last executing test programs: 491.217688ms ago: executing program 0 (id=5910): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, 0x0) 466.626348ms ago: executing program 0 (id=5913): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000300)={0x800009, 0xa53, 0x3, 0x7fffffff, 0x86, "266de6051200", 0x8008, 0x3}) 466.240858ms ago: executing program 0 (id=5914): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 442.483459ms ago: executing program 0 (id=5915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) 418.1178ms ago: executing program 0 (id=5917): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x1d7efb9a, 0x9000) 207.803505ms ago: executing program 1 (id=5941): timer_create(0x3, 0x0, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 199.487425ms ago: executing program 3 (id=5942): r0 = syz_io_uring_setup(0x593, &(0x7f0000000f00)={0x0, 0x693c, 0x40, 0x2, 0x1cd}, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80)=[0x100, 0xfffffffc], 0x2) 193.297525ms ago: executing program 1 (id=5943): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0x7f, 0xa, 0x4000010, r0, 0x8000000) 180.157255ms ago: executing program 4 (id=5945): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0xffff, 0x0, 0x2844}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4008894) 164.868796ms ago: executing program 3 (id=5946): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2818082, &(0x7f00000000c0)={[{@utf8}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_winnt}, {@fat=@debug}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uni_xlate}, {@shortname_win95}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 164.448276ms ago: executing program 4 (id=5947): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) 159.302996ms ago: executing program 2 (id=5948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0x0, 0x3f}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}}}]}, 0x92}}, 0x24000000) 145.620657ms ago: executing program 1 (id=5949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000007600000024001280090001007866726d0000000014000280080001000400000008000200020000000a0002"], 0x5c}}, 0x0) 121.836917ms ago: executing program 2 (id=5950): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) lseek(r0, 0x0, 0x4) 120.639197ms ago: executing program 4 (id=5951): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000700)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, 'RB\xea\x1a\xd1\x9f\xe2\xca\xcc\x0f\b\x9b\xff9\xb5\xd7\x946\xa0=k\xf2\xa8U\"\xda\xf1o\xa1^\xf5\x12J\x9e\xa3\x1b\xb7\x13D\xec~\xf6\x83\xb4\xb9\xb3!\xaep\x13\xf7y\xa1j\xcc\xb1\xcdJ*J\xe4\xf2\x8e0\xe3\xed\xbf\x1e2\xee\xd5I+d\xa5\xb7\xc9\x9b\x96\x1f\x00pk\xe5\xc0\xadH\xb6=\xde\xf9\n\xae\xcc\x8dH\x9d\xef\xa8J\x91\x16ZL\x82\xed4@n\x9bX#\x0e\xcd\xb42KB\xb9\ni\x1cG\xc6\xca\\\x7f\x02\xa7\x0eE\xa3\xae\x00\xa9\xe0\x19Y\xbf\xd21|\xbb\nC\x11c;GnX*\xe3\xd2\xe9\x19\x86\xd1=\x14$kCWh\xd6\xef\xd9\xf1}\xc5Dg\x9b\xb9n-\xed<\x92\xa0\x96\xcdp\xb6\xfc\xb5\xdc\x95;\xcak\xa9\x1c\xac\xcfAW\\\xe0\x94\x9cA9\xf5\x7f\x8f\x90r\xd9\t\xf1\xae{\x96\x02\xb0\xe3D$A\x027@\x1fh\\4/\xfa=\xe3[t\xd8@\xb2JL\xd5r\xbc\xee\xec\x01{HR\xd6\x8ds:\xb9K\x99x\x93U\xb1\xd4\xd2\xdf\xe6]$\xeb\xbcj\xbe\x8e\xc3\xa7\xfd@\x83\xd4\x7fw\x1dN\x9f\xac\xd0\x8c\xa4h\x84\'\x82\x90o\xac# \xb5\xa4v\xc8=\xa8s\x83*/\x03\x15-\xdcA\xe3Q\rk\x89\x00\x10\x1aQ\x19\x85\xcd\x84}\xb8\x92\xeb\xe9\r\xfa\xfa\x9a\x0e\x9e\x91\xe4\xc0\xfc\x19\'\xday\x1c\xe8\x00\x00\x00', 0x3a, 'O\x10\xe3\xcc', 0x3a, './file0/file0'}, 0x18b) 117.965767ms ago: executing program 3 (id=5952): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000180)={{0x1, 0x1, 0x3, 0x3}, 0x8, 0xffffffffffffffff}) 107.174257ms ago: executing program 0 (id=5953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x4}, 0x38) 92.512117ms ago: executing program 1 (id=5954): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$FUSE(r0, 0x0, 0x0) 89.078838ms ago: executing program 3 (id=5955): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) 83.497258ms ago: executing program 2 (id=5956): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@setlink={0x28, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008810}, 0x24040840) 79.232898ms ago: executing program 4 (id=5957): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x88, 0x64, 0x0, &(0x7f0000000040)) 63.084909ms ago: executing program 2 (id=5958): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff}) 58.063979ms ago: executing program 4 (id=5959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006a0001050014000800000000000000000000000008000500", @ANYRES64], 0x20}}, 0x0) 47.939399ms ago: executing program 1 (id=5960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000005380)={0x3c, 0x2c, 0x1, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x4, 0x0, 0x0, @fd}, @nested={0x24, 0x11a, 0x0, 0x1, [@nested={0x20, 0xdb, 0x0, 0x1, [@nested={0x1c, 0x75, 0x0, 0x1, [@nested={0x18, 0x5, 0x0, 0x1, [@typed={0x14, 0x47, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x849c4}, 0xc000) 47.818719ms ago: executing program 3 (id=5961): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) linkat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 20.37644ms ago: executing program 2 (id=5962): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0xe501, 0x3, 0x4a0, 0x330, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x408, 0x230, 0x230, 0x408, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2e8, 0x330, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {0x2000}]}}, @common=@unspec=@limit={{0x48}, {0x4, 0x0, 0x4, 0x8, 0x3, 0x9, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x500) 20.06801ms ago: executing program 3 (id=5963): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x1d7efb9a, 0x9000) 19.10728ms ago: executing program 1 (id=5964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 437.88µs ago: executing program 4 (id=5965): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) 0s ago: executing program 2 (id=5966): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0x9b1b, 0x0) kernel console output (not intermixed with test programs): ournal IO priority (must be 0-7) [ 237.217461][ T8289] futex_wake_op: syz.0.3792 tries to shift op by -1; fix this program [ 237.251355][ T344] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.326588][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 237.337206][ T344] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 237.454636][ T307] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 237.475934][ T307] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 237.486510][ T340] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 237.504840][ T307] usb 5-1: USB disconnect, device number 100 [ 237.529459][ T347] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 237.604153][ T344] usb 2-1: string descriptor 0 read error: -22 [ 237.610417][ T344] usb 2-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 237.619689][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.669525][ T344] usb 2-1: unit 4 not found! [ 237.743092][ T306] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 237.785901][ T347] usb 1-1: Using ep0 maxpacket: 16 [ 237.888543][ T344] usb 2-1: USB disconnect, device number 102 [ 237.914217][ T340] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.921998][ T347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.011376][ T340] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 215, changing to 7 [ 238.106669][ T347] usb 1-1: New USB device found, idVendor=146d, idProduct=0721, bcdDevice=9c.25 [ 238.116301][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.124637][ T347] usb 1-1: Product: syz [ 238.128858][ T347] usb 1-1: Manufacturer: syz [ 238.133472][ T347] usb 1-1: SerialNumber: syz [ 238.138700][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.139528][ T347] usb 1-1: config 0 descriptor?? [ 238.153860][ T306] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 238.164787][ T306] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.202839][ T340] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 238.212055][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.220095][ T340] usb 3-1: Product: syz [ 238.224300][ T305] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 238.231976][ T340] usb 3-1: Manufacturer: syz [ 238.236699][ T340] usb 3-1: SerialNumber: syz [ 238.373898][ T306] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 238.383063][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.391153][ T306] usb 4-1: Product: syz [ 238.395390][ T306] usb 4-1: Manufacturer: syz [ 238.400000][ T306] usb 4-1: SerialNumber: syz [ 238.411789][ T347] usb 1-1: USB disconnect, device number 100 [ 238.555666][ T340] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 238.577141][ T340] snd-usb-audio: probe of 3-1:1.1 failed with error -2 [ 238.598439][ T340] snd-usb-audio: probe of 3-1:1.2 failed with error -2 [ 238.606372][ T340] usb 3-1: USB disconnect, device number 98 [ 238.619775][ T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.726655][ T39] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 238.780154][ T306] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 238.790887][ T305] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 238.800047][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.808179][ T306] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 238.818116][ T305] usb 5-1: Product: syz [ 238.822327][ T305] usb 5-1: Manufacturer: syz [ 238.827072][ T305] usb 5-1: SerialNumber: syz [ 238.846944][ T306] usb 4-1: USB disconnect, device number 100 [ 238.866305][ T305] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 238.877761][ T305] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 238.888556][ T305] usbserial_generic 5-1:1.0: device has no bulk endpoints [ 239.017547][ T8325] loop0: detected capacity change from 0 to 512 [ 239.078664][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 239.096738][ T306] usb 5-1: USB disconnect, device number 101 [ 239.111587][ T39] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 239.139752][ T39] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 239.149749][ T39] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 239.171603][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.270497][ T8349] loop3: detected capacity change from 0 to 8192 [ 239.323415][ T8349] loop3: p1 p2 < > p4 < p5 > [ 239.341752][ T8349] loop3: partition table partially beyond EOD, truncated [ 239.350452][ T8361] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 239.356601][ T8349] loop3: p1 size 16777216 extends beyond EOD, truncated [ 239.385036][ T8349] loop3: p2 start 16776960 is beyond EOD, truncated [ 239.416654][ T8349] loop3: p5 size 16777216 extends beyond EOD, truncated [ 239.485682][ T39] usb 2-1: string descriptor 0 read error: -71 [ 239.503752][ T39] usb 2-1: USB disconnect, device number 103 [ 239.511011][ T411] udevd[411]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 239.511764][ T309] udevd[309]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 239.524265][ T515] udevd[515]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 239.551393][ T8345] loop2: detected capacity change from 0 to 40427 [ 239.603530][ T8345] SELinux: security_context_str_to_sid(sysa) failed for (dev ?, type ?) errno=-22 [ 239.631679][ T8345] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(4) [ 239.644905][ T8345] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 239.654283][ T8345] F2FS-fs (loop2): invalid crc value [ 239.682047][ T8394] SELinux: security_context_str_to_sid(unonfined_u,fscontext) failed for (dev ?, type ?) errno=-22 [ 239.688569][ T8345] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 239.712903][ T8394] SELinux: security_context_str_to_sid(unonfined_u,fscontext) failed for (dev tmpfs, type tmpfs) errno=-22 [ 239.746125][ T8345] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 239.753320][ T8345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 239.760826][ T8345] SELinux: security_context_str_to_sid(sysa) failed for (dev loop2, type f2fs) errno=-22 [ 239.798963][ T8402] loop4: detected capacity change from 0 to 512 [ 239.821618][ T8402] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.3847: Invalid block bitmap block 0 in block_group 0 [ 239.835374][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 239.842248][ T8402] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 239.851596][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 239.858211][ T8402] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.3847: attempt to clear invalid blocks 983261 len 1 [ 239.871608][ T347] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 239.884131][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 239.890789][ T8402] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3847: invalid indirect mapped block 2683928664 (level 0) [ 239.905266][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 239.911879][ T8402] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.3847: Invalid inode table block 0 in block_group 0 [ 239.924994][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 239.931532][ T8402] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 239.941521][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 239.948611][ T8402] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 239.957546][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 239.964074][ T8402] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.3847: Invalid inode table block 0 in block_group 0 [ 239.977170][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 239.984207][ T8402] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 239.994125][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 240.000981][ T8402] EXT4-fs error (device loop4): ext4_truncate:4317: inode #13: comm syz.4.3847: mark_inode_dirty error [ 240.012633][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 240.019173][ T8402] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 240.020581][ T306] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 240.036756][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 240.049152][ T8402] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.3847: Invalid inode table block 0 in block_group 0 [ 240.062726][ T8402] EXT4-fs (loop4): Remounting filesystem read-only [ 240.069782][ T8402] EXT4-fs (loop4): 1 truncate cleaned up [ 240.075789][ T8402] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,. Quota mode: none. [ 240.234169][ T347] usb 4-1: not running at top speed; connect to a high speed hub [ 240.330321][ T347] usb 4-1: config 8 has an invalid interface number: 247 but max is 0 [ 240.338528][ T347] usb 4-1: config 8 has no interface number 0 [ 240.344705][ T347] usb 4-1: config 8 interface 247 altsetting 54 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 240.355955][ T347] usb 4-1: config 8 interface 247 altsetting 54 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 