last executing test programs: 2m28.477921079s ago: executing program 0 (id=615): syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$mtd(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$mtd(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$mtd(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$mtd(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$mtd(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$mtd(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$mtd(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$mtd(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$mtd(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$mtd(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$mtd(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$mtd(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$mtd(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$mtd(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$mtd(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$mtd(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$mtd(&(0x7f0000000500), 0x4, 0x800) 2m28.473016649s ago: executing program 0 (id=620): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem', 0x800, 0x0) 2m28.315387155s ago: executing program 0 (id=622): epoll_create(0x0) 2m28.252343142s ago: executing program 0 (id=625): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter', 0x800, 0x0) 2m28.252082011s ago: executing program 0 (id=626): creat(&(0x7f0000000000), 0x0) 2m28.159594161s ago: executing program 0 (id=627): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 417.723387ms ago: executing program 1 (id=4442): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000058c0), 0x1, 0x0) ppoll(&(0x7f0000005900)=[{r0, 0x60d75cb87a54a7d9}], 0x1, &(0x7f0000005940)={0x0, 0x3938700}, 0x0, 0x0) 330.767776ms ago: executing program 1 (id=4452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x84, {0x0, 0x0, 0x0, 0x0, 0x26f13}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400d818}, 0x0) 274.016612ms ago: executing program 1 (id=4456): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) 244.428324ms ago: executing program 1 (id=4460): r0 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, 0x0, 0x0) 213.620067ms ago: executing program 1 (id=4463): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) lseek(r0, 0xffffffffffffffff, 0x0) 204.518499ms ago: executing program 1 (id=4464): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2004000, &(0x7f00000002c0), 0xfe, 0x563, &(0x7f0000000300)="$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") rename(&(0x7f0000000880)='./file0/file1\x00', &(0x7f00000008c0)='./file1\x00') 183.078661ms ago: executing program 4 (id=4470): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getresgid(&(0x7f0000000080), 0xfffffffffffffffd, 0x0) 182.312901ms ago: executing program 2 (id=4471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)={0x2e, 0x0, 0x2}, 0x8) 150.706104ms ago: executing program 3 (id=4472): r0 = socket(0x80000000000000a, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3}}, 0x10) 150.561344ms ago: executing program 5 (id=4473): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000cc0)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) 149.787754ms ago: executing program 4 (id=4474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000003000000000000210d0000aaa8fa017242ba9380d412000000000000002900000036000000", 0xfe60) 136.554886ms ago: executing program 3 (id=4475): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x80, 0x4) 135.566546ms ago: executing program 2 (id=4476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r0, 0x0, 0x6b, 0x6b, &(0x7f0000001900)="c1188e99141d4d29420f858986dd", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 129.728696ms ago: executing program 5 (id=4477): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) ustat(0x7, &(0x7f00000001c0)) 75.394992ms ago: executing program 4 (id=4478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x54) 75.271922ms ago: executing program 2 (id=4479): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) 75.210662ms ago: executing program 5 (id=4480): r0 = inotify_init1(0x80000) inotify_add_watch(r0, 0x0, 0x33000b73) 75.104922ms ago: executing program 5 (id=4481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x14, 0x4, 0x0, 0x0, 0x0, 0x6, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x40010) 75.031222ms ago: executing program 3 (id=4482): r0 = socket$inet6(0xa, 0x800000000000802, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0x2, 0x4e25, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}, {{&(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x2, 0x30004004) 74.262572ms ago: executing program 4 (id=4483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000480)) 74.176162ms ago: executing program 2 (id=4484): r0 = eventfd2(0x2, 0x800) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="fdffffffffffffff", 0x8}], 0x1) 45.216915ms ago: executing program 2 (id=4485): r0 = getpid() setpriority(0x1, r0, 0x6) 45.028465ms ago: executing program 4 (id=4486): r0 = open(&(0x7f0000000000)='./file0\x00', 0x801c0, 0x189) fcntl$setlease(r0, 0x400, 0x7ffffffe) 44.103495ms ago: executing program 3 (id=4487): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2d, 0x0, &(0x7f00000015c0)) 38.161926ms ago: executing program 5 (id=4488): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 13.632918ms ago: executing program 2 (id=4489): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002700)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) 13.045498ms ago: executing program 3 (id=4490): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x1, 0x8, 0x0, 0x51, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @loopback}}}}) 12.642758ms ago: executing program 4 (id=4491): r0 = openat(0xffffffffffffff9c, &(0x7f0000002e00)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002e40)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x50800, 0x2, 0x0, 0xa6, 0x7, 0x0, 0x0, 0x100, 0x4}}, 0x50) 892.18µs ago: executing program 3 (id=4492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x44, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}]}]}, 0x44}}, 0x8000) 0s ago: executing program 5 (id=4493): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4) kernel console output (not intermixed with test programs): 7.834270][ T1072] usb 2-1: Manufacturer: syz [ 137.839014][ T1072] usb 2-1: SerialNumber: syz [ 137.844064][ T1072] usb 2-1: config 0 descriptor?? [ 137.858643][ T1071] usb 4-1: USB disconnect, device number 46 [ 137.886616][ T1072] usb 2-1: bad CDC descriptors [ 137.891564][ T1072] usb 2-1: unsupported MDLM descriptors [ 137.897252][ T1074] usb 5-1: string descriptor 0 read error: -22 [ 137.903454][ T1074] usb 5-1: New USB device found, idVendor=0403, idProduct=e80d, bcdDevice=4f.70 [ 137.913275][ T1074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.924263][ T1082] usb 6-1: Using ep0 maxpacket: 16 [ 137.934313][ T6020] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.953624][ T1074] ftdi_sio 5-1:5.136: FTDI USB Serial Device converter detected [ 137.961535][ T1074] usb 5-1: Detected FT-X [ 138.057756][ T1073] usb 3-1: Using ep0 maxpacket: 8 [ 138.081884][ T1081] usb 2-1: USB disconnect, device number 48 [ 138.087927][ T1082] usb 6-1: unable to get BOS descriptor or descriptor too short [ 138.172163][ T1074] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 138.191534][ T1074] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 138.210520][ T1074] ftdi_sio 5-1:5.136: GPIO initialisation failed: -71 [ 138.217861][ T1074] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 138.228945][ T1074] usb 5-1: USB disconnect, device number 49 [ 138.234975][ T1073] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.244024][ T1074] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 138.257119][ T1074] ftdi_sio 5-1:5.136: device disconnected [ 138.292919][ T6073] SELinux: security_context_str_to_sid(system_u) failed for (dev binder, type binder) errno=-22 [ 138.315091][ T1082] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 138.324357][ T1082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.324443][ T1073] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 138.332366][ T1082] usb 6-1: Product: syz [ 138.332375][ T1082] usb 6-1: Manufacturer: syz [ 138.332384][ T1082] usb 6-1: SerialNumber: syz [ 138.357331][ T1073] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 138.367192][ T1073] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 138.524732][ T1073] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.533877][ T1073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.541901][ T1073] usb 3-1: Product: syz [ 138.546136][ T1073] usb 3-1: Manufacturer: syz [ 138.550742][ T1073] usb 3-1: SerialNumber: syz [ 138.572511][ T1081] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 138.649504][ T6093] overlayfs: missing 'lowerdir' [ 138.665508][ T24] audit: type=1400 audit(1793805207.818:262): avc: denied { remount } for pid=6094 comm="syz.4.2915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 138.705474][ T1082] usb 6-1: MIDIStreaming interface descriptor not found [ 138.738216][ T1082] usb 6-1: USB disconnect, device number 48 [ 138.810865][ T1073] cdc_ncm 3-1:1.0: bind() failure [ 138.817019][ T1073] cdc_ncm 3-1:1.1: bind() failure [ 138.825901][ T1073] usb 3-1: USB disconnect, device number 49 [ 138.934433][ T1081] usb 4-1: config 3 has an invalid interface number: 108 but max is 0 [ 138.942909][ T1081] usb 4-1: config 3 has no interface number 0 [ 138.949389][ T1081] usb 4-1: config 3 interface 108 has no altsetting 0 [ 139.062219][ T6110] exFAT-fs (loop4): bogus sector size bits : 0 [ 139.062219][ T6110] [ 139.075497][ T6091] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(512) [ 139.089902][ T6110] exFAT-fs (loop4): failed to read boot sector [ 139.090555][ T6091] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.096564][ T6110] exFAT-fs (loop4): failed to recognize exfat type [ 139.104813][ T6091] F2FS-fs (loop1): Invalid gid value -1 [ 139.118017][ T6116] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size [ 139.200977][ T1081] usb 4-1: string descriptor 0 read error: -22 [ 139.207247][ T1081] usb 4-1: New USB device found, idVendor=1b3d, idProduct=015b, bcdDevice= 3.0d [ 139.216595][ T1081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.258636][ T1081] ftdi_sio 4-1:3.108: FTDI USB Serial Device converter detected [ 139.266556][ T1081] usb 4-1: Detected FT8U232AM [ 139.271686][ T1081] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 139.369835][ T24] audit: type=1400 audit(1793805208.563:263): avc: denied { unmount } for pid=1100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 139.456577][ T1074] usb 4-1: USB disconnect, device number 47 [ 139.470570][ T1074] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.497883][ T1074] ftdi_sio 4-1:3.108: device disconnected [ 139.610339][ T1083] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 139.678069][ T6148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.696507][ T6148] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 139.802750][ T6144] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 139.810086][ T6144] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 139.848658][ T1083] usb 3-1: Using ep0 maxpacket: 16 [ 139.972581][ T1083] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.995423][ T1083] usb 3-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.015894][ T1083] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.023033][ T1083] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 140.032382][ T1083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.045019][ T6168] FAT-fs (loop3): Unrecognized mount option "uid<00000000000000000000" or missing value [ 140.055539][ T1083] usb 3-1: config 0 descriptor?? [ 140.067595][ T6131] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 3440) [ 140.076401][ T6131] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 140.085120][ T6131] F2FS-fs (loop4): invalid crc value [ 140.090750][ T6131] F2FS-fs (loop4): invalid crc_offset: 528380 [ 140.097115][ T6131] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 140.306015][ T1071] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 140.306301][ T6198] EXT4-fs (loop5): Ignoring removed nobh option [ 140.320029][ T6198] EXT4-fs (loop5): journaled quota format not specified [ 140.381997][ T1083] usbhid 3-1:0.0: can't add hid device: -71 [ 140.388169][ T1083] usbhid: probe of 3-1:0.0 failed with error -71 [ 140.403368][ T1083] usb 3-1: USB disconnect, device number 50 [ 140.421984][ T1082] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 140.445178][ T6194] F2FS-fs (loop4): invalid crc value [ 140.457088][ T6194] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.480908][ T6194] F2FS-fs (loop4): Start checkpoint disabled! [ 140.488736][ T6194] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 140.706271][ T1071] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.717271][ T1071] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.727124][ T1071] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.734732][ T1082] usb 4-1: not running at top speed; connect to a high speed hub [ 140.736173][ T1071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.753733][ T6174] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.820402][ T1082] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.831235][ T1082] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.840456][ T1082] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.848779][ T1075] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 140.858401][ T1083] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 140.974021][ T6223] F2FS-fs (loop2): invalid crc value [ 140.982825][ T1071] usb 2-1: USB disconnect, device number 49 [ 140.990954][ T6223] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.001082][ T1082] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 141.013984][ T1082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.019087][ T6223] F2FS-fs (loop2): NAT is corrupt, run fsck to fix it [ 141.022375][ T1082] usb 4-1: Product: syz [ 141.029037][ T6223] F2FS-fs (loop2): Failed to initialize F2FS node manager (-22) [ 141.033334][ T1082] usb 4-1: Manufacturer: syz [ 141.033345][ T1082] usb 4-1: SerialNumber: syz [ 141.096543][ T1083] usb 5-1: Using ep0 maxpacket: 32 [ 141.210783][ T1075] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.210807][ T1083] usb 5-1: config 87 has an invalid interface number: 229 but max is 1 [ 141.221069][ T1075] usb 6-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 141.229369][ T1083] usb 5-1: config 87 has no interface number 1 [ 141.238943][ T1075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.245320][ T1083] usb 5-1: config 87 interface 229 has no altsetting 0 [ 141.297358][ T1075] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 141.299519][ T1082] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 141.304544][ T1075] cdc_acm: probe of 6-1:1.1 failed with error -22 [ 141.336814][ T1082] usb 4-1: USB disconnect, device number 48 [ 141.410991][ T1083] usb 5-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c [ 141.420334][ T1083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.428310][ T1083] usb 5-1: Product: syz [ 141.432524][ T1083] usb 5-1: Manufacturer: syz [ 141.437564][ T1083] usb 5-1: SerialNumber: syz [ 141.468041][ T1075] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 141.508200][ T1071] usb 6-1: USB disconnect, device number 49 [ 141.706130][ T1075] usb 3-1: Using ep0 maxpacket: 32 [ 141.744376][ T1083] usb 5-1: bad CDC descriptors [ 141.751319][ T1083] usb 5-1: USB disconnect, device number 50 [ 141.831475][ T6250] EXT4-fs (loop3): Ignoring removed oldalloc option [ 141.838708][ T6250] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 141.849831][ T1075] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1023 [ 141.850721][ T6250] EXT4-fs (loop3): filesystem is read-only [ 141.860095][ T1075] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 141.866013][ T6250] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.883038][ T1082] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 141.883159][ T6250] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2985: bg 0: block 64: padding at end of block bitmap is not set [ 141.906007][ T6250] EXT4-fs (loop3): Remounting filesystem read-only [ 141.912679][ T6250] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 141.921690][ T6250] EXT4-fs (loop3): 1 orphan inode deleted [ 141.927519][ T6250] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noauto_da_alloc,auto_da_alloc=0x0000000000000000,stripe=0x0000000000000004,bsdgroups,noblock_validity,minixdf,delalloc,dioread_lock,errors=remount-ro,oldalloc,usrquota, [ 142.007143][ T24] audit: type=1326 audit(1793805211.335:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.5.2987" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb48225b19 code=0x0 [ 142.031561][ T1075] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 142.040726][ T1075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.048732][ T1075] usb 3-1: Product: syz [ 142.053221][ T1075] usb 3-1: Manufacturer: syz [ 142.063704][ T1075] usb 3-1: SerialNumber: syz [ 142.087399][ T6237] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.125106][ T1082] usb 2-1: Using ep0 maxpacket: 32 [ 142.171427][ T6274] IPv6: addrconf: prefix option has invalid lifetime [ 142.263930][ T6260] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 142.273947][ T6260] F2FS-fs (loop5): invalid crc value [ 142.279602][ T6260] F2FS-fs (loop5): invalid crc value [ 142.285054][ T6260] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 142.325142][ T1082] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.449100][ T1075] usb 3-1: MIDIStreaming interface descriptor not found [ 142.458202][ T1075] usb 3-1: USB disconnect, device number 51 [ 142.601742][ T1073] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 142.620449][ T1074] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 142.629974][ T1071] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 142.659633][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.687161][ T1082] usb 2-1: string descriptor 0 read error: -22 [ 142.693412][ T1082] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 142.702824][ T1082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.830381][ T1073] usb 4-1: Using ep0 maxpacket: 16 [ 142.888818][ T6337] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 142.935202][ T1071] usb 6-1: not running at top speed; connect to a high speed hub [ 142.950628][ T1082] usb 2-1: USB disconnect, device number 50 [ 142.963762][ T1074] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.974250][ T1074] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.987328][ T1073] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.996704][ T6349] EXT4-fs (loop2): unsupported descriptor size 3717 [ 143.011177][ T1071] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.021400][ T1071] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.030262][ T1071] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 143.040325][ T1071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.078249][ T1074] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.087440][ T1073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.098152][ T1074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.106127][ T1074] usb 5-1: SerialNumber: syz [ 143.111019][ T1073] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.120051][ T1073] usb 4-1: config 1 interface 1 has no altsetting 2 [ 143.120274][ T6362] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.139216][ T6362] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 143.173399][ T1074] usb 5-1: bad CDC descriptors [ 143.278111][ T1073] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.287348][ T1073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.295546][ T1073] usb 4-1: Product: syz [ 143.299778][ T1073] usb 4-1: Manufacturer: syz [ 143.304398][ T1073] usb 4-1: SerialNumber: syz [ 143.325979][ T1071] usb 6-1: string descriptor 0 read error: -71 [ 143.332182][ T1071] uvcvideo: Found UVC 1.00 device (046d:0825) [ 143.339189][ T1071] uvcvideo: No valid video chain found. [ 143.345463][ T1071] usb 6-1: USB disconnect, device number 50 [ 143.374862][ T1080] usb 5-1: USB disconnect, device number 51 [ 143.459052][ T1082] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 143.481949][ T24] audit: type=1400 audit(1793805980.889:265): avc: denied { mount } for pid=6376 comm="syz.1.3046" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 143.504927][ T24] audit: type=1400 audit(1793805980.899:266): avc: denied { unmount } for pid=1103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 143.622119][ T6389] EXT4-fs (loop1): Ignoring removed bh option [ 143.628351][ T6389] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 143.636787][ T6389] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 143.644835][ T6389] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e054e01c, mo2=0002] [ 143.653099][ T1073] usb 4-1: found format II with max.bitrate = 1610, frame size=0 [ 143.653275][ T6389] System zones: 0-1, 15-15, 18-18, 34-34 [ 143.661199][ T1073] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 143.668507][ T6389] EXT4-fs (loop1): orphan cleanup on readonly fs [ 143.679449][ T6389] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1792). [ 143.691130][ T1073] usb 4-1: 0:2 : does not exist [ 143.691314][ T6389] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 143.710342][ T1073] usb 4-1: USB disconnect, device number 49 [ 143.716430][ T6389] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 143.723573][ T6389] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.3052: bad orphan inode 16 [ 143.733829][ T6389] ext4_test_bit(bit=15, block=18) = 1 [ 143.739261][ T6389] is_bad_inode(inode)=0 [ 143.743432][ T6389] NEXT_ORPHAN(inode)=0 [ 143.747810][ T6389] max_ino=32 [ 143.751042][ T6389] i_nlink=2 [ 143.754164][ T6389] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=writeback,discard,acl,bsdgroups,bh,grpquota,debug,journal_ioprio=0x0000000000000001,nomblk_io_submit,,errors=continue [ 143.873566][ T6401] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 143.880926][ T6401] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 143.890816][ T1082] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.899221][ T24] audit: type=1326 audit(1793805981.328:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6403 comm="syz.4.3058" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe548da8b19 code=0x0 [ 143.899254][ T6401] EXT4-fs (loop1): can't mount with commit=9, fs mounted w/o journal [ 143.936912][ T1082] usb 3-1: not running at top speed; connect to a high speed hub [ 144.022899][ T1082] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 38, changing to 4 [ 144.033960][ T1082] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 4 [ 144.080517][ T1080] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 144.103628][ T6410] EXT4-fs (loop3): can't mount with commit=1048582, fs mounted w/o journal [ 144.195164][ T1082] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 144.204868][ T1082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.213187][ T1082] usb 3-1: Product: syz [ 144.217691][ T1082] usb 3-1: Manufacturer: syz [ 144.222454][ T1082] usb 3-1: SerialNumber: syz [ 144.238047][ T6451] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 144.246595][ T24] audit: type=1400 audit(1793805981.684:268): avc: denied { relabelto } for pid=6450 comm="syz.1.3081" name="535" dev="tmpfs" ino=2748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 144.272350][ T24] audit: type=1400 audit(1793805981.684:269): avc: denied { associate } for pid=6450 comm="syz.1.3081" name="535" dev="tmpfs" ino=2748 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 144.298504][ T24] audit: type=1400 audit(1793805981.684:270): avc: denied { write } for pid=1103 comm="syz-executor" name="535" dev="tmpfs" ino=2748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 144.323365][ T24] audit: type=1400 audit(1793805981.684:271): avc: denied { remove_name } for pid=1103 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 144.349592][ T24] audit: type=1400 audit(1793805981.715:272): avc: denied { rmdir } for pid=1103 comm="syz-executor" name="535" dev="tmpfs" ino=2748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 144.415061][ T1081] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 144.443729][ T1080] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.454017][ T1083] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 144.465760][ T6457] F2FS-fs (loop1): invalid crc value [ 144.472143][ T6457] F2FS-fs (loop1): invalid journal entries nats 768 sits 6 [ 144.479783][ T6457] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-22) [ 144.606410][ T1080] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 144.616240][ T1082] usb 3-1: Can't get UAC3 power state for id 10 [ 144.622912][ T1080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.631718][ T1080] usb 6-1: Product: syz [ 144.636294][ T1080] usb 6-1: Manufacturer: syz [ 144.641205][ T1080] usb 6-1: SerialNumber: syz [ 144.682769][ T1082] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 144.695578][ T1082] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 144.697636][ T6473] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 144.712507][ T6473] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 144.714279][ T1082] usb 3-1: USB disconnect, device number 52 [ 144.797360][ T1083] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.808472][ T1081] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.816649][ T1083] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 144.827961][ T1083] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.838103][ T1083] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.847976][ T1083] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 144.892588][ T1081] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 144.907423][ T6488] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 144.917212][ T6488] EXT4-fs (loop1): invalid journal inode [ 144.923016][ T6488] EXT4-fs (loop1): can't get journal size [ 144.929285][ T6488] EXT4-fs error (device loop1): ext4_protect_reserved_inode:179: comm syz.1.3097: blocks 48-48 from inode 2 overlap system zone [ 144.942721][ T1083] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.942809][ T6488] EXT4-fs (loop1): failed to initialize system zone (-117) [ 144.952232][ T1083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.959411][ T6488] EXT4-fs (loop1): mount failed [ 144.971942][ T1080] usb 6-1: 1:1 : unsupported format bits 0x20000 [ 144.978618][ T1083] usb 4-1: SerialNumber: syz [ 144.987725][ T1080] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 144.995846][ T1080] usb 6-1: 2:1 : unsupported format bits 0x20000 [ 145.002484][ T6437] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 145.017137][ T1083] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 145.025506][ T1083] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 145.035883][ T1080] usb 6-1: USB disconnect, device number 51 [ 145.073188][ T6492] EXT4-fs (loop2): Test dummy encryption mode enabled [ 145.080130][ T1081] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 145.092589][ T6492] EXT4-fs (loop2): Can't change test_dummy_encryption on remount [ 145.107915][ T1081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.117144][ T1081] usb 5-1: Product: syz [ 145.122469][ T1081] usb 5-1: Manufacturer: syz [ 145.127365][ T1081] usb 5-1: SerialNumber: syz [ 145.225043][ T1084] usb 4-1: USB disconnect, device number 50 [ 145.231710][ T1465] udevd[1465]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 145.371243][ T6513] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 145.381122][ T6513] F2FS-fs (loop2): invalid crc value [ 145.387003][ T6513] F2FS-fs (loop2): invalid crc value [ 145.393378][ T6513] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 145.464115][ T1071] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 145.513466][ T1081] usb 5-1: USB disconnect, device number 52 [ 145.555072][ T6530] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #2: comm syz.2.3116: pblk 0 bad header/extent: invalid magic - magic 0, entries 1, max 4(0), depth 0(0) [ 145.572529][ T6530] EXT4-fs (loop2): get root inode failed [ 145.578209][ T6530] EXT4-fs (loop2): mount failed [ 145.692740][ T1071] usb 2-1: Using ep0 maxpacket: 8 [ 145.712190][ T6549] SELinux: duplicate or incompatible mount options [ 145.713437][ T2166] udevd[2166]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.807379][ T1071] usb 2-1: config 2 has an invalid interface number: 234 but max is 0 [ 145.815625][ T1071] usb 2-1: config 2 has no interface number 0 [ 145.821977][ T1071] usb 2-1: config 2 interface 234 altsetting 4 endpoint 0xA has an invalid bInterval 43, changing to 7 [ 145.833068][ T1071] usb 2-1: config 2 interface 234 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 145.833744][ T6562] EXT4-fs (loop2): Test dummy encryption mode enabled [ 145.846032][ T1071] usb 2-1: config 2 interface 234 altsetting 4 bulk endpoint 0xB has invalid maxpacket 0 [ 145.850360][ T6562] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 145.864055][ T1071] usb 2-1: config 2 interface 234 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 145.876487][ T1071] usb 2-1: config 2 interface 234 has no altsetting 0 [ 145.896649][ T6558] loop5: p1 p2[DM] p4 [ 145.910905][ T6558] loop5: p1 size 196608 extends beyond EOD, truncated [ 145.919489][ T6558] loop5: p2 start 3080575 is beyond EOD, truncated [ 145.926395][ T6558] loop5: p4 start 4294967295 is beyond EOD, truncated [ 146.016780][ T1081] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 146.021275][ T6568] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 146.032928][ T1071] usb 2-1: New USB device found, idVendor=22a8, idProduct=1928, bcdDevice=ac.22 [ 146.045915][ T6568] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 146.049773][ T1071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.062712][ T1071] usb 2-1: Product: syz [ 146.062719][ T6568] F2FS-fs (loop4): invalid crc value [ 146.067254][ T6568] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 146.072411][ T1071] usb 2-1: Manufacturer: syz [ 146.088878][ T1071] usb 2-1: SerialNumber: syz [ 146.104576][ T6568] F2FS-fs (loop4): Inconsistent error blkaddr:4096, sit bitmap:0 [ 146.112292][ T6511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.112325][ T6568] CPU: 0 PID: 6568 Comm: syz.4.3132 Not tainted syzkaller #0 [ 146.126830][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.136877][ T6568] Call Trace: [ 146.140155][ T6568] __dump_stack+0x21/0x24 [ 146.144485][ T6568] dump_stack_lvl+0x1a7/0x208 [ 146.149144][ T6568] ? show_regs_print_info+0x18/0x18 [ 146.154327][ T6568] ? __kasan_check_write+0x14/0x20 [ 146.159432][ T6568] dump_stack+0x15/0x1c [ 146.163596][ T6568] f2fs_is_valid_blkaddr+0xc2f/0x1330 [ 146.168950][ T6568] f2fs_get_node_info+0x7fb/0x11e0 [ 146.174061][ T6568] ? f2fs_try_to_free_nats+0x330/0x330 [ 146.179525][ T6568] ? release_pages+0xe41/0xe90 [ 146.184290][ T6568] ? __this_cpu_preempt_check+0x13/0x20 [ 146.189824][ T6568] ? __mod_memcg_lruvec_state+0x105/0x2c0 [ 146.195546][ T6568] read_node_page+0x334/0x550 [ 146.200222][ T6568] ? f2fs_ra_node_page+0x260/0x260 [ 146.205344][ T6568] ? pagecache_get_page+0x798/0x930 [ 146.210551][ T6568] ? security_inode_alloc+0xc0/0x110 [ 146.215915][ T6568] __get_node_page+0x147/0xac0 [ 146.220671][ T6568] f2fs_get_node_page+0x21/0x30 [ 146.225603][ T6568] f2fs_iget+0x6d0/0x4af0 [ 146.229921][ T6568] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 146.235464][ T6568] ? f2fs_build_stats+0x71/0xb90 [ 146.240387][ T6568] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 146.246185][ T6568] ? f2fs_build_stats+0x722/0xb90 [ 146.251202][ T6568] f2fs_fill_super+0x4fb4/0x73d0 [ 146.256136][ T6568] ? kill_f2fs_super+0x3d0/0x3d0 [ 146.261058][ T6568] ? set_blocksize+0x1eb/0x3a0 [ 146.265894][ T6568] ? sb_set_blocksize+0xaa/0xf0 [ 146.270753][ T6568] mount_bdev+0x26a/0x380 [ 146.275153][ T6568] ? kill_f2fs_super+0x3d0/0x3d0 [ 146.280072][ T6568] f2fs_mount+0x34/0x40 [ 146.284250][ T6568] legacy_get_tree+0xed/0x190 [ 146.288912][ T6568] ? trace_raw_output_f2fs_fiemap+0x220/0x220 [ 146.294961][ T6568] vfs_get_tree+0x89/0x260 [ 146.299363][ T6568] do_new_mount+0x25a/0xa30 [ 146.303846][ T6568] path_mount+0x581/0xca0 [ 146.308158][ T6568] __se_sys_mount+0x320/0x390 [ 146.312818][ T6568] ? __x64_sys_mount+0xd0/0xd0 [ 146.317566][ T6568] ? debug_smp_processor_id+0x17/0x20 [ 146.323143][ T6568] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 146.329219][ T6568] __x64_sys_mount+0xbf/0xd0 [ 146.333819][ T6568] do_syscall_64+0x31/0x40 [ 146.338325][ T6568] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 146.344202][ T6568] RIP: 0033:0x7fe548da9d8a [ 146.348613][ T6568] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.368361][ T6568] RSP: 002b:00007fe5477ffe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.376768][ T6568] RAX: ffffffffffffffda RBX: 00007fe5477ffee0 RCX: 00007fe548da9d8a [ 146.384730][ T6568] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 00007fe5477ffea0 [ 146.392797][ T6568] RBP: 00002000000000c0 R08: 00007fe5477ffee0 R09: 0000000001800004 [ 146.399340][ T1071] usb-storage 2-1:2.234: USB Mass Storage device detected [ 146.400761][ T6568] R10: 0000000001800004 R11: 0000000000000246 R12: 0000200000000100 [ 146.400778][ T6568] R13: 00007fe5477ffea0 R14: 000000000000554e R15: 0000200000000140 [ 146.427854][ T1099] __loop_clr_fd: partition scan of loop5 failed (rc=-16) [ 146.427974][ T2166] print_req_error: 17 callbacks suppressed [ 146.427990][ T2166] blk_update_request: I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 146.452910][ T2166] blk_update_request: I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.464206][ T2166] buffer_io_error: 14 callbacks suppressed [ 146.464216][ T2166] Buffer I/O error on dev loop5p1, logical block 1008, async page read [ 146.482049][ T6568] F2FS-fs (loop4): Failed to read root inode [ 146.500645][ T1071] usb 2-1: USB disconnect, device number 51 [ 146.703483][ T1081] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.715428][ T1081] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 146.728829][ T1081] usb 4-1: config 1 interface 0 has no altsetting 0 [ 146.898618][ T6622] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 146.903484][ T1081] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 146.908633][ T6622] EXT4-fs (loop5): group descriptors corrupted! [ 146.920426][ T1081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.934906][ T1081] usb 4-1: Product: syz [ 146.940654][ T1081] usb 4-1: Manufacturer: syz [ 146.949471][ T1081] usb 4-1: SerialNumber: syz [ 146.967506][ T1164] blk_update_request: I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 146.979331][ T1071] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 146.979441][ T1164] blk_update_request: I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.999062][ T1081] usb-storage 4-1:1.0: USB Mass Storage device detected [ 147.006101][ T1084] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 147.014135][ T1164] Buffer I/O error on dev loop5p1, logical block 1008, async page read [ 147.028228][ T1081] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 147.201515][ T1083] usb 4-1: USB disconnect, device number 51 [ 147.204407][ T1164] blk_update_request: I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 147.208053][ T1082] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 147.226748][ T1164] blk_update_request: I/O error, dev loop5, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 147.226769][ T1164] Buffer I/O error on dev loop5p1, logical block 1008, async page read [ 147.246287][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 147.246301][ T24] audit: type=1400 audit(1793805984.827:277): avc: denied { mount } for pid=6670 comm="syz.5.3179" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 147.274277][ T1071] usb 5-1: Using ep0 maxpacket: 32 [ 147.351468][ T1084] usb 3-1: No LPM exit latency info found, disabling LPM. [ 147.374345][ T6673] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 147.381804][ T6673] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 147.427481][ T1084] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.443342][ T1084] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 60, changing to 4 [ 147.446647][ T1071] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.456952][ T1084] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 147.471532][ T6682] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.473170][ T1082] usb 2-1: Using ep0 maxpacket: 32 [ 147.504375][ T6682] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 147.513817][ T6682] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3357: comm syz.5.3184: Allocating blocks 42-43 which overlap fs metadata [ 147.527710][ T6682] Quota error (device loop5): write_blk: dquota write failed [ 147.535277][ T1071] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.535443][ T6682] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 147.545754][ T1071] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.555866][ T6682] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.3184: Failed to acquire dquot type 0 [ 147.576356][ T6682] EXT4-fs (loop5): 1 truncate cleaned up [ 147.582040][ T6682] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 147.618440][ T1082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 147.629872][ T1082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 147.732334][ T1084] usb 3-1: string descriptor 0 read error: -22 [ 147.732359][ T1071] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 147.739478][ T1084] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 147.748002][ T1071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.757982][ T1084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.767315][ T1071] usb 5-1: Product: syz [ 147.778206][ T1071] usb 5-1: Manufacturer: syz [ 147.782902][ T1071] usb 5-1: SerialNumber: syz [ 147.789651][ T1082] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 147.798891][ T1082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.806868][ T1082] usb 2-1: Product: syz [ 147.811909][ T1084] usb 3-1: low speed audio streaming not supported [ 147.818548][ T1082] usb 2-1: Manufacturer: syz [ 147.823193][ T1084] usb 3-1: low speed audio streaming not supported [ 147.829738][ T1082] usb 2-1: SerialNumber: syz [ 147.838671][ T1082] usb 2-1: config 0 descriptor?? [ 147.856197][ T6630] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 147.875938][ T1082] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 147.970758][ T1083] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 148.024581][ T1074] usb 3-1: USB disconnect, device number 53 [ 148.028100][ T1081] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 148.085353][ T1073] usb 2-1: USB disconnect, device number 52 [ 148.142115][ T1071] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 148.149991][ T1071] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 148.189630][ T1071] usb 5-1: unit 37 not found! [ 148.194350][ T1071] usb 5-1: unit 0 not found! [ 148.199352][ T1083] usb 6-1: Using ep0 maxpacket: 16 [ 148.236969][ T1071] usb 5-1: USB disconnect, device number 53 [ 148.323433][ T1083] usb 6-1: config 0 has an invalid interface number: 180 but max is 0 [ 148.331798][ T1083] usb 6-1: config 0 has no interface number 0 [ 148.390254][ T1081] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 148.402587][ T1081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.412907][ T1081] usb 4-1: config 0 has no interfaces? [ 148.485337][ T1083] usb 6-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 148.494818][ T1081] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 148.503855][ T1081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=168 [ 148.512090][ T1083] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.520539][ T1083] usb 6-1: Product: syz [ 148.525026][ T1083] usb 6-1: Manufacturer: syz [ 148.530082][ T1081] usb 4-1: SerialNumber: syz [ 148.535262][ T1083] usb 6-1: SerialNumber: syz [ 148.543603][ T1081] usb 4-1: config 0 descriptor?? [ 148.553934][ T1083] usb 6-1: config 0 descriptor?? [ 148.590419][ T1083] usb 6-1: bad CDC descriptors [ 148.676955][ T6731] EXT4-fs (loop1): Ignoring removed oldalloc option [ 148.685918][ T6731] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.692581][ T6731] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #4: comm syz.1.3207: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 148.711623][ T6731] EXT4-fs error (device loop1): ext4_quota_enable:6454: comm syz.1.3207: Bad quota inode: 4, type: 1 [ 148.722791][ T6731] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.737845][ T6731] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 148.744570][ T6731] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noquota,inlinecrypt,oldalloc,,errors=continue [ 148.777550][ T1083] usb 4-1: USB disconnect, device number 52 [ 148.786313][ T1082] usb 6-1: USB disconnect, device number 52 [ 148.847593][ T1073] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 148.856718][ T1084] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 149.057217][ T1081] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 149.209617][ T1084] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.219394][ T1073] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.320065][ T24] audit: type=1400 audit(1793805987.009:278): avc: denied { unmount } for pid=1099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.352451][ T1073] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.361607][ T1073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 149.369695][ T1073] usb 5-1: Product: syz [ 149.371813][ T1084] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 149.374099][ T1073] usb 5-1: Manufacturer: syz [ 149.382996][ T1081] usb 2-1: not running at top speed; connect to a high speed hub [ 149.396083][ T1084] usb 3-1: New USB device strings: Mfr=7, Product=246, SerialNumber=2 [ 149.404434][ T6757] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.414256][ T1084] usb 3-1: Product: syz [ 149.418569][ T1084] usb 3-1: Manufacturer: syz [ 149.423238][ T1084] usb 3-1: SerialNumber: syz [ 149.428591][ T1084] usb 3-1: config 0 descriptor?? [ 149.429461][ T1073] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 149.436754][ T6757] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3357: comm syz.5.3219: Allocating blocks 41-42 which overlap fs metadata [ 149.454348][ T6757] EXT4-fs (loop5): Remounting filesystem read-only [ 149.461092][ T6757] Quota error (device loop5): write_blk: dquota write failed [ 149.468680][ T6757] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 149.469143][ T1084] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 149.478330][ T6757] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3357: comm syz.5.3219: Allocating blocks 41-42 which overlap fs metadata [ 149.485706][ T1084] usb 3-1: Detected SIO [ 149.499466][ T6757] Quota error (device loop5): write_blk: dquota write failed [ 149.503101][ T1081] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.510976][ T6757] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 149.521027][ T1081] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.531043][ T1075] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 149.539793][ T1084] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 149.555442][ T6757] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.3219: Failed to acquire dquot type 1 [ 149.555478][ T1081] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 149.567442][ T6757] EXT4-fs (loop5): 1 truncate cleaned up [ 149.582278][ T6757] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,init_itable,resgid=0x00000000000000002 [ 149.591931][ T1081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.644679][ T1084] usb 5-1: USB disconnect, device number 54 [ 149.666746][ T1073] usb 3-1: USB disconnect, device number 54 [ 149.677015][ T1073] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 149.686757][ T1073] ftdi_sio 3-1:0.0: device disconnected [ 149.707214][ T6762] loop5: p1 < > [ 149.734950][ T95] loop5: p1 < > [ 149.803980][ T1164] udevd[1164]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 149.818878][ T1164] udevd[1164]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 149.875037][ T1071] usb 2-1: USB disconnect, device number 53 [ 149.915007][ T1075] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.924002][ T1075] usb 4-1: config 1 has no interface number 0 [ 149.930215][ T1075] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 149.942774][ T1075] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 149.947293][ T6773] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 149.954301][ T1075] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 149.973658][ T6773] F2FS-fs (loop5): invalid crc value [ 149.980841][ T6773] F2FS-fs (loop5): Found nat_bits in checkpoint [ 150.002248][ T6773] F2FS-fs (loop5): recover fsync data on readonly fs [ 150.009254][ T6773] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 150.124550][ T1075] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 150.133706][ T1075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.141720][ T1075] usb 4-1: Product: syz [ 150.146158][ T1075] usb 4-1: Manufacturer: syz [ 150.150770][ T1075] usb 4-1: SerialNumber: syz [ 150.362830][ T1084] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 150.420106][ T1081] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 150.427755][ T1083] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 150.486595][ T1075] usb 4-1: 1:0 : does not exist [ 150.491600][ T1075] usb 4-1: BAAD GENERIC IO: no channels? [ 150.497492][ T1075] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 150.508044][ T1075] usb 4-1: USB disconnect, device number 53 [ 150.677245][ T1071] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 150.705683][ T1084] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 150.715702][ T1084] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 150.725488][ T1084] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.736446][ T1084] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 150.746216][ T1084] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 150.755367][ T1084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.782316][ T6777] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.789421][ T6777] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.796669][ T1081] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.806993][ T1083] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.817510][ T1084] pl2303 6-1:1.0: pl2303 converter detected [ 150.823437][ T1083] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.832342][ T1081] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 150.915594][ T1083] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 150.924881][ T1081] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.934111][ T1081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.942944][ T1083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.955182][ T1081] usb 5-1: SerialNumber: syz [ 150.960029][ T1083] usb 3-1: SerialNumber: syz [ 150.972840][ T1084] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 150.991999][ T1084] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 151.001600][ T1081] usb 5-1: bad CDC descriptors [ 151.010607][ T1084] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [8484]: -71 [ 151.030087][ T1084] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [8383]: -71 [ 151.039470][ T1071] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.048742][ T1084] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [8484]: -71 [ 151.050101][ T1071] usb 2-1: config 1 interface 1 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 151.068303][ T1084] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0404]: -71 [ 151.076524][ T1071] usb 2-1: config 1 interface 1 has no altsetting 2 [ 151.087172][ T1084] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [8484]: -71 [ 151.105921][ T1084] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [8383]: -71 [ 151.125449][ T1084] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0000]: -71 [ 151.144410][ T1084] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0001]: -71 [ 151.163012][ T1084] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0002]: -71 [ 151.171710][ T1084] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 151.181207][ T1084] usb 6-1: USB disconnect, device number 53 [ 151.188806][ T1084] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 151.203535][ T1084] pl2303 6-1:1.0: device disconnected [ 151.205437][ T1070] usb 5-1: USB disconnect, device number 55 [ 151.220420][ T1075] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 151.230246][ T1083] usb 3-1: skipping empty audio interface (v1) [ 151.236629][ T1083] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 151.245001][ T1083] usb 3-1: USB disconnect, device number 55 [ 151.258504][ T1071] usb 2-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 151.268126][ T1071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.276226][ T1071] usb 2-1: Product: syz [ 151.280563][ T1071] usb 2-1: Manufacturer: syz [ 151.285167][ T1071] usb 2-1: SerialNumber: syz [ 151.458760][ T1075] usb 4-1: Using ep0 maxpacket: 16 [ 151.547817][ T6821] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.558762][ T6821] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 151.568802][ T6821] JBD2: no valid journal superblock found [ 151.573177][ T1075] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.574551][ T6821] EXT4-fs (loop5): error loading journal [ 151.585008][ T1075] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.599356][ T1071] usb 2-1: 1:6 : no or invalid class specific endpoint descriptor [ 151.650812][ T1071] usb 2-1: USB disconnect, device number 54 [ 151.754285][ T1075] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.763722][ T1075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.771738][ T1075] usb 4-1: Product: syz [ 151.776435][ T1075] usb 4-1: Manufacturer: syz [ 151.781193][ T1075] usb 4-1: SerialNumber: syz [ 151.788706][ T6846] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 151.796546][ T6846] EXT4-fs (loop2): write access will be enabled during recovery [ 151.804304][ T6846] JBD2: no valid journal superblock found [ 151.810291][ T6846] EXT4-fs (loop2): error loading journal [ 151.917219][ T6849] EXT4-fs (loop2): Test dummy encryption mode enabled [ 151.924174][ T6849] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 151.973379][ T1074] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 151.983017][ T1084] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 152.047640][ T24] audit: type=1400 audit(1793805989.863:279): avc: denied { create } for pid=6865 comm="syz.2.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 152.087945][ T1075] usb 4-1: 0:2 : does not exist [ 152.105646][ T1075] usb 4-1: USB disconnect, device number 54 [ 152.201997][ T1074] usb 5-1: Using ep0 maxpacket: 8 [ 152.207506][ T6888] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.221636][ T6888] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3280: bg 0: block 5: invalid block bitmap [ 152.234578][ T6888] EXT4-fs (loop2): Remounting filesystem read-only [ 152.241182][ T6888] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 152.250219][ T6888] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.3280: invalid indirect mapped block 3 (level 2) [ 152.263744][ T6888] EXT4-fs (loop2): 2 truncates cleaned up [ 152.269629][ T6888] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,grpquota, [ 152.297352][ T1070] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 152.316305][ T1074] usb 5-1: config 245 has an invalid interface number: 249 but max is 2 [ 152.324662][ T1074] usb 5-1: config 245 has an invalid descriptor of length 0, skipping remainder of the config [ 152.340784][ T1074] usb 5-1: config 245 has no interface number 2 [ 152.347253][ T1074] usb 5-1: config 245 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 152.358275][ T1074] usb 5-1: config 245 interface 249 has no altsetting 0 [ 152.365242][ T1074] usb 5-1: config 245 interface 1 has no altsetting 0 [ 152.382886][ T1084] usb 6-1: config 8 has an invalid interface number: 163 but max is 0 [ 152.391164][ T1084] usb 6-1: config 8 has no interface number 0 [ 152.397423][ T1084] usb 6-1: config 8 interface 163 altsetting 125 bulk endpoint 0xD has invalid maxpacket 16 [ 152.407731][ T1084] usb 6-1: config 8 interface 163 altsetting 125 endpoint 0xA has invalid maxpacket 1552, setting to 64 [ 152.418875][ T1084] usb 6-1: config 8 interface 163 has no altsetting 0 [ 152.516943][ T1074] usb 5-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 152.526113][ T1074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.534184][ T1074] usb 5-1: Product: syz [ 152.538434][ T1074] usb 5-1: Manufacturer: syz [ 152.543140][ T1074] usb 5-1: SerialNumber: syz [ 152.592807][ T1084] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=12.f9 [ 152.602007][ T1084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.610160][ T1084] usb 6-1: Product: syz [ 152.614420][ T1083] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 152.622148][ T1084] usb 6-1: Manufacturer: syz [ 152.626774][ T1084] usb 6-1: SerialNumber: syz [ 152.650199][ T6839] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.754933][ T1070] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 152.764064][ T1070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 152.772036][ T1070] usb 2-1: Product: syz [ 152.776334][ T1070] usb 2-1: Manufacturer: syz [ 152.793521][ T1074] usb 5-1: Fast Track Pro config OK [ 152.811949][ T1071] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 152.820263][ T1070] uvcvideo: Found UVC 1.00 device syz (046d:0821) [ 152.826764][ T1070] uvcvideo: No streaming interface found for terminal 2. [ 152.827488][ T1070] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13 [ 152.878465][ T1074] usb 5-1: selecting invalid altsetting 0 [ 152.884265][ T1074] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 152.891298][ T1074] usb 5-1: selecting invalid altsetting 0 [ 152.897031][ T1074] usb 5-1: 0:2 : does not exist [ 152.904283][ T1074] usb 5-1: USB disconnect, device number 56 [ 152.945500][ T1084] usbhid 6-1:8.163: couldn't find an input interrupt endpoint [ 152.954124][ T1084] usb 6-1: USB disconnect, device number 54 [ 153.008725][ T1075] usb 2-1: USB disconnect, device number 55 [ 153.041172][ T1083] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.050634][ T1071] usb 4-1: Using ep0 maxpacket: 16 [ 153.088210][ T1083] usb 3-1: not running at top speed; connect to a high speed hub [ 153.193347][ T1083] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.203537][ T1083] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 153.212675][ T1071] usb 4-1: unable to get BOS descriptor or descriptor too short [ 153.220406][ T1083] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.307698][ T1071] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.317851][ T1071] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 153.327061][ T1071] usb 4-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 153.338179][ T1071] usb 4-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 153.345631][ T1083] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 153.360951][ T1083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 153.369134][ T1071] usb 4-1: config 1 interface 1 has no altsetting 0 [ 153.377011][ T1083] usb 3-1: Product: syz [ 153.381377][ T1083] usb 3-1: Manufacturer: syz [ 153.397449][ T6902] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 153.408054][ T6902] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.416619][ T6902] F2FS-fs (loop4): fault_injection options not supported [ 153.424334][ T6902] F2FS-fs (loop4): invalid crc value [ 153.431487][ T6902] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.452419][ T6902] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 153.459492][ T6902] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 153.466654][ T6902] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 153.545088][ T6919] exfat: Deprecated parameter 'namecase' [ 153.551288][ T1071] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 153.561050][ T6919] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 153.569621][ T1071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.578537][ T1071] usb 4-1: Product: syz [ 153.583135][ T1071] usb 4-1: Manufacturer: syz [ 153.589305][ T6919] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 153.601391][ T1071] usb 4-1: SerialNumber: syz [ 153.650726][ T1083] uvcvideo: Found UVC 1.00 device syz (8086:0ad2) [ 153.660076][ T1084] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 153.679055][ T1083] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 3: -71 (exp. 1). [ 153.717116][ T1083] uvcvideo: Failed to query (GET_INFO) UVC control 8 on unit 3: -71 (exp. 1). [ 153.736517][ T1083] uvcvideo: Failed to query (GET_INFO) UVC control 9 on unit 3: -71 (exp. 1). [ 153.746634][ T6936] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 153.756546][ T6936] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 153.766434][ T6936] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 153.766634][ T1083] uvcvideo: Failed to query (GET_INFO) UVC control 16 on unit 3: -71 (exp. 1). [ 153.785608][ T6936] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.793707][ T6936] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 153.801509][ T6936] EXT4-fs (loop1): failed to initialize system zone (-117) [ 153.808926][ T1083] uvcvideo: Failed to query (GET_INFO) UVC control 11 on unit 3: -71 (exp. 1). [ 153.808959][ T6936] EXT4-fs (loop1): mount failed [ 153.827488][ T6942] FAT-fs (loop4): Directory bread(block 64) failed [ 153.834270][ T1083] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 3: -71 (exp. 1). [ 153.839696][ T6942] FAT-fs (loop4): Directory bread(block 65) failed [ 153.844987][ T1083] uvcvideo: No streaming interface found for terminal 2. [ 153.849844][ T1083] uvcvideo: Failed to create links for entity 3 [ 153.850711][ T6942] FAT-fs (loop4): Directory bread(block 66) failed [ 153.857226][ T1083] uvcvideo: Failed to register entities (-22). [ 153.863276][ T6942] FAT-fs (loop4): Directory bread(block 67) failed [ 153.880031][ T1083] usb 3-1: USB disconnect, device number 56 [ 153.883444][ T6942] FAT-fs (loop4): Directory bread(block 68) failed [ 153.894983][ T6942] FAT-fs (loop4): Directory bread(block 69) failed [ 153.901612][ T1084] usb 6-1: Using ep0 maxpacket: 32 [ 153.901664][ T6942] FAT-fs (loop4): Directory bread(block 70) failed [ 153.913543][ T6942] FAT-fs (loop4): Directory bread(block 71) failed [ 153.920346][ T6942] FAT-fs (loop4): Directory bread(block 72) failed [ 153.926882][ T6942] FAT-fs (loop4): Directory bread(block 73) failed [ 153.974595][ T1071] usb 4-1: 0:2 : does not exist [ 154.012899][ T1084] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 154.042530][ T1071] usb 4-1: USB disconnect, device number 55 [ 154.057334][ T6947] 9pnet: Unknown protocol version 9~2000.L [ 154.104536][ T6955] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.3308: invalid indirect mapped block 234881024 (level 0) [ 154.122680][ T6955] EXT4-fs (loop4): Remounting filesystem read-only [ 154.129474][ T6955] EXT4-fs (loop4): 1 truncate cleaned up [ 154.142303][ T6955] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,journal_dev=0x0000000000000008,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,data_err=ignore,noblock_validity, [ 154.174587][ T1084] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice= 0.40 [ 154.183668][ T1084] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.192692][ T1084] usb 6-1: Product: syz [ 154.197199][ T1084] usb 6-1: Manufacturer: syz [ 154.201888][ T1084] usb 6-1: SerialNumber: syz [ 154.260967][ T1164] udevd[1164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.341153][ T6978] EXT4-fs (loop4): Test dummy encryption mode enabled [ 154.354775][ T6978] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 154.354775][ T6978] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 154.354775][ T6978] [ 154.373227][ T6978] EXT4-fs (loop4): Ignoring removed bh option [ 154.379380][ T6978] EXT4-fs (loop4): Ignoring removed orlov option [ 154.386284][ T6978] EXT4-fs (loop4): blocks per group (256) and clusters per group (32768) inconsistent [ 154.402482][ T6985] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 154.418498][ T6985] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 154.428626][ T6985] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 154.438597][ T1075] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 154.447125][ T6985] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 154.455355][ T6985] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 154.463418][ T6985] EXT4-fs (loop3): failed to initialize system zone (-117) [ 154.471090][ T6985] EXT4-fs (loop3): mount failed [ 154.536717][ T1084] usb 6-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 154.555853][ T1084] usb 6-1: incorrect wMaxPacketSize 0x20 for BADD profile [ 154.563159][ T1084] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 154.571302][ T1084] usb 6-1: USB disconnect, device number 55 [ 154.769259][ T24] audit: type=1400 audit(1793805992.727:280): avc: denied { mount } for pid=7020 comm="syz.2.3337" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 154.804047][ T24] audit: type=1400 audit(1793805992.748:281): avc: denied { unmount } for pid=1102 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 154.861069][ T1072] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 154.899227][ T1075] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.908603][ T7023] exFAT-fs (loop2): invalid fs_name [ 154.916639][ T7023] exFAT-fs (loop2): failed to read boot sector [ 154.930514][ T7023] exFAT-fs (loop2): failed to recognize exfat type [ 154.975576][ T1075] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.986102][ T1075] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 155.082921][ T7009] F2FS-fs (loop4): Test dummy encryption mode enabled [ 155.089904][ T7009] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 155.097523][ T7009] F2FS-fs (loop4): Unrecognized mount option "\z!kO^y~" or missing value [ 155.106653][ T1072] usb 4-1: Using ep0 maxpacket: 8 [ 155.146691][ T1075] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 155.155878][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.163918][ T1075] usb 2-1: Product: syz [ 155.168223][ T1075] usb 2-1: Manufacturer: syz [ 155.172936][ T1075] usb 2-1: SerialNumber: syz [ 155.214972][ T1075] usb 2-1: selecting invalid altsetting 1 [ 155.221103][ T1075] usb 2-1: unit 6 not found! [ 155.225995][ T1072] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 155.234912][ T1075] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 155.241974][ T1072] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.253008][ T1075] usb 2-1: selecting invalid altsetting 1 [ 155.258856][ T1075] usb 2-1: unit 6 not found! [ 155.263617][ T1072] usb 4-1: config 0 has no interface number 0 [ 155.269711][ T1072] usb 4-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.283288][ T1073] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 155.289927][ T1080] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 155.291207][ T1075] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 155.305463][ T1072] usb 4-1: config 0 interface 200 has no altsetting 0 [ 155.313083][ T1075] usb 2-1: selecting invalid altsetting 1 [ 155.319111][ T1075] usb 2-1: unit 6 not found! [ 155.324104][ T1075] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 155.356271][ T7039] cgroup: noprefix used incorrectly [ 155.417333][ T1084] usb 2-1: USB disconnect, device number 56 [ 155.424086][ T7049] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 155.436754][ T7049] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 155.443512][ T7049] EXT4-fs (loop4): mount failed [ 155.471058][ T1072] usb 4-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 155.480391][ T1072] usb 4-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 155.488723][ T1072] usb 4-1: Product: syz [ 155.492974][ T1072] usb 4-1: Manufacturer: syz [ 155.497574][ T1072] usb 4-1: SerialNumber: syz [ 155.502810][ T1072] usb 4-1: config 0 descriptor?? [ 155.642340][ T1073] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 155.652706][ T1073] usb 3-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 155.677620][ T7064] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 155.688134][ T24] audit: type=1400 audit(1793805993.682:282): avc: denied { relabelto } for pid=7063 comm="syz.4.3356" name="468" dev="tmpfs" ino=2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 155.715715][ T24] audit: type=1400 audit(1793805993.682:283): avc: denied { associate } for pid=7063 comm="syz.4.3356" name="468" dev="tmpfs" ino=2408 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 155.743762][ T1073] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.743784][ T1073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.753242][ T1080] usb 6-1: unable to get BOS descriptor or descriptor too short [ 155.768613][ T1073] usb 3-1: SerialNumber: syz [ 155.773500][ T24] audit: type=1400 audit(1793805993.693:284): avc: denied { write } for pid=1100 comm="syz-executor" name="468" dev="tmpfs" ino=2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 155.785735][ T1072] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 155.800713][ T24] audit: type=1400 audit(1793805993.693:285): avc: denied { remove_name } for pid=1100 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 155.808522][ T1073] usb 3-1: bad CDC descriptors [ 155.848491][ T1072] usb 4-1: USB disconnect, device number 56 [ 155.848674][ T24] audit: type=1400 audit(1793805993.693:286): avc: denied { rmdir } for pid=1100 comm="syz-executor" name="468" dev="tmpfs" ino=2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 156.011481][ T7102] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 156.055926][ T7110] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.083247][ T1072] usb 3-1: USB disconnect, device number 57 [ 156.099858][ T1080] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 156.108998][ T1080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.117135][ T1080] usb 6-1: Product: syz [ 156.121408][ T1080] usb 6-1: Manufacturer: syz [ 156.126256][ T1080] usb 6-1: SerialNumber: syz [ 156.185425][ T1073] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 156.452663][ T1080] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 156.453597][ T1073] usb 5-1: Using ep0 maxpacket: 32 [ 156.461086][ T7131] F2FS-fs (loop1): Invalid log blocks per segment (458761) [ 156.472411][ T7131] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.480800][ T7131] F2FS-fs (loop1): Test dummy encryption mode enabled [ 156.488200][ T7131] F2FS-fs (loop1): invalid crc value [ 156.493758][ T7131] F2FS-fs (loop1): invalid crc value [ 156.499049][ T7131] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 156.509652][ T1080] snd-usb-audio: probe of 6-1:1.1 failed with error -2 [ 156.567352][ T1080] snd-usb-audio: probe of 6-1:1.2 failed with error -2 [ 156.576695][ T1072] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 156.578013][ T1080] usb 6-1: USB disconnect, device number 56 [ 156.614753][ T1073] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.626977][ T7146] incfs: Options parsing error. -22 [ 156.632376][ T7146] incfs: mount failed -22 [ 156.780767][ T7152] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 156.789706][ T7152] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.796502][ T7152] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 156.806406][ T7152] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 156.821290][ T7152] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 156.828490][ T7152] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3399: bg 0: block 40: padding at end of block bitmap is not set [ 156.843756][ T7152] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 156.852494][ T1072] usb 4-1: Using ep0 maxpacket: 32 [ 156.853027][ T7152] EXT4-fs (loop1): 1 truncate cleaned up [ 156.863337][ T7152] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 156.871542][ T1073] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 156.881730][ T1073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.890975][ T1073] usb 5-1: Product: syz [ 156.895266][ T1073] usb 5-1: Manufacturer: syz [ 156.899928][ T1073] usb 5-1: SerialNumber: syz [ 156.909882][ T1083] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 156.979102][ T7168] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 156.980397][ T7168] loop5: p4 size 722688 extends beyond EOD, truncated [ 157.138423][ T1083] usb 3-1: Using ep0 maxpacket: 32 [ 157.177395][ T1073] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 157.186207][ T1073] usb 5-1: USB disconnect, device number 57 [ 157.234122][ T1072] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 157.243190][ T1084] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 157.251134][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.252895][ T1083] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.259281][ T1072] usb 4-1: Product: syz [ 157.303904][ T1072] usb 4-1: Manufacturer: syz [ 157.308674][ T1072] usb 4-1: SerialNumber: syz [ 157.311340][ T1083] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.322815][ T1083] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 157.434999][ T1751] udevd[1751]: inotify_add_watch(7, /dev/loop5p20, 10) failed: No such file or directory [ 157.446160][ T2162] udevd[2162]: inotify_add_watch(7, /dev/loop5p23, 10) failed: No such file or directory [ 157.460726][ T1123] udevd[1123]: inotify_add_watch(7, /dev/loop5p22, 10) failed: No such file or directory [ 157.471740][ T1311] udevd[1311]: inotify_add_watch(7, /dev/loop5p18, 10) failed: No such file or directory [ 157.481900][ T1083] usb 3-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 157.482461][ T2161] udevd[2161]: inotify_add_watch(7, /dev/loop5p14, 10) failed: No such file or directory [ 157.491823][ T2164] udevd[2164]: inotify_add_watch(7, /dev/loop5p24, 10) failed: No such file or directory [ 157.504877][ T1311] udevd[1311]: inotify_add_watch(7, /dev/loop5p26, 10) failed: No such file or directory [ 157.511437][ T2163] udevd[2163]: inotify_add_watch(7, /dev/loop5p19, 10) failed: No such file or directory [ 157.522401][ T1123] udevd[1123]: inotify_add_watch(7, /dev/loop5p27, 10) failed: No such file or directory [ 157.531431][ T1164] udevd[1164]: inotify_add_watch(7, /dev/loop5p15, 10) failed: No such file or directory [ 157.556667][ T1083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.576241][ T1083] usb 3-1: Product: syz [ 157.591878][ T1083] usb 3-1: Manufacturer: syz [ 157.601203][ T7181] erofs: (device loop5): mounted with root inode @ nid 36. [ 157.608704][ T1083] usb 3-1: SerialNumber: syz [ 157.619371][ T1072] usb 4-1: USB disconnect, device number 57 [ 157.624734][ T1084] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.636129][ T1084] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.787205][ T7184] erofs: (device loop4): mounted with root inode @ nid 36. [ 157.796088][ T1084] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 157.805648][ T1084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.813676][ T1084] usb 2-1: Product: syz [ 157.818041][ T1084] usb 2-1: Manufacturer: syz [ 157.823417][ T7187] erofs: (device loop5): mounted with root inode @ nid 36. [ 157.823754][ T1084] usb 2-1: SerialNumber: syz [ 157.873300][ T1084] usb-storage 2-1:1.0: USB Mass Storage device detected [ 157.881185][ T1084] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 157.913128][ T1084] scsi host1: usb-storage 2-1:1.0 [ 157.983200][ T1083] usb 3-1: Can't get UAC3 power state for id 10 [ 158.025115][ T1083] usb 3-1: 0:2 : does not exist [ 158.030767][ T1083] usb 3-1: 0:3 : does not exist [ 158.036717][ T1083] usb 3-1: 0:4 : does not exist [ 158.042650][ T1083] usb 3-1: 0:5 : does not exist [ 158.048675][ T1083] usb 3-1: 0:6 : does not exist [ 158.061225][ T1083] usb 3-1: 0:7 : does not exist [ 158.067371][ T7198] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 158.091894][ T1083] usb 3-1: 0:8 : does not exist [ 158.097145][ T7198] ext4 filesystem being mounted at /536/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.108373][ T1083] usb 3-1: 0:9 : does not exist [ 158.122241][ T1084] usb 2-1: USB disconnect, device number 57 [ 158.139098][ T1083] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 158.149416][ T1083] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 158.167689][ T1083] usb 3-1: USB disconnect, device number 58 [ 158.193584][ T7206] loop3: p3 p4[EZD] [ 158.197747][ T7206] loop3: p3 size 134217728 extends beyond EOD, truncated [ 158.207491][ T7206] loop3: p4 size 100664064 extends beyond EOD, truncated [ 158.310696][ T1073] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 158.339860][ T1164] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 158.346753][ T1101] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 158.356084][ T1164] blk_update_request: I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.360626][ T2166] blk_update_request: I/O error, dev loop3, sector 7941 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 158.369946][ T1164] Buffer I/O error on dev loop3p3, logical block 912, async page read [ 158.394691][ T2166] blk_update_request: I/O error, dev loop3, sector 7941 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.395115][ T7213] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 158.406528][ T2166] Buffer I/O error on dev loop3p4, logical block 7936, async page read [ 158.426421][ T2166] blk_update_request: I/O error, dev loop3, sector 7942 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.438066][ T2166] Buffer I/O error on dev loop3p4, logical block 7937, async page read [ 158.446404][ T2166] blk_update_request: I/O error, dev loop3, sector 7943 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.457994][ T2166] Buffer I/O error on dev loop3p4, logical block 7938, async page read [ 158.466554][ T2166] blk_update_request: I/O error, dev loop3, sector 7944 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.478093][ T2166] Buffer I/O error on dev loop3p4, logical block 7939, async page read [ 158.486500][ T2166] blk_update_request: I/O error, dev loop3, sector 7945 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.497766][ T2166] Buffer I/O error on dev loop3p4, logical block 7940, async page read [ 158.506205][ T2166] blk_update_request: I/O error, dev loop3, sector 7946 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.517585][ T2166] Buffer I/O error on dev loop3p4, logical block 7941, async page read [ 158.528652][ T2166] blk_update_request: I/O error, dev loop3, sector 7947 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.540083][ T2166] Buffer I/O error on dev loop3p4, logical block 7942, async page read [ 158.548564][ T2166] Buffer I/O error on dev loop3p4, logical block 7943, async page read [ 158.609637][ T7221] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 158.692037][ T1083] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 158.701366][ T1073] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 158.715993][ T1073] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1104, setting to 1024 [ 158.727329][ T1073] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 158.737189][ T1073] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 158.762533][ T2164] Buffer I/O error on dev loop3p4, logical block 7936, async page read [ 158.892095][ T1073] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.892369][ T1084] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 158.908816][ T1073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.917228][ T1073] usb 5-1: Product: syz [ 158.921600][ T1073] usb 5-1: Manufacturer: syz [ 158.926207][ T1073] usb 5-1: SerialNumber: syz [ 158.930413][ T1083] usb 3-1: Using ep0 maxpacket: 16 [ 158.949510][ T7203] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.073369][ T1071] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 159.101808][ T1083] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.197331][ T1073] cdc_ncm 5-1:1.0: bind() failure [ 159.203590][ T1073] cdc_ncm 5-1:1.1: bind() failure [ 159.216236][ T1073] usb 5-1: USB disconnect, device number 58 [ 159.273604][ T1084] usb 2-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 32 [ 159.283536][ T1084] usb 2-1: config 1 interface 0 has no altsetting 0 [ 159.311245][ T1071] usb 6-1: Using ep0 maxpacket: 32 [ 159.330728][ T1083] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 159.339802][ T1083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.348009][ T1083] usb 3-1: Product: syz [ 159.352307][ T1083] usb 3-1: Manufacturer: syz [ 159.356903][ T1083] usb 3-1: SerialNumber: syz [ 159.425661][ T1071] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 159.445050][ T1084] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 159.454150][ T1084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.464208][ T1084] usb 2-1: Product: syz [ 159.468388][ T1084] usb 2-1: Manufacturer: syz [ 159.472978][ T1084] usb 2-1: SerialNumber: syz [ 159.511846][ T7229] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 159.588081][ T1071] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 159.597386][ T1071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.607523][ T1071] usb 6-1: Product: syz [ 159.611870][ T1071] usb 6-1: Manufacturer: syz [ 159.616785][ T1071] usb 6-1: SerialNumber: syz [ 159.721473][ T1083] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.740537][ T1083] usb 3-1: unit 10 not found! [ 159.761665][ T1083] usb 3-1: USB disconnect, device number 59 [ 159.799101][ T1084] usb 2-1: USB disconnect, device number 58 [ 159.921956][ T1071] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 159.933084][ T1071] usb 6-1: USB disconnect, device number 57 [ 159.958588][ T7256] F2FS-fs (loop3): Found nat_bits in checkpoint [ 160.001500][ T7256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 160.645808][ T1083] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 160.791965][ T7278] F2FS-fs (loop1): invalid crc value [ 160.798548][ T7278] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.819883][ T7278] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.892306][ T7258] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.973901][ T7258] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.036430][ T1083] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.057526][ T7305] loop5: p2 p3 p7 [ 161.086301][ T7298] loop3: p1 p3 < p5 p6 > [ 161.122362][ T1083] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.132864][ T1083] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.163378][ T24] audit: type=1400 audit(1793805999.432:287): avc: denied { write } for pid=7310 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.312830][ T1083] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 161.322109][ T1083] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.330208][ T1083] usb 3-1: Product: syz [ 161.334715][ T1083] usb 3-1: Manufacturer: syz [ 161.339330][ T1083] usb 3-1: SerialNumber: syz [ 161.381498][ T1083] usb 3-1: selecting invalid altsetting 1 [ 161.389025][ T7309] F2FS-fs (loop1): invalid crc value [ 161.396373][ T1083] usb 3-1: unit 6 not found! [ 161.413117][ T1083] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 161.442966][ T7309] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 161.457512][ T24] audit: type=1400 audit(1793805999.747:288): avc: denied { write } for pid=7323 comm="syz.3.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.477129][ T7315] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 161.501963][ T7315] ext4 filesystem being mounted at /552/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.541602][ T24] audit: type=1400 audit(1793805999.821:289): avc: denied { setopt } for pid=7330 comm="syz.3.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 161.545988][ T7315] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #2: block 18: comm syz.5.3460: lblock 23 mapped to illegal pblock 18 (length 1) [ 161.580532][ T7309] F2FS-fs (loop1): Start checkpoint disabled! [ 161.590392][ T1071] usb 3-1: USB disconnect, device number 60 [ 161.607425][ T7309] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 161.670521][ T7322] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 161.679671][ T7338] device vlan0 entered promiscuous mode [ 161.680182][ T7322] F2FS-fs (loop4): invalid crc value [ 161.691168][ T7322] F2FS-fs (loop4): invalid crc value [ 161.696744][ T7322] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 161.766153][ T7342] xt_hashlimit: max too large, truncated to 1048576 [ 161.780247][ T7344] ip_tables: iptables: counters copy to user failed while replacing table [ 161.859377][ T7355] xt_TCPMSS: Only works on TCP SYN packets [ 161.894549][ T24] audit: type=1326 audit(1793806000.209:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.3.3476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b18c6eb19 code=0x7ffc0000 [ 161.914643][ T7361] capability: warning: `syz.1.3478' uses deprecated v2 capabilities in a way that may be insecure [ 161.945884][ T24] audit: type=1326 audit(1793806000.209:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.3.3476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b18c6eb19 code=0x7ffc0000 [ 161.970858][ T24] audit: type=1326 audit(1793806000.209:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.3.3476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b18c6eb19 code=0x7ffc0000 [ 161.995758][ T24] audit: type=1326 audit(1793806000.209:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.3.3476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b18c6eb19 code=0x7ffc0000 [ 162.020963][ T24] audit: type=1326 audit(1793806000.209:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.3.3476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8b18c6eb19 code=0x7ffc0000 [ 162.045904][ T24] audit: type=1326 audit(1793806000.209:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.3.3476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b18c6eb19 code=0x7ffc0000 [ 162.071467][ T24] audit: type=1326 audit(1793806000.209:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7356 comm="syz.3.3476" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b18c6eb19 code=0x7ffc0000 [ 162.132485][ T1083] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 162.161469][ T7375] x_tables: unsorted entry at hook 1 [ 162.291644][ T7389] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3492'. [ 162.321361][ T7393] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.355866][ T7372] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 162.392740][ T7372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 162.421073][ T7372] F2FS-fs (loop1): Should set mode=lfs with 8KB-sized IO [ 162.475679][ T1083] usb 5-1: config index 0 descriptor too short (expected 4257, got 161) [ 162.484080][ T1083] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 24825, setting to 64 [ 162.512373][ T1083] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 162.521567][ T1083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.670653][ T7429] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue [ 162.682590][ T7429] ext4 filesystem being mounted at /613/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.729074][ T7440] device bridge1 entered promiscuous mode [ 162.808806][ T1083] usb 5-1: string descriptor 0 read error: -71 [ 162.816405][ T1083] uvcvideo: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 162.827431][ T7450] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3520'. [ 162.838176][ T1083] uvcvideo: Found UVC 1.00 device (046d:0825) [ 162.845170][ T1083] uvcvideo: No streaming interface found for terminal 2. [ 162.870109][ T1083] usb 5-1: USB disconnect, device number 59 [ 162.875870][ T7452] exfat: Deprecated parameter 'namecase' [ 162.937746][ T7452] exfat: Deprecated parameter 'namecase' [ 162.976952][ T7452] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc36ae4d7, utbl_chksum : 0xe619d30d) [ 163.146927][ T7464] netlink: 'syz.2.3526': attribute type 3 has an invalid length. [ 163.238312][ T7402] F2FS-fs (loop5): Wrong SSA boundary, start(3584) end(4096) blocks(4096) [ 163.250504][ T7402] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 163.266419][ T7402] F2FS-fs (loop5): invalid crc value [ 163.299869][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3535'. [ 163.309772][ T7402] F2FS-fs (loop5): Found nat_bits in checkpoint [ 163.416477][ T7402] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 163.423641][ T7402] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 163.579096][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 163.593583][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.618996][ T1083] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 163.638134][ T1082] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 163.666482][ T1084] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 163.761931][ T7530] FAT-fs (loop3): Directory bread(block 64) failed [ 163.768669][ T7530] FAT-fs (loop3): Directory bread(block 65) failed [ 163.775746][ T7530] FAT-fs (loop3): Directory bread(block 66) failed [ 163.782925][ T7530] FAT-fs (loop3): Directory bread(block 67) failed [ 163.789634][ T7530] FAT-fs (loop3): Directory bread(block 68) failed [ 163.796342][ T7530] FAT-fs (loop3): Directory bread(block 69) failed [ 163.803417][ T7530] FAT-fs (loop3): Directory bread(block 70) failed [ 163.810270][ T7530] FAT-fs (loop3): Directory bread(block 71) failed [ 163.816939][ T7530] FAT-fs (loop3): Directory bread(block 72) failed [ 163.823492][ T7530] FAT-fs (loop3): Directory bread(block 73) failed [ 163.895576][ T1084] usb 5-1: Using ep0 maxpacket: 16 [ 163.962353][ T1083] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.972895][ T1083] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.987493][ T1082] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.999135][ T1082] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.009717][ T1084] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 164.017975][ T1084] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 164.029851][ T1082] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 164.039326][ T1084] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 164.048623][ T1082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.059550][ T1084] usb 5-1: config 0 has no interface number 0 [ 164.065861][ T1084] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 18977, setting to 1024 [ 164.081329][ T1084] usb 5-1: config 0 interface 104 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 164.091950][ T1084] usb 5-1: config 0 interface 104 has no altsetting 1 [ 164.114930][ T1083] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.124008][ T1083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.132818][ T1082] uvcvideo: Found UVC 1.00 device (0000:0000) [ 164.141303][ T1083] usb 2-1: SerialNumber: syz [ 164.248252][ T1084] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 164.257707][ T1084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.265871][ T1084] usb 5-1: Product: syz [ 164.272056][ T1084] usb 5-1: Manufacturer: syz [ 164.276949][ T1084] usb 5-1: SerialNumber: syz [ 164.280429][ T1084] usb 5-1: config 0 descriptor?? [ 164.324475][ T1082] uvcvideo: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1). [ 164.335289][ T1084] asix: probe of 5-1:0.104 failed with error -22 [ 164.353080][ T1082] uvcvideo: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1). [ 164.381614][ T1082] uvcvideo: Failed to query (GET_INFO) UVC control 12 on unit 1: -71 (exp. 1). [ 164.410785][ T1083] cdc_mbim 2-1:1.0: bind() failure [ 164.419805][ T1082] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 164.429064][ T1083] usb 2-1: USB disconnect, device number 59 [ 164.448002][ T1082] uvcvideo: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1). [ 164.476946][ T1082] uvcvideo: Failed to query (GET_INFO) UVC control 16 on unit 1: -71 (exp. 1). [ 164.486641][ T1082] uvcvideo: No valid video chain found. [ 164.491243][ T1082] usb 3-1: USB disconnect, device number 61 [ 164.536625][ T1073] usb 5-1: USB disconnect, device number 60 [ 164.554223][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 164.563294][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 164.572415][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 164.582228][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 164.591214][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 164.600655][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 164.609692][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3594'. [ 164.624335][ T7608] device vlan0 left promiscuous mode [ 164.715282][ T7616] netlink: 'syz.3.3598': attribute type 9 has an invalid length. [ 164.893208][ T7635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 165.060996][ T7659] xt_TCPMSS: Only works on TCP SYN packets [ 165.118518][ T7669] SELinux: security_context_str_to_sid(un) failed for (dev tmpfs, type tmpfs) errno=-22 [ 165.413262][ T7757] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 165.440740][ T7757] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.3666: corrupted in-inode xattr [ 165.453324][ T7757] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.3666: couldn't read orphan inode 15 (err -117) [ 165.466502][ T7757] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,init_itable,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue [ 165.492456][ T7785] netlink: 'syz.4.3679': attribute type 3 has an invalid length. [ 165.511648][ T7790] xt_ecn: cannot match TCP bits for non-tcp packets [ 165.518383][ T7788] printk: syz.5.3681 (7788): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 165.534149][ T7794] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 165.620157][ T7811] netlink: 'syz.2.3693': attribute type 3 has an invalid length. [ 165.746482][ T7834] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 165.757140][ T7834] ext4 filesystem being mounted at /647/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.782482][ T7848] netlink: 'syz.1.3709': attribute type 14 has an invalid length. [ 165.990157][ T7887] mmap: syz.4.3727 (7887): VmData 29102080 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 166.010544][ T7892] device veth2 entered promiscuous mode [ 166.041671][ T7882] EXT4-fs (loop3): Ignoring removed nobh option [ 166.058661][ T7882] EXT4-fs (loop3): Test dummy encryption mode enabled [ 166.077836][ T7882] EXT4-fs (loop3): Ignoring removed bh option [ 166.088274][ T7882] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue [ 166.089132][ T7908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=7908 comm=syz.1.3737 [ 166.124220][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 166.124234][ T24] audit: type=1326 audit(1793806004.637:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.4.3739" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548da8b19 code=0x7ffc0000 [ 166.157580][ T24] audit: type=1326 audit(1793806004.647:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.4.3739" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548da8b19 code=0x7ffc0000 [ 166.182432][ T24] audit: type=1326 audit(1793806004.668:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.4.3739" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fe548da8b19 code=0x7ffc0000 [ 166.207579][ T24] audit: type=1326 audit(1793806004.700:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.4.3739" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548da8b19 code=0x7ffc0000 [ 166.233375][ T24] audit: type=1326 audit(1793806004.700:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.4.3739" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe548da8b19 code=0x7ffc0000 [ 166.354282][ T24] audit: type=1400 audit(1793806004.878:343): avc: denied { write } for pid=7942 comm="syz.2.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.409213][ T7965] x_tables: ip_tables: hashlimit.1 match: invalid size 56 (kernel) != (user) 616 [ 166.424556][ T24] audit: type=1400 audit(1793806004.910:344): avc: denied { write } for pid=7954 comm="syz.4.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.479835][ T7985] device xfrm0 entered promiscuous mode [ 166.509381][ T7994] netlink: 'syz.3.3777': attribute type 16 has an invalid length. [ 166.526948][ T7994] netlink: 'syz.3.3777': attribute type 17 has an invalid length. [ 166.537936][ T24] audit: type=1400 audit(1793806005.078:345): avc: denied { nlmsg_read } for pid=8001 comm="syz.5.