last executing test programs: 531.551306ms ago: executing program 2 (id=9788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x20000000000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 478.293641ms ago: executing program 4 (id=9793): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) 437.050035ms ago: executing program 4 (id=9796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x76, 0x1, 0x0, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x15}, 0x23f58e5b666a3f02) 383.785001ms ago: executing program 2 (id=9800): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) 358.919613ms ago: executing program 4 (id=9803): r0 = open(&(0x7f0000000380)='.\x00', 0xc0000, 0xc2) getdents(r0, &(0x7f0000000000)=""/149, 0x95) 320.763417ms ago: executing program 3 (id=9806): r0 = socket(0x10, 0x802, 0x0) connect$netlink(r0, &(0x7f00000001c0)=@proc, 0xc) 236.983556ms ago: executing program 0 (id=9807): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x3a, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) 235.965176ms ago: executing program 4 (id=9808): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "86077561de7ae546a88f1175897a0798adfcab4b2958d40c59cbeb056c5a14ef5295cabfb3e3e7ca8e8b0353a5230467718748e28465b0c81698b271f26434fc", 0x3b}, 0x48, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) 234.864236ms ago: executing program 2 (id=9809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0xac, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x47}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x5, 0x1, {0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa993, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x200000}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffdc, 0x2ccf}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4054) 227.114637ms ago: executing program 0 (id=9810): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x1, 0x0) 198.98624ms ago: executing program 3 (id=9811): r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r0, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/85, 0x55}, {&(0x7f0000000640)=""/144, 0x90}], 0x2, 0x800, 0x4000000) 189.94515ms ago: executing program 1 (id=9812): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9}, 0x38) 189.62913ms ago: executing program 0 (id=9813): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat$cgroup_int(r0, &(0x7f0000007340)='memory.oom.group\x00', 0x2, 0x0) 152.411385ms ago: executing program 2 (id=9814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth1_vlan\x00', {0x2, 0x440, @empty}}) 152.331965ms ago: executing program 1 (id=9815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8995, &(0x7f0000000140)='veth0:') 152.068994ms ago: executing program 0 (id=9816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001000ffff25bd7000fbdadf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500580012800e00010069703667726574617000000044000280140007000000000000000000fffffffffffffffe060011004e230000060010004e230000050016000100000014000600ff01"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x24040810) 134.818096ms ago: executing program 4 (id=9817): setresgid(0xee00, 0x0, 0x0) setregid(0x0, 0x0) 129.870977ms ago: executing program 3 (id=9818): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x4e, "26ba034b356e37c26d6cc459a3e7cd4b2700000000b36f5a766ffe87b7aa4277b041000000ac44c8b8bec7091f746b0a7378b2852096e1c63aa32c4289290469203ef858a57cc1dd8b19ef600d97"}}) 115.263528ms ago: executing program 0 (id=9819): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22a00, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) 114.862058ms ago: executing program 1 (id=9820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006c00010028bd7000fbdbdf2500000000", @ANYBLOB="040003000038000004003480140036"], 0x38}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 106.241929ms ago: executing program 2 (id=9821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) 80.821532ms ago: executing program 3 (id=9822): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 74.530392ms ago: executing program 4 (id=9823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e01060000f8"], 0x164}}, 0x0) 66.916843ms ago: executing program 1 (id=9824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00', 0x2}, &(0x7f00000001c0)=0x1e) 49.147085ms ago: executing program 3 (id=9825): r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 46.709725ms ago: executing program 2 (id=9826): r0 = add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000740)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000cc0)='\x00', 0x0) 19.622658ms ago: executing program 1 (id=9827): r0 = socket(0xa, 0x1, 0x0) getsockopt(r0, 0x1, 0x2c, 0x0, &(0x7f0000000040)) 19.235498ms ago: executing program 0 (id=9828): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@loopback, 0x800, 0x0, 0x1, 0xb, 0x13b}, 0x20) 349.91µs ago: executing program 3 (id=9829): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x3fd, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x108) 0s ago: executing program 1 (id=9830): setreuid(0x0, 0xee01) setfsuid(0x0) 0s ago: executing program 3 (id=9832): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) kernel console output (not intermixed with test programs): 292.853624][ T287] F2FS-fs (loop2): access invalid blkaddr:36 [ 292.858570][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.866761][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.875781][ T287] CPU: 1 PID: 287 Comm: syz-executor Tainted: G W syzkaller #0 [ 292.884686][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 292.889674][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.894783][ T287] Call Trace: [ 292.894792][ T287] [ 292.894800][ T287] __dump_stack+0x21/0x30 [ 292.913538][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 292.913531][ T287] dump_stack_lvl+0x110/0x170 [ 292.913559][ T287] ? show_regs_print_info+0x20/0x20 [ 292.931249][ T287] ? f2fs_set_node_page_dirty+0x3d1/0x530 [ 292.932719][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.937004][ T287] dump_stack+0x15/0x20 [ 292.937030][ T287] f2fs_is_valid_blkaddr+0xc27/0x1220 [ 292.954586][ T287] f2fs_truncate_data_blocks_range+0x641/0xeb0 [ 292.957612][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 292.960789][ T287] f2fs_remove_inode_page+0x400/0x800 [ 292.973993][ T287] ? down_read_trylock+0x317/0x630 [ 292.979143][ T287] ? truncate_node+0x540/0x540 [ 292.980162][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.983943][ T287] ? __remove_ino_entry+0x14b/0x220 [ 292.997071][ T287] f2fs_evict_inode+0x827/0x1500 [ 293.002041][ T287] ? f2fs_write_inode+0x830/0x830 [ 293.003446][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.007096][ T287] ? bit_waitqueue+0x30/0x30 [ 293.007122][ T287] ? compat_start_thread+0x20/0x20 [ 293.024699][ T287] ? f2fs_write_inode+0x830/0x830 [ 293.029762][ T287] evict+0x4b6/0x8b0 [ 293.029787][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.033686][ T287] ? proc_nr_inodes+0x310/0x310 [ 293.033710][ T287] ? __kasan_check_read+0x11/0x20 [ 293.033731][ T287] ? __kasan_check_write+0x14/0x20 [ 293.033751][ T287] iput+0x651/0x7e0 [ 293.033772][ T287] dentry_unlink_inode+0x338/0x3e0 [ 293.057231][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.060522][ T287] __dentry_kill+0x45b/0x660 [ 293.076702][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.078064][ T287] shrink_dentry_list+0x38e/0x500 [ 293.091019][ T287] shrink_dcache_parent+0xa9/0x270 [ 293.096186][ T287] ? d_set_mounted+0x240/0x240 [ 293.099403][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.100978][ T287] ? down_read_trylock+0x317/0x630 [ 293.114107][ T287] ? __init_rwsem+0x1d0/0x1d0 [ 293.118393][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.118820][ T287] do_one_tree+0x27/0xe0 [ 293.131153][ T287] shrink_dcache_for_umount+0x6a/0x110 [ 293.136655][ T287] generic_shutdown_super+0x66/0x330 [ 293.136886][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.141964][ T287] kill_block_super+0x7f/0xf0 [ 293.141987][ T287] kill_f2fs_super+0x30a/0x3d0 [ 293.142009][ T287] ? f2fs_mount+0x40/0x40 [ 293.142029][ T287] ? unregister_shrinker+0x1f4/0x280 [ 293.142050][ T287] deactivate_locked_super+0xa0/0x100 [ 293.166155][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.169164][ T287] deactivate_super+0xaf/0xe0 [ 293.184657][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.187330][ T287] cleanup_mnt+0x44f/0x500 [ 293.187359][ T287] __cleanup_mnt+0x19/0x20 [ 293.203929][ T287] task_work_run+0x127/0x190 [ 293.208567][ T287] exit_to_user_mode_loop+0xd0/0xe0 [ 293.208991][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.213847][ T287] exit_to_user_mode_prepare+0x87/0xd0 [ 293.213870][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 293.213893][ T287] do_syscall_64+0x58/0xa0 [ 293.235983][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.237176][ T287] ? clear_bhb_loop+0x50/0xa0 [ 293.249602][ T287] ? clear_bhb_loop+0x50/0xa0 [ 293.254323][ T287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.256947][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.260276][ T287] RIP: 0033:0x7fc4da04c797 [ 293.272502][ T287] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 293.280450][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.292134][ T287] RSP: 002b:00007ffcc4bf6e08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 293.292160][ T287] RAX: 0000000000000000 RBX: 00007fc4da0e1f93 RCX: 00007fc4da04c797 [ 293.292174][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc4bf6ec0 [ 293.323979][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.324968][ T287] RBP: 00007ffcc4bf6ec0 R08: 00007ffcc4bf7ec0 R09: 00000000ffffffff [ 293.324988][ T287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc4bf7f50 [ 