last executing test programs:

2.44585245s ago: executing program 0 (id=5259):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000240)=0x5, 0x4)

2.414181861s ago: executing program 0 (id=5260):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000000c0)=0x9, 0x4)

2.384537062s ago: executing program 0 (id=5262):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2000c851, &(0x7f0000b63fe4)={0xa, 0x3, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

2.345863263s ago: executing program 0 (id=5264):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_modinfo={0x14, 0x61cf, 0x4}})

2.327523524s ago: executing program 0 (id=5265):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0)
syz_open_pts(r0, 0x282)

2.275999174s ago: executing program 0 (id=5267):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x105e4, &(0x7f0000014840)="$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")
creat(&(0x7f0000000080)='./file2\x00', 0x108)

597.127036ms ago: executing program 1 (id=5337):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f00007d0000))

527.330768ms ago: executing program 1 (id=5339):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000010bc0)=ANY=[@ANYBLOB="4c0000000203050000000000000000000a0000030800010003000021080004400000000409000200000000010200000008000540000000000800010001"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

464.638869ms ago: executing program 3 (id=5341):
r0 = getpid()
process_vm_writev(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000001040)=""/90, 0x5a}, {&(0x7f00000007c0)=""/3, 0x3}], 0x3, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/164, 0xa4}], 0x1, 0x0)

450.784459ms ago: executing program 1 (id=5342):
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pread64(r0, &(0x7f0000000640)=""/148, 0x94, 0x7fffffffffffffff)

437.40762ms ago: executing program 2 (id=5343):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)

411.75468ms ago: executing program 3 (id=5344):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]})
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x3, 0x7, 0x0, 0x4, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x6, 0x5, 0x0, 0x40f439, 0x9})

406.33784ms ago: executing program 1 (id=5345):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xbe5, &(0x7f0000000bc0)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

355.333892ms ago: executing program 4 (id=5346):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
fspick(r0, &(0x7f0000000000)='./file0\x00', 0x1)

313.805113ms ago: executing program 3 (id=5347):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff9}}], 0x40}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x48}}], 0x2, 0x0)

307.196643ms ago: executing program 2 (id=5348):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b26, 0x0)

295.680523ms ago: executing program 4 (id=5349):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x109040)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000200))

259.828324ms ago: executing program 2 (id=5350):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0)

253.736414ms ago: executing program 4 (id=5351):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x5, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0x3}]}}]}]}, 0x34}}, 0x0)

216.179525ms ago: executing program 2 (id=5352):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x2f0, 0x0, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {0xff}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6gre0\x00', {0x80, 0xd80, 0x1d, 0x9, 0x1, 0xd, 0x60, 0xa0, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)

186.636046ms ago: executing program 1 (id=5353):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x403, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xf5a7ab78bfb4530e}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_XDP={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

180.782726ms ago: executing program 4 (id=5354):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a050023f900003c0012800b000100697036746e6c00002c000280140003000000000000000000004000000000003f14000200fe80"], 0x5c}}, 0x24000000)

153.622807ms ago: executing program 2 (id=5355):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

135.970587ms ago: executing program 3 (id=5356):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4)

99.977058ms ago: executing program 4 (id=5357):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0)

80.361948ms ago: executing program 3 (id=5358):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0x1}}, 0x0)

65.463669ms ago: executing program 2 (id=5359):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x8000000007, 0xfdfffffffffffffd})

40.650199ms ago: executing program 4 (id=5360):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
shutdown(r0, 0x0)

38.14174ms ago: executing program 1 (id=5361):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)='4096\x00', 0x4)

0s ago: executing program 3 (id=5362):
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xffffffda}], 0x1000000000000179, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

kernel console output (not intermixed with test programs):