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.573351][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.582036][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.606709][ T8000] IPv6: sit1: Disabled Multicast RS [ 166.626585][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 166.640009][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.648113][ T8018] EXT4-fs (loop1): Ignoring removed nobh option [ 166.648235][ T8018] EXT4-fs (loop1): Test dummy encryption mode enabled [ 166.666380][ T8018] EXT4-fs (loop1): Ignoring removed bh option [ 166.673974][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.682604][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.697025][ T8018] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue [ 166.702356][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.722651][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.782617][ T8038] netlink: 'syz.4.3800': attribute type 3 has an invalid length. [ 166.919395][ T8076] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.933405][ T8080] device bridge1 entered promiscuous mode [ 166.952519][ T24] audit: type=1400 audit(1793806005.508:346): avc: denied { connect } for pid=8081 comm="syz.2.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.985852][ T24] audit: type=1400 audit(1793806005.508:347): avc: denied { ioctl } for pid=8084 comm="syz.5.3824" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.084676][ T8078] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 167.117657][ T8104] netlink: 'syz.2.3831': attribute type 4 has an invalid length. [ 167.146891][ T8106] xt_socket: unknown flags 0xc [ 167.151768][ T8104] netlink: 'syz.2.3831': attribute type 5 has an invalid length. [ 167.159855][ T8104] __nla_validate_parse: 105 callbacks suppressed [ 167.159873][ T8104] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3831'. [ 167.250307][ T8110] EXT4-fs (loop5): Ignoring removed nobh option [ 167.273533][ T8110] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 167.284036][ T8110] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 167.293585][ T8136] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.3847'. [ 167.295063][ T8110] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.3835: inode has both inline data and extents flags [ 167.320446][ T8110] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3835: couldn't read orphan inode 13 (err -117) [ 167.335891][ T8110] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue [ 167.593418][ T8171] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 167.651361][ T8161] F2FS-fs (loop3): invalid crc value [ 167.667053][ T8161] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 167.705511][ T8161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 167.754842][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3880'. [ 167.950016][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3893'. [ 168.018937][ T8257] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 168.047060][ T8263] validate_nla: 2 callbacks suppressed [ 168.047071][ T8263] netlink: 'syz.4.3905': attribute type 12 has an invalid length. [ 168.141008][ T8292] usb usb1: usbfs: process 8292 (syz.2.3918) did not claim interface 0 before use [ 168.158431][ T8297] netlink: 'syz.1.3921': attribute type 16 has an invalid length. [ 168.166588][ T8297] netlink: 'syz.1.3921': attribute type 17 has an invalid length. [ 168.195793][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.204498][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.236927][ T8297] device bridge1 left promiscuous mode [ 168.245302][ T8305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 168.256297][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 168.273319][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.274301][ T8305] ext4 filesystem being mounted at /688/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.303368][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 168.327489][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.335999][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.344509][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.353139][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.361684][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.380451][ T8331] kernel profiling enabled (shift: 9) [ 168.566632][ T8368] EXT4-fs (loop5): 1 truncate cleaned up [ 168.574554][ T8382] device vlan0 entered promiscuous mode [ 168.581818][ T8368] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro, [ 168.612673][ T8386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.642240][ T8400] x_tables: duplicate underflow at hook 2 [ 168.649562][ T8399] netlink: 'syz.2.3969': attribute type 29 has an invalid length. [ 168.718354][ T8410] netlink: 'syz.2.3977': attribute type 3 has an invalid length. [ 168.726291][ T8420] netlink: 'syz.4.3980': attribute type 46 has an invalid length. [ 168.861244][ T8436] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.868766][ T8450] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 168.873363][ T8452] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 168.886353][ T8436] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #16: comm syz.5.3989: invalid indirect mapped block 32768 (level 2) [ 168.900551][ T8436] EXT4-fs (loop5): Remounting filesystem read-only [ 168.907162][ T8436] EXT4-fs (loop5): 1 orphan inode deleted [ 168.912956][ T8436] EXT4-fs (loop5): 1 truncate cleaned up [ 168.918920][ T8436] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,usrquota, [ 168.965384][ T8436] EXT4-fs error (device loop5): ext4_search_dir:1521: inode #12: block 7: comm syz.5.3989: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 168.986306][ T8436] EXT4-fs (loop5): Remounting filesystem read-only [ 169.068925][ T8478] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4006'. [ 169.069814][ T8480] mip6: mip6_destopt_init_state: spi is not 0: 436207616 [ 169.099102][ T8475] exfat: Deprecated parameter 'utf8' [ 169.106290][ T8475] exfat: Deprecated parameter 'utf8' [ 169.113254][ T8475] exfat: Deprecated parameter 'namecase' [ 169.167776][ T8475] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 169.204033][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4017'. [ 169.255420][ T8514] device vti0 entered promiscuous mode [ 169.262876][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4025'. [ 169.318723][ T8531] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 170.163403][ T8639] xt_TCPMSS: Only works on TCP SYN packets [ 170.190006][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 170.257992][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4094'. [ 170.293415][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4099'. [ 170.399547][ T8691] ip_tables: iptables: counters copy to user failed while replacing table [ 170.406673][ T8695] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 170.492748][ T8714] xt_NFQUEUE: number of total queues is 0 [ 170.547069][ T8721] exfat: Deprecated parameter 'utf8' [ 170.553128][ T8721] exfat: Deprecated parameter 'namecase' [ 170.558901][ T8721] exfat: Deprecated parameter 'utf8' [ 170.590465][ T8721] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 170.648192][ T8745] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 170.690452][ T8756] netlink: 'syz.3.4144': attribute type 21 has an invalid length. [ 170.816158][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 170.835348][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.855351][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 170.880489][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.889523][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.898665][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.908881][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.917818][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.926459][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 170.934751][ T8822] overlayfs: './file0' not a directory [ 170.940819][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 170.951828][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 170.951842][ T24] audit: type=1400 audit(1793806009.705:416): avc: denied { ioctl } for pid=8827 comm="syz.2.4178" path="socket:[39549]" dev="sockfs" ino=39549 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 171.011220][ T24] audit: type=1326 audit(1793806009.747:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.1.4180" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d0cfb19 code=0x7ffc0000 [ 171.047464][ T24] audit: type=1326 audit(1793806009.747:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.1.4180" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d0cfb19 code=0x7ffc0000 [ 171.057939][ T8847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.079769][ T8847] IPv6: NLM_F_CREATE should be set when creating new route [ 171.087013][ T8847] IPv6: NLM_F_CREATE should be set when creating new route [ 171.107146][ T24] audit: type=1326 audit(1793806009.747:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.1.4180" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d0cfb19 code=0x7ffc0000 [ 171.163390][ T8860] netlink: 'syz.3.4192': attribute type 39 has an invalid length. [ 171.181463][ T24] audit: type=1326 audit(1793806009.747:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.1.4180" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f1e2d0cfb19 code=0x7ffc0000 [ 171.225131][ T24] audit: type=1326 audit(1793806009.747:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.1.4180" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d0cfb19 code=0x7ffc0000 [ 171.282113][ T24] audit: type=1326 audit(1793806009.747:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.1.4180" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2d0cfb19 code=0x7ffc0000 [ 171.340523][ T24] audit: type=1326 audit(1793806009.747:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.1.4180" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1e2d0cfb19 code=0x7ffc0000 [ 171.376489][ T24] audit: type=1326 audit(1793806009.747:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.1.4180" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1e2d0cfb19 code=0x7ffc0000 [ 171.425075][ T8898] exfat: Deprecated parameter 'utf8' [ 171.430914][ T8898] exfat: Deprecated parameter 'utf8' [ 171.443332][ T24] audit: type=1400 audit(1793806009.904:425): avc: denied { getopt } for pid=8851 comm="syz.1.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.443479][ T8898] exfat: Deprecated parameter 'namecase' [ 171.494434][ T8898] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 171.739014][ T8923] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda12bc53, utbl_chksum : 0xe619d30d) [ 171.813166][ T8923] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 171.948898][ T8905] F2FS-fs (loop2): fault_injection options not supported [ 171.977533][ T8905] F2FS-fs (loop2): fault_type options not supported [ 171.985113][ T8905] F2FS-fs (loop2): invalid crc value [ 172.015706][ T8905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.061505][ T8905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.072367][ T8848] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 172.081816][ T8848] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 172.090789][ T8848] F2FS-fs (loop5): invalid crc value [ 172.097402][ T8939] netlink: 'syz.3.4230': attribute type 7 has an invalid length. [ 172.107397][ T8939] __nla_validate_parse: 2 callbacks suppressed [ 172.107406][ T8939] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4230'. [ 172.128525][ T8848] F2FS-fs (loop5): Found nat_bits in checkpoint [ 172.158647][ T8941] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.240340][ T8947] x_tables: duplicate entry at hook 2 [ 172.250658][ T8941] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 172.261361][ T8848] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 172.272284][ T8848] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 172.282438][ T8907] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 172.291982][ T8907] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 172.301220][ T8907] F2FS-fs (loop1): invalid crc value [ 172.339869][ T8907] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.344922][ T8962] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 172.384434][ T8907] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 172.391977][ T8907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 172.433284][ T8907] F2FS-fs (loop1): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 172.443465][ T8907] F2FS-fs (loop1): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 172.530755][ T8977] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 172.640882][ T8993] SELinux: duplicate or incompatible mount options [ 172.877752][ T9035] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4271'. [ 172.931061][ T9033] EXT4-fs (loop4): Test dummy encryption mode enabled [ 172.946929][ T9033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.976859][ T9033] EXT4-fs (loop4): 1 truncate cleaned up [ 172.988493][ T9047] xt_hashlimit: size too large, truncated to 1048576 [ 172.990522][ T9033] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue [ 173.006227][ T9047] xt_hashlimit: max too large, truncated to 1048576 [ 173.024469][ T9047] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 173.035719][ T9051] ip_tables: iptables: counters copy to user failed while replacing table [ 173.264773][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4305'. [ 173.311991][ T9112] bridge0: port 3(gretap0) entered blocking state [ 173.330235][ T9112] bridge0: port 3(gretap0) entered disabled state [ 173.337644][ T9112] device gretap0 entered promiscuous mode [ 173.372648][ T9114] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 173.494609][ T9030] F2FS-fs (loop5): invalid crc value [ 173.532830][ T9143] xt_l2tp: v2 tid > 0xffff: 262144 [ 173.540803][ T9145] xt_bpf: check failed: parse error [ 173.545637][ T9030] F2FS-fs (loop5): Found nat_bits in checkpoint [ 173.569211][ T9148] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4324'. [ 173.575389][ T9030] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 173.587468][ T9139] EXT4-fs (loop1): Ignoring removed nobh option [ 173.594753][ T9030] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 173.608828][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 173.619177][ T9139] EXT4-fs error (device loop1): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 173.645300][ T9139] EXT4-fs (loop1): Remounting filesystem read-only [ 173.652290][ T9139] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.4323: invalid indirect mapped block 4278190080 (level 0) [ 173.672810][ T9139] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.4323: invalid indirect mapped block 1 (level 1) [ 173.681701][ T9169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.686480][ T9139] EXT4-fs (loop1): 1 truncate cleaned up [ 173.707107][ T9139] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,jqfmt=vfsv1,grpid,nolazytime,nobh,auto_da_alloc=0x0000000000000006,data=journal,grpjquota=, [ 173.763134][ T9177] IPv6: sit1: Disabled Multicast RS [ 173.778385][ T9139] EXT4-fs error (device loop1): ext4_lookup:1822: inode #2: comm syz.1.4323: bad inode number: 1 [ 173.797418][ T9181] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4339'. [ 173.821482][ T9139] EXT4-fs (loop1): Remounting filesystem read-only [ 173.887031][ T9191] device veth1_macvtap left promiscuous mode [ 173.893595][ T9191] device veth1_macvtap entered promiscuous mode [ 173.900814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.929492][ T9199] syz.5.4332 (9199): /proc/9198/oom_adj is deprecated, please use /proc/9198/oom_score_adj instead. [ 173.931414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.956754][ T9203] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 