293.343760][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.349046][ T287] R13: 00007fc4da0e1f93 R14: 000000000004767d R15: 00007ffcc4bf7f90 [ 293.349071][ T287] [ 293.369542][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.388014][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.409289][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.431830][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.455075][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.478396][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.496523][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.516477][T11988] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 293.532603][T11988] device bridge2 entered promiscuous mode [ 293.555666][T12004] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 293.572447][T12004] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 293.594887][T12009] binder: 12008:12009 ioctl 400c620e 200000000100 returned -22 [ 293.749334][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.756592][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.858460][ T30] audit: type=1400 audit(1794024603.688:439): avc: denied { map } for pid=12029 comm="syz.3.5528" path="socket:[49864]" dev="sockfs" ino=49864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 293.883222][T12032] futex_wake_op: syz.0.5529 tries to shift op by -1; fix this program [ 294.053585][T12061] netlink: 'syz.2.5542': attribute type 12 has an invalid length. [ 294.107386][T12064] __nla_validate_parse: 2 callbacks suppressed [ 294.107407][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5544'. [ 294.135809][T12076] netlink: 'syz.0.5549': attribute type 16 has an invalid length. [ 294.154811][T12076] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5549'. [ 294.280893][T12096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.331650][T12108] netlink: 'syz.3.5565': attribute type 3 has an invalid length. [ 294.333751][T12105] x_tables: duplicate entry at hook 4 [ 294.346050][ T30] audit: type=1326 audit(1794024604.147:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.0.5568" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a7e98559 code=0x7ffc0000 [ 294.396223][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5569'. [ 294.409684][ T30] audit: type=1326 audit(1794024604.184:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.0.5568" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a7e98559 code=0x7ffc0000 [ 294.431883][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5569'. [ 294.463471][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5574'. [ 294.479013][ T30] audit: type=1326 audit(1794024604.184:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.0.5568" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a7e98559 code=0x7ffc0000 [ 294.570057][ T30] audit: type=1326 audit(1794024604.184:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.0.5568" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f84a7e98559 code=0x7ffc0000 [ 294.579854][T12137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5581'. [ 294.623572][ T30] audit: type=1326 audit(1794024604.184:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.0.5568" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84a7e98559 code=0x7ffc0000 [ 294.661760][ T30] audit: type=1326 audit(1794024604.184:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.0.5568" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f84a7e98559 code=0x7ffc0000 [ 294.724238][ T30] audit: type=1326 audit(1794024604.184:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.0.5568" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84a7e98559 code=0x7ffc0000 [ 294.764102][T12159] netlink: 'syz.1.5587': attribute type 11 has an invalid length. [ 294.785236][ T30] audit: type=1400 audit(1794024604.250:447): avc: denied { append } for pid=12118 comm="syz.3.5572" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 295.189206][T12253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5635'. [ 295.220649][T12253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5635'. [ 295.248485][T12253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5635'. [ 295.306554][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5650'. [ 295.428958][T12304] loop4: detected capacity change from 0 to 256 [ 295.453464][T12303] netlink: 'syz.3.5659': attribute type 1 has an invalid length. [ 295.463496][T12304] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 295.759972][T12366] loop3: detected capacity change from 0 to 16 [ 295.839242][T12366] erofs: (device loop3): mounted with root inode @ nid 36. [ 295.894387][T12366] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=86 [ 295.939230][T12366] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=86 [ 295.964061][T12411] netlink: 'syz.4.5715': attribute type 3 has an invalid length. [ 296.006104][T12419] SELinux: failed to load policy [ 296.041932][T12429] netlink: 'syz.0.5725': attribute type 9 has an invalid length. [ 296.056791][T12429] netlink: 'syz.0.5725': attribute type 7 has an invalid length. [ 296.064586][T12429] netlink: 'syz.0.5725': attribute type 8 has an invalid length. [ 296.100193][T12432] netlink: 'syz.1.5727': attribute type 12 has an invalid length. [ 296.152078][T12449] x_tables: unsorted entry at hook 3 [ 296.231973][T12468] loop3: detected capacity change from 0 to 512 [ 296.248655][T12468] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 296.349091][T12468] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,norecovery,dioread_nolock,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 296.389356][T12468] ext4 filesystem being mounted at /1090/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.480165][T12488] loop2: detected capacity change from 0 to 40427 [ 296.564351][T12488] F2FS-fs (loop2): invalid crc value [ 296.605994][T12488] F2FS-fs (loop2): Found nat_bits in checkpoint [ 296.725710][T12488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 296.791259][T12595] x_tables: duplicate underflow at hook 4 [ 296.965171][T12631] device gre1 left promiscuous mode [ 296.971470][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 296.982255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.998632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 297.008136][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.026336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.042384][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.063596][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.075774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.168254][T12673] device veth0_vlan left promiscuous mode [ 297.181761][T12673] device veth0_vlan entered promiscuous mode [ 297.189306][T12673] device veth1_macvtap left promiscuous mode [ 297.197022][T12673] device veth1_macvtap entered promiscuous mode [ 297.232800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.251982][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.260097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.273315][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.280441][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.291536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.304822][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.313504][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.320627][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.328448][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.337370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 297.345859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.356460][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 297.365068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.373937][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.382701][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.391060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.400851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.410448][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.419062][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.427845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.436426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.444873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.453033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.461353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.469908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.478404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.486955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.495549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.503886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.512064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.519738][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.527516][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.535743][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.544541][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.552336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.593724][T12706] IPv6: sit2: Disabled Multicast RS [ 297.633864][T12715] device lo left promiscuous mode [ 297.652931][T12715] device tunl0 left promiscuous mode [ 297.658792][T12715] device gre0 left promiscuous mode [ 297.679681][T12715] device gretap0 left promiscuous mode [ 297.687317][T12715] device erspan0 left promiscuous mode [ 297.694925][T12715] device ip_vti0 left promiscuous mode [ 297.703411][T12715] device ip6_vti0 left promiscuous mode [ 297.709861][T12715] device sit0 left promiscuous mode [ 297.726353][T12715] device ip6tnl0 left promiscuous mode [ 297.738437][T12715] device ip6gre0 left promiscuous mode [ 297.744911][T12715] device syz_tun left promiscuous mode [ 297.751675][T12715] device ip6gretap0 left promiscuous mode [ 297.758516][T12715] device bridge0 