55][ T5349] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.479112][ T5349] F2FS-fs (loop2): invalid crc value
[  136.485618][ T5349] F2FS-fs (loop2): Found nat_bits in checkpoint
[  136.506059][ T5349] F2FS-fs (loop2): Start checkpoint disabled!
[  136.512852][ T5349] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.519968][ T5349] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  136.533384][  T305] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  136.563443][  T301] usb 4-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 1023
[  136.573779][  T301] usb 4-1: config 1 interface 0 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 16
[  136.592809][  T301] usb 4-1: config 1 interface 0 has no altsetting 0
[  136.603421][   T55] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  136.653670][  T577] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  136.654449][ T5370] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  136.673649][ T5370] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  136.753449][  T301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.762532][  T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.770547][  T301] usb 4-1: Product: syz
[  136.774851][  T301] usb 4-1: Manufacturer: syz
[  136.779452][  T301] usb 4-1: SerialNumber: syz
[  136.779490][ T5374] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  136.795666][ T5374] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2253: iget: bad i_size value: 360287970189639680
[  136.808798][ T5311] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.808908][ T5374] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2253: couldn't read orphan inode 15 (err -117)
[  136.815948][ T5311] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.828244][ T5374] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue
[  136.853454][   T55] usb 1-1: Using ep0 maxpacket: 16
[  136.943447][  T305] usb 2-1: config 160 has an invalid interface number: 200 but max is 0
[  136.951805][  T305] usb 2-1: config 160 has no interface number 0
[  136.958596][  T305] usb 2-1: config 160 interface 200 has no altsetting 0
[  137.043555][  T577] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  137.062307][  T577] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.072636][  T577] usb 5-1: config 0 has no interface number 0
[  137.097320][ T5399] binder: Bad value for 'rootcontext'
[  137.123498][  T305] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  137.132979][  T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.142606][  T305] usb 2-1: Product: syz
[  137.143500][  T301] cdc_ether: probe of 4-1:1.0 failed with error -71
[  137.153519][  T305] usb 2-1: Manufacturer: syz
[  137.153528][  T305] usb 2-1: SerialNumber: syz
[  137.163540][   T55] usb 1-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[  137.179898][  T301] usb 4-1: USB disconnect, device number 49
[  137.182735][   T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.194246][   T55] usb 1-1: Product: syz
[  137.198405][   T55] usb 1-1: Manufacturer: syz
[  137.202989][   T55] usb 1-1: SerialNumber: syz
[  137.243431][  T577] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  137.252683][  T577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.262217][  T577] usb 5-1: Product: syz
[  137.266530][  T577] usb 5-1: Manufacturer: syz
[  137.271118][  T577] usb 5-1: SerialNumber: syz
[  137.276738][  T577] usb 5-1: config 0 descriptor??
[  137.287083][ T5417] fuse: Bad value for 'fd'
[  137.313920][  T577] uvcvideo: Found UVC 0.00 device syz (046c:14e8)
[  137.322114][  T577] uvcvideo: No valid video chain found.
[  137.503543][   T55] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[  137.511919][   T55] usb 1-1: USB disconnect, device number 47
[  137.523658][  T577] usb 5-1: USB disconnect, device number 44
[  137.543478][  T305] usb 2-1: MIDIStreaming interface descriptor not found
[  137.552187][  T305] usb 2-1: USB disconnect, device number 47
[  137.633438][   T20] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  137.715889][ T5433] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[  137.725236][ T5433] F2FS-fs (loop3): invalid crc value
[  137.730766][ T5433] F2FS-fs (loop3): invalid crc value
[  137.736169][ T5433] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  137.905180][ T5436]  loop3: p3 p4 < >
[  137.909091][ T5436] loop3: p3 start 100859904 is beyond EOD, truncated
[  138.023434][   T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.033578][   T24] audit: type=1400 audit(1785700043.112:233): avc:  denied  { write } for  pid=5454 comm="syz.3.2291" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  138.051518][  T302] udevd[302]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  138.060089][   T20] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  138.175742][ T5477] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  138.194632][ T5477] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,
[  138.253484][  T577] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  138.253505][   T20] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  138.272097][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.280124][   T20] usb 3-1: Product: syz
[  138.284295][   T20] usb 3-1: Manufacturer: syz
[  138.288872][   T20] usb 3-1: SerialNumber: syz
[  138.333881][   T20] usb-storage 3-1:1.0: USB Mass Storage device detected
[  138.341752][   T20] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  138.349843][   T20] scsi host1: usb-storage 3-1:1.0
[  138.383453][  T301] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  138.413422][  T305] usb 5-1: new low-speed USB device number 45 using dummy_hcd
[  138.503401][  T577] usb 2-1: Using ep0 maxpacket: 32
[  138.533408][   T55] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  138.542690][   T20] usb 3-1: USB disconnect, device number 50
[  138.623453][  T577] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.633438][  T301] usb 4-1: Using ep0 maxpacket: 8
[  138.633937][  T577] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  138.647590][  T577] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  138.658910][  T577] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  138.672236][  T577] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  138.681899][  T577] usb 2-1: config 1 interface 1 has no altsetting 0
[  138.753463][  T301] usb 4-1: config 6 has an invalid interface number: 150 but max is 0
[  138.761731][  T301] usb 4-1: config 6 has no interface number 0
[  138.767825][  T301] usb 4-1: config 6 interface 150 has no altsetting 0
[  138.823448][  T305] usb 5-1: unable to get BOS descriptor or descriptor too short
[  138.843470][  T577] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  138.852586][  T577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.860680][  T577] usb 2-1: Product: syz
[  138.865024][  T577] usb 2-1: Manufacturer: syz
[  138.869603][  T577] usb 2-1: SerialNumber: syz
[  138.893517][   T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.903722][  T305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 8
[  138.914493][   T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  138.973456][  T301] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=ce.f2
[  138.982557][  T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.990665][  T301] usb 4-1: Product: syz
[  138.994903][  T301] usb 4-1: Manufacturer: syz
[  138.999477][  T301] usb 4-1: SerialNumber: syz
[  139.003517][   T55] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  139.013128][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  139.021126][   T55] usb 1-1: SerialNumber: syz
[  139.064012][   T55] usb 1-1: 0:2 : does not exist
[  139.154084][  T577] usb 2-1: selecting invalid altsetting 0
[  139.163419][  T305] usb 5-1: string descriptor 0 read error: -22
[  139.169707][  T305] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  139.178924][  T577] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[  139.185334][  T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.213462][ T5479] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  139.220490][  T577] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[  139.230880][  T577] usb 2-1: USB disconnect, device number 48
[  139.237144][  T305] usb 5-1: selecting invalid altsetting 1
[  139.245285][ T5495] F2FS-fs (loop2): invalid crc value
[  139.250654][ T5495] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  139.261179][  T305] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  139.276486][  T305] usb 1-1: USB disconnect, device number 48
[  139.279013][ T5495] F2FS-fs (loop2): Found nat_bits in checkpoint
[  139.303409][ T5495] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  139.310010][ T5495] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  139.317570][ T5495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  139.363884][  T301] usb 4-1: bad CDC descriptors
[  139.370926][  T301] usb 4-1: USB disconnect, device number 50
[  139.421660][  T390] print_req_error: 489 callbacks suppressed
[  139.421675][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.421988][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.427856][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.441744][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.460670][  T441] usb 5-1: USB disconnect, device number 45
[  139.468987][  T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  139.473650][  T390] buffer_io_error: 406 callbacks suppressed
[  139.473659][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  139.487732][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  139.496148][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.499491][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.507829][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  139.515394][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  139.515502][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.527168][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.537119][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  139.537201][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.545605][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  139.553154][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  139.566501][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.575528][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  139.583117][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  139.636760][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  139.725767][ T5505] EXT4-fs (loop1): Ignoring removed bh option
[  139.733058][ T5505] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.2311: corrupted in-inode xattr
[  139.745167][ T5505] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2311: couldn't read orphan inode 15 (err -117)
[  139.757212][ T5505] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,journal_dev=0x0000000000000001,init_itable,auto_da_alloc=0x0000000000000080,nolazytime,norecovery,nolazytime,commit=0x0000000,errors=continue
[  139.787359][   T20] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  140.045888][ T5530] FAT-fs (loop4): IO charset utf�Ѿ¹Éh$Û‚‰œ#wî•w9Á‹C=Yæ’³�t¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß�‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found
[  140.103442][  T441] usb 2-1: new low-speed USB device number 49 using dummy_hcd
[  140.110959][  T301] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  140.113385][  T305] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  140.203444][   T20] usb 3-1: unable to get BOS descriptor or descriptor too short
[  140.253428][   T20] usb 3-1: not running at top speed; connect to a high speed hub
[  140.333497][   T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  140.353508][  T301] usb 1-1: Using ep0 maxpacket: 32
[  140.393396][  T305] usb 4-1: Using ep0 maxpacket: 16
[  140.473464][  T301] usb 1-1: config 0 has an invalid interface number: 151 but max is 0
[  140.481689][  T301] usb 1-1: config 0 has no interface number 0
[  140.487861][  T301] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  140.499187][  T301] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[  140.510554][  T441] usb 2-1: unable to get BOS descriptor or descriptor too short
[  140.518233][   T20] usb 3-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  140.527488][   T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.533384][   T55] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  140.535516][   T20] usb 3-1: Product: syz
[  140.543527][  T305] usb 4-1: config 3 has an invalid interface number: 127 but max is 0
[  140.547289][   T20] usb 3-1: Manufacturer: syz
[  140.555604][  T305] usb 4-1: config 3 has no interface number 0
[  140.559905][   T20] usb 3-1: SerialNumber: syz
[  140.566248][  T305] usb 4-1: config 3 interface 127 altsetting 42 bulk endpoint 0xC has invalid maxpacket 16
[  140.580699][  T305] usb 4-1: config 3 interface 127 has no altsetting 0
[  140.663461][  T441] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  140.673615][  T441] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  140.684282][  T301] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  140.693292][  T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.701354][  T301] usb 1-1: Product: syz
[  140.705537][  T301] usb 1-1: Manufacturer: syz
[  140.710107][  T301] usb 1-1: SerialNumber: syz
[  140.715427][  T301] usb 1-1: config 0 descriptor??
[  140.733458][ T5520] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  140.753489][  T305] usb 4-1: New USB device found, idVendor=0582, idProduct=f1a4, bcdDevice=77.d8
[  140.762527][  T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.770548][  T305] usb 4-1: Product: syz
[  140.774780][  T305] usb 4-1: Manufacturer: syz
[  140.779349][  T305] usb 4-1: SerialNumber: syz
[  140.803444][ T5522] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  140.933417][  T441] usb 2-1: string descriptor 0 read error: -22
[  140.939665][  T441] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  140.948734][  T441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.973461][ T5518] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  140.993878][  T441] cdc_acm: probe of 2-1:1.0 failed with error -22
[  141.034386][  T301] usb 1-1: USB disconnect, device number 49
[  141.116205][   T20] usb 3-1: USB disconnect, device number 51
[  141.197801][  T305] usb 4-1: USB disconnect, device number 51
[  141.201129][  T441] usb 2-1: USB disconnect, device number 49
[  141.213545][   T55] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  141.222691][   T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.230885][   T55] usb 5-1: Product: syz
[  141.235571][   T55] usb 5-1: Manufacturer: syz
[  141.240165][   T55] usb 5-1: SerialNumber: syz
[  141.372225][ T5559] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.499175][ T5576] EXT4-fs (loop0): old and new quota format mixing
[  141.613776][   T55] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  141.638607][   T55] usb 5-1: USB disconnect, device number 46
[  141.660628][  T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  141.684582][ T5597] EXT4-fs (loop2): invalid inodes per group: 0
[  141.684582][ T5597] 
[  141.829275][ T5600] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6)
[  141.838435][ T5600] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  141.847816][ T5600] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2355: Failed to acquire dquot type 0
[  141.859386][ T5600] EXT4-fs error (device loop3): mb_free_blocks:1540: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  141.874250][ T5600] EXT4-fs (loop3): 1 truncate cleaned up
[  141.879890][ T5600] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,inlinecrypt,,errors=continue
[  141.894466][ T5603] F2FS-fs (loop1): invalid crc value
[  141.909139][ T5603] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  141.923403][  T577] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  141.942705][ T5603] F2FS-fs (loop1): recover fsync data on readonly fs
[  141.949474][ T5603] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  141.956085][ T5603] F2FS-fs (loop1): checkpoint=disable on readonly fs
[  142.071860][ T5618] erofs: (device loop4): EXPERIMENTAL big pcluster feature in use. Use at your own risk!
[  142.089873][ T5618] erofs: (device loop4): z_erofs_load_lzma_config: lzma algorithm isn't enabled
[  142.101434][ T5623] EXT4-fs error (device loop1): ext4_xattr_inode_iget:397: comm syz.1.2363: Parent and EA inode have the same ino 15
[  142.113944][ T5623] EXT4-fs (loop1): 1 orphan inode deleted
[  142.119658][ T5623] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x0000000000000022,noauto_da_alloc,quota,usrjquota=,resuid=0x000000000000ee01,,errors=continue
[  142.183453][   T55] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  142.313508][  T577] usb 1-1: config 127 has an invalid interface number: 228 but max is 0
[  142.323766][  T577] usb 1-1: config 127 has no interface number 0
[  142.330027][  T577] usb 1-1: config 127 interface 228 altsetting 0 bulk endpoint 0xB has invalid maxpacket 32
[  142.340407][  T577] usb 1-1: config 127 interface 228 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023
[  142.443446][   T55] usb 3-1: Using ep0 maxpacket: 32
[  142.503485][  T577] usb 1-1: New USB device found, idVendor=2e24, idProduct=1d95, bcdDevice=5e.f2
[  142.512511][  T577] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.520508][  T577] usb 1-1: Product: syz
[  142.524745][  T577] usb 1-1: Manufacturer: syz
[  142.529320][  T577] usb 1-1: SerialNumber: syz
[  142.543415][   T20] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  142.551028][  T441] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  142.553447][ T5596] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.565601][   T55] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.565648][ T5596] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  142.575695][   T55] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  142.591547][   T55] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  142.633399][  T301] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  142.763493][   T55] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  142.772591][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.780619][   T55] usb 3-1: Product: syz
[  142.784825][   T55] usb 3-1: Manufacturer: syz
[  142.789404][   T55] usb 3-1: SerialNumber: syz
[  142.813416][  T441] usb 5-1: Using ep0 maxpacket: 32
[  142.818625][   T20] usb 2-1: Using ep0 maxpacket: 16
[  142.844409][  T577] usb 1-1: USB disconnect, device number 50
[  142.973572][   T20] usb 2-1: config index 0 descriptor too short (expected 65535, got 1289)
[  142.982140][   T20] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  142.991044][   T20] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  143.001357][   T20] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  143.013462][  T301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  143.023192][  T301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43040, setting to 64
[  143.093519][   T20] usb 2-1: config index 1 descriptor too short (expected 65535, got 1289)
[  143.102058][   T20] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  143.110957][   T20] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  143.121333][  T301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.130470][   T20] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  143.139805][  T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  143.147815][  T301] usb 4-1: SerialNumber: syz
[  143.153458][  T441] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  143.153542][   T55] usb 3-1: unit 255 not found!
[  143.162480][  T441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.162488][  T441] usb 5-1: Product: syz
[  143.162503][  T441] usb 5-1: Manufacturer: syz
[  143.172815][   T55] usb 3-1: USB disconnect, device number 52
[  143.175813][  T441] usb 5-1: SerialNumber: syz
[  143.194844][  T301] cdc_acm 4-1:1.0: skipping garbage
[  143.233453][   T20] usb 2-1: config index 2 descriptor too short (expected 65535, got 1289)
[  143.241981][   T20] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  143.251054][   T20] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  143.261402][   T20] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  143.323431][   T20] usb 2-1: string descriptor 0 read error: -71
[  143.329642][   T20] usb 2-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba
[  143.344395][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.355925][   T20] usb 2-1: rejected 3 configurations due to insufficient available bus power
[  143.364728][   T20] usb 2-1: no configuration chosen from 3 choices
[  143.377196][   T20] usb 2-1: USB disconnect, device number 50
[  143.393936][  T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  143.396749][  T301] usb 4-1: USB disconnect, device number 52
[  143.581133][ T5671] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  143.590705][  T441] usb 5-1: MIDIStreaming interface descriptor not found
[  143.597939][ T5671] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0)
[  143.611261][  T441] usb 5-1: USB disconnect, device number 47
[  143.723422][   T55] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  144.043426][   T55] usb 1-1: not running at top speed; connect to a high speed hub
[  144.093413][    T5] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  144.123424][   T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.133640][   T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.142470][   T55] usb 1-1: config 1 has no interface number 0
[  144.233393][  T441] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  144.243438][  T305] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  144.303472][   T55] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  144.312550][   T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.320573][   T55] usb 1-1: Product: syz
[  144.324744][   T55] usb 1-1: Manufacturer: syz
[  144.329319][   T55] usb 1-1: SerialNumber: syz
[  144.525985][  T390] print_req_error: 210 callbacks suppressed
[  144.525999][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  144.526022][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.531941][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.531948][  T390] buffer_io_error: 173 callbacks suppressed
[  144.531955][  T390] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  144.532163][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.544745][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  144.573450][  T390] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  144.579569][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.593653][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.599460][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  144.606248][  T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.617446][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.629415][   T55] usb 1-1: USB disconnect, device number 51
[  144.638481][  T441] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.646054][    T5] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  144.656919][  T441] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.672960][    T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.683048][  T390] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  144.697255][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  144.700979][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.714351][  T305] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  144.715495][  T390] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  144.726981][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.740476][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  144.753401][    T5] usb 2-1: Product: syz
[  144.772490][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  144.773263][  T390] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  144.780570][    T5] usb 2-1: Manufacturer: syz
[  144.793394][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  144.801418][    T5] usb 2-1: SerialNumber: syz
[  144.843453][  T441] usb 4-1: New USB device found, idVendor=046d, idProduct=0991, bcdDevice= 0.40
[  144.852502][  T441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.860721][  T441] usb 4-1: Product: syz
[  144.865004][  T441] usb 4-1: Manufacturer: syz
[  144.869593][  T441] usb 4-1: SerialNumber: syz
[  144.923471][  T305] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  144.933224][  T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.941454][  T305] usb 5-1: Product: syz
[  144.945874][  T305] usb 5-1: Manufacturer: syz
[  144.950499][  T305] usb 5-1: SerialNumber: syz
[  145.003896][  T305] usb-storage 5-1:1.0: USB Mass Storage device detected
[  145.023985][  T305] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  145.043523][  T305] scsi host1: usb-storage 5-1:1.0
[  145.169621][    T5] usb 2-1: USB disconnect, device number 51
[  145.173859][ T5713] EXT4-fs (loop0): inodes count not valid: 27 vs 32
[  145.231291][  T577] usb 5-1: USB disconnect, device number 48
[  145.283436][  T441] usb 4-1: 0:1 : does not exist
[  145.303472][  T441] usb 4-1: USB disconnect, device number 53
[  145.583763][ T5742] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  145.593391][ T5742] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  145.603757][ T5742] EXT4-fs (loop2): orphan cleanup on readonly fs
[  145.611783][ T5742] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3357: comm syz.2.2421: Allocating blocks 41-42 which overlap fs metadata
[  145.625737][ T5742] Quota error (device loop2): write_blk: dquota write failed
[  145.635765][ T5742] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  145.645744][ T5742] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.2421: Failed to acquire dquot type 0
[  145.657846][ T5742] EXT4-fs error (device loop2): mb_free_blocks:1540: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  145.672701][ T5742] EXT4-fs (loop2): 1 truncate cleaned up
[  145.686239][ T5742] EXT4-fs (loop2): pa ffff88811079c348: logic 1, phys. 41, len 23
[  145.694111][ T5742] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4367: group 0, free 22, pa_free 23
[  145.704399][ T5742] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,noblock_validity,noquota,nolazytime,nogrpid,errors=continue,jqfmt=vfsold,i_version,resuid=0x00000000000000002,errors=continue
[  145.803384][    T5] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  145.826355][ T5774] erofs: (device loop2): erofs_read_superblock: invalid sb_extslots 4192 (more than a fs block)
[  145.969150][ T5772]  loop4: p1 p3 < p5 p6 >
[  146.032117][   T95]  loop4: p1 p3 < p5 p6 >
[  146.043424][  T305] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  146.053441][    T5] usb 1-1: Using ep0 maxpacket: 16
[  146.065700][ T5788] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.2441: ea_inode with extended attributes
[  146.078584][ T5788] EXT4-fs (loop2): Remounting filesystem read-only
[  146.085367][ T5788] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2441: error while reading EA inode 11 err=-117
[  146.098185][ T5788] EXT4-fs (loop2): 1 orphan inode deleted
[  146.103965][ T5788] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,data_err=ignore,debug_want_extra_isize=0x000000000000004c,errors=remount-ro,errors=remount-ro,grpjquota=,bsdgroups,
[  146.123472][  T301] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  146.164725][  T390] udevd[390]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  146.175390][  T302] udevd[302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  146.175394][  T389] udevd[389]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  146.188990][  T392] udevd[392]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  146.210202][  T390] udevd[390]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  146.221386][  T306] udevd[306]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  146.221391][  T389] udevd[389]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  146.241988][  T392] udevd[392]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  146.293495][  T305] usb 2-1: Using ep0 maxpacket: 16
[  146.333464][    T5] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  146.342532][    T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.350804][  T577] usb 5-1: new full-speed USB device number 49 using dummy_hcd
[  146.358451][    T5] usb 1-1: Product: syz
[  146.362867][    T5] usb 1-1: Manufacturer: syz
[  146.367879][    T5] usb 1-1: SerialNumber: syz
[  146.383399][  T301] usb 4-1: Using ep0 maxpacket: 8
[  146.423477][  T305] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  146.432923][   T24] audit: type=1400 audit(1785700051.512:234): avc:  denied  { read write } for  pid=5826 comm="syz.2.2459" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  146.437924][  T305] usb 2-1: config 0 has no interface number 0
[  146.459496][   T24] audit: type=1400 audit(1785700051.512:235): avc:  denied  { open } for  pid=5826 comm="syz.2.2459" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  146.486103][  T305] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  146.496577][  T305] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  146.506969][  T305] usb 2-1: config 0 interface 41 has no altsetting 0
[  146.673440][  T305] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  146.682575][  T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.690713][  T305] usb 2-1: Product: syz
[  146.694960][  T305] usb 2-1: Manufacturer: syz
[  146.699526][  T305] usb 2-1: SerialNumber: syz
[  146.705023][  T305] usb 2-1: config 0 descriptor??
[  146.713495][  T301] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40
[  146.722609][  T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.723467][  T577] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  146.730847][  T301] usb 4-1: Product: syz
[  146.741445][ T5764] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  146.745726][  T301] usb 4-1: Manufacturer: syz
[  146.752530][    T5] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  146.757221][  T301] usb 4-1: SerialNumber: syz
[  146.763734][ T5764] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  146.775284][  T577] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  146.786753][  T577] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64
[  146.797708][    T5] usb 1-1: found format II with max.bitrate = 0, frame size=1
[  146.805209][  T577] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  146.818260][    T5] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  146.845624][    T5] usb 1-1: USB disconnect, device number 52
[  146.853817][  T624] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  146.903437][  T577] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  146.912508][  T577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  146.920581][  T577] usb 5-1: SerialNumber: syz
[  146.943456][ T5792] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  147.003462][  T305] sr9700: probe of 2-1:0.41 failed with error -71
[  147.011913][  T305] usb 2-1: USB disconnect, device number 52
[  147.093391][  T624] usb 3-1: Using ep0 maxpacket: 8
[  147.134614][  T301] usb 4-1: MIDIStreaming interface descriptor not found
[  147.170006][  T301] usb 4-1: USB disconnect, device number 54
[  147.224144][  T577] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  147.233709][  T624] usb 3-1: config 1 has an invalid interface number: 232 but max is 2
[  147.242100][  T577] usb 5-1: USB disconnect, device number 49
[  147.248817][  T624] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.260600][  T624] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  147.270742][ T5863] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.2477: invalid indirect mapped block 10 (level 1)
[  147.283492][  T624] usb 3-1: config 1 has no interface number 0
[  147.284608][ T5863] EXT4-fs (loop0): Remounting filesystem read-only
[  147.292279][  T624] usb 3-1: too many endpoints for config 1 interface 232 altsetting 255: 255, using maximum allowed: 30
[  147.296806][ T5863] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.2477: invalid indirect mapped block 8 (level 1)
[  147.307784][  T624] usb 3-1: config 1 interface 232 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  147.321493][ T5863] EXT4-fs (loop0): 1 truncate cleaned up
[  147.334339][  T624] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  147.340126][ T5863] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,errors=remount-ro,
[  147.350691][  T624] usb 3-1: config 1 interface 232 has no altsetting 0
[  147.503490][  T624] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  147.512555][  T624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.520800][  T624] usb 3-1: Product: syz
[  147.524998][  T624] usb 3-1: Manufacturer: syz
[  147.529578][  T624] usb 3-1: SerialNumber: syz
[  147.596193][ T5891] EXT4-fs (loop3): Ignoring removed bh option
[  147.602451][ T5891] EXT4-fs (loop3): Test dummy encryption mode enabled
[  147.609428][ T5891] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  147.618931][ T5891] EXT4-fs error (device loop3): ext4_fill_super:4959: inode #2: comm syz.3.2490: iget: special inode unallocated
[  147.631182][ T5891] EXT4-fs (loop3): Remounting filesystem read-only
[  147.637739][ T5891] EXT4-fs (loop3): get root inode failed
[  147.643382][ T5891] EXT4-fs (loop3): mount failed
[  147.743440][  T577] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  147.766734][ T5895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2491: inode #1048320: comm syz.4.2491: iget: illegal inode #
[  147.780508][ T5895] EXT4-fs (loop4): Remounting filesystem read-only
[  147.786512][ T5901] overlayfs: empty lowerdir
[  147.790895][ T5895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2491: error while reading EA inode 1048320 err=-117
[  147.804878][  T624] usb 3-1: unknown sample rate
[  147.810271][  T624] usb 3-1: unknown sample rate
[  147.819266][ T5895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2491: inode #1048320: comm syz.4.2491: iget: illegal inode #
[  147.823680][ T5905] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock
[  147.844202][    T5] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  147.852066][  T624] usb 3-1: USB disconnect, device number 53
[  147.865158][ T5895] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2491: error while reading EA inode 1048320 err=-117
[  147.878312][ T5895] EXT4-fs (loop4): 1 orphan inode deleted
[  147.884225][ T5895] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=remount-ro,debug_want_extra_isize=0x0000000000000036,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,acl,min_batch_time=0x0000000000000101,
[  147.983450][  T577] usb 1-1: Using ep0 maxpacket: 16
[  148.103523][  T577] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1600, setting to 1024
[  148.133396][  T301] usb 4-1: new low-speed USB device number 55 using dummy_hcd
[  148.203418][    T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.213697][    T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.233396][   T20] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  148.273466][  T577] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  148.282558][  T577] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.290556][  T577] usb 1-1: Product: syz
[  148.294843][  T577] usb 1-1: Manufacturer: syz
[  148.312735][  T577] usb 1-1: SerialNumber: syz
[  148.373483][    T5] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.376045][ T5929] incfs: Error accessing: ./file0.
[  148.382530][    T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.382544][    T5] usb 2-1: Product: syz
[  148.387841][ T5929] incfs: mount failed -2
[  148.396286][    T5] usb 2-1: Manufacturer: syz
[  148.411888][    T5] usb 2-1: SerialNumber: syz
[  148.440150][ T5931] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  148.449257][ T5931] FAT-fs (loop2): bogus number of directory entries (1)
[  148.457105][ T5931] FAT-fs (loop2): Can't find a valid FAT filesystem
[  148.503447][   T20] usb 5-1: Using ep0 maxpacket: 8
[  148.613484][  T301] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt
[  148.623386][  T301] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.636681][  T301] usb 4-1: config 1 interface 0 has no altsetting 0
[  148.640508][ T5936] EXT4-fs (loop2): Ignoring removed bh option
[  148.650692][ T5936] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.2510: invalid indirect mapped block 234881024 (level 0)
[  148.664827][ T5936] EXT4-fs (loop2): Remounting filesystem read-only
[  148.671397][ T5936] EXT4-fs (loop2): 1 truncate cleaned up
[  148.677111][ T5936] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,
[  148.695179][   T20] usb 5-1: unable to get BOS descriptor or descriptor too short
[  148.733494][    T5] usb 2-1: 0:2 : does not exist
[  148.738615][    T5] usb 2-1: unit 9 not found!
[  148.749081][    T5] usb 2-1: USB disconnect, device number 53
[  148.793526][   T20] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  148.823510][  T577] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  148.843427][  T577] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  148.872138][  T577] usb 1-1: USB disconnect, device number 53
[  149.043392][  T624] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  149.063499][   T20] usb 5-1: string descriptor 0 read error: -22
[  149.069894][   T20] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  149.081636][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.107162][ T5942] EXT4-fs (loop0): user quota file already specified
[  149.123995][   T20] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  149.199209][   T24] audit: type=1326 audit(1785700054.282:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5957 comm="syz.0.2520" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62b98ebe99 code=0x0
[  149.263501][  T301] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  149.272714][  T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.284777][  T301] usb 4-1: Manufacturer: à –
[  149.303431][ T5907] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  149.325216][ T5977] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  149.335223][ T5977] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c128, mo2=0002]
[  149.343456][   T20] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  149.343756][ T5977] EXT4-fs (loop0): orphan cleanup on readonly fs
[  149.357172][ T5977] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3357: comm syz.0.2529: Allocating blocks 41-42 which overlap fs metadata
[  149.368127][   T20] usb 5-1: USB disconnect, device number 50
[  149.380370][ T5977] EXT4-fs (loop0): Remounting filesystem read-only
[  149.387122][ T5977] Quota error (device loop0): write_blk: dquota write failed
[  149.394649][ T5977] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  149.405454][ T5977] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.2529: Failed to acquire dquot type 0
[  149.416975][ T5977] EXT4-fs (loop0): 1 truncate cleaned up
[  149.422723][ T5977] EXT4-fs (loop0): pa ffff88811079c930: logic 1, phys. 41, len 23
[  149.423438][  T624] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.430574][ T5977] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4367: group 0, free 22, pa_free 23
[  149.447514][  T624] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.451546][ T5977] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,noload,journal_dev=0x0000000000000002,noinit_itable,journal_dev=0x00000000000000102
[  149.513436][  T441] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  149.597241][  T301] usb 4-1: USB disconnect, device number 55
[  149.613424][  T624] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  149.622464][  T624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.634037][  T624] usb 3-1: Product: syz
[  149.638190][  T624] usb 3-1: Manufacturer: syz
[  149.642886][  T624] usb 3-1: SerialNumber: syz
[  149.648132][ T5983] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[  149.657873][ T5983] F2FS-fs (loop0): invalid crc value
[  149.663789][ T5983] F2FS-fs (loop0): invalid crc value
[  149.669266][ T5983] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  149.844993][ T5986] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  149.855968][ T5986] EXT4-fs (loop0): group descriptors corrupted!
[  149.873445][  T441] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.883707][  T441] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  149.892632][  T441] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  150.013472][  T624] usb 3-1: unit 5 not found!
[  150.026016][  T624] usb 3-1: USB disconnect, device number 54
[  150.063504][  T441] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  150.079132][  T441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.090606][  T441] usb 2-1: Product: syz
[  150.097347][  T441] usb 2-1: Manufacturer: syz
[  150.101947][  T441] usb 2-1: SerialNumber: syz
[  150.146261][ T6037] cgroup: none used incorrectly
[  150.198281][ T6043] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  150.215971][ T6043] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  150.230117][ T6043] Quota error (device loop3): write_blk: dquota write failed
[  150.237556][ T6043] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  150.248460][ T6043] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2560: Failed to acquire dquot type 0
[  150.260101][ T6043] EXT4-fs (loop3): 1 truncate cleaned up
[  150.265781][ T6043] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,resuid=0x0000000000000000,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue
[  150.299509][  T301] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  150.394831][ T6056] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  150.404437][ T6056] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  150.414761][ T6056] EXT4-fs (loop0): group descriptors corrupted!
[  150.422341][  T302] print_req_error: 443 callbacks suppressed
[  150.422355][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  150.422399][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  150.428375][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.443464][  T441] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  150.451137][  T302] buffer_io_error: 367 callbacks suppressed
[  150.451147][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  150.484260][  T441] usb 2-1: clock source 0 is not valid, cannot use
[  150.484357][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.501860][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  150.503427][  T441] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[  150.516529][  T441] usb 2-1: 1:1: freq mismatch (RO clock): req 48000, clock runs @0
[  150.533888][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.541831][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.546894][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  150.562719][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  150.568317][  T441] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  150.583383][  T441] usb 2-1: clock source 0 is not valid, cannot use
[  150.590135][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.594568][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.617586][  T441] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[  150.624014][  T441] usb 2-1: 1:1: freq mismatch (RO clock): req 48000, clock runs @0
[  150.632128][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  150.640220][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  150.648406][    T5] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  150.653304][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.672290][  T389] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  150.683817][  T441] usb 2-1: USB disconnect, device number 54
[  150.703443][  T301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  150.718231][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  150.723366][  T389] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  150.735318][ T6075] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  150.755480][ T6075] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  150.766606][ T6075] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  150.783696][ T6075] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  150.791721][ T6075] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000]
[  150.799828][ T6075] EXT4-fs (loop2): orphan cleanup on readonly fs
[  150.806750][ T6075] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2574: bg 0: block 34: padding at end of block bitmap is not set
[  150.821180][ T6075] Quota error (device loop2): write_blk: dquota write failed
[  150.828734][ T6075] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  150.838663][ T6075] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.2574: Failed to acquire dquot type 1
[  150.850445][ T6075] EXT4-fs (loop2): 1 truncate cleaned up
[  150.862221][ T6075] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue
[  150.876576][  T301] usb 5-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice= 0.40
[  150.913850][  T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.921880][  T301] usb 5-1: Product: syz
[  150.951875][  T301] usb 5-1: Manufacturer: syz
[  150.967430][  T301] usb 5-1: SerialNumber: syz
[  151.034674][  T390] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  151.043672][  T390] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  151.083441][    T5] usb 4-1: unable to get BOS descriptor or descriptor too short
[  151.293410][  T624] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  151.303807][  T301] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[  151.312573][  T301] usb 5-1: USB disconnect, device number 51
[  151.324794][ T6095] EXT4-fs (loop2): Test dummy encryption mode enabled
[  151.328704][ T6068] F2FS-fs (loop0): invalid crc value
[  151.346213][ T6095] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002]
[  151.359981][ T6068] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  151.364792][ T6095] System zones: 0-5
[  151.375652][ T6095] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,noload,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,auto_da_alloc,norecovery,nogrpid,minixdf,
[  151.389219][ T6068] F2FS-fs (loop0): recover fsync data on readonly fs
[  151.392904][ T6095] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev loop2, type ext4) errno=-22
[  151.399966][ T6068] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[  151.410088][    T5] usb 4-1: string descriptor 0 read error: -22
[  151.423672][    T5] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  151.432684][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.663466][  T624] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  151.681676][  T624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.691886][    T5] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  151.700805][  T624] usb 2-1: config 0 has no interface number 0
[  151.707537][   T24] audit: type=1326 audit(1785700056.802:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6106 comm="syz.0.2587" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62b98ebe99 code=0x0
[  151.742756][ T6103] F2FS-fs (loop2): Invalid uid value -1
[  151.748479][    T5] usb 4-1: 2:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  151.787233][    T5] usb 4-1: found format II with max.bitrate = 3, frame size=257
[  151.811859][   T24] audit: type=1326 audit(1785700056.892:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6119 comm="syz.0.2593" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62b98ebe99 code=0x0
[  151.813484][    T5] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  151.858475][    T5] usb 4-1: USB disconnect, device number 56
[  151.873531][  T624] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  151.882573][  T624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.906963][  T624] usb 2-1: Product: syz
[  151.911140][  T624] usb 2-1: Manufacturer: syz
[  151.923408][  T624] usb 2-1: SerialNumber: syz
[  151.934658][  T624] usb 2-1: config 0 descriptor??
[  152.056744][ T6142] EXT4-fs (loop4): bad s_min_extra_isize: 544
[  152.093965][  T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  152.113499][  T301] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  152.144178][  T436] usb 1-1: new low-speed USB device number 54 using dummy_hcd
[  152.186008][   T20] usb 2-1: USB disconnect, device number 55
[  152.320056][ T6153] 9pnet: Could not find request transport: xen
[  152.373380][  T301] usb 3-1: Using ep0 maxpacket: 32
[  152.375893][ T6167] SELinux:  Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped).
[  152.387735][   T24] audit: type=1400 audit(1785700057.482:239): avc:  denied  { relabelto } for  pid=6166 comm="syz.3.2616" name="527" dev="tmpfs" ino=2715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0"
[  152.413607][    T5] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  152.533437][  T436] usb 1-1: LPM exit latency is zeroed, disabling LPM.
[  152.573480][  T301] usb 3-1: unable to get BOS descriptor or descriptor too short
[  152.583967][ T6185] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  152.593473][ T6185] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  152.603095][ T6185] F2FS-fs (loop3): invalid crc value
[  152.608714][ T6185] F2FS-fs (loop3): invalid crc value
[  152.613509][  T436] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.614191][ T6185] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  152.653628][  T301] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.663839][  T301] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  152.673502][  T301] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  152.683128][  T301] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.793487][    T5] usb 5-1: config index 0 descriptor too short (expected 13015, got 31)
[  152.801850][    T5] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  152.812406][    T5] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  152.825609][ T6198] FAT-fs (loop1): bogus sectors per cluster 192
[  152.831860][ T6198] FAT-fs (loop1): Can't find a valid FAT filesystem
[  152.853463][  T301] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  152.862563][  T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.870685][  T301] usb 3-1: Product: syz
[  152.874920][  T436] usb 1-1: string descriptor 0 read error: -22
[  152.881092][  T436] usb 1-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40
[  152.890139][  T301] usb 3-1: Manufacturer: syz
[  152.894765][  T301] usb 3-1: SerialNumber: syz
[  152.899982][  T436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.943862][  T436] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  153.014279][    T5] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  153.023373][    T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.031335][    T5] usb 5-1: Product: syz
[  153.035536][  T624] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  153.043100][    T5] usb 5-1: Manufacturer: syz
[  153.047916][    T5] usb 5-1: SerialNumber: syz
[  153.083792][    T5] rtl8150 5-1:1.0: couldn't find required endpoints
[  153.090472][    T5] rtl8150: probe of 5-1:1.0 failed with error -5
[  153.148167][  T436] usb 1-1: USB disconnect, device number 54
[  153.213703][  T301] usb 3-1: MIDIStreaming interface descriptor not found
[  153.222456][  T301] usb 3-1: USB disconnect, device number 55
[  153.288394][  T577] usb 5-1: USB disconnect, device number 52
[  153.383444][  T624] usb 4-1: not running at top speed; connect to a high speed hub
[  153.391238][    T5] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  153.423910][  T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  153.473446][  T624] usb 4-1: config 4 has an invalid interface number: 155 but max is 0
[  153.481645][  T624] usb 4-1: config 4 has no interface number 0
[  153.487913][  T624] usb 4-1: config 4 interface 155 has no altsetting 0
[  153.633428][    T5] usb 2-1: Using ep0 maxpacket: 32
[  153.667346][  T624] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00
[  153.677939][  T624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.686272][  T624] usb 4-1: Product: syz
[  153.694642][  T624] usb 4-1: Manufacturer: syz
[  153.699466][  T624] usb 4-1: SerialNumber: syz
[  153.714859][ T6225] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  153.723738][ T6225] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  153.732082][ T6225] EXT4-fs (loop2): 1 truncate cleaned up
[  153.737923][ T6225] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,discard,nodiscard,grpquota,,errors=continue
[  153.758030][    T5] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  153.769066][    T5] usb 2-1: config 0 has no interface number 0
[  153.775202][    T5] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  153.785142][    T5] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  153.795222][    T5] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  153.808317][    T5] usb 2-1: config 0 interface 196 has no altsetting 0
[  153.910529][ T6254] erofs: (device loop2): erofs_read_inode: unsupported i_format 516 of nid 36
[  153.943724][  T301] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  153.973479][    T5] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  153.982577][    T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.990586][    T5] usb 2-1: Product: syz
[  153.994942][    T5] usb 2-1: Manufacturer: syz
[  153.999508][    T5] usb 2-1: SerialNumber: syz
[  154.004553][    T5] usb 2-1: config 0 descriptor??
[  154.022714][ T6257] FAT-fs (loop4): Directory bread(block 64) failed
[  154.029316][ T6257] FAT-fs (loop4): Directory bread(block 65) failed
[  154.036088][  T624] ums-jumpshot 4-1:4.155: USB Mass Storage device detected
[  154.036117][ T6257] FAT-fs (loop4): Directory bread(block 66) failed
[  154.044507][  T624] ums-jumpshot 4-1:4.155: Quirks match for vid 05dc pid 0001: 2
[  154.051297][ T6257] FAT-fs (loop4): Directory bread(block 67) failed
[  154.064338][ T6257] FAT-fs (loop4): Directory bread(block 68) failed
[  154.070893][ T6257] FAT-fs (loop4): Directory bread(block 69) failed
[  154.077868][ T6257] FAT-fs (loop4): Directory bread(block 70) failed
[  154.086041][  T624] usb 4-1: USB disconnect, device number 57
[  154.092960][ T6257] FAT-fs (loop4): Directory bread(block 71) failed
[  154.099762][ T6257] FAT-fs (loop4): Directory bread(block 72) failed
[  154.108598][ T6257] FAT-fs (loop4): Directory bread(block 73) failed
[  154.131019][ T6266] mmap: syz.2.2660 (6266) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  154.283684][    T5] ipheth 2-1:0.196: Unable to find endpoints
[  154.290583][    T5] usb 2-1: USB disconnect, device number 56
[  154.323497][  T301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.333734][  T301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  154.344855][  T301] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.423412][  T441] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  154.433480][  T301] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  154.442569][  T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  154.450624][  T301] usb 1-1: SerialNumber: syz
[  154.493398][  T577] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  154.493828][  T301] cdc_ether: probe of 1-1:1.0 failed with error -22
[  154.509451][  T301] usb-storage 1-1:1.0: USB Mass Storage device detected
[  154.521592][  T301] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  154.575036][ T6283] EXT4-fs (loop3): Test dummy encryption mode enabled
[  154.581916][ T6283] EXT4-fs (loop3): Invalid commit interval 1120355697, must be smaller than 21474836
[  154.705380][    T5] usb 1-1: USB disconnect, device number 55
[  154.713520][ T6287] EXT4-fs (loop3): Test dummy encryption mode enabled
[  154.720324][ T6287] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  154.731241][ T6287] EXT4-fs (loop3): group descriptors corrupted!
[  154.743391][  T577] usb 5-1: Using ep0 maxpacket: 16
[  154.783460][  T441] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.793766][  T441] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  154.815861][ T6294] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[  154.827751][   T24] kauditd_printk_skb: 2 callbacks suppressed
[  154.827763][   T24] audit: type=1400 audit(2000000000.959:242): avc:  denied  { relabelto } for  pid=6293 comm="syz.3.2672" name="545" dev="tmpfs" ino=2808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  154.865934][   T24] audit: type=1400 audit(2000000000.959:243): avc:  denied  { associate } for  pid=6293 comm="syz.3.2672" name="545" dev="tmpfs" ino=2808 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768"
[  154.897853][   T24] audit: type=1400 audit(2000000000.999:244): avc:  denied  { write } for  pid=282 comm="syz-executor" name="545" dev="tmpfs" ino=2808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  154.928404][   T24] audit: type=1400 audit(2000000000.999:245): avc:  denied  { remove_name } for  pid=282 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  154.933637][  T441] usb 3-1: string descriptor 0 read error: -71
[  154.955319][  T577] usb 5-1: string descriptor 0 read error: -22
[  154.961525][  T441] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  154.969730][  T577] usb 5-1: New USB device found, idVendor=0499, idProduct=2003, bcdDevice= 0.40
[  154.984282][  T441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.987755][   T24] audit: type=1400 audit(2000000000.999:246): avc:  denied  { rmdir } for  pid=282 comm="syz-executor" name="545" dev="tmpfs" ino=2808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768"
[  155.019132][  T577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.023535][  T441] usb 3-1: can't set config #1, error -71
[  155.035039][  T441] usb 3-1: USB disconnect, device number 56
[  155.063897][  T577] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[  155.099092][ T6308] EXT4-fs (loop1): Unsupported encryption level 8
[  155.203446][  T301] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  155.234000][ T6319] cgroup: Unknown parameter '³('
[  155.269186][  T441] usb 5-1: USB disconnect, device number 53
[  155.284241][ T6321] EXT4-fs (loop0): Ignoring removed nobh option
[  155.290895][ T6321] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  155.300778][ T6321] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  155.310594][ T6321] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  155.320845][ T6321] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  155.328769][ T6321] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000]
[  155.336579][ T6321] EXT4-fs (loop0): failed to initialize system zone (-117)
[  155.343889][ T6321] EXT4-fs (loop0): mount failed
[  155.425099][  T436] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  155.428617][  T302] print_req_error: 276 callbacks suppressed
[  155.428632][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  155.435697][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  155.439197][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  155.449936][  T301] usb 4-1: Using ep0 maxpacket: 16
[  155.478140][  T302] buffer_io_error: 229 callbacks suppressed
[  155.478149][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  155.482011][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  155.484356][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  155.492387][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  155.503555][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  155.514309][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  155.522301][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  155.529974][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  155.530090][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  155.541469][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  155.552345][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  155.560276][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  155.570765][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  155.578792][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  155.586991][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  155.597905][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  155.608836][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  155.643485][  T301] usb 4-1: config 64 has an invalid interface number: 155 but max is 1
[  155.651885][  T301] usb 4-1: config 64 has no interface number 0
[  155.658072][  T301] usb 4-1: too many endpoints for config 64 interface 155 altsetting 13: 210, using maximum allowed: 30
[  155.669230][  T301] usb 4-1: config 64 interface 155 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 210
[  155.682619][  T436] usb 2-1: Using ep0 maxpacket: 8
[  155.687688][  T301] usb 4-1: config 64 interface 1 has no altsetting 0
[  155.694409][  T301] usb 4-1: config 64 interface 155 has no altsetting 0
[  155.703392][    T5] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[  155.753404][  T577] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  155.813448][  T436] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  155.821594][  T436] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.831898][  T436] usb 2-1: config 0 has no interface number 0
[  155.893485][  T301] usb 4-1: New USB device found, idVendor=16d8, idProduct=6006, bcdDevice=12.b4
[  155.902611][  T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.910954][  T301] usb 4-1: Product: syz
[  155.915427][  T301] usb 4-1: Manufacturer: syz
[  155.920013][  T301] usb 4-1: SerialNumber: syz
[  155.993406][  T577] usb 1-1: Using ep0 maxpacket: 32
[  156.023449][  T436] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  156.032541][  T436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.040793][  T436] usb 2-1: Product: syz
[  156.044991][  T436] usb 2-1: Manufacturer: syz
[  156.049566][  T436] usb 2-1: SerialNumber: syz
[  156.054659][  T436] usb 2-1: config 0 descriptor??
[  156.063434][    T5] usb 3-1: config 32 has an invalid interface number: 255 but max is 0
[  156.071749][    T5] usb 3-1: config 32 has an invalid descriptor of length 255, skipping remainder of the config
[  156.082228][    T5] usb 3-1: config 32 has no interface number 0
[  156.088438][    T5] usb 3-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30
[  156.099723][    T5] usb 3-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  156.103900][  T436] uvcvideo: Found UVC 0.04 device syz (046d:08c3)
[  156.113454][  T577] usb 1-1: config 44 has an invalid descriptor of length 0, skipping remainder of the config
[  156.119900][  T436] uvcvideo: No valid video chain found.
[  156.129772][    T5] usb 3-1: config 32 interface 255 has no altsetting 0
[  156.142202][    T5] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  156.151265][    T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.233438][   T25] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  156.243973][  T301] usb 4-1: bad CDC descriptors
[  156.250141][  T301] usb 4-1: USB disconnect, device number 58
[  156.293571][  T577] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  156.302777][  T577] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.311027][  T577] usb 1-1: Product: syz
[  156.315353][  T577] usb 1-1: Manufacturer: syz
[  156.316206][  T441] usb 2-1: USB disconnect, device number 57
[  156.319938][  T577] usb 1-1: SerialNumber: syz
[  156.353779][  T577] usb 1-1: bad CDC descriptors
[  156.358748][  T577] usb 1-1: unsupported MDLM descriptors
[  156.433425][    T5] usb 3-1: string descriptor 0 read error: -71
[  156.439867][    T5] hub 3-1:32.255: bad descriptor, ignoring hub
[  156.446138][    T5] hub: probe of 3-1:32.255 failed with error -5
[  156.484108][    T5] usb 3-1: USB disconnect, device number 57
[  156.563035][  T577] usb 1-1: USB disconnect, device number 56
[  156.603502][   T25] usb 5-1: config 1 descriptor has 1 excess byte, ignoring
[  156.610925][   T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.783439][   T25] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  156.792559][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.800982][   T25] usb 5-1: Product: syz
[  156.805343][ T6361] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3)
[  156.813015][ T6361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  156.821230][   T25] usb 5-1: Manufacturer: syz
[  156.821451][ T6361] F2FS-fs (loop3): Invalid gid value -1
[  156.825925][   T25] usb 5-1: SerialNumber: syz
[  156.873761][   T25] rtl8150 5-1:1.0: couldn't find required endpoints
[  156.880449][   T25] rtl8150: probe of 5-1:1.0 failed with error -5
[  156.926001][ T6366]  loop1: p1 < >
[  156.964565][   T95]  loop1: p1 < >
[  157.010471][ T6369] EXT4-fs (loop2): Ignoring removed nobh option
[  157.017402][ T6369] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  157.026393][ T6369] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6
[  157.059700][  T302] udevd[302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  157.080415][  T577] usb 5-1: USB disconnect, device number 54
[  157.206360][  T302] udevd[302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  157.283004][ T6389] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  157.337076][ T6390] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  157.356189][ T6390] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.454472][ T6396] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  157.484611][ T6383] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12
[  157.492377][ T6383] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  157.500729][ T6383] F2FS-fs (loop2): quotafile must be on filesystem root
[  157.583991][ T6374] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945)
[  157.592170][ T6374] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  157.602087][ T6374] F2FS-fs (loop1): Encoding requested by superblock is unknown
[  157.813387][  T436] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  157.844220][ T6408] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  157.890718][ T6408] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  157.941739][ T6408] EXT4-fs (loop0): filesystem is read-only
[  157.954251][ T6408] EXT4-fs (loop0): filesystem is read-only
[  157.960087][ T6408] EXT4-fs (loop0): orphan cleanup on readonly fs
[  157.967774][ T6408] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #16: comm syz.0.2722: invalid indirect mapped block 32768 (level 2)
[  157.982820][ T6408] EXT4-fs (loop0): Remounting filesystem read-only
[  157.989506][ T6408] EXT4-fs (loop0): 1 orphan inode deleted
[  157.995427][ T6408] EXT4-fs (loop0): 1 truncate cleaned up
[  158.002384][ T6408] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,data_err=abort,inode_readahead_blks=0x0000000000000100,bsddf,auto_da_alloc=0x000000007fffffff,
[  158.093410][  T577] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  158.203402][  T436] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping
[  158.212297][  T436] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  158.233397][  T436] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  158.253370][  T436] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping
[  158.273377][  T436] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  158.383446][  T436] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.402678][  T436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  158.412756][  T436] usb 4-1: SerialNumber: syz
[  158.473815][  T436] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  158.491811][  T436] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  158.493445][  T577] usb 5-1: unable to get BOS descriptor or descriptor too short
[  158.498579][  T436] cdc_acm: probe of 4-1:1.0 failed with error -22
[  158.553444][  T577] usb 5-1: not running at top speed; connect to a high speed hub
[  158.614204][ T6417] F2FS-fs (loop2): Found nat_bits in checkpoint
[  158.633636][  T577] usb 5-1: config 174 has an invalid interface number: 1 but max is 0
[  158.641815][  T577] usb 5-1: config 174 has no interface number 0
[  158.673485][  T577] usb 5-1: config 174 interface 1 altsetting 184 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  158.696653][  T577] usb 5-1: config 174 interface 1 altsetting 184 endpoint 0xA has invalid maxpacket 512, setting to 64
[  158.707913][  T577] usb 5-1: config 174 interface 1 has no altsetting 0
[  158.707932][ T6417] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955
[  158.728320][    T5] usb 4-1: USB disconnect, device number 59
[  158.811044][ T6421] F2FS-fs (loop1): Found nat_bits in checkpoint
[  158.837337][ T6421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  158.848917][ T6419] F2FS-fs (loop0): Found nat_bits in checkpoint
[  158.869949][ T6419] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  158.883535][  T577] usb 5-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=a8.e5
[  158.892764][  T577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.943388][  T577] usb 5-1: Product: syz
[  158.947632][  T577] usb 5-1: Manufacturer: syz
[  158.952220][  T577] usb 5-1: SerialNumber: syz
[  158.977282][ T6409] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  159.246291][ T6438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  159.265736][ T6449] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  159.273562][  T577] hub 5-1:174.1: bad descriptor, ignoring hub
[  159.280733][  T577] hub: probe of 5-1:174.1 failed with error -5
[  159.314141][  T577] usb 5-1: USB disconnect, device number 55
[  159.577596][ T6459] erofs: (device loop3): mounted with root inode @ nid 36.
[  159.646068][ T6464] F2FS-fs (loop0): invalid crc value
[  159.657453][ T6464] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  159.684692][ T6464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  159.692183][ T6464] SELinux: security_context_str_to_sid(sysadm_) failed for (dev loop0, type f2fs) errno=-22
[  159.743374][    T5] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  159.837155][ T6472] 
: renamed from team_slave_1
[  159.993391][    T5] usb 2-1: Using ep0 maxpacket: 8
[  160.194041][ T6486] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  160.208670][    T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.228940][    T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  160.248073][    T5] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  160.261221][  T305] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  160.386006][ T6490] EXT4-fs (loop0): Unsupported blocksize for fs-verity
[  160.423715][    T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  160.432934][    T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.441092][    T5] usb 2-1: Product: syz
[  160.445470][    T5] usb 2-1: Manufacturer: syz
[  160.450057][    T5] usb 2-1: SerialNumber: syz
[  160.504317][    T5] cdc_ncm 2-1:1.0: bind() failure
[  160.558036][   T24] audit: type=1400 audit(2000000006.689:247): avc:  denied  { create } for  pid=6493 comm="syz.0.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  160.578570][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'.
[  160.593215][   T24] audit: type=1400 audit(2000000006.719:248): avc:  denied  { write } for  pid=6493 comm="syz.0.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  160.623829][   T24] audit: type=1400 audit(2000000006.719:249): avc:  denied  { nlmsg_read } for  pid=6493 comm="syz.0.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  160.683498][  T305] usb 5-1: unable to get BOS descriptor set
[  160.709717][    T5] usb 2-1: USB disconnect, device number 58
[  160.723529][  T305] usb 5-1: not running at top speed; connect to a high speed hub
[  160.932322][ T6505] F2FS-fs (loop0): invalid crc value
[  160.953537][ T6505] F2FS-fs (loop0): invalid crc value
[  160.963564][  T305] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.06
[  160.973744][  T302] print_req_error: 142 callbacks suppressed
[  160.973759][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  160.974242][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  160.979800][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  160.995962][ T6505] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  161.002441][  T302] buffer_io_error: 117 callbacks suppressed
[  161.002450][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  161.017452][  T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.020429][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.043371][  T305] usb 5-1: Product: syz
[  161.053250][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  161.057118][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.076509][  T305] usb 5-1: Manufacturer: syz
[  161.081121][  T305] usb 5-1: SerialNumber: syz
[  161.085932][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  161.173880][ T6520] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  161.185437][ T6520] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.198762][ T6520] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #2: block 3: comm syz.2.2761: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=64784, size=2048 fake=0
[  161.201253][   T24] audit: type=1400 audit(2000000007.329:250): avc:  denied  { write } for  pid=6519 comm="syz.2.2761" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  161.272175][   T24] audit: type=1400 audit(2000000007.329:251): avc:  denied  { add_name } for  pid=6519 comm="syz.2.2761" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  161.296670][   T24] audit: type=1400 audit(2000000007.329:252): avc:  denied  { create } for  pid=6519 comm="syz.2.2761" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  161.333070][  T408] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  161.343769][  T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  161.351907][  T408] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  161.360740][  T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  161.369057][  T408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.382197][   T24] audit: type=1400 audit(2000000007.509:253): avc:  denied  { create } for  pid=6534 comm="syz.3.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  161.387278][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  161.407919][  T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.417769][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  161.422623][  T305] snd-usb-audio: probe of 5-1:1.0 failed with error -2
[  161.451929][  T408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.460334][   T24] audit: type=1400 audit(2000000007.509:254): avc:  denied  { write } for  pid=6534 comm="syz.3.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  161.462226][  T302] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.491966][  T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.501431][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.504218][  T305] usb 5-1: USB disconnect, device number 56
[  161.524771][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  161.571329][  T390] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.589757][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  161.609197][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  161.609223][   T24] audit: type=1400 audit(2000000007.739:255): avc:  denied  { module_load } for  pid=6546 comm="syz.2.2771" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1
[  161.617352][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  161.642328][ T6547] kernel read not supported for file /policy (pid: 6547 comm: syz.2.2771)
[  161.653567][  T302] Buffer I/O error on dev loop2p1, logical block 0, async page read
[  161.663957][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  161.675912][  T390] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  161.743386][   T25] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  161.761364][   T24] audit: type=1400 audit(2000000007.889:256): avc:  denied  { setopt } for  pid=6559 comm="syz.0.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  161.983440][   T25] usb 4-1: Using ep0 maxpacket: 32
[  162.103454][   T25] usb 4-1: config 192 has an invalid interface number: 65 but max is 0
[  162.111764][   T25] usb 4-1: config 192 has no interface number 0
[  162.138864][   T25] usb 4-1: config 192 interface 65 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64
[  162.155717][   T25] usb 4-1: config 192 interface 65 altsetting 2 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  162.166950][   T25] usb 4-1: config 192 interface 65 has no altsetting 0
[  162.226610][ T6539] F2FS-fs (loop1): Found nat_bits in checkpoint
[  162.263851][ T6539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  162.315249][ T6562] F2FS-fs (loop2): Found nat_bits in checkpoint
[  162.363622][   T25] usb 4-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=37.96
[  162.397335][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.417082][ T6562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  162.435750][   T25] usb 4-1: Product: syz
[  162.439928][   T25] usb 4-1: Manufacturer: syz
[  162.493454][   T25] usb 4-1: can't set config #192, error -71
[  162.499894][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'.
[  162.514630][   T25] usb 4-1: USB disconnect, device number 60
[  162.584159][ T6640] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT
[  162.612688][ T6648] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2815'.
[  162.638010][ T6657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2818'.
[  162.654682][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'.
[  162.700164][ T6675] netlink: 'syz.0.2829': attribute type 46 has an invalid length.
[  162.716378][ T6675] netlink: 'syz.0.2829': attribute type 28 has an invalid length.
[  162.725394][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'.
[  162.807229][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2848'.
[  162.819913][ T6712] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2848'.
[  162.874049][ T6711] netlink: 'syz.2.2847': attribute type 13 has an invalid length.
[  162.901681][ T6738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2861'.
[  162.930257][ T6747] x_tables: unsorted entry at hook 3
[  162.947758][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2866'.
[  163.193983][ T6848] xt_hashlimit: invalid interval
[  163.399204][ T6928] IPv6: NLM_F_CREATE should be specified when creating new route
[  163.408382][ T6928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.415624][ T6928] IPv6: NLM_F_CREATE should be set when creating new route
[  163.422845][ T6928] IPv6: NLM_F_CREATE should be set when creating new route
[  163.472371][ T6952] netlink: 'syz.3.2967': attribute type 24 has an invalid length.
[  163.694090][ T7037] IPv6: Can't replace route, no match found
[  163.945564][ T7133] device bridge1 entered promiscuous mode
[  164.079072][ T7188] PM: Enabling pm_trace changes system date and time during resume.
[  164.079072][ T7188] PM: Correct system time has to be restored manually after resume.
[  164.119972][ T7202] device bridge_slave_1 left promiscuous mode
[  164.130787][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.147292][ T7202] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  164.163694][ T7208] netlink: 'syz.2.3093': attribute type 17 has an invalid length.
[  164.164156][ T7208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.192652][ T7215] netlink: 'syz.4.3097': attribute type 15 has an invalid length.
[  164.361857][ T7280] device vlan0 entered promiscuous mode
[  164.458428][ T7315] netlink: 'syz.2.3145': attribute type 2 has an invalid length.
[  164.470527][ T7315] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  164.567094][ T7344] xt_ecn: cannot match TCP bits for non-tcp packets
[  164.568227][ T7350] netlink: 'syz.3.3161': attribute type 9 has an invalid length.
[  164.700873][ T7397] x_tables: unsorted underflow at hook 4
[  164.816762][ T7440] xt_policy: output policy not valid in PREROUTING and INPUT
[  165.009134][ T7511] xt_hashlimit: max too large, truncated to 1048576
[  165.090842][ T7539] capability: warning: `syz.1.3257' uses 32-bit capabilities (legacy support in use)
[  165.155981][ T7565] device bridge1 entered promiscuous mode
[  165.278863][ T7610] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.292988][ T7610] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.332670][ T7627] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  165.441819][ T7672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.479386][ T7686] device macsec0 entered promiscuous mode
[  165.570782][   T24] kauditd_printk_skb: 743 callbacks suppressed
[  165.570794][   T24] audit: type=1400 audit(2000000011.699:1000): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.602659][ T7717] xt_limit: Overflow, try lower: 268435456/13
[  165.605101][   T24] audit: type=1400 audit(2000000011.699:1001): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.629673][ T7729] __nla_validate_parse: 24 callbacks suppressed
[  165.629682][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'.
[  165.635822][   T24] audit: type=1400 audit(2000000011.719:1002): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.672845][   T24] audit: type=1400 audit(2000000011.719:1003): avc:  denied  { read write } for  pid=7722 comm="syz.0.3348" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.703145][   T24] audit: type=1400 audit(2000000011.719:1004): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.728128][   T24] audit: type=1400 audit(2000000011.739:1005): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.752542][ T7741] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3357'.
[  165.777448][   T24] audit: type=1400 audit(2000000011.739:1006): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.809640][   T24] audit: type=1400 audit(2000000011.739:1007): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.829311][ T7761] xt_TCPMSS: Only works on TCP SYN packets
[  165.839259][   T24] audit: type=1400 audit(2000000011.739:1008): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.870941][   T24] audit: type=1400 audit(2000000011.789:1009): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  165.965809][ T7787] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  166.083020][ T7816] ipt_REJECT: TCP_RESET invalid for non-tcp
[  166.176037][ T7838] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3403'.
[  166.203128][ T7844] netlink: 'syz.3.3408': attribute type 8 has an invalid length.
[  166.242894][ T7854] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3413'.
[  166.274669][ T7860] x_tables: duplicate underflow at hook 4
[  166.421000][ T7900] IPv6: NLM_F_REPLACE set, but no existing node found!
[  166.482324][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'.
[  166.494393][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'.
[  166.681270][ T7963] netlink: 'syz.2.3468': attribute type 12 has an invalid length.
[  166.802339][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3482'.
[  166.886648][ T8013] netlink: 5412 bytes leftover after parsing attributes in process `syz.3.3494'.
[  166.897160][ T8016] device veth0 entered promiscuous mode
[  166.910066][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'.
[  166.940667][ T8024] xt_policy: too many policy elements
[  166.960273][ T8029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.032252][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3508'.
[  167.174991][ T8082] x_tables: duplicate underflow at hook 2
[  167.276743][ T8106] bridge0: port 1(bridge_slave_0) entered listening state
[  167.311328][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.329464][ T8116] xt_NFQUEUE: number of total queues is 0
[  167.676345][ T8209] device erspan1 entered promiscuous mode
[  167.701989][ T8214] device ip6tnl1 entered promiscuous mode
[  167.863665][ T8256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.300179][ T8343] validate_nla: 2 callbacks suppressed
[  168.300187][ T8343] netlink: 'syz.2.3657': attribute type 1 has an invalid length.
[  168.434839][ T8371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.585807][ T8414] netlink: 'syz.3.3692': attribute type 3 has an invalid length.
[  168.595795][ T8414] netlink: 'syz.3.3692': attribute type 3 has an invalid length.
[  168.648502][ T8428] netlink: 'syz.2.3699': attribute type 3 has an invalid length.
[  168.887787][ T8480] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  169.827752][ T8651] netlink: 'syz.1.3811': attribute type 5 has an invalid length.
[  170.088252][ T8697] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  170.230900][ T8720] xt_NFQUEUE: number of total queues is 0
[  170.484055][ T8788] netlink: 'syz.2.3877': attribute type 29 has an invalid length.
[  170.494374][ T8788] netlink: 'syz.2.3877': attribute type 29 has an invalid length.
[  170.513806][ T8793] netlink: 'syz.0.3881': attribute type 3 has an invalid length.
[  170.534906][ T8795] netlink: 'syz.3.3883': attribute type 15 has an invalid length.
[  170.548117][ T8795] IPv6: NLM_F_CREATE should be specified when creating new route
[  170.576976][   T24] kauditd_printk_skb: 679 callbacks suppressed
[  170.576988][   T24] audit: type=1400 audit(2000000016.709:1689): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.629488][   T24] audit: type=1400 audit(2000000016.729:1690): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.654276][   T24] audit: type=1400 audit(2000000016.729:1691): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.694939][ T8822] device macsec0 entered promiscuous mode
[  170.696426][   T24] audit: type=1400 audit(2000000016.739:1692): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.713872][ T8822] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  170.726492][   T24] audit: type=1400 audit(2000000016.759:1694): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.771896][   T24] audit: type=1400 audit(2000000016.759:1693): avc:  denied  { read write } for  pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.781786][ T8831] x_tables: duplicate underflow at hook 1
[  170.802471][   T24] audit: type=1400 audit(2000000016.789:1695): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.828530][ T8829] __nla_validate_parse: 29 callbacks suppressed
[  170.828538][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3899'.
[  170.863413][   T24] audit: type=1400 audit(2000000016.799:1696): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.908479][   T24] audit: type=1400 audit(2000000016.809:1697): avc:  denied  { read write } for  pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  170.963090][ T8859] device ipip0 entered promiscuous mode
[  170.968704][   T24] audit: type=1400 audit(2000000016.829:1698): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  171.044154][ T8875] tc_dump_action: action bad kind
[  171.094853][ T8884] netlink: 'syz.4.3928': attribute type 2 has an invalid length.
[  171.225001][ T8909] IPv6: NLM_F_CREATE should be specified when creating new route
[  171.569275][ T9000] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3983'.
[  171.652345][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3995'.
[  171.710658][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4001'.
[  171.777999][ T9055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4009'.
[  171.782800][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'.
[  171.851173][ T9069] xt_hashlimit: max too large, truncated to 1048576
[  172.225767][ T9152] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4060'.
[  172.382086][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4072'.
[  172.453590][ T9192] xt_hashlimit: max too large, truncated to 1048576
[  172.460230][ T9192] xt_hashlimit: overflow, try lower: 137438953472/8
[  172.733299][ T9238] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4100'.
[  173.023672][ T9288] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.125045][ T9308] xt_SECMARK: invalid mode: 2
[  173.228201][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4140'.
[  173.390542][ T9354] bridge0: port 2(dummy0) entered blocking state
[  173.414423][ T9354] bridge0: port 2(dummy0) entered disabled state
[  173.431820][ T9354] device dummy0 entered promiscuous mode
[  173.446060][ T9354] bridge0: port 2(dummy0) entered blocking state
[  173.452429][ T9354] bridge0: port 2(dummy0) entered forwarding state
[  173.870385][ T9477] x_tables: unsorted underflow at hook 3
[  173.987871][ T9504] û: renamed from bond_slave_0
[  173.995002][ T9509] xt_l2tp: v2 doesn't support IP mode
[  174.086385][ T9528] bridge0: port 3(veth0_to_bridge) entered blocking state
[  174.106921][ T9528] bridge0: port 3(veth0_to_bridge) entered disabled state
[  174.122603][ T9528] device veth0_to_bridge entered promiscuous mode
[  174.129608][ T9528] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  174.142188][ T9528] bridge0: port 3(veth0_to_bridge) entered blocking state
[  174.149335][ T9528] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  174.529746][ T9640] validate_nla: 4 callbacks suppressed
[  174.529756][ T9640] netlink: 'syz.4.4300': attribute type 3 has an invalid length.
[  174.554005][ T9645] netlink: 'syz.0.4302': attribute type 7 has an invalid length.
[  174.569137][ T9645] netlink: 'syz.0.4302': attribute type 5 has an invalid length.
[  175.134687][ T9792] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  175.144801][ T9795] netlink: 'syz.2.4376': attribute type 13 has an invalid length.
[  175.262951][ T9824] netlink: 'syz.2.4390': attribute type 7 has an invalid length.
[  175.271277][ T9824] netlink: 'syz.2.4390': attribute type 8 has an invalid length.
[  175.292234][ T9830] netlink: 'syz.1.4393': attribute type 4 has an invalid length.
[  175.415637][ T9862] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  175.446892][   T24] kauditd_printk_skb: 671 callbacks suppressed
[  175.446903][   T24] audit: type=1400 audit(2000000789.726:2370): avc:  denied  { create } for  pid=9865 comm="syz.2.4412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  175.477168][   T24] audit: type=1400 audit(2000000789.726:2371): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  175.512888][   T24] audit: type=1400 audit(2000000789.747:2372): avc:  denied  { create } for  pid=9869 comm="syz.1.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  175.533693][   T24] audit: type=1400 audit(2000000789.747:2373): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  175.567465][   T24] audit: type=1400 audit(2000000789.758:2374): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  175.593391][   T24] audit: type=1400 audit(2000000789.768:2375): avc:  denied  { read write } for  pid=9873 comm="syz.2.4415" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  175.655201][   T24] audit: type=1400 audit(2000000789.779:2376): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  175.681679][   T24] audit: type=1400 audit(2000000789.779:2377): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  175.720322][ T9903] xt_ecn: cannot match TCP bits for non-tcp packets
[  175.743505][   T24] audit: type=1400 audit(2000000789.779:2378): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  175.788939][   T24] audit: type=1400 audit(2000000789.821:2379): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  176.342286][T10028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.349529][T10028] IPv6: NLM_F_CREATE should be set when creating new route
[  176.356765][T10028] IPv6: NLM_F_CREATE should be set when creating new route
[  176.366231][T10030] __nla_validate_parse: 2 callbacks suppressed
[  176.366240][T10030] netlink: 3721 bytes leftover after parsing attributes in process `syz.3.4491'.
[  176.450038][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4497'.
[  176.468937][T10046] xt_l2tp: wrong L2TP version: 0
[  176.650498][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4509'.
[  177.186620][T10152] netlink: 37 bytes leftover after parsing attributes in process `syz.0.4550'.
[  177.278123][T10172] netlink: 'syz.0.4561': attribute type 46 has an invalid length.
[  177.358872][T10188] xt_hashlimit: max too large, truncated to 1048576
[  177.368746][T10191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.375685][T10194] xt_CONNSECMARK: invalid mode: 254
[  177.588383][T10239] xt_TPROXY: Can be used only with -p tcp or -p udp
[  177.800125][T10298] xt_hashlimit: max too large, truncated to 1048576
[  177.808767][T10300] xt_l2tp: v2 sid > 0xffff: 4294967295
[  177.849275][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4629'.
[  177.858651][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4629'.
[  177.868562][T10308] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4629'.
[  177.923387][T10317] xt_TPROXY: Can be used only with -p tcp or -p udp
[  178.199121][T10376] netlink: 'syz.2.4664': attribute type 29 has an invalid length.
[  178.215418][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4660'.
[  178.232400][T10379] netlink: 'syz.3.4662': attribute type 11 has an invalid length.
[  178.252996][T10379] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4662'.
[  178.342940][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'.
[  178.661539][T10477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.878162][T10522] ip6gretap0: refused to change device tx_queue_len
[  178.985872][T10547] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[  179.224820][T10602] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  179.512251][T10653] ip6t_REJECT: ECHOREPLY is not supported
[  180.006611][T10768] xt_bpf: check failed: parse error
[  180.092084][T10792] x_tables: unsorted underflow at hook 3
[  180.096388][T10793] xt_bpf: check failed: parse error
[  180.133433][T10798] validate_nla: 2 callbacks suppressed
[  180.133442][T10798] netlink: 'syz.2.4868': attribute type 13 has an invalid length.
[  180.219252][   T24] kauditd_printk_skb: 562 callbacks suppressed
[  180.219264][   T24] audit: type=1400 audit(2000000794.735:2942): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.252056][   T24] audit: type=1400 audit(2000000794.766:2943): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.301278][   T24] audit: type=1400 audit(2000000794.766:2944): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.330007][   T24] audit: type=1400 audit(2000000794.777:2945): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.355366][T10833] ip6t_rpfilter: unknown options
[  180.365214][   T24] audit: type=1400 audit(2000000794.798:2946): avc:  denied  { read write } for  pid=10823 comm="syz.3.4883" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.390133][   T24] audit: type=1400 audit(2000000794.808:2947): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.415958][   T24] audit: type=1400 audit(2000000794.808:2948): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.462836][T10845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready
[  180.470362][   T24] audit: type=1400 audit(2000000794.818:2949): avc:  denied  { read write } for  pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.537435][   T24] audit: type=1400 audit(2000000794.818:2950): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  180.570892][   T24] audit: type=1400 audit(2000000794.839:2951): avc:  denied  { write } for  pid=10832 comm="syz.0.4886" name="ip6_flowlabel" dev="proc" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0
[  180.709106][T10898] xt_hashlimit: max too large, truncated to 1048576
[  180.717378][T10897] netlink: 'syz.0.4917': attribute type 4 has an invalid length.
[  180.742055][T10904] netlink: 'syz.2.4919': attribute type 5 has an invalid length.
[  180.762139][T10903] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  181.181188][T11012] xt_NFQUEUE: number of queues (8) out of range (got 65537)
[  181.218485][T11021] IPv6: NLM_F_CREATE should be specified when creating new route
[  181.271593][T11036] netlink: 'syz.3.4985': attribute type 5 has an invalid length.
[  181.285540][T11036] __nla_validate_parse: 131 callbacks suppressed
[  181.285548][T11036] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4985'.
[  181.378817][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4995'.
[  181.642784][T11112] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  181.843084][T11149] netlink: 'syz.1.5042': attribute type 15 has an invalid length.
[  181.861374][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5042'.
[  181.996199][T11188] device vti0 entered promiscuous mode
[  182.066133][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5069'.
[  182.116865][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5074'.
[  182.320633][T11268] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  182.381603][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5106'.
[  182.431581][T11293] netlink: 'syz.2.5115': attribute type 11 has an invalid length.
[  182.490537][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5118'.
[  182.511068][T11306] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  182.665837][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5142'.
[  182.675440][T11356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5142'.
[  182.686094][T11356] device ip6tnl2 entered promiscuous mode
[  182.775031][T11376] netlink: 'syz.4.5155': attribute type 3 has an invalid length.
[  183.193288][T11455] netlink: 'syz.2.5194': attribute type 13 has an invalid length.
[  183.220565][T11455] gretap0: refused to change device tx_queue_len
[  183.236188][T11455] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  183.563682][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5219'.
[  183.661980][T11524] 8021q: VLANs not supported on lo
[  183.797740][T11551] netlink: 'syz.2.5241': attribute type 3 has an invalid length.
[  183.818547][T11555] xt_l2tp: missing protocol rule (udp|l2tpip)
[  183.878652][T11568] printk: syz.0.5249 (11568): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  183.971107][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:24:d4:88:38:b5, vlan:0)
[  183.971114][T11587] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  183.991144][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.003262][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.015375][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.027565][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:24:d4:88:38:b5, vlan:0)
[  184.031043][T11595] xt_l2tp: v2 tid > 0xffff: 262144
[  184.039713][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  184.056736][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.268823][T11613] bridge0: port 2(dummy0) entered disabled state
[  184.388743][T11624] device gretap1 entered promiscuous mode
[  184.991609][   T24] kauditd_printk_skb: 494 callbacks suppressed
[  184.991621][   T24] audit: type=1400 audit(2000000799.743:3446): avc:  denied  { read write } for  pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  185.070106][T11692] device ipip0 entered promiscuous mode
[  185.162760][   T24] audit: type=1400 audit(2000000799.785:3447): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  185.293994][   T24] audit: type=1400 audit(2000000799.795:3448): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  185.423472][   T24] audit: type=1400 audit(2000000799.806:3449): avc:  denied  { bpf } for  pid=11688 comm="syz.2.5309" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  185.495475][   T24] audit: type=1400 audit(2000000799.837:3450): avc:  denied  { read write } for  pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  185.521301][T11724] xt_CT: You must specify a L4 protocol and not use inversions on it
[  185.531939][    C0] net_ratelimit: 46461 callbacks suppressed
[  185.531952][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.549892][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.561999][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:24:d4:88:38:b5, vlan:0)
[  185.574113][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  185.584444][   T24] audit: type=1400 audit(2000000799.848:3451): avc:  denied  { read write } for  pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  185.586105][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.622052][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.634175][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  185.646230][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:24:d4:88:38:b5, vlan:0)
[  185.658318][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.670354][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  185.705951][   T24] audit: type=1400 audit(2000000799.858:3452): avc:  denied  { read write } for  pid=280 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  185.733066][T11739] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  185.807224][   T24] audit: type=1400 audit(2000000799.890:3453): avc:  denied  { map_create } for  pid=11695 comm="syz.1.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  185.888614][   T24] audit: type=1400 audit(2000000799.890:3454): avc:  denied  { read write } for  pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  185.914374][T11751] x_tables: unsorted underflow at hook 1
[  186.009936][   T24] audit: type=1400 audit(2000000799.900:3455): avc:  denied  { prog_load } for  pid=11695 comm="syz.1.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  186.245313][T11780] device veth1_macvtap left promiscuous mode
[  186.283438][T11780] device macsec0 entered promiscuous mode
[  186.397140][T11794] ==================================================================
[  186.405259][T11794] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0
[  186.413536][T11794] Read of size 4 at addr ffff888126d3b470 by task syz.1.5361/11794
[  186.421416][T11794] 
[  186.423750][T11794] CPU: 1 PID: 11794 Comm: syz.1.5361 Tainted: G        W         syzkaller #0
[  186.432582][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  186.442635][T11794] Call Trace:
[  186.445930][T11794]  __dump_stack+0x21/0x24
[  186.450262][T11794]  dump_stack_lvl+0x1a7/0x208
[  186.454963][T11794]  ? show_regs_print_info+0x18/0x18
[  186.460172][T11794]  ? thaw_kernel_threads+0x220/0x220
[  186.465461][T11794]  print_address_description+0x7f/0x2c0
[  186.471026][T11794]  ? unaccount_page_cache_page+0x9dc/0xac0
[  186.476834][T11794]  kasan_report+0x100/0x140
[  186.481337][T11794]  ? xas_store+0xd0c/0x18d0
[  186.485852][T11794]  ? unaccount_page_cache_page+0x9dc/0xac0
[  186.491664][T11794]  __asan_report_load4_noabort+0x14/0x20
[  186.497295][T11794]  unaccount_page_cache_page+0x9dc/0xac0
[  186.503046][T11794]  __delete_from_page_cache+0xc3/0x470
[  186.508505][T11794]  ? memset+0x35/0x40
[  186.512490][T11794]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  186.519512][T11794]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  186.524972][T11794]  ? __kasan_check_read+0x11/0x20
[  186.529998][T11794]  ? workingset_eviction+0x3dc/0x940
[  186.535283][T11794]  __remove_mapping+0x581/0x6b0
[  186.540126][T11794]  shrink_page_list+0x21ee/0x4160
[  186.545146][T11794]  ? shrink_page_list+0x1f41/0x4160
[  186.550345][T11794]  ? reclaim_clean_pages_from_list+0x740/0x740
[  186.556493][T11794]  ? shrink_inactive_list+0xef0/0xef0
[  186.561867][T11794]  ? _raw_spin_lock_irq+0x95/0xf0
[  186.566893][T11794]  ? __count_memcg_events+0x89/0x210
[  186.572178][T11794]  shrink_inactive_list+0x90c/0xef0
[  186.577375][T11794]  ? __this_cpu_preempt_check+0x13/0x20
[  186.582921][T11794]  ? shrink_active_list+0xe00/0xe00
[  186.588116][T11794]  ? __update_load_avg_cfs_rq+0xb1/0x2f0
[  186.593843][T11794]  ? __kasan_check_read+0x11/0x20
[  186.598863][T11794]  ? lruvec_lru_size+0x230/0x250
[  186.603902][T11794]  ? blk_start_plug+0x5a/0x170
[  186.608660][T11794]  shrink_lruvec+0x2806/0x2d70
[  186.613416][T11794]  ? set_next_entity+0xb4/0x5d0
[  186.618406][T11794]  ? finish_task_switch+0x1b7/0x5a0
[  186.623599][T11794]  ? __switch_to_asm+0x3a/0x60
[  186.628365][T11794]  ? __schedule+0xc0b/0x13e0
[  186.632976][T11794]  ? mem_cgroup_shrink_node+0x4c0/0x4c0
[  186.638519][T11794]  ? __sched_text_start+0x8/0x8
[  186.643370][T11794]  ? __this_cpu_preempt_check+0x13/0x20
[  186.648910][T11794]  ? tracing_record_taskinfo+0x7c/0x220
[  186.654557][T11794]  ? preempt_schedule_common+0xbe/0xf0
[  186.660016][T11794]  ? __kasan_check_read+0x11/0x20
[  186.665053][T11794]  ? inactive_is_low+0x17a/0x2f0
[  186.669997][T11794]  ? __kasan_check_write+0x14/0x20
[  186.675109][T11794]  shrink_node+0xee0/0x2690
[  186.679609][T11794]  ? ktime_get+0x10e/0x140
[  186.684021][T11794]  do_try_to_free_pages+0x602/0x1590
[  186.689300][T11794]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  186.695113][T11794]  ? try_to_free_pages+0xc20/0xc20
[  186.700425][T11794]  try_to_free_mem_cgroup_pages+0x261/0x610
[  186.706316][T11794]  ? shrink_lruvec+0x2d70/0x2d70
[  186.711252][T11794]  mem_cgroup_resize_max+0x309/0x3e0
[  186.716531][T11794]  mem_cgroup_write+0x1ed/0x230
[  186.721375][T11794]  ? mem_cgroup_reset+0x130/0x130
[  186.726394][T11794]  ? mem_cgroup_reset+0x130/0x130
[  186.731412][T11794]  cgroup_file_write+0x294/0x560
[  186.736339][T11794]  ? cgroup_seqfile_stop+0xc0/0xc0
[  186.741439][T11794]  ? mutex_lock+0x92/0xf0
[  186.745756][T11794]  ? mutex_trylock+0xb0/0xb0
[  186.750344][T11794]  ? __kasan_check_write+0x14/0x20
[  186.755449][T11794]  ? cgroup_seqfile_stop+0xc0/0xc0
[  186.760555][T11794]  kernfs_fop_write_iter+0x2bd/0x400
[  186.765833][T11794]  vfs_write+0x770/0xd70
[  186.770072][T11794]  ? kernel_write+0x3c0/0x3c0
[  186.774742][T11794]  ? mutex_trylock+0xb0/0xb0
[  186.779322][T11794]  ? __fget_files+0x2e1/0x340
[  186.783993][T11794]  ? __fdget_pos+0x2d2/0x380
[  186.788578][T11794]  ? ksys_write+0x70/0x260
[  186.792986][T11794]  ksys_write+0x14a/0x260
[  186.797303][T11794]  ? __ia32_sys_read+0x90/0x90
[  186.802061][T11794]  ? __kasan_check_read+0x11/0x20
[  186.807079][T11794]  __x64_sys_write+0x7b/0x90
[  186.811659][T11794]  do_syscall_64+0x31/0x40
[  186.816072][T11794]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  186.821952][T11794] RIP: 0033:0x7f641ce56e99
[  186.826361][T11794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.845962][T11794] RSP: 002b:00007f641b8b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  186.854379][T11794] RAX: ffffffffffffffda RBX: 00007f641d0defa0 RCX: 00007f641ce56e99
[  186.862344][T11794] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003
[  186.870306][T11794] RBP: 00007f641ceeceaf R08: 0000000000000000 R09: 0000000000000000
[  186.878269][T11794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.886232][T11794] R13: 00007f641d0df038 R14: 00007f641d0defa0 R15: 00007fff1c973cb8
[  186.894199][T11794] 
[  186.896519][T11794] Allocated by task 282:
[  186.900757][T11794]  __kasan_kmalloc+0xd4/0x100
[  186.905426][T11794]  __kmalloc+0x19f/0x330
[  186.909660][T11794]  kvmalloc_node+0x88/0x130
[  186.914154][T11794]  alloc_fdtable+0xea/0x2a0
[  186.918651][T11794]  dup_fd+0x7a2/0xab0
[  186.922629][T11794]  copy_files+0xcf/0x170
[  186.926901][T11794]  copy_process+0x12d6/0x3320
[  186.931563][T11794]  kernel_clone+0x233/0x950
[  186.936081][T11794]  __x64_sys_clone+0x198/0x210
[  186.940837][T11794]  do_syscall_64+0x31/0x40
[  186.945244][T11794]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  186.951118][T11794] 
[  186.953431][T11794] Freed by task 10930:
[  186.957489][T11794]  kasan_set_track+0x4a/0x70
[  186.962066][T11794]  kasan_set_free_info+0x23/0x40
[  186.966993][T11794]  ____kasan_slab_free+0x125/0x160
[  186.972093][T11794]  __kasan_slab_free+0x11/0x20
[  186.976844][T11794]  slab_free_freelist_hook+0xc5/0x190
[  186.982213][T11794]  kfree+0xc0/0x270
[  186.986013][T11794]  kvfree+0x35/0x40
[  186.989818][T11794]  put_files_struct+0x275/0x310
[  186.994652][T11794]  exit_files+0x80/0xa0
[  186.998802][T11794]  do_exit+0xa45/0x24e0
[  187.002950][T11794]  do_group_exit+0x149/0x310
[  187.007533][T11794]  get_signal+0xfb1/0x1300
[  187.011938][T11794]  arch_do_signal_or_restart+0xe7/0x11b0
[  187.017561][T11794]  exit_to_user_mode_loop+0xa2/0xe0
[  187.022753][T11794]  exit_to_user_mode_prepare+0x76/0xa0
[  187.028202][T11794]  syscall_exit_to_user_mode+0x1d/0x40
[  187.033645][T11794]  do_syscall_64+0x3d/0x40
[  187.038050][T11794]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  187.043925][T11794] 
[  187.046241][T11794] Last potentially related work creation:
[  187.051950][T11794]  kasan_save_stack+0x3a/0x60
[  187.056617][T11794]  __kasan_record_aux_stack+0xd2/0x100
[  187.062066][T11794]  kasan_record_aux_stack_noalloc+0xb/0x10
[  187.067860][T11794]  insert_work+0x51/0x320
[  187.072181][T11794]  __queue_work+0x91f/0xca0
[  187.076668][T11794]  queue_work_on+0xe6/0x140
[  187.081161][T11794]  destroy_super_rcu+0xd1/0xe0
[  187.085913][T11794]  rcu_do_batch+0x488/0xaf0
[  187.090403][T11794]  rcu_core+0x50a/0xca0
[  187.094546][T11794]  rcu_core_si+0x9/0x10
[  187.098690][T11794]  __do_softirq+0x255/0x563
[  187.103171][T11794] 
[  187.105489][T11794] Second to last potentially related work creation:
[  187.112067][T11794]  kasan_save_stack+0x3a/0x60
[  187.116733][T11794]  __kasan_record_aux_stack+0xd2/0x100
[  187.122181][T11794]  kasan_record_aux_stack_noalloc+0xb/0x10
[  187.127976][T11794]  call_rcu+0x11a/0x1090
[  187.132204][T11794]  __put_super+0x254/0x2b0
[  187.136605][T11794]  deactivate_locked_super+0xd4/0x100
[  187.141962][T11794]  mount_bdev+0x288/0x380
[  187.146277][T11794]  f2fs_mount+0x34/0x40
[  187.150420][T11794]  legacy_get_tree+0xed/0x190
[  187.155082][T11794]  vfs_get_tree+0x89/0x260
[  187.159491][T11794]  do_new_mount+0x25a/0xa30
[  187.163985][T11794]  path_mount+0x581/0xca0
[  187.168300][T11794]  __se_sys_mount+0x320/0x390
[  187.172967][T11794]  __x64_sys_mount+0xbf/0xd0
[  187.177543][T11794]  do_syscall_64+0x31/0x40
[  187.181951][T11794]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  187.187822][T11794] 
[  187.190145][T11794] The buggy address belongs to the object at ffff888126d3b000
[  187.190145][T11794]  which belongs to the cache kmalloc-2k of size 2048
[  187.204367][T11794] The buggy address is located 1136 bytes inside of
[  187.204367][T11794]  2048-byte region [ffff888126d3b000, ffff888126d3b800)
[  187.217798][T11794] The buggy address belongs to the page:
[  187.223442][T11794] page:ffffea00049b4e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126d38
[  187.233667][T11794] head:ffffea00049b4e00 order:3 compound_mapcount:0 compound_pincount:0
[  187.241995][T11794] flags: 0x4000000000010200(slab|head)
[  187.247447][T11794] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042d80
[  187.256026][T11794] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  187.264596][T11794] page dumped because: kasan: bad access detected
[  187.270994][T11794] page_owner tracks the page as allocated
[  187.276722][T11794] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, ts 27899407147, free_ts 0
[  187.294861][T11794]  prep_new_page+0x176/0x190
[  187.299440][T11794]  get_page_from_freelist+0x225f/0x23f0
[  187.304970][T11794]  __alloc_pages_nodemask+0x29a/0x640
[  187.310331][T11794]  new_slab+0x84/0x3f0
[  187.314393][T11794]  ___slab_alloc+0x2f8/0x4c0
[  187.318969][T11794]  __slab_alloc+0x63/0xa0
[  187.323287][T11794]  __kmalloc+0x1f9/0x330
[  187.327517][T11794]  sk_prot_alloc+0xb2/0x340
[  187.332007][T11794]  sk_alloc+0x38/0x4e0
[  187.336061][T11794]  netlink_create+0x3c2/0x630
[  187.340729][T11794]  __sock_create+0x38d/0x770
[  187.345304][T11794]  __sys_socket+0xec/0x190
[  187.349710][T11794]  __x64_sys_socket+0x7a/0x90
[  187.354378][T11794]  do_syscall_64+0x31/0x40
[  187.358780][T11794]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  187.364656][T11794] page_owner free stack trace missing
[  187.370008][T11794] 
[  187.372324][T11794] Memory state around the buggy address:
[  187.377944][T11794]  ffff888126d3b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.385999][T11794]  ffff888126d3b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.394051][T11794] >ffff888126d3b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.402098][T11794]                                                              ^
[  187.409803][T11794]  ffff888126d3b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.417859][T11794]  ffff888126d3b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  187.425907][T11794] ==================================================================
[  187.433954][T11794] Disabling lock debugging due to kernel taint
[  188.314023][    T9] device bridge_slave_1 left promiscuous mode
[  188.320205][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.328588][    T9] device bridge_slave_0 left promiscuous mode
[  188.335511][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.344769][    T9] device veth1_macvtap left promiscuous mode
[  189.441148][    T9] device bridge_slave_1 left promiscuous mode
[  189.447539][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.456441][    T9] device bridge_slave_0 left promiscuous mode
[  189.462597][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.472383][    T9] device bridge_slave_1 left promiscuous mode
[  189.478604][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.486999][    T9] device bridge_slave_0 left promiscuous mode
[  189.494382][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.504811][    T9] device veth0_to_bridge left promiscuous mode
[  189.511062][    T9] bridge0: port 3(veth0_to_bridge) entered disabled state
[  189.518416][    T9] device dummy0 left promiscuous mode
[  189.524067][    T9] bridge0: port 2(dummy0) entered disabled state
[  189.530702][    T9] device bridge_slave_0 left promiscuous mode
[  189.536778][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.544761][    T9] device bridge_slave_1 left promiscuous mode
[  189.550843][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.558296][    T9] device bridge_slave_0 left promiscuous mode
[  189.564461][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.572597][    T9] device veth1_macvtap left promiscuous mode
[  189.578681][    T9] device veth0_vlan left promiscuous mode
[  189.584561][    T9] device veth1_macvtap left promiscuous mode
[  189.590667][    T9] device veth1_macvtap left promiscuous mode
[  189.596903][    T9] device veth0_vlan left promiscuous mode