173.959584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.986943][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.994064][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.035694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.045461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.053796][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.060917][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.080366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.090340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 174.098721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.107074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 174.115326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.136372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.145295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.154369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.163647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.172210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.181073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.189579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.199249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.214859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.223280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.233802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.255060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.273296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.281712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.293259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.307455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.317247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.330329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.338281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.346599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.354879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.363199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.432529][ T9245] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 174.440626][ T9245] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 174.450284][ T9245] F2FS-fs (loop2): invalid crc value [ 174.495786][ T9245] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 174.537597][ T9245] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 174.559128][ T9245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 174.614285][ T9245] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 174.654063][ T9318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4403'. [ 174.673610][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4408'. [ 174.684561][ T9326] netlink: 3596 bytes leftover after parsing attributes in process `syz.5.4409'. [ 174.771360][ T9342] binfmt_misc: register: failed to install interpreter file ./bus [ 174.785773][ T9344] x_tables: unsorted entry at hook 3 [ 174.973264][ T9399] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4444'. [ 175.060243][ T9416] device xfrm2 entered promiscuous mode [ 175.217252][ T9443] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 175.262444][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.262655][ T9443] EXT4-fs error (device loop1): ext4_generic_delete_entry:2683: inode #12: block 7: comm syz.1.4464: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 175.303977][ T9443] EXT4-fs error (device loop1) in ext4_delete_inline_entry:1803: Corrupt filesystem [ 175.324225][ T9443] EXT4-fs warning (device loop1): ext4_rename_delete:3901: inode #12: comm syz.1.4464: Deleting old file: nlink 2, error=-117 [ 175.338682][ T9443] EXT4-fs error (device loop1): ext4_free_inode:353: comm syz.1.4464: bit already cleared for inode 15 [ 175.369734][ T9500] ================================================================== [ 175.377864][ T9500] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 175.386036][ T9500] Read of size 4 at addr ffff88812a6ed470 by task syz.4.4491/9500 [ 175.393984][ T9500] [ 175.396341][ T9500] CPU: 1 PID: 9500 Comm: syz.4.4491 Not tainted syzkaller #0 [ 175.403818][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.406075][ T9508] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 175.413884][ T9500] Call Trace: [ 175.413905][ T9500] __dump_stack+0x21/0x24 [ 175.413925][ T9500] dump_stack_lvl+0x1a7/0x208 [ 175.435687][ T9500] ? show_regs_print_info+0x18/0x18 [ 175.440907][ T9500] ? thaw_kernel_threads+0x220/0x220 [ 175.446214][ T9500] print_address_description+0x7f/0x2c0 [ 175.451771][ T9500] ? unaccount_page_cache_page+0x9dc/0xac0 [ 175.457584][ T9500] kasan_report+0x100/0x140 [ 175.462077][ T9500] ? xas_store+0xd0c/0x18d0 [ 175.466567][ T9500] ? unaccount_page_cache_page+0x9dc/0xac0 [ 175.472511][ T9500] __asan_report_load4_noabort+0x14/0x20 [ 175.478313][ T9500] unaccount_page_cache_page+0x9dc/0xac0 [ 175.483940][ T9500] __delete_from_page_cache+0xc3/0x470 [ 175.489394][ T9500] ? memset+0x35/0x40 [ 175.493401][ T9500] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 175.500620][ T9500] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 175.506199][ T9500] ? __kasan_check_read+0x11/0x20 [ 175.511222][ T9500] ? workingset_eviction+0x3dc/0x940 [ 175.516498][ T9500] __remove_mapping+0x581/0x6b0 [ 175.522734][ T9500] shrink_page_list+0x21ee/0x4160 [ 175.527756][ T9500] ? shrink_page_list+0x1ea1/0x4160 [ 175.532947][ T9500] ? reclaim_clean_pages_from_list+0x740/0x740 [ 175.539258][ T9500] ? shrink_inactive_list+0xef0/0xef0 [ 175.544629][ T9500] ? __count_memcg_events+0x89/0x210 [ 175.549908][ T9500] shrink_inactive_list+0x90c/0xef0 [ 175.555101][ T9500] ? __this_cpu_preempt_check+0x13/0x20 [ 175.560640][ T9500] ? shrink_active_list+0xe00/0xe00 [ 175.565829][ T9500] ? blk_flush_plug_list+0x40b/0x450 [ 175.571138][ T9500] ? __kasan_check_read+0x11/0x20 [ 175.576174][ T9500] ? __kasan_check_read+0x11/0x20 [ 175.581195][ T9500] ? lruvec_lru_size+0x230/0x250 [ 175.586148][ T9500] ? blk_start_plug+0x5a/0x170 [ 175.590926][ T9500] shrink_lruvec+0x281a/0x2ef0 [ 175.595693][ T9500] ? sched_group_set_shares+0x480/0x480 [ 175.601235][ T9500] ? __kasan_check_write+0x14/0x20 [ 175.606336][ T9500] ? down_read_trylock+0x106/0x160 [ 175.611446][ T9500] ? __init_rwsem+0x1c0/0x1c0 [ 175.616128][ T9500] ? check_preempt_wakeup+0x4e2/0xb10 [ 175.621565][ T9500] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 175.627142][ T9500] ? __kasan_check_write+0x14/0x20 [ 175.632244][ T9500] ? up_read+0x12/0x50 [ 175.636303][ T9500] ? shrink_slab+0x671/0x830 [ 175.640886][ T9500] ? __kasan_check_write+0x14/0x20 [ 175.646075][ T9500] ? __kasan_check_read+0x11/0x20 [ 175.651089][ T9500] ? inactive_is_low+0x17a/0x2f0 [ 175.656018][ T9500] ? __kasan_check_write+0x14/0x20 [ 175.661117][ T9500] shrink_node+0xee0/0x2690 [ 175.665633][ T9500] do_try_to_free_pages+0x602/0x1590 [ 175.670926][ T9500] ? try_to_free_pages+0xc20/0xc20 [ 175.676028][ T9500] try_to_free_mem_cgroup_pages+0x261/0x610 [ 175.681926][ T9500] ? shrink_lruvec+0x2ef0/0x2ef0 [ 175.686882][ T9500] mem_cgroup_resize_max+0x309/0x3e0 [ 175.692157][ T9500] mem_cgroup_write+0x1ed/0x230 [ 175.697010][ T9500] ? mem_cgroup_reset+0x130/0x130 [ 175.702023][ T9500] ? mem_cgroup_reset+0x130/0x130 [ 175.707063][ T9500] cgroup_file_write+0x294/0x560 [ 175.711993][ T9500] ? cgroup_seqfile_stop+0xc0/0xc0 [ 175.717095][ T9500] ? mutex_lock+0x92/0xf0 [ 175.721536][ T9500] ? mutex_trylock+0xb0/0xb0 [ 175.726263][ T9500] ? __kasan_check_write+0x14/0x20 [ 175.731402][ T9500] ? cgroup_seqfile_stop+0xc0/0xc0 [ 175.736523][ T9500] kernfs_fop_write_iter+0x2bd/0x400 [ 175.741898][ T9500] vfs_write+0x770/0xd70 [ 175.746138][ T9500] ? kernel_write+0x3c0/0x3c0 [ 175.750864][ T9500] ? mutex_trylock+0xb0/0xb0 [ 175.755480][ T9500] ? __fget_files+0x2e1/0x340 [ 175.760547][ T9500] ? __fdget_pos+0x2d2/0x380 [ 175.765149][ T9500] ? ksys_write+0x70/0x260 [ 175.769560][ T9500] ksys_write+0x14a/0x260 [ 175.773881][ T9500] ? __ia32_sys_read+0x90/0x90 [ 175.778640][ T9500] ? __kasan_check_read+0x11/0x20 [ 175.783665][ T9500] __x64_sys_write+0x7b/0x90 [ 175.788531][ T9500] do_syscall_64+0x31/0x40 [ 175.792967][ T9500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 175.798859][ T9500] RIP: 0033:0x7fe548da8b19 [ 175.803285][ T9500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.822884][ T9500] RSP: 002b:00007fe547800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.831302][ T9500] RAX: ffffffffffffffda RBX: 00007fe54902efa0 RCX: 00007fe548da8b19 [ 175.839264][ T9500] RDX: 0000000000000050 RSI: 0000200000002e40 RDI: 0000000000000003 [ 175.847224][ T9500] RBP: 00007fe548e40b70 R08: 0000000000000000 R09: 0000000000000000 [ 175.855184][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.863232][ T9500] R13: 00007fe54902f038 R14: 00007fe54902efa0 R15: 00007ffc59a5d218 [ 175.871196][ T9500] [ 175.873536][ T9500] Allocated by task 8136: [ 175.877964][ T9500] __kasan_kmalloc+0xd4/0x100 [ 175.882637][ T9500] kmem_cache_alloc_trace+0x179/0x2e0 [ 175.888000][ T9500] tcf_block_get_ext+0x36c/0x16b0 [ 175.893011][ T9500] tcf_block_get+0x65/0x90 [ 175.897414][ T9500] prio_init+0x37/0x80 [ 175.901470][ T9500] qdisc_create+0x84c/0x1220 [ 175.906145][ T9500] tc_modify_qdisc+0x8c2/0x1470 [ 175.910999][ T9500] rtnetlink_rcv_msg+0x9e9/0xca0 [ 175.916103][ T9500] netlink_rcv_skb+0x1e9/0x430 [ 175.920860][ T9500] rtnetlink_rcv+0x1c/0x20 [ 175.925267][ T9500] netlink_unicast+0x86c/0xa30 [ 175.930014][ T9500] netlink_sendmsg+0x949/0xb70 [ 175.934773][ T9500] ____sys_sendmsg+0x5be/0x8f0 [ 175.939529][ T9500] ___sys_sendmsg+0x236/0x2e0 [ 175.944191][ T9500] __x64_sys_sendmsg+0x201/0x2d0 [ 175.949113][ T9500] do_syscall_64+0x31/0x40 [ 175.953516][ T9500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 175.959385][ T9500] [ 175.961707][ T9500] Freed by task 12: [ 175.965511][ T9500] kasan_set_track+0x4a/0x70 [ 175.970096][ T9500] kasan_set_free_info+0x23/0x40 [ 175.975201][ T9500] ____kasan_slab_free+0x125/0x160 [ 175.980336][ T9500] __kasan_slab_free+0x11/0x20 [ 175.985194][ T9500] slab_free_freelist_hook+0xc5/0x190 [ 175.990558][ T9500] kfree+0xc0/0x270 [ 175.994441][ T9500] skb_release_data+0x53b/0x690 [ 175.999277][ T9500] kfree_skb+0xb9/0x2f0 [ 176.003507][ T9500] ip6_mc_input+0x22b/0x290 [ 176.007999][ T9500] ip6_rcv_finish+0x18c/0x360 [ 176.012661][ T9500] ipv6_rcv+0xf0/0x230 [ 176.016721][ T9500] __netif_receive_skb+0xc8/0x280 [ 176.021732][ T9500] process_backlog+0x351/0x600 [ 176.026508][ T9500] net_rx_action+0x48d/0xed0 [ 176.031087][ T9500] __do_softirq+0x255/0x563 [ 176.035747][ T9500] [ 176.038057][ T9500] Last potentially related work creation: [ 176.043767][ T9500] kasan_save_stack+0x3a/0x60 [ 176.048437][ T9500] __kasan_record_aux_stack+0xd2/0x100 [ 176.053902][ T9500] kasan_record_aux_stack_noalloc+0xb/0x10 [ 176.059705][ T9500] kvfree_call_rcu+0x117/0x670 [ 176.064457][ T9500] __tcf_block_put+0x2f4/0x580 [ 176.069211][ T9500] tcf_block_put_ext+0x146/0x250 [ 176.074145][ T9500] tcf_block_put+0x68/0x90 [ 176.078547][ T9500] prio_destroy+0xa3/0x3b0 [ 176.083034][ T9500] qdisc_create+0xe5b/0x1220 [ 176.087613][ T9500] tc_modify_qdisc+0x8c2/0x1470 [ 176.092471][ T9500] rtnetlink_rcv_msg+0x9e9/0xca0 [ 176.097404][ T9500] netlink_rcv_skb+0x1e9/0x430 [ 176.102153][ T9500] rtnetlink_rcv+0x1c/0x20 [ 176.106556][ T9500] netlink_unicast+0x86c/0xa30 [ 176.111304][ T9500] netlink_sendmsg+0x949/0xb70 [ 176.117977][ T9500] ____sys_sendmsg+0x5be/0x8f0 [ 176.122731][ T9500] ___sys_sendmsg+0x236/0x2e0 [ 176.127401][ T9500] __x64_sys_sendmsg+0x201/0x2d0 [ 176.132744][ T9500] do_syscall_64+0x31/0x40 [ 176.137335][ T9500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 176.143307][ T9500] [ 176.145629][ T9500] Second to last potentially related work creation: [ 176.152214][ T9500] kasan_save_stack+0x3a/0x60 [ 176.156911][ T9500] __kasan_record_aux_stack+0xd2/0x100 [ 176.162375][ T9500] kasan_record_aux_stack_noalloc+0xb/0x10 [ 176.168204][ T9500] insert_work+0x51/0x320 [ 176.172522][ T9500] __queue_work+0x91f/0xca0 [ 176.177014][ T9500] queue_work_on+0xe6/0x140 [ 176.181511][ T9500] destroy_super_rcu+0xd1/0xe0 [ 176.186272][ T9500] rcu_do_batch+0x488/0xaf0 [ 176.190764][ T9500] rcu_core+0x50a/0xca0 [ 176.194902][ T9500] rcu_core_si+0x9/0x10 [ 176.199054][ T9500] __do_softirq+0x255/0x563 [ 176.203627][ T9500] [ 176.205955][ T9500] The buggy address belongs to the object at ffff88812a6ed000 [ 176.205955][ T9500] which belongs to the cache kmalloc-2k of size 2048 [ 176.220166][ T9500] The buggy address is located 1136 bytes inside of [ 176.220166][ T9500] 2048-byte region [ffff88812a6ed000, ffff88812a6ed800) [ 176.233591][ T9500] The buggy address belongs to the page: [ 176.239211][ T9500] page:ffffea0004a9ba00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a6e8 [ 176.249617][ T9500] head:ffffea0004a9ba00 order:3 compound_mapcount:0 compound_pincount:0 [ 176.257922][ T9500] flags: 0x4000000000010200(slab|head) [ 176.263369][ T9500] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042d80 [ 176.271935][ T9500] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 176.280514][ T9500] page dumped because: kasan: bad access detected [ 176.286935][ T9500] page_owner tracks the page as allocated [ 176.292669][ T9500] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1100, ts 30088721746, free_ts 0 [ 176.312468][ T9500] prep_new_page+0x176/0x190 [ 176.317049][ T9500] get_page_from_freelist+0x225f/0x23f0 [ 176.322668][ T9500] __alloc_pages_nodemask+0x29a/0x640 [ 176.328042][ T9500] new_slab+0x84/0x3f0 [ 176.332142][ T9500] ___slab_alloc+0x2f8/0x4c0 [ 176.336749][ T9500] __slab_alloc+0x63/0xa0 [ 176.341089][ T9500] __kmalloc+0x1f9/0x330 [ 176.345349][ T9500] __register_sysctl_table+0xeb/0x1240 [ 176.350808][ T9500] register_net_sysctl+0x2c/0x40 [ 176.355740][ T9500] nf_conntrack_pernet_init+0x7cf/0x950 [ 176.361295][ T9500] ops_init+0x2c0/0x470 [ 176.365437][ T9500] setup_net+0x34f/0xae0 [ 176.369665][ T9500] copy_net_ns+0x314/0x520 [ 176.374070][ T9500] create_new_namespaces+0x3a8/0x650 [ 176.379337][ T9500] unshare_nsproxy_namespaces+0x120/0x170 [ 176.385038][ T9500] ksys_unshare+0x4fa/0x820 [ 176.389521][ T9500] page_owner free stack trace missing [ 176.394878][ T9500] [ 176.397225][ T9500] Memory state around the buggy address: [ 176.402843][ T9500] ffff88812a6ed300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.410912][ T9500] ffff88812a6ed380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.418980][ T9500] >ffff88812a6ed400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.427045][ T9500] ^ [ 176.434752][ T9500] ffff88812a6ed480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.442812][ T9500] ffff88812a6ed500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 176.451043][ T9500] ================================================================== [ 176.459087][ T9500] Disabling lock debugging due to kernel taint [ 176.475411][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 176.475424][ T24] audit: type=1400 audit(1793806015.504:451): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 176.503801][ T24] audit: type=1400 audit(1793806015.504:452): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.526729][ T24] audit: type=1400 audit(1793806015.504:453): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.548277][ T24] audit: type=1400 audit(1793806015.504:454): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.568920][ T24] audit: type=1400 audit(1793806015.504:455): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.589628][ T24] audit: type=1400 audit(1793806015.504:456): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.612543][ T24] audit: type=1400 audit(1793806015.504:457): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.636017][ T24] audit: type=1400 audit(1793806015.504:458): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1