last executing test programs: 17.588696447s ago: executing program 4 (id=9682): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a00019ed6146600fbdbdf250a000000000000000000000008000400"], 0x24}}, 0x0) 17.588448016s ago: executing program 4 (id=9685): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x8, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) 17.587646377s ago: executing program 4 (id=9688): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @dev, 0x7}, 0x1c) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', '', [], 0xa, "bdd92f080080000000000000b320655800b2b100d2fd867d93d49d6a82fe4e6849b8fb61ad4194383dad896ed321ce7c4c"}, 0x35) 17.534061298s ago: executing program 4 (id=9691): r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x78, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17, 0x40000}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff1, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xd6c000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x78}, 0x1, 0x0, 0x0, 0x28001}, 0x48000) 2.080462843s ago: executing program 0 (id=10075): r0 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000001600)) 1.994059535s ago: executing program 0 (id=10077): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='oom_adj\x00') exit(0x2) read$FUSE(r0, 0x0, 0x0) 1.382543399s ago: executing program 32 (id=9695): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0xb, 0x28, {0x28, 0xb, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a72973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.334249579s ago: executing program 2 (id=10080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b4", 0xf}, {&(0x7f00000001c0)="010000", 0x3}, {0x0}], 0x3) 1.30182791s ago: executing program 3 (id=10081): r0 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) 1.159229423s ago: executing program 3 (id=10082): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0xfffffffe, 0x4}, 0xa4ca, 0x1, 0x0, 0x6, 0x1, 0x1a, 0xb, 0x1a, 0x2, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x3, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 1.139153564s ago: executing program 2 (id=10083): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f"], &(0x7f00000001c0)=""/257, 0x3a, 0x101, 0x6}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4d}, 0x28) 1.110218404s ago: executing program 3 (id=10084): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 639.980575ms ago: executing program 0 (id=10085): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001f40)={&(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback, 0xffffffff}, 0x1c, 0x0}, 0x8808) sendmsg$sock(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4c014) 639.636025ms ago: executing program 2 (id=10086): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x20000) 639.497295ms ago: executing program 3 (id=10087): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc3}) 601.314486ms ago: executing program 0 (id=10089): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x4]}, 0x8, 0x80800) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 547.650597ms ago: executing program 3 (id=10090): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f0000005a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183b41, 0x16b) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYRESDEC]) 547.488297ms ago: executing program 2 (id=10091): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) alarm(0x10000) 32.557239ms ago: executing program 0 (id=10092): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xfd, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', r1, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast1}}}}) 32.329329ms ago: executing program 2 (id=10093): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) 31.940339ms ago: executing program 3 (id=10094): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x1, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ni={0x94578a1f8aecba02, 0x0, 0x0, 0xffff, 0x1, 0x596}}}}}}, 0x0) 0s ago: executing program 2 (id=10095): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x91, 0x0, 0xffffffff, 0xe, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x400, 0x7f}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) kernel console output (not intermixed with test programs): USB device number 93 using dummy_hcd [ 220.028424][T11648] xt_socket: unknown flags 0x4 [ 220.101753][T11655] xt_CT: No such helper "netbios-ns" [ 220.184043][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 220.190827][ T426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.219239][ T426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.246927][T11683] loop2: detected capacity change from 0 to 512 [ 220.258503][ T426] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.268074][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.282818][T11683] EXT4-fs: Ignoring removed oldalloc option [ 220.289417][ T426] usb 4-1: config 0 descriptor?? [ 220.295154][T11683] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.305683][ T426] hub 4-1:0.0: USB hub found [ 220.312144][T11687] netlink: 'syz.1.5489': attribute type 1 has an invalid length. [ 220.354786][T11683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.391074][T11700] device syz_tun entered promiscuous mode [ 220.398534][T11700] syz_tun: refused to change device tx_queue_len [ 220.405852][T11700] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 220.425633][ T290] EXT4-fs (loop2): unmounting filesystem. [ 220.435594][ T24] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 220.473100][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5495'. [ 220.482837][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5495'. [ 220.484898][ T426] hub 4-1:0.0: 1 port detected [ 220.623409][ T24] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 220.636925][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.647571][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 220.683974][ T24] usb 5-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 220.698288][ T426] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 220.704789][ T426] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 220.727887][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.735157][ T426] usbhid 4-1:0.0: can't add hid device: -71 [ 220.746331][ T426] usbhid: probe of 4-1:0.0 failed with error -71 [ 220.757851][ T24] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 220.774177][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.791572][ T24] usb 5-1: Product: syz [ 220.799874][ T426] usb 4-1: USB disconnect, device number 93 [ 220.810532][ T24] usb 5-1: Manufacturer: syz [ 220.815199][ T24] usb 5-1: SerialNumber: syz [ 220.825581][ T24] usb 5-1: config 0 descriptor?? [ 221.020835][ T24] usb 5-1: selecting invalid altsetting 0 [ 221.050451][ T24] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 221.051495][T11782] loop2: detected capacity change from 0 to 256 [ 221.061651][ T24] usb 5-1: USB disconnect, device number 97 [ 221.090402][T11782] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 221.184906][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 221.184922][ T28] audit: type=1326 audit(1784349290.811:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.2.5543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff39de99 code=0x7ffc0000 [ 221.255419][T11810] SELinux: failed to load policy [ 221.266074][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.282081][ T28] audit: type=1326 audit(1784349290.811:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.2.5543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff39de99 code=0x7ffc0000 [ 221.384250][ T28] audit: type=1326 audit(1784349290.821:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.2.5543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff39de99 code=0x7ffc0000 [ 221.459378][ T28] audit: type=1326 audit(1784349290.821:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.2.5543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f02ff39de99 code=0x7ffc0000 [ 221.504680][ T28] audit: type=1326 audit(1784349290.821:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.2.5543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff39de99 code=0x7ffc0000 [ 221.535237][T11836] Illegal XDP return value 4294967274 on prog (id 484) dev N/A, expect packet loss! [ 221.549777][ T28] audit: type=1326 audit(1784349290.821:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.2.5543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02ff39de99 code=0x7ffc0000 [ 221.574789][ T28] audit: type=1326 audit(1784349290.821:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.2.5543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f02ff39de99 code=0x7ffc0000 [ 221.653203][ T28] audit: type=1326 audit(1784349290.821:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11797 comm="syz.2.5543" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f02ff39de99 code=0x7ffc0000 [ 221.695480][T11859] netlink: 'syz.4.5574': attribute type 1 has an invalid length. [ 221.725812][ T28] audit: type=1400 audit(1784349290.886:866): avc: denied { load_policy } for pid=11804 comm="syz.0.5549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 221.828611][ T28] audit: type=1400 audit(1784349291.390:867): avc: denied { create } for pid=11864 comm="syz.1.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.856633][T11882] can0: slcan on ptm0. [ 221.906910][T11892] loop4: detected capacity change from 0 to 256 [ 221.937185][T11878] can0 (unregistered): slcan off ptm0. [ 221.961708][T11898] netlink: 'syz.3.5591': attribute type 5 has an invalid length. [ 222.036239][T11912] xt_CT: No such helper "netbios-ns" [ 222.176950][T11942] xt_hashlimit: max too large, truncated to 1048576 [ 222.341271][T11971] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 222.441290][T11992] loop1: detected capacity change from 0 to 256 [ 222.450597][T11985] device ip6gretap0 entered promiscuous mode [ 222.485253][T11995] netlink: 'syz.0.5628': attribute type 6 has an invalid length. [ 222.497447][T11997] loop2: detected capacity change from 0 to 256 [ 222.528239][T12001] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 222.614519][T12013] loop3: detected capacity change from 0 to 512 [ 222.639356][T12013] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 222.660252][T12013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0102] [ 222.685193][T12013] System zones: 1-12 [ 222.694273][T12013] EXT4-fs (loop3): orphan cleanup on readonly fs [ 222.701313][T12013] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5635: invalid indirect mapped block 2 (level 2) [ 222.716957][T12013] EXT4-fs (loop3): 1 truncate cleaned up [ 222.722997][T12013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.740279][ T289] EXT4-fs (loop3): unmounting filesystem. [ 222.931301][T12058] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.016841][T12076] device ip6gretap1 entered promiscuous mode [ 223.183224][T12110] xt_SECMARK: invalid mode: 2 [ 223.193518][T12107] loop4: detected capacity change from 0 to 256 [ 223.235803][T12107] FAT-fs (loop4): Directory bread(block 64) failed [ 223.246496][T12107] FAT-fs (loop4): Directory bread(block 65) failed [ 223.259708][T12107] FAT-fs (loop4): Directory bread(block 66) failed [ 223.288881][T12107] FAT-fs (loop4): Directory bread(block 67) failed [ 223.295546][T12107] FAT-fs (loop4): Directory bread(block 68) failed [ 223.318836][T12107] FAT-fs (loop4): Directory bread(block 69) failed [ 223.333528][T12107] FAT-fs (loop4): Directory bread(block 70) failed [ 223.340670][T12107] FAT-fs (loop4): Directory bread(block 71) failed [ 223.347625][T12107] FAT-fs (loop4): Directory bread(block 72) failed [ 223.370143][T12126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.383109][T12107] FAT-fs (loop4): Directory bread(block 73) failed [ 223.409177][T12130] __nla_validate_parse: 16 callbacks suppressed [ 223.409193][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5692'. [ 223.462909][T12134] loop1: detected capacity change from 0 to 512 [ 223.541210][T12134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 223.550244][T12134] ext4 filesystem being mounted at /202/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.565072][T12134] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 223.606055][T12134] EXT4-fs (loop1): Remounting filesystem read-only [ 223.625726][T12134] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.5694: Failed to acquire dquot type 0 [ 223.640565][T12134] EXT4-fs (loop1): Remounting filesystem read-only [ 223.687748][T10253] EXT4-fs (loop1): unmounting filesystem. [ 223.700940][T12166] netlink: 'syz.0.5710': attribute type 6 has an invalid length. [ 223.720159][T12166] netlink: 'syz.0.5710': attribute type 7 has an invalid length. [ 223.760371][T12166] netlink: 'syz.0.5710': attribute type 8 has an invalid length. [ 223.779130][T12166] netlink: 'syz.0.5710': attribute type 15 has an invalid length. [ 223.787904][T12182] netlink: 'syz.4.5716': attribute type 12 has an invalid length. [ 223.828020][T12186] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5720'. [ 224.016694][T12219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.348218][T12291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5771'. [ 224.418165][T12302] netlink: 'syz.3.5776': attribute type 11 has an invalid length. [ 224.825353][T12381] loop1: detected capacity change from 0 to 256 [ 224.911080][T12397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 224.983253][T12404] loop4: detected capacity change from 0 to 512 [ 225.000967][T12410] loop1: detected capacity change from 0 to 256 [ 225.050472][T12404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.066946][T12404] ext4 filesystem being mounted at /1136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.084437][T12404] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.5828: Failed to acquire dquot type 0 [ 225.131292][ T287] EXT4-fs (loop4): unmounting filesystem. [ 225.151893][ T328] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 225.254732][T12439] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.262003][T12439] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.329054][ T328] usb 3-1: Using ep0 maxpacket: 32 [ 225.336207][ T328] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 225.359633][ T328] usb 3-1: config 0 has no interface number 0 [ 225.375616][ T328] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 225.411258][ T328] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.463330][ T328] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 225.490303][ T328] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 225.523852][ T328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.543926][ T328] usb 3-1: Product: syz [ 225.553115][ T328] usb 3-1: Manufacturer: syz [ 225.557779][ T328] usb 3-1: SerialNumber: syz [ 225.579655][ T328] usb 3-1: config 0 descriptor?? [ 225.592044][T12396] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.631450][T12493] loop3: detected capacity change from 0 to 256 [ 225.660601][T12497] loop1: detected capacity change from 0 to 256 [ 225.670890][T12493] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 225.694421][T12497] FAT-fs (loop1): Directory bread(block 64) failed [ 225.702311][T12493] FAT-fs (loop3): Filesystem has been set read-only [ 225.715924][T12497] FAT-fs (loop1): Directory bread(block 65) failed [ 225.722594][T12497] FAT-fs (loop1): Directory bread(block 66) failed [ 225.729144][T12497] FAT-fs (loop1): Directory bread(block 67) failed [ 225.736100][T12497] FAT-fs (loop1): Directory bread(block 68) failed [ 225.742975][T12497] FAT-fs (loop1): Directory bread(block 69) failed [ 225.769696][T12497] FAT-fs (loop1): Directory bread(block 70) failed [ 225.776280][T12497] FAT-fs (loop1): Directory bread(block 71) failed [ 225.783906][T12497] FAT-fs (loop1): Directory bread(block 72) failed [ 225.791478][T12497] FAT-fs (loop1): Directory bread(block 73) failed [ 225.807634][ T328] usb-storage 3-1:0.20: USB Mass Storage device detected [ 225.829562][ T328] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 225.886095][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 225.886113][ T28] audit: type=1400 audit(1784349295.853:903): avc: denied { read write } for pid=12516 comm="syz.0.5881" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 225.929077][ T28] audit: type=1400 audit(1784349295.853:904): avc: denied { open } for pid=12516 comm="syz.0.5881" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 225.954538][T12519] netlink: 37 bytes leftover after parsing attributes in process `syz.4.5883'. [ 225.983157][ T28] audit: type=1400 audit(1784349295.961:905): avc: denied { block_suspend } for pid=12525 comm="syz.1.5885" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.015418][ T328] scsi host1: usb-storage 3-1:0.20 [ 226.028132][ T328] usb 3-1: USB disconnect, device number 93 [ 226.162607][T12547] device erspan1 entered promiscuous mode [ 226.243251][ T28] audit: type=1400 audit(1784349296.250:906): avc: denied { mac_admin } for pid=12556 comm="syz.1.5900" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.308497][ T28] audit: type=1400 audit(1784349296.304:907): avc: denied { append } for pid=12562 comm="syz.1.5903" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 226.351656][T12565] usb usb9: usbfs: process 12565 (syz.0.5905) did not claim interface 0 before use [ 226.390992][ T28] audit: type=1400 audit(1784349296.347:908): avc: denied { write } for pid=12564 comm="syz.0.5905" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 226.462414][T12577] device veth0_to_batadv entered promiscuous mode [ 226.491149][ T28] audit: type=1400 audit(1784349296.508:909): avc: denied { setattr } for pid=12582 comm="syz.2.5913" name="rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 226.560660][ T28] audit: type=1400 audit(1784349296.572:910): avc: denied { read write } for pid=12586 comm="syz.3.5915" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.662224][ T28] audit: type=1400 audit(1784349296.572:911): avc: denied { open } for pid=12586 comm="syz.3.5915" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.700808][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5925'. [ 226.733087][ T28] audit: type=1400 audit(1784349296.572:912): avc: denied { ioctl } for pid=12586 comm="syz.3.5915" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 226.903798][T12632] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5938'. [ 227.095897][T12665] xt_socket: unknown flags 0x58 [ 227.150287][T12673] xt_hashlimit: max too large, truncated to 1048576 [ 227.252055][T12689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.268400][T12689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.290950][T12689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.305889][T12689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.315224][T12695] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.389305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.397350][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.404445][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.442548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 227.471474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.497053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 227.510996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.538659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.556393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.587250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.599324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.607852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 227.616443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 227.641386][T12723] device tunl0 entered promiscuous mode [ 227.647238][T12723] netlink: 'syz.4.5982': attribute type 4 has an invalid length. [ 227.660836][T12723] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5982'. [ 227.715271][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5988'. [ 227.735644][T12735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5988'. [ 227.851268][T12754] netlink: 37 bytes leftover after parsing attributes in process `syz.2.5997'. [ 227.950323][T12766] loop2: detected capacity change from 0 to 256 [ 227.987229][T12766] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 228.209173][T12802] loop1: detected capacity change from 0 to 4096 [ 228.216381][T12802] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.237696][T12802] EXT4-fs (loop1): Test dummy encryption mode enabled [ 228.253485][T12817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6028'. [ 228.286173][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6030'. [ 228.313646][T12802] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.379964][T10253] EXT4-fs (loop1): unmounting filesystem. [ 228.419211][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6038'. [ 228.465421][T12845] xt_ecn: cannot match TCP bits for non-tcp packets [ 228.472301][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6038'. [ 228.495955][T12835] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6038'. [ 228.519851][T12849] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6043'. [ 228.591361][T12863] mmap: syz.0.6050 (12863): VmData 167485440 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 228.644421][T12871] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6056'. [ 228.692930][T12879] netlink: 'syz.0.6059': attribute type 3 has an invalid length. [ 228.704320][T12883] xt_limit: Overflow, try lower: 2147483649/3300 [ 228.784285][T12897] x_tables: unsorted entry at hook 1 [ 229.197386][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 229.383728][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 229.396261][ T24] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 229.413550][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6118'. [ 229.422821][ T24] usb 2-1: config 0 has no interface number 0 [ 229.440325][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 229.455422][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.463813][ T24] usb 2-1: Product: syz [ 229.468767][ T24] usb 2-1: Manufacturer: syz [ 229.495366][ T24] usb 2-1: SerialNumber: syz [ 229.506653][ T24] usb 2-1: config 0 descriptor?? [ 229.570706][T13017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.578592][T13017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.594781][T13017] device veth0_to_batadv left promiscuous mode [ 229.618053][T13017] device vti0 left promiscuous mode [ 229.629293][T13017] device bridge3 left promiscuous mode [ 229.638660][T13017] device vti1 left promiscuous mode [ 229.654772][T13017] device vti2 left promiscuous mode [ 229.666760][T13017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 229.674643][T13017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 229.685655][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6128'. [ 229.702489][ T24] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 229.709130][ T24] usb 2-1: No valid video chain found. [ 229.718907][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 229.750124][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.759331][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 229.768034][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.776497][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.785436][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.793923][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.802485][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.811319][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.827334][T13028] 8021q: VLANs not supported on sit0 [ 229.928660][ T294] usb 2-1: USB disconnect, device number 94 [ 230.071468][T13071] netlink: 'syz.2.6151': attribute type 9 has an invalid length. [ 230.161803][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6161'. [ 230.393095][T13130] loop2: detected capacity change from 0 to 512 [ 230.468115][T13145] IPv6: sit1: Disabled Multicast RS [ 230.476559][T13130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.486317][T13130] ext4 filesystem being mounted at /1202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.507507][ T290] EXT4-fs (loop2): unmounting filesystem. [ 230.664266][T13167] loop3: detected capacity change from 0 to 256 [ 230.710246][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 230.710263][ T28] audit: type=1326 audit(1784349301.035:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.6203" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 230.776950][ T28] audit: type=1326 audit(1784349301.046:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.6203" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 230.803311][T13175] gretap0: refused to change device tx_queue_len [ 230.804892][ T28] audit: type=1326 audit(1784349301.046:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.6203" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 230.821448][T13175] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 230.851434][ T28] audit: type=1326 audit(1784349301.046:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.6203" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 230.917989][ T28] audit: type=1326 audit(1784349301.046:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13176 comm="syz.1.6203" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 231.068987][T13215] device vlan0 entered promiscuous mode [ 231.086045][T13217] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 231.234413][T13242] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.260417][T13245] netlink: 'syz.3.6234': attribute type 22 has an invalid length. [ 231.269125][ T28] audit: type=1326 audit(1784349301.636:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.1.6238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 231.331544][ T28] audit: type=1326 audit(1784349301.636:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.1.6238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 231.443260][ T28] audit: type=1326 audit(1784349301.668:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.1.6238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 231.523922][ T28] audit: type=1326 audit(1784349301.668:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.1.6238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 231.576596][T13289] xt_hashlimit: max too large, truncated to 1048576 [ 231.583257][T13289] xt_hashlimit: overflow, try lower: 0/0 [ 231.602202][ T28] audit: type=1326 audit(1784349301.668:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13246 comm="syz.1.6238" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 231.892430][T13324] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 231.901111][T13330] netlink: 'syz.3.6279': attribute type 5 has an invalid length. [ 232.133435][T13363] netlink: 'syz.2.6296': attribute type 3 has an invalid length. [ 232.202649][T13380] netlink: 'syz.0.6301': attribute type 6 has an invalid length. [ 232.231316][T13380] netlink: 'syz.0.6301': attribute type 5 has an invalid length. [ 232.359436][T13406] netlink: 'syz.2.6316': attribute type 46 has an invalid length. [ 232.542530][T13442] xt_socket: unknown flags 0xc [ 232.620311][T13457] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 233.098926][T13549] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 