clear_bhb_loop+0x50/0xa0 [ 377.934518][T25182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.940443][T25182] RIP: 0033:0x7f2426973159 [ 377.944951][T25182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.964666][T25182] RSP: 002b:00007f24253cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.973130][T25182] RAX: ffffffffffffffda RBX: 00007f2426bfafa0 RCX: 00007f2426973159 [ 377.981134][T25182] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 377.989128][T25182] RBP: 00007f2426a0a06b R08: 0000000000000000 R09: 0000000000000000 [ 377.997122][T25182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.005112][T25182] R13: 00007f2426bfb038 R14: 00007f2426bfafa0 R15: 00007ffca3a66658 [ 378.013110][T25182] [ 378.016156][T25182] [ 378.018492][T25182] Allocated by task 140: [ 378.022834][T25182] __kasan_kmalloc+0xd4/0x100 [ 378.027540][T25182] __kmalloc_track_caller+0x13c/0x2c0 [ 378.032952][T25182] __alloc_skb+0x210/0x730 [ 378.037457][T25182] audit_log_start+0x407/0x8a0 [ 378.042246][T25182] common_lsm_audit+0xd2/0x1670 [ 378.047312][T25182] slow_avc_audit+0x1c4/0x240 [ 378.052075][T25182] avc_has_perm+0x1fb/0x250 [ 378.056599][T25182] selinux_socket_recvmsg+0x22f/0x340 [ 378.061989][T25182] security_socket_recvmsg+0x77/0xb0 [ 378.067297][T25182] ____sys_recvmsg+0x223/0x5b0 [ 378.072154][T25182] ___sys_recvmsg+0x213/0x5c0 [ 378.076880][T25182] __x64_sys_recvmsg+0x1fe/0x2d0 [ 378.081847][T25182] x64_sys_call+0x705/0x9a0 [ 378.086417][T25182] do_syscall_64+0x4c/0xa0 [ 378.090853][T25182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.096766][T25182] [ 378.099106][T25182] Freed by task 30: [ 378.102918][T25182] kasan_set_track+0x4a/0x70 [ 378.107528][T25182] kasan_set_free_info+0x23/0x40 [ 378.112485][T25182] ____kasan_slab_free+0x125/0x160 [ 378.117610][T25182] __kasan_slab_free+0x11/0x20 [ 378.122397][T25182] slab_free_freelist_hook+0xc2/0x190 [ 378.127788][T25182] kfree+0xc4/0x270 [ 378.131615][T25182] skb_release_data+0x7bd/0xa20 [ 378.136489][T25182] kfree_skb+0xb9/0x2f0 [ 378.140668][T25182] kauditd_hold_skb+0x116/0x210 [ 378.145569][T25182] kauditd_send_queue+0x28c/0x2e0 [ 378.150615][T25182] kauditd_thread+0x4ea/0x880 [ 378.155310][T25182] kthread+0x3f5/0x4f0 [ 378.159479][T25182] ret_from_fork+0x1f/0x30 [ 378.163940][T25182] [ 378.166277][T25182] The buggy address belongs to the object at ffff888140a7d000 [ 378.166277][T25182] which belongs to the cache kmalloc-2k of size 2048 [ 378.180405][T25182] The buggy address is located 1136 bytes inside of [ 378.180405][T25182] 2048-byte region [ffff888140a7d000, ffff888140a7d800) [ 378.193884][T25182] The buggy address belongs to the page: [ 378.199539][T25182] page:ffffea0005029e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x140a78 [ 378.209793][T25182] head:ffffea0005029e00 order:3 compound_mapcount:0 compound_pincount:0 [ 378.218131][T25182] flags: 0x4000000000010200(slab|head|zone=1) [ 378.224237][T25182] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043200 [ 378.232841][T25182] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 378.241434][T25182] page dumped because: kasan: bad access detected [ 378.247863][T25182] page_owner tracks the page as allocated [ 378.253585][T25182] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 19500, ts 334907718287, free_ts 334905209130 [ 378.274446][T25182] post_alloc_hook+0x192/0x1b0 [ 378.279312][T25182] prep_new_page+0x1c/0x110 [ 378.283835][T25182] get_page_from_freelist+0x2c3a/0x2cd0 [ 378.289397][T25182] __alloc_pages+0x1a2/0x460 [ 378.294004][T25182] new_slab+0xa0/0x4d0 [ 378.298108][T25182] ___slab_alloc+0x3ac/0x840 [ 378.302725][T25182] __slab_alloc+0x49/0x90 [ 378.307065][T25182] __kmalloc+0x16a/0x2c0 [ 378.311321][T25182] sk_prot_alloc+0xed/0x320 [ 378.315851][T25182] sk_alloc+0x38/0x430 [ 378.319937][T25182] netlink_create+0x3c2/0x610 [ 378.324719][T25182] __sock_create+0x38d/0x7a0 [ 378.329330][T25182] __sys_socket+0xec/0x190 [ 378.333762][T25182] __x64_sys_socket+0x7a/0x90 [ 378.338450][T25182] x64_sys_call+0x8c5/0x9a0 [ 378.342991][T25182] do_syscall_64+0x4c/0xa0 [ 378.347424][T25182] page last free stack trace: [ 378.352108][T25182] free_unref_page_prepare+0x5fa/0x600 [ 378.357587][T25182] free_unref_page+0xae/0x540 [ 378.362287][T25182] free_the_page+0x13/0x20 [ 378.366726][T25182] page_frag_free+0x10a/0x120 [ 378.371416][T25182] skb_release_data+0x8eb/0xa20 [ 378.376287][T25182] __kfree_skb+0x50/0x70 [ 378.380557][T25182] tcp_recvmsg_locked+0x13d1/0x24f0 [ 378.385815][T25182] tcp_recvmsg+0x233/0x770 [ 378.390250][T25182] inet_recvmsg+0x13a/0x470 [ 378.394778][T25182] sock_read_iter+0x2c2/0x380 [ 378.399475][T25182] vfs_read+0x6c0/0xc20 [ 378.403660][T25182] ksys_read+0x14a/0x260 [ 378.407937][T25182] __x64_sys_read+0x7b/0x90 [ 378.412459][T25182] x64_sys_call+0x96d/0x9a0 [ 378.416989][T25182] do_syscall_64+0x4c/0xa0 [ 378.421429][T25182] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 378.427346][T25182] [ 378.429694][T25182] Memory state around the buggy address: [ 378.435384][T25182] ffff888140a7d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.443456][T25182] ffff888140a7d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.451551][T25182] >ffff888140a7d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.459620][T25182] ^ [ 378.467351][T25182] ffff888140a7d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.475425][T25182] ffff888140a7d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 378.483500][T25182] ================================================================== [ 378.491568][T25182] Disabling lock debugging due to kernel taint [ 378.505338][T25183] xt_l2tp: unknown flags: 10 [ 381.431165][ T30] kauditd_printk_skb: 37670 callbacks suppressed [ 381.431183][ T30] audit: type=1400 audit(368.055:260767): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.458943][ T30] audit: type=1400 audit(368.065:260768): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.461937][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.481194][ T30] audit: type=1400 audit(368.065:260769): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.487365][ T140] audit: audit_lost=7567 audit_rate_limit=0 audit_backlog_limit=64 [ 381.507432][ T30] audit: type=1400 audit(368.065:260770): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.514916][ T140] audit: backlog limit exceeded [ 381.535584][ T30] audit: type=1400 audit(368.065:260771): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.543795][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.561988][ T30] audit: type=1400 audit(368.065:260772): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 385.533919][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 385.544476][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 386.783930][ T30] kauditd_printk_skb: 58149 callbacks suppressed [ 386.783947][ T30] audit: type=1400 audit(373.062:318413): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.802476][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.811003][ T30] audit: type=1400 audit(373.071:318414): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.820103][ T140] audit: audit_lost=7738 audit_rate_limit=0 audit_backlog_limit=64 [ 386.838231][ T30] audit: type=1400 audit(373.071:318415): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.847150][ T140] audit: backlog limit exceeded [ 386.867134][ T30] audit: type=1400 audit(373.071:318416): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.874053][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.894401][ T30] audit: type=1400 audit(373.071:318417): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.899412][ T140] audit: audit_lost=7739 audit_rate_limit=0 audit_backlog_limit=64