left promiscuous mode [ 297.764773][T12715] device dummy0 left promiscuous mode [ 297.771775][T12715] device veth0 left promiscuous mode [ 297.777887][T12715] device veth1 left promiscuous mode [ 297.789510][T12715] device wg1 left promiscuous mode [ 297.799028][T12715] device wg2 left promiscuous mode [ 297.805876][T12715] device veth0_to_bridge left promiscuous mode [ 297.813345][T12715] device veth1_to_bridge left promiscuous mode [ 297.820440][T12715] device veth0_to_bond left promiscuous mode [ 297.827266][T12715] device bond_slave_0 left promiscuous mode [ 297.834170][T12715] device veth1_to_bond left promiscuous mode [ 297.840756][T12715] device bond_slave_1 left promiscuous mode [ 297.847372][T12715] device veth0_to_team left promiscuous mode [ 297.854484][T12715] device team_slave_0 left promiscuous mode [ 297.860797][T12715] device veth1_to_team left promiscuous mode [ 297.867366][T12715] device team_slave_1 left promiscuous mode [ 297.873692][T12715] device veth0_to_batadv left promiscuous mode [ 297.880591][T12715] device batadv_slave_0 left promiscuous mode [ 297.887230][T12715] device veth1_to_batadv left promiscuous mode [ 297.893887][T12715] device batadv_slave_1 left promiscuous mode [ 297.900645][T12715] device xfrm0 left promiscuous mode [ 297.906675][T12715] device veth0_to_hsr left promiscuous mode [ 297.912962][T12715] device hsr_slave_0 left promiscuous mode [ 297.919110][T12715] device veth1_to_hsr left promiscuous mode [ 297.925375][T12715] device hsr_slave_1 left promiscuous mode [ 297.931549][T12715] device veth1_virt_wifi left promiscuous mode [ 297.938109][T12715] device veth0_virt_wifi left promiscuous mode [ 297.944728][T12715] device veth1_vlan left promiscuous mode [ 297.952220][T12715] device vlan0 left promiscuous mode [ 297.957733][T12715] device vlan1 left promiscuous mode [ 297.963410][T12715] device veth1_macvtap left promiscuous mode [ 297.969895][T12715] device veth0_macvtap left promiscuous mode [ 297.976296][T12715] device veth1_macvtap entered promiscuous mode [ 297.982724][T12715] device macsec0 left promiscuous mode [ 297.988643][T12715] device syztnl1 left promiscuous mode [ 297.994685][T12715] device bridge1 left promiscuous mode [ 298.000437][T12715] device ip6tnl1 left promiscuous mode [ 298.006619][T12715] device erspan1 left promiscuous mode [ 298.012499][T12715] device vti0 left promiscuous mode [ 298.018298][T12715] device gretap1 left promiscuous mode [ 298.024533][T12715] device sit1 left promiscuous mode [ 298.030159][T12715] device bridge2 left promiscuous mode [ 298.038652][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.046294][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.054023][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4094: link becomes ready [ 298.063145][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.077391][ T395] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.081038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.097070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.106740][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.114406][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.133077][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.142041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.150478][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.157636][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.165528][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.174498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 298.183149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.193950][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 298.203140][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.216391][ T395] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.223150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.235347][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.243721][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.252548][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.261164][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.269585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.283424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.291966][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.300628][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.308921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.318519][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 298.318533][ T30] audit: type=1400 audit(1794024607.860:470): avc: denied { read } for pid=12762 comm="syz.1.5885" name="cgroup.procs" dev="cgroup" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 298.342708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.358091][ T30] audit: type=1400 audit(1794024607.860:471): avc: denied { open } for pid=12762 comm="syz.1.5885" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 298.377852][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.393488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.402030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.410758][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.418983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.419864][ T395] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.427938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.442290][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.449926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.458787][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.467225][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.476903][T12741] device erspan1 entered promiscuous mode [ 298.484748][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.492294][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.516164][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.525317][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.800587][ T30] audit: type=1400 audit(1794024608.309:472): avc: denied { setopt } for pid=12846 comm="syz.0.5927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.963780][T12893] loop1: detected capacity change from 0 to 256 [ 299.003229][T12893] FAT-fs (loop1): Directory bread(block 64) failed [ 299.015831][T12893] FAT-fs (loop1): Directory bread(block 65) failed [ 299.029546][T12893] FAT-fs (loop1): Directory bread(block 66) failed [ 299.042854][T12893] FAT-fs (loop1): Directory bread(block 67) failed [ 299.059834][T12893] FAT-fs (loop1): Directory bread(block 68) failed [ 299.072358][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.078478][T12893] FAT-fs (loop1): Directory bread(block 69) failed [ 299.087610][T12893] FAT-fs (loop1): Directory bread(block 70) failed [ 299.104019][T12893] FAT-fs (loop1): Directory bread(block 71) failed [ 299.113732][T12893] FAT-fs (loop1): Directory bread(block 72) failed [ 299.130250][T12893] FAT-fs (loop1): Directory bread(block 73) failed [ 299.148122][ T30] audit: type=1400 audit(1794024608.646:473): avc: denied { mount } for pid=12891 comm="syz.1.5948" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 299.205800][ T30] audit: type=1400 audit(1794024608.693:474): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 299.264031][ T506] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 299.284522][ T30] audit: type=1400 audit(1794024608.768:475): avc: denied { create } for pid=12945 comm="syz.0.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.338046][ T30] audit: type=1400 audit(1794024608.805:476): avc: denied { write } for pid=12945 comm="syz.0.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.378354][ T30] audit: type=1400 audit(1794024608.805:477): avc: denied { nlmsg_write } for pid=12945 comm="syz.0.5976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.404200][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.416951][T12966] xt_hashlimit: max too large, truncated to 1048576 [ 299.428694][T12970] xt_hashlimit: max too large, truncated to 1048576 [ 299.433408][T12968] loop2: detected capacity change from 0 to 1024 [ 299.436530][T12970] xt_limit: Overflow, try lower: 0/0 [ 299.503542][T12968] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #3: block 1: comm syz.2.5986: lblock 1 mapped to illegal pblock 1 (length 1) [ 299.518223][T12968] EXT4-fs (loop2): Remounting filesystem read-only [ 299.526483][T12968] Quota error (device loop2): write_blk: dquota write failed [ 299.531471][ T506] usb 4-1: Using ep0 maxpacket: 32 [ 299.534790][T12968] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 299.549301][T12968] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.5986: Failed to acquire dquot type 0 [ 299.561001][T12968] EXT4-fs (loop2): Remounting filesystem read-only [ 299.567784][T12968] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.5986: Freeing blocks not in datazone - block = 0, count = 4096 [ 299.582789][T12968] EXT4-fs (loop2): Remounting filesystem read-only [ 299.589523][T12968] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.5986: Invalid inode bitmap blk 0 in block_group 0 [ 299.604224][T12968] EXT4-fs (loop2): Remounting filesystem read-only [ 299.605752][T12992] __nla_validate_parse: 17 callbacks suppressed [ 299.605786][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5997'. [ 299.610893][T11972] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 299.642074][T12968] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 299.650785][T12968] EXT4-fs (loop2): Remounting filesystem read-only [ 299.657352][T12968] EXT4-fs (loop2): 1 orphan inode deleted [ 299.667895][T12968] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; acl,noblock_validity,user_xattr,max_batch_time=0x00000000000008c9,errors=remount-ro,block_validity,. Quota mode: writeback. [ 299.670504][ T506] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 299.687246][T11972] EXT4-fs (loop2): Remounting