240.367051][ T56] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 240.374755][ T347] usb 4-1: config 8 interface 247 altsetting 54 has an invalid endpoint descriptor of length 2, skipping [ 240.386027][ T347] usb 4-1: config 8 interface 247 altsetting 54 has an invalid endpoint with address 0x80, skipping [ 240.396830][ T347] usb 4-1: config 8 interface 247 altsetting 54 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 240.408035][ T347] usb 4-1: config 8 interface 247 altsetting 54 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.418063][ T347] usb 4-1: config 8 interface 247 altsetting 54 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 240.431352][ T347] usb 4-1: config 8 interface 247 has no altsetting 0 [ 240.469233][ T306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.490598][ T305] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 240.554767][ T306] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 240.565386][ T306] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 22, changing to 8 [ 240.597546][ T340] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 240.640351][ T347] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 6.6d [ 240.649442][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.657544][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 240.662775][ T347] usb 4-1: Product: syz [ 240.666934][ T347] usb 4-1: Manufacturer: syz [ 240.671516][ T347] usb 4-1: SerialNumber: syz [ 240.693812][ T8379] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 240.747247][ T306] usb 1-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice= 0.40 [ 240.756403][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.764681][ T306] usb 1-1: Product: syz [ 240.768959][ T306] usb 1-1: Manufacturer: syz [ 240.773584][ T306] usb 1-1: SerialNumber: syz [ 240.800679][ T56] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.875600][ T305] usb 5-1: config index 0 descriptor too short (expected 15561, got 100) [ 240.884100][ T305] usb 5-1: config 192 has too many interfaces: 162, using maximum allowed: 32 [ 240.893066][ T305] usb 5-1: config 192 contains an unexpected descriptor of type 0x1, skipping [ 240.901990][ T305] usb 5-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 240.912317][ T305] usb 5-1: config 192 has 0 interfaces, different from the descriptor's value: 162 [ 240.971974][ T56] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 240.981102][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.989315][ T56] usb 2-1: Product: syz [ 240.993641][ T56] usb 2-1: Manufacturer: syz [ 240.998252][ T56] usb 2-1: SerialNumber: syz [ 241.003743][ T56] usb 2-1: config 0 descriptor?? [ 241.016465][ T340] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 241.028581][ T347] usb 4-1: USB disconnect, device number 101 [ 241.036727][ T340] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 241.048338][ T56] usb 2-1: bad CDC descriptors [ 241.053334][ T56] usb 2-1: unsupported MDLM descriptors [ 241.089791][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.098969][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.107047][ T305] usb 5-1: Product: syz [ 241.112315][ T305] usb 5-1: Manufacturer: syz [ 241.117308][ T305] usb 5-1: SerialNumber: syz [ 241.123650][ T306] usb 1-1: USB disconnect, device number 101 [ 241.239024][ T340] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 241.248189][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.256238][ T340] usb 3-1: Product: syz [ 241.260470][ T340] usb 3-1: Manufacturer: syz [ 241.265089][ T340] usb 3-1: SerialNumber: syz [ 241.272934][ T56] usb 2-1: USB disconnect, device number 104 [ 241.346489][ T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 241.421376][ T305] usb 5-1: USB disconnect, device number 102 [ 241.608605][ T8449] loop3: detected capacity change from 0 to 512 [ 241.639206][ T8449] EXT4-fs (loop3): 1 orphan inode deleted [ 241.645596][ T8449] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 241.670351][ T340] usb 3-1: Can't get UAC3 power state for id 10 [ 241.762816][ T340] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 241.772523][ T340] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 241.861239][ T340] usb 3-1: USB disconnect, device number 99 [ 241.876682][ T8483] loop1: detected capacity change from 0 to 512 [ 241.943642][ T8483] EXT4-fs (loop1): 1 orphan inode deleted [ 241.949548][ T8483] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 242.028095][ T8481] loop3: detected capacity change from 0 to 40427 [ 242.048275][ T8488] loop1: detected capacity change from 0 to 1024 [ 242.087081][ T8481] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 242.096679][ T8481] F2FS-fs (loop3): invalid crc value [ 242.105180][ T8481] F2FS-fs (loop3): invalid crc value [ 242.112563][ T8481] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 242.119601][ T305] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 242.142481][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.158517][ T8488] EXT4-fs (loop1): Ignoring removed orlov option [ 242.164927][ T8488] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 242.164927][ T8488] [ 242.233194][ T422] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 242.299437][ T8490] loop2: detected capacity change from 0 to 40427 [ 242.318684][ T8490] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 242.326542][ T8490] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 242.339079][ T8490] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 242.405188][ T305] usb 1-1: Using ep0 maxpacket: 8 [ 242.500417][ T340] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 242.532586][ T305] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 242.682165][ T347] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 242.703553][ T56] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 242.714405][ T305] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 242.723556][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.731706][ T305] usb 1-1: Product: syz [ 242.736019][ T305] usb 1-1: Manufacturer: syz [ 242.740629][ T305] usb 1-1: SerialNumber: syz [ 242.810511][ T422] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= e.90 [ 242.819630][ T422] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 242.827718][ T422] usb 5-1: Product: syz [ 242.831924][ T422] usb 5-1: Manufacturer: syz [ 242.836549][ T422] usb 5-1: SerialNumber: syz [ 242.875217][ T422] ums-onetouch 5-1:3.0: USB Mass Storage device detected [ 242.917551][ T340] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 242.929236][ T340] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 243.088489][ T347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.094939][ T422] usb 5-1: USB disconnect, device number 103 [ 243.109856][ T305] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 243.110062][ T340] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 243.125697][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.133904][ T340] usb 2-1: Product: syz [ 243.138088][ T340] usb 2-1: Manufacturer: syz [ 243.142053][ T305] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 243.142749][ T340] usb 2-1: SerialNumber: syz [ 243.166408][ T305] usb 1-1: USB disconnect, device number 102 [ 243.259520][ T347] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 243.268592][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.276812][ T347] usb 3-1: Product: syz [ 243.281091][ T56] usb 4-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 243.290361][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.298437][ T347] usb 3-1: Manufacturer: syz [ 243.303082][ T347] usb 3-1: SerialNumber: syz [ 243.307978][ T56] usb 4-1: Product: syz [ 243.312246][ T56] usb 4-1: Manufacturer: syz [ 243.317211][ T347] usb 3-1: config 0 descriptor?? [ 243.322252][ T56] usb 4-1: SerialNumber: syz [ 243.356121][ T347] dm9601: probe of 3-1:0.0 failed with error -22 [ 243.410121][ T411] udevd[411]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 243.575338][ T305] usb 3-1: USB disconnect, device number 100 [ 243.601609][ T340] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 243.629367][ T340] usb 2-1: USB disconnect, device number 105 [ 243.729882][ T56] usb 4-1: Can't get UAC3 power state for id 10 [ 243.794015][ T56] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 243.800418][ T56] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 243.813579][ T56] usb 4-1: USB disconnect, device number 102 [ 243.900887][ T422] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 243.966200][ T8518] loop1: detected capacity change from 0 to 512 [ 244.011901][ T8518] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3901: Invalid block bitmap block 0 in block_group 0 [ 244.025931][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.027287][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.033831][ T8518] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 244.057435][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.064282][ T8518] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.3901: attempt to clear invalid blocks 983261 len 1 [ 244.077991][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.084596][ T8518] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3901: invalid indirect mapped block 2683928664 (level 0) [ 244.098854][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.105430][ T8518] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.3901: Invalid inode table block 0 in block_group 0 [ 244.118275][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.124912][ T8518] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 244.137877][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.144427][ T8518] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 244.166830][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.173757][ T8518] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.3901: Invalid inode table block 0 in block_group 0 [ 244.192544][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.199105][ T8518] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 244.208915][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.216355][ T8518] EXT4-fs error (device loop1): ext4_truncate:4317: inode #13: comm syz.1.3901: mark_inode_dirty error [ 244.232441][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.238986][ T8518] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 244.249473][ T305] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 244.257548][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.264277][ T8518] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.3901: Invalid inode table block 0 in block_group 0 [ 244.282697][ T8518] EXT4-fs (loop1): Remounting filesystem read-only [ 244.289489][ T8518] EXT4-fs (loop1): 1 truncate cleaned up [ 244.295269][ T8518] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,. Quota mode: none. [ 244.312197][ T422] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 244.335347][ T422] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 244.398818][ T8541] loop1: detected capacity change from 0 to 512 [ 244.439035][ T8541] EXT4-fs (loop1): Ignoring removed orlov option [ 244.452289][ T8541] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 244.462618][ T8541] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 244.473180][ T8541] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 244.483945][ T8541] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 244.493884][ T8541] EXT4-fs (loop1): failed to initialize system zone (-117) [ 244.501310][ T8541] EXT4-fs (loop1): mount failed [ 244.510418][ T422] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 244.519666][ T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.527967][ T422] usb 1-1: Product: syz [ 244.532379][ T422] usb 1-1: Manufacturer: syz [ 244.537020][ T422] usb 1-1: SerialNumber: syz [ 244.542463][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 244.692183][ T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.702366][ T305] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 244.713446][ T305] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.723110][ T305] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 244.873779][ T39] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 244.895205][ T305] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.904315][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.912469][ T305] usb 5-1: Product: syz [ 244.916803][ T305] usb 5-1: Manufacturer: syz [ 244.921400][ T305] usb 5-1: SerialNumber: syz [ 244.970047][ T422] usb 1-1: Can't get UAC3 power state for id 10 [ 245.055518][ T422] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 245.065126][ T422] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 245.092790][ T422] usb 1-1: USB disconnect, device number 103 [ 245.196103][ T8560] loop3: detected capacity change from 0 to 512 [ 245.272221][ T8560] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3922: Invalid block bitmap block 0 in block_group 0 [ 245.286026][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.293201][ T8560] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 245.302326][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.308975][ T8560] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.3922: attempt to clear invalid blocks 983261 len 1 [ 245.313749][ T305] usb 5-1: USB disconnect, device number 104 [ 245.324821][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.335037][ T8560] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3922: invalid indirect mapped block 2683928664 (level 0) [ 245.351889][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.358631][ T8560] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.3922: Invalid inode table block 0 in block_group 0 [ 245.371897][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.378778][ T8560] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 245.388612][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.402708][ T8560] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 245.413510][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.420211][ T8560] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.3922: Invalid inode table block 0 in block_group 0 [ 245.430152][ T39] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 245.434233][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.448656][ T8560] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 245.453954][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.468113][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.476488][ T8560] EXT4-fs error (device loop3): ext4_truncate:4317: inode #13: comm syz.3.3922: mark_inode_dirty error [ 245.488700][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.495741][ T8560] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 245.503261][ T39] usb 3-1: Product: syz [ 245.505804][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.508846][ T39] usb 3-1: Manufacturer: syz [ 245.516465][ T8560] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.3922: Invalid inode table block 0 in block_group 0 [ 245.524458][ T39] usb 3-1: SerialNumber: syz [ 245.534476][ T8560] EXT4-fs (loop3): Remounting filesystem read-only [ 245.547320][ T340] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 245.555758][ T8560] EXT4-fs (loop3): 1 truncate cleaned up [ 245.561762][ T8560] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,. Quota mode: none. [ 245.683075][ T8579] loop3: detected capacity change from 0 to 256 [ 245.710545][ T8579] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0x1119abd0 [ 245.719007][ T8579] exFAT-fs (loop3): Invalid exboot-signature(sector = 5): 0x1119abd0 [ 245.727249][ T8579] exFAT-fs (loop3): Invalid exboot-signature(sector = 6): 0x00000000 [ 245.735482][ T8579] exFAT-fs (loop3): Invalid exboot-signature(sector = 7): 0x00000000 [ 245.743794][ T8579] exFAT-fs (loop3): Invalid exboot-signature(sector = 8): 0x00000000 [ 245.752131][ T8579] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e) [ 245.762732][ T8579] exFAT-fs (loop3): invalid boot region [ 245.768311][ T8579] exFAT-fs (loop3): failed to recognize exfat type [ 245.896262][ T8587] loop3: detected capacity change from 0 to 512 [ 245.910880][ T340] usb 2-1: not running at top speed; connect to a high speed hub [ 245.934882][ T8587] EXT4-fs (loop3): 1 truncate cleaned up [ 245.940746][ T8587] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,quota,,errors=continue. Quota mode: writeback. [ 246.004860][ T39] usb 3-1: USB disconnect, device number 101 [ 246.007128][ T340] usb 2-1: config 3 has an invalid interface number: 199 but max is 0 [ 246.021256][ T340] usb 2-1: config 3 has no interface number 0 [ 246.021470][ T30] audit: type=1326 audit(2000524580.104:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.3.3936" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3870327019 code=0x0 [ 246.027372][ T340] usb 2-1: config 3 interface 199 has no altsetting 0 [ 246.058613][ T422] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 246.071239][ T56] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 246.099462][ T8594] loop3: detected capacity change from 0 to 1024 [ 246.147386][ T8594] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 246.157622][ T8594] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 246.165659][ T8594] EXT4-fs (loop3): too many log groups per flexible block group [ 246.173524][ T8594] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 246.180518][ T8594] EXT4-fs (loop3): mount failed [ 246.199444][ T340] usb 2-1: New USB device found, idVendor=050d, idProduct=0004, bcdDevice=7c.d9 [ 246.208540][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.216803][ T340] usb 2-1: Product: syz [ 246.221023][ T340] usb 2-1: Manufacturer: syz [ 246.225649][ T340] usb 2-1: SerialNumber: syz [ 246.338424][ T56] usb 5-1: Using ep0 maxpacket: 16 [ 246.445469][ T422] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.455830][ T422] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 246.464851][ T422] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 246.477461][ T56] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 246.485868][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 246.496826][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 246.563309][ T340] cdc_subset: probe of 2-1:3.199 failed with error -22 [ 246.573434][ T340] usb 2-1: USB disconnect, device number 106 [ 246.584333][ T39] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 246.637874][ T422] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 246.646988][ T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.655217][ T422] usb 1-1: Product: syz [ 246.659440][ T422] usb 1-1: Manufacturer: syz [ 246.664048][ T422] usb 1-1: SerialNumber: syz [ 246.669905][ T56] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 246.679044][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.687212][ T56] usb 5-1: Product: syz [ 246.691452][ T307] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 246.699170][ T56] usb 5-1: Manufacturer: syz [ 246.703816][ T56] usb 5-1: SerialNumber: syz [ 246.709342][ T56] usb 5-1: config 0 descriptor?? [ 246.840946][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 246.974221][ T340] usb 5-1: USB disconnect, device number 105 [ 247.012054][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.065521][ T422] usb 1-1: Can't get UAC3 power state for id 10 [ 247.076190][ T307] usb 3-1: config 7 has an invalid descriptor of length 25, skipping remainder of the config [ 247.086488][ T307] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 247.096038][ T307] usb 3-1: config 7 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.097967][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.119678][ T39] usb 4-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.132821][ T39] usb 4-1: config 1 interface 0 has no altsetting 0 [ 247.161758][ T422] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 247.171696][ T422] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 247.200139][ T8611] loop1: detected capacity change from 0 to 128 [ 247.218916][ T422] usb 1-1: USB disconnect, device number 104 [ 247.247280][ T307] usb 3-1: New USB device found, idVendor=19d2, idProduct=0775, bcdDevice= 0.00 [ 247.256506][ T307] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 247.265099][ T307] usb 3-1: Product: syz [ 247.269510][ T307] usb 3-1: SerialNumber: syz [ 247.300846][ T39] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 247.310057][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.318123][ T39] usb 4-1: Product: syz [ 247.322353][ T39] usb 4-1: Manufacturer: syz [ 247.323815][ T307] usb 3-1: bad CDC descriptors [ 247.327589][ T39] usb 4-1: SerialNumber: syz [ 247.335679][ T515] udevd[515]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 247.440201][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 247.534535][ T30] audit: type=1326 audit(2000524581.516:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8622 comm="syz.4.3952" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d3b091019 code=0x0 [ 247.560831][ T340] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 247.568993][ T56] usb 3-1: USB disconnect, device number 102 [ 247.609861][ T347] usb 4-1: USB disconnect, device number 103 [ 247.782031][ T307] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 247.824651][ T340] usb 2-1: Using ep0 maxpacket: 16 [ 247.899450][ T344] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 247.995767][ T340] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.081424][ T340] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.091523][ T340] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.166938][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.183138][ T307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 248.205871][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.252754][ T307] cdc_acm 1-1:1.0: skipping garbage [ 248.258380][ T307] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 248.273875][ T340] usb 2-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 248.282975][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.291109][ T344] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 248.303842][ T340] usb 2-1: Product: syz [ 248.308128][ T340] usb 2-1: Manufacturer: syz [ 248.312745][ T340] usb 2-1: SerialNumber: syz [ 248.317391][ T344] usb 5-1: config 0 has no interfaces? [ 248.470605][ T307] usb 1-1: USB disconnect, device number 105 [ 248.487570][ T344] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 248.496627][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 248.504801][ T347] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 248.512498][ T344] usb 5-1: Product: syz [ 248.516757][ T344] usb 5-1: Manufacturer: syz [ 248.521520][ T344] usb 5-1: SerialNumber: syz [ 248.527043][ T344] usb 5-1: config 0 descriptor?? [ 248.541006][ T422] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 248.680062][ T340] usb 2-1: unit 3 not found! [ 248.725271][ T340] usb 2-1: USB disconnect, device number 107 [ 248.792100][ T39] usb 5-1: USB disconnect, device number 106 [ 248.904551][ T347] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 248.912921][ T347] usb 4-1: config 0 has no interface number 1 [ 248.919068][ T347] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 248.926098][ T422] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.929044][ T347] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 248.939919][ T422] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.969126][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 249.043630][ T347] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 249.060297][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.068438][ T347] usb 4-1: SerialNumber: syz [ 249.076872][ T347] usb 4-1: config 0 descriptor?? [ 249.129713][ T347] usb 4-1: Found UVC 0.00 device (0002:0000) [ 249.136130][ T422] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 249.142622][ T347] usb 4-1: No valid video chain found. [ 249.157514][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.172592][ T422] usb 3-1: Product: syz [ 249.176916][ T422] usb 3-1: Manufacturer: syz [ 249.189712][ T422] usb 3-1: SerialNumber: syz [ 249.210664][ T8665] futex_wake_op: syz.1.3973 tries to shift op by 144; fix this program [ 249.284897][ T30] audit: type=1400 audit(2000524583.153:272): avc: denied { ioctl } for pid=8678 comm="syz.1.3980" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.353275][ T347] usb 4-1: USB disconnect, device number 104 [ 249.578202][ T422] usb 3-1: 0:1 : does not exist [ 249.583161][ T422] usb 3-1: unit 4 not found! [ 249.587831][ T422] usb 3-1: unit 51 not found! [ 249.595271][ T422] usb 3-1: USB disconnect, device number 103 [ 249.685064][ T340] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 249.706514][ T344] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 249.813385][ T305] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 249.824773][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 249.963078][ T344] usb 5-1: Using ep0 maxpacket: 16 [ 250.025244][ T8705] loop2: detected capacity change from 0 to 16 [ 250.049434][ T8705] erofs: (device loop2): mounted with root inode @ nid 36. [ 250.080693][ T305] usb 1-1: Using ep0 maxpacket: 8 [ 250.091432][ T344] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 250.100185][ T344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.115386][ T340] usb 2-1: unable to get BOS descriptor or descriptor too short [ 250.123144][ T344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.198370][ T340] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.208524][ T340] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.230457][ T305] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 250.230616][ T347] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 250.238962][ T305] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 250.256419][ T305] usb 1-1: config 3 has no interface number 0 [ 250.262566][ T305] usb 1-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.275677][ T305] usb 1-1: config 3 interface 45 has no altsetting 0 [ 250.305442][ T344] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.314621][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.322661][ T344] usb 5-1: Product: syz [ 250.326910][ T344] usb 5-1: Manufacturer: syz [ 250.331526][ T344] usb 5-1: SerialNumber: syz [ 250.390885][ T340] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 250.399970][ T340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.408193][ T340] usb 2-1: Product: syz [ 250.412417][ T340] usb 2-1: Manufacturer: syz [ 250.417054][ T340] usb 2-1: SerialNumber: syz [ 250.476289][ T56] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 250.487170][ T305] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 250.496320][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.504372][ T305] usb 1-1: Product: syz [ 250.508616][ T305] usb 1-1: Manufacturer: syz [ 250.513220][ T305] usb 1-1: SerialNumber: syz [ 250.626120][ T347] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.634463][ T347] usb 4-1: config 179 has no interface number 0 [ 250.640786][ T347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 250.652053][ T347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 250.663408][ T347] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 250.673780][ T344] usb 5-1: 0:2 : does not exist [ 250.680292][ T347] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 250.699996][ T344] usb 5-1: USB disconnect, device number 107 [ 250.708192][ T347] usb 4-1: config 179 interface 65 has no altsetting 0 [ 250.715438][ T347] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 250.724564][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.733034][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 250.754383][ T8701] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 250.778039][ T347] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 250.839952][ T340] usb 2-1: MIDIStreaming interface descriptor not found [ 250.852670][ T340] usb 2-1: USB disconnect, device number 108 [ 250.926252][ T305] usb 1-1: USB disconnect, device number 106 [ 250.946800][ T56] usb 3-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 250.957227][ T56] usb 3-1: config 1 interface 0 altsetting 123 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 250.970688][ T56] usb 3-1: config 1 interface 0 has no altsetting 0 [ 250.999200][ T422] usb 4-1: USB disconnect, device number 105 [ 251.010980][ T422] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 251.139234][ T56] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.150111][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.151778][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 251.158138][ T56] usb 3-1: Product: syz [ 251.158154][ T56] usb 3-1: Manufacturer: syz [ 251.158169][ T56] usb 3-1: SerialNumber: syz [ 251.535114][ T56] cdc_ether 3-1:1.0: skipping garbage [ 251.540763][ T56] cdc_ether 3-1:1.0: skipping garbage [ 251.546244][ T347] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 251.553959][ T340] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 251.562478][ T56] cdc_ether 3-1:1.0: skipping garbage [ 251.569091][ T56] cdc_ether 3-1:1.0: skipping garbage [ 251.574847][ T56] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 251.583141][ T56] usb 3-1: USB disconnect, device number 104 [ 251.823517][ T347] usb 2-1: Using ep0 maxpacket: 16 [ 251.828742][ T344] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 251.994633][ T340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.004960][ T340] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 252.014170][ T340] usb 5-1: too many endpoints for config 1 interface 1 altsetting 0: 251, using maximum allowed: 30 [ 252.032301][ T340] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 252.051036][ T340] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.101538][ T344] usb 1-1: Using ep0 maxpacket: 32 [ 252.176882][ T347] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 252.196865][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.208477][ T347] usb 2-1: Product: syz [ 252.212685][ T347] usb 2-1: Manufacturer: syz [ 252.229082][ T347] usb 2-1: SerialNumber: syz [ 252.234074][ T344] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 252.243304][ T340] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 252.262314][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.270473][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.279683][ T347] usb 2-1: config 0 descriptor?? [ 252.284890][ T340] usb 5-1: Product: syz [ 252.289079][ T340] usb 5-1: Manufacturer: syz [ 252.293707][ T340] usb 5-1: SerialNumber: syz [ 252.300033][ T344] usb 1-1: config 0 descriptor?? [ 252.309742][ T340] usb 5-1: Interface #1 referenced by multiple IADs [ 252.326507][ T347] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 252.350481][ T344] rndis_host: probe of 1-1:0.0 failed with error -22 [ 252.387412][ T8809] loop2: detected capacity change from 0 to 2048 [ 252.524524][ T8779] loop3: detected capacity change from 0 to 262144 [ 252.552257][ T422] usb 2-1: USB disconnect, device number 109 [ 252.567079][ T305] usb 1-1: USB disconnect, device number 107 [ 252.589060][ T8779] F2FS-fs (loop3): Found nat_bits in checkpoint [ 252.627942][ T340] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 252.645831][ T340] usb 5-1: USB disconnect, device number 108 [ 252.663444][ T8779] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.711756][ T8825] loop2: detected capacity change from 0 to 512 [ 252.761162][ T8825] EXT4-fs (loop2): old and new quota format mixing [ 252.908503][ T8831] loop2: detected capacity change from 0 to 512 [ 252.935191][ T8831] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #17: comm syz.2.4054: corrupted in-inode xattr [ 252.947525][ T8831] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.4054: couldn't read orphan inode 17 (err -117) [ 252.959542][ T8831] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,quota,,errors=continue. Quota mode: writeback. [ 253.114811][ T8849] loop2: detected capacity change from 0 to 512 [ 253.151399][ T8849] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 253.354752][ T8879] loop2: detected capacity change from 0 to 512 [ 253.363243][ T340] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 253.382794][ T8879] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 253.427626][ T347] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 253.459420][ T305] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 253.833657][ T340] usb 4-1: unable to get BOS descriptor or descriptor too short [ 253.844365][ T305] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 253.854365][ T305] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 253.863675][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.865931][ T347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.909641][ T305] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 253.919218][ T340] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 253.936031][ T340] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 253.994003][ T306] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 254.122394][ T340] usb 4-1: New USB device found, idVendor=0582, idProduct=0103, bcdDevice= 0.40 [ 254.131484][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.136040][ T305] usb 2-1: USB disconnect, device number 110 [ 254.148000][ T340] usb 4-1: Product: syz [ 254.152205][ T340] usb 4-1: Manufacturer: syz [ 254.156862][ T340] usb 4-1: SerialNumber: syz [ 254.175772][ T347] usb 5-1: string descriptor 0 read error: -22 [ 254.182023][ T347] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=2c.ab [ 254.195221][ T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.262114][ T347] ums-cypress 5-1:1.0: USB Mass Storage device detected [ 254.432443][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 254.480202][ T422] usb 5-1: USB disconnect, device number 109 [ 254.486452][ T306] usb 3-1: not running at top speed; connect to a high speed hub [ 254.582108][ T306] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 254.582118][ T340] usb 4-1: Can't get UAC3 power state for id 10 [ 254.596595][ T306] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 254.605575][ T306] usb 3-1: config 17 has no interface number 0 [ 254.611763][ T306] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 254.622744][ T306] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 254.633553][ T306] usb 3-1: config 17 interface 8 has no altsetting 0 [ 254.646263][ T340] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 254.652979][ T340] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 254.664526][ T340] usb 4-1: USB disconnect, device number 106 [ 254.753136][ T347] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 254.828312][ T306] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 254.837852][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.846243][ T306] usb 3-1: Product: syz [ 254.855265][ T306] usb 3-1: Manufacturer: syz [ 254.855911][ T8943] tmpfs: Bad value for 'size' [ 254.861111][ T306] usb 3-1: SerialNumber: syz [ 254.892210][ T8905] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 254.928175][ T8953] incfs: Options parsing error. -22 [ 254.933469][ T8953] incfs: mount failed -22 [ 255.012436][ T8967] loop1: detected capacity change from 0 to 512 [ 255.046039][ T8967] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 255.066946][ T8977] futex_wake_op: syz.4.4124 tries to shift op by 32; fix this program [ 255.069342][ T8967] EXT4-fs (loop1): invalid journal inode [ 255.096428][ T8967] EXT4-fs (loop1): can't get journal size [ 255.102753][ T8967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 255.111175][ T8967] System zones: 1-12, 13-13 [ 255.119478][ T8967] EXT4-fs (loop1): 1 truncate cleaned up [ 255.125156][ T8967] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 255.137270][ T8982] loop4: detected capacity change from 0 to 128 [ 255.180879][ T347] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.192693][ T8982] FAT-fs (loop4): bogus number of reserved sectors [ 255.199256][ T8982] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 255.209339][ T8982] FAT-fs (loop4): Can't find a valid FAT filesystem [ 255.223635][ T347] usb 1-1: not running at top speed; connect to a high speed hub [ 255.246326][ T306] usb 3-1: selecting invalid altsetting 0 [ 255.257886][ T306] usb 3-1: USB disconnect, device number 105 [ 255.341407][ T39] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 255.399428][ T8988] loop1: detected capacity change from 0 to 40427 [ 255.448703][ T8988] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 255.458248][ T8988] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 255.468180][ T8988] F2FS-fs (loop1): invalid crc value [ 255.473798][ T8988] F2FS-fs (loop1): invalid crc value [ 255.479140][ T8988] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 255.491036][ T347] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 0.40 [ 255.493140][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 255.509104][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.525540][ T347] usb 1-1: Product: syz [ 255.529813][ T347] usb 1-1: Manufacturer: syz [ 255.534582][ T347] usb 1-1: SerialNumber: syz [ 255.672658][ T422] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 255.768988][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.821709][ T9048] loop1: detected capacity change from 0 to 1024 [ 255.844862][ T9048] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 255.854636][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.864854][ T39] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 255.874621][ T9048] EXT4-fs error (device loop1): ext4_get_journal_inode:5178: inode #32: comm syz.1.4159: iget: special inode unallocated [ 255.887663][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.898822][ T9048] EXT4-fs (loop1): no journal found [ 255.904068][ T9048] EXT4-fs (loop1): can't get journal size [ 255.910961][ T9048] EXT4-fs (loop1): filesystem is read-only [ 255.916806][ T9048] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 255.940086][ T422] usb 5-1: Using ep0 maxpacket: 8 [ 255.981872][ T347] usb 1-1: USB disconnect, device number 108 [ 256.029328][ T9049] loop2: detected capacity change from 0 to 40427 [ 256.048433][ T9049] F2FS-fs (loop2): invalid crc value [ 256.057289][ T9049] F2FS-fs (loop2): Found nat_bits in checkpoint [ 256.068382][ T39] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 256.077538][ T422] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.099014][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.107423][ T422] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 256.116647][ T39] usb 4-1: Product: syz [ 256.120867][ T39] usb 4-1: Manufacturer: syz [ 256.123376][ T9049] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_ino=3, xnid=3, run fsck to fix. [ 256.126123][ T422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.137592][ T9049] F2FS-fs (loop2): Failed to read root inode [ 256.153869][ T39] usb 4-1: SerialNumber: syz [ 256.165309][ T422] usb 5-1: config 0 descriptor?? [ 256.208909][ T422] usb 5-1: bad CDC descriptors [ 256.213900][ T422] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 256.222301][ T422] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 256.228950][ T422] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 256.254961][ T9052] loop1: detected capacity change from 0 to 40427 [ 256.271867][ T9052] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 256.279632][ T9052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 256.288288][ T9052] F2FS-fs (loop1): group quota file already specified [ 256.336789][ T9059] loop2: detected capacity change from 0 to 16 [ 256.343809][ T9057] loop1: detected capacity change from 0 to 16 [ 256.370800][ T9059] erofs: (device loop2): mounted with root inode @ nid 36. [ 256.396810][ T9057] erofs: (device loop1): mounted with root inode @ nid 36. [ 256.427874][ T9067] loop2: detected capacity change from 0 to 16 [ 256.429898][ T305] usb 5-1: USB disconnect, device number 110 [ 256.446582][ T9069] loop1: detected capacity change from 0 to 16 [ 256.484746][ T9069] erofs: (device loop1): mounted with root inode @ nid 36. [ 256.489496][ T9067] erofs: (device loop2): mounted with root inode @ nid 36. [ 256.504829][ T39] usb 4-1: USB disconnect, device number 107 [ 256.554186][ T30] audit: type=1326 audit(2000524589.953:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9070 comm="syz.1.4169" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8465fb2019 code=0x0 [ 256.638060][ T9075] loop1: detected capacity change from 0 to 256 [ 256.650926][ T9075] exfat: Deprecated parameter 'namecase' [ 256.656903][ T9075] exfat: Deprecated parameter 'utf8' [ 256.662238][ T9075] exfat: Deprecated parameter 'namecase' [ 256.668065][ T9075] exfat: Deprecated parameter 'namecase' [ 256.677760][ T422] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 256.678540][ T9075] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d) [ 256.736188][ T9073] loop2: detected capacity change from 0 to 40427 [ 256.753612][ T7298] udevd[7298]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 256.773011][ T9073] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 256.788189][ T9073] F2FS-fs (loop2): invalid crc value [ 256.794568][ T9073] F2FS-fs (loop2): invalid crc value [ 256.800624][ T9073] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 256.821534][ T9077] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.860763][ T9080] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 256.892437][ T9082] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.999948][ T9087] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 257.003776][ T9085] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.029797][ T9089] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.066343][ T9091] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.126900][ T422] usb 1-1: not running at top speed; connect to a high speed hub [ 257.171264][ T9105] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.203329][ T9110] erofs: (device loop4): mounted with root inode @ nid 36. [ 257.215361][ T422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 257.227202][ T9111] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.256527][ T9117] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.280686][ T422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 1023 [ 257.294710][ T422] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 257.309550][ T9107] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.325149][ T422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 257.372750][ T422] usb 1-1: language id specifier not provided by device, defaulting to English [ 257.438181][ T9121] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.928780][ T422] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 257.937875][ T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.967628][ T422] usb 1-1: SerialNumber: ࠖ [ 258.336057][ T422] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 258.356509][ T422] usb 1-1: USB disconnect, device number 109 [ 258.473568][ T9130] F2FS-fs (loop2): Found nat_bits in checkpoint [ 258.504201][ T9132] F2FS-fs (loop1): Found nat_bits in checkpoint [ 258.591876][ T9130] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 258.618849][ T9132] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 258.689019][ T9134] F2FS-fs (loop4): Found nat_bits in checkpoint [ 258.755083][ T9134] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 259.095742][ T9125] F2FS-fs (loop3): Found nat_bits in checkpoint [ 259.209596][ T9125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 259.534400][ T9166] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.749746][ T9172] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 260.001663][ T9182] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 260.330766][ T9153] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.411081][ T9205] loop3: p1 p2 p3 [ 260.448224][ T9153] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 260.468332][ T9207] loop4: p1 p2 p3 [ 260.542813][ T411] udevd[411]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 260.542838][ T515] udevd[515]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 260.556094][ T7294] udevd[7294]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 260.617850][ T7298] udevd[7298]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 260.634948][ T309] udevd[309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 260.646263][ T7294] udevd[7294]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 260.850741][ T9210] set_capacity_and_notify: 41 callbacks suppressed [ 260.850761][ T9210] loop3: detected capacity change from 0 to 32768 [ 260.876000][ T9214] loop1: detected capacity change from 0 to 32768 [ 260.901172][ T39] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 261.264672][ T344] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 261.296876][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.308828][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.360947][ T422] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 261.371643][ T347] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 261.478605][ T39] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 261.487738][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.495926][ T39] usb 5-1: Product: syz [ 261.500187][ T39] usb 5-1: Manufacturer: syz [ 261.504800][ T39] usb 5-1: SerialNumber: syz [ 261.596235][ T6] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 261.639154][ T347] usb 2-1: Using ep0 maxpacket: 32 [ 261.681740][ T344] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.691904][ T344] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.701084][ T344] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 261.777997][ T347] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.788142][ T347] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.788904][ T422] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.797728][ T347] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.817932][ T347] usb 2-1: config 1 interface 0 has no altsetting 0 [ 261.842224][ T422] usb 4-1: not running at top speed; connect to a high speed hub [ 261.885002][ T39] usb 5-1: 0:1 : does not exist [ 261.889894][ T39] usb 5-1: BAAD SPEAKER p_chmask mismatch [ 261.895973][ T39] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 261.906385][ T344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.907300][ T39] usb 5-1: USB disconnect, device number 111 [ 261.922173][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.930756][ T344] usb 3-1: Product: syz [ 261.934998][ T344] usb 3-1: Manufacturer: syz [ 261.938646][ T422] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.940372][ T344] usb 3-1: SerialNumber: syz [ 261.949842][ T422] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 4 [ 261.965332][ T422] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 261.976370][ T422] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 261.989738][ T422] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 262.003237][ T344] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 262.010152][ T344] cdc_ncm 3-1:1.0: bind() failure [ 262.023877][ T6] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 262.033118][ T347] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.042280][ T347] usb 2-1: New USB device strings: Mfr=96, Product=2, SerialNumber=3 [ 262.050451][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.058682][ T347] usb 2-1: Product: syz [ 262.062861][ T347] usb 2-1: Manufacturer: syz [ 262.067967][ T347] usb 2-1: SerialNumber: syz [ 262.120591][ T6] usb-storage 1-1:32.0: USB Mass Storage device detected [ 262.129183][ T6] usb-storage 1-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 262.163019][ T422] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 262.172193][ T422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.180522][ T422] usb 4-1: Product: syz [ 262.184968][ T422] usb 4-1: Manufacturer: syz [ 262.189688][ T422] usb 4-1: SerialNumber: syz [ 262.222851][ T6] usb 3-1: USB disconnect, device number 106 [ 262.310870][ T30] audit: type=1400 audit(2000524595.330:274): avc: denied { audit_read } for pid=9231 comm="syz.4.4228" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 262.344108][ T340] usb 1-1: USB disconnect, device number 110 [ 262.350290][ T347] cdc_mbim: probe of 2-1:1.0 failed with error -71 [ 262.365187][ T347] usb 2-1: USB disconnect, device number 111 [ 262.414220][ T9242] loop4: detected capacity change from 0 to 2048 [ 262.489599][ T30] audit: type=1400 audit(2000524595.499:275): avc: denied { create } for pid=9243 comm="syz.4.4234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.511424][ T9244] netlink: 'syz.4.4234': attribute type 1 has an invalid length. [ 262.519728][ T30] audit: type=1400 audit(2000524595.527:276): avc: denied { write } for pid=9243 comm="syz.4.4234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 262.561512][ T30] audit: type=1326 audit(2000524595.573:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.4.4236" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3b091019 code=0x7ffc0000 [ 262.580150][ T422] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 262.587310][ T30] audit: type=1326 audit(2000524595.573:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.4.4236" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5d3b091019 code=0x7ffc0000 [ 262.624490][ T30] audit: type=1326 audit(2000524595.573:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.4.4236" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3b091019 code=0x7ffc0000 [ 262.639756][ T422] usb 4-1: USB disconnect, device number 108 [ 262.666889][ T9252] netlink: 'syz.4.4238': attribute type 14 has an invalid length. [ 262.689580][ T30] audit: type=1326 audit(2000524595.573:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9247 comm="syz.4.4236" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3b091019 code=0x7ffc0000 [ 262.741953][ T9259] loop4: detected capacity change from 0 to 512 [ 262.773721][ T9261] x_tables: duplicate entry at hook 3 [ 262.788869][ T30] audit: type=1400 audit(2000524595.779:281): avc: denied { write } for pid=9262 comm="syz.2.4243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.857598][ T9269] loop4: detected capacity change from 0 to 512 [ 262.865040][ T30] audit: type=1400 audit(2000524595.854:282): avc: denied { checkpoint_restore } for pid=9270 comm="syz.2.4247" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 262.890628][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.038519][ T9294] syz.3.4259 (9294): /proc/9293/oom_adj is deprecated, please use /proc/9293/oom_score_adj instead. [ 263.073834][ T30] audit: type=1400 audit(2000524596.050:283): avc: denied { read write } for pid=9297 comm="syz.0.4261" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 263.307988][ T9341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4282'. [ 263.435553][ T9365] netlink: 'syz.0.4294': attribute type 3 has an invalid length. [ 263.455808][ T9365] netlink: 'syz.0.4294': attribute type 3 has an invalid length. [ 263.494172][ T9373] loop4: detected capacity change from 0 to 512 [ 263.505905][ T422] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 263.568260][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4302'. [ 263.629264][ T9393] netlink: 'syz.0.4307': attribute type 2 has an invalid length. [ 263.845237][ T9417] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 263.895142][ T422] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.926840][ T422] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.023345][ T422] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 264.044627][ T422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.070744][ T422] usb 3-1: SerialNumber: syz [ 264.120365][ T422] usb 3-1: 0:2 : does not exist [ 264.132914][ T9333] loop3: detected capacity change from 0 to 131072 [ 264.167864][ T9333] F2FS-fs (loop3): Found nat_bits in checkpoint [ 264.243891][ T9333] F2FS-fs (loop3): Mounted with checkpoint version = 1b41e955 [ 264.292530][ T9437] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.350633][ T340] usb 3-1: USB disconnect, device number 107 [ 264.362429][ T9439] netlink: 'syz.0.4330': attribute type 12 has an invalid length. [ 264.526697][ T9445] usb usb2: usbfs: interface 0 claimed by hub while 'syz.0.4333' sets config #5 [ 264.574875][ T9447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.582155][ T9447] IPv6: NLM_F_CREATE should be set when creating new route [ 264.589396][ T9447] IPv6: NLM_F_CREATE should be set when creating new route [ 264.674494][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4335'. [ 264.721113][ T9449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4335'. [ 264.762495][ T9449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4335'. [ 264.887955][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4339'. [ 264.922075][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4339'. [ 264.941907][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4339'. [ 265.060441][ T39] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 265.354898][ T9501] loop2: detected capacity change from 0 to 16 [ 265.424022][ T9501] erofs: (device loop2): mounted with root inode @ nid 36. [ 265.445398][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.468896][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.562248][ T9519] loop1: detected capacity change from 0 to 512 [ 265.638190][ T9405] loop4: detected capacity change from 0 to 262144 [ 265.659233][ T39] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.681667][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.706516][ T39] usb 4-1: Product: syz [ 265.710752][ T39] usb 4-1: Manufacturer: syz [ 265.745392][ T39] usb 4-1: SerialNumber: syz [ 265.760737][ T9529] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 265.846707][ T9541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4378'. [ 266.120505][ T39] usb 4-1: 0:2 : does not exist [ 266.136831][ T39] usb 4-1: USB disconnect, device number 109 [ 266.215238][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4395'. [ 266.268673][ T422] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 266.365465][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 266.534475][ T422] usb 1-1: Using ep0 maxpacket: 8 [ 266.605192][ T9614] loop3: detected capacity change from 0 to 256 [ 266.707095][ T422] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.751048][ T9636] netlink: 'syz.1.4425': attribute type 5 has an invalid length. [ 266.803757][ T422] usb 1-1: config 3 has an invalid interface number: 189 but max is 3 [ 266.819334][ T422] usb 1-1: config 3 has an invalid interface number: 178 but max is 3 [ 266.832664][ T9644] loop1: detected capacity change from 0 to 512 [ 266.850779][ T422] usb 1-1: config 3 has an invalid interface number: 199 but max is 3 [ 266.860726][ T422] usb 1-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 266.869873][ T422] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 266.891933][ T422] usb 1-1: config 3 has 3 interfaces, different from the descriptor's value: 4 [ 266.924140][ T422] usb 1-1: config 3 has no interface number 0 [ 266.930512][ T422] usb 1-1: config 3 has no interface number 1 [ 266.937804][ T9644] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4430: invalid indirect mapped block 4294967295 (level 1) [ 266.953050][ T422] usb 1-1: config 3 has no interface number 2 [ 266.959400][ T9644] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4430: invalid indirect mapped block 4294967295 (level 1) [ 266.973760][ T422] usb 1-1: config 3 interface 189 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 266.984721][ T422] usb 1-1: config 3 interface 189 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 266.995674][ T9644] EXT4-fs (loop1): 2 truncates cleaned up [ 267.006955][ T9644] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,discard,resuid=0x0000000000000000,noload,i_version,data_err=ignore,,errors=continue. Quota mode: writeback. [ 267.025057][ T422] usb 1-1: config 3 interface 178 altsetting 10 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 267.043130][ T422] usb 1-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 267.054453][ T422] usb 1-1: config 3 interface 178 altsetting 10 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 267.065680][ T422] usb 1-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 267.076601][ T422] usb 1-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 267.087531][ T422] usb 1-1: config 3 interface 178 altsetting 10 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 267.109078][ T422] usb 1-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 267.120271][ T422] usb 1-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 267.135623][ T422] usb 1-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 267.138135][ T9660] netlink: 'syz.3.4437': attribute type 16 has an invalid length. [ 267.147107][ T422] usb 1-1: config 3 interface 178 altsetting 10 has an invalid endpoint with address 0x0, skipping [ 267.187153][ T422] usb 1-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 267.188308][ T9660] netlink: 'syz.3.4437': attribute type 17 has an invalid length. [ 267.204485][ T422] usb 1-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 267.227457][ T422] usb 1-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 267.260191][ T422] usb 1-1: config 3 interface 199 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 267.260288][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.294517][ T422] usb 1-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 267.310935][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.326933][ T422] usb 1-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 267.354831][ T422] usb 1-1: config 3 interface 199 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 267.368757][ T9676] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 267.378777][ T422] usb 1-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 267.390215][ T9676] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 267.399871][ T422] usb 1-1: config 3 interface 199 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 267.434098][ T422] usb 1-1: config 3 interface 178 has no altsetting 0 [ 267.449101][ T422] usb 1-1: config 3 interface 199 has no altsetting 0 [ 267.514430][ T9688] netlink: 'syz.1.4451': attribute type 46 has an invalid length. [ 267.647986][ T422] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=7e.0a [ 267.657090][ T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.680339][ T422] usb 1-1: Product: syz [ 267.684567][ T422] usb 1-1: Manufacturer: syz [ 267.689194][ T422] usb 1-1: SerialNumber: syz [ 267.713084][ T9712] loop1: detected capacity change from 0 to 256 [ 267.724504][ T9710] loop3: detected capacity change from 0 to 1024 [ 267.754895][ T9555] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 267.762415][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 267.762431][ T30] audit: type=1400 audit(2000524600.437:323): avc: denied { mounton } for pid=9709 comm="syz.3.4463" path="/751/file0" dev="tmpfs" ino=3875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 267.792810][ T9710] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 267.811574][ T9710] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 267.824090][ T9712] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.843153][ T9712] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 