233.149189][T13559] loop2: detected capacity change from 0 to 256 [ 233.174410][T13559] FAT-fs (loop2): Directory bread(block 64) failed [ 233.205100][T13559] FAT-fs (loop2): Directory bread(block 65) failed [ 233.218738][T13559] FAT-fs (loop2): Directory bread(block 66) failed [ 233.240873][T13559] FAT-fs (loop2): Directory bread(block 67) failed [ 233.257262][T13559] FAT-fs (loop2): Directory bread(block 68) failed [ 233.264904][T13559] FAT-fs (loop2): Directory bread(block 69) failed [ 233.271625][T13559] FAT-fs (loop2): Directory bread(block 70) failed [ 233.278269][T13559] FAT-fs (loop2): Directory bread(block 71) failed [ 233.285075][T13559] FAT-fs (loop2): Directory bread(block 72) failed [ 233.298769][T13559] FAT-fs (loop2): Directory bread(block 73) failed [ 233.372983][T13588] overlayfs: missing 'lowerdir' [ 233.425474][T13598] __nla_validate_parse: 10 callbacks suppressed [ 233.425495][T13598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6410'. [ 233.554385][T13625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6421'. [ 233.587069][T13625] tc_dump_action: action bad kind [ 233.673125][T13647] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 233.991967][T13708] netlink: 'syz.0.6458': attribute type 1 has an invalid length. [ 234.024915][T13713] xt_TCPMSS: Only works on TCP SYN packets [ 234.122850][T13726] netlink: 'syz.0.6466': attribute type 49 has an invalid length. [ 234.183463][T13726] device team_slave_1 entered promiscuous mode [ 234.413838][T13762] device tunl0 left promiscuous mode [ 234.510957][T13768] loop3: detected capacity change from 0 to 16 [ 234.522658][T13768] erofs: (device loop3): mounted with root inode @ nid 36. [ 234.555520][T13768] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 234.604472][T13768] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 234.614726][T13768] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 234.682590][T13788] netlink: 'syz.0.6499': attribute type 3 has an invalid length. [ 234.849054][T13812] xt_TCPMSS: Only works on TCP SYN packets [ 234.883119][T13818] binfmt_misc: register: failed to install interpreter file ./file1 [ 234.967206][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6517'. [ 235.040857][T13692] loop1: detected capacity change from 0 to 131072 [ 235.068782][T13845] x_tables: duplicate underflow at hook 2 [ 235.074907][T13692] F2FS-fs (loop1): invalid crc value [ 235.116751][T13692] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 235.242451][T13875] netlink: 'syz.0.6538': attribute type 15 has an invalid length. [ 235.250836][T13692] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 235.265100][T13875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6538'. [ 235.352543][T13885] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 235.370050][T13888] loop3: detected capacity change from 0 to 256 [ 235.404119][T13895] xt_TPROXY: Can be used only with -p tcp or -p udp [ 235.413749][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 235.413767][ T28] audit: type=1400 audit(2000000003.092:1050): avc: denied { mount } for pid=13887 comm="syz.3.6545" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 235.456829][ T28] audit: type=1400 audit(2000000003.146:1051): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 235.547730][ T28] audit: type=1400 audit(2000000003.189:1052): avc: denied { getopt } for pid=13899 comm="syz.3.6551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 235.572314][T13908] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 235.624772][ T28] audit: type=1400 audit(2000000003.199:1053): avc: denied { create } for pid=13902 comm="syz.0.6553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.675634][ T28] audit: type=1400 audit(2000000003.199:1054): avc: denied { write } for pid=13902 comm="syz.0.6553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.713758][T13921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13921 comm=syz.3.6563 [ 235.759154][ T28] audit: type=1400 audit(2000000003.199:1055): avc: denied { nlmsg_write } for pid=13902 comm="syz.0.6553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.840646][ T28] audit: type=1400 audit(2000000003.317:1056): avc: denied { read } for pid=13916 comm="syz.4.6560" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.904936][ T28] audit: type=1400 audit(2000000003.457:1057): avc: denied { nlmsg_write } for pid=13920 comm="syz.3.6563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 235.982896][ T28] audit: type=1400 audit(2000000003.596:1058): avc: denied { ioctl } for pid=13944 comm="syz.4.6573" path="socket:[57092]" dev="sockfs" ino=57092 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.057290][ T28] audit: type=1400 audit(2000000003.682:1059): avc: denied { create } for pid=13954 comm="syz.1.6543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.108200][T13979] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 236.194573][T13999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6600'. [ 236.323027][T14019] loop3: detected capacity change from 0 to 512 [ 236.330666][T14023] netlink: 'syz.0.6613': attribute type 19 has an invalid length. [ 236.346161][T14019] EXT4-fs: Ignoring removed orlov option [ 236.368585][T14019] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 236.374055][T14023] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6613'. [ 236.420403][T14019] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.6610: bad orphan inode 4 [ 236.452823][T14019] EXT4-fs (loop3): Remounting filesystem read-only [ 236.460084][T14019] EXT4-fs (loop3): 1 orphan inode deleted [ 236.465907][T14019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 236.501056][T14019] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 4: comm syz.3.6610: lblock 0 mapped to illegal pblock 4 (length 1) [ 236.520581][T14019] EXT4-fs (loop3): Remounting filesystem read-only [ 236.580124][ T289] EXT4-fs (loop3): unmounting filesystem. [ 236.656487][T14075] loop2: detected capacity change from 0 to 512 [ 236.690557][T14080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6640'. [ 236.785468][T14075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 236.798197][T14075] ext4 filesystem being mounted at /1297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.818955][T14075] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #12: comm syz.2.6635: corrupted xattr block 6 [ 236.832248][T14102] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 236.850260][T14075] EXT4-fs (loop2): Remounting filesystem read-only [ 236.863959][T14075] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 236.873305][T14075] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #12: comm syz.2.6635: corrupted xattr block 6 [ 236.887111][T14075] EXT4-fs (loop2): Remounting filesystem read-only [ 236.895872][T14075] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 236.969017][T14075] EXT4-fs error (device loop2): ext4_xattr_block_find:1826: inode #12: comm syz.2.6635: corrupted xattr block 6 [ 237.023139][T14075] EXT4-fs (loop2): Remounting filesystem read-only [ 237.066378][ T290] EXT4-fs (loop2): unmounting filesystem. [ 237.092343][T14145] loop3: detected capacity change from 0 to 512 [ 237.164079][T14145] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.240542][T14145] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 237.266842][T14145] System zones: 1-12 [ 237.272511][T14145] EXT4-fs (loop3): 1 truncate cleaned up [ 237.278189][T14145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.293261][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6684'. [ 237.314127][ T289] EXT4-fs (loop3): unmounting filesystem. [ 237.324855][T14177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6685'. [ 237.525050][T14218] netlink: 'syz.4.6707': attribute type 8 has an invalid length. [ 237.534354][T14219] loop1: detected capacity change from 0 to 256 [ 237.601287][T14219] FAT-fs (loop1): Directory bread(block 64) failed [ 237.636195][T14219] FAT-fs (loop1): Directory bread(block 65) failed [ 237.642807][T14219] FAT-fs (loop1): Directory bread(block 66) failed [ 237.658848][T14219] FAT-fs (loop1): Directory bread(block 67) failed [ 237.678957][T14219] FAT-fs (loop1): Directory bread(block 68) failed [ 237.703725][T14241] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 237.704299][T14219] FAT-fs (loop1): Directory bread(block 69) failed [ 237.734566][T14219] FAT-fs (loop1): Directory bread(block 70) failed [ 237.762356][T14219] FAT-fs (loop1): Directory bread(block 71) failed [ 237.787679][T14219] FAT-fs (loop1): Directory bread(block 72) failed [ 237.807121][T14219] FAT-fs (loop1): Directory bread(block 73) failed [ 237.845345][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6727'. [ 237.854401][T14257] loop4: detected capacity change from 0 to 1024 [ 237.891903][T14257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 237.917370][ T287] EXT4-fs (loop4): unmounting filesystem. [ 237.938058][T14271] sock: sock_timestamping_bind_phc: sock not bind to device [ 237.953720][T14275] x_tables: duplicate underflow at hook 4 [ 237.982567][T14277] device ip6gretap4 entered promiscuous mode [ 238.083889][T14295] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 238.112398][T14289] loop1: detected capacity change from 0 to 4096 [ 238.150732][T14289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.201422][T10253] EXT4-fs (loop1): unmounting filesystem. [ 238.333368][T14330] loop4: detected capacity change from 0 to 4096 [ 238.406336][T14330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 238.419449][T14345] loop2: detected capacity change from 0 to 256 [ 238.438840][T14345] exfat: Deprecated parameter 'utf8' [ 238.444254][T14345] exfat: Deprecated parameter 'utf8' [ 238.449713][T14345] exfat: Deprecated parameter 'namecase' [ 238.455464][T14345] exfat: Deprecated parameter 'namecase' [ 238.467822][ T287] EXT4-fs (loop4): unmounting filesystem. [ 238.493217][T14345] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 238.607298][T14371] netlink: 'syz.2.6779': attribute type 10 has an invalid length. [ 238.637891][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6779'. [ 238.812203][T14409] loop2: detected capacity change from 0 to 512 [ 238.850439][T14409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 238.861171][T14421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6805'. [ 238.879751][T14409] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.6797: iget: bad i_size value: -6196953087261802486 [ 238.909302][T14409] EXT4-fs (loop2): Remounting filesystem read-only [ 238.915916][T14409] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.6797: couldn't read orphan inode 15 (err -117) [ 238.948694][T14409] EXT4-fs (loop2): Remounting filesystem read-only [ 238.958031][T14409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 239.037427][ T290] EXT4-fs (loop2): unmounting filesystem. [ 239.353192][T14494] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 239.459728][T14508] ip6t_REJECT: ECHOREPLY is not supported [ 239.570693][T14522] netlink: 388 bytes leftover after parsing attributes in process `syz.1.6856'. [ 239.601792][T14522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6856'. [ 239.615196][T14527] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.626215][T14527] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 239.689652][T14527] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 239.805050][T14549] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6868'. [ 240.161603][T14598] netlink: 'syz.2.6892': attribute type 11 has an invalid length. [ 240.183586][T14598] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6892'. [ 240.232358][T14610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6898'. [ 240.431801][ T328] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 240.651629][ T328] usb 2-1: unable to get BOS descriptor or descriptor too short [ 240.677000][ T328] usb 2-1: not running at top speed; connect to a high speed hub [ 240.685311][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 240.685328][ T28] audit: type=1326 audit(2000000008.315:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 240.694255][ T328] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 240.767186][ T28] audit: type=1326 audit(2000000008.315:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 240.806017][ T328] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 240.846839][ T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.866706][T14709] xt_l2tp: invalid flags combination: 4 [ 240.871828][ T328] usb 2-1: Product: syz [ 240.881576][ T28] audit: type=1326 audit(2000000008.343:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 240.915078][ T328] usb 2-1: Manufacturer: syz [ 240.925155][ T328] usb 2-1: SerialNumber: syz [ 240.958015][T14596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.970252][ T28] audit: type=1326 audit(2000000008.343:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 241.018088][ T28] audit: type=1326 audit(2000000008.352:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 241.074493][ T28] audit: type=1326 audit(2000000008.352:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 241.109260][ T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 241.130516][ T28] audit: type=1326 audit(2000000008.352:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 241.160266][ T28] audit: type=1326 audit(2000000008.352:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 241.200259][ T328] usb 2-1: MIDIStreaming interface descriptor not found [ 241.220613][ T328] usb 2-1: USB disconnect, device number 95 [ 241.232388][T14745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6964'. [ 241.253049][ T28] audit: type=1326 audit(2000000008.352:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.6935" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 241.279661][T14747] xt_policy: too many policy elements [ 241.300443][ T28] audit: type=1400 audit(2000000008.455:1181): avc: denied { create } for pid=14705 comm="syz.3.6945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.324036][ T24] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 241.341605][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 241.368292][ T24] usb 1-1: config 0 has no interface number 0 [ 241.385268][ T24] usb 1-1: too many endpoints for config 0 interface 41 altsetting 245: 255, using maximum allowed: 30 [ 241.408335][T14760] device veth0_to_team entered promiscuous mode [ 241.419370][ T24] usb 1-1: config 0 interface 41 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 241.439143][T14764] xt_l2tp: unknown flags: 17 [ 241.448321][ T24] usb 1-1: config 0 interface 41 has no altsetting 0 [ 241.458737][ T24] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 241.473165][T14760] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 241.475371][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.503053][ T517] udevd[517]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 241.559689][ T24] usb 1-1: config 0 descriptor?? [ 241.686663][T14788] set_capacity_and_notify: 2 callbacks suppressed [ 241.686683][T14788] loop4: detected capacity change from 0 to 256 [ 241.782873][T14795] loop2: detected capacity change from 0 to 2048 [ 241.792478][ T24] usb 1-1: string descriptor 0 read error: -71 [ 241.802400][ T24] ftdi_sio 1-1:0.41: FTDI USB Serial Device converter detected [ 241.807698][T14798] netlink: 'syz.4.6991': attribute type 12 has an invalid length. [ 241.822138][ T24] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 241.839726][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6992'. [ 241.855168][ T24] usb 1-1: USB disconnect, device number 93 [ 241.864482][T14795] Alternate GPT is invalid, using primary GPT. [ 241.871750][ T24] ftdi_sio 1-1:0.41: device disconnected [ 241.890137][T14795] loop2: p1 p2 p3 [ 241.893182][T14802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.986249][T14809] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.995355][ T517] I/O error, dev loop2, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 241.995659][ T371] I/O error, dev loop2, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.005423][ T556] I/O error, dev loop2, sector 105 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.024415][ T290] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 242.035205][ T517] I/O error, dev loop2, sector 56 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.046047][ T556] I/O error, dev loop2, sector 105 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.055802][ T517] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 242.070950][ T371] I/O error, dev loop2, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.081577][ T517] I/O error, dev loop2, sector 57 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.091117][ T556] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 242.102909][ T517] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 242.123363][ T371] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 242.131733][ T556] I/O error, dev loop2, sector 106 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.141326][ T517] I/O error, dev loop2, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.152076][ T371] I/O error, dev loop2, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.162014][ T556] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 242.179766][T14819] usb usb2: usbfs: process 14819 (syz.2.6998) did not claim interface 2 before use [ 242.189177][ T517] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 242.197322][ T517] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 242.213005][ T371] Buffer I/O error on dev loop2p1, logical block 1, async page read [ 242.221262][ T556] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 242.229405][ T556] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 242.282196][ T517] udevd[517]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 242.293743][ T371] udevd[371]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 242.305327][ T556] udevd[556]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 242.408706][T14847] netlink: 'syz.4.7015': attribute type 9 has an invalid length. [ 242.602426][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7028'. [ 242.622645][T14873] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 242.719685][T14888] netlink: 'syz.1.7037': attribute type 2 has an invalid length. [ 242.941516][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 243.047626][T14932] loop4: detected capacity change from 0 to 512 [ 243.087175][T14932] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.129099][T14932] EXT4-fs (loop4): orphan cleanup on readonly fs [ 243.135611][T14932] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 243.150440][T14932] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 243.157075][T14932] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.7057: bad orphan inode 768 [ 243.161141][ T426] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 243.177633][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice= 0.40 [ 243.178876][T14932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 243.197926][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.229405][ T24] usb 3-1: Product: syz [ 243.233628][ T24] usb 3-1: Manufacturer: syz [ 243.238869][ T287] EXT4-fs (loop4): unmounting filesystem. [ 243.246392][ T24] usb 3-1: SerialNumber: syz [ 243.388438][T14951] loop4: detected capacity change from 0 to 512 [ 243.396036][ T426] usb 2-1: Using ep0 maxpacket: 16 [ 243.402373][ T426] usb 2-1: config 6 has an invalid interface number: 105 but max is 0 [ 243.421525][ T426] usb 2-1: config 6 has no interface number 0 [ 243.432299][ T426] usb 2-1: config 6 interface 105 has no altsetting 0 [ 243.445283][T14951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 243.452386][ T426] usb 2-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa [ 243.470835][T14951] ext4 filesystem being mounted at /1442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.479333][ T24] usb 3-1: invalid MIDI in EP 0 [ 243.490719][ T426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.504688][ T24] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 243.511786][ T426] usb 2-1: Product: syz [ 243.516211][ T426] usb 2-1: Manufacturer: syz [ 243.520871][ T426] usb 2-1: SerialNumber: syz [ 243.536490][ T24] usb 3-1: USB disconnect, device number 94 [ 243.557716][ T287] EXT4-fs (loop4): unmounting filesystem. [ 243.664085][T14889] loop3: detected capacity change from 0 to 131072 [ 243.681541][T14889] F2FS-fs (loop3): invalid crc value [ 243.725645][T14889] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.770574][ T517] udevd[517]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 243.780657][ T426] uvcvideo 2-1:6.105: Found Unit with invalid ID 0 [ 243.796309][ T426] usb 2-1: USB disconnect, device number 96 [ 243.804472][T14889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.246306][T14970] xt_SECMARK: invalid security context 'unconfined' [ 244.360300][T14988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.376164][T14988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.421571][T14988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 244.429420][T14988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 244.437908][T14998] __nla_validate_parse: 4 callbacks suppressed [ 244.437930][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7085'. [ 244.453330][T14998] device vlan0 left promiscuous mode [ 244.540489][T15012] loop1: detected capacity change from 0 to 256 [ 244.601586][T15012] FAT-fs (loop1): Directory bread(block 64) failed [ 244.609068][T15018] xt_TCPMSS: Only works on TCP SYN packets [ 244.621146][T15012] FAT-fs (loop1): Directory bread(block 65) failed [ 244.646280][T15012] FAT-fs (loop1): Directory bread(block 66) failed [ 244.652896][T15012] FAT-fs (loop1): Directory bread(block 67) failed [ 244.688552][T15012] FAT-fs (loop1): Directory bread(block 68) failed [ 244.710389][T15012] FAT-fs (loop1): Directory bread(block 69) failed [ 244.727925][T15012] FAT-fs (loop1): Directory bread(block 70) failed [ 244.742540][T15012] FAT-fs (loop1): Directory bread(block 71) failed [ 244.761014][T15012] FAT-fs (loop1): Directory bread(block 72) failed [ 244.774687][T15012] FAT-fs (loop1): Directory bread(block 73) failed [ 244.805115][T15037] device ip6tnl3 entered promiscuous mode [ 244.873900][T15047] netlink: 'syz.1.7107': attribute type 5 has an invalid length. [ 245.203589][T15097] loop1: detected capacity change from 0 to 512 [ 245.302436][T15097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 245.319467][T15097] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.352754][T10253] EXT4-fs (loop1): unmounting filesystem. [ 245.577371][T15147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.612136][T15147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 245.703382][T15163] loop4: detected capacity change from 0 to 16 [ 245.728116][T15163] erofs: (device loop4): mounted with root inode @ nid 36. [ 245.744330][T15163] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 245.776245][T15172] netlink: 'syz.2.7166': attribute type 12 has an invalid length. [ 245.790833][T15163] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 245.795818][T15173] xt_CT: No such helper "syz0" [ 245.887265][T15181] loop1: detected capacity change from 0 to 2048 [ 245.931509][T15195] tc_dump_action: action bad kind [ 246.085511][T15216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.112641][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 246.112659][ T28] audit: type=1400 audit(2000000013.387:1251): avc: denied { write } for pid=15175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.162854][T15216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.193257][ T28] audit: type=1400 audit(2000000013.387:1252): avc: denied { add_name } for pid=15175 comm="dhcpcd-run-hook" name="resolv.conf.team_slave_1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.197510][T15216] device vti0 left promiscuous mode [ 246.233940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 246.249690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.271924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 246.290968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.299283][ T28] audit: type=1400 audit(2000000013.387:1253): avc: denied { create } for pid=15175 comm="dhcpcd-run-hook" name="resolv.conf.team_slave_1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.345751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.354186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.369688][ T28] audit: type=1400 audit(2000000013.387:1254): avc: denied { write } for pid=15175 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.team_slave_1.ipv4ll" dev="tmpfs" ino=36444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.403911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.427978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.458377][ T28] audit: type=1400 audit(2000000013.387:1255): avc: denied { append } for pid=15175 comm="dhcpcd-run-hook" name="resolv.conf.team_slave_1.ipv4ll" dev="tmpfs" ino=36444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.537786][ T28] audit: type=1400 audit(2000000013.556:1256): avc: denied { remove_name } for pid=15236 comm="rm" name="resolv.conf.team_slave_1.ipv4ll" dev="tmpfs" ino=36444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.621085][ T28] audit: type=1400 audit(2000000013.556:1257): avc: denied { unlink } for pid=15236 comm="rm" name="resolv.conf.team_slave_1.ipv4ll" dev="tmpfs" ino=36444 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.669540][ T28] audit: type=1400 audit(2000000013.640:1258): avc: denied { read } for pid=15245 comm="syz.0.7197" path="socket:[62071]" dev="sockfs" ino=62071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 246.772726][ T28] audit: type=1326 audit(2000000013.827:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15258 comm="syz.3.7206" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 246.815139][T15290] netlink: 'syz.3.7218': attribute type 5 has an invalid length. [ 246.881114][ T28] audit: type=1326 audit(2000000013.827:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15258 comm="syz.3.7206" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c319de99 code=0x7ffc0000 [ 246.931431][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7227'. [ 247.037439][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7234'. [ 247.115757][T15329] x_tables: duplicate underflow at hook 4 [ 247.148213][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7240'. [ 247.174409][T15339] loop4: detected capacity change from 0 to 256 [ 247.596961][T15233] loop1: detected capacity change from 0 to 131072 [ 247.646038][T15233] F2FS-fs (loop1): Test dummy encryption mode enabled [ 247.685508][T15233] F2FS-fs (loop1): invalid crc value [ 247.709017][T15233] F2FS-fs (loop1): invalid crc value [ 247.723615][T15233] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 247.806106][T15436] netlink: 'syz.4.7292': attribute type 3 has an invalid length. [ 247.826365][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7293'. [ 247.921364][T15445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.949314][T15445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.010064][T15445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 248.018320][T15445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 248.029995][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.040897][T15458] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7303'. [ 248.118446][T15470] loop4: detected capacity change from 0 to 512 [ 248.203099][T15470] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.7310: Failed to acquire dquot type 1 [ 248.224546][T15486] device ipip0 entered promiscuous mode [ 248.261998][T15470] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.7310: Failed to acquire dquot type 1 [ 248.306094][T15470] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7310: bg 0: block 248: padding at end of block bitmap is not set [ 248.379100][T15508] xt_hashlimit: max too large, truncated to 1048576 [ 248.394756][T15470] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 248.412934][T15512] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 248.433349][T15470] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.7310: Failed to acquire dquot type 1 [ 248.469177][T15470] EXT4-fs (loop4): 1 orphan inode deleted [ 248.499830][T15470] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 248.519762][T15470] ext4 filesystem being mounted at /1507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.607266][T15536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7341'. [ 248.617642][ T287] EXT4-fs (loop4): unmounting filesystem. [ 248.708258][T15552] loop2: detected capacity change from 0 to 256 [ 248.727853][T15555] loop1: detected capacity change from 0 to 1024 [ 248.748071][T15560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7352'. [ 248.782114][T15555] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.7351: Failed to acquire dquot type 0 [ 249.006254][T15555] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 249.047617][T15593] netlink: 'syz.3.7370': attribute type 46 has an invalid length. [ 249.064001][T15555] EXT4-fs (loop1): 1 truncate cleaned up [ 249.076475][T15555] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 249.083073][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7370'. [ 249.106477][T15603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7373'. [ 249.122725][T15555] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.7351: Failed to acquire dquot type 0 [ 249.207808][T10253] EXT4-fs (loop1): unmounting filesystem. [ 249.531100][T15683] device lo entered promiscuous mode [ 249.536610][T15683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.607522][T15695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.619809][T15693] loop3: detected capacity change from 0 to 1024 [ 249.680416][T15703] device ip6tnl4 entered promiscuous mode [ 249.694126][T15693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.778308][ T289] EXT4-fs (loop3): unmounting filesystem. [ 249.918598][T15743] xt_bpf: check failed: parse error [ 249.919804][T15744] ì: renamed from bond_slave_0 [ 249.934926][T15746] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 249.980677][T15755] netlink: 'syz.3.7446': attribute type 28 has an invalid length. [ 250.018471][T15755] __nla_validate_parse: 4 callbacks suppressed [ 250.018641][T15755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7446'. [ 250.052615][T15765] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 250.102282][T15771] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7458'. [ 250.206452][T15789] loop3: detected capacity change from 0 to 2048 [ 250.250988][T15789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 250.270102][T15789] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.7465: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 250.312271][ T289] EXT4-fs (loop3): unmounting filesystem. [ 250.347572][T15804] device gretap1 entered promiscuous mode [ 250.404611][T15812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7474'. [ 250.454216][T15820] SELinux: truncated policydb string identifier [ 250.461686][T15820] SELinux: failed to load policy [ 250.585085][T15844] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7490'. [ 250.594186][T15844] tc_dump_action: action bad kind [ 250.624757][T15850] xt_l2tp: wrong L2TP version: 0 [ 250.654627][T15854] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.674913][T15856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.703996][T15859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.797588][T15877] loop2: detected capacity change from 0 to 256 [ 250.821838][T15877] FAT-fs (loop2): Directory bread(block 64) failed [ 250.829484][T15877] FAT-fs (loop2): Directory bread(block 65) failed [ 250.838480][T15877] FAT-fs (loop2): Directory bread(block 66) failed [ 250.845273][T15877] FAT-fs (loop2): Directory bread(block 67) failed [ 250.852394][T15877] FAT-fs (loop2): Directory bread(block 68) failed [ 250.859171][T15877] FAT-fs (loop2): Directory bread(block 69) failed [ 250.865980][T15877] FAT-fs (loop2): Directory bread(block 70) failed [ 250.872583][T15877] FAT-fs (loop2): Directory bread(block 71) failed [ 250.879339][T15877] FAT-fs (loop2): Directory bread(block 72) failed [ 250.885951][T15877] FAT-fs (loop2): Directory bread(block 73) failed [ 251.138908][ T294] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 251.347810][ T294] usb 4-1: unable to get BOS descriptor or descriptor too short [ 251.360155][T15957] netlink: 'syz.2.7543': attribute type 4 has an invalid length. [ 251.367998][ T294] usb 4-1: not running at top speed; connect to a high speed hub [ 251.381216][T15957] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.7543'. [ 251.391220][ T294] usb 4-1: config 228 has an invalid interface number: 68 but max is 0 [ 251.416963][ T294] usb 4-1: config 228 has no interface number 0 [ 251.439242][ T294] usb 4-1: config 228 interface 68 has no altsetting 0 [ 251.488576][ T294] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=96.c1 [ 251.503266][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.511393][ T294] usb 4-1: Product: syz [ 251.515576][ T294] usb 4-1: Manufacturer: syz [ 251.520511][ T294] usb 4-1: SerialNumber: syz [ 251.534345][T15973] netlink: 352 bytes leftover after parsing attributes in process `syz.2.7555'. [ 251.619806][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7559'. [ 251.642309][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7559'. [ 251.652640][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7559'. [ 251.662230][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7559'. [ 251.677012][T15983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.685220][T15983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.694146][T15983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.704644][T15983] device veth0_to_team left promiscuous mode [ 251.750255][ T294] usb_ehset_test: probe of 4-1:228.68 failed with error -32 [ 251.762902][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.781287][ T294] usb 4-1: USB disconnect, device number 94 [ 251.796162][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.812894][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 251.821545][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 251.897227][T16011] Unsupported ieee802154 address type: 0 [ 251.897229][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 251.897244][ T28] audit: type=1400 audit(2000000018.805:1306): avc: denied { bind } for pid=16009 comm="syz.2.7573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 251.945615][T16015] netlink: 'syz.4.7575': attribute type 32 has an invalid length. [ 251.962223][ T28] audit: type=1400 audit(2000000018.833:1307): avc: denied { wake_alarm } for pid=16008 comm="syz.4.7571" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 252.054841][T16032] xt_TCPMSS: Only works on TCP SYN packets [ 252.080351][T16035] loop2: detected capacity change from 0 to 512 [ 252.144539][T16035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 252.145737][ T28] audit: type=1326 audit(2000000000.018:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.1.7591" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 252.168605][T16048] loop4: detected capacity change from 0 to 512 [ 252.199051][T16035] ext4 filesystem being mounted at /1496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.211336][ T28] audit: type=1326 audit(2000000000.056:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.1.7591" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 252.236968][ T28] audit: type=1326 audit(2000000000.056:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.1.7591" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 252.262483][ T28] audit: type=1326 audit(2000000000.056:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.1.7591" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 252.304395][ T28] audit: type=1326 audit(2000000000.056:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.1.7591" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 252.329579][T16048] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 252.340470][ T290] EXT4-fs (loop2): unmounting filesystem. [ 252.359137][ T28] audit: type=1326 audit(2000000000.065:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.1.7591" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 252.385172][T16048] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 252.403766][T16062] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 252.433649][ T28] audit: type=1326 audit(2000000000.065:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.1.7591" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 252.445901][T16048] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 252.502826][ T28] audit: type=1326 audit(2000000000.065:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16049 comm="syz.1.7591" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 252.539795][T16078] SELinux: Context system_u:object_r:anacron_exec_t:s0 is not valid (left unmapped). [ 252.549760][T16048] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 252.571109][T16048] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 252.584882][T16048] EXT4-fs (loop4): orphan cleanup on readonly fs [ 252.591957][T16048] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.7590: bg 0: block 34: padding at end of block bitmap is not set [ 252.610775][T16048] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.7590: Failed to acquire dquot type 1 [ 252.639427][T16048] EXT4-fs (loop4): 1 truncate cleaned up [ 252.639785][ T426] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 252.690322][T16048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.703989][T16048] EXT4-fs (loop4): unmounting filesystem. [ 252.896932][ T426] usb 4-1: config 255 has too many interfaces: 229, using maximum allowed: 32 [ 252.917196][ T426] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 252.950512][T16141] loop1: detected capacity change from 0 to 16 [ 252.954983][ T426] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 229 [ 252.966251][ T426] usb 4-1: config 255 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.984796][T16141] erofs: (device loop1): mounted with root inode @ nid 36. [ 252.994592][ T426] usb 4-1: config 255 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 253.030596][ T426] usb 4-1: config 255 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.072099][ T426] usb 4-1: config 255 interface 0 has no altsetting 0 [ 253.091366][ T426] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 253.127020][T16161] netlink: 'syz.1.7645': attribute type 12 has an invalid length. [ 253.134985][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.144652][T16162] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 253.162500][T16057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.249034][T16173] netlink: 'syz.1.7652': attribute type 1 has an invalid length. [ 253.406404][ T426] usb 4-1: string descriptor 0 read error: -71 [ 253.422277][ T426] usb 4-1: USB disconnect, device number 95 [ 253.711663][T16234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.859529][T16256] netlink: 'syz.0.7691': attribute type 3 has an invalid length. [ 254.048150][T16290] binder: 16289:16290 ioctl c018620c 200000000000 returned -22 [ 254.097566][T16296] loop3: detected capacity change from 0 to 256 [ 254.122929][T16296] exfat: Deprecated parameter 'namecase' [ 254.157708][T16296] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 254.470462][T16373] device bridge2 entered promiscuous mode [ 254.508077][T16381] netlink: 'syz.2.7754': attribute type 1 has an invalid length. [ 255.504989][T16581] netlink: 'syz.1.7852': attribute type 16 has an invalid length. [ 255.528002][T16581] netlink: 'syz.1.7852': attribute type 17 has an invalid length. [ 255.554683][T16592] loop4: detected capacity change from 0 to 16 [ 255.562560][T16590] __nla_validate_parse: 69 callbacks suppressed [ 255.562578][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7856'. [ 255.584704][T16592] erofs: (device loop4): mounted with root inode @ nid 36. [ 255.623411][T16595] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7861'. [ 255.642259][T16595] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 255.652581][T16603] loop2: detected capacity change from 0 to 128 [ 255.690494][T16603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 255.705000][T16608] netlink: 'syz.0.7866': attribute type 2 has an invalid length. [ 255.730756][T16608] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 255.747576][T16603] ext4 filesystem being mounted at /1559/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.823318][T16622] device bridge3 entered promiscuous mode [ 255.840484][ T290] EXT4-fs (loop2): unmounting filesystem. [ 255.920658][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7879'. [ 256.003360][T16650] netlink: 'syz.4.7886': attribute type 4 has an invalid length. [ 256.025356][T16650] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7886'. [ 256.232545][T16688] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.336178][T16709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.785106][T16798] netlink: 'syz.4.7958': attribute type 16 has an invalid length. [ 256.807148][T16798] netlink: 'syz.4.7958': attribute type 17 has an invalid length. [ 256.828358][T16798] device lo left promiscuous mode [ 256.868498][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.887137][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.904109][T16798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 256.943750][T16798] device veth0_vlan left promiscuous mode [ 256.955813][T16798] device veth0_vlan entered promiscuous mode [ 256.970920][T16798] device veth1_macvtap left promiscuous mode [ 256.985878][T16798] device veth1_macvtap entered promiscuous mode [ 257.011176][T16798] device ip6gretap4 left promiscuous mode [ 257.027086][T16798] device ip6tnl3 left promiscuous mode [ 257.040300][T16798] device ip6tnl4 left promiscuous mode [ 257.052090][T16798] device bridge3 left promiscuous mode [ 257.074098][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.106964][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.128289][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.147379][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.154494][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.173993][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.189398][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.214967][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.222071][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.244549][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.253809][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 257.253826][ T28] audit: type=1400 audit(2000000003.003:1464): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.297965][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 257.312237][ T28] audit: type=1326 audit(2000000003.041:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.4.7985" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51299de99 code=0x7ffc0000 [ 257.317462][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.363760][ T28] audit: type=1326 audit(2000000003.041:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.4.7985" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51299de99 code=0x7ffc0000 [ 257.393202][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 257.402342][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.410704][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.424599][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.432707][ T28] audit: type=1400 audit(2000000003.041:1467): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.439089][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): 26±ÿ: link becomes ready [ 257.501648][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.504092][ T28] audit: type=1326 audit(2000000003.041:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.4.7985" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7ff51299de99 code=0x7ffc0000 [ 257.519715][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.565484][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.583468][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.592837][ T28] audit: type=1326 audit(2000000003.041:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.4.7985" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51299de99 code=0x7ffc0000 [ 257.603211][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.652716][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.668744][ T28] audit: type=1326 audit(2000000003.041:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16853 comm="syz.4.7985" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51299de99 code=0x7ffc0000 [ 257.670329][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.731140][ T28] audit: type=1400 audit(2000000003.060:1471): avc: denied { read write } for pid=287 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.734627][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.785150][ T28] audit: type=1400 audit(2000000003.097:1472): avc: denied { read write } for pid=10253 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.795998][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.832462][ T28] audit: type=1400 audit(2000000003.106:1473): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 257.842791][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.886871][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.904510][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.920809][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.937913][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4094: link becomes ready [ 257.946488][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.953937][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.962326][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.970619][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.978472][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7969'. [ 257.989164][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.222282][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8022'. [ 258.235924][T16929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8022'. [ 258.248080][T16928] netlink: 'syz.2.8023': attribute type 16 has an invalid length. [ 258.264180][T16928] netlink: 'syz.2.8023': attribute type 17 has an invalid length. [ 258.289906][T16928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.298368][T16937] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 258.298969][T16928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.316943][T16928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.330227][T16928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.338566][T16928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.375051][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.383577][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.390681][ T37] bridge0: port 1(bridge_slave_0) entered listening state [ 258.401133][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.408721][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.431721][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.484762][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.614007][T16971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8045'. [ 258.644820][T16971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8045'. [ 258.676491][T16983] netlink: 'syz.0.8049': attribute type 16 has an invalid length. [ 258.688069][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.695585][T16983] netlink: 'syz.0.8049': attribute type 17 has an invalid length. [ 258.720768][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.728085][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.735567][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.766368][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 258.775179][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 258.782768][T16983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge5: link becomes ready [ 258.801109][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 258.825649][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 258.945551][T17025] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 259.027742][T17044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8080'. [ 259.037322][T17044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.216532][T17070] device vlan0 entered promiscuous mode [ 259.295818][T17090] bridge0: port 3(dummy0) entered blocking state [ 259.309519][T17090] bridge0: port 3(dummy0) entered disabled state [ 259.316474][T17090] device dummy0 entered promiscuous mode [ 259.322971][T17090] bridge0: port 3(dummy0) entered blocking state [ 259.329370][T17090] bridge0: port 3(dummy0) entered listening state [ 259.405317][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.426471][T17108] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 259.621025][T17165] netlink: 'syz.1.8139': attribute type 7 has an invalid length. [ 259.646870][T17165] netlink: 'syz.1.8139': attribute type 5 has an invalid length. [ 259.779014][T17197] netlink: 'syz.3.8156': attribute type 1 has an invalid length. [ 260.001585][T17255] netlink: 'syz.3.8186': attribute type 4 has an invalid length. [ 260.356793][T17353] xt_TCPMSS: Only works on TCP SYN packets [ 260.495652][T17390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.628493][T17417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.726779][T17441] xt_hashlimit: size too large, truncated to 1048576 [ 260.733991][T17441] xt_hashlimit: max too large, truncated to 1048576 [ 260.753893][T17445] device gretap1 entered promiscuous mode [ 260.992846][T17505] bridge0: port 3(dummy0) entered disabled state [ 260.999328][T17505] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.006991][T17505] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.233200][T17559] x_tables: unsorted underflow at hook 1 [ 261.249769][T17561] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 261.330504][T17581] IPv6: sit1: Disabled Multicast RS [ 261.355004][T17583] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 261.373262][T17590] __nla_validate_parse: 8 callbacks suppressed [ 261.373283][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8348'. [ 261.423725][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 261.434912][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 261.445928][T17603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1009 sclass=netlink_audit_socket pid=17603 comm=syz.4.8356 [ 261.450000][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 261.475993][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 261.484355][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 261.493053][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 261.501369][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 261.510511][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 261.524990][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 261.533626][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 261.542709][T17598] device syz_tun left promiscuous mode [ 261.548613][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 261.557195][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 261.566367][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.573922][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.581394][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 261.589045][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 261.598084][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): wg0: link becomes ready [ 261.607170][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): wg1: link becomes ready [ 261.615659][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 261.623616][T17598] device bridge_slave_0 left promiscuous mode [ 261.637387][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6erspan0: link becomes ready [ 261.645643][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 261.653776][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): gretap1: link becomes ready [ 261.661840][T17598] device vti0 left promiscuous mode [ 261.667236][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): vti0: link becomes ready [ 261.675168][T17598] device ip6gretap1 left promiscuous mode [ 261.681661][T17598] device erspan1 left promiscuous mode [ 261.687298][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): erspan1: link becomes ready [ 261.695378][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready [ 261.703579][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl2: link becomes ready [ 261.711742][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl2: link becomes ready [ 261.719861][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl3: link becomes ready [ 261.727996][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): xfrm0: link becomes ready [ 261.735899][T17598] IPv6: ADDRCONF(NETDEV_CHANGE): gretap2: link becomes ready [ 261.751149][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.768471][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.786946][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.815012][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.840190][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.849460][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.856562][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.865060][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.873687][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): 30ì: link becomes ready [ 261.881413][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.890232][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 261.898982][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.907587][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.915867][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.924187][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.932531][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.941119][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.949593][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.958170][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.966596][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.975854][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.984105][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.992468][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.000824][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.009416][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.018270][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.026838][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.035231][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.043624][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.051410][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.059400][T17624] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8365'. [ 262.068438][T17624] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8365'. [ 262.077609][T17629] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8369'. [ 262.087166][T17629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.231093][T17673] validate_nla: 3 callbacks suppressed [ 262.231098][T17672] xt_TCPMSS: Only works on TCP SYN packets [ 262.231109][T17673] netlink: 'syz.3.8390': attribute type 9 has an invalid length. [ 262.258958][T17673] netlink: 'syz.3.8390': attribute type 6 has an invalid length. [ 262.266784][T17673] netlink: 'syz.3.8390': attribute type 7 has an invalid length. [ 262.274652][T17673] netlink: 'syz.3.8390': attribute type 8 has an invalid length. [ 262.430398][T17708] printk: syz.3.8407 (17708): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 262.496900][T17719] xt_hashlimit: overflow, try lower: 3/0 [ 262.590692][T17735] bridge0: mtu less than device minimum [ 262.596382][T17735] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 262.601012][ T28] kauditd_printk_skb: 609 callbacks suppressed [ 262.601052][ T28] audit: type=1400 audit(2000000008.010:2083): avc: denied { read write } for pid=287 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.661256][ T28] audit: type=1400 audit(2000000008.019:2084): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.686170][ T28] audit: type=1400 audit(2000000008.057:2085): avc: denied { read write } for pid=10253 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.755715][ T28] audit: type=1400 audit(2000000008.113:2086): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.801637][ T28] audit: type=1400 audit(2000000008.113:2087): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.876775][ T28] audit: type=1400 audit(2000000008.113:2088): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.950846][ T28] audit: type=1400 audit(2000000008.122:2089): avc: denied { read write } for pid=287 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 262.995926][ T28] audit: type=1400 audit(2000000008.141:2090): avc: denied { read write } for pid=17747 comm="syz.1.8427" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 263.044071][ T28] audit: type=1400 audit(2000000008.141:2091): avc: denied { read write } for pid=17747 comm="syz.1.8427" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 263.079040][ T28] audit: type=1400 audit(2000000008.160:2092): avc: denied { bpf } for pid=17748 comm="syz.4.8431" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 263.109718][T17784] netlink: 'syz.3.8443': attribute type 7 has an invalid length. [ 263.136480][T17784] netlink: 'syz.3.8443': attribute type 8 has an invalid length. [ 263.424384][T17842] netlink: 276 bytes leftover after parsing attributes in process `syz.2.8474'. [ 263.586914][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8489'. [ 263.801982][T17921] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 263.944955][T17946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.105386][T17971] netlink: 'syz.2.8538': attribute type 3 has an invalid length. [ 264.137552][T17971] netlink: 'syz.2.8538': attribute type 27 has an invalid length. [ 264.409317][T18019] device syz_tun entered promiscuous mode [ 264.459245][T18018] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.466396][T18018] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.744173][T18057] xt_hashlimit: size too large, truncated to 1048576 [ 264.766214][T18057] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 264.899761][T18072] xt_hashlimit: max too large, truncated to 1048576 [ 265.316713][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8617'. [ 265.343137][T18130] device veth2 entered promiscuous mode [ 265.543826][T18158] netlink: 3260 bytes leftover after parsing attributes in process `syz.2.8629'. [ 265.582782][T18160] device vlan1 entered promiscuous mode [ 265.599324][T18160] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 265.627474][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8632'. [ 265.637024][T18162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8632'. [ 265.655108][T18166] tc_dump_action: action bad kind [ 265.693780][T18174] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 265.740889][T18178] xt_l2tp: v2 doesn't support IP mode [ 265.913261][T18219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.973876][T18233] xt_CT: No such helper "snmp_trap" [ 266.175801][T18276] xt_l2tp: missing protocol rule (udp|l2tpip) [ 266.336777][T18309] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.413592][T18326] xt_TCPMSS: Only works on TCP SYN packets [ 266.552097][T18352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.559389][T18352] IPv6: NLM_F_CREATE should be set when creating new route [ 266.566663][T18352] IPv6: NLM_F_CREATE should be set when creating new route [ 266.667225][T18368] netlink: 'syz.4.8735': attribute type 30 has an invalid length. [ 266.891495][T18406] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 267.089177][T18448] xt_time: unknown flags 0xc [ 267.156906][T18461] __nla_validate_parse: 3 callbacks suppressed [ 267.156926][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8780'. [ 267.371559][T18496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8799'. [ 267.498220][T18523] device dummy0 entered promiscuous mode [ 267.730917][T18574] device bridge_slave_1 left promiscuous mode [ 267.737196][T18574] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.763385][T18574] bridge0: mtu less than device minimum [ 267.772203][T18574] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 267.955610][ T28] kauditd_printk_skb: 535 callbacks suppressed [ 267.955627][ T28] audit: type=1400 audit(2000000013.016:2628): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.020251][ T28] audit: type=1400 audit(2000000013.045:2629): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.089449][ T28] audit: type=1400 audit(2000000013.063:2630): avc: denied { read write } for pid=287 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.142305][ T28] audit: type=1400 audit(2000000013.063:2631): avc: denied { read write } for pid=10253 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.176109][T18648] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.186099][T18647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8873'. [ 268.219259][ T28] audit: type=1400 audit(2000000013.073:2632): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.253739][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8877'. [ 268.275975][ T28] audit: type=1400 audit(2000000013.073:2633): avc: denied { read write } for pid=18623 comm="syz.2.8861" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.316237][T18664] netlink: 'syz.4.8880': attribute type 58 has an invalid length. [ 268.327670][T18664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8880'. [ 268.337776][ T28] audit: type=1326 audit(2000000013.101:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.1.8863" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 268.366896][ T28] audit: type=1400 audit(2000000013.110:2635): avc: denied { read write } for pid=287 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 268.391743][ T28] audit: type=1326 audit(2000000013.110:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.1.8863" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 268.417260][ T28] audit: type=1326 audit(2000000013.110:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18627 comm="syz.1.8863" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0739de99 code=0x7ffc0000 [ 268.594898][T18704] netlink: 'syz.0.8900': attribute type 21 has an invalid length. [ 268.602851][T18704] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8900'. [ 268.635796][T18710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.852026][T18752] x_tables: duplicate entry at hook 2 [ 268.976209][T18781] netlink: 'syz.1.8938': attribute type 5 has an invalid length. [ 268.999764][T18781] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.8938'. [ 269.380288][T18861] device veth5 entered promiscuous mode [ 269.810263][T18960] netlink: 'syz.4.9026': attribute type 10 has an invalid length. [ 270.160283][T19025] netlink: 292 bytes leftover after parsing attributes in process `syz.4.9058'. [ 270.173938][T19026] xt_hashlimit: Unknown mode mask 96, kernel too old? [ 270.305422][T19050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.442948][T19076] xt_l2tp: missing protocol rule (udp|l2tpip) [ 270.467004][T19083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9087'. [ 270.484025][T19083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9087'. [ 270.518843][T19088] xt_ecn: cannot match TCP bits for non-tcp packets [ 270.792057][T19149] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 270.906672][T19176] netlink: 'syz.1.9133': attribute type 6 has an invalid length. [ 270.979236][T19192] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 271.087988][T19210] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 271.121996][T19217] netlink: 'syz.4.9153': attribute type 2 has an invalid length. [ 271.311352][T19256] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 271.472558][T19292] x_tables: unsorted entry at hook 2 [ 271.617108][T19322] netlink: 'syz.0.9205': attribute type 21 has an invalid length. [ 271.693406][T19336] xt_TCPMSS: Only works on TCP SYN packets [ 271.750540][T19345] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 272.203155][T19416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.306724][T19430] x_tables: duplicate underflow at hook 2 [ 272.469360][T19451] netlink: 'syz.2.9267': attribute type 50 has an invalid length. [ 272.692861][T19482] __nla_validate_parse: 4 callbacks suppressed [ 272.692879][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9282'. [ 272.844417][T19501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.862587][T19501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.883079][T19501] bridge0: port 3(dummy0) entered blocking state [ 272.889491][T19501] bridge0: port 3(dummy0) entered listening state [ 272.908600][T19501] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 272.916711][T19501] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 272.950402][T19501] device veth0_vlan left promiscuous mode [ 272.958075][T19501] device veth0_vlan entered promiscuous mode [ 272.967915][T19501] device veth1_macvtap left promiscuous mode [ 272.975749][T19501] device veth1_macvtap entered promiscuous mode [ 273.022802][ T294] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.030885][ T294] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.056767][ T294] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.064337][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.082104][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.103524][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.114342][ T1371] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.127846][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.135029][ T37] bridge0: port 1(bridge_slave_0) entered listening state [ 273.171726][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.190617][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.208354][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.219231][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 273.234441][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.246083][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 273.256388][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.265355][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.273641][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.282140][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.290353][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.298898][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.307533][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.315916][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.324443][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.333018][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.341193][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.349484][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.357961][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.366275][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.374888][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.383338][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.391521][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.399614][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.407263][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.414905][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.423188][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.431564][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.439510][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 273.447141][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 273.454695][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 273.462382][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 273.484820][ T28] kauditd_printk_skb: 551 callbacks suppressed [ 273.484837][ T28] audit: type=1400 audit(2000000018.182:3189): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.543144][T19540] x_tables: duplicate underflow at hook 3 [ 273.566419][ T28] audit: type=1400 audit(2000000018.182:3190): avc: denied { read write } for pid=287 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.657868][ T28] audit: type=1400 audit(2000000018.229:3191): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.707097][ T294] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.724726][ T294] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.736895][ T294] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.755428][ T28] audit: type=1400 audit(2000000018.238:3192): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.788232][ T1371] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.808829][T19569] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.820353][ T28] audit: type=1400 audit(2000000018.238:3193): avc: denied { read write } for pid=287 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.860399][ T28] audit: type=1400 audit(2000000018.266:3194): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.890929][ T28] audit: type=1400 audit(2000000018.294:3195): avc: denied { read write } for pid=10253 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.915702][ T426] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.923986][ T28] audit: type=1400 audit(2000000018.294:3196): avc: denied { read write } for pid=287 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.953762][ T426] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 273.969691][ T28] audit: type=1400 audit(2000000018.294:3197): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 273.994508][ T28] audit: type=1400 audit(2000000018.304:3198): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 274.073219][T19595] device sit0 entered promiscuous mode [ 274.087812][T19595] netlink: 'syz.2.9340': attribute type 1 has an invalid length. [ 274.100963][T19595] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9340'. [ 274.100994][T19601] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 274.117941][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9342'. [ 274.240285][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9354'. [ 274.674275][T19685] xt_TCPMSS: Only works on TCP SYN packets [ 274.687228][T19686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.366685][T19764] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 275.573935][T19801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9441'. [ 275.757816][T19836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9459'. [ 275.775234][T19836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9459'. [ 275.788886][T19840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9461'. [ 276.415512][T19945] netlink: 'syz.1.9513': attribute type 4 has an invalid length. [ 276.441420][T19945] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9513'. [ 276.728582][T20002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9540'. [ 276.812815][T20012] sch_fq: defrate 4294964870 ignored. [ 277.086804][T20044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.208047][T20056] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 277.272551][T20062] bridge_slave_0: default FDB implementation only supports local addresses [ 277.516251][T20104] futex_wake_op: syz.1.9590 tries to shift op by -1; fix this program [ 277.530105][T20106] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 277.558815][T20108] device macsec1 entered promiscuous mode [ 278.159172][T20222] __nla_validate_parse: 5 callbacks suppressed [ 278.159193][T20222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9644'. [ 278.189492][T20222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9644'. [ 278.656958][T20312] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20312 comm=syz.1.9689 [ 278.831699][ T28] kauditd_printk_skb: 997 callbacks suppressed [ 278.831730][ T28] audit: type=1400 audit(2000000023.189:4196): avc: denied { setattr } for pid=287 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 278.872213][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.878987][ T287] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 278.886745][ T28] audit: type=1400 audit(2000000023.217:4197): avc: denied { setattr } for pid=287 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 278.910242][ T287] audit: backlog limit exceeded [ 278.915791][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.917128][T10253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.922404][ T287] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 278.931101][T10253] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 278.944506][ T28] audit: type=1400 audit(2000000023.217:4198): avc: denied { setattr } for pid=287 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 279.011402][T20346] can0: slcan on ptm0. [ 279.088010][T20345] can0 (unregistered): slcan off ptm0. [ 279.810117][T20413] device bridge4 entered promiscuous mode [ 280.300095][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9749'. [ 280.478473][T20444] device vlan2 entered promiscuous mode [ 280.484074][T20444] device syz_tun entered promiscuous mode [ 280.574747][T20451] device macsec1 entered promiscuous mode [ 280.588513][T20451] device bridge0 entered promiscuous mode [ 280.816074][T20470] device ip6gretap0 entered promiscuous mode [ 283.345199][T20593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.417944][T20593] device batadv_slave_1 entered promiscuous mode [ 283.439103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.450845][T20596] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.9827'. [ 283.468847][T20596] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 284.185346][ T28] kauditd_printk_skb: 25303 callbacks suppressed [ 284.185364][ T28] audit: type=1400 audit(2000000028.195:28609): avc: denied { setattr } for pid=287 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 284.210950][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.221795][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.237985][ T141] audit: audit_lost=301 audit_rate_limit=0 audit_backlog_limit=64 [ 284.242924][T10253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.245933][ T141] audit: backlog limit exceeded [ 284.246702][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.264937][ T287] audit: audit_lost=303 audit_rate_limit=0 audit_backlog_limit=64 [ 284.264936][T10253] audit: audit_lost=302 audit_rate_limit=0 audit_backlog_limit=64 [ 284.264957][ T287] audit: backlog limit exceeded [ 284.465144][T20655] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9856'. [ 285.656009][T20711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20711 comm=syz.0.9883 [ 285.712806][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 285.712833][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 285.733332][T20713] xt_hashlimit: size too large, truncated to 1048576 [ 286.403049][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9892'. [ 286.730273][T20745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9899'. [ 286.755075][T20745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9899'. [ 286.777190][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9899'. [ 287.245189][T20780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.764791][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 289.078432][T20841] netlink: 'syz.0.9946': attribute type 2 has an invalid length. [ 289.132490][ C1] bridge0: port 3(dummy0) entered learning state [ 289.538525][ T28] kauditd_printk_skb: 28986 callbacks suppressed [ 289.538543][ T28] audit: type=1400 audit(2000000033.220:56585): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 289.566022][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.566038][ T141] audit: audit_lost=641 audit_rate_limit=0 audit_backlog_limit=64 [ 289.566052][ T141] audit: backlog limit exceeded [ 289.566176][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.581982][ T287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.588986][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.601380][T20862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 289.607057][T10253] audit: audit_backlog=66 > audit_backlog_limit=64 [ 289.618120][ T289] audit: audit_lost=642 audit_rate_limit=0 audit_backlog_limit=64 [ 289.703927][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9959'. [ 289.816307][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 289.816796][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 290.097061][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9972'. [ 291.373812][T20970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10008'. [ 291.513568][T20977] xt_hashlimit: size too large, truncated to 1048576 [ 292.317487][T21010] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 292.857844][T21046] bridge_slave_0: default FDB implementation only supports local addresses [ 294.895008][ T28] kauditd_printk_skb: 36720 callbacks suppressed [ 294.895026][ T28] audit: type=1400 audit(2000000038.227:91081): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.927103][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.933687][T10253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.942202][T21119] audit: audit_backlog=65 > audit_backlog_limit=64 [ 294.953622][ T141] audit: audit_lost=1396 audit_rate_limit=0 audit_backlog_limit=64 [ 294.955210][T10253] audit: audit_lost=1397 audit_rate_limit=0 audit_backlog_limit=64 [ 294.971663][ T141] audit: backlog limit exceeded [ 294.976868][T21119] audit: audit_lost=1398 audit_rate_limit=0 audit_backlog_limit=64 [ 294.988310][ T28] audit: type=1400 audit(2000000038.227:91082): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 294.992046][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.588463][T10302] device bridge_slave_1 left promiscuous mode [ 295.600691][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.622239][T10302] device bridge_slave_0 left promiscuous mode [ 295.628428][T10302] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.569785][ T4225] ------------[ cut here ]------------ [ 296.575301][ T4225] kernel BUG at fs/buffer.c:2714! [ 296.587021][ T4225] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 296.593146][ T4225] CPU: 0 PID: 4225 Comm: kmmpd-loop0 Tainted: G W syzkaller #0 [ 296.602106][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 296.612183][ T4225] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 296.617598][ T4225] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 c8 de e7 ff e9 b0 fe ff ff e8 3e 54 a2 ff 0f 0b e8 37 54 a2 ff <0f> 0b e8 30 54 a2 ff 0f 0b e8 29 54 a2 ff 0f 0b e8 22 54 a2 ff 0f [ 296.637231][ T4225] RSP: 0018:ffffc900132e7ca0 EFLAGS: 00010293 [ 296.643335][ T4225] RAX: ffffffff81cf1209 RBX: 0000000000000000 RCX: ffff88813a13d100 [ 296.651342][ T4225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.659337][ T4225] RBP: ffffc900132e7cf0 R08: ffff8881323005ef R09: 1ffff110264600bd [ 296.667338][ T4225] R10: dffffc0000000000 R11: ffffed10264600be R12: 0000000000000000 [ 296.675338][ T4225] R13: 1ffff110264600bd R14: ffff8881323005e8 R15: 0000000000003801 [ 296.683335][ T4225] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 296.692294][ T4225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.698908][ T4225] CR2: 0000001b2eb17ff8 CR3: 0000000110112000 CR4: 00000000003506b0 [ 296.706908][ T4225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 296.714902][ T4225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 296.722898][ T4225] Call Trace: [ 296.726195][ T4225] [ 296.729146][ T4225] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 296.734987][ T4225] submit_bh+0x1f/0x30 [ 296.739098][ T4225] write_mmp_block_thawed+0x397/0x510 [ 296.744509][ T4225] ? __cfi_schedule_timeout+0x10/0x10 [ 296.749910][ T4225] ? read_mmp_block+0x700/0x700 [ 296.754799][ T4225] ? __cfi_process_timeout+0x10/0x10 [ 296.760119][ T4225] ? preempt_schedule_thunk+0x16/0x18 [ 296.765560][ T4225] write_mmp_block+0x138/0x2b0 [ 296.770360][ T4225] kmmpd+0x382/0x940 [ 296.774292][ T4225] kthread+0x281/0x320 [ 296.778376][ T4225] ? __cfi_kmmpd+0x10/0x10 [ 296.782811][ T4225] ? __cfi_kthread+0x10/0x10 [ 296.787414][ T4225] ret_from_fork+0x1f/0x30 [ 296.791853][ T4225] [ 296.794881][ T4225] Modules linked in: [ 296.799640][ T4225] ---[ end trace 0000000000000000 ]--- [ 296.805197][ T4225] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 296.810610][ T4225] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 c8 de e7 ff e9 b0 fe ff ff e8 3e 54 a2 ff 0f 0b e8 37 54 a2 ff <0f> 0b e8 30 54 a2 ff 0f 0b e8 29 54 a2 ff 0f 0b e8 22 54 a2 ff 0f [ 296.836855][ T4225] RSP: 0018:ffffc900132e7ca0 EFLAGS: 00010293 [ 296.842992][ T4225] RAX: ffffffff81cf1209 RBX: 0000000000000000 RCX: ffff88813a13d100 [ 296.852004][ T4225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.871504][ T4225] RBP: ffffc900132e7cf0 R08: ffff8881323005ef R09: 1ffff110264600bd [ 296.935506][T20539] EXT4-fs (loop0): unmounting filesystem. [ 296.941328][ T4225] R10: dffffc0000000000 R11: ffffed10264600be R12: 0000000000000000 [ 296.966103][ T4225] R13: 1ffff110264600bd R14: ffff8881323005e8 R15: 0000000000003801 [ 296.974132][ T4225] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 297.030013][ T4225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.036823][ T4225] CR2: 00005609c2f10af8 CR3: 000000011dea2000 CR4: 00000000003506b0 [ 297.069335][ T4225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.117074][ T4225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 297.125123][ T4225] Kernel panic - not syncing: Fatal exception [ 297.131768][ T4225] Kernel Offset: disabled [ 297.136111][ T4225] Rebooting in 86400 seconds..