filesystem read-only [ 299.701438][T11972] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0 [ 299.717962][T11972] EXT4-fs (loop2): Remounting filesystem read-only [ 299.730396][T12968] EXT4-fs error (device loop2): ext4_search_dir:1551: inode #2: block 16: comm syz.2.5986: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 299.754379][T12968] EXT4-fs (loop2): Remounting filesystem read-only [ 299.761009][ T506] usb 4-1: config 0 has no interface number 0 [ 299.777128][ T506] usb 4-1: config 0 interface 184 has no altsetting 0 [ 299.958963][ T506] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 299.968166][T13055] device lo entered promiscuous mode [ 299.973651][ T506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.982550][T13056] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6027'. [ 299.983311][ T506] usb 4-1: Product: syz [ 299.996293][ T506] usb 4-1: Manufacturer: syz [ 300.000926][ T506] usb 4-1: SerialNumber: syz [ 300.006512][ T506] usb 4-1: config 0 descriptor?? [ 300.013522][T13055] device tunl0 entered promiscuous mode [ 300.024243][T13055] device gre0 entered promiscuous mode [ 300.041662][T13055] device gretap0 entered promiscuous mode [ 300.046007][ T506] smsc75xx v1.0.0 [ 300.068547][T13055] device erspan0 entered promiscuous mode [ 300.086240][T13055] device ip_vti0 entered promiscuous mode [ 302.588825][ T506] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 302.610115][ T506] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 302.630614][ T506] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 302.641345][ T506] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 302.655088][ T506] usb 4-1: USB disconnect, device number 114 [ 302.702225][T13055] device ip6_vti0 entered promiscuous mode [ 302.713770][T13055] device sit0 entered promiscuous mode [ 302.725048][T13055] device ip6tnl0 entered promiscuous mode [ 302.732673][T13055] device ip6gre0 entered promiscuous mode [ 302.739691][T13055] device syz_tun entered promiscuous mode [ 302.747333][T13055] device ip6gretap0 entered promiscuous mode [ 302.754448][T13055] device bridge0 entered promiscuous mode [ 302.761403][T13055] device dummy0 entered promiscuous mode [ 302.767960][T13055] device veth0 entered promiscuous mode [ 302.774631][T13055] device veth1 entered promiscuous mode [ 302.781842][T13055] device wg0 entered promiscuous mode [ 302.788153][T13055] device wg1 entered promiscuous mode [ 302.794747][T13055] device wg2 entered promiscuous mode [ 302.800899][T13055] device veth0_to_bridge entered promiscuous mode [ 302.809123][T13055] device veth1_to_bridge entered promiscuous mode [ 302.817180][T13055] device veth0_to_bond entered promiscuous mode [ 302.824589][T13055] device bond_slave_0 entered promiscuous mode [ 302.831499][T13055] device veth1_to_bond entered promiscuous mode [ 302.838841][T13055] device bond_slave_1 entered promiscuous mode [ 302.845980][T13055] device veth0_to_team entered promiscuous mode [ 302.853265][T13055] device team_slave_0 entered promiscuous mode [ 302.860295][T13055] device veth1_to_team entered promiscuous mode [ 302.867816][T13055] device team_slave_1 entered promiscuous mode [ 302.874705][T13055] device veth0_to_batadv entered promiscuous mode [ 302.882021][T13055] device batadv_slave_0 entered promiscuous mode [ 302.889287][T13055] device veth1_to_batadv entered promiscuous mode [ 302.896506][T13055] device batadv_slave_1 entered promiscuous mode [ 302.903699][T13055] device xfrm0 entered promiscuous mode [ 302.910423][T13055] device veth0_to_hsr entered promiscuous mode [ 302.917461][T13055] device hsr_slave_0 entered promiscuous mode [ 302.924292][T13055] device veth1_to_hsr entered promiscuous mode [ 302.931894][T13055] device hsr_slave_1 entered promiscuous mode [ 302.938648][T13055] device veth1_virt_wifi entered promiscuous mode [ 302.945888][T13055] device veth0_virt_wifi entered promiscuous mode [ 302.953301][T13055] device veth1_vlan entered promiscuous mode [ 302.961677][T13055] device vlan0 entered promiscuous mode [ 302.967443][T13055] device vlan1 entered promiscuous mode [ 302.974220][T13055] device veth0_macvtap entered promiscuous mode [ 302.981245][T13055] device macsec0 entered promiscuous mode [ 302.988181][T13055] device sit1 entered promiscuous mode [ 302.993955][T13055] device dummy1 entered promiscuous mode [ 303.000616][T13055] device ip6erspan0 entered promiscuous mode [ 303.007033][T13055] device bridge1 entered promiscuous mode [ 303.013329][T13055] device macsec0.1 entered promiscuous mode [ 303.019640][T13055] device ip6gre1 entered promiscuous mode [ 303.025933][T13055] device syztnl1 entered promiscuous mode [ 303.027212][ T510] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 303.039550][T13055] device bridge2 entered promiscuous mode [ 303.045986][T13055] device ip6gre2 entered promiscuous mode [ 303.052109][T13055] device sit2 entered promiscuous mode [ 303.058106][T13055] device gre1 entered promiscuous mode [ 303.064004][T13055] device syztnl2 entered promiscuous mode [ 303.122357][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6053'. [ 303.132850][T13104] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6053'. [ 303.144233][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6053'. [ 303.157498][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6053'. [ 303.167586][T13107] loop0: detected capacity change from 0 to 256 [ 303.168514][T13104] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6053'. [ 303.192250][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6053'. [ 303.201887][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6053'. [ 303.211139][T13104] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6053'. [ 303.379973][ T510] usb 3-1: not running at top speed; connect to a high speed hub [ 303.486819][ T510] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.509305][ T510] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 303.532049][ T510] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.581422][T13149] device vlan0 left promiscuous mode [ 303.594466][ T510] usb 3-1: Found UVC 1.00 device (046d:0825) [ 303.601592][ T510] usb 3-1: No streaming interface found for terminal 2. [ 303.610415][T13149] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 303.672080][T13164] xt_TPROXY: Can be used only with -p tcp or -p udp [ 303.728466][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 303.728482][ T30] audit: type=1326 audit(1794024612.921:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.3.6085" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2eac7a559 code=0x7ffc0000 [ 303.803658][ T30] audit: type=1326 audit(1794024612.949:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.3.6085" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fe2eac7a559 code=0x7ffc0000 [ 303.837025][ T510] usb 3-1: USB disconnect, device number 120 [ 303.880341][ T30] audit: type=1326 audit(1794024612.968:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.3.6085" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2eac7a559 code=0x7ffc0000 [ 303.912659][T13199] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 303.932047][T13199] overlayfs: missing 'lowerdir' [ 303.952553][ T30] audit: type=1400 audit(1794024613.136:485): avc: denied { create } for pid=13204 comm="syz.3.6103" dev="anon_inodefs" ino=53832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 304.008983][ T30] audit: type=1400 audit(1794024613.183:486): avc: denied { name_bind } for pid=13215 comm="syz.0.6108" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 304.170244][ T30] audit: type=1400 audit(1794024613.332:487): avc: denied { read write } for pid=13250 comm="syz.3.6126" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 304.202212][ T30] audit: type=1400 audit(1794024613.360:488): avc: denied { open } for pid=13250 comm="syz.3.6126" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 304.233276][T13255] validate_nla: 7 callbacks suppressed [ 304.233295][T13255] netlink: 'syz.1.6128': attribute type 49 has an invalid length. [ 304.246276][ T30] audit: type=1400 audit(1794024613.370:489): avc: denied { ioctl } for pid=13248 comm="syz.4.6124" path="socket:[54498]" dev="sockfs" ino=54498 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.288345][ T30] audit: type=1400 audit(1794024613.445:490): avc: denied { nlmsg_tty_audit } for pid=13260 comm="syz.1.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 304.335337][T13271] device lo entered promiscuous mode [ 304.348897][T13271] device tunl0 entered promiscuous mode [ 304.365049][T13271] device gre0 entered promiscuous mode [ 304.378136][T13271] device gretap0 entered promiscuous mode [ 304.388432][T13271] device erspan0 entered promiscuous mode [ 304.402414][T13271] device ip_vti0 entered promiscuous mode [ 304.415521][T13271] device ip6_vti0 entered promiscuous mode [ 304.426051][ T30] audit: type=1326 audit(1794024613.576:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.6142" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4da04b559 code=0x7ffc0000 [ 304.451383][T13271] device sit0 entered promiscuous mode [ 304.465436][T13271] device ip6tnl0 entered promiscuous mode [ 304.479102][T13271] device ip6gre0 entered promiscuous mode [ 304.479436][T13293] ipt_REJECT: TCP_RESET invalid for non-tcp [ 304.496954][T13271] device syz_tun entered promiscuous mode [ 304.504918][T13271] device ip6gretap0 entered promiscuous mode [ 304.512352][T13271] device bridge0 entered promiscuous mode [ 304.520065][T13271] device dummy0 entered promiscuous mode [ 304.528669][T13271] device veth0 entered promiscuous mode [ 304.536970][T13271] device veth1 entered promiscuous mode [ 304.544020][T13271] device wg0 entered promiscuous mode [ 304.550873][T13271] device wg1 entered promiscuous mode [ 304.564110][T13271] device wg2 entered promiscuous mode [ 304.579920][T13271] device veth0_to_bridge entered promiscuous mode [ 304.600184][T13271] device veth1_to_bridge entered promiscuous mode [ 304.617922][T13271] device veth0_to_bond entered promiscuous mode [ 304.625632][T13271] device bond_slave_0 entered promiscuous mode [ 304.632850][T13271] device veth1_to_bond entered promiscuous mode [ 304.640472][T13271] device bond_slave_1 entered promiscuous mode [ 304.647641][T13271] device veth0_to_team entered promiscuous mode [ 304.655247][T13271] device team_slave_0 entered promiscuous mode [ 304.662385][T13271] device veth1_to_team entered promiscuous mode [ 304.672674][T13271] device team_slave_1 entered promiscuous mode [ 304.679909][T13271] device veth0_to_batadv entered promiscuous mode [ 304.687817][T13271] device batadv_slave_0 entered promiscuous mode [ 304.695559][T13271] device veth1_to_batadv entered promiscuous mode [ 304.703084][T13271] device batadv_slave_1 entered promiscuous mode [ 304.710604][T13271] device xfrm0 entered promiscuous mode [ 304.717296][T13271] device veth0_to_hsr entered promiscuous mode [ 304.724416][T13311] x_tables: unsorted entry at hook 3 [ 304.729829][T13271] device hsr_slave_0 entered promiscuous mode [ 304.736915][T13271] device veth1_to_hsr entered promiscuous mode [ 304.749028][T13271] device hsr_slave_1 entered promiscuous mode [ 304.756034][T13271] device veth1_virt_wifi entered promiscuous mode [ 304.764165][T13271] device veth0_virt_wifi entered promiscuous mode [ 304.772370][T13271] device veth1_vlan entered promiscuous mode [ 304.782607][T13271] device vlan0 entered promiscuous mode [ 304.788498][T13271] device vlan1 entered promiscuous mode [ 304.796003][T13271] device veth0_macvtap entered promiscuous mode [ 304.803978][T13271] device macsec0 entered promiscuous mode [ 304.811332][T13271] device bridge1 entered promiscuous mode [ 304.818212][T13271] device ip6gretap1 entered promiscuous mode [ 304.825205][T13271] device erspan1 entered promiscuous mode [ 304.832018][T13271] device ip6erspan0 entered promiscuous mode [ 304.839231][T13271] device gre1 entered promiscuous mode [ 304.845627][T13271] device syztnl1 entered promiscuous mode [ 304.852085][T13271] device ip6tnl1 entered promiscuous mode [ 304.858869][T13271] device ip6gretap2 entered promiscuous mode [ 304.898515][T13325] overlayfs: workdir and upperdir must be separate subtrees [ 304.906206][T13323] netlink: 'syz.4.6160': attribute type 8 has an invalid length. [ 304.939992][T13329] loop1: detected capacity change from 0 to 128 [ 305.122639][T13356] loop4: detected capacity change from 0 to 512 [ 305.154263][T13356] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 305.219937][T13356] loop4: detected capacity change from 0 to 256 [ 305.233713][T13356] exfat: Unknown parameter 'nodiscard' [ 305.239733][T13365] device lo entered promiscuous mode [ 305.249549][T13365] device tunl0 entered promiscuous mode [ 305.257065][T13365] device gre0 entered promiscuous mode [ 305.267568][T13365] device gretap0 entered promiscuous mode [ 305.284602][T13365] device erspan0 entered promiscuous mode [ 305.297786][T13365] device ip_vti0 entered promiscuous mode [ 305.304278][T13365] device ip6_vti0 entered promiscuous mode [ 305.310708][T13365] device sit0 entered promiscuous mode [ 305.317480][T13365] device ip6tnl0 entered promiscuous mode [ 305.323747][T13365] device ip6gre0 entered promiscuous mode [ 305.330150][T13365] device syz_tun entered promiscuous mode [ 305.336662][T13365] device ip6gretap0 entered promiscuous mode [ 305.343279][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.350491][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.358174][T13365] device bridge0 entered promiscuous mode [ 305.364895][T13365] device dummy0 entered promiscuous mode [ 305.371275][T13365] device veth0 entered promiscuous mode [ 305.377657][T13365] device veth1 entered promiscuous mode [ 305.384387][T13365] device wg0 entered promiscuous mode [ 305.390745][T13365] device wg1 entered promiscuous mode [ 305.396903][T13365] device wg2 entered promiscuous mode [ 305.402981][T13365] device veth0_to_bridge entered promiscuous mode [ 305.410968][T13365] device veth1_to_bridge entered promiscuous mode [ 305.418791][T13365] device veth0_to_bond entered promiscuous mode [ 305.426160][T13365] device bond_slave_0 entered promiscuous mode [ 305.433159][T13365] device veth1_to_bond entered promiscuous mode [ 305.440172][T13365] device bond_slave_1 entered promiscuous mode [ 305.447380][T13365] device veth0_to_team entered promiscuous mode [ 305.454522][T13365] device team_slave_0 entered promiscuous mode [ 305.461838][T13365] device veth1_to_team entered promiscuous mode [ 305.469149][T13365] device team_slave_1 entered promiscuous mode [ 305.476070][T13365] device veth0_to_batadv entered promiscuous mode [ 305.483239][T13365] device batadv_slave_0 entered promiscuous mode [ 305.490596][T13365] device veth1_to_batadv entered promiscuous mode [ 305.497728][T13365] device batadv_slave_1 entered promiscuous mode [ 305.504795][T13365] device xfrm0 entered promiscuous mode [ 305.511080][T13365] device veth0_to_hsr entered promiscuous mode [ 305.518086][T13365] device hsr_slave_0 entered promiscuous mode [ 305.524890][T13365] device veth1_to_hsr entered promiscuous mode [ 305.532005][T13365] device hsr_slave_1 entered promiscuous mode [ 305.538745][T13365] device veth1_virt_wifi entered promiscuous mode [ 305.546042][T13365] device veth0_virt_wifi entered promiscuous mode [ 305.553323][T13365] device veth1_vlan entered promiscuous mode [ 305.561985][T13365] device vlan0 entered promiscuous mode [ 305.567679][T13365] device vlan1 entered promiscuous mode [ 305.574323][T13365] device veth0_macvtap entered promiscuous mode [ 305.581248][T13365] device macsec0 entered promiscuous mode [ 305.587784][T13365] device ip6tnl1 entered promiscuous mode [ 305.594191][T13365] device syztnl0 entered promiscuous mode [ 305.600283][T13365] device ip6tnl2 entered promiscuous mode [ 305.606443][T13365] device ifb2 entered promiscuous mode [ 305.612481][T13365] device bridge1 entered promiscuous mode [ 305.619524][T13365] device bridge2 entered promiscuous mode [ 305.625392][T13366] netlink: 'syz.3.6181': attribute type 16 has an invalid length. [ 305.633430][T13366] netlink: 'syz.3.6181': attribute type 17 has an invalid length. [ 305.641488][T13366] device lo left promiscuous mode [ 305.646837][T13366] device tunl0 left promiscuous mode [ 305.652367][T13366] device gre0 left promiscuous mode [ 305.657845][T13366] device gretap0 left promiscuous mode [ 305.663548][T13366] device erspan0 left promiscuous mode [ 305.669363][T13366] device ip_vti0 left promiscuous mode [ 305.675004][T13366] device ip6_vti0 left promiscuous mode [ 305.680912][T13366] device sit0 left promiscuous mode [ 305.686294][T13366] device ip6tnl0 left promiscuous mode [ 305.692245][T13366] device ip6gre0 left promiscuous mode [ 305.697881][T13366] device syz_tun left promiscuous mode [ 305.703724][T13366] device ip6gretap0 left promiscuous mode [ 305.709629][T13366] device bridge0 left promiscuous mode [ 305.715438][T13366] device dummy0 left promiscuous mode [ 305.720988][T13366] device veth0 left promiscuous mode [ 305.726665][T13366] device veth1 left promiscuous mode [ 305.732193][T13366] device wg0 left promiscuous mode [ 305.737558][T13366] device wg1 left promiscuous mode [ 305.742924][T13366] device wg2 left promiscuous mode [ 305.748317][T13366] device veth0_to_bridge left promiscuous mode [ 305.754792][T13366] device veth1_to_bridge left promiscuous mode [ 305.761248][T13366] device veth0_to_bond left promiscuous mode [ 305.767519][T13366] device bond_slave_0 left promiscuous mode [ 305.773645][T13366] device veth1_to_bond left promiscuous mode [ 305.779881][T13366] device bond_slave_1 left promiscuous mode [ 305.786044][T13366] device veth0_to_team left promiscuous mode [ 305.792205][T13366] device team_slave_0 left promiscuous mode [ 305.798450][T13366] device veth1_to_team left promiscuous mode [ 305.804641][T13366] device team_slave_1 left promiscuous mode [ 305.810687][T13366] device veth0_to_batadv left promiscuous mode [ 305.816943][T13366] device batadv_slave_0 left promiscuous mode [ 305.823491][T13366] device veth1_to_batadv left promiscuous mode [ 305.829804][T13366] device batadv_slave_1 left promiscuous mode [ 305.832635][T13329] 9pnet: p9_fd_create_tcp (13329): problem connecting socket to 127.0.0.1 [ 305.836148][T13366] device xfrm0 left promiscuous mode [ 305.849886][T13366] device veth0_to_hsr left promiscuous mode [ 305.855972][T13366] device hsr_slave_0 left promiscuous mode [ 305.861967][T13366] device veth1_to_hsr left promiscuous mode [ 305.868129][T13366] device hsr_slave_1 left promiscuous mode [ 305.874110][T13366] device veth1_virt_wifi left promiscuous mode [ 305.880800][T13366] device veth0_virt_wifi left promiscuous mode [ 305.887455][T13366] device veth1_vlan left promiscuous mode [ 305.893564][T13366] device vlan0 left promiscuous mode [ 305.898986][T13366] device vlan1 left promiscuous mode [ 305.904523][T13366] device veth0_macvtap left promiscuous mode [ 305.910575][T13366] device macsec0 left promiscuous mode [ 305.916284][T13366] device bridge1 left promiscuous mode [ 305.934114][T13366] device ip6gretap1 left promiscuous mode [ 305.942835][T13366] device erspan1 left promiscuous mode [ 305.948488][T13366] device ip6erspan0 left promiscuous mode [ 305.954313][T13366] device gre1 left promiscuous mode [ 305.959860][T13366] device syztnl1 left promiscuous mode [ 305.965410][T13366] device ip6tnl1 left promiscuous mode [ 305.971252][T13366] device ip6gretap2 left promiscuous mode [ 305.980009][T13372] device vlan0 entered promiscuous mode [ 305.999248][T13382] __nla_validate_parse: 29 callbacks suppressed [ 305.999270][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6189'. [ 306.042342][T13382] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6189'. [ 306.218823][T13440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6218'. [ 306.255623][T13440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6218'. [ 306.301299][T13464] loop4: detected capacity change from 0 to 128 [ 306.339828][T13464] 9pnet: p9_fd_create_tcp (13464): problem connecting socket to 127.0.0.1 [ 306.359198][T13476] loop1: detected capacity change from 0 to 256 [ 306.429305][T13476] FAT-fs (loop1): Directory bread(block 64) failed [ 306.439939][T13492] netlink: 'syz.0.6244': attribute type 1 has an invalid length. [ 306.450709][T13476] FAT-fs (loop1): Directory bread(block 65) failed [ 306.457360][T13476] FAT-fs (loop1): Directory bread(block 66) failed [ 306.464674][T13476] FAT-fs (loop1): Directory bread(block 67) failed [ 306.471377][T13476] FAT-fs (loop1): Directory bread(block 68) failed [ 306.481116][T13492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.491012][T13476] FAT-fs (loop1): Directory bread(block 69) failed [ 306.510988][T13476] FAT-fs (loop1): Directory bread(block 70) failed [ 306.522887][T13476] FAT-fs (loop1): Directory bread(block 71) failed [ 306.539334][T13476] FAT-fs (loop1): Directory bread(block 72) failed [ 306.547532][T13476] FAT-fs (loop1): Directory bread(block 73) failed [ 306.646191][T13529] netlink: 'syz.4.6261': attribute type 1 has an invalid length. [ 306.681237][T13537] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6267'. [ 306.705213][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6267'. [ 306.714416][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6267'. [ 306.733688][T13541] loop2: detected capacity change from 0 to 128 [ 306.775776][T13551] loop1: detected capacity change from 0 to 256 [ 306.840844][T13551] FAT-fs (loop1): Directory bread(block 64) failed [ 306.851609][T13551] FAT-fs (loop1): Directory bread(block 65) failed [ 306.859357][T13551] FAT-fs (loop1): Directory bread(block 66) failed [ 306.866171][T13551] FAT-fs (loop1): Directory bread(block 67) failed [ 306.872928][T13551] FAT-fs (loop1): Directory bread(block 68) failed [ 306.880225][T13551] FAT-fs (loop1): Directory bread(block 69) failed [ 306.900423][T13551] FAT-fs (loop1): Directory bread(block 70) failed [ 306.918814][T13551] FAT-fs (loop1): Directory bread(block 71) failed [ 306.927784][T13578] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6284'. [ 306.937060][T13551] FAT-fs (loop1): Directory bread(block 72) failed [ 306.948551][T13551] FAT-fs (loop1): Directory bread(block 73) failed [ 307.046711][ T506] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 307.066956][T13602] device veth0_vlan left promiscuous mode [ 307.073130][T13602] device veth0_vlan entered promiscuous mode [ 307.082211][T13602] device veth1_macvtap left promiscuous mode [ 307.089832][T13602] device veth1_macvtap entered promiscuous mode [ 307.106623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.131511][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.139713][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.180956][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.188175][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.200913][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 307.211340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.219781][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.226866][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.244451][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 307.253875][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 307.263928][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 307.273664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 307.288245][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.296782][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.303423][ T506] usb 5-1: Using ep0 maxpacket: 8 [ 307.306330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.320179][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.328780][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.337480][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.345949][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.354962][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.363609][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.372213][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.380596][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.388927][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.397092][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.405641][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.414400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.423034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.431260][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.431975][ T506] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.440952][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.456884][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.460887][ T506] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.465851][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.480997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.489499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.498043][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.519284][ T395] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 307.519303][ T395] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 307.555357][T13637] SELinux: Context Y7j [ 307.555357][T13637] u/$2Sٟ2'ks2- vjd #,N< [ 307.555357][T13637] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 307.558907][ T395] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 307.608268][T13637] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 307.624293][T13637] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i audit_backlog_limit=64 [ 331.877194][T18313] audit: audit_backlog=65 > audit_backlog_limit=64 [ 331.877282][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 331.887250][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 331.893795][ T140] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 331.906418][ T288] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 332.386298][T18396] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.398703][T18400] xt_CONNSECMARK: invalid mode: 0 [ 332.640893][T18447] xt_socket: unknown flags 0x58 [ 332.872281][T18498] netlink: 'syz.3.8707': attribute type 3 has an invalid length. [ 333.070334][T18529] __nla_validate_parse: 9 callbacks suppressed [ 333.070351][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8720'. [ 333.113730][T18529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.458788][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8745'. [ 333.544070][T18589] netlink: 'syz.4.8750': attribute type 10 has an invalid length. [ 333.602564][T18596] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.723403][T18626] netlink: 'syz.1.8776': attribute type 5 has an invalid length. [ 333.746345][T18628] xt_NFQUEUE: number of total queues is 0 [ 333.885845][T18639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8774'. [ 334.041902][T18655] sock: sock_timestamping_bind_phc: sock not bind to device [ 334.355765][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8798'. [ 334.518479][T18698] xt_hashlimit: max too large, truncated to 1048576 [ 334.604363][T18704] netlink: 'syz.2.8808': attribute type 29 has an invalid length. [ 334.617935][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 334.649962][T18704] netlink: 'syz.2.8808': attribute type 29 has an invalid length. [ 334.840444][T18724] netlink: 'syz.3.8818': attribute type 5 has an invalid length. [ 334.861791][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8819'. [ 334.910140][T18726] device bridge6 entered promiscuous mode [ 335.198468][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8839'. [ 335.473824][T18803] xt_hashlimit: invalid interval [ 335.611955][T18814] netlink: 'syz.1.8862': attribute type 15 has an invalid length. [ 335.673559][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8864'. [ 335.739216][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8866'. [ 335.816737][T18831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8871'. [ 335.956250][T18845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8877'. [ 336.183871][T18887] netlink: 'syz.2.8899': attribute type 7 has an invalid length. [ 336.205970][T18887] netlink: 'syz.2.8899': attribute type 8 has an invalid length. [ 336.427510][T18933] device bridge3 entered promiscuous mode [ 336.448939][T18936] bridge0: port 3(veth0_to_bridge) entered blocking state [ 336.458635][T18936] bridge0: port 3(veth0_to_bridge) entered disabled state [ 336.485608][T18936] device veth0_to_bridge entered promiscuous mode [ 336.505975][T18936] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.521790][T18936] bridge0: port 3(veth0_to_bridge) entered blocking state [ 336.529004][T18936] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 336.662624][T18976] device bridge8 entered promiscuous mode [ 336.670822][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 336.747486][T18988] netlink: 'syz.4.8946': attribute type 17 has an invalid length. [ 337.045043][ T30] kauditd_printk_skb: 17646 callbacks suppressed [ 337.045060][ T30] audit: type=1400 audit(2000000025.948:19519): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 337.084186][T19036] device gre0 left promiscuous mode [ 337.092465][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.114323][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.122581][ T140] audit: audit_lost=301 audit_rate_limit=0 audit_backlog_limit=64 [ 337.131173][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.137709][ T286] audit: audit_lost=302 audit_rate_limit=0 audit_backlog_limit=64 [ 337.151174][ T288] audit: audit_lost=303 audit_rate_limit=0 audit_backlog_limit=64 [ 337.156417][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.162319][ T140] audit: backlog limit exceeded [ 337.172143][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 337.271033][T19059] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 337.553319][T19096] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.560577][T19096] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.769628][T19127] x_tables: duplicate underflow at hook 3 [ 338.149788][T19193] IPv6: NLM_F_REPLACE set, but no existing node found! [ 338.212509][T19199] IPv6: sit1: Disabled Multicast RS [ 338.374619][T19230] device gre1 entered promiscuous mode [ 338.404908][T19237] netlink: 'syz.4.9074': attribute type 4 has an invalid length. [ 338.430767][T19241] device bridge_slave_1 left promiscuous mode [ 338.454429][T19241] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.475191][T19241] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 338.655979][T19285] xt_limit: Overflow, try lower: 2147483649/3300 [ 338.728345][T19301] __nla_validate_parse: 73 callbacks suppressed [ 338.728363][T19301] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9105'. [ 338.744464][T19301] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9105'. [ 338.917889][T19339] netem: change failed [ 338.990977][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9130'. [ 339.003411][T19355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.407339][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.525915][T19417] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 339.555207][T19423] netlink: 21 bytes leftover after parsing attributes in process `syz.4.9166'. [ 339.586519][T19423] device gretap0 entered promiscuous mode [ 339.627180][T19430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.867700][T19477] netlink: 'syz.0.9193': attribute type 5 has an invalid length. [ 339.891611][T19480] xt_l2tp: v2 doesn't support IP mode [ 339.914608][T19482] netlink: 'syz.2.9195': attribute type 3 has an invalid length. [ 339.931351][T19484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9196'. [ 340.088872][T19514] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9210'. [ 340.107724][T19517] xt_CT: No such helper "syz1" [ 340.123559][T19514] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9210'. [ 340.137357][T19520] xt_SECMARK: invalid mode: 2 [ 340.342759][T19545] bridge0: port 3(veth0_to_bridge) entered disabled state [ 340.350019][T19545] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.536703][T19549] netlink: 'syz.4.9227': attribute type 12 has an invalid length. [ 340.574371][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9235'. [ 340.776387][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 341.056569][T19618] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.093390][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9263'. [ 341.390981][T19652] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.845854][T19694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9297'. [ 341.878171][T19694] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 341.995694][T19705] x_tables: unsorted entry at hook 2 [ 342.126951][T19722] netlink: 'syz.1.9314': attribute type 1 has an invalid length. [ 342.316457][T19742] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 342.360885][T19747] device sit0 entered promiscuous mode [ 342.377627][T19747] netlink: 'syz.1.9326': attribute type 1 has an invalid length. [ 342.400885][ T30] kauditd_printk_skb: 20977 callbacks suppressed [ 342.400901][ T30] audit: type=1400 audit(2000000030.952:39918): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 342.453088][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.462658][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.466020][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 342.475950][ T140] audit: audit_lost=497 audit_rate_limit=0 audit_backlog_limit=64 [ 342.480960][ T288] audit: audit_lost=498 audit_rate_limit=0 audit_backlog_limit=64 [ 342.484725][ T286] audit: audit_lost=499 audit_rate_limit=0 audit_backlog_limit=64 [ 342.504318][ T30] audit: type=1400 audit(2000000030.989:39919): avc: denied { read } for pid=287 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 342.524204][ T288] audit: backlog limit exceeded [ 342.529513][ T140] audit: backlog limit exceeded [ 342.618594][T19759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.023213][T19825] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.292185][T19886] x_tables: unsorted entry at hook 4 [ 343.736177][T19988] netlink: 'syz.4.9444': attribute type 10 has an invalid length. [ 343.846053][T20010] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.853899][T20010] IPv6: Can't replace route, no match found [ 343.991593][T20035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.170368][T20069] device ip6gretap4 entered promiscuous mode [ 344.190670][T20074] device ip6tnl4 entered promiscuous mode [ 344.205465][T20079] __nla_validate_parse: 12 callbacks suppressed [ 344.205483][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9490'. [ 344.246641][T20081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9491'. [ 344.265695][T20081] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 344.363637][T20103] netlink: 'syz.0.9502': attribute type 46 has an invalid length. [ 344.388097][T20103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9502'. [ 344.520443][T20130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.613012][T20142] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 344.976872][T20216] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9559'. [ 345.079904][T20233] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 345.247766][T20266] xt_CT: No such helper "netbios-ns" [ 346.067613][T20432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.116687][T20436] netlink: 'syz.1.9668': attribute type 15 has an invalid length. [ 346.131755][T20436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9668'. [ 346.197916][T20441] device veth3 entered promiscuous mode [ 346.214713][T20445] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.9673'. [ 346.377917][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9679'. [ 346.608210][T20511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.630075][T20512] netlink: 45 bytes leftover after parsing attributes in process `syz.4.9706'. [ 346.729081][T20535] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 346.794725][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9720'. [ 346.862190][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9724'. [ 347.038222][T20584] xt_TCPMSS: Only works on TCP SYN packets [ 347.186484][T20602] device bridge10 entered promiscuous mode [ 347.370660][T20634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.647529][T20683] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 347.756634][ T30] kauditd_printk_skb: 20482 callbacks suppressed [ 347.756649][ T30] audit: type=1400 audit(2000000035.975:57224): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 347.807107][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.820735][ T140] audit: audit_lost=1559 audit_rate_limit=0 audit_backlog_limit=64 [ 347.830593][ T286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.838855][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 347.843576][ T140] audit: backlog limit exceeded [ 347.850399][ T30] audit: type=1400 audit(2000000035.975:57225): avc: denied { read } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 347.856985][ T288] audit: audit_lost=1560 audit_rate_limit=0 audit_backlog_limit=64 [ 347.878370][ T286] audit: audit_lost=1561 audit_rate_limit=0 audit_backlog_limit=64 [ 347.893072][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.203569][T20765] ================================================================== [ 348.211722][T20765] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 348.219926][T20765] Read of size 4 at addr ffff888119e10470 by task syz.3.9832/20765 [ 348.227852][T20765] [ 348.230207][T20765] CPU: 1 PID: 20765 Comm: syz.3.9832 Tainted: G W syzkaller #0 [ 348.239089][T20765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 348.249172][T20765] Call Trace: [ 348.252481][T20765] [ 348.255440][T20765] __dump_stack+0x21/0x30 [ 348.259808][T20765] dump_stack_lvl+0x110/0x170 [ 348.264519][T20765] ? show_regs_print_info+0x20/0x20 [ 348.269757][T20765] ? load_image+0x3f0/0x3f0 [ 348.274299][T20765] print_address_description+0x7f/0x2c0 [ 348.279888][T20765] ? unaccount_page_cache_page+0x6f1/0x760 [ 348.285862][T20765] kasan_report+0x10f/0x150 [ 348.290411][T20765] ? unaccount_page_cache_page+0x6f1/0x760 [ 348.296249][T20765] __asan_report_load4_noabort+0x14/0x20 [ 348.301919][T20765] unaccount_page_cache_page+0x6f1/0x760 [ 348.307581][T20765] __delete_from_page_cache+0xbe/0x470 [ 348.313079][T20765] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 348.320141][T20765] ? __kasan_check_write+0x14/0x20 [ 348.325290][T20765] ? __kasan_check_read+0x11/0x20 [ 348.330353][T20765] ? workingset_eviction+0x402/0x9f0 [ 348.335695][T20765] __remove_mapping+0x601/0x990 [ 348.340579][T20765] ? remove_mapping+0xa0/0xa0 [ 348.345294][T20765] ? __kasan_check_read+0x11/0x20 [ 348.350363][T20765] shrink_page_list+0x2a24/0x5800 [ 348.355422][T20765] ? shrink_page_list+0x8e1/0x5800 [ 348.360685][T20765] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 348.366970][T20765] ? __this_cpu_preempt_check+0x13/0x20 [ 348.372600][T20765] ? __mod_zone_page_state+0x8e/0xd0 [ 348.377930][T20765] ? isolate_lru_pages+0xff1/0x11f0 [ 348.383186][T20765] ? should_run_aging+0x410/0x410 [ 348.388250][T20765] ? cgroup_rstat_updated+0x80/0x360 [ 348.393575][T20765] ? _raw_spin_lock_irq+0x95/0xf0 [ 348.398636][T20765] ? __this_cpu_preempt_check+0x13/0x20 [ 348.404223][T20765] ? __count_memcg_events+0xad/0x120 [ 348.409553][T20765] shrink_lruvec+0x11eb/0x3b00 [ 348.414359][T20765] ? release_firmware_map_entry+0x190/0x190 [ 348.420416][T20765] ? mem_cgroup_shrink_node+0x550/0x550 [ 348.425995][T20765] ? preempt_schedule_common+0xbe/0xf0 [ 348.431492][T20765] ? schedule_preempt_disabled+0x20/0x20 [ 348.437160][T20765] ? __kasan_check_write+0x14/0x20 [ 348.442312][T20765] ? _raw_spin_lock+0x94/0xf0 [ 348.447021][T20765] ? _raw_spin_trylock_bh+0x150/0x150 [ 348.452429][T20765] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 348.458375][T20765] ? inactive_is_low+0x160/0x2f0 [ 348.463356][T20765] ? css_next_descendant_pre+0x1e1/0x210 [ 348.469032][T20765] ? mem_cgroup_iter+0x465/0x6c0 [ 348.474005][T20765] shrink_node+0x11ee/0x2a40 [ 348.478665][T20765] ? allow_direct_reclaim+0x370/0x370 [ 348.484083][T20765] do_try_to_free_pages+0x5a7/0x1580 [ 348.486633][T20773] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 348.489406][T20765] ? try_to_free_pages+0x1010/0x1010 [ 348.489433][T20765] ? simple_strntoull+0x10e/0x180 [ 348.515180][T20765] try_to_free_mem_cgroup_pages+0x261/0x610 [ 348.521118][T20765] ? shrink_lruvec+0x3b00/0x3b00 [ 348.526201][T20765] ? mutex_unlock+0x8f/0x230 [ 348.530842][T20765] ? __kasan_check_read+0x11/0x20 [ 348.535923][T20765] ? page_counter_set_max+0x65/0x140 [ 348.541262][T20765] mem_cgroup_resize_max+0x309/0x3e0 [ 348.546590][T20765] mem_cgroup_write+0x1ed/0x230 [ 348.551479][T20765] ? mem_cgroup_reset+0x130/0x130 [ 348.556535][T20765] ? __kasan_check_write+0x14/0x20 [ 348.561787][T20765] ? _copy_from_iter+0x4a4/0x10a0 [ 348.566851][T20765] ? mem_cgroup_reset+0x130/0x130 [ 348.571910][T20765] cgroup_file_write+0x294/0x560 [ 348.576881][T20765] ? cgroup_seqfile_stop+0xc0/0xc0 [ 348.582024][T20765] ? mutex_lock+0x9b/0x1c0 [ 348.586484][T20765] ? wait_for_completion_killable_timeout+0x10/0x10 [ 348.593116][T20765] ? __kasan_check_write+0x14/0x20 [ 348.598261][T20765] ? cgroup_seqfile_stop+0xc0/0xc0 [ 348.603413][T20765] kernfs_fop_write_iter+0x2bd/0x400 [ 348.608750][T20765] vfs_write+0x831/0xfd0 [ 348.613063][T20765] ? file_end_write+0x1b0/0x1b0 [ 348.617948][T20765] ? wait_for_completion_killable_timeout+0x10/0x10 [ 348.624573][T20765] ? __fget_files+0x2e1/0x340 [ 348.629298][T20765] ? __fdget_pos+0x2d2/0x380 [ 348.633921][T20765] ? ksys_write+0x70/0x260 [ 348.638368][T20765] ksys_write+0x14a/0x260 [ 348.642775][T20765] ? __ia32_sys_read+0x90/0x90 [ 348.647574][T20765] ? __kasan_check_write+0x14/0x20 [ 348.652729][T20765] ? switch_fpu_return+0x15d/0x2c0 [ 348.657877][T20765] __x64_sys_write+0x7b/0x90 [ 348.662508][T20765] x64_sys_call+0x8ef/0x9a0 [ 348.667044][T20765] do_syscall_64+0x4c/0xa0 [ 348.671610][T20765] ? clear_bhb_loop+0x50/0xa0 [ 348.676333][T20765] ? clear_bhb_loop+0x50/0xa0 [ 348.681042][T20765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.686980][T20765] RIP: 0033:0x7fe2eac7a559 [ 348.691420][T20765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.711058][T20765] RSP: 002b:00007fe2e96d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.719512][T20765] RAX: ffffffffffffffda RBX: 00007fe2eaf00fa0 RCX: 00007fe2eac7a559 [ 348.727527][T20765] RDX: 0000000000000050 RSI: 0000200000002580 RDI: 0000000000000003 [ 348.735534][T20765] RBP: 00007fe2ead11b50 R08: 0000000000000000 R09: 0000000000000000 [ 348.743545][T20765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.751552][T20765] R13: 00007fe2eaf01038 R14: 00007fe2eaf00fa0 R15: 00007ffdfb05c208 [ 348.759562][T20765] [ 348.762607][T20765] [ 348.764967][T20765] Allocated by task 140: [ 348.769224][T20765] __kasan_kmalloc+0xd4/0x100 [ 348.773943][T20765] __kmalloc_track_caller+0x13c/0x2c0 [ 348.779363][T20765] __alloc_skb+0x210/0x730 [ 348.783808][T20765] audit_log_start+0x407/0x8a0 [ 348.788597][T20765] common_lsm_audit+0xd2/0x1670 [ 348.793479][T20765] slow_avc_audit+0x1c4/0x240 [ 348.798184][T20765] avc_has_perm+0x1fb/0x250 [ 348.802722][T20765] selinux_socket_recvmsg+0x22f/0x340 [ 348.808123][T20765] security_socket_recvmsg+0x77/0xb0 [ 348.813435][T20765] ____sys_recvmsg+0x223/0x5b0 [ 348.818239][T20765] ___sys_recvmsg+0x213/0x5c0 [ 348.822954][T20765] __x64_sys_recvmsg+0x1fe/0x2d0 [ 348.827939][T20765] x64_sys_call+0x705/0x9a0 [ 348.832474][T20765] do_syscall_64+0x4c/0xa0 [ 348.836920][T20765] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.842846][T20765] [ 348.845188][T20765] Freed by task 30: [ 348.849021][T20765] kasan_set_track+0x4a/0x70 [ 348.853656][T20765] kasan_set_free_info+0x23/0x40 [ 348.858623][T20765] ____kasan_slab_free+0x125/0x160 [ 348.859659][T20775] netlink: 'syz.4.9837': attribute type 12 has an invalid length. [ 348.863765][T20765] __kasan_slab_free+0x11/0x20 [ 348.863788][T20765] slab_free_freelist_hook+0xc2/0x190 [ 348.863807][T20765] kfree+0xc4/0x270 [ 348.885586][T20765] skb_release_data+0x7bd/0xa20 [ 348.890472][T20765] kfree_skb+0xb9/0x2f0 [ 348.894657][T20765] kauditd_hold_skb+0x116/0x210 [ 348.899540][T20765] kauditd_send_queue+0x28c/0x2e0 [ 348.904597][T20765] kauditd_thread+0x4ea/0x880 [ 348.909304][T20765] kthread+0x3f5/0x4f0 [ 348.913401][T20765] ret_from_fork+0x1f/0x30 [ 348.917852][T20765] [ 348.920199][T20765] The buggy address belongs to the object at ffff888119e10000 [ 348.920199][T20765] which belongs to the cache kmalloc-2k of size 2048 [ 348.934289][T20765] The buggy address is located 1136 bytes inside of [ 348.934289][T20765] 2048-byte region [ffff888119e10000, ffff888119e10800) [ 348.947777][T20765] The buggy address belongs to the page: [ 348.953450][T20765] page:ffffea0004678400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119e10 [ 348.963750][T20765] head:ffffea0004678400 order:3 compound_mapcount:0 compound_pincount:0 [ 348.972107][T20765] flags: 0x4000000000010200(slab|head|zone=1) [ 348.978245][T20765] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043200 [ 348.986861][T20765] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 348.995474][T20765] page dumped because: kasan: bad access detected [ 349.001917][T20765] page_owner tracks the page as allocated [ 349.007658][T20765] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 140, ts 343756901042, free_ts 339134269230 [ 349.027663][T20765] post_alloc_hook+0x192/0x1b0 [ 349.032466][T20765] prep_new_page+0x1c/0x110 [ 349.037012][T20765] get_page_from_freelist+0x2d42/0x2dd0 [ 349.042612][T20765] __alloc_pages+0x1a2/0x460 [ 349.047244][T20765] new_slab+0xa0/0x4d0 [ 349.051347][T20765] ___slab_alloc+0x3ac/0x840 [ 349.055970][T20765] __slab_alloc+0x49/0x90 [ 349.060333][T20765] __kmalloc_track_caller+0x169/0x2c0 [ 349.065736][T20765] __alloc_skb+0x210/0x730 [ 349.070181][T20765] audit_log_start+0x407/0x8a0 [ 349.074984][T20765] common_lsm_audit+0xd2/0x1670 [ 349.079875][T20765] slow_avc_audit+0x1c4/0x240 [ 349.084588][T20765] avc_has_perm+0x1fb/0x250 [ 349.089127][T20765] selinux_socket_recvmsg+0x22f/0x340 [ 349.094531][T20765] security_socket_recvmsg+0x77/0xb0 [ 349.099850][T20765] ____sys_recvmsg+0x223/0x5b0 [ 349.104646][T20765] page last free stack trace: [ 349.109336][T20765] free_unref_page_prepare+0x5fa/0x600 [ 349.114832][T20765] free_unref_page+0xae/0x540 [ 349.119543][T20765] __free_pages+0x6c/0x100 [ 349.123991][T20765] __free_slab+0xe5/0x1e0 [ 349.128356][T20765] __unfreeze_partials+0x15a/0x190 [ 349.133500][T20765] put_cpu_partial+0xc6/0x120 [ 349.138219][T20765] __slab_free+0x1d4/0x290 [ 349.142670][T20765] ___cache_free+0x104/0x120 [ 349.147287][T20765] qlink_free+0x4d/0x90 [ 349.151475][T20765] qlist_free_all+0x5f/0xb0 [ 349.156004][T20765] kasan_quarantine_reduce+0x14a/0x170 [ 349.161489][T20765] __kasan_slab_alloc+0x2f/0xe0 [ 349.166373][T20765] slab_post_alloc_hook+0x4f/0x2b0 [ 349.171513][T20765] kmem_cache_alloc+0xf7/0x260 [ 349.176314][T20765] __alloc_skb+0xe4/0x730 [ 349.180679][T20765] alloc_skb_with_frags+0xa8/0x620 [ 349.185825][T20765] [ 349.188176][T20765] Memory state around the buggy address: [ 349.193837][T20765] ffff888119e10300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.201926][T20765] ffff888119e10380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.210020][T20765] >ffff888119e10400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.218108][T20765] ^ [ 349.225853][T20765] ffff888119e10480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.233939][T20765] ffff888119e10500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.242035][T20765] ================================================================== [ 349.250134][T20765] Disabling lock debugging due to kernel taint [ 352.407095][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 353.112651][ T30] kauditd_printk_skb: 45036 callbacks suppressed [ 353.112670][ T30] audit: type=1400 audit(2000000040.989:100635): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.137529][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.141127][ T30] audit: type=1400 audit(2000000040.989:100636): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.147057][ T140] audit: audit_lost=2104 audit_rate_limit=0 audit_backlog_limit=64 [ 353.169017][ T30] audit: type=1400 audit(2000000040.989:100637): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.176167][ T140] audit: backlog limit exceeded [ 353.198156][ T30] audit: type=1400 audit(2000000040.989:100638): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.203448][ T140] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.223751][ T30] audit: type=1400 audit(2000000040.989:100639): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 353.230284][ T140] audit: audit_lost=2105 audit_rate_limit=0 audit_backlog_limit=64