267.852011][ T9710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 267.858804][ T9721] loop2: detected capacity change from 0 to 1024 [ 267.866050][ T9710] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.4463: Inode bitmap for bg 0 marked uninitialized [ 267.880169][ T9712] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x05c65c57, utbl_chksum : 0xe619d30d) [ 267.901046][ T9710] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 267.918161][ T30] audit: type=1400 audit(2000524600.586:324): avc: denied { rename } for pid=9711 comm="syz.1.4462" name="file0" dev="loop1" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.940937][ T30] audit: type=1400 audit(2000524600.605:325): avc: denied { add_name } for pid=9711 comm="syz.1.4462" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.994775][ T9721] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.4467: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 268.022532][ T9721] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.4467: couldn't read orphan inode 11 (err -117) [ 268.035172][ T9721] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.105807][ T9721] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.4467: Invalid block bitmap block 0 in block_group 0 [ 268.122348][ T9721] Quota error (device loop2): write_blk: dquota write failed [ 268.130371][ T9721] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 268.140685][ T9721] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.4467: Failed to acquire dquot type 0 [ 268.172214][ T422] usb 1-1: USB disconnect, device number 111 [ 268.201372][ T9721] syz.2.4467 (9721) used greatest stack depth: 21384 bytes left [ 268.337093][ T30] audit: type=1400 audit(2000524600.970:326): avc: denied { write } for pid=9737 comm="syz.2.4475" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 268.360044][ T9738] binfmt_misc: register: failed to install interpreter file ./file2 [ 268.493576][ T30] audit: type=1326 audit(2000524601.120:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.4482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 268.536250][ T30] audit: type=1326 audit(2000524601.138:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.4482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 268.571981][ T30] audit: type=1326 audit(2000524601.138:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.4482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 268.629253][ T30] audit: type=1326 audit(2000524601.138:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.4482" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 268.907823][ T9804] loop3: detected capacity change from 0 to 256 [ 268.986166][ T9632] loop4: detected capacity change from 0 to 262144 [ 269.064987][ T9632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 269.138634][ T9840] __nla_validate_parse: 3 callbacks suppressed [ 269.138653][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4524'. [ 269.172940][ T9844] xt_policy: neither incoming nor outgoing policy selected [ 269.220498][ T9850] xt_l2tp: v2 sid > 0xffff: 67108864 [ 269.237707][ T9632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 269.242511][ T9853] ipt_REJECT: ECHOREPLY no longer supported. [ 269.357436][ T9870] netlink: 'syz.3.4539': attribute type 5 has an invalid length. [ 269.386531][ T9870] device ip6erspan1 entered promiscuous mode [ 269.431834][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.460588][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4544'. [ 269.476430][ T9877] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 269.553363][ T9877] syz.0.4544 (9877) used greatest stack depth: 19680 bytes left [ 269.695787][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'. [ 269.747675][ T9917] loop1: detected capacity change from 0 to 256 [ 269.777794][ T9920] IPv6: Can't replace route, no match found [ 269.828014][ T9922] device vlan1 entered promiscuous mode [ 270.061877][ T9957] loop1: detected capacity change from 0 to 256 [ 270.133471][ T9965] mip6: mip6_destopt_init_state: spi is not 0: 4286578688 [ 270.180333][ T9971] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4589'. [ 270.189891][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4589'. [ 270.240900][ T9976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.248192][ T9976] IPv6: NLM_F_CREATE should be set when creating new route [ 270.255454][ T9976] IPv6: NLM_F_CREATE should be set when creating new route [ 270.325169][ T9981] loop4: detected capacity change from 0 to 4096 [ 270.391961][ T9981] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 270.417353][ T9981] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 270.441544][ T9981] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 270.441544][ T9981] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 270.441544][ T9981] [ 270.503643][ T9981] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 270.517616][ T9981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a80e80a8, mo2=0002] [ 270.526508][ T9981] System zones: 0-5 [ 270.540052][ T9981] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,grpjquota=./file0,inlinecrypt,jqfmt=vfsv1,nolazytime,nouser_xattr,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000007,. Quota mode: writeback. [ 270.581873][T10023] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 270.637908][T10032] netlink: 'syz.0.4618': attribute type 3 has an invalid length. [ 270.652572][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4618'. [ 270.667908][T10037] netlink: 'syz.1.4621': attribute type 5 has an invalid length. [ 271.044740][T10096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.220145][T10122] x_tables: duplicate underflow at hook 3 [ 271.296117][T10119] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,block_validity,noload,nombcache,inode_readahead_blks=0x0000000000000200,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: none. [ 271.320596][T10119] ext4 filesystem being mounted at /1021/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.418058][T10148] xt_TCPMSS: Only works on TCP SYN packets [ 271.670392][T10188] FAT-fs (loop4): Directory bread(block 64) failed [ 271.701890][T10188] FAT-fs (loop4): Directory bread(block 65) failed [ 271.721769][T10188] FAT-fs (loop4): Directory bread(block 66) failed [ 271.736880][T10188] FAT-fs (loop4): Directory bread(block 67) failed [ 271.744460][T10216] xt_TCPMSS: Only works on TCP SYN packets [ 271.753808][T10188] FAT-fs (loop4): Directory bread(block 68) failed [ 271.760516][T10188] FAT-fs (loop4): Directory bread(block 69) failed [ 271.768186][T10188] FAT-fs (loop4): Directory bread(block 70) failed [ 271.774765][T10188] FAT-fs (loop4): Directory bread(block 71) failed [ 271.797386][T10188] FAT-fs (loop4): Directory bread(block 72) failed [ 271.815712][T10222] netlink: 'syz.2.4710': attribute type 16 has an invalid length. [ 271.829117][T10188] FAT-fs (loop4): Directory bread(block 73) failed [ 271.861184][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4709'. [ 271.958853][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4717'. [ 272.057138][T10260] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4728'. [ 272.116300][T10270] mip6: mip6_rthdr_init_state: spi is not 0: 335544320 [ 272.166420][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4736'. [ 272.215119][T10287] set_capacity_and_notify: 3 callbacks suppressed [ 272.215136][T10287] loop2: detected capacity change from 0 to 256 [ 272.299080][ T347] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 272.323196][T10287] FAT-fs (loop2): Directory bread(block 64) failed [ 272.337763][T10287] FAT-fs (loop2): Directory bread(block 65) failed [ 272.351849][T10287] FAT-fs (loop2): Directory bread(block 66) failed [ 272.370592][T10287] FAT-fs (loop2): Directory bread(block 67) failed [ 272.377833][T10287] FAT-fs (loop2): Directory bread(block 68) failed [ 272.384463][T10287] FAT-fs (loop2): Directory bread(block 69) failed [ 272.399246][T10287] FAT-fs (loop2): Directory bread(block 70) failed [ 272.418805][T10287] FAT-fs (loop2): Directory bread(block 71) failed [ 272.425437][T10287] FAT-fs (loop2): Directory bread(block 72) failed [ 272.439998][T10287] FAT-fs (loop2): Directory bread(block 73) failed [ 272.450660][T10322] binder: 10321:10322 ioctl c018620c 200000000240 returned -22 [ 272.575900][T10336] netlink: 'syz.1.4765': attribute type 7 has an invalid length. [ 272.584326][ T347] usb 1-1: Using ep0 maxpacket: 32 [ 272.601857][T10336] netlink: 'syz.1.4765': attribute type 8 has an invalid length. [ 272.726838][ T347] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 272.741233][ T347] usb 1-1: config 2 has no interface number 0 [ 272.769255][ T347] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 272.810443][ T347] usb 1-1: config 2 interface 88 has no altsetting 0 [ 272.837266][T10384] xt_TCPMSS: Only works on TCP SYN packets [ 272.870515][T10388] netlink: 'syz.3.4791': attribute type 1 has an invalid length. [ 272.890689][T10388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.994437][ T347] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 273.008803][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 273.018141][ T347] usb 1-1: Product: syz [ 273.022382][ T347] usb 1-1: Manufacturer: syz [ 273.027240][ T347] usb 1-1: SerialNumber: syz [ 273.079583][T10251] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.112017][T10417] loop3: detected capacity change from 0 to 8192 [ 273.156554][T10417] loop3: p1 < > p2 p4 < p5 > [ 273.168158][T10417] loop3: partition table partially beyond EOD, truncated [ 273.176604][T10417] loop3: p1 start 134217728 is beyond EOD, truncated [ 273.189411][T10417] loop3: p2 size 591360 extends beyond EOD, truncated [ 273.197729][T10417] loop3: p5 size 591360 extends beyond EOD, truncated [ 273.218623][ T422] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 273.303844][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 273.303863][ T30] audit: type=1400 audit(2000524605.609:383): avc: denied { nlmsg_read } for pid=10447 comm="syz.1.4822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 273.333379][T10251] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.373539][ T515] udevd[515]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 273.384920][ T411] udevd[411]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 273.408074][ T30] audit: type=1400 audit(2000524605.609:384): avc: denied { audit_write } for pid=10447 comm="syz.1.4822" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 273.430678][ T30] audit: type=1107 audit(2000524605.609:385): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 273.569308][ T30] audit: type=1326 audit(2000524605.861:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.3.4841" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 273.615450][ T30] audit: type=1326 audit(2000524605.861:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.3.4841" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 273.642288][ T422] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 273.651477][ T347] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 273.674174][ T422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.677466][ T347] asix: probe of 1-1:2.88 failed with error -71 [ 273.696581][ T422] usb 5-1: config 0 descriptor?? [ 273.717872][ T30] audit: type=1326 audit(2000524605.861:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.3.4841" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 273.723553][ T347] usb 1-1: USB disconnect, device number 112 [ 273.751798][ T30] audit: type=1326 audit(2000524605.861:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.3.4841" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 273.784484][T10507] loop2: detected capacity change from 0 to 512 [ 273.791347][ T422] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 273.799851][ T422] usb 5-1: Detected FT-X [ 273.804262][ T30] audit: type=1326 audit(2000524605.899:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.3.4841" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 273.836151][ T30] audit: type=1326 audit(2000524605.899:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.3.4841" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 273.861433][ T30] audit: type=1326 audit(2000524605.899:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.3.4841" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3870327019 code=0x7ffc0000 [ 273.896460][T10507] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 273.907853][T10507] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 273.918237][T10507] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 273.928059][T10507] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 273.940340][T10517] netlink: 'syz.3.4855': attribute type 15 has an invalid length. [ 273.948827][T10507] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 273.957679][T10507] EXT4-fs (loop2): orphan cleanup on readonly fs [ 273.965077][T10507] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4850: bg 0: block 34: padding at end of block bitmap is not set [ 273.979791][T10507] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.4850: Failed to acquire dquot type 1 [ 273.991865][T10507] EXT4-fs (loop2): 1 truncate cleaned up [ 274.004795][T10507] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,bsddf,mb_optimize_scan=0x0000000000000000,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,sysvgroups,,errors=continue. Quota mode: writeback. [ 274.102483][T10532] xt_CT: No such helper "syz0" [ 274.211021][T10554] : renamed from bond_slave_1 [ 274.281462][ T422] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 274.306356][T10566] netlink: 'syz.0.4879': attribute type 3 has an invalid length. [ 274.309382][ T422] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 274.337032][ T422] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 274.369081][ T422] usb 5-1: USB disconnect, device number 112 [ 274.404749][ T422] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 274.423739][ T422] ftdi_sio 5-1:0.0: device disconnected [ 274.503666][ T347] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 274.556697][T10605] netlink: 'syz.0.4898': attribute type 5 has an invalid length. [ 274.691335][T10632] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 274.726149][ T305] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 274.898485][ T347] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.922715][ T347] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.982743][ T305] usb 4-1: Using ep0 maxpacket: 8 [ 275.008088][T10687] validate_nla: 1 callbacks suppressed [ 275.008108][T10687] netlink: 'syz.0.4938': attribute type 8 has an invalid length. [ 275.036311][ T347] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.046931][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.068301][ T347] usb 3-1: SerialNumber: syz [ 275.111089][ T305] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 275.119405][ T305] usb 4-1: config 179 has no interface number 0 [ 275.133324][ T305] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 275.145606][ T305] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 275.157282][ T305] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.168896][ T305] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 275.216774][ T305] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 275.231450][ T305] usb 4-1: config 179 interface 65 has no altsetting 0 [ 275.243429][ T305] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 275.253313][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.320352][T10730] xt_bpf: check failed: parse error [ 275.327293][ T305] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input19 [ 275.392356][ T347] usb 3-1: 0:2 : does not exist [ 275.403916][ T347] usb 3-1: USB disconnect, device number 108 [ 275.545395][T10764] netlink: 'syz.0.4976': attribute type 12 has an invalid length. [ 275.564640][ T39] usb 4-1: USB disconnect, device number 110 [ 275.572897][ T39] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 275.618447][T10774] __nla_validate_parse: 3 callbacks suppressed [ 275.618467][T10774] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4981'. [ 275.638520][T10776] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.647117][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 275.658937][T10776] IPv6: Can't replace route, no match found [ 275.735347][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 275.746408][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 275.775431][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 275.784453][T10785] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 275.850945][T10805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10805 comm=syz.4.4998 [ 275.863822][T10805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=10805 comm=syz.4.4998 [ 275.868890][T10807] loop1: detected capacity change from 0 to 512 [ 275.971294][T10807] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 275.984664][T10807] ext4 filesystem being mounted at /966/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.012542][T10823] loop4: detected capacity change from 0 to 2048 [ 276.069009][T10823] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.093402][T10823] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 276.132123][ T39] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 276.232964][T10855] netlink: 'syz.2.5019': attribute type 1 has an invalid length. [ 276.253784][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5020'. [ 276.394110][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 276.447344][T10883] netlink: 'syz.2.5034': attribute type 3 has an invalid length. [ 276.487251][T10893] loop1: detected capacity change from 0 to 1024 [ 276.522549][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.542997][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.553009][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.558854][T10893] EXT4-fs (loop1): Ignoring removed bh option [ 276.575941][T10893] EXT4-fs (loop1): Ignoring removed bh option [ 276.593730][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.623541][ T39] usb 1-1: config 0 descriptor?? [ 276.630022][T10893] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 276.661091][T10911] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5047'. [ 276.730146][ T39] hub 1-1:0.0: USB hub found [ 276.886418][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5060'. [ 276.960829][ T39] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 277.035282][T10960] netlink: 'syz.2.5071': attribute type 29 has an invalid length. [ 277.053925][T10960] netlink: 'syz.2.5071': attribute type 3 has an invalid length. [ 277.070942][T10960] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5071'. [ 277.167900][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5083'. [ 277.263728][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 277.269725][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 277.291799][T11001] netlink: 'syz.3.5091': attribute type 13 has an invalid length. [ 277.335718][ T39] usb 1-1: USB disconnect, device number 113 [ 277.448871][T11023] loop3: detected capacity change from 0 to 256 [ 277.506456][T11023] exfat: Deprecated parameter 'utf8' [ 277.531973][T11023] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 277.737464][T11061] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5121'. [ 277.817804][T11076] netlink: 'syz.2.5128': attribute type 15 has an invalid length. [ 277.974558][T11091] loop2: detected capacity change from 0 to 8192 [ 278.013383][T11103] loop1: detected capacity change from 0 to 256 [ 278.020748][T11091] loop2: p1 p2 p3 p4 [ 278.024951][T11091] loop2: p1 start 67108864 is beyond EOD, truncated [ 278.066739][T11091] loop2: p2 start 1896808451 is beyond EOD, truncated [ 278.092603][T11091] loop2: p3 start 150996224 is beyond EOD, truncated [ 278.099643][T11091] loop2: p4 size 2663388001 extends beyond EOD, truncated [ 278.248718][ T7294] udevd[7294]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 278.402192][T11105] loop4: detected capacity change from 0 to 40427 [ 278.427887][T11105] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 278.439127][T11105] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 278.479062][T11105] F2FS-fs (loop4): invalid crc value [ 278.502952][T11105] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 278.593849][T11105] F2FS-fs (loop4): Start checkpoint disabled! [ 278.607104][T11159] netlink: 'syz.3.5168': attribute type 3 has an invalid length. [ 278.640197][T11105] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 278.647292][T11105] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 278.671202][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 278.671219][ T30] audit: type=1400 audit(2000524610.631:423): avc: denied { ioctl } for pid=11167 comm="syz.0.5172" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 278.749723][ T30] audit: type=1400 audit(2000524610.715:424): avc: denied { create } for pid=11104 comm="syz.4.5140" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 278.787704][ T45] attempt to access beyond end of device [ 278.787704][ T45] loop4: rw=2049, want=45104, limit=40427 [ 279.026522][ T344] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 279.073533][ T30] audit: type=1400 audit(2000524611.015:425): avc: denied { read } for pid=11210 comm="syz.2.5194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.150579][ T30] audit: type=1326 audit(2000524611.080:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.2.5197" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e2457019 code=0x7ffc0000 [ 279.218768][ T30] audit: type=1326 audit(2000524611.080:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.2.5197" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e2457019 code=0x7ffc0000 [ 279.302529][ T30] audit: type=1326 audit(2000524611.108:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.2.5197" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e2457019 code=0x7ffc0000 [ 279.382082][ T30] audit: type=1326 audit(2000524611.108:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.2.5197" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e2457019 code=0x7ffc0000 [ 279.452865][ T30] audit: type=1326 audit(2000524611.108:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.2.5197" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f51e2457019 code=0x7ffc0000 [ 279.516225][ T30] audit: type=1326 audit(2000524611.108:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.2.5197" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e2457019 code=0x7ffc0000 [ 279.583025][ T30] audit: type=1326 audit(2000524611.108:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11219 comm="syz.2.5197" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e2457019 code=0x7ffc0000 [ 279.602056][ T344] usb 1-1: config 7 has an invalid interface number: 112 but max is 1 [ 279.644517][ T344] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 279.663656][T11211] loop4: detected capacity change from 0 to 40427 [ 279.676939][ T344] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 279.708129][T11211] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 279.719392][T11211] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 279.739126][ T344] usb 1-1: config 7 has no interface number 0 [ 279.746189][T11211] F2FS-fs (loop4): invalid crc value [ 279.751627][ T344] usb 1-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.751660][ T344] usb 1-1: config 7 interface 112 has no altsetting 0 [ 279.790753][T11267] tc_dump_action: action bad kind [ 279.805623][T11211] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 279.875356][T11278] xt_hashlimit: size too large, truncated to 1048576 [ 279.885923][T11211] F2FS-fs (loop4): Start checkpoint disabled! [ 279.901767][T11278] xt_hashlimit: max too large, truncated to 1048576 [ 279.914843][T11211] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 279.931280][T11211] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 280.008657][ T344] usb 1-1: string descriptor 0 read error: -22 [ 280.025727][ T344] usb 1-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 280.040364][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.104966][ T344] usb 1-1: Found UVC 0.00 device (046d:089b) [ 280.111983][ T344] usb 1-1: No valid video chain found. [ 280.271672][T11324] netlink: 'syz.3.5248': attribute type 4 has an invalid length. [ 280.322022][T11334] loop4: detected capacity change from 0 to 512 [ 280.350623][ T344] usb 1-1: USB disconnect, device number 114 [ 280.366853][T11334] EXT4-fs (loop4): Ignoring removed nobh option [ 280.413683][T11334] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 280.427545][T11334] ext4 filesystem being mounted at /1035/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.649819][T11398] loop2: detected capacity change from 0 to 512 [ 280.665100][T11398] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.060134][T11458] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 281.292942][T11496] xt_TCPMSS: Only works on TCP SYN packets [ 281.423650][T11517] loop1: detected capacity change from 0 to 512 [ 281.500722][T11517] EXT4-fs (loop1): orphan cleanup on readonly fs [ 281.516029][T11517] EXT4-fs (loop1): 1 orphan inode deleted [ 281.521904][T11517] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.365349][ C1] sched: RT throttling activated [ 283.423598][T11535] validate_nla: 1 callbacks suppressed [ 283.423618][T11535] netlink: 'syz.0.5354': attribute type 49 has an invalid length. [ 283.457783][T11538] netlink: 'syz.0.5355': attribute type 13 has an invalid length. [ 283.714811][T11396] loop3: detected capacity change from 0 to 131072 [ 283.733676][T11565] __nla_validate_parse: 8 callbacks suppressed [ 283.733696][T11565] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5367'. [ 283.749150][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5367'. [ 283.760113][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5367'. [ 283.770593][T11396] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 283.784828][T11396] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 283.829673][T11396] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 283.997494][T11583] kernel read not supported for file /policy (pid: 11583 comm: syz.1.5377) [ 284.025021][T11604] loop2: detected capacity change from 0 to 512 [ 284.111980][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 284.111998][ T30] audit: type=1400 audit(2000524615.719:477): avc: denied { getopt } for pid=11615 comm="syz.1.5390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 284.147888][T11604] EXT4-fs (loop2): Ignoring removed nobh option [ 284.154237][T11604] EXT4-fs (loop2): Ignoring removed orlov option [ 284.199415][T11604] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 284.239764][T11604] EXT4-fs (loop2): too many log groups per flexible block group [ 284.267054][T11604] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 284.274942][T11635] Zero length message leads to an empty skb [ 284.329467][T11604] EXT4-fs (loop2): mount failed [ 284.391755][ T30] audit: type=1326 audit(2000524615.981:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.1.5404" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8465fb2019 code=0x7ffc0000 [ 284.418257][T11651] netlink: 'syz.3.5407': attribute type 49 has an invalid length. [ 284.467758][T11655] netlink: 'syz.1.5409': attribute type 5 has an invalid length. [ 284.481006][ T30] audit: type=1326 audit(2000524616.018:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.1.5404" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8465fb2019 code=0x7ffc0000 [ 284.584362][ T30] audit: type=1326 audit(2000524616.018:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.1.5404" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8465fb2019 code=0x7ffc0000 [ 284.625780][T11672] xt_time: unknown flags 0xc [ 284.661765][T11680] device veth1_virt_wifi entered promiscuous mode [ 284.687154][ T30] audit: type=1326 audit(2000524616.018:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.1.5404" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f8465fb2019 code=0x7ffc0000 [ 284.731825][T11691] loop1: detected capacity change from 0 to 512 [ 284.761689][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5429'. [ 284.772444][ T30] audit: type=1326 audit(2000524616.018:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.1.5404" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8465fb2019 code=0x7ffc0000 [ 284.799580][T11699] overlayfs: missing 'lowerdir' [ 284.825257][ T30] audit: type=1326 audit(2000524616.018:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.1.5404" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8465fb2019 code=0x7ffc0000 [ 284.863330][T11691] EXT4-fs (loop1): Ignoring removed nobh option [ 284.869647][T11691] EXT4-fs (loop1): Ignoring removed orlov option [ 284.912315][T11691] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 284.929141][ T30] audit: type=1326 audit(2000524616.018:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.1.5404" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8465fb2019 code=0x7ffc0000 [ 284.988908][T11691] EXT4-fs (loop1): too many log groups per flexible block group [ 284.996722][T11691] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 285.005406][T11691] EXT4-fs (loop1): mount failed [ 285.010584][ T30] audit: type=1326 audit(2000524616.018:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11649 comm="syz.1.5404" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8465fb2019 code=0x7ffc0000 [ 285.341655][ T30] audit: type=1400 audit(2000524616.869:486): avc: denied { getopt } for pid=11768 comm="syz.1.5465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.429304][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5472'. [ 