last executing test programs: 1.029798236s ago: executing program 2 (id=5584): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000524060001052400000035b9f250d79a8188d86be1741e1b0d240f0100000000000000000006241a0005810300020000000904010000020d00000904010102020d00"], 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 488.734469ms ago: executing program 2 (id=5636): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x4d3, 0x3c}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 452.61589ms ago: executing program 2 (id=5640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000001540)) 423.90393ms ago: executing program 2 (id=5645): r0 = socket(0x10, 0x803, 0x0) accept$inet6(r0, 0x0, 0x0) 382.682691ms ago: executing program 2 (id=5649): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r0, 0x0, 0x0) 354.089192ms ago: executing program 3 (id=5651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a21, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x201}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 328.095553ms ago: executing program 2 (id=5654): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000048000), 0x0) 267.112774ms ago: executing program 4 (id=5660): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000880)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, 0x0}}], 0x2, 0x10) 261.294104ms ago: executing program 3 (id=5662): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb5, 0x2, 0xfffffffe}}, 0xe8) 206.270766ms ago: executing program 4 (id=5665): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x560d, 0x0) 206.146586ms ago: executing program 3 (id=5666): r0 = eventfd2(0x0, 0x801) read$eventfd(r0, &(0x7f0000000000), 0x8) 205.341986ms ago: executing program 0 (id=5668): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r0, &(0x7f0000000080)=""/58, 0x3a) 185.700226ms ago: executing program 4 (id=5669): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8910, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 184.777546ms ago: executing program 3 (id=5670): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, &(0x7f00000022c0)=0x0, &(0x7f0000002300)) 165.235627ms ago: executing program 0 (id=5672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2066c0, 0x0) signalfd(r0, &(0x7f0000001100)={[0x9]}, 0x8) 131.673888ms ago: executing program 4 (id=5674): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x74, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x8}, {0xfff1}, {0xe, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x82, 0x7, 0x4, 0x7, 0x1, 0x4, 0xc}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 131.199628ms ago: executing program 0 (id=5675): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="03253b", 0x3}], 0x1}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000001040)=[{&(0x7f00000007c0)="16a7", 0x2}], 0x1}}], 0x2, 0x20008040) 121.104868ms ago: executing program 1 (id=5676): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000480)) 113.290028ms ago: executing program 3 (id=5677): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 73.464818ms ago: executing program 0 (id=5678): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x7, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0x1, 0x101, 0x3, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffe}}) 73.262118ms ago: executing program 1 (id=5679): r0 = gettid() rt_sigqueueinfo(r0, 0x18, &(0x7f0000000180)={0x32, 0x1, 0x4}) 73.142749ms ago: executing program 0 (id=5680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x58, 0x12, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000004, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x17, 0x6}, {0xff}, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) 72.963438ms ago: executing program 4 (id=5681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xc0}}, 0x0) 72.496329ms ago: executing program 1 (id=5682): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xf801, 0x49583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x44}}, 0x4048844) 36.551339ms ago: executing program 3 (id=5683): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) 36.382899ms ago: executing program 0 (id=5684): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 36.293519ms ago: executing program 4 (id=5685): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.incfs.id\x00') 17.50682ms ago: executing program 1 (id=5686): syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x81, 0x14f3, &(0x7f0000002a80)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") chmod(&(0x7f0000000040)='./file1\x00', 0x162) 118.09µs ago: executing program 1 (id=5687): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) 0s ago: executing program 1 (id=5688): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x1002, 0x4) kernel console output (not intermixed with test programs): T25] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 146.836113][ T2181] udevd[2181]: inotify_add_watch(7, /dev/loop3p68, 10) failed: No such file or directory [ 146.852888][ T363] udevd[363]: inotify_add_watch(7, /dev/loop3p70, 10) failed: No such file or directory [ 146.862771][ T2184] udevd[2184]: inotify_add_watch(7, /dev/loop3p73, 10) failed: No such file or directory [ 146.864967][ T1695] udevd[1695]: inotify_add_watch(7, /dev/loop3p67, 10) failed: No such file or directory [ 146.878046][ T364] udevd[364]: inotify_add_watch(7, /dev/loop3p71, 10) failed: No such file or directory [ 146.887755][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p78, 10) failed: No such file or directory [ 146.907455][ T1241] udevd[1241]: inotify_add_watch(7, /dev/loop3p80, 10) failed: No such file or directory [ 146.929293][ T1071] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 146.948909][ T25] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 146.950579][ T559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.990806][ T25] usb 3-1: USB disconnect, device number 46 [ 147.013964][ T559] usb 2-1: Product: syz [ 147.028810][ T559] usb 2-1: Manufacturer: syz [ 147.043314][ T559] usb 2-1: SerialNumber: syz [ 147.074765][ T6704] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 147.216026][ T1071] usb 1-1: Using ep0 maxpacket: 8 [ 147.257756][ T6738] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 147.350469][ T3056] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 147.370656][ T1071] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.456173][ T559] usb 2-1: MIDIStreaming interface descriptor not found [ 147.464374][ T1071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.475624][ T1071] usb 1-1: too many endpoints for config 1 interface 0 altsetting 241: 34, using maximum allowed: 30 [ 147.488049][ T1071] usb 1-1: config 1 interface 0 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 147.504354][ T559] usb 2-1: USB disconnect, device number 47 [ 147.510890][ T1071] usb 1-1: config 1 interface 0 has no altsetting 0 [ 147.523209][ T6761] EXT4-fs (loop2): unsupported inode size: 39165 [ 147.540759][ T6761] EXT4-fs (loop2): blocksize: 4096 [ 147.660820][ T6782] EXT4-fs (loop2): unsupported descriptor size 320 [ 147.744034][ T1071] usb 1-1: string descriptor 0 read error: -22 [ 147.750483][ T1071] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.761148][ T3056] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.762563][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.773929][ T3056] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.791347][ T3056] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.830580][ T1071] usb 1-1: bad CDC descriptors [ 147.871325][ T6789] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 147.872585][ T6789] loop2: p3 start 986112 is beyond EOD, [ 147.878217][ T3056] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 147.963170][ T15] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 147.968607][ T3056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.968618][ T3056] usb 4-1: SerialNumber: syz [ 147.969102][ T6789] truncated [ 148.038144][ T1953] usb 1-1: USB disconnect, device number 50 [ 148.044978][ T3056] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 148.052216][ T3056] usb-storage 4-1:1.0: USB Mass Storage device detected [ 148.062534][ T3056] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 148.204658][ T15] usb 5-1: Using ep0 maxpacket: 8 [ 148.252291][ T1071] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 148.319833][ T15] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 148.358347][ T1953] usb 4-1: USB disconnect, device number 48 [ 148.492304][ T1071] usb 2-1: Using ep0 maxpacket: 32 [ 148.501863][ T15] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 148.521870][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.550322][ T15] usb 5-1: Product: syz [ 148.556430][ T15] usb 5-1: Manufacturer: syz [ 148.569648][ T15] usb 5-1: SerialNumber: syz [ 148.617129][ T1071] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.808664][ T1071] usb 2-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 148.818544][ T25] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 148.818675][ T1071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.834487][ T1071] usb 2-1: Product: syz [ 148.839358][ T15] usb 5-1: Invalid firmware size=110. [ 148.845222][ T15] usb 5-1: Invalid firmware size=110. [ 148.850750][ T1071] usb 2-1: Manufacturer: syz [ 148.855355][ T1071] usb 2-1: SerialNumber: syz [ 148.860833][ T15] usb 5-1: Invalid firmware size=110. [ 148.871856][ T15] usb 5-1: USB disconnect, device number 50 [ 149.053698][ T6845] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 149.068162][ T6845] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 149.087516][ T6845] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 149.099195][ T6845] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 149.111579][ T6845] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 149.122221][ T6845] EXT4-fs (loop2): orphan cleanup on readonly fs [ 149.129725][ T6845] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2901: bg 0: block 34: padding at end of block bitmap is not set [ 149.145315][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 149.154657][ T6845] Quota error (device loop2): write_blk: dquota write failed [ 149.162792][ T6845] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 149.174014][ T6845] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.2901: Failed to acquire dquot type 1 [ 149.186453][ T6845] EXT4-fs (loop2): 1 truncate cleaned up [ 149.193218][ T6845] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue [ 149.211787][ T1071] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 149.215402][ T6857] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 149.230867][ T25] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023 [ 149.236053][ T1071] usb 2-1: USB disconnect, device number 48 [ 149.252699][ T6857] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0002] [ 149.265449][ T6857] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 149.273743][ T6857] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,debug,abort,barrier=0x0000000000000001,nobarrier,,errors=continue [ 149.403573][ T25] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 149.416663][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.417027][ T6865] loop3: p1 p2 p3 p4 [ 149.424990][ T25] usb 1-1: Product: syz [ 149.430062][ T6865] loop3: p1 start 67039 is beyond EOD, [ 149.433228][ T25] usb 1-1: Manufacturer: syz [ 149.444051][ T25] usb 1-1: SerialNumber: syz [ 149.446813][ T6870] FAT-fs (loop2): bogus sectors per cluster 255 [ 149.456252][ T6865] truncated [ 149.461166][ T6865] loop3: p2 size 117899264 extends beyond EOD, truncated [ 149.468438][ T6870] FAT-fs (loop2): Can't find a valid FAT filesystem [ 149.480019][ T6865] loop3: p3 start 67108864 is beyond EOD, truncated [ 149.486747][ T6865] loop3: p4 size 33619968 extends beyond EOD, truncated [ 149.601775][ T6875] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 149.615595][ T6875] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 149.625699][ T6875] F2FS-fs (loop4): invalid crc value [ 149.633219][ T6875] F2FS-fs (loop4): Found nat_bits in checkpoint [ 149.711028][ T6875] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 149.719161][ T6875] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 149.797122][ T25] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 149.825884][ T25] usb 1-1: unit 14 not found! [ 149.841839][ T6906] EXT4-fs (loop2): Ignoring removed nobh option [ 149.858794][ T6906] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 149.867835][ T1953] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 149.875180][ T6906] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #13: comm syz.2.2927: unexpected EA_INODE flag [ 149.881175][ T25] usb 1-1: USB disconnect, device number 51 [ 149.904188][ T6906] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2927: couldn't read orphan inode 13 (err -117) [ 149.916625][ T1071] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 149.925045][ T6906] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue [ 150.041910][ T24] audit: type=1326 audit(2000524601.407:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.2939" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5054754019 code=0x0 [ 150.132756][ T1953] usb 4-1: Using ep0 maxpacket: 32 [ 150.257120][ T53] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 150.267862][ T6964] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x13 [ 150.334102][ T1071] usb 2-1: config index 0 descriptor too short (expected 45, got 28) [ 150.342581][ T1071] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 150.350351][ T1071] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 150.401265][ T1953] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 150.410699][ T25] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 150.419078][ T1953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.427917][ T1953] usb 4-1: Product: syz [ 150.432600][ T1953] usb 4-1: Manufacturer: syz [ 150.437419][ T1953] usb 4-1: SerialNumber: syz [ 150.487583][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 150.525693][ T1071] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 150.535340][ T1071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.543533][ T1071] usb 2-1: Product: syz [ 150.547806][ T15] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 150.555495][ T1071] usb 2-1: Manufacturer: syz [ 150.560466][ T1071] usb 2-1: SerialNumber: syz [ 150.602477][ T53] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 150.610989][ T53] usb 5-1: config 0 has no interface number 0 [ 150.617283][ T53] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 150.621947][ T1071] rtl8150 2-1:1.0: couldn't find required endpoints [ 150.628343][ T53] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.645011][ T1071] rtl8150: probe of 2-1:1.0 failed with error -5 [ 150.717661][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 150.785099][ T1953] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 150.794664][ T53] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 150.804410][ T25] usb 3-1: config 1 has an invalid interface number: 224 but max is 1 [ 150.813123][ T25] usb 3-1: config 1 has an invalid interface number: 14 but max is 1 [ 150.823471][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.829078][ T1071] usb 2-1: USB disconnect, device number 49 [ 150.832603][ T53] usb 5-1: Product: syz [ 150.832615][ T53] usb 5-1: Manufacturer: syz [ 150.832625][ T53] usb 5-1: SerialNumber: syz [ 150.833432][ T53] usb 5-1: config 0 descriptor?? [ 150.860321][ T25] usb 3-1: config 1 has no interface number 0 [ 150.876374][ T1953] usb 4-1: USB disconnect, device number 49 [ 150.882948][ T25] usb 3-1: config 1 has no interface number 1 [ 150.889226][ T25] usb 3-1: config 1 interface 224 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 150.903523][ T25] usb 3-1: config 1 interface 224 has no altsetting 0 [ 150.910470][ T25] usb 3-1: config 1 interface 14 has no altsetting 0 [ 150.919229][ T6924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.938623][ T53] asix: probe of 5-1:0.34 failed with error -22 [ 150.967214][ T15] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.015143][ T15] usb 1-1: not running at top speed; connect to a high speed hub [ 151.063134][ T25] usb 3-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=39.3c [ 151.072400][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.080500][ T25] usb 3-1: Product: syz [ 151.084721][ T25] usb 3-1: Manufacturer: syz [ 151.089492][ T25] usb 3-1: SerialNumber: syz [ 151.101115][ T15] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 151.112724][ T15] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 151.148500][ T1071] usb 5-1: USB disconnect, device number 51 [ 151.293445][ T15] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 151.302748][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.311068][ T15] usb 1-1: Product: syz [ 151.315449][ T15] usb 1-1: Manufacturer: syz [ 151.320055][ T15] usb 1-1: SerialNumber: syz [ 151.438055][ T25] usb 3-1: USB disconnect, device number 47 [ 151.465639][ T559] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 151.554501][ T6996] F2FS-fs (loop1): invalid crc value [ 151.561764][ T6996] F2FS-fs (loop1): invalid journal entries nats 768 sits 6 [ 151.571139][ T6996] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-22) [ 151.609826][ T15] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 151.628998][ T15] snd-usb-audio: probe of 1-1:1.1 failed with error -71 [ 151.652624][ T15] snd-usb-audio: probe of 1-1:1.2 failed with error -71 [ 151.673766][ T15] usb 1-1: USB disconnect, device number 52 [ 151.734268][ T7010] erofs: (device loop4): mounted with root inode @ nid 36. [ 151.843627][ T7017] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 151.850776][ T559] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.863807][ T7017] EXT4-fs (loop1): mount failed [ 151.934838][ T24] audit: type=1326 audit(2000524603.377:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.2986" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83b64ea019 code=0x0 [ 151.945292][ T559] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.975456][ T559] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.987721][ T559] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 152.027318][ T7043] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 152.159216][ T559] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 152.174502][ T559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.183744][ T559] usb 4-1: Product: syz [ 152.188423][ T15] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 152.196590][ T559] usb 4-1: Manufacturer: syz [ 152.201560][ T559] usb 4-1: SerialNumber: syz [ 152.204617][ T7055] erofs: (device loop0): mounted with root inode @ nid 36. [ 152.263562][ T7037] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 152.275578][ T7037] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 152.311074][ T7047] F2FS-fs (loop4): invalid crc value [ 152.328944][ T7047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.364035][ T7047] F2FS-fs (loop4): Start checkpoint disabled! [ 152.371348][ T7047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 152.493680][ T559] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 152.502517][ T559] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 152.509594][ T559] usb 4-1: 1:1 : invalid channels 0 [ 152.544692][ T559] usb 4-1: USB disconnect, device number 50 [ 152.702672][ T15] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 152.716692][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.734307][ T15] usb 3-1: Product: syz [ 152.738579][ T15] usb 3-1: Manufacturer: syz [ 152.743500][ T15] usb 3-1: SerialNumber: syz [ 152.769860][ T53] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 152.772009][ T7121] tmpfs: Unsupported parameter 'mpol' [ 152.961689][ T25] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 153.019286][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 153.097985][ T15] usb 3-1: USB disconnect, device number 48 [ 153.191778][ T53] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.191853][ T559] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 153.201286][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 153.287689][ T575] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 153.421715][ T53] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 153.431606][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.439966][ T53] usb 2-1: Product: syz [ 153.444292][ T53] usb 2-1: SerialNumber: syz [ 153.556106][ T25] usb 1-1: string descriptor 0 read error: -22 [ 153.563343][ T25] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 153.573296][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.584861][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.596365][ T559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.606648][ T559] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 153.616541][ T559] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.617210][ T25] usb 1-1: Fast Track Pro config OK [ 153.628340][ T559] usb 5-1: config 0 descriptor?? [ 153.635392][ T25] usb 1-1: MIDIStreaming interface descriptor not found [ 153.651939][ T575] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 153.659696][ T575] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.700842][ T559] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 153.709086][ T559] usbhid 5-1:0.0: can't add hid device: -22 [ 153.715270][ T559] usbhid: probe of 5-1:0.0 failed with error -22 [ 153.739031][ T1953] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 153.748155][ T53] usb 2-1: MIDIStreaming interface descriptor not found [ 153.757526][ T53] usb 2-1: USB disconnect, device number 50 [ 153.824493][ T25] usb 1-1: USB disconnect, device number 53 [ 153.833974][ T575] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 153.843217][ T575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.851536][ T575] usb 4-1: Product: syz [ 153.855903][ T575] usb 4-1: Manufacturer: syz [ 153.860702][ T575] usb 4-1: SerialNumber: syz [ 153.905536][ T575] rtl8150 4-1:1.0: couldn't find required endpoints [ 153.910675][ T3056] usb 5-1: USB disconnect, device number 52 [ 153.912522][ T575] rtl8150: probe of 4-1:1.0 failed with error -5 [ 153.978134][ T1953] usb 3-1: Using ep0 maxpacket: 8 [ 154.102509][ T25] usb 4-1: USB disconnect, device number 51 [ 154.108549][ T1953] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 154.119342][ T1953] usb 3-1: config 1 has no interface number 0 [ 154.126233][ T1953] usb 3-1: config 1 interface 3 has no altsetting 0 [ 154.287258][ T7170] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 154.298009][ T1953] usb 3-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=6e.d7 [ 154.300526][ T7170] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.308775][ T1953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.326447][ T1953] usb 3-1: Product: syz [ 154.331000][ T1953] usb 3-1: Manufacturer: syz [ 154.334028][ T7170] EXT4-fs error (device loop1): ext4_quota_enable:6451: comm syz.1.3050: inode #16777216: comm syz.1.3050: iget: illegal inode # [ 154.336064][ T1953] usb 3-1: SerialNumber: syz [ 154.350107][ T7170] EXT4-fs error (device loop1): ext4_quota_enable:6454: comm syz.1.3050: Bad quota inode: 16777216, type: 2 [ 154.367111][ T7170] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 154.383165][ T7170] EXT4-fs (loop1): mount failed [ 154.573253][ T7188] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.580772][ T7188] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 154.596376][ T7188] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 154.596376][ T7188] [ 154.606632][ T575] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 154.614129][ T7188] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue [ 154.668723][ T1953] ftdi_sio 3-1:1.3: FTDI USB Serial Device converter detected [ 154.677046][ T1953] usb 3-1: Detected FT-X [ 154.697091][ T1953] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 154.725666][ T1953] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 154.744807][ T15] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 154.744815][ T1953] ftdi_sio 3-1:1.3: GPIO initialisation failed: -71 [ 154.745299][ T1953] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 154.763220][ T7200] EXT4-fs (loop1): Ignoring removed orlov option [ 154.772772][ T1953] usb 3-1: USB disconnect, device number 49 [ 154.777082][ T7200] EXT4-fs error (device loop1): ext4_get_journal_inode:5247: comm syz.1.3063: inode #1191182336: comm syz.1.3063: iget: illegal inode # [ 154.782729][ T1953] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 154.806231][ T7200] EXT4-fs (loop1): no journal found [ 154.811462][ T7200] EXT4-fs (loop1): can't get journal size [ 154.819336][ T1953] ftdi_sio 3-1:1.3: device disconnected [ 154.826281][ T7200] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 154.837211][ T7200] EXT4-fs (loop1): failed to initialize system zone (-22) [ 154.844998][ T7200] EXT4-fs (loop1): mount failed [ 154.869762][ T575] usb 1-1: Using ep0 maxpacket: 32 [ 154.875737][ T559] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 154.986654][ T7208] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 154.994282][ T575] usb 1-1: config 0 has no interfaces? [ 154.997087][ T7208] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 155.012958][ T7208] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.3066: Failed to acquire dquot type 1 [ 155.025148][ T7208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3066: bg 0: block 495: padding at end of block bitmap is not set [ 155.040717][ T7208] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 155.050652][ T7208] EXT4-fs (loop1): 1 truncate cleaned up [ 155.057184][ T7208] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 155.067273][ T7208] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.109164][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 155.120122][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 155.131168][ T15] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 155.141119][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.150058][ T15] usb 5-1: config 0 descriptor?? [ 155.157300][ T575] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.40 [ 155.169836][ T575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.183349][ T575] usb 1-1: Product: syz [ 155.188538][ T15] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 155.204131][ T575] usb 1-1: Manufacturer: 湯⍤눦馠呔딞鰍嶭퇒Ģ鐂穖녓ꞿ헨셌僑ੀग़ᓡ教睬뾃缍㎌ס羅꽷壝蔔ܭ❽Ὅꤼ辕醐ﱪ闺拏骐욯니籜࢞⯏拓淒腅⢳❌耯컳┲覎瞴傳챴鄇却뀬颅賤伖慆곇㚴৲돰Ϙ [ 155.231111][ T575] usb 1-1: SerialNumber: syz [ 155.237121][ T575] usb 1-1: config 0 descriptor?? [ 155.262733][ T559] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.384550][ T3056] usb 5-1: USB disconnect, device number 53 [ 155.406322][ T1953] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 155.435072][ T559] usb 4-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 155.444571][ T559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.453388][ T559] usb 4-1: Product: syz [ 155.454113][ T25] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 155.457815][ T559] usb 4-1: Manufacturer: syz [ 155.470469][ T559] usb 4-1: SerialNumber: syz [ 155.475206][ T749] usb 1-1: USB disconnect, device number 54 [ 155.808911][ T25] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 155.828266][ T1953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.876100][ T559] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 155.885157][ T24] audit: type=1326 audit(2000524607.497:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.4.3073" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83b64ea019 code=0x0 [ 155.895228][ T559] usb 4-1: unit 5 not found! [ 155.910682][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.968088][ T559] usb 4-1: USB disconnect, device number 52 [ 155.979393][ T24] audit: type=1326 audit(2000524607.601:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.0.3077" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6ac062019 code=0x0 [ 156.049380][ T7237] EXT4-fs (loop4): Ignoring removed bh option [ 156.078766][ T7237] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.3079: corrupted in-inode xattr [ 156.091803][ T7237] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.3079: couldn't read orphan inode 15 (err -117) [ 156.096773][ T1953] usb 2-1: string descriptor 0 read error: -22 [ 156.104773][ T7237] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,journal_dev=0x0000000000000001,init_itable,auto_da_alloc=0x0000000000000080,nolazytime,norecovery,nolazytime,commit=0x0000000,errors=continue [ 156.111071][ T1953] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.149313][ T1953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.162524][ T7244] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 156.176916][ T7244] EXT4-fs (loop0): invalid journal inode [ 156.182926][ T7244] EXT4-fs (loop0): can't get journal size [ 156.189451][ T7244] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 17104912: comm syz.0.3082: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 156.205363][ T25] usb 3-1: string descriptor 0 read error: -22 [ 156.206023][ T7244] EXT4-fs (loop0): failed to initialize system zone (-117) [ 156.211888][ T25] usb 3-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 156.219266][ T7244] EXT4-fs (loop0): mount failed [ 156.228576][ T1953] cdc_ether 2-1:1.0: invalid descriptor buffer length [ 156.239772][ T1953] usb 2-1: bad CDC descriptors [ 156.247784][ T7250] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 156.250517][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.269341][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.298658][ T25] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 156.383897][ T7266] erofs: (device loop4): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 10 [ 156.492285][ T7285] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 156.500263][ T7285] EXT4-fs (loop0): fragment/cluster size (2048) != block size (1024) [ 156.524255][ T1953] usb 2-1: USB disconnect, device number 51 [ 156.533289][ T559] usb 3-1: USB disconnect, device number 50 [ 156.690727][ T25] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 156.758408][ T7308] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 156.767399][ T7308] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 156.778336][ T7308] F2FS-fs (loop0): fault_injection options not supported [ 156.785814][ T7308] F2FS-fs (loop0): fault_type options not supported [ 156.793533][ T7308] F2FS-fs (loop0): invalid crc value [ 156.799821][ T7308] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.820710][ T7308] F2FS-fs (loop0): recover fsync data on readonly fs [ 156.827758][ T7308] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 156.835274][ T7308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.901804][ T749] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 157.024351][ T7317] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.037392][ T7317] F2FS-fs (loop1): Unable to read 1th superblock [ 157.044092][ T7317] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.055418][ T7317] F2FS-fs (loop1): Unable to read 2th superblock [ 157.095883][ T24] audit: type=1400 audit(2000524608.770:261): avc: denied { mount } for pid=7326 comm="syz.1.3120" name="/" dev="ramfs" ino=34585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 157.119476][ T24] audit: type=1400 audit(2000524608.770:262): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 157.131650][ T749] usb 4-1: Using ep0 maxpacket: 16 [ 157.189641][ T25] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 157.198896][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.207098][ T25] usb 5-1: Product: syz [ 157.211699][ T25] usb 5-1: Manufacturer: syz [ 157.216396][ T25] usb 5-1: SerialNumber: syz [ 157.227757][ T559] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 157.275573][ T749] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.304256][ T575] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 157.438410][ T749] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 157.447859][ T749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.455986][ T749] usb 4-1: Product: syz [ 157.460630][ T749] usb 4-1: Manufacturer: syz [ 157.465229][ T749] usb 4-1: SerialNumber: syz [ 157.553423][ T15] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 157.563085][ T25] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 157.582040][ T25] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8203 device_setup=1 to enable and report any issues to g@b4.vu [ 157.601310][ T25] usb 5-1: USB disconnect, device number 54 [ 157.668577][ T559] usb 1-1: unable to get BOS descriptor or descriptor too short [ 157.706634][ T575] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 20, changing to 4 [ 157.754944][ T559] usb 1-1: config 1 interface 0 altsetting 241 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 157.766032][ T559] usb 1-1: config 1 interface 0 altsetting 241 endpoint 0x82 is Bulk; changing to Interrupt [ 157.773935][ T749] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 157.776431][ T559] usb 1-1: config 1 interface 0 altsetting 241 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.785167][ T749] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 157.798515][ T559] usb 1-1: config 1 interface 0 has no altsetting 0 [ 157.831603][ T749] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 157.840733][ T749] usb 4-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 157.864877][ T749] usb 4-1: USB disconnect, device number 53 [ 157.888916][ T575] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 157.899215][ T575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.907663][ T575] usb 3-1: Product: syz [ 157.912012][ T575] usb 3-1: Manufacturer: syz [ 157.916785][ T575] usb 3-1: SerialNumber: syz [ 157.975354][ T15] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.007090][ T7361] EXT4-fs error (device loop4): ext4_fill_super:4959: inode #2: comm syz.4.3137: iget: checksum invalid [ 158.021075][ T7361] EXT4-fs (loop4): get root inode failed [ 158.027158][ T7361] EXT4-fs (loop4): mount failed [ 158.051748][ T559] usb 1-1: string descriptor 0 read error: -22 [ 158.058276][ T559] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.067981][ T15] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 158.078935][ T15] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.092340][ T559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.119078][ T7315] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 158.126587][ T7315] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 158.134158][ T7315] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 158.157935][ T559] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 158.176221][ T15] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.187054][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.195980][ T15] usb 2-1: SerialNumber: syz [ 158.214606][ T7353] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 158.234134][ T15] usb 2-1: bad CDC descriptors [ 158.262892][ T575] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 158.282201][ T575] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 158.307162][ T575] usb 3-1: USB disconnect, device number 51 [ 158.372683][ T25] usb 1-1: USB disconnect, device number 55 [ 158.425494][ T559] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 158.428263][ T1953] usb 2-1: USB disconnect, device number 52 [ 158.473742][ T749] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 158.655686][ T559] usb 5-1: Using ep0 maxpacket: 8 [ 158.818466][ T749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.828955][ T749] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.856920][ T559] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.924040][ T25] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 158.990972][ T749] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 159.000686][ T749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.009094][ T749] usb 4-1: Product: syz [ 159.013596][ T749] usb 4-1: Manufacturer: syz [ 159.018489][ T749] usb 4-1: SerialNumber: syz [ 159.105991][ T559] usb 5-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 159.115247][ T559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.124765][ T559] usb 5-1: Product: syz [ 159.129553][ T559] usb 5-1: Manufacturer: syz [ 159.134282][ T559] usb 5-1: SerialNumber: syz [ 159.173033][ T1071] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 159.220870][ T575] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 159.269096][ T25] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 159.278401][ T25] usb 3-1: config 127 has no interface number 0 [ 159.285695][ T25] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 159.298912][ T749] usb 4-1: 0:1 : does not exist [ 159.305198][ T749] usb 4-1: unit 6 not found! [ 159.310636][ T749] usb 4-1: unit 2 not found! [ 159.316958][ T749] usb 4-1: USB disconnect, device number 54 [ 159.324821][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.460736][ T25] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 159.470409][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.478639][ T25] usb 3-1: Product: syz [ 159.483358][ T25] usb 3-1: Manufacturer: syz [ 159.488197][ T25] usb 3-1: SerialNumber: syz [ 159.499900][ T559] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 159.508705][ T7383] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 159.509485][ T559] usb 5-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 159.537236][ T1071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 159.550973][ T1071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 159.565815][ T559] usb 5-1: 1:1: cannot set enable PITCH [ 159.584905][ T575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 159.596114][ T559] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 159.618743][ T559] usb 5-1: USB disconnect, device number 55 [ 159.642746][ T1071] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 159.652265][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 159.660883][ T1071] usb 1-1: Manufacturer: syz [ 159.666891][ T1071] usb 1-1: config 0 descriptor?? [ 159.690472][ T7389] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 159.710008][ T1071] uvcvideo: Found UVC 0.00 device (18ec:3288) [ 159.717039][ T1071] uvcvideo: No valid video chain found. [ 159.747877][ T575] usb 2-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice= 0.40 [ 159.758735][ T575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.769627][ T575] usb 2-1: Product: syz [ 159.774406][ T575] usb 2-1: Manufacturer: syz [ 159.779250][ T25] asix: probe of 3-1:127.57 failed with error -71 [ 159.779468][ T575] usb 2-1: SerialNumber: syz [ 159.798546][ T25] usb 3-1: USB disconnect, device number 52 [ 159.810923][ T24] audit: type=1326 audit(2000524611.598:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.3.3157" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ed3ad019 code=0x0 [ 159.836678][ T2181] udevd[2181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.904209][ T1953] usb 1-1: USB disconnect, device number 56 [ 159.927008][ T7411] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 159.940725][ T7411] EXT4-fs (loop3): 1 orphan inode deleted [ 159.946715][ T7411] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue [ 160.059231][ T7421] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 160.103138][ T575] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 160.116359][ T575] usb 2-1: USB disconnect, device number 53 [ 160.516503][ T7445] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 160.583360][ T7445] ext4 filesystem being mounted at /726/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.775908][ T7451] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 160.825771][ T7456] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 160.910960][ T7465] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 161.052959][ T7469] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 161.053079][ T7433] F2FS-fs (loop2): Test dummy encryption mode enabled [ 161.067274][ T7433] F2FS-fs (loop2): Can't change test_dummy_encryption on remount [ 161.085267][ T24] audit: type=1400 audit(2000524612.923:264): avc: denied { create } for pid=7480 comm="syz.1.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.261837][ T559] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 161.273288][ T7483] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 161.281334][ T7483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.368472][ T7483] F2FS-fs (loop4): invalid crc value [ 161.388947][ T7483] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.444028][ T7483] F2FS-fs (loop4): Start checkpoint disabled! [ 161.460802][ T7483] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 161.470492][ T7483] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 161.530409][ T559] usb 1-1: Using ep0 maxpacket: 16 [ 161.540624][ T7499] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 161.635649][ T749] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 161.674444][ T7502] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 161.693113][ T559] usb 1-1: string descriptor 0 read error: -22 [ 161.699450][ T559] usb 1-1: New USB device found, idVendor=0499, idProduct=2003, bcdDevice= 0.40 [ 161.733770][ T7505] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 161.733867][ T559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.753754][ T7509] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 161.799334][ T559] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 161.930284][ T7512] loop2: p1 < > p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p21 [ 161.931695][ T7512] loop2: p5 size 16776960 extends beyond EOD, truncated [ 162.038119][ T7512] loop2: p6 size 16776960 extends beyond EOD, truncated [ 162.038245][ T25] usb 1-1: USB disconnect, device number 57 [ 162.053126][ T7512] loop2: p7 size 16776960 extends beyond EOD, truncated [ 162.060561][ T7512] loop2: p8 size 16776960 extends beyond EOD, truncated [ 162.068268][ T7512] loop2: p9 size 16776960 extends beyond EOD, truncated [ 162.075843][ T7512] loop2: p10 size 16776960 extends beyond EOD, truncated [ 162.087704][ T7518] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 162.105025][ T749] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.210788][ T7512] loop2: p11 size 16776960 extends beyond EOD, truncated [ 162.210892][ T749] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.228017][ T7512] loop2: p12 size 16776960 extends beyond EOD, truncated [ 162.237097][ T7512] loop2: p13 size 16776960 extends beyond EOD, truncated [ 162.243454][ T749] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.245433][ T7512] loop2: p14 size 16776960 extends beyond EOD, truncated [ 162.266364][ T7512] loop2: p15 size 16776960 extends beyond EOD, truncated [ 162.275426][ T7512] loop2: p16 size 16776960 extends beyond EOD, truncated [ 162.297971][ T7512] loop2: p17 size 16776960 extends beyond EOD, truncated [ 162.305791][ T7512] loop2: p18 size 16776960 extends beyond EOD, truncated [ 162.313439][ T7512] loop2: p19 size 16776960 extends beyond EOD, truncated [ 162.321298][ T7512] loop2: p20 size 16776960 extends beyond EOD, truncated [ 162.329493][ T7512] loop2: p21 size 16776960 extends beyond EOD, truncated [ 162.337288][ T7512] loop2: p22 size 16776960 extends beyond EOD, truncated [ 162.351364][ T7512] loop2: p23 size 16776960 extends beyond EOD, truncated [ 162.368988][ T7512] loop2: p24 size 16776960 extends beyond EOD, truncated [ 162.383109][ T7512] loop2: p25 size 16776960 extends beyond EOD, truncated [ 162.401064][ T7512] loop2: p26 size 16776960 extends beyond EOD, truncated [ 162.418638][ T7512] loop2: p27 size 16776960 extends beyond EOD, truncated [ 162.426265][ T749] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.445324][ T749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.454308][ T7512] loop2: p28 size 16776960 extends beyond EOD, truncated [ 162.463449][ T749] usb 4-1: Product: syz [ 162.472173][ T7512] loop2: p29 size 16776960 extends beyond EOD, truncated [ 162.479570][ T749] usb 4-1: Manufacturer: syz [ 162.484176][ T749] usb 4-1: SerialNumber: syz [ 162.491969][ T7512] loop2: p30 size 16776960 extends beyond EOD, truncated [ 162.509868][ T7512] loop2: p31 size 16776960 extends beyond EOD, truncated [ 162.525533][ T95] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 162.536483][ T749] cdc_ncm 4-1:1.0: bind() failure [ 162.537436][ T7512] loop2: p32 size 16776960 extends beyond EOD, truncated [ 162.718419][ T7512] loop2: p33 size 16776960 extends beyond EOD, truncated [ 162.739915][ T7512] loop2: p34 size 16776960 extends beyond EOD, truncated [ 162.747827][ T7512] loop2: p35 size 16776960 extends beyond EOD, truncated [ 162.751097][ T749] usb 4-1: USB disconnect, device number 55 [ 162.775554][ T7512] loop2: p36 size 16776960 extends beyond EOD, truncated [ 162.796131][ T7512] loop2: p37 size 16776960 extends beyond EOD, truncated [ 162.815420][ T7512] loop2: p38 size 16776960 extends beyond EOD, truncated [ 162.848555][ T7512] loop2: p39 size 16776960 extends beyond EOD, truncated [ 162.868716][ T7512] loop2: p40 size 16776960 extends beyond EOD, truncated [ 162.886741][ T7512] loop2: p41 size 16776960 extends beyond EOD, truncated [ 162.906064][ T7512] loop2: p42 size 16776960 extends beyond EOD, truncated [ 162.914167][ T7512] loop2: p43 size 16776960 extends beyond EOD, truncated [ 162.922184][ T7512] loop2: p44 size 16776960 extends beyond EOD, truncated [ 162.930235][ T7512] loop2: p45 size 16776960 extends beyond EOD, truncated [ 162.937948][ T7512] loop2: p46 size 16776960 extends beyond EOD, truncated [ 162.945620][ T7512] loop2: p47 size 16776960 extends beyond EOD, truncated [ 162.953626][ T7512] loop2: p48 size 16776960 extends beyond EOD, truncated [ 162.961522][ T7512] loop2: p49 size 16776960 extends beyond EOD, truncated [ 162.970318][ T7512] loop2: p50 size 16776960 extends beyond EOD, truncated [ 162.978854][ T7521] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.986546][ T7512] loop2: p51 size 16776960 extends beyond EOD, truncated [ 162.996105][ T7512] loop2: p52 size 16776960 extends beyond EOD, truncated [ 163.009136][ T7512] loop2: p53 size 16776960 extends beyond EOD, truncated [ 163.019133][ T7512] loop2: p54 size 16776960 extends beyond EOD, truncated [ 163.019413][ T7521] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955 [ 163.027055][ T7512] loop2: p55 size 16776960 extends beyond EOD, truncated [ 163.043241][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 163.043445][ T53] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 163.054766][ T2181] udevd[2181]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 163.071462][ T7512] loop2: p56 size 16776960 extends beyond EOD, truncated [ 163.072500][ T386] udevd[386]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 163.079621][ T304] udevd[304]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 163.089576][ T1241] udevd[1241]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 163.111231][ T300] udevd[300]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 163.111251][ T2184] udevd[2184]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 163.122486][ T363] udevd[363]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 163.142211][ T2182] udevd[2182]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 163.152949][ T7512] loop2: p57 size 16776960 extends beyond EOD, truncated [ 163.161818][ T304] udevd[304]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 163.178817][ T7512] loop2: p58 size 16776960 extends beyond EOD, truncated [ 163.194040][ T7512] loop2: p59 size 16776960 extends beyond EOD, truncated [ 163.208787][ T7512] loop2: p60 size 16776960 extends beyond EOD, truncated [ 163.219677][ T7512] loop2: p61 size 16776960 extends beyond EOD, truncated [ 163.227738][ T7512] loop2: p62 size 16776960 extends beyond EOD, truncated [ 163.235573][ T7512] loop2: p63 size 16776960 extends beyond EOD, truncated [ 163.243763][ T7512] loop2: p64 size 16776960 extends beyond EOD, truncated [ 163.251710][ T7512] loop2: p65 size 16776960 extends beyond EOD, truncated [ 163.259399][ T7512] loop2: p66 size 16776960 extends beyond EOD, truncated [ 163.267029][ T7512] loop2: p67 size 16776960 extends beyond EOD, truncated [ 163.274788][ T7512] loop2: p68 size 16776960 extends beyond EOD, truncated [ 163.282597][ T7512] loop2: p69 size 16776960 extends beyond EOD, truncated [ 163.290222][ T7512] loop2: p70 size 16776960 extends beyond EOD, truncated [ 163.297600][ T53] usb 1-1: Using ep0 maxpacket: 32 [ 163.310335][ T7512] loop2: p71 size 16776960 extends beyond EOD, truncated [ 163.318273][ T7512] loop2: p72 size 16776960 extends beyond EOD, truncated [ 163.326325][ T7512] loop2: p73 size 16776960 extends beyond EOD, truncated [ 163.341906][ T7512] loop2: p74 size 16776960 extends beyond EOD, truncated [ 163.351618][ T7512] loop2: p75 size 16776960 extends beyond EOD, truncated [ 163.359339][ T7512] loop2: p76 size 16776960 extends beyond EOD, truncated [ 163.368413][ T7512] loop2: p77 size 16776960 extends beyond EOD, truncated [ 163.376490][ T7512] loop2: p78 size 16776960 extends beyond EOD, truncated [ 163.384502][ T7512] loop2: p79 size 16776960 extends beyond EOD, truncated [ 163.392444][ T7512] loop2: p80 size 16776960 extends beyond EOD, truncated [ 163.405016][ T7512] loop2: p81 size 16776960 extends beyond EOD, truncated [ 163.413126][ T7512] loop2: p82 size 16776960 extends beyond EOD, truncated [ 163.428387][ T7512] loop2: p83 size 16776960 extends beyond EOD, truncated [ 163.454914][ T7512] loop2: p84 size 16776960 extends beyond EOD, truncated [ 163.546641][ T7512] loop2: p85 size 16776960 extends beyond EOD, truncated [ 163.569605][ T7512] loop2: p86 size 16776960 extends beyond EOD, truncated [ 163.577210][ T53] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 163.584755][ T7512] loop2: p87 size 16776960 extends beyond EOD, truncated [ 163.586926][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.594880][ T7512] loop2: p88 size 16776960 extends beyond EOD, [ 163.602269][ T53] usb 1-1: Product: syz [ 163.602843][ T7512] truncated [ 163.608657][ T53] usb 1-1: Manufacturer: syz [ 163.613529][ T7512] loop2: p89 size 16776960 extends beyond EOD, [ 163.616413][ T53] usb 1-1: SerialNumber: syz [ 163.636280][ T7512] truncated [ 163.658232][ T1071] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 163.669941][ T7512] loop2: p90 size 16776960 extends beyond EOD, truncated [ 163.680502][ T7512] loop2: p91 size 16776960 extends beyond EOD, truncated [ 163.689135][ T7512] loop2: p92 size 16776960 extends beyond EOD, truncated [ 163.714471][ T7512] loop2: p93 size 16776960 extends beyond EOD, truncated [ 163.728247][ T7512] loop2: p94 size 16776960 extends beyond EOD, truncated [ 163.737646][ T7512] loop2: p95 size 16776960 extends beyond EOD, truncated [ 163.745389][ T7512] loop2: p96 size 16776960 extends beyond EOD, truncated [ 163.798691][ T7512] loop2: p97 size 16776960 extends beyond EOD, truncated [ 163.814877][ T7512] loop2: p98 size 16776960 extends beyond EOD, truncated [ 163.830844][ T7512] loop2: p99 size 16776960 extends beyond EOD, truncated [ 163.840980][ T7512] loop2: p100 size 16776960 extends beyond EOD, truncated [ 163.854645][ T7512] loop2: p101 size 16776960 extends beyond EOD, truncated [ 163.875458][ T7512] loop2: p102 size 16776960 extends beyond EOD, truncated [ 163.907411][ T7512] loop2: p103 size 16776960 extends beyond EOD, truncated [ 163.915198][ T1071] usb 4-1: Using ep0 maxpacket: 16 [ 163.970617][ T7512] loop2: p104 size 16776960 extends beyond EOD, truncated [ 164.011015][ T749] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 164.024530][ T7512] loop2: p105 size 16776960 extends beyond EOD, truncated [ 164.066865][ T7512] loop2: p106 size 16776960 extends beyond EOD, truncated [ 164.075040][ T53] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 164.092773][ T1071] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 164.110772][ T7512] loop2: p107 size 16776960 extends beyond EOD, truncated [ 164.153716][ T53] usb 1-1: USB disconnect, device number 58 [ 164.186852][ T7512] loop2: p108 size 16776960 extends beyond EOD, truncated [ 164.244417][ T7512] loop2: p109 size 16776960 extends beyond EOD, truncated [ 164.270230][ T7512] loop2: p110 size 16776960 extends beyond EOD, truncated [ 164.278545][ T7512] loop2: p111 size 16776960 extends beyond EOD, truncated [ 164.296519][ T7512] loop2: p112 size 16776960 extends beyond EOD, truncated [ 164.327667][ T7512] loop2: p113 size 16776960 extends beyond EOD, truncated [ 164.335723][ T7512] loop2: p114 size 16776960 extends beyond EOD, truncated [ 164.343299][ T1071] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.365440][ T1071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.365450][ T749] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.384570][ T7512] loop2: p115 size 16776960 extends beyond EOD, truncated [ 164.392622][ T7512] loop2: p116 size 16776960 extends beyond EOD, truncated [ 164.401340][ T7512] loop2: p117 size 16776960 extends beyond EOD, truncated [ 164.409016][ T1071] usb 4-1: Product: syz [ 164.413326][ T1071] usb 4-1: Manufacturer: syz [ 164.418946][ T7512] loop2: p118 size 16776960 extends beyond EOD, truncated [ 164.426867][ T1071] usb 4-1: SerialNumber: syz [ 164.433640][ T7512] loop2: p119 size 16776960 extends beyond EOD, truncated [ 164.441438][ T7512] loop2: p120 size 16776960 extends beyond EOD, truncated [ 164.449130][ T7512] loop2: p121 size 16776960 extends beyond EOD, truncated [ 164.459934][ T7543] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 164.467883][ T7512] loop2: p122 size 16776960 extends beyond EOD, truncated [ 164.475541][ T7512] loop2: p123 size 16776960 extends beyond EOD, truncated [ 164.480180][ T749] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 164.483207][ T7512] loop2: p124 size 16776960 extends beyond EOD, truncated [ 164.499541][ T749] usb 2-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 164.499730][ T7512] loop2: p125 size 16776960 extends beyond EOD, truncated [ 164.515052][ T749] usb 2-1: Product: syz [ 164.515473][ T7512] loop2: p126 size 16776960 extends beyond EOD, truncated [ 164.527266][ T7512] loop2: p127 size 16776960 extends beyond EOD, truncated [ 164.527406][ T749] usb 2-1: SerialNumber: syz [ 164.535271][ T7512] loop2: p128 size 16776960 extends beyond EOD, truncated [ 164.547743][ T7512] loop2: p129 size 16776960 extends beyond EOD, truncated [ 164.555499][ T749] usb 2-1: config 0 descriptor?? [ 164.555672][ T7512] loop2: p130 size 16776960 extends beyond EOD, truncated [ 164.584375][ T7512] loop2: p131 size 16776960 extends beyond EOD, truncated [ 164.595760][ T749] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 164.604204][ T7512] loop2: p132 size 16776960 extends beyond EOD, truncated [ 164.611876][ T749] usb 2-1: Detected SIO [ 164.614688][ T7512] loop2: p133 size 16776960 extends beyond EOD, truncated [ 164.624135][ T749] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 164.634488][ T7512] loop2: p134 size 16776960 extends beyond EOD, truncated [ 164.642615][ T7512] loop2: p135 size 16776960 extends beyond EOD, truncated [ 164.659246][ T7512] loop2: p136 size 16776960 extends beyond EOD, truncated [ 164.670846][ T7512] loop2: p137 size 16776960 extends beyond EOD, truncated [ 164.686672][ T7512] loop2: p138 size 16776960 extends beyond EOD, truncated [ 164.701421][ T7512] loop2: p139 size 16776960 extends beyond EOD, truncated [ 164.720427][ T1071] usb 4-1: bad CDC descriptors [ 164.727528][ T7512] loop2: p140 size 16776960 extends beyond EOD, truncated [ 164.735263][ T1071] usb 4-1: USB disconnect, device number 56 [ 164.746119][ T7512] loop2: p141 size 16776960 extends beyond EOD, truncated [ 164.767993][ T7512] loop2: p142 size 16776960 extends beyond EOD, truncated [ 164.786695][ T7512] loop2: p143 size 16776960 extends beyond EOD, truncated [ 164.815880][ T7512] loop2: p144 size 16776960 extends beyond EOD, truncated [ 164.817291][ T53] usb 2-1: USB disconnect, device number 54 [ 164.824245][ T7512] loop2: p145 size 16776960 extends beyond EOD, truncated [ 164.843243][ T53] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.863798][ T7512] loop2: p146 size 16776960 extends beyond EOD, truncated [ 164.872263][ T7512] loop2: p147 size 16776960 extends beyond EOD, truncated [ 164.883821][ T53] ftdi_sio 2-1:0.0: device disconnected [ 164.901749][ T7512] loop2: p148 size 16776960 extends beyond EOD, truncated [ 164.919562][ T7512] loop2: p149 size 16776960 extends beyond EOD, truncated [ 164.929658][ T7512] loop2: p150 size 16776960 extends beyond EOD, truncated [ 164.949778][ T7512] loop2: p151 size 16776960 extends beyond EOD, truncated [ 164.957620][ T7512] loop2: p152 size 16776960 extends beyond EOD, truncated [ 164.975682][ T7512] loop2: p153 size 16776960 extends beyond EOD, truncated [ 164.987914][ T7512] loop2: p154 size 16776960 extends beyond EOD, truncated [ 165.007488][ T7512] loop2: p155 size 16776960 extends beyond EOD, truncated [ 165.015245][ T7512] loop2: p156 size 16776960 extends beyond EOD, truncated [ 165.023357][ T7512] loop2: p157 size 16776960 extends beyond EOD, truncated [ 165.031339][ T7512] loop2: p158 size 16776960 extends beyond EOD, truncated [ 165.039364][ T7512] loop2: p159 size 16776960 extends beyond EOD, truncated [ 165.047351][ T7512] loop2: p160 size 16776960 extends beyond EOD, truncated [ 165.056255][ T7512] loop2: p161 size 16776960 extends beyond EOD, truncated [ 165.064852][ T7512] loop2: p162 size 16776960 extends beyond EOD, truncated [ 165.072907][ T7512] loop2: p163 size 16776960 extends beyond EOD, truncated [ 165.081029][ T7512] loop2: p164 size 16776960 extends beyond EOD, truncated [ 165.089123][ T7512] loop2: p165 size 16776960 extends beyond EOD, truncated [ 165.097206][ T7512] loop2: p166 size 16776960 extends beyond EOD, truncated [ 165.105371][ T7512] loop2: p167 size 16776960 extends beyond EOD, truncated [ 165.113135][ T7512] loop2: p168 size 16776960 extends beyond EOD, truncated [ 165.121105][ T7512] loop2: p169 size 16776960 extends beyond EOD, truncated [ 165.129222][ T7512] loop2: p170 size 16776960 extends beyond EOD, truncated [ 165.137927][ T7512] loop2: p171 size 16776960 extends beyond EOD, truncated [ 165.146552][ T7512] loop2: p172 size 16776960 extends beyond EOD, truncated [ 165.155936][ T7512] loop2: p173 size 16776960 extends beyond EOD, truncated [ 165.166292][ T7512] loop2: p174 size 16776960 extends beyond EOD, truncated [ 165.174979][ T7512] loop2: p175 size 16776960 extends beyond EOD, truncated [ 165.184983][ T7512] loop2: p176 size 16776960 extends beyond EOD, truncated [ 165.199641][ T7512] loop2: p177 size 16776960 extends beyond EOD, truncated [ 165.207704][ T7512] loop2: p178 size 16776960 extends beyond EOD, truncated [ 165.216164][ T7512] loop2: p179 size 16776960 extends beyond EOD, truncated [ 165.224320][ T7512] loop2: p180 size 16776960 extends beyond EOD, truncated [ 165.232463][ T7512] loop2: p181 size 16776960 extends beyond EOD, truncated [ 165.241116][ T7512] loop2: p182 size 16776960 extends beyond EOD, truncated [ 165.261299][ T7512] loop2: p183 size 16776960 extends beyond EOD, truncated [ 165.275932][ T7512] loop2: p184 size 16776960 extends beyond EOD, truncated [ 165.294833][ T7512] loop2: p185 size 16776960 extends beyond EOD, truncated [ 165.314098][ T7512] loop2: p186 size 16776960 extends beyond EOD, truncated [ 165.323677][ T7512] loop2: p187 size 16776960 extends beyond EOD, truncated [ 165.342776][ T7512] loop2: p188 size 16776960 extends beyond EOD, truncated [ 165.361483][ T7512] loop2: p189 size 16776960 extends beyond EOD, truncated [ 165.389773][ T7512] loop2: p190 size 16776960 extends beyond EOD, truncated [ 165.407572][ T7512] loop2: p191 size 16776960 extends beyond EOD, truncated [ 165.435967][ T7512] loop2: p192 size 16776960 extends beyond EOD, truncated [ 165.469456][ T7512] loop2: p193 size 16776960 extends beyond EOD, truncated [ 165.478636][ T7550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.494535][ T7512] loop2: p194 size 16776960 extends beyond EOD, truncated [ 165.515234][ T7512] loop2: p195 size 16776960 extends beyond EOD, truncated [ 165.554786][ T7512] loop2: p196 size 16776960 extends beyond EOD, truncated [ 165.564496][ T7550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.596368][ T7512] loop2: p197 size 16776960 extends beyond EOD, truncated [ 165.606059][ T7512] loop2: p198 size 16776960 extends beyond EOD, truncated [ 165.617224][ T7512] loop2: p199 size 16776960 extends beyond EOD, truncated [ 165.669328][ T7512] loop2: p200 size 16776960 extends beyond EOD, truncated [ 165.679128][ T7512] loop2: p201 size 16776960 extends beyond EOD, truncated [ 165.686824][ T7512] loop2: p202 size 16776960 extends beyond EOD, truncated [ 165.695439][ T7512] loop2: p203 size 16776960 extends beyond EOD, truncated [ 165.703518][ T7512] loop2: p204 size 16776960 extends beyond EOD, truncated [ 165.726406][ T7512] loop2: p205 size 16776960 extends beyond EOD, truncated [ 165.734087][ T7512] loop2: p206 size 16776960 extends beyond EOD, truncated [ 165.741934][ T7512] loop2: p207 size 16776960 extends beyond EOD, truncated [ 165.773028][ T7512] loop2: p208 size 16776960 extends beyond EOD, truncated [ 165.803019][ T7512] loop2: p209 size 16776960 extends beyond EOD, truncated [ 165.832082][ T7512] loop2: p210 size 16776960 extends beyond EOD, truncated [ 165.858231][ T7512] loop2: p211 size 16776960 extends beyond EOD, truncated [ 165.889013][ T7512] loop2: p212 size 16776960 extends beyond EOD, truncated [ 165.896329][ T24] audit: type=1400 audit(2000524617.945:265): avc: denied { write } for pid=7595 comm="syz.0.3230" name="fib_trie" dev="proc" ino=4026532404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 165.916792][ T7512] loop2: p213 size 16776960 extends beyond EOD, truncated [ 165.949779][ T7512] loop2: p214 size 16776960 extends beyond EOD, truncated [ 165.979807][ T7512] loop2: p215 size 16776960 extends beyond EOD, truncated [ 166.003146][ T7512] loop2: p216 size 16776960 extends beyond EOD, truncated [ 166.016390][ T24] audit: type=1400 audit(2000524618.081:266): avc: denied { create } for pid=7611 comm="syz.0.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.032476][ T7512] loop2: p217 size 16776960 extends beyond EOD, truncated [ 166.056760][ T7512] loop2: p218 size 16776960 extends beyond EOD, truncated [ 166.076489][ T24] audit: type=1400 audit(2000524618.081:267): avc: denied { write } for pid=7611 comm="syz.0.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.076865][ T7512] loop2: p219 size 16776960 extends beyond EOD, truncated [ 166.117926][ T24] audit: type=1400 audit(2000524618.081:268): avc: denied { nlmsg_write } for pid=7611 comm="syz.0.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.122200][ T7617] netlink: 'syz.0.3240': attribute type 15 has an invalid length. [ 166.152017][ T7609] loop1: p2 p3 p7 [ 166.167016][ T7512] loop2: p220 size 16776960 extends beyond EOD, truncated [ 166.177947][ T7512] loop2: p221 size 16776960 extends beyond EOD, truncated [ 166.195314][ T7512] loop2: p222 size 16776960 extends beyond EOD, truncated [ 166.213418][ T7512] loop2: p223 size 16776960 extends beyond EOD, truncated [ 166.269907][ T7512] loop2: p224 size 16776960 extends beyond EOD, truncated [ 166.299929][ T7512] loop2: p225 size 16776960 extends beyond EOD, truncated [ 166.309698][ T24] audit: type=1400 audit(2000524618.384:269): avc: denied { create } for pid=7618 comm="syz.1.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.332355][ T7512] loop2: p226 size 16776960 extends beyond EOD, truncated [ 166.337010][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3241'. [ 166.354730][ T7512] loop2: p227 size 16776960 extends beyond EOD, truncated [ 166.370298][ T7512] loop2: p228 size 16776960 extends beyond EOD, truncated [ 166.389073][ T24] audit: type=1400 audit(2000524618.404:270): avc: denied { write } for pid=7618 comm="syz.1.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.414441][ T7512] loop2: p229 size 16776960 extends beyond EOD, truncated [ 166.444018][ T7512] loop2: p230 size 16776960 extends beyond EOD, truncated [ 166.446844][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3246'. [ 166.461056][ T7512] loop2: p231 size 16776960 extends beyond EOD, truncated [ 166.478803][ T7512] loop2: p232 size 16776960 extends beyond EOD, truncated [ 166.481084][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3246'. [ 166.495961][ T7512] loop2: p233 size 16776960 extends beyond EOD, truncated [ 166.511077][ T7512] loop2: p234 size 16776960 extends beyond EOD, truncated [ 166.546498][ T7512] loop2: p235 size 16776960 extends beyond EOD, truncated [ 166.562233][ T7512] loop2: p236 size 16776960 extends beyond EOD, truncated [ 166.581445][ T7512] loop2: p237 size 16776960 extends beyond EOD, truncated [ 166.598740][ T7512] loop2: p238 size 16776960 extends beyond EOD, truncated [ 166.607088][ T7640] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 166.623137][ T7512] loop2: p239 size 16776960 extends beyond EOD, truncated [ 166.642709][ T7512] loop2: p240 size 16776960 extends beyond EOD, truncated [ 166.661468][ T7512] loop2: p241 size 16776960 extends beyond EOD, truncated [ 166.671719][ T7512] loop2: p242 size 16776960 extends beyond EOD, truncated [ 166.679828][ T7512] loop2: p243 size 16776960 extends beyond EOD, truncated [ 166.688448][ T7512] loop2: p244 size 16776960 extends beyond EOD, truncated [ 166.696846][ T7512] loop2: p245 size 16776960 extends beyond EOD, truncated [ 166.722385][ T24] audit: type=1400 audit(2000524618.822:271): avc: denied { getopt } for pid=7646 comm="syz.0.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.753094][ T7512] loop2: p246 size 16776960 extends beyond EOD, truncated [ 166.798489][ T7512] loop2: p247 size 16776960 extends beyond EOD, truncated [ 166.817232][ T7512] loop2: p248 size 16776960 extends beyond EOD, truncated [ 166.864578][ T7512] loop2: p249 size 16776960 extends beyond EOD, truncated [ 166.892184][ T7512] loop2: p250 size 16776960 extends beyond EOD, truncated [ 166.900622][ T7512] loop2: p251 size 16776960 extends beyond EOD, truncated [ 166.908976][ T7512] loop2: p252 size 16776960 extends beyond EOD, truncated [ 166.917110][ T7512] loop2: p253 size 16776960 extends beyond EOD, truncated [ 166.931425][ T7512] loop2: p254 size 16776960 extends beyond EOD, truncated [ 166.940227][ T7512] loop2: p255 size 16776960 extends beyond EOD, truncated [ 167.197950][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3278'. [ 167.408043][ T24] audit: type=1400 audit(2000524619.532:272): avc: denied { write } for pid=7709 comm="syz.1.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.537771][ T7718] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 167.596620][ T24] audit: type=1326 audit(2000524619.731:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.1.3289" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483cef6019 code=0x7ffc0000 [ 167.611957][ T53] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 167.669258][ T7722] SELinux: failed to load policy [ 167.695440][ T24] audit: type=1326 audit(2000524619.773:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.1.3289" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f483cef6019 code=0x7ffc0000 [ 167.832198][ T749] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 167.906487][ T7740] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3298'. [ 167.916670][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3298'. [ 167.927340][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 167.936350][ T53] usb 1-1: Using ep0 maxpacket: 32 [ 167.941590][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 168.004288][ T575] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 168.022330][ T7750] netlink: 'syz.3.3303': attribute type 15 has an invalid length. [ 168.090801][ T53] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.167202][ T53] usb 1-1: config 251 has an invalid interface number: 87 but max is 2 [ 168.176714][ T53] usb 1-1: config 251 has an invalid interface number: 99 but max is 2 [ 168.186290][ T53] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 168.197797][ T53] usb 1-1: config 251 has 2 interfaces, different from the descriptor's value: 3 [ 168.207257][ T53] usb 1-1: config 251 has no interface number 0 [ 168.213727][ T53] usb 1-1: config 251 has no interface number 1 [ 168.220413][ T53] usb 1-1: config 251 interface 87 altsetting 14 has an invalid endpoint with address 0x0, skipping [ 168.232806][ T53] usb 1-1: config 251 interface 87 altsetting 14 has an invalid endpoint with address 0x0, skipping [ 168.243823][ T749] usb 3-1: unable to get BOS descriptor or descriptor too short [ 168.252250][ T53] usb 1-1: config 251 interface 87 altsetting 14 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 168.263872][ T53] usb 1-1: config 251 interface 87 has no altsetting 0 [ 168.272665][ T575] usb 2-1: Using ep0 maxpacket: 16 [ 168.275864][ T7680] F2FS-fs (loop4): Test dummy encryption mode enabled [ 168.285016][ T749] usb 3-1: not running at top speed; connect to a high speed hub [ 168.292069][ T7680] F2FS-fs (loop4): invalid crc value [ 168.302448][ T7680] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:0 [ 168.317949][ T7680] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 168.387561][ T575] usb 2-1: config index 0 descriptor too short (expected 65535, got 1289) [ 168.399705][ T575] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 168.409119][ T575] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 168.416254][ T53] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=9d.e7 [ 168.420121][ T575] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 168.430396][ T25] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 168.448866][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.457482][ T53] usb 1-1: Product: syz [ 168.462225][ T53] usb 1-1: Manufacturer: syz [ 168.467289][ T53] usb 1-1: SerialNumber: syz [ 168.502455][ T7706] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.521239][ T575] usb 2-1: config index 1 descriptor too short (expected 65535, got 1289) [ 168.521628][ T749] usb 3-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 168.530415][ T575] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 168.540326][ T749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.559445][ T749] usb 3-1: Product: syz [ 168.564482][ T575] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 168.564497][ T575] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 168.586805][ T749] usb 3-1: Manufacturer: syz [ 168.594448][ T749] usb 3-1: SerialNumber: syz [ 168.655489][ T575] usb 2-1: config index 2 descriptor too short (expected 65535, got 1289) [ 168.667250][ T575] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 168.680128][ T575] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 168.693082][ T575] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 168.780143][ T575] usb 2-1: string descriptor 0 read error: -71 [ 168.787649][ T575] usb 2-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 168.797809][ T575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.807408][ T575] usb 2-1: rejected 3 configurations due to insufficient available bus power [ 168.809716][ T53] usb 1-1: USB disconnect, device number 59 [ 168.818998][ T575] usb 2-1: no configuration chosen from 3 choices [ 168.846249][ T575] usb 2-1: USB disconnect, device number 55 [ 168.846844][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.915087][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 168.942973][ T749] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.971213][ T749] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 169.000374][ T25] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 169.008924][ T25] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 169.022285][ T749] usb 3-1: USB disconnect, device number 53 [ 169.049041][ T25] usb 4-1: config 2 has no interface number 0 [ 169.055246][ T25] usb 4-1: config 2 has no interface number 1 [ 169.076885][ T25] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 169.088328][ T25] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 169.099361][ T25] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 169.111131][ T25] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 169.123083][ T25] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 169.133998][ T25] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.147784][ T25] usb 4-1: config 2 interface 212 has no altsetting 0 [ 169.239992][ T1695] udevd[1695]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.316284][ T25] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 169.335171][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.337229][ T7804] netlink: 'syz.1.3328': attribute type 3 has an invalid length. [ 169.349235][ T25] usb 4-1: Product: syz [ 169.355284][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'. [ 169.355965][ T25] usb 4-1: Manufacturer: syz [ 169.369747][ T25] usb 4-1: SerialNumber: syz [ 169.552085][ T7835] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.562265][ T7835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.569746][ T7835] IPv6: NLM_F_CREATE should be set when creating new route [ 169.720415][ T25] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input9 [ 169.745681][ T25] usb 4-1: USB disconnect, device number 57 [ 169.787180][ T7874] xt_SECMARK: invalid security context 'unconfined' [ 169.887394][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 170.128082][ T7923] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 170.147858][ T7923] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 170.186118][ T7923] EXT4-fs (loop2): 1 truncate cleaned up [ 170.202573][ T7923] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue [ 170.212072][ T7940] xt_SECMARK: invalid mode: 2 [ 170.442718][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.450031][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.536850][ T7984] syz.4.3416 (7984): /proc/7983/oom_adj is deprecated, please use /proc/7983/oom_score_adj instead. [ 170.638441][ T7986] EXT4-fs (loop3): Ignoring removed orlov option [ 170.694288][ T7986] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 170.703574][ T7986] EXT4-fs (loop3): orphan cleanup on readonly fs [ 170.717427][ T7986] EXT4-fs error (device loop3): __ext4_get_inode_loc:4451: comm syz.3.3417: Invalid inode table block 0 in block_group 0 [ 170.733804][ T8003] xt_TCPMSS: Only works on TCP SYN packets [ 170.746847][ T7986] EXT4-fs (loop3): Remounting filesystem read-only [ 170.755463][ T7986] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 170.764205][ T7998] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 170.783477][ T7986] EXT4-fs error (device loop3): ext4_quota_write:6655: inode #3: comm syz.3.3417: mark_inode_dirty error [ 170.796320][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 170.796332][ T24] audit: type=1400 audit(2000524623.063:312): avc: denied { mount } for pid=7997 comm="syz.2.3422" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 170.820975][ T7986] Quota error (device loop3): write_blk: dquota write failed [ 170.843468][ T7998] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 170.848857][ T7986] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 170.861919][ T7986] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.3417: Failed to acquire dquot type 0 [ 170.865610][ T8017] xt_CONNSECMARK: invalid mode: 0 [ 170.873768][ T24] audit: type=1400 audit(2000524623.084:313): avc: denied { node_bind } for pid=8008 comm="syz.1.3427" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 170.899834][ T7986] EXT4-fs (loop3): 1 truncate cleaned up [ 170.904494][ T24] audit: type=1400 audit(2000524623.084:314): avc: denied { module_request } for pid=8010 comm="syz.4.3428" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 170.928491][ T7986] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,stripe=0x0000000000000007,errors=remount-ro,lazytime,data_err=ignore,noblock_validity,minixdf,orlov, [ 170.930446][ T24] audit: type=1400 audit(2000524623.178:315): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 170.981697][ T8021] xt_CT: No such helper "snmp_trap" [ 171.028514][ T24] audit: type=1400 audit(2000524623.261:316): avc: denied { mount } for pid=7985 comm="syz.3.3417" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 171.037916][ T7986] EXT4-fs error (device loop3): __ext4_get_inode_loc:4451: comm syz.3.3417: Invalid inode table block 0 in block_group 0 [ 171.110493][ T24] audit: type=1400 audit(2000524623.282:317): avc: denied { read } for pid=8022 comm="syz.2.3432" dev="nsfs" ino=4026532543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 171.135191][ T24] audit: type=1400 audit(2000524623.282:318): avc: denied { open } for pid=8022 comm="syz.2.3432" path="net:[4026532543]" dev="nsfs" ino=4026532543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 171.159619][ T24] audit: type=1400 audit(2000524623.282:319): avc: denied { create } for pid=8022 comm="syz.2.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.250834][ T8050] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 0 [ 171.381588][ T8071] IPv6: sit1: Disabled Multicast RS [ 171.461790][ T8088] usb usb7: usbfs: process 8088 (syz.1.3466) did not claim interface 0 before use [ 171.524562][ T8097] xt_l2tp: missing protocol rule (udp|l2tpip) [ 171.624408][ T8094] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.704609][ T8113] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 171.813721][ T8130] __nla_validate_parse: 108 callbacks suppressed [ 171.813733][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3484'. [ 171.888009][ T575] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.024617][ T8149] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 172.122151][ T8149] EXT4-fs (loop1): Test dummy encryption mode enabled [ 172.133543][ T8149] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 172.141965][ T8149] System zones: 0-5 [ 172.146959][ T8149] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue [ 172.208257][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3509'. [ 172.226597][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3509'. [ 172.246022][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3509'. [ 172.257349][ T7962] F2FS-fs (loop0): Found nat_bits in checkpoint [ 172.314463][ T8195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3516'. [ 172.344253][ T7962] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 172.361896][ T8204] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.398600][ T8204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.409094][ T8204] IPv6: NLM_F_CREATE should be set when creating new route [ 172.416781][ T8204] IPv6: NLM_F_CREATE should be set when creating new route [ 172.481121][ T8215] netlink: 'syz.4.3525': attribute type 4 has an invalid length. [ 172.843294][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'. [ 172.887239][ T8271] xt_socket: unknown flags 0x58 [ 172.938953][ T8279] erofs: (device loop0): mounted with root inode @ nid 36. [ 173.058578][ T749] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 173.160346][ T8336] netlink: 'syz.1.3584': attribute type 46 has an invalid length. [ 173.224905][ T8350] ip6gretap0: refused to change device tx_queue_len [ 173.295497][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3601'. [ 173.304739][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3600'. [ 173.403513][ T749] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.425347][ T749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.450252][ T749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.476843][ T749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.604562][ T749] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.614253][ T749] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.622485][ T749] usb 3-1: Product: syz [ 173.626914][ T749] usb 3-1: Manufacturer: syz [ 173.690558][ T749] cdc_wdm 3-1:1.0: skipping garbage [ 173.695831][ T749] cdc_wdm 3-1:1.0: skipping garbage [ 173.701358][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3641'. [ 173.717966][ T749] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 173.718412][ T8455] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 173.884525][ T575] usb 3-1: USB disconnect, device number 54 [ 173.921163][ T8487] x_tables: unsorted entry at hook 3 [ 174.004170][ T8493] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 174.042781][ T8465] F2FS-fs (loop4): invalid crc value [ 174.080601][ T8465] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 174.110910][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3667'. [ 174.135318][ T8465] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 174.143689][ T8465] F2FS-fs (loop4): Start checkpoint disabled! [ 174.162349][ T8465] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 174.396597][ T8561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.472212][ T8579] : renamed from team_slave_1 [ 174.584491][ T8605] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.662891][ T8622] incfs: Options parsing error. -22 [ 174.670144][ T8622] incfs: mount failed -22 [ 174.776255][ T8620] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 174.776255][ T8620] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 174.776255][ T8620] [ 174.836759][ T8615] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 174.848271][ T8620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.874463][ T8615] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 174.891253][ T8620] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.3718: invalid indirect mapped block 393216 (level 1) [ 174.898333][ T8615] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 174.921944][ T8620] EXT4-fs (loop4): Remounting filesystem read-only [ 174.928793][ T8620] EXT4-fs (loop4): 1 truncate cleaned up [ 174.934592][ T8620] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,nouser_xattr,jqfmt=vfsold,errors=remount-ro, [ 174.957169][ T8615] overlayfs: missing 'lowerdir' [ 175.249540][ T8601] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 175.292954][ T8601] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 175.311062][ T8601] F2FS-fs (loop1): invalid crc value [ 175.318149][ T8601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.353087][ T8601] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 175.360558][ T8601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 175.360921][ T8708] device bridge1 entered promiscuous mode [ 175.396213][ T8601] F2FS-fs (loop1): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 175.503467][ T8727] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 175.727102][ T8767] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 175.744437][ T24] kauditd_printk_skb: 73 callbacks suppressed [ 175.744451][ T24] audit: type=1326 audit(2000524628.235:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.0.3787" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ac062019 code=0x7ffc0000 [ 175.783834][ T24] audit: type=1326 audit(2000524628.235:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.0.3787" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ac062019 code=0x7ffc0000 [ 175.805336][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.810798][ T24] audit: type=1326 audit(2000524628.277:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.0.3787" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fa6ac062019 code=0x7ffc0000 [ 175.844078][ T24] audit: type=1326 audit(2000524628.277:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.0.3787" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ac062019 code=0x7ffc0000 [ 175.869852][ T24] audit: type=1326 audit(2000524628.277:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8768 comm="syz.0.3787" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ac062019 code=0x7ffc0000 [ 175.954680][ T8774] EXT4-fs (loop2): Ignoring removed oldalloc option [ 176.008381][ T8774] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 176.029164][ T8774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 176.053252][ T8774] EXT4-fs (loop2): orphan cleanup on readonly fs [ 176.061568][ T8774] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 176.071096][ T8774] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 176.071134][ T8803] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 176.086680][ T8774] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 176.103154][ T8774] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3791: bg 0: block 40: padding at end of block bitmap is not set [ 176.118980][ T8774] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 176.129014][ T8774] EXT4-fs (loop2): 1 truncate cleaned up [ 176.135587][ T8774] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,noload,noblock_validity,oldalloc,nouid32,grpjquota=,,errors=continue [ 176.154946][ T8803] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.3804: bad orphan inode 15 [ 176.165550][ T8803] ext4_test_bit(bit=14, block=18) = 1 [ 176.171239][ T8803] is_bad_inode(inode)=0 [ 176.175700][ T8803] NEXT_ORPHAN(inode)=1023 [ 176.180465][ T8803] max_ino=32 [ 176.184367][ T8803] i_nlink=0 [ 176.187988][ T8803] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 176.197118][ T8803] ext2 filesystem being mounted at /735/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 176.232003][ T8803] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 3: comm syz.1.3804: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 176.255774][ T24] audit: type=1400 audit(2000524628.778:398): avc: denied { read } for pid=8772 comm="syz.2.3791" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 176.255815][ T8774] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 176.327525][ T8831] xt_hashlimit: max too large, truncated to 1048576 [ 176.337205][ T8831] xt_hashlimit: overflow, try lower: 137438953472/8 [ 176.392652][ T24] audit: type=1400 audit(2000524628.914:399): avc: denied { compute_member } for pid=8838 comm="syz.3.3821" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 176.481322][ T8849] device ipip0 entered promiscuous mode [ 176.610631][ T8877] erofs: (device loop0): mounted with root inode @ nid 36. [ 176.691015][ T8896] __nla_validate_parse: 28 callbacks suppressed [ 176.691025][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3849'. [ 176.753785][ T24] audit: type=1400 audit(2000524629.301:400): avc: denied { ioctl } for pid=8905 comm="syz.3.3854" path="socket:[40139]" dev="sockfs" ino=40139 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.841129][ T8923] bridge0: port 3(dummy0) entered blocking state [ 176.867253][ T8923] bridge0: port 3(dummy0) entered disabled state [ 176.882108][ T8923] device dummy0 entered promiscuous mode [ 176.938244][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3872'. [ 176.992424][ T8953] netlink: 'syz.2.3876': attribute type 17 has an invalid length. [ 177.010001][ T24] audit: type=1326 audit(2000524629.562:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.3878" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83b64ea019 code=0x7ffc0000 [ 177.050799][ T8953] device veth0_vlan left promiscuous mode [ 177.056930][ T8953] device veth0_vlan entered promiscuous mode [ 177.059311][ T8881] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 177.066083][ T8953] device veth1_macvtap left promiscuous mode [ 177.077508][ T8953] device veth1_macvtap entered promiscuous mode [ 177.092060][ T8881] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 177.103138][ T8881] F2FS-fs (loop1): invalid crc value [ 177.109902][ T8881] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 177.181235][ T8881] F2FS-fs (loop1): Start checkpoint disabled! [ 177.204051][ T8881] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 177.211786][ T8881] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 177.301621][ T8974] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 177.321000][ T8974] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 177.330114][ T8974] EXT4-fs (loop3): orphan cleanup on readonly fs [ 177.336907][ T8974] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.3885: bad orphan inode 3 [ 177.348109][ T8974] EXT4-fs (loop3): Remounting filesystem read-only [ 177.354792][ T8974] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback [ 177.422079][ T8974] EXT4-fs warning (device loop3): dx_probe:860: inode #2: comm syz.3.3885: dx entry: limit 0 != root limit 125 [ 177.437514][ T8974] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.3885: Corrupt directory, running e2fsck is recommended [ 177.510822][ T8996] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 177.519332][ T8996] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.527003][ T8996] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3896: bg 0: block 10: padding at end of block bitmap is not set [ 177.542322][ T8996] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.3896: Failed to acquire dquot type 0 [ 177.555113][ T8996] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.3896: Failed to acquire dquot type 0 [ 177.567679][ T8996] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.3896: Freeing blocks not in datazone - block = 0, count = 4096 [ 177.605312][ T8996] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.3896: Failed to acquire dquot type 0 [ 177.618096][ T8996] EXT4-fs (loop1): 1 orphan inode deleted [ 177.632304][ T8996] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 177.645896][ T8996] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.3896: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 177.704167][ T9014] FAT-fs (loop0): Directory bread(block 64) failed [ 177.710960][ T9014] FAT-fs (loop0): Directory bread(block 65) failed [ 177.717582][ T9014] FAT-fs (loop0): Directory bread(block 66) failed [ 177.724835][ T9014] FAT-fs (loop0): Directory bread(block 67) failed [ 177.732575][ T9014] FAT-fs (loop0): Directory bread(block 68) failed [ 177.741794][ T9014] FAT-fs (loop0): Directory bread(block 69) failed [ 177.750694][ T9014] FAT-fs (loop0): Directory bread(block 70) failed [ 177.757671][ T9014] FAT-fs (loop0): Directory bread(block 71) failed [ 177.764540][ T9014] FAT-fs (loop0): Directory bread(block 72) failed [ 177.771470][ T9014] FAT-fs (loop0): Directory bread(block 73) failed [ 177.818601][ T9038] exfat: Deprecated parameter 'utf8' [ 177.829243][ T9038] exfat: Deprecated parameter 'namecase' [ 177.835782][ T9038] exfat: Deprecated parameter 'namecase' [ 177.850313][ T9038] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 177.910479][ T749] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 178.114897][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3937'. [ 178.120495][ T53] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 178.139713][ T749] usb 3-1: Using ep0 maxpacket: 16 [ 178.158711][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3942'. [ 178.256099][ T749] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 178.274224][ T749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.285633][ T749] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254 [ 178.300628][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3955'. [ 178.378933][ T749] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.388201][ T749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.402673][ T749] usb 3-1: SerialNumber: syz [ 178.503388][ T53] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.601626][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3983'. [ 178.665876][ T53] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 178.676965][ T749] usb 3-1: USB disconnect, device number 55 [ 178.684458][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.700313][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3990'. [ 178.710363][ T53] usb 2-1: Product: syz [ 178.714851][ T53] usb 2-1: Manufacturer: syz [ 178.719991][ T53] usb 2-1: SerialNumber: syz [ 178.732644][ T9196] device veth1_macvtap left promiscuous mode [ 178.739333][ T9196] device macsec0 entered promiscuous mode [ 178.761990][ T53] ums-karma 2-1:1.0: USB Mass Storage device detected [ 178.770365][ T53] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 178.770365][ T53] Please send a copy of this message to and [ 178.853420][ T9222] netlink: 'syz.3.4004': attribute type 13 has an invalid length. [ 178.862691][ T9222] gretap0: refused to change device tx_queue_len [ 178.869860][ T9222] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.956668][ T575] usb 2-1: USB disconnect, device number 56 [ 178.973050][ T9246] netlink: 2124 bytes leftover after parsing attributes in process `syz.3.4016'. [ 179.301591][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4065'. [ 179.321867][ T9351] xt_hashlimit: size too large, truncated to 1048576 [ 179.329413][ T9351] xt_hashlimit: max too large, truncated to 1048576 [ 179.365530][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4074'. [ 179.462123][ T9390] syz.2.4086 uses obsolete (PF_INET,SOCK_PACKET) [ 179.597144][ T9438] xt_policy: too many policy elements [ 179.600844][ T9439] netlink: 'syz.3.4111': attribute type 17 has an invalid length. [ 179.637667][ T53] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.674675][ T9449] ip6t_rpfilter: unknown options [ 179.714711][ T575] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.830511][ T9485] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 180.064032][ T9570] xt_policy: output policy not valid in PREROUTING and INPUT [ 180.180117][ T9608] device bridge2 entered promiscuous mode [ 180.180547][ T9611] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.479754][ T9703] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.528504][ T9719] netlink: 'syz.4.4251': attribute type 7 has an invalid length. [ 180.536490][ T24] kauditd_printk_skb: 343 callbacks suppressed [ 180.536503][ T24] audit: type=1400 audit(2000524633.252:736): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.558171][ T9719] netlink: 'syz.4.4251': attribute type 8 has an invalid length. [ 180.571470][ T24] audit: type=1400 audit(2000524633.262:737): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.610135][ T9733] xt_TCPMSS: Only works on TCP SYN packets [ 180.614379][ T24] audit: type=1400 audit(2000524633.262:738): avc: denied { map_create } for pid=9726 comm="syz.1.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 180.638478][ T24] audit: type=1400 audit(2000524633.273:739): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.668536][ T24] audit: type=1400 audit(2000524633.283:740): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.697224][ T24] audit: type=1400 audit(2000524633.294:741): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.711932][ T9749] x_tables: duplicate entry at hook 3 [ 180.723007][ T24] audit: type=1400 audit(2000524633.304:742): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.760290][ T24] audit: type=1400 audit(2000524633.325:743): avc: denied { read write } for pid=280 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.795740][ T9761] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.807981][ T24] audit: type=1400 audit(2000524633.325:744): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.859841][ T24] audit: type=1400 audit(2000524633.357:745): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 180.906251][ T9786] xt_l2tp: wrong L2TP version: 0 [ 180.935493][ T9794] x_tables: duplicate entry at hook 3 [ 180.995005][ T9807] netlink: 'syz.2.4296': attribute type 2 has an invalid length. [ 181.003064][ T9807] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 181.068747][ T9837] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 181.078428][ T9839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.085893][ T9839] IPv6: NLM_F_CREATE should be set when creating new route [ 181.093421][ T9839] IPv6: NLM_F_CREATE should be set when creating new route [ 181.241429][ T9891] netlink: 'syz.1.4336': attribute type 30 has an invalid length. [ 181.526265][ T9963] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 181.573684][ T9973] __nla_validate_parse: 13 callbacks suppressed [ 181.573695][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4376'. [ 181.591965][ T9977] device vlan0 entered promiscuous mode [ 181.614515][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 181.668568][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4390'. [ 181.787117][T10035] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 181.828454][T10038] netlink: 'syz.2.4411': attribute type 12 has an invalid length. [ 181.841031][T10052] tc_dump_action: action bad kind [ 182.001382][T10095] IPv6: Can't replace route, no match found [ 182.050224][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4445'. [ 182.069039][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4445'. [ 182.079342][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4445'. [ 182.097862][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4445'. [ 182.103041][T10121] ipt_REJECT: TCP_RESET invalid for non-tcp [ 182.106969][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4445'. [ 182.122392][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4445'. [ 182.133045][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4445'. [ 182.212496][T10142] device veth0 entered promiscuous mode [ 182.235702][T10151] PM: Enabling pm_trace changes system date and time during resume. [ 182.235702][T10151] PM: Correct system time has to be restored manually after resume. [ 182.350855][T10171] xt_l2tp: invalid flags combination: 0 [ 182.428550][T10203] netlink: 'syz.0.4492': attribute type 6 has an invalid length. [ 182.671185][T10288] device veth1_macvtap entered promiscuous mode [ 182.676709][T10290] xt_TCPMSS: Only works on TCP SYN packets [ 182.684427][T10288] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 182.731660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.794675][T10316] xt_TCPMSS: Only works on TCP SYN packets [ 182.981193][T10369] device vlan0 entered promiscuous mode [ 183.305383][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.316581][T10473] bridge0: port 3(veth0_to_bridge) entered blocking state [ 183.325404][T10470] x_tables: duplicate underflow at hook 3 [ 183.331802][T10473] bridge0: port 3(veth0_to_bridge) entered disabled state [ 183.343509][T10473] device veth0_to_bridge entered promiscuous mode [ 183.350825][T10473] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.365139][T10473] bridge0: port 3(veth0_to_bridge) entered blocking state [ 183.372485][T10473] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 183.398566][T10487] device ip6gre1 entered promiscuous mode [ 183.458025][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 183.482870][T10507] device sit0 entered promiscuous mode [ 183.496934][T10507] netlink: 'syz.4.4643': attribute type 1 has an invalid length. [ 183.571974][T10529] device bridge1 entered promiscuous mode [ 183.873646][T10596] netlink: 'syz.2.4684': attribute type 15 has an invalid length. [ 183.905111][T10596] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.926602][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.936486][ T749] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 183.993929][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 184.278310][T10647] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.300005][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 184.596909][T10718] netlink: 'syz.4.4746': attribute type 46 has an invalid length. [ 184.658095][T10731] device bridge2 entered promiscuous mode [ 184.921325][ T749] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 184.932165][ T749] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 185.207339][T10853] netlink: 'syz.3.4814': attribute type 4 has an invalid length. [ 185.282313][T10874] netlink: 'syz.0.4824': attribute type 7 has an invalid length. [ 185.297643][T10874] netlink: 'syz.0.4824': attribute type 5 has an invalid length. [ 185.323020][ T24] kauditd_printk_skb: 1887 callbacks suppressed [ 185.323033][ T24] audit: type=1400 audit(2000524638.250:2633): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.357667][ T24] audit: type=1400 audit(2000524638.250:2634): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.419238][T10897] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 185.452117][ T24] audit: type=1400 audit(2000524638.260:2635): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.486988][T10910] netlink: 'syz.0.4843': attribute type 1 has an invalid length. [ 185.499998][T10910] netlink: 'syz.0.4843': attribute type 1 has an invalid length. [ 185.509662][ T24] audit: type=1400 audit(2000524638.323:2636): avc: denied { bpf } for pid=10884 comm="syz.3.4830" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 185.575781][ T24] audit: type=1400 audit(2000524638.323:2637): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.618084][ T24] audit: type=1400 audit(2000524638.323:2638): avc: denied { read write } for pid=280 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.649576][T10934] netlink: 'syz.1.4854': attribute type 3 has an invalid length. [ 185.667615][ T24] audit: type=1400 audit(2000524638.334:2639): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.695837][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 185.722901][ T24] audit: type=1400 audit(2000524638.334:2640): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.787227][ T24] audit: type=1400 audit(2000524638.344:2641): avc: denied { read write } for pid=280 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.814275][ T24] audit: type=1400 audit(2000524638.375:2642): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.976458][T10986] xt_hashlimit: size too large, truncated to 1048576 [ 185.997217][T10986] xt_hashlimit: invalid rate [ 186.000260][T10992] netlink: 'syz.2.4878': attribute type 46 has an invalid length. [ 186.039430][T10992] netlink: 'syz.2.4878': attribute type 28 has an invalid length. [ 186.442107][T11119] __nla_validate_parse: 80 callbacks suppressed [ 186.442117][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4945'. [ 186.676086][T11177] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4974'. [ 186.842101][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4994'. [ 186.863027][T11223] x_tables: duplicate entry at hook 2 [ 186.896580][T11229] xt_TCPMSS: Only works on TCP SYN packets [ 187.050573][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5016'. [ 187.080172][T11265] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5017'. [ 187.111094][T11265] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5017'. [ 187.120267][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5017'. [ 187.145614][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5026'. [ 187.157419][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5026'. [ 187.467861][T11340] device vlan0 left promiscuous mode [ 187.475124][T11340] device bridge1 left promiscuous mode [ 187.484861][T11340] device ipip0 left promiscuous mode [ 187.523313][ T53] ip6_tunnel:  xmit: Local address not yet configured! [ 187.535891][ T53] ip6_tunnel:  xmit: Local address not yet configured! [ 187.560291][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 187.843950][T11392] device bridge_slave_1 left promiscuous mode [ 187.854811][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.875733][T11392] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 187.904529][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 188.009658][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 188.017337][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5091'. [ 188.051667][T11416] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.669576][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 188.701903][T11497] validate_nla: 5 callbacks suppressed [ 188.701914][T11497] netlink: 'syz.4.5133': attribute type 12 has an invalid length. [ 188.971684][T11519] 8021q: VLANs not supported on lo [ 189.165736][T11563] device bridge3 entered promiscuous mode [ 189.455896][T11627] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 190.117156][ T24] kauditd_printk_skb: 530 callbacks suppressed [ 190.117169][ T24] audit: type=1400 audit(2000524643.270:3173): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.196085][ T24] audit: type=1400 audit(2000524643.281:3174): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.232085][ T24] audit: type=1400 audit(2000524643.281:3175): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.273458][ T24] audit: type=1400 audit(2000524643.312:3176): avc: denied { read write } for pid=282 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.325483][ T24] audit: type=1400 audit(2000524643.323:3177): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.364272][ T24] audit: type=1400 audit(2000524643.323:3178): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.392309][T11820] netlink: 'syz.3.5293': attribute type 1 has an invalid length. [ 190.415461][ T24] audit: type=1400 audit(2000524643.343:3179): avc: denied { read write } for pid=282 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.454689][ T24] audit: type=1400 audit(2000524643.343:3180): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.488901][ T24] audit: type=1400 audit(2000524643.354:3181): avc: denied { read write } for pid=281 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.518236][ T24] audit: type=1400 audit(2000524643.354:3182): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 190.630158][T11860] device bridge4 entered promiscuous mode [ 190.724749][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.152065][T11971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.241971][T11988] ipt_REJECT: ECHOREPLY no longer supported. [ 191.247435][T11991] netlink: 'syz.1.5379': attribute type 5 has an invalid length. [ 191.357199][T12009] __nla_validate_parse: 11 callbacks suppressed [ 191.357210][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5387'. [ 191.565986][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 191.636008][T12049] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.732524][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.739950][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.811968][T12074] x_tables: duplicate underflow at hook 3 [ 192.145484][T12123] netlink: 4192 bytes leftover after parsing attributes in process `syz.4.5444'. [ 192.320541][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5455'. [ 192.560433][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.003530][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5496'. [ 193.093582][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5505'. [ 193.106794][T12250] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5507'. [ 193.119224][T12250] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5507'. [ 193.178406][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5514'. [ 193.210936][T12270] netlink: 'syz.3.5517': attribute type 20 has an invalid length. [ 193.225022][T12270] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.255076][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.272493][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.279810][T12279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.287801][T12284] xt_hashlimit: overflow, try lower: 0/0 [ 193.440807][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5539'. [ 193.500582][T12322] xt_l2tp: v2 tid > 0xffff: 262144 [ 193.627211][T12352] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5557'. [ 193.699519][T12365] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 193.852288][T12395] tc_dump_action: action bad kind [ 193.897175][T12408] xt_limit: Overflow, try lower: 2/2147483648 [ 194.272892][T12478] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 194.513485][T12531] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 194.640209][T12559] Zero length message leads to an empty skb [ 194.760520][T12586] netlink: 'syz.4.5674': attribute type 17 has an invalid length. [ 194.846158][T12606] ================================================================== [ 194.854380][T12606] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 194.862808][T12606] Read of size 4 at addr ffff8881113b3470 by task syz.0.5684/12606 [ 194.870832][T12606] [ 194.873287][T12606] CPU: 0 PID: 12606 Comm: syz.0.5684 Tainted: G W syzkaller #0 [ 194.882192][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.892538][T12606] Call Trace: [ 194.895847][T12606] __dump_stack+0x21/0x24 [ 194.900291][T12606] dump_stack_lvl+0x1a7/0x208 [ 194.904994][T12606] ? show_regs_print_info+0x18/0x18 [ 194.910216][T12606] ? thaw_kernel_threads+0x220/0x220 [ 194.911120][T12615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.915517][T12606] print_address_description+0x7f/0x2c0 [ 194.915533][T12606] ? unaccount_page_cache_page+0x9dc/0xac0 [ 194.915544][T12606] kasan_report+0x100/0x140 [ 194.915565][T12606] ? xas_store+0xd0c/0x18d0 [ 194.947777][T12617] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 194.961186][T12606] ? unaccount_page_cache_page+0x9dc/0xac0 [ 194.967723][T12606] __asan_report_load4_noabort+0x14/0x20 [ 194.973655][T12606] unaccount_page_cache_page+0x9dc/0xac0 [ 194.979314][T12606] __delete_from_page_cache+0xc3/0x470 [ 194.984948][T12606] ? memset+0x35/0x40 [ 194.988940][T12606] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 194.996142][T12606] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 195.001608][T12606] ? __kasan_check_read+0x11/0x20 [ 195.006634][T12606] ? workingset_eviction+0x3dc/0x940 [ 195.012096][T12606] __remove_mapping+0x581/0x6b0 [ 195.017128][T12606] shrink_page_list+0x21ee/0x4160 [ 195.022235][T12606] ? shrink_page_list+0x1f41/0x4160 [ 195.027614][T12606] ? reclaim_clean_pages_from_list+0x740/0x740 [ 195.033943][T12606] ? shrink_inactive_list+0xef0/0xef0 [ 195.039396][T12606] ? _raw_spin_lock_irq+0x95/0xf0 [ 195.044439][T12606] ? __count_memcg_events+0x89/0x210 [ 195.049825][T12606] shrink_inactive_list+0x90c/0xef0 [ 195.055027][T12606] ? shrink_active_list+0xe00/0xe00 [ 195.060263][T12606] ? blk_flush_plug_list+0x40b/0x450 [ 195.065648][T12606] ? __kasan_check_read+0x11/0x20 [ 195.070776][T12606] ? __kasan_check_read+0x11/0x20 [ 195.076076][T12606] ? lruvec_lru_size+0x230/0x250 [ 195.081048][T12606] ? blk_start_plug+0x5a/0x170 [ 195.085891][T12606] shrink_lruvec+0x2806/0x2d70 [ 195.090678][T12606] ? __kasan_check_write+0x14/0x20 [ 195.095794][T12606] ? down_read_trylock+0x106/0x160 [ 195.100897][T12606] ? __init_rwsem+0x1c0/0x1c0 [ 195.106041][T12606] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 195.111886][T12606] ? __kasan_check_write+0x14/0x20 [ 195.117004][T12606] ? up_read+0x12/0x50 [ 195.121168][T12606] ? shrink_slab+0x671/0x830 [ 195.125956][T12606] ? 0xffffffffa002a000 [ 195.131020][T12606] ? cgroup_file_open+0x8a/0x2a0 [ 195.135968][T12606] ? __kasan_check_read+0x11/0x20 [ 195.141178][T12606] ? inactive_is_low+0x17a/0x2f0 [ 195.146561][T12606] ? __kasan_check_write+0x14/0x20 [ 195.151852][T12606] shrink_node+0xee0/0x2690 [ 195.156354][T12606] ? ktime_get+0x10e/0x140 [ 195.161046][T12606] do_try_to_free_pages+0x602/0x1590 [ 195.166422][T12606] ? try_to_free_pages+0xc20/0xc20 [ 195.171972][T12606] try_to_free_mem_cgroup_pages+0x261/0x610 [ 195.177943][T12606] ? shrink_lruvec+0x2d70/0x2d70 [ 195.183160][T12606] mem_cgroup_resize_max+0x309/0x3e0 [ 195.188438][T12606] mem_cgroup_write+0x1ed/0x230 [ 195.193558][T12606] ? mem_cgroup_reset+0x130/0x130 [ 195.198662][T12606] ? mem_cgroup_reset+0x130/0x130 [ 195.203802][T12606] cgroup_file_write+0x294/0x560 [ 195.209025][T12606] ? cgroup_seqfile_stop+0xc0/0xc0 [ 195.214366][T12606] ? mutex_lock+0x92/0xf0 [ 195.218795][T12606] ? mutex_trylock+0xb0/0xb0 [ 195.223561][T12606] ? __kasan_check_write+0x14/0x20 [ 195.228759][T12606] ? cgroup_seqfile_stop+0xc0/0xc0 [ 195.233951][T12606] kernfs_fop_write_iter+0x2bd/0x400 [ 195.239363][T12606] vfs_write+0x770/0xd70 [ 195.243696][T12606] ? kernel_write+0x3c0/0x3c0 [ 195.248373][T12606] ? mutex_trylock+0xb0/0xb0 [ 195.253054][T12606] ? __fget_files+0x2e1/0x340 [ 195.257740][T12606] ? __fdget_pos+0x2d2/0x380 [ 195.262497][T12606] ? ksys_write+0x70/0x260 [ 195.266920][T12606] ksys_write+0x14a/0x260 [ 195.271425][T12606] ? __ia32_sys_read+0x90/0x90 [ 195.276358][T12606] ? __kasan_check_read+0x11/0x20 [ 195.281498][T12606] __x64_sys_write+0x7b/0x90 [ 195.286085][T12606] do_syscall_64+0x31/0x40 [ 195.290714][T12606] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 195.296702][T12606] RIP: 0033:0x7fa6ac062019 [ 195.301253][T12606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.321176][T12606] RSP: 002b:00007fa6aaabb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.329601][T12606] RAX: ffffffffffffffda RBX: 00007fa6ac2e9fa0 RCX: 00007fa6ac062019 [ 195.337835][T12606] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 195.345891][T12606] RBP: 00007fa6ac0f900c R08: 0000000000000000 R09: 0000000000000000 [ 195.353947][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.361912][T12606] R13: 00007fa6ac2ea038 R14: 00007fa6ac2e9fa0 R15: 00007ffd2a2aa1f8 [ 195.369906][T12606] [ 195.372231][T12606] Allocated by task 279: [ 195.376476][T12606] __kasan_slab_alloc+0xb7/0xe0 [ 195.381323][T12606] slab_post_alloc_hook+0x5d/0x2f0 [ 195.386795][T12606] kmem_cache_alloc+0x15a/0x2d0 [ 195.391682][T12606] getname_flags+0xba/0x510 [ 195.396534][T12606] __x64_sys_unlink+0x3c/0x50 [ 195.401210][T12606] do_syscall_64+0x31/0x40 [ 195.405796][T12606] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 195.411849][T12606] [ 195.414166][T12606] Freed by task 279: [ 195.418063][T12606] kasan_set_track+0x4a/0x70 [ 195.422909][T12606] kasan_set_free_info+0x23/0x40 [ 195.428171][T12606] ____kasan_slab_free+0x125/0x160 [ 195.433443][T12606] __kasan_slab_free+0x11/0x20 [ 195.438304][T12606] slab_free_freelist_hook+0xc5/0x190 [ 195.443682][T12606] kmem_cache_free+0x100/0x2d0 [ 195.448506][T12606] do_unlinkat+0x5e1/0x670 [ 195.452924][T12606] __x64_sys_unlink+0x49/0x50 [ 195.457691][T12606] do_syscall_64+0x31/0x40 [ 195.462290][T12606] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 195.468354][T12606] [ 195.470682][T12606] The buggy address belongs to the object at ffff8881113b3300 [ 195.470682][T12606] which belongs to the cache names_cache of size 4096 [ 195.485176][T12606] The buggy address is located 368 bytes inside of [ 195.485176][T12606] 4096-byte region [ffff8881113b3300, ffff8881113b4300) [ 195.498713][T12606] The buggy address belongs to the page: [ 195.504846][T12606] page:ffffea000444ec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1113b0 [ 195.515352][T12606] head:ffffea000444ec00 order:3 compound_mapcount:0 compound_pincount:0 [ 195.523954][T12606] flags: 0x4000000000010200(slab|head) [ 195.529694][T12606] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018a180 [ 195.538737][T12606] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 195.547666][T12606] page dumped because: kasan: bad access detected [ 195.554625][T12606] page_owner tracks the page as allocated [ 195.560952][T12606] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 279, ts 190794821338, free_ts 190720136319 [ 195.584030][T12606] prep_new_page+0x176/0x190 [ 195.588745][T12606] get_page_from_freelist+0x225f/0x23f0 [ 195.594306][T12606] __alloc_pages_nodemask+0x29a/0x640 [ 195.599688][T12606] new_slab+0x84/0x3f0 [ 195.603753][T12606] ___slab_alloc+0x2f8/0x4c0 [ 195.608348][T12606] __slab_alloc+0x63/0xa0 [ 195.612765][T12606] kmem_cache_alloc+0x1a4/0x2d0 [ 195.617707][T12606] getname_flags+0xba/0x510 [ 195.622302][T12606] __x64_sys_unlink+0x3c/0x50 [ 195.627158][T12606] do_syscall_64+0x31/0x40 [ 195.631689][T12606] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 195.637681][T12606] page last free stack trace: [ 195.642472][T12606] __free_pages_ok+0x80b/0x830 [ 195.647295][T12606] __free_pages+0xd8/0x390 [ 195.651803][T12606] __free_slab+0xcf/0x190 [ 195.656326][T12606] unfreeze_partials+0x150/0x180 [ 195.661430][T12606] put_cpu_partial+0xc1/0x180 [ 195.666190][T12606] __slab_free+0x2c9/0x3a0 [ 195.670694][T12606] ___cache_free+0x10e/0x130 [ 195.675451][T12606] qlink_free+0x50/0x90 [ 195.679607][T12606] qlist_free_all+0x5f/0xb0 [ 195.684115][T12606] kasan_quarantine_reduce+0x14a/0x160 [ 195.689653][T12606] __kasan_slab_alloc+0x2f/0xe0 [ 195.694666][T12606] slab_post_alloc_hook+0x5d/0x2f0 [ 195.699766][T12606] kmem_cache_alloc+0x15a/0x2d0 [ 195.704606][T12606] getname_flags+0xba/0x510 [ 195.709120][T12606] user_path_at_empty+0x2f/0x50 [ 195.713963][T12606] __x64_sys_umount+0xf9/0x170 [ 195.718809][T12606] [ 195.721131][T12606] Memory state around the buggy address: [ 195.726759][T12606] ffff8881113b3300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.734829][T12606] ffff8881113b3380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.742984][T12606] >ffff8881113b3400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.751126][T12606] ^ [ 195.759013][T12606] ffff8881113b3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.767242][T12606] ffff8881113b3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.775291][T12606] ================================================================== [ 195.783342][T12606] Disabling lock debugging due to kernel taint [ 195.793065][ T24] kauditd_printk_skb: 507 callbacks suppressed [ 195.793078][ T24] audit: type=1400 audit(2000524648.219:3690): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.856058][ T24] audit: type=1400 audit(2000524648.219:3691): avc: denied { read write } for pid=12608 comm="syz.1.5686" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.886244][ T24] audit: type=1400 audit(2000524648.219:3692): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.917807][ T24] audit: type=1400 audit(2000524648.219:3693): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.943630][ T24] audit: type=1400 audit(2000524648.271:3694): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.968299][ T24] audit: type=1400 audit(2000524648.271:3695): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.992995][ T24] audit: type=1400 audit(2000524648.323:3696): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 196.017805][ T24] audit: type=1400 audit(2000524648.323:3697): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 196.042855][ T24] audit: type=1400 audit(2000524649.255:3698): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 196.066102][ T24] audit: type=1400 audit(2000524649.255:3699): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 196.230445][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 199.297433][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 199.899357][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.791188][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!