285.438309][T11783] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5472'. [ 285.448891][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5473'. [ 285.466861][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5472'. [ 285.497029][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5472'. [ 285.518568][T11789] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5475'. [ 286.700953][T11923] device gretap0 entered promiscuous mode [ 286.783418][T11929] ip_tables: iptables: counters copy to user failed while replacing table [ 286.886575][T11945] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 287.198931][T12002] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 287.282186][T12018] loop2: detected capacity change from 0 to 256 [ 287.315896][T12024] netlink: 'syz.4.5587': attribute type 3 has an invalid length. [ 287.319308][T12020] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.333047][T12018] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 287.367313][T12020] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 287.415865][T12032] netlink: 'syz.0.5594': attribute type 4 has an invalid length. [ 287.508581][T12042] netlink: 'syz.4.5597': attribute type 7 has an invalid length. [ 287.772528][T12102] xt_TPROXY: Can be used only with -p tcp or -p udp [ 288.346200][T12204] ip_tables: iptables: counters copy to user failed while replacing table [ 288.605488][T12238] ip_tables: iptables: counters copy to user failed while replacing table [ 288.636434][T12242] x_tables: duplicate underflow at hook 2 [ 288.721163][T12252] TCP: TCP_TX_DELAY enabled [ 288.841588][T12270] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 289.001759][T12278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.034672][T12280] ip_tables: iptables: counters copy to user failed while replacing table [ 289.137874][T12302] xt_CT: No such helper "snmp_trap" [ 289.222427][T12329] ip_tables: iptables: counters copy to user failed while replacing table [ 289.276232][T12343] __nla_validate_parse: 114 callbacks suppressed [ 289.276251][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5748'. [ 289.468264][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 289.468280][ T30] audit: type=1400 audit(2000524620.732:702): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.512782][ T30] audit: type=1400 audit(2000524620.751:703): avc: denied { read write } for pid=290 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.537958][T12401] xt_TCPMSS: Only works on TCP SYN packets [ 289.549143][ T30] audit: type=1400 audit(2000524620.751:704): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.595517][T12413] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.602823][T12413] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.623130][ T30] audit: type=1400 audit(2000524620.769:705): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.661292][T12413] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 289.681917][ T30] audit: type=1400 audit(2000524620.769:706): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.706802][ T30] audit: type=1400 audit(2000524620.807:707): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.711928][T12419] device gre1 entered promiscuous mode [ 289.736626][ T30] audit: type=1400 audit(2000524620.816:708): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.783031][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5791'. [ 289.811438][ T30] audit: type=1400 audit(2000524620.835:709): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.886329][ T30] audit: type=1400 audit(2000524620.844:710): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 289.924260][T12447] netlink: 'syz.1.5801': attribute type 1 has an invalid length. [ 289.947011][ T30] audit: type=1400 audit(2000524620.854:711): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 290.125253][T12486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5820'. [ 290.163815][T12496] netlink: 'syz.0.5824': attribute type 3 has an invalid length. [ 290.285552][T12523] xt_l2tp: wrong L2TP version: 0 [ 290.304536][T12527] netlink: 'syz.1.5840': attribute type 7 has an invalid length. [ 290.324199][T12527] netlink: 'syz.1.5840': attribute type 5 has an invalid length. [ 290.453223][T12557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.548058][T12575] tc_dump_action: action bad kind [ 290.584541][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5858'. [ 290.810908][T12643] netlink: 'syz.0.5897': attribute type 5 has an invalid length. [ 290.822744][T12643] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5897'. [ 290.928958][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5911'. [ 291.094801][T12717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.251293][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5949'. [ 291.375324][T12773] xt_limit: Overflow, try lower: 4/0 [ 291.397435][T12779] ================================================================== [ 291.405579][T12779] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 291.413787][T12779] Read of size 4 at addr ffff88812eabc470 by task syz.4.5965/12779 [ 291.421712][T12779] [ 291.424062][T12779] CPU: 0 PID: 12779 Comm: syz.4.5965 Tainted: G W syzkaller #0 [ 291.432934][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.443030][T12779] Call Trace: [ 291.446358][T12779] [ 291.449316][T12779] __dump_stack+0x21/0x30 [ 291.453688][T12779] dump_stack_lvl+0x110/0x170 [ 291.458402][T12779] ? show_regs_print_info+0x20/0x20 [ 291.463637][T12779] ? load_image+0x3f0/0x3f0 [ 291.468282][T12779] print_address_description+0x7f/0x2c0 [ 291.473868][T12779] ? unaccount_page_cache_page+0x6f1/0x760 [ 291.479710][T12779] kasan_report+0x10f/0x150 [ 291.484245][T12779] ? unaccount_page_cache_page+0x6f1/0x760 [ 291.490089][T12779] __asan_report_load4_noabort+0x14/0x20 [ 291.495758][T12779] unaccount_page_cache_page+0x6f1/0x760 [ 291.501423][T12779] __delete_from_page_cache+0xbe/0x470 [ 291.506913][T12779] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 291.513972][T12779] ? __kasan_check_write+0x14/0x20 [ 291.519122][T12779] ? __kasan_check_read+0x11/0x20 [ 291.524182][T12779] ? workingset_eviction+0x402/0x9f0 [ 291.529510][T12779] __remove_mapping+0x601/0x990 [ 291.534406][T12779] ? remove_mapping+0xa0/0xa0 [ 291.539123][T12779] ? __kasan_check_read+0x11/0x20 [ 291.544192][T12779] shrink_page_list+0x2a24/0x5800 [ 291.549251][T12779] ? shrink_page_list+0x8e1/0x5800 [ 291.554404][T12779] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 291.560596][T12779] ? __this_cpu_preempt_check+0x13/0x20 [ 291.566174][T12779] ? __mod_zone_page_state+0x8e/0xd0 [ 291.571490][T12779] ? isolate_lru_pages+0xff1/0x11f0 [ 291.576741][T12779] ? should_run_aging+0x410/0x410 [ 291.581804][T12779] ? cgroup_rstat_updated+0x30/0x360 [ 291.587123][T12779] ? _raw_spin_lock_irq+0x95/0xf0 [ 291.592188][T12779] ? __this_cpu_preempt_check+0x13/0x20 [ 291.597776][T12779] ? __count_memcg_events+0xad/0x120 [ 291.603096][T12779] shrink_lruvec+0x1297/0x3a40 [ 291.607902][T12779] ? __kasan_check_write+0x14/0x20 [ 291.613049][T12779] ? mem_cgroup_shrink_node+0x550/0x550 [ 291.618648][T12779] ? release_firmware_map_entry+0x190/0x190 [ 291.624582][T12779] ? __this_cpu_preempt_check+0x13/0x20 [ 291.630170][T12779] ? tracing_record_taskinfo+0x7c/0x220 [ 291.635798][T12779] ? preempt_schedule+0xbc/0xd0 [ 291.640686][T12779] ? inactive_is_low+0x160/0x2f0 [ 291.645665][T12779] ? css_next_descendant_pre+0x1e1/0x210 [ 291.651352][T12779] ? mem_cgroup_iter+0x465/0x6c0 [ 291.656328][T12779] shrink_node+0x11ee/0x2a40 [ 291.660966][T12779] ? allow_direct_reclaim+0x370/0x370 [ 291.666477][T12779] do_try_to_free_pages+0x5a7/0x1580 [ 291.671815][T12779] ? try_to_free_pages+0xc50/0xc50 [ 291.676960][T12779] ? propagate_protected_usage+0x84/0x250 [ 291.682700][T12779] try_to_free_mem_cgroup_pages+0x261/0x610 [ 291.688618][T12779] ? shrink_lruvec+0x3a40/0x3a40 [ 291.693572][T12779] ? mutex_unlock+0x8f/0x230 [ 291.698185][T12779] ? __kasan_check_read+0x11/0x20 [ 291.703232][T12779] ? page_counter_set_max+0x65/0x140 [ 291.708533][T12779] mem_cgroup_resize_max+0x309/0x3e0 [ 291.713840][T12779] mem_cgroup_write+0x1ed/0x230 [ 291.718708][T12779] ? mem_cgroup_reset+0x130/0x130 [ 291.723749][T12779] ? __kasan_check_write+0x14/0x20 [ 291.728877][T12779] ? _copy_from_iter+0x4a4/0x10a0 [ 291.733919][T12779] ? mem_cgroup_reset+0x130/0x130 [ 291.738959][T12779] cgroup_file_write+0x294/0x560 [ 291.743911][T12779] ? cgroup_seqfile_stop+0xc0/0xc0 [ 291.749039][T12779] ? mutex_lock+0x9b/0x1c0 [ 291.753474][T12779] ? wait_for_completion_killable_timeout+0x10/0x10 [ 291.760084][T12779] ? __kasan_check_write+0x14/0x20 [ 291.765215][T12779] ? cgroup_seqfile_stop+0xc0/0xc0 [ 291.770342][T12779] kernfs_fop_write_iter+0x2bd/0x400 [ 291.775644][T12779] vfs_write+0x831/0xfd0 [ 291.779907][T12779] ? file_end_write+0x1b0/0x1b0 [ 291.784772][T12779] ? wait_for_completion_killable_timeout+0x10/0x10 [ 291.791381][T12779] ? __fget_files+0x2e1/0x340 [ 291.796072][T12779] ? __fdget_pos+0x2d2/0x380 [ 291.800672][T12779] ? ksys_write+0x70/0x260 [ 291.805100][T12779] ksys_write+0x14a/0x260 [ 291.809449][T12779] ? __ia32_sys_read+0x90/0x90 [ 291.814222][T12779] ? __kasan_check_write+0x14/0x20 [ 291.819348][T12779] ? switch_fpu_return+0x15d/0x2c0 [ 291.824475][T12779] __x64_sys_write+0x7b/0x90 [ 291.829090][T12779] x64_sys_call+0x8ef/0x9a0 [ 291.833612][T12779] do_syscall_64+0x4c/0xa0 [ 291.838044][T12779] ? clear_bhb_loop+0x50/0xa0 [ 291.842731][T12779] ? clear_bhb_loop+0x50/0xa0 [ 291.847423][T12779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.853346][T12779] RIP: 0033:0x7f5d3b091019 [ 291.857779][T12779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.877404][T12779] RSP: 002b:00007f5d39aea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.885842][T12779] RAX: ffffffffffffffda RBX: 00007f5d3b318fa0 RCX: 00007f5d3b091019 [ 291.893828][T12779] RDX: 0000000000000050 RSI: 0000200000002580 RDI: 0000000000000003 [ 291.901818][T12779] RBP: 00007f5d3b12800c R08: 0000000000000000 R09: 0000000000000000 [ 291.909801][T12779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.917785][T12779] R13: 00007f5d3b319038 R14: 00007f5d3b318fa0 R15: 00007ffc5c063918 [ 291.925786][T12779] [ 291.928827][T12779] [ 291.931161][T12779] Allocated by task 12215: [ 291.935584][T12779] __kasan_slab_alloc+0xb7/0xe0 [ 291.940459][T12779] slab_post_alloc_hook+0x4f/0x2b0 [ 291.945595][T12779] kmem_cache_alloc+0xf7/0x260 [ 291.950379][T12779] getname_flags+0xba/0x510 [ 291.954901][T12779] __x64_sys_symlinkat+0x7c/0xb0 [ 291.959857][T12779] x64_sys_call+0x74b/0x9a0 [ 291.964374][T12779] do_syscall_64+0x4c/0xa0 [ 291.968804][T12779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.974709][T12779] [ 291.977043][T12779] Freed by task 12215: [ 291.981120][T12779] kasan_set_track+0x4a/0x70 [ 291.985751][T12779] kasan_set_free_info+0x23/0x40 [ 291.990700][T12779] ____kasan_slab_free+0x125/0x160 [ 291.995829][T12779] __kasan_slab_free+0x11/0x20 [ 292.000617][T12779] slab_free_freelist_hook+0xc2/0x190 [ 292.006007][T12779] kmem_cache_free+0x100/0x320 [ 292.010794][T12779] do_symlinkat+0x41d/0x5d0 [ 292.015314][T12779] __x64_sys_symlinkat+0x99/0xb0 [ 292.020269][T12779] x64_sys_call+0x74b/0x9a0 [ 292.024785][T12779] do_syscall_64+0x4c/0xa0 [ 292.029215][T12779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.035121][T12779] [ 292.037452][T12779] The buggy address belongs to the object at ffff88812eabc400 [ 292.037452][T12779] which belongs to the cache names_cache of size 4096 [ 292.051605][T12779] The buggy address is located 112 bytes inside of [ 292.051605][T12779] 4096-byte region [ffff88812eabc400, ffff88812eabd400) [ 292.064981][T12779] The buggy address belongs to the page: [ 292.070634][T12779] page:ffffea0004baae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12eab8 [ 292.080889][T12779] head:ffffea0004baae00 order:3 compound_mapcount:0 compound_pincount:0 [ 292.089225][T12779] flags: 0x4000000000010200(slab|head|zone=1) [ 292.095314][T12779] raw: 4000000000010200 ffffea0004414200 0000000200000002 ffff8881001c5200 [ 292.103908][T12779] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 292.112499][T12779] page dumped because: kasan: bad access detected [ 292.118931][T12779] page_owner tracks the page as allocated [ 292.124658][T12779] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 309, ts 284340196554, free_ts 284221994276 [ 292.145257][T12779] post_alloc_hook+0x192/0x1b0 [ 292.150062][T12779] prep_new_page+0x1c/0x110 [ 292.154576][T12779] get_page_from_freelist+0x2c3a/0x2cd0 [ 292.160137][T12779] __alloc_pages+0x1a2/0x460 [ 292.164746][T12779] new_slab+0xa0/0x4d0 [ 292.168823][T12779] ___slab_alloc+0x3ac/0x840 [ 292.173429][T12779] __slab_alloc+0x49/0x90 [ 292.177797][T12779] kmem_cache_alloc+0x138/0x260 [ 292.182702][T12779] getname_flags+0xba/0x510 [ 292.187222][T12779] __x64_sys_rename+0x5f/0x90 [ 292.191925][T12779] x64_sys_call+0x680/0x9a0 [ 292.196446][T12779] do_syscall_64+0x4c/0xa0 [ 292.200878][T12779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.206788][T12779] page last free stack trace: [ 292.211470][T12779] free_unref_page_prepare+0x5fa/0x600 [ 292.216946][T12779] free_unref_page+0xae/0x540 [ 292.221638][T12779] __free_pages+0x6c/0x100 [ 292.226066][T12779] __free_slab+0xe5/0x1e0 [ 292.230412][T12779] __unfreeze_partials+0x15a/0x190 [ 292.235539][T12779] put_cpu_partial+0xc6/0x120 [ 292.240229][T12779] __slab_free+0x1d4/0x290 [ 292.244663][T12779] ___cache_free+0x104/0x120 [ 292.249263][T12779] qlink_free+0x4d/0x90 [ 292.253429][T12779] qlist_free_all+0x5f/0xb0 [ 292.257953][T12779] kasan_quarantine_reduce+0x14a/0x170 [ 292.263425][T12779] __kasan_slab_alloc+0x2f/0xe0 [ 292.268302][T12779] slab_post_alloc_hook+0x4f/0x2b0 [ 292.273428][T12779] kmem_cache_alloc+0xf7/0x260 [ 292.278207][T12779] getname_flags+0xba/0x510 [ 292.282720][T12779] user_path_at_empty+0x2f/0x1c0 [ 292.287677][T12779] [ 292.290025][T12779] Memory state around the buggy address: [ 292.295667][T12779] ffff88812eabc300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.303779][T12779] ffff88812eabc380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.311861][T12779] >ffff88812eabc400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.319935][T12779] ^ [ 292.327672][T12779] ffff88812eabc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.335742][T12779] ffff88812eabc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.343815][T12779] ================================================================== [ 292.351882][T12779] Disabling lock debugging due to kernel taint May 24 05:17:03 syzkaller kern.alert kernel: [ 292.118931][T12779] page_owner tracks the page as allocated May 24 05:17:03 syzkaller kern.alert kernel: [ 292.124658][T12779] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 309, ts 284340196554, free_ts 2842219 May 24 05:17:03 syzkaller kern.alert kernel: [ 292.206788][T12779] page last free stack trace: