last executing test programs: 508.358086ms ago: executing program 0 (id=6752): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0x6) 475.960378ms ago: executing program 0 (id=6757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000006d0001002abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="001106000034040014003500627269646765300000000000000000001800348014c4"], 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40) 443.585988ms ago: executing program 0 (id=6760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000380)={0x2c, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf3}]}, 0x10) 398.491889ms ago: executing program 0 (id=6767): r0 = getpid() capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f00000000c0)={0x93, 0x0, 0x4, 0x1, 0x2, 0x5881}) 375.99715ms ago: executing program 0 (id=6769): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000380)=""/238, 0xfffffffffffffd97, 0x0, 0x0}}, 0x1e) 324.361571ms ago: executing program 0 (id=6776): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/716, @ANYRES8, @ANYRES64, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") listxattr(&(0x7f0000000480)='.\x00', 0x0, 0x0) 290.990132ms ago: executing program 2 (id=6781): r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 254.713784ms ago: executing program 4 (id=6784): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) read(r0, 0x0, 0x0) 218.279494ms ago: executing program 1 (id=6785): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 218.136634ms ago: executing program 3 (id=6786): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) 218.037724ms ago: executing program 2 (id=6787): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x5, 0x0, 0xc}}) 217.966964ms ago: executing program 4 (id=6788): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xffff) 217.862544ms ago: executing program 2 (id=6789): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd2(0x4, 0x0) 213.923785ms ago: executing program 1 (id=6790): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r0, 0x0, 0xef) 211.642054ms ago: executing program 3 (id=6791): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newroute={0x25, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x0, 0xff, 0x4, 0xfe, 0x2, 0xa00}, [@RTA_FLOW={0x8, 0xb, 0x4}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x4) 140.735306ms ago: executing program 4 (id=6792): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000040)=0x5, 0x4) 140.619296ms ago: executing program 1 (id=6793): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x500006) 140.511656ms ago: executing program 3 (id=6794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x801, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x18, 0x0, 0x0, 0x7fffffff}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}}, 0x10) 138.929396ms ago: executing program 2 (id=6795): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readlink(0x0, 0x0, 0x0) 133.603596ms ago: executing program 4 (id=6796): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1}, 0x20048814) 129.546187ms ago: executing program 1 (id=6797): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0xff, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) 80.814078ms ago: executing program 3 (id=6798): mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xf) 80.682438ms ago: executing program 3 (id=6799): r0 = syz_open_procfs(0x0, &(0x7f0000000840)='coredump_filter\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1) 80.483848ms ago: executing program 2 (id=6800): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1, 0x2, 'sN'}}) 80.421338ms ago: executing program 4 (id=6801): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) 80.275648ms ago: executing program 3 (id=6802): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='409', 0x3) 73.023808ms ago: executing program 1 (id=6803): syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0xc9f, 0x10, 0x3, 0x3}, &(0x7f0000000440), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) 51.075988ms ago: executing program 1 (id=6804): setrlimit(0x2, &(0x7f00000000c0)={0xc63, 0xffffffffffffffff}) mmap(&(0x7f0000565000/0x1000)=nil, 0x1000, 0xb, 0x4008032, 0xffffffffffffffff, 0x53e1b000) 163.81µs ago: executing program 2 (id=6805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000800) 0s ago: executing program 4 (id=6806): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) kernel console output (not intermixed with test programs): SerialNumber=3 [ 228.616748][ T306] usb 1-1: Product: syz [ 228.621865][ T306] usb 1-1: Manufacturer: syz [ 228.628025][ T306] usb 1-1: SerialNumber: syz [ 228.721913][ T26] ipheth 3-1:0.196: Unable to find endpoints [ 228.730854][ T26] usb 3-1: USB disconnect, device number 99 [ 228.737646][ T421] usb 5-1: 1:0 : does not exist [ 228.742923][ T421] usb 5-1: 1:2 : does not exist [ 228.749360][ T421] usb 5-1: 1:3 : does not exist [ 228.755726][ T421] usb 5-1: BAAD HEADPHONE p_chmask mismatch [ 228.764809][ T421] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 228.779500][ T421] usb 5-1: USB disconnect, device number 99 [ 229.060334][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.135546][ T306] usb 1-1: MIDIStreaming interface descriptor not found [ 229.160480][ T39] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 229.169189][ T39] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 229.179414][ T306] usb 1-1: USB disconnect, device number 97 [ 229.187197][ T39] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 229.201282][ T39] usb 2-1: config 129 has no interface number 0 [ 229.207977][ T39] usb 2-1: config 129 has no interface number 1 [ 229.214859][ T39] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 229.230355][ T39] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 229.243334][ T39] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 229.257749][ T39] usb 2-1: config 129 interface 135 has no altsetting 0 [ 229.264811][ T39] usb 2-1: config 129 interface 5 has no altsetting 0 [ 229.482794][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.554110][ T492] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 229.554795][ T39] usb 2-1: string descriptor 0 read error: -22 [ 229.574879][ T39] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 229.585622][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.626464][ T20] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 229.640094][ T39] usb 2-1: MIDIStreaming interface descriptor not found [ 229.647341][ T26] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 229.888795][ T6] usb 2-1: USB disconnect, device number 95 [ 229.952343][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 229.988756][ T492] usb 4-1: config index 0 descriptor too short (expected 36, got 10) [ 229.998257][ T492] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 230.008500][ T492] usb 4-1: config 0 has no interfaces? [ 230.014827][ T492] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 230.024362][ T492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.034220][ T492] usb 4-1: config 0 descriptor?? [ 230.073094][ T502] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 230.121407][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.169513][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.218456][ T20] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 230.231791][ T20] usb 5-1: config 1 interface 0 has no altsetting 0 [ 230.333906][ T571] usb 4-1: USB disconnect, device number 95 [ 230.423042][ T20] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 230.434064][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.443227][ T20] usb 5-1: Product: syz [ 230.447952][ T20] usb 5-1: Manufacturer: ꯚꑔՋ㩿䑄꤄ꛆ聨䦽㭧㬝ퟥ۝凓摖≟僈𪝧ᠯம酽㔎净똀ᆝঐ縗깾ॿ튢䇗꿋펤铸ᢼ풞᳭矚뮌葀ᘍ쿊λ蝅镜㳘䁨⣶羃Ӱ湵ꤙ並쓶͎᱁ [ 230.474906][ T20] usb 5-1: SerialNumber: syz [ 230.483423][ T26] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.495479][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.505727][ T26] usb 3-1: Product: syz [ 230.507978][ T8342] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 230.512120][ T26] usb 3-1: Manufacturer: syz [ 230.520042][ T502] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.525837][ T26] usb 3-1: SerialNumber: syz [ 230.544148][ T502] usb 1-1: config 1 has no interface number 0 [ 230.553464][ T502] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 230.574464][ T502] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 230.714785][ T8388] loop1: detected capacity change from 0 to 512 [ 230.772607][ T8388] EXT4-fs (loop1): 1 truncate cleaned up [ 230.778821][ T8388] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,quota,,errors=continue. Quota mode: writeback. [ 230.780370][ T502] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 230.811573][ T502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.819993][ T502] usb 1-1: Product: syz [ 230.825018][ T502] usb 1-1: Manufacturer: syz [ 230.830681][ T502] usb 1-1: SerialNumber: syz [ 230.904661][ T20] usb 5-1: USB disconnect, device number 100 [ 230.979213][ T26] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 231.014730][ T26] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 231.045549][ T26] usb 3-1: USB disconnect, device number 100 [ 231.057167][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 231.156812][ T502] usb 1-1: 1:0 : does not exist [ 231.165287][ T502] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 231.190485][ T502] usb 1-1: incorrect wMaxPacketSize 0x40 for BADD profile [ 231.202254][ T502] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 231.213110][ T502] usb 1-1: USB disconnect, device number 98 [ 231.248906][ T306] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 231.284322][ T6] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 231.482846][ T8412] cgroup: Unknown subsys name '@﬽4*oңhoU' [ 231.655927][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 231.655946][ T30] audit: type=1400 audit(1786290960.914:277): avc: denied { mount } for pid=8429 comm="syz.2.3899" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.693708][ T306] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 231.698854][ T30] audit: type=1400 audit(1786290960.957:278): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.740858][ T6] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 231.754589][ T6] usb 4-1: config 179 has no interface number 0 [ 231.761960][ T6] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 231.786859][ T6] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 231.800947][ T6] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 231.812958][ T6] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 231.833858][ T502] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 231.847634][ T6] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 231.867353][ T8442] 9pnet: p9_fd_create_unix (8442): problem connecting socket: ./file0: -2 [ 231.872533][ T6] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 231.890855][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.894248][ T306] usb 2-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 231.912286][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.923160][ T306] usb 2-1: Product: syz [ 231.928169][ T306] usb 2-1: Manufacturer: syz [ 231.933548][ T306] usb 2-1: SerialNumber: syz [ 231.948962][ T8402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 231.956461][ T8402] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 231.961189][ T8400] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 232.223920][ T20] usb 4-1: USB disconnect, device number 96 [ 232.236332][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 232.293787][ T26] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 232.305506][ T502] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.397416][ T306] usb 2-1: MIDIStreaming interface descriptor not found [ 232.409195][ T502] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 232.421065][ T502] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 232.433059][ T6] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 232.441634][ T306] usb 2-1: USB disconnect, device number 96 [ 232.569740][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 232.661924][ T502] usb 5-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 232.673344][ T502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.683444][ T502] usb 5-1: Product: syz [ 232.688650][ T502] usb 5-1: Manufacturer: syz [ 232.695416][ T502] usb 5-1: SerialNumber: syz [ 232.707801][ T26] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.724078][ T26] usb 1-1: config 1 interface 0 has no altsetting 0 [ 232.742280][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 232.776760][ T26] usb 1-1: language id specifier not provided by device, defaulting to English [ 232.842574][ T8474] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 232.853889][ T8474] SELinux: security_context_str_to_sid(root) failed for (dev cgroup2, type cgroup2) errno=-22 [ 232.948563][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 233.050521][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.119031][ T502] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 233.141194][ T502] usb 5-1: 2:1 : no cluster descriptor [ 233.152383][ T26] usb 1-1: New USB device found, idVendor=1477, idProduct=1023, bcdDevice= 0.40 [ 233.162371][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.172791][ T26] usb 1-1: Manufacturer: ॡ잨촤轱辱芛뗋嘊䑥蛞詭淺ᮔ瀞啲㢅狕흞磈ጡ퀜䓡씜捡됯䑞䷾搐龂ޏ초삻跊妵耂ꁮ⩋ᶿ躮肒ᕣ둂⃀䒸킱ꯉ適렌 [ 233.193549][ T26] usb 1-1: SerialNumber: syz [ 233.197774][ T492] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 233.209589][ T20] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 233.219173][ T502] usb 5-1: USB disconnect, device number 101 [ 233.243161][ T6] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 233.256670][ T6] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 233.266788][ T6] usb 3-1: Product: syz [ 233.271593][ T6] usb 3-1: Manufacturer: syz [ 233.276570][ T6] usb 3-1: SerialNumber: syz [ 233.283977][ T6] usb 3-1: config 0 descriptor?? [ 233.459454][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.503526][ T492] usb 2-1: Using ep0 maxpacket: 32 [ 233.565831][ T8484] loop4: detected capacity change from 0 to 1024 [ 233.607697][ T6] usb 3-1: USB disconnect, device number 101 [ 233.620958][ T8484] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 233.634204][ T8484] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 233.645148][ T8484] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz.4.3926: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 233.663465][ T492] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 233.673589][ T26] usbhid 1-1:1.0: can't add hid device: -71 [ 233.683123][ T26] usbhid: probe of 1-1:1.0 failed with error -71 [ 233.691698][ T8484] EXT4-fs (loop4): no journal found [ 233.697469][ T8484] EXT4-fs (loop4): can't get journal size [ 233.705289][ T26] usb 1-1: USB disconnect, device number 99 [ 233.714202][ T8484] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 233.738595][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.877235][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.888825][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 233.899207][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.915291][ T492] usb 2-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 233.925280][ T492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.933932][ T492] usb 2-1: Product: syz [ 233.938608][ T492] usb 2-1: Manufacturer: syz [ 233.943669][ T492] usb 2-1: SerialNumber: syz [ 234.163791][ T6] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 234.192759][ T20] usb 4-1: string descriptor 0 read error: -22 [ 234.199647][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.210629][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.260996][ T20] cdc_ncm 4-1:1.0: skipping garbage [ 234.266862][ T20] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 234.274223][ T20] cdc_ncm 4-1:1.0: bind() failure [ 234.375051][ T492] usb 2-1: USB disconnect, device number 97 [ 234.427908][ T26] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 234.461458][ T306] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 234.490587][ T20] usb 4-1: USB disconnect, device number 97 [ 234.584728][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.595750][ T6] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.618917][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 234.719160][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 234.752675][ T306] usb 3-1: Using ep0 maxpacket: 8 [ 234.786228][ T6] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 234.799500][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.808261][ T6] usb 5-1: Product: syz [ 234.814738][ T6] usb 5-1: Manufacturer: syz [ 234.819776][ T6] usb 5-1: SerialNumber: syz [ 234.931900][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.200216][ T39] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 235.211547][ T306] usb 3-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 235.220971][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.229466][ T306] usb 3-1: Product: syz [ 235.234865][ T26] usb 1-1: string descriptor 0 read error: -22 [ 235.241791][ T26] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 235.251527][ T306] usb 3-1: Manufacturer: syz [ 235.257094][ T306] usb 3-1: SerialNumber: syz [ 235.262714][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.268645][ T6] usb 5-1: 0:2 : does not exist [ 235.284661][ T6] usb 5-1: USB disconnect, device number 102 [ 235.389138][ T502] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 235.511772][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 235.553146][ T6] usb 1-1: USB disconnect, device number 100 [ 235.611310][ T39] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 235.621236][ T39] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 235.635179][ T39] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 235.646517][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.658324][ T306] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 235.668991][ T306] usb 3-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 235.744557][ T306] usb 3-1: failed to enable PITCH for EP 0x1 [ 235.766721][ T306] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 235.778751][ T8521] loop4: detected capacity change from 0 to 32768 [ 235.795647][ T306] usb 3-1: USB disconnect, device number 102 [ 235.807048][ T336] loop4: p1 p2 < > p3 < p5 p6 > p4 < p7 > [ 235.818571][ T336] loop4: p5 start 100669496 is beyond EOD, truncated [ 235.826184][ T336] loop4: p6 size 218103808 extends beyond EOD, truncated [ 235.838468][ T8521] loop4: p1 p2 < > p3 < p5 p6 > p4 < p7 > [ 235.847308][ T8521] loop4: p5 start 100669496 is beyond EOD, truncated [ 235.855704][ T8521] loop4: p6 size 218103808 extends beyond EOD, truncated [ 235.888963][ T502] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.902684][ T101] loop4: p1 p2 < > p3 < p5 p6 > p4 < p7 > [ 235.911476][ T101] loop4: p5 start 100669496 is beyond EOD, truncated [ 235.918918][ T101] loop4: p6 size 218103808 extends beyond EOD, truncated [ 235.972973][ T1075] udevd[1075]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 235.978621][ T39] usb 2-1: string descriptor 0 read error: -71 [ 235.991490][ T336] udevd[336]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 236.001786][ T502] usb 4-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 236.013943][ T502] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 236.018488][ T1076] udevd[1076]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 236.038653][ T678] udevd[678]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 236.050008][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 236.060004][ T1077] udevd[1077]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 236.078735][ T39] usb 2-1: USB disconnect, device number 98 [ 236.211124][ T502] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 236.231907][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.242518][ T502] usb 4-1: Product: syz [ 236.255390][ T502] usb 4-1: Manufacturer: syz [ 236.264352][ T502] usb 4-1: SerialNumber: syz [ 236.498435][ T6] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 236.576674][ T502] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 236.608784][ T502] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 236.630822][ T502] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 236.699831][ T8528] loop4: detected capacity change from 0 to 131072 [ 236.710420][ T502] usb 4-1: USB disconnect, device number 98 [ 236.763116][ T8528] F2FS-fs (loop4): SIT is corrupted node# 2 vs 7 [ 236.770519][ T8528] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 236.851701][ T492] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 236.940818][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 236.962059][ T26] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 236.962833][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.061495][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.072823][ T6] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.093009][ T6] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.106148][ T6] usb 1-1: New USB device found, idVendor=0135, idProduct=0000, bcdDevice= 0.00 [ 237.121944][ T492] usb 2-1: Using ep0 maxpacket: 16 [ 237.128994][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.149683][ T39] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 237.158240][ T30] audit: type=1400 audit(1786290965.811:279): avc: denied { write } for pid=8569 comm="syz.3.3967" name="ptype" dev="proc" ino=4026532655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 237.217154][ T6] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 237.337435][ T492] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.414476][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.425682][ T492] usb 2-1: config 3 has an invalid interface number: 165 but max is 1 [ 237.434293][ T492] usb 2-1: config 3 has no interface number 0 [ 237.441551][ T492] usb 2-1: config 3 interface 1 has no altsetting 0 [ 237.448509][ T492] usb 2-1: config 3 interface 165 has no altsetting 0 [ 237.469507][ T6] usb 1-1: unit 13 not found! [ 237.502357][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.514605][ T26] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 237.524759][ T6] usb 1-1: string descriptor 0 read error: -71 [ 237.531767][ T6] usb 1-1: USB disconnect, device number 101 [ 237.538909][ T502] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 237.546865][ T26] usb 3-1: config 1 has no interface number 1 [ 237.561937][ T26] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.601321][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.634230][ T492] usb 2-1: New USB device found, idVendor=19d2, idProduct=0012, bcdDevice= 0.a9 [ 237.644172][ T492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.652680][ T492] usb 2-1: Product: syz [ 237.657940][ T492] usb 2-1: Manufacturer: syz [ 237.663276][ T492] usb 2-1: SerialNumber: syz [ 237.689369][ T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 237.701225][ T39] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 237.744290][ T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 237.756061][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.765776][ T26] usb 3-1: Product: syz [ 237.772781][ T26] usb 3-1: Manufacturer: syz [ 237.777970][ T26] usb 3-1: SerialNumber: syz [ 237.793058][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 237.821099][ T502] usb 4-1: Using ep0 maxpacket: 16 [ 237.898069][ T39] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 237.911421][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.920566][ T39] usb 5-1: Product: syz [ 237.925527][ T39] usb 5-1: Manufacturer: syz [ 237.931394][ T39] usb 5-1: SerialNumber: syz [ 238.063692][ T492] usb 2-1: bad CDC descriptors [ 238.073149][ T492] usb 2-1: USB disconnect, device number 99 [ 238.106802][ T502] usb 4-1: string descriptor 0 read error: -22 [ 238.115333][ T502] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 238.124462][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.169464][ T26] usb 3-1: USB disconnect, device number 103 [ 238.184353][ T502] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 238.239680][ T39] usb 5-1: unit 9 not found! [ 238.315508][ T306] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 238.329769][ T39] usb 5-1: USB disconnect, device number 103 [ 238.393361][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.417470][ T492] usb 4-1: USB disconnect, device number 99 [ 238.557604][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.710374][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.809019][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.852657][ T6] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 238.907517][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.919381][ T306] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 238.929329][ T39] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 238.937717][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.952110][ T306] usb 1-1: config 0 descriptor?? [ 239.049252][ T30] audit: type=1326 audit(1786290967.523:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.4.3983" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda422a1019 code=0x0 [ 239.117164][ T8604] loop4: detected capacity change from 0 to 512 [ 239.137575][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 239.226088][ T492] usb 1-1: USB disconnect, device number 102 [ 239.236296][ T8604] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 239.255593][ T8604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=f800e028, mo2=0002] [ 239.268592][ T8604] System zones: 1-12 [ 239.276840][ T8604] EXT4-fs (loop4): orphan cleanup on readonly fs [ 239.291332][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.308482][ T8604] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3984: bg 0: block 361: padding at end of block bitmap is not set [ 239.325419][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.327000][ T8604] EXT4-fs (loop4): Remounting filesystem read-only [ 239.348872][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.349868][ T8604] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 239.364410][ T39] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 239.375814][ T8604] EXT4-fs (loop4): Remounting filesystem read-only [ 239.391615][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.397796][ T8604] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.3984: attempt to clear invalid blocks 33619980 len 1 [ 239.420263][ T39] usb 3-1: config 0 descriptor?? [ 239.428127][ T8604] EXT4-fs (loop4): Remounting filesystem read-only [ 239.445853][ T8604] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3984: invalid indirect mapped block 1811939328 (level 0) [ 239.468928][ T8604] EXT4-fs (loop4): Remounting filesystem read-only [ 239.481256][ T8604] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3984: invalid indirect mapped block 2 (level 2) [ 239.511851][ T8604] EXT4-fs (loop4): Remounting filesystem read-only [ 239.512587][ T39] usb 3-1: bad CDC descriptors [ 239.523446][ T8604] EXT4-fs (loop4): 1 truncate cleaned up [ 239.533926][ T8604] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nobarrier,discard,errors=remount-ro,data_err=abort. Quota mode: none. [ 239.558285][ T6] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 239.574415][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.585502][ T6] usb 2-1: Product: syz [ 239.590076][ T6] usb 2-1: Manufacturer: syz [ 239.598781][ T6] usb 2-1: SerialNumber: syz [ 239.736948][ T492] usb 3-1: USB disconnect, device number 104 [ 239.815063][ T8611] loop0: detected capacity change from 0 to 256 [ 239.868080][ T8611] FAT-fs (loop0): Directory bread(block 64) failed [ 239.877322][ T8611] FAT-fs (loop0): Directory bread(block 65) failed [ 239.885704][ T8611] FAT-fs (loop0): Directory bread(block 66) failed [ 239.900073][ T8611] FAT-fs (loop0): Directory bread(block 67) failed [ 239.912605][ T8611] FAT-fs (loop0): Directory bread(block 68) failed [ 239.924037][ T502] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 239.924394][ T8611] FAT-fs (loop0): Directory bread(block 69) failed [ 239.943038][ T8611] FAT-fs (loop0): Directory bread(block 70) failed [ 239.953555][ T8611] FAT-fs (loop0): Directory bread(block 71) failed [ 239.962251][ T8611] FAT-fs (loop0): Directory bread(block 72) failed [ 239.974561][ T8611] FAT-fs (loop0): Directory bread(block 73) failed [ 239.980013][ T495] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 240.001514][ T6] usb 2-1: USB disconnect, device number 100 [ 240.090740][ T30] audit: type=1400 audit(1786290968.483:281): avc: denied { create } for pid=8612 comm="syz.0.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 240.231022][ T502] usb 4-1: Using ep0 maxpacket: 16 [ 240.372902][ T502] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 240.383092][ T502] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 240.391789][ T502] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.407703][ T495] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.418606][ T492] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 240.433128][ T495] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 240.504024][ T495] usb 5-1: string descriptor 0 read error: -71 [ 240.519364][ T495] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 240.542648][ T495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.591368][ T495] usb 5-1: can't set config #1, error -71 [ 240.602763][ T502] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.620827][ T495] usb 5-1: USB disconnect, device number 104 [ 240.635050][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.664928][ T502] usb 4-1: Product: syz [ 240.676494][ T502] usb 4-1: Manufacturer: syz [ 240.689593][ T502] usb 4-1: SerialNumber: syz [ 240.820547][ T492] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 240.832449][ T492] usb 1-1: config 0 has no interface number 0 [ 240.841029][ T492] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 241.030515][ T492] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 241.042434][ T492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.049749][ T39] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 241.052022][ T502] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 241.052046][ T502] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 241.052066][ T502] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 241.087577][ T492] usb 1-1: Product: syz [ 241.092935][ T492] usb 1-1: Manufacturer: syz [ 241.100088][ T492] usb 1-1: SerialNumber: syz [ 241.105073][ T296] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 241.114408][ T492] usb 1-1: config 0 descriptor?? [ 241.129922][ T502] usb 4-1: USB disconnect, device number 100 [ 241.138558][ T8615] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 241.162806][ T492] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 22:82:21:31:cc:21 [ 241.365668][ T296] usb 2-1: Using ep0 maxpacket: 16 [ 241.383395][ T492] usb 1-1: USB disconnect, device number 103 [ 241.391905][ T492] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 241.406033][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 241.474703][ T421] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 241.518303][ T296] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 241.518322][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.518343][ T296] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.548052][ T296] usb 2-1: config 0 has no interface number 0 [ 241.555033][ T296] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 241.566037][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.582820][ T296] usb 2-1: config 0 descriptor?? [ 241.605506][ T39] usb 3-1: config 1 interface 0 has no altsetting 0 [ 241.780198][ T39] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 241.791280][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.799586][ T39] usb 3-1: Product: syz [ 241.803955][ T39] usb 3-1: Manufacturer: syz [ 241.808589][ T39] usb 3-1: SerialNumber: syz [ 241.861573][ T296] usb 2-1: USB disconnect, device number 101 [ 241.867314][ T421] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 241.878237][ T421] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 241.891674][ T421] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.921453][ T306] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 242.073815][ T421] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.088626][ T421] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.098772][ T421] usb 5-1: Product: syz [ 242.104823][ T421] usb 5-1: Manufacturer: syz [ 242.109781][ T421] usb 5-1: SerialNumber: syz [ 242.120676][ T421] usb 5-1: config 0 descriptor?? [ 242.163921][ T421] hub 5-1:0.0: bad descriptor, ignoring hub [ 242.170503][ T421] hub: probe of 5-1:0.0 failed with error -5 [ 242.178737][ T421] usb 5-1: selecting invalid altsetting 0 [ 242.193489][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 242.313467][ T39] usbhid 3-1:1.0: can't add hid device: -71 [ 242.319531][ T39] usbhid: probe of 3-1:1.0 failed with error -71 [ 242.328156][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.347388][ T39] usb 3-1: USB disconnect, device number 105 [ 242.367151][ T8699] loop0: detected capacity change from 0 to 131072 [ 242.415238][ T8699] F2FS-fs (loop0): invalid crc value [ 242.447748][ T8699] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 242.503456][ T8699] F2FS-fs (loop0): recover fsync data on readonly fs [ 242.510918][ T8699] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 242.522758][ T502] usb 5-1: USB disconnect, device number 105 [ 242.531116][ T306] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 242.544116][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.563426][ T306] usb 4-1: Product: syz [ 242.568222][ T306] usb 4-1: Manufacturer: syz [ 242.572995][ T306] usb 4-1: SerialNumber: syz [ 242.785058][ T8722] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 242.794354][ T296] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 242.802087][ T8722] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 242.802105][ T8722] overlayfs: conflicting options: userxattr,metacopy=on [ 242.892608][ T30] audit: type=1400 audit(1786290971.061:282): avc: denied { write } for pid=8733 comm="syz.0.4034" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.934273][ T30] audit: type=1400 audit(1786290971.079:283): avc: denied { remove_name } for pid=8733 comm="syz.0.4034" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.964020][ T30] audit: type=1400 audit(1786290971.079:284): avc: denied { unlink } for pid=8733 comm="syz.0.4034" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.974562][ T306] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 243.077235][ T8745] cgroup2: Unexpected value for 'memory_localevents' [ 243.114738][ T30] audit: type=1326 audit(1786290971.254:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.0.4042" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c78557019 code=0x0 [ 243.147302][ T306] usb 4-1: USB disconnect, device number 101 [ 243.183857][ T296] usb 2-1: not running at top speed; connect to a high speed hub [ 243.281756][ T296] usb 2-1: config 1 has an invalid interface number: 173 but max is 0 [ 243.296532][ T296] usb 2-1: config 1 has no interface number 0 [ 243.308439][ T296] usb 2-1: config 1 interface 173 has no altsetting 0 [ 243.325410][ T39] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 243.368740][ T421] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 243.391897][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 243.487059][ T8770] loop3: detected capacity change from 0 to 256 [ 243.515859][ T8770] exFAT-fs (loop3): failed to load alloc-bitmap [ 243.523146][ T8770] exFAT-fs (loop3): failed to recognize exfat type [ 243.531937][ T502] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 243.608089][ T296] usb 2-1: string descriptor 0 read error: -22 [ 243.615010][ T296] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=f9.94 [ 243.640525][ T296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.641506][ T421] usb 3-1: Using ep0 maxpacket: 16 [ 243.695654][ T296] usb_ehset_test: probe of 2-1:1.173 failed with error -32 [ 243.727690][ T39] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.736945][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.748266][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.758317][ T39] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.836406][ T421] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.858317][ T502] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 243.901727][ T39] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.915596][ T39] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.925348][ T421] usb 3-1: config 5 has an invalid interface number: 152 but max is 0 [ 243.934642][ T39] usb 5-1: Product: syz [ 243.938280][ T296] usb 2-1: USB disconnect, device number 102 [ 243.939545][ T39] usb 5-1: Manufacturer: syz [ 243.951178][ T421] usb 3-1: config 5 has no interface number 0 [ 243.959112][ T571] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 243.968567][ T421] usb 3-1: config 5 interface 152 altsetting 1 bulk endpoint 0xA has invalid maxpacket 8 [ 243.979893][ T421] usb 3-1: config 5 interface 152 has no altsetting 0 [ 244.032513][ T39] cdc_wdm 5-1:1.0: invalid descriptor buffer length [ 244.041861][ T39] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 244.184336][ T421] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c23, bcdDevice=69.37 [ 244.199800][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.209625][ T421] usb 3-1: Product: syz [ 244.215691][ T421] usb 3-1: Manufacturer: syz [ 244.221257][ T421] usb 3-1: SerialNumber: syz [ 244.249395][ T571] usb 4-1: Using ep0 maxpacket: 16 [ 244.249684][ T8746] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 244.269390][ T306] usb 5-1: USB disconnect, device number 106 [ 244.532346][ T421] usb 3-1: bad CDC descriptors [ 244.539351][ T421] usb 3-1: USB disconnect, device number 106 [ 244.586331][ T571] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 244.599171][ T571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.612778][ T571] usb 4-1: Product: syz [ 244.617283][ T571] usb 4-1: Manufacturer: syz [ 244.622770][ T571] usb 4-1: SerialNumber: syz [ 244.631105][ T571] usb 4-1: config 0 descriptor?? [ 244.673681][ T571] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 244.781817][ T502] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 244.792200][ T502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 244.801255][ T502] usb 1-1: Product: syz [ 244.806031][ T502] usb 1-1: Manufacturer: syz [ 244.810979][ T502] usb 1-1: SerialNumber: syz [ 244.817564][ T502] usb 1-1: config 0 descriptor?? [ 244.836056][ T30] audit: type=1326 audit(1786290972.836:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8783 comm="syz.4.4058" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda422a1019 code=0x0 [ 244.868705][ T39] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 244.897401][ T571] usb 4-1: USB disconnect, device number 102 [ 245.103480][ T421] usb 1-1: USB disconnect, device number 104 [ 245.123949][ T8792] sit: Src spoofed 0.0.0.0/2002:0:64::576d:0 -> 224.0.0.1/::42c4:3acc:eaa8:acff:fffe:64 [ 245.205506][ T502] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 245.259757][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 245.271035][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 245.315080][ T8816] futex_wake_op: syz.2.4074 tries to shift op by 32; fix this program [ 245.348369][ T8820] mmap: syz.2.4076 (8820) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 245.455313][ T39] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 245.464716][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.476885][ T502] usb 5-1: Using ep0 maxpacket: 32 [ 245.498994][ T39] usb 2-1: Product: syz [ 245.503376][ T39] usb 2-1: Manufacturer: syz [ 245.508340][ T39] usb 2-1: SerialNumber: syz [ 245.516398][ T39] usb 2-1: config 0 descriptor?? [ 245.564902][ T39] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 245.640220][ T502] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.798735][ T39] usb 2-1: USB disconnect, device number 103 [ 245.813664][ T296] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 245.824296][ T8854] SELinux: security_context_str_to_sid(unconfined_uobj_type=fscote) failed for (dev ?, type ?) errno=-22 [ 245.839545][ T8850] loop0: detected capacity change from 0 to 40427 [ 245.846647][ T502] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 245.856786][ T502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.860294][ T8854] fuse: Bad value for 'fd' [ 245.872474][ T8850] SELinux: security_context_str_to_sid(sysa) failed for (dev ?, type ?) errno=-22 [ 245.884482][ T8850] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(4) [ 245.888932][ T502] usb 5-1: Product: syz [ 245.913061][ T502] usb 5-1: Manufacturer: syz [ 245.916874][ T8850] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 245.918603][ T502] usb 5-1: SerialNumber: syz [ 245.933129][ T502] usb 5-1: config 0 descriptor?? [ 245.939944][ T8850] F2FS-fs (loop0): invalid crc value [ 245.948640][ T8850] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 245.977129][ T8850] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 245.985096][ T8850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 245.988999][ T502] usb 5-1: bad CDC descriptors [ 245.993070][ T8850] SELinux: security_context_str_to_sid(sysa) failed for (dev loop0, type f2fs) errno=-22 [ 246.000407][ T502] usb 5-1: unsupported MDLM descriptors [ 246.171982][ T296] usb 4-1: not running at top speed; connect to a high speed hub [ 246.224202][ T306] usb 5-1: USB disconnect, device number 107 [ 246.237167][ T495] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 246.258870][ T296] usb 4-1: config 10 has an invalid interface number: 8 but max is 0 [ 246.267403][ T296] usb 4-1: config 10 has no interface number 0 [ 246.273812][ T296] usb 4-1: config 10 interface 8 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 246.285986][ T296] usb 4-1: config 10 interface 8 has no altsetting 0 [ 246.352641][ T8863] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 246.363170][ T8863] SELinux: duplicate or incompatible mount options [ 246.475988][ T296] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 246.486923][ T39] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 246.487779][ T296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.504868][ T495] usb 3-1: Using ep0 maxpacket: 32 [ 246.510824][ T296] usb 4-1: Product: syz [ 246.515440][ T296] usb 4-1: Manufacturer: syz [ 246.520399][ T296] usb 4-1: SerialNumber: syz [ 246.671276][ T421] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 246.682165][ T495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 246.880351][ T296] usb 4-1: USB disconnect, device number 103 [ 246.931748][ T421] usb 2-1: Using ep0 maxpacket: 8 [ 246.942783][ T495] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 246.952993][ T495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.961758][ T495] usb 3-1: Product: syz [ 246.966296][ T495] usb 3-1: Manufacturer: syz [ 246.971068][ T495] usb 3-1: SerialNumber: syz [ 247.073094][ T39] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= e.90 [ 247.083302][ T39] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 247.091929][ T39] usb 1-1: Product: syz [ 247.094857][ T502] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 247.096673][ T39] usb 1-1: Manufacturer: syz [ 247.110400][ T39] usb 1-1: SerialNumber: syz [ 247.127286][ T421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.171342][ T39] ums-onetouch 1-1:3.0: USB Mass Storage device detected [ 247.235870][ T421] usb 2-1: config 7 has an invalid interface number: 65 but max is 0 [ 247.247276][ T421] usb 2-1: config 7 has no interface number 0 [ 247.258290][ T421] usb 2-1: config 7 interface 65 has no altsetting 0 [ 247.279879][ T495] usb 3-1: Fast Track Pro config OK [ 247.371614][ T495] usb 3-1: MIDIStreaming interface descriptor not found [ 247.407088][ T39] usb 1-1: USB disconnect, device number 105 [ 247.411640][ T8877] cgroup: noprefix used incorrectly [ 247.436759][ T495] usb 3-1: USB disconnect, device number 107 [ 247.452793][ T421] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=12.d1 [ 247.474437][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.492048][ T421] usb 2-1: Product: syz [ 247.496448][ T502] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.496483][ T502] usb 5-1: config 1 interface 0 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.522372][ T421] usb 2-1: Manufacturer: syz [ 247.523706][ T502] usb 5-1: config 1 interface 0 has no altsetting 0 [ 247.534909][ T421] usb 2-1: SerialNumber: syz [ 247.601059][ T8881] loop3: detected capacity change from 0 to 512 [ 247.660618][ T8881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 247.669421][ T8881] System zones: 1-12 [ 247.674986][ T8881] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.4104: missing EA_INODE flag [ 247.687265][ T8881] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.4104: error while reading EA inode 12 err=-117 [ 247.700390][ T8881] EXT4-fs (loop3): 1 orphan inode deleted [ 247.706541][ T8881] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 247.799957][ T502] usb 5-1: string descriptor 0 read error: -22 [ 247.806897][ T502] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.816552][ T502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.865887][ T502] usb 5-1: bad CDC descriptors [ 247.916078][ T421] usb 2-1: USB disconnect, device number 104 [ 248.015623][ T30] audit: type=1400 audit(1786290975.765:287): avc: denied { remount } for pid=8902 comm="syz.0.4114" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 248.049459][ T495] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 248.085400][ T571] usb 5-1: USB disconnect, device number 108 [ 248.117814][ T8907] loop0: detected capacity change from 0 to 2048 [ 248.170998][ T8907] loop0: p1 < > [ 248.229303][ T1075] udevd[1075]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 248.316645][ T495] usb 4-1: Using ep0 maxpacket: 8 [ 248.354486][ T8941] 9pnet: p9_fd_create_unix (8941): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 248.494384][ T495] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.677409][ T8973] loop4: detected capacity change from 0 to 512 [ 248.689653][ T495] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.700872][ T495] usb 4-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.714981][ T495] usb 4-1: config 1 interface 0 has no altsetting 0 [ 248.735645][ T8973] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 248.763211][ T8967] loop0: detected capacity change from 0 to 40427 [ 248.776457][ T571] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 248.785451][ T8967] F2FS-fs (loop0): invalid crc value [ 248.798121][ T8973] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,,errors=continue. Quota mode: writeback. [ 248.811498][ T8973] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev loop4, type ext4) errno=-22 [ 248.826132][ T8967] F2FS-fs (loop0): Found nat_bits in checkpoint [ 248.859833][ T8967] F2FS-fs (loop0): Start checkpoint disabled! [ 248.867157][ T8967] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 248.895781][ T495] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 248.914096][ T495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.924240][ T495] usb 4-1: Product: syz [ 248.928506][ T421] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 248.930828][ T495] usb 4-1: Manufacturer: syz [ 248.943100][ T495] usb 4-1: SerialNumber: syz [ 249.072931][ T8991] loop0: detected capacity change from 0 to 512 [ 249.117620][ T8991] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #2: block 3: comm syz.0.4156: lblock 0 mapped to illegal pblock 3 (length 1) [ 249.133560][ T8991] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.4156: error -117 reading directory block [ 249.146859][ T8991] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 249.157973][ T8991] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nolazytime,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000000ffc,grpid,,,errors=continue. Quota mode: writeback. [ 249.221712][ T495] usb 4-1: USB disconnect, device number 104 [ 249.232124][ T571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.264578][ T296] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 249.275671][ T571] usb 2-1: not running at top speed; connect to a high speed hub [ 249.329779][ T421] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.362231][ T571] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 249.372399][ T571] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 249.383964][ T571] usb 2-1: config 17 has no interface number 0 [ 249.390534][ T571] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 249.395455][ T8994] loop0: detected capacity change from 0 to 40427 [ 249.402554][ T571] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 249.422566][ T8994] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 249.431485][ T571] usb 2-1: config 17 interface 8 has no altsetting 0 [ 249.431584][ T8994] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 249.450234][ T8994] F2FS-fs (loop0): invalid crc value [ 249.459652][ T8994] F2FS-fs (loop0): Found nat_bits in checkpoint [ 249.500278][ T8994] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 249.511061][ T8994] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 249.522135][ T421] usb 3-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40 [ 249.546583][ T296] usb 5-1: Using ep0 maxpacket: 8 [ 249.553323][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.563274][ T421] usb 3-1: Product: syz [ 249.567504][ T421] usb 3-1: Manufacturer: syz [ 249.572489][ T421] usb 3-1: SerialNumber: syz [ 249.633781][ T571] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 249.645047][ T571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.653517][ T571] usb 2-1: Product: syz [ 249.658860][ T571] usb 2-1: Manufacturer: syz [ 249.663787][ T571] usb 2-1: SerialNumber: syz [ 249.687772][ T8959] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 249.851261][ T8999] loop0: detected capacity change from 0 to 40427 [ 249.872317][ T296] usb 5-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 249.882400][ T296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.890603][ T296] usb 5-1: Product: syz [ 249.895332][ T296] usb 5-1: Manufacturer: syz [ 249.901072][ T8999] F2FS-fs (loop0): Invalid segment/section count (24 != 3 * 1) [ 249.904844][ T296] usb 5-1: SerialNumber: syz [ 249.917476][ T8999] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 249.929037][ T8999] F2FS-fs (loop0): invalid crc value [ 249.936445][ T8999] F2FS-fs (loop0): Found nat_bits in checkpoint [ 249.970380][ T8999] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 249.979746][ T8999] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 249.991311][ T421] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 250.013554][ T421] usb 3-1: unit 5 not found! [ 250.059024][ T571] usb 2-1: selecting invalid altsetting 0 [ 250.083828][ T421] usb 3-1: USB disconnect, device number 108 [ 250.090532][ T571] usb 2-1: USB disconnect, device number 105 [ 250.121438][ T39] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 250.154489][ T9013] loop0: detected capacity change from 0 to 1024 [ 250.202471][ T9013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 250.214327][ T9013] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.4163: lblock 2 mapped to illegal pblock 2 (length 1) [ 250.228972][ T9013] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 250.237655][ T9013] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.4163: lblock 0 mapped to illegal pblock 48 (length 1) [ 250.254147][ T9013] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 250.264185][ T9013] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.4163: Failed to acquire dquot type 0 [ 250.276522][ T9013] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 250.286826][ T9013] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.4163: mark_inode_dirty error [ 250.299290][ T9013] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 250.310669][ T9013] EXT4-fs (loop0): 1 orphan inode deleted [ 250.317051][ T9013] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,noblock_validity,debug,noquota,auto_da_alloc=0x0000000000000000,noauto_da_alloc,,errors=continue. Quota mode: none. [ 250.320481][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 250.355344][ T315] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 250.360788][ T296] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 250.376998][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 250.394487][ T315] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 250.403024][ T315] EXT4-fs error (device loop0): ext4_release_dquot:6263: comm kworker/u4:4: Failed to release dquot type 0 [ 250.415653][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 250.425265][ T296] usb 5-1: unit 3 not found! [ 250.440750][ T287] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 250.454058][ T296] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x200, wIndex = 0x600, type = 3 [ 250.468966][ T287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 250.480416][ T296] usb 5-1: USB disconnect, device number 109 [ 250.487741][ T287] EXT4-fs error (device loop0): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 250.578810][ T9032] loop0: detected capacity change from 0 to 16 [ 250.587947][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.612357][ T9032] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0xf9190713, 0xf8c4b9bf expected [ 250.674766][ T39] usb 4-1: config 6 has an invalid interface number: 166 but max is 0 [ 250.684311][ T39] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 250.695054][ T39] usb 4-1: config 6 has no interface number 0 [ 250.701569][ T39] usb 4-1: config 6 interface 166 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.713267][ T39] usb 4-1: config 6 interface 166 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.727239][ T39] usb 4-1: config 6 interface 166 has no altsetting 0 [ 250.743952][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 250.798948][ T9044] loop4: detected capacity change from 0 to 2048 [ 250.826375][ T421] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 250.837524][ T495] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 250.860663][ T9044] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.875043][ T9051] loop0: detected capacity change from 0 to 2048 [ 250.876782][ T9044] ext4 filesystem being mounted at /809/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.902490][ T39] usb 4-1: New USB device found, idVendor=0403, idProduct=f44c, bcdDevice= 1.e1 [ 250.913168][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.921727][ T39] usb 4-1: Product: syz [ 250.930879][ T39] usb 4-1: Manufacturer: syz [ 250.936759][ T39] usb 4-1: SerialNumber: syz [ 250.940533][ T9051] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.958055][ T9051] ext4 filesystem being mounted at /835/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.111534][ T30] audit: type=1400 audit(1786290978.623:288): avc: denied { mount } for pid=9055 comm="syz.0.4183" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 251.142013][ T30] audit: type=1400 audit(1786290978.651:289): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 251.209068][ T9058] erofs: (device loop0): mounted with root inode @ nid 36. [ 251.216929][ T421] usb 2-1: No LPM exit latency info found, disabling LPM. [ 251.304166][ T39] ftdi_sio 4-1:6.166: FTDI USB Serial Device converter detected [ 251.312871][ T421] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.325811][ T39] usb 4-1: Detected SIO [ 251.330043][ T39] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 5 [ 251.335816][ T495] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.339884][ T421] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.357314][ T39] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 251.369010][ T39] usb 4-1: USB disconnect, device number 105 [ 251.414968][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 251.428631][ T39] ftdi_sio 4-1:6.166: device disconnected [ 251.444631][ T495] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 251.477079][ T495] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 251.607286][ T421] usb 2-1: string descriptor 0 read error: -22 [ 251.614068][ T421] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.639716][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.661941][ T421] usb 2-1: config 0 descriptor?? [ 251.672443][ T495] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 251.709070][ T495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.735049][ T495] usb 3-1: Product: syz [ 251.743350][ T495] usb 3-1: Manufacturer: syz [ 251.748934][ T495] usb 3-1: SerialNumber: syz [ 251.928951][ T421] usb 2-1: USB disconnect, device number 106 [ 252.138644][ T495] usb 3-1: unit 4: unexpected type 0x03 [ 252.151089][ T9054] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9) [ 252.159804][ T9054] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 252.193021][ T495] usb 3-1: unit 8 not found! [ 252.227442][ T9054] F2FS-fs (loop4): Found nat_bits in checkpoint [ 252.247566][ T495] usb 3-1: USB disconnect, device number 109 [ 252.318992][ T9054] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 252.326895][ T9054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.567473][ T9085] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.635592][ T9066] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.749065][ T9066] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.939093][ T9113] syz.3.4207[9113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.939181][ T9113] syz.3.4207[9113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.973478][ T495] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 253.321563][ T421] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 253.451677][ T495] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.548473][ T495] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.559545][ T495] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.569910][ T39] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 253.591555][ T421] usb 3-1: Using ep0 maxpacket: 16 [ 253.624237][ T502] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 253.714162][ T9143] set_capacity_and_notify: 26 callbacks suppressed [ 253.714181][ T9143] loop0: detected capacity change from 0 to 32768 [ 253.743433][ T495] usb 2-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 253.753084][ T495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.763136][ T495] usb 2-1: Product: syz [ 253.765437][ T421] usb 3-1: unable to get BOS descriptor or descriptor too short [ 253.767604][ T495] usb 2-1: Manufacturer: syz [ 253.780564][ T495] usb 2-1: SerialNumber: syz [ 253.830060][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 253.862687][ T421] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 45, changing to 7 [ 253.991133][ T9145] loop0: detected capacity change from 0 to 65536 [ 254.003784][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.057796][ T421] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 254.071099][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.079671][ T421] usb 3-1: Product: syz [ 254.084003][ T421] usb 3-1: Manufacturer: syz [ 254.089004][ T421] usb 3-1: SerialNumber: syz [ 254.091165][ T502] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.094289][ T39] usb 5-1: config 8 has an invalid interface number: 172 but max is 0 [ 254.111010][ T39] usb 5-1: config 8 has no interface number 0 [ 254.122369][ T39] usb 5-1: config 8 interface 172 has no altsetting 0 [ 254.202273][ T9147] loop0: detected capacity change from 0 to 2048 [ 254.220690][ T495] usb 2-1: unit 255 not found! [ 254.226187][ T502] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.238133][ T495] usb 2-1: USB disconnect, device number 107 [ 254.245747][ T502] usb 4-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.261518][ T309] loop0: p1 p2 p3 [ 254.267443][ T502] usb 4-1: config 1 interface 0 has no altsetting 0 [ 254.280831][ T9147] loop0: p1 p2 p3 [ 254.285638][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.297372][ T39] usb 5-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=c7.75 [ 254.317823][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.328681][ T39] usb 5-1: Product: syz [ 254.334413][ T39] usb 5-1: Manufacturer: syz [ 254.342456][ T39] usb 5-1: SerialNumber: syz [ 254.462104][ T317] udevd[317]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 254.470220][ T309] udevd[309]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 254.490685][ T1076] udevd[1076]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 254.491861][ T502] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.505755][ T678] udevd[678]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 254.513873][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.520735][ T421] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 254.530968][ T502] usb 4-1: Product: syz [ 254.543480][ T502] usb 4-1: Manufacturer: syz [ 254.549029][ T502] usb 4-1: SerialNumber: syz [ 254.556688][ T421] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 254.584371][ T421] usb 3-1: USB disconnect, device number 110 [ 254.697936][ T39] rtl8150 5-1:8.172: couldn't find required endpoints [ 254.705519][ T39] rtl8150: probe of 5-1:8.172 failed with error -5 [ 254.714341][ T39] usb 5-1: USB disconnect, device number 110 [ 254.773352][ T492] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 254.817750][ T1075] udevd[1075]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 254.903796][ T502] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 254.911159][ T502] cdc_mbim 4-1:1.0: bind() failure [ 254.918642][ T502] usb 4-1: USB disconnect, device number 106 [ 254.990194][ T495] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 255.044349][ T492] usb 1-1: Using ep0 maxpacket: 8 [ 255.180314][ T492] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 255.189688][ T492] usb 1-1: config 0 has no interface number 0 [ 255.196462][ T492] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 255.206539][ T492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.221607][ T492] usb 1-1: config 0 descriptor?? [ 255.239482][ T421] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 255.302377][ T9155] loop4: detected capacity change from 0 to 32768 [ 255.380708][ T495] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xCE, skipping [ 255.482451][ T571] usb 1-1: USB disconnect, device number 106 [ 255.499807][ T421] usb 3-1: Using ep0 maxpacket: 32 [ 255.575689][ T495] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 255.596955][ T495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.617948][ T495] usb 2-1: Product: syz [ 255.622590][ T495] usb 2-1: Manufacturer: syz [ 255.627335][ T495] usb 2-1: SerialNumber: syz [ 255.705691][ T421] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.998452][ T421] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 256.020342][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.058634][ T421] usb 3-1: Product: syz [ 256.063070][ T421] usb 3-1: Manufacturer: syz [ 256.074452][ T495] usb 2-1: MIDIStreaming interface descriptor not found [ 256.079559][ T421] usb 3-1: SerialNumber: syz [ 256.102556][ T495] usb 2-1: USB disconnect, device number 108 [ 256.475492][ T421] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 256.562632][ T421] usb 3-1: unit 37 not found! [ 256.567600][ T421] usb 3-1: unit 0 not found! [ 256.634977][ T421] usb 3-1: USB disconnect, device number 111 [ 256.783485][ T9159] loop3: detected capacity change from 0 to 262144 [ 256.827903][ T9157] loop4: detected capacity change from 0 to 262144 [ 257.011188][ T9171] kernel profiling enabled (shift: 63) [ 257.030158][ T9163] loop0: detected capacity change from 0 to 131072 [ 257.038347][ T9171] profiling shift: 63 too large [ 257.044443][ T9163] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(512) [ 257.084031][ T9163] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 257.130849][ T9163] F2FS-fs (loop0): invalid crc value [ 257.158670][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4238'. [ 257.181220][ T9163] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.332275][ T9163] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 257.353610][ T571] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 257.361489][ T9163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 257.391822][ T30] audit: type=1400 audit(1786290984.415:290): avc: denied { read append } for pid=9184 comm="syz.3.4241" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.490246][ T30] audit: type=1400 audit(1786290984.443:291): avc: denied { open } for pid=9184 comm="syz.3.4241" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.570562][ T30] audit: type=1400 audit(1786290984.461:292): avc: denied { ioctl } for pid=9184 comm="syz.3.4241" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.657071][ T571] usb 5-1: Using ep0 maxpacket: 32 [ 257.758822][ T9197] loop3: detected capacity change from 0 to 256 [ 257.841477][ T571] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.120525][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4253'. [ 258.156057][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4253'. [ 258.231722][ T571] usb 5-1: string descriptor 0 read error: -22 [ 258.248022][ T571] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 258.278762][ T9215] netlink: 'syz.0.4257': attribute type 4 has an invalid length. [ 258.289896][ T571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.362633][ T571] usb 5-1: MIDIStreaming interface descriptor not found [ 258.586083][ T571] usb 5-1: USB disconnect, device number 111 [ 258.689660][ T9239] loop0: detected capacity change from 0 to 128 [ 258.994349][ T30] audit: type=1400 audit(1786290985.900:293): avc: denied { create } for pid=9252 comm="syz.0.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.032417][ T9165] loop1: detected capacity change from 0 to 262144 [ 259.039317][ T30] audit: type=1400 audit(1786290985.919:294): avc: denied { write } for pid=9252 comm="syz.0.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.086972][ T30] audit: type=1400 audit(1786290985.919:295): avc: denied { nlmsg_write } for pid=9252 comm="syz.0.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.118107][ T9165] F2FS-fs (loop1): Found nat_bits in checkpoint [ 259.266945][ T9165] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 259.378274][ T9294] ip_tables: iptables: counters copy to user failed while replacing table [ 259.531617][ T30] audit: type=1400 audit(1786290986.389:296): avc: denied { write } for pid=9314 comm="syz.4.4302" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.561473][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4303'. [ 259.582149][ T9317] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4303'. [ 259.608573][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4303'. [ 259.628027][ T9317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4303'. [ 259.804637][ T9337] netlink: 'syz.2.4313': attribute type 3 has an invalid length. [ 259.917817][ T9343] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4316'. [ 260.107096][ T571] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 260.215277][ T9362] netlink: 'syz.1.4324': attribute type 9 has an invalid length. [ 260.226482][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4324'. [ 260.422886][ T9387] netlink: 'syz.1.4337': attribute type 6 has an invalid length. [ 260.430813][ T9387] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.515669][ T571] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.540479][ T571] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.679345][ T9223] loop3: detected capacity change from 0 to 262144 [ 260.682947][ T9411] netlink: 'syz.2.4349': attribute type 3 has an invalid length. [ 260.739424][ T9223] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.750149][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4350'. [ 260.758739][ T571] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 260.805117][ T571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.827903][ T571] usb 1-1: Product: syz [ 260.832350][ T30] audit: type=1400 audit(1786290987.588:297): avc: denied { create } for pid=9421 comm="syz.2.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.862662][ T571] usb 1-1: Manufacturer: syz [ 260.879181][ T571] usb 1-1: SerialNumber: syz [ 260.918337][ T30] audit: type=1400 audit(1786290987.625:298): avc: denied { write } for pid=9421 comm="syz.2.4353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.952441][ T9223] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 261.012779][ T9431] netlink: 'syz.2.4357': attribute type 2 has an invalid length. [ 261.068732][ T9435] loop1: detected capacity change from 0 to 256 [ 261.321333][ T571] usb 1-1: 0:1 : does not exist [ 261.327366][ T571] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 261.342978][ T571] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 261.357103][ T571] usb 1-1: USB disconnect, device number 107 [ 261.398806][ T30] audit: type=1400 audit(1786290988.114:299): avc: denied { write } for pid=9463 comm="syz.2.4374" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 261.647329][ T9474] new mount options do not match the existing superblock, will be ignored [ 261.762508][ T9334] loop4: detected capacity change from 0 to 262144 [ 261.813912][ T9492] x_tables: unsorted underflow at hook 3 [ 262.022116][ T9525] netlink: 'syz.4.4403': attribute type 12 has an invalid length. [ 262.166405][ T9547] IPv6: NLM_F_CREATE should be specified when creating new route [ 262.498303][ T9604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.705829][ T9632] netlink: 'syz.4.4456': attribute type 5 has an invalid length. [ 262.814764][ T9645] tc_dump_action: action bad kind [ 262.942901][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 262.942920][ T30] audit: type=1400 audit(1786290989.535:319): avc: denied { read write } for pid=9657 comm="syz.1.4467" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 263.056198][ T30] audit: type=1400 audit(1786290989.553:320): avc: denied { write } for pid=9656 comm="syz.4.4468" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.131597][ T30] audit: type=1400 audit(1786290989.572:321): avc: denied { open } for pid=9657 comm="syz.1.4467" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 263.206499][ T30] audit: type=1400 audit(1786290989.572:322): avc: denied { ioctl } for pid=9657 comm="syz.1.4467" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 263.268027][ T30] audit: type=1400 audit(1786290989.572:323): avc: denied { ioctl } for pid=9656 comm="syz.4.4468" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.283041][ T9689] __nla_validate_parse: 1 callbacks suppressed [ 263.283115][ T9689] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4483'. [ 263.293589][ T30] audit: type=1326 audit(1786290989.627:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.4471" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 263.340968][ T9689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4483'. [ 263.426873][ T30] audit: type=1326 audit(1786290989.627:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.4471" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 263.467038][ T30] audit: type=1326 audit(1786290989.627:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.3.4471" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 263.520720][ T30] audit: type=1400 audit(1786290990.015:327): avc: denied { write } for pid=9702 comm="syz.3.4490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.538057][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 263.615804][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 263.677847][ T9730] loop1: detected capacity change from 0 to 512 [ 263.786385][ T9746] netlink: 'syz.0.4510': attribute type 3 has an invalid length. [ 263.836227][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4510'. [ 263.867896][ T9730] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 263.879598][ T9730] EXT4-fs warning (device loop1): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 263.949920][ T9730] EXT4-fs (loop1): mount failed [ 264.123924][ T9787] device erspan1 entered promiscuous mode [ 264.224086][ T9796] loop0: detected capacity change from 0 to 1024 [ 264.244763][ T9803] loop3: detected capacity change from 0 to 512 [ 264.274975][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4539'. [ 264.292507][ T9805] netlink: 'syz.4.4537': attribute type 32 has an invalid length. [ 264.403625][ T9803] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.421675][ T9803] ext4 filesystem being mounted at /783/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.502175][ T9796] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,block_validity,noload,nombcache,inode_readahead_blks=0x0000000000000200,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: none. [ 264.573738][ T9796] ext4 filesystem being mounted at /902/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.663119][ T9832] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4548'. [ 264.758230][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4559'. [ 264.836528][ T9857] device ip6tnl1 entered promiscuous mode [ 265.016986][ T9879] loop1: detected capacity change from 0 to 512 [ 265.029278][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4573'. [ 265.093652][ T9844] loop3: detected capacity change from 0 to 40427 [ 265.111901][ T9844] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 265.137209][ T9879] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.4574: bad orphan inode 14 [ 265.165424][ T9844] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 265.180085][ T9879] ext4_test_bit(bit=13, block=18) = 1 [ 265.201715][ T9879] is_bad_inode(inode)=0 [ 265.207627][ T9844] F2FS-fs (loop3): invalid crc value [ 265.213163][ T9879] NEXT_ORPHAN(inode)=0 [ 265.224613][ T9879] max_ino=32 [ 265.227888][ T9879] i_nlink=1 [ 265.232402][ T9879] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 265.252409][ T9879] ext4 filesystem being mounted at /873/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.254824][ T9844] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 265.277156][ T9897] IPv6: A: Disabled Multicast RS [ 265.301763][ T9879] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.4574: Directory hole found for htree leaf block 0 [ 265.330100][ T9844] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 265.337618][ T9844] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.372190][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4581'. [ 265.388037][ T9858] loop4: detected capacity change from 0 to 40427 [ 265.459535][ T9858] F2FS-fs (loop4): invalid crc value [ 265.481399][ T9913] futex_wake_op: syz.1.4585 tries to shift op by 32; fix this program [ 265.505523][ T9858] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 265.609907][ T9927] xt_hashlimit: size too large, truncated to 1048576 [ 265.626365][ T9927] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 265.646037][ T9858] F2FS-fs (loop4): recover fsync data on readonly fs [ 265.676700][ T9858] F2FS-fs (loop4): checkpoint=disable on readonly fs [ 265.746786][ T9941] netlink: 'syz.3.4588': attribute type 13 has an invalid length. [ 266.007902][ T9981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.290377][T10027] loop1: detected capacity change from 0 to 512 [ 266.365000][T10027] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.4641: inode #1: comm syz.1.4641: iget: illegal inode # [ 266.387092][T10027] EXT4-fs (loop1): Remounting filesystem read-only [ 266.394074][T10027] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.4641: error while reading EA inode 1 err=-117 [ 266.411012][T10027] EXT4-fs (loop1): Remounting filesystem read-only [ 266.419958][T10027] EXT4-fs (loop1): 1 orphan inode deleted [ 266.426368][T10027] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000010fff,norecovery,resgid=0x0000000000000000,init_itable=0x0000000000000001,usrquota,errors=remount-ro,nolazytime,barrier,dioread_lock,noblock_validity,noquota,. Quota mode: none. [ 266.459042][T10027] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.4641: deleted inode referenced: 15 [ 266.471834][T10027] EXT4-fs (loop1): Remounting filesystem read-only [ 266.536549][T10056] tc_dump_action: action bad kind [ 266.920364][T10136] xt_l2tp: v2 sid > 0xffff: 67108864 [ 267.020895][T10153] loop4: detected capacity change from 0 to 256 [ 267.037515][T10158] tc_dump_action: action bad kind [ 267.116314][T10169] loop1: detected capacity change from 0 to 1024 [ 267.183911][T10169] EXT4-fs (loop1): Ignoring removed orlov option [ 267.206700][T10169] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 267.244281][T10169] EXT4-fs error (device loop1): ext4_free_inode:355: comm syz.1.4712: bit already cleared for inode 15 [ 267.333465][T10209] loop3: detected capacity change from 0 to 128 [ 267.365124][T10215] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.384873][T10209] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 267.422470][T10209] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 267.436746][T10209] ext4 filesystem being mounted at /822/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.484100][T10226] mmap: syz.0.4739 (10226): VmData 29089792 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 267.565700][T10240] ipt_REJECT: ECHOREPLY no longer supported. [ 267.695289][ T571] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 267.748723][T10263] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 267.898372][T10283] loop0: detected capacity change from 0 to 512 [ 267.952881][T10283] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.970967][T10283] ext4 filesystem being mounted at /963/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.987963][ T571] usb 5-1: Using ep0 maxpacket: 8 [ 268.019206][T10283] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.4764: Failed to acquire dquot type 0 [ 268.073287][T10301] netlink: 'syz.2.4773': attribute type 30 has an invalid length. [ 268.161486][ T571] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.259072][ T571] usb 5-1: config 8 has an invalid interface number: 172 but max is 0 [ 268.293519][ T571] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 268.320260][T10341] device bridge_slave_0 left promiscuous mode [ 268.326619][ T571] usb 5-1: config 8 has no interface number 0 [ 268.333026][ T571] usb 5-1: config 8 interface 172 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 268.337586][T10341] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.376280][T10341] device bridge_slave_1 left promiscuous mode [ 268.379023][ T571] usb 5-1: config 8 interface 172 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 0 [ 268.385012][T10341] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.414108][ T571] usb 5-1: config 8 interface 172 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.452966][ T571] usb 5-1: config 8 interface 172 has no altsetting 0 [ 268.469678][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl2: link becomes ready [ 268.480852][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl2: link becomes ready [ 268.489465][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 268.509901][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.520236][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 268.530497][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.546022][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.568709][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.584649][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.605384][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.660302][ T571] usb 5-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=c7.75 [ 268.677941][ T571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.701994][ T571] usb 5-1: Product: syz [ 268.718996][ T571] usb 5-1: Manufacturer: syz [ 268.735924][ T571] usb 5-1: SerialNumber: syz [ 268.761939][T10394] loop3: detected capacity change from 0 to 256 [ 268.805377][T10398] netlink: 'syz.0.4819': attribute type 49 has an invalid length. [ 268.817038][T10394] FAT-fs (loop3): Directory bread(block 64) failed [ 268.830471][T10394] FAT-fs (loop3): Directory bread(block 65) failed [ 268.837988][T10394] FAT-fs (loop3): Directory bread(block 66) failed [ 268.843090][T10400] __nla_validate_parse: 2 callbacks suppressed [ 268.843154][T10400] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4820'. [ 268.850721][T10394] FAT-fs (loop3): Directory bread(block 67) failed [ 268.867720][T10394] FAT-fs (loop3): Directory bread(block 68) failed [ 268.875024][T10394] FAT-fs (loop3): Directory bread(block 69) failed [ 268.884294][T10394] FAT-fs (loop3): Directory bread(block 70) failed [ 268.899027][T10394] FAT-fs (loop3): Directory bread(block 71) failed [ 268.906373][T10394] FAT-fs (loop3): Directory bread(block 72) failed [ 268.913580][T10394] FAT-fs (loop3): Directory bread(block 73) failed [ 268.960783][T10411] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4825'. [ 269.024338][T10419] device veth1_virt_wifi entered promiscuous mode [ 269.083019][ T571] rtl8150 5-1:8.172: couldn't find required endpoints [ 269.101073][ T571] rtl8150: probe of 5-1:8.172 failed with error -5 [ 269.110473][T10429] syz.2.4833 (10429): /proc/10428/oom_adj is deprecated, please use /proc/10428/oom_score_adj instead. [ 269.137042][ T571] usb 5-1: USB disconnect, device number 112 [ 269.157276][T10432] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4836'. [ 269.227089][T10439] @0: renamed from bond_slave_1 [ 269.299389][T10412] loop0: detected capacity change from 0 to 40427 [ 269.317751][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 269.317770][ T30] audit: type=1326 audit(1786290995.420:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.4843" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 269.347548][T10449] netlink: 'syz.1.4844': attribute type 7 has an invalid length. [ 269.367638][ T30] audit: type=1326 audit(1786290995.457:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.4843" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 269.393172][ T30] audit: type=1326 audit(1786290995.457:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.4843" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 269.420969][T10412] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 269.433802][T10412] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 269.462696][T10412] F2FS-fs (loop0): invalid crc value [ 269.485140][ T30] audit: type=1326 audit(1786290995.457:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.4843" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 269.513498][ T30] audit: type=1326 audit(1786290995.457:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.4843" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 269.542433][ T30] audit: type=1326 audit(1786290995.457:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.4843" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 269.581501][T10412] F2FS-fs (loop0): Found nat_bits in checkpoint [ 269.581629][ T30] audit: type=1326 audit(1786290995.457:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.4843" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 269.625303][ T30] audit: type=1326 audit(1786290995.457:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10446 comm="syz.3.4843" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa9b5b32019 code=0x7ffc0000 [ 269.733229][ T30] audit: type=1404 audit(1786290995.734:390): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 269.761795][T10412] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 269.780409][T10412] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 269.792920][ T30] audit: type=1400 audit(1786290995.743:391): avc: denied { write } for pid=10463 comm="syz.4.4850" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 269.933054][T10503] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 270.007792][T10517] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.528423][T10602] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 270.603951][T10610] netlink: 'syz.3.4922': attribute type 16 has an invalid length. [ 270.623211][T10610] netlink: 'syz.3.4922': attribute type 17 has an invalid length. [ 270.681152][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 270.694573][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.741892][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): 4@0: link becomes ready [ 270.765474][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.791902][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.810715][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.819620][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 270.828884][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 270.862753][T10644] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1009 sclass=netlink_audit_socket pid=10644 comm=syz.2.4939 [ 270.920456][T10655] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 271.017572][T10672] xt_bpf: check failed: parse error [ 271.063864][T10680] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 271.101123][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4959'. [ 271.183088][T10698] netlink: 'syz.1.4965': attribute type 1 has an invalid length. [ 271.209459][T10698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.326113][T10730] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4981'. [ 271.399361][T10742] xt_hashlimit: invalid interval [ 271.532921][T10764] block device autoloading is deprecated and will be removed. [ 271.622902][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5007'. [ 271.813279][T10816] netlink: 'syz.0.5024': attribute type 29 has an invalid length. [ 271.832509][T10816] netlink: 'syz.0.5024': attribute type 3 has an invalid length. [ 271.855193][T10816] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5024'. [ 272.006140][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5043'. [ 272.417532][T10948] IPv6: sit1: Disabled Multicast RS [ 272.752666][T11010] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.827335][T11020] xt_CT: No such helper "syz0" [ 273.101745][T11077] IPv6: NLM_F_CREATE should be specified when creating new route [ 273.168498][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5159'. [ 273.219454][T11088] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 273.493664][T11144] netlink: 'syz.1.5187': attribute type 5 has an invalid length. [ 273.514805][T11144] device ip6erspan0 entered promiscuous mode [ 273.671344][T11177] sock: sock_timestamping_bind_phc: sock not bind to device [ 273.724654][T11185] xt_l2tp: unknown flags: 10 [ 273.839221][T11206] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 273.885171][T11210] netlink: 'syz.3.5219': attribute type 3 has an invalid length. [ 273.895475][T11210] netlink: 'syz.3.5219': attribute type 3 has an invalid length. [ 274.022346][T11234] netlink: 'syz.0.5231': attribute type 5 has an invalid length. [ 274.248581][T11273] ip6t_REJECT: ECHOREPLY is not supported [ 274.271460][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5253'. [ 274.443366][T11305] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl2: link becomes ready [ 274.470152][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5270'. [ 274.493339][T11315] xt_ecn: cannot match TCP bits for non-tcp packets [ 274.742589][ T30] kauditd_printk_skb: 552 callbacks suppressed [ 274.742606][ T30] audit: type=1400 audit(1786291000.430:944): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 274.778530][ T30] audit: type=1400 audit(1786291000.430:945): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 274.876386][ T30] audit: type=1400 audit(1786291000.457:946): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 274.915061][ T30] audit: type=1400 audit(1786291000.531:947): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 274.944596][ T30] audit: type=1400 audit(1786291000.540:948): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.005261][ T30] audit: type=1400 audit(1786291000.549:949): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.031348][ T30] audit: type=1400 audit(1786291000.586:950): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.031353][T11383] x_tables: duplicate entry at hook 2 [ 275.065820][ T30] audit: type=1400 audit(1786291000.632:951): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.065860][ T30] audit: type=1400 audit(1786291000.651:952): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.065890][ T30] audit: type=1400 audit(1786291000.651:953): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.383569][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5337'. [ 275.447294][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 275.558805][T11473] sock: sock_timestamping_bind_phc: sock not bind to device [ 275.598243][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5355'. [ 275.738651][T11518] validate_nla: 4 callbacks suppressed [ 275.738691][T11518] netlink: 'syz.1.5372': attribute type 9 has an invalid length. [ 275.790324][T11518] netlink: 'syz.1.5372': attribute type 7 has an invalid length. [ 275.798852][T11518] netlink: 'syz.1.5372': attribute type 8 has an invalid length. [ 276.035561][T11574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.221340][T11594] netlink: 'syz.2.5411': attribute type 2 has an invalid length. [ 276.525361][T11636] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 276.673889][T11646] netlink: 'syz.3.5436': attribute type 16 has an invalid length. [ 276.678354][T11644] xt_CONNSECMARK: invalid mode: 0 [ 276.714340][T11646] netlink: 'syz.3.5436': attribute type 17 has an invalid length. [ 276.776425][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.835712][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.009537][T11661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5443'. [ 277.129281][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 277.146508][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.173011][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 277.197983][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.222186][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.247038][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.249840][T11662] syz.2.5444 (11662) used greatest stack depth: 20392 bytes left [ 277.269023][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.293160][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.317261][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 277.337546][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 277.364062][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5447'. [ 277.438032][T11676] netlink: 'syz.2.5451': attribute type 13 has an invalid length. [ 277.815611][T11752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5488'. [ 277.853255][T11760] printk: syz.4.5494 (11760): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 277.871644][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5493'. [ 277.951752][T11776] netlink: 'syz.2.5501': attribute type 3 has an invalid length. [ 277.979921][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 278.023699][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5505'. [ 278.062765][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.070128][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.276290][T11849] xt_TCPMSS: Only works on TCP SYN packets [ 278.282735][T11847] netlink: 'syz.4.5536': attribute type 5 has an invalid length. [ 278.320959][T11855] netlink: 'syz.2.5540': attribute type 49 has an invalid length. [ 278.489076][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.507201][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.707429][T11946] xt_l2tp: invalid flags combination: 4 [ 278.944464][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.967293][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.001813][T12012] x_tables: duplicate entry at hook 3 [ 279.340678][T12092] xt_bpf: check failed: parse error [ 279.804678][T12223] device ip6gre2 entered promiscuous mode [ 279.994806][T12270] gretap0: refused to change device tx_queue_len [ 280.022176][T12270] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 280.059853][T12283] device sit0 entered promiscuous mode [ 280.073922][T12283] __nla_validate_parse: 2 callbacks suppressed [ 280.073943][T12283] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5752'. [ 280.145464][T12299] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.180423][ T30] kauditd_printk_skb: 563 callbacks suppressed [ 280.180441][ T30] audit: type=1400 audit(1786291005.439:1517): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.211841][ T30] audit: type=1400 audit(1786291005.439:1518): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.263208][ T30] audit: type=1400 audit(1786291005.476:1519): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.303159][ T30] audit: type=1400 audit(1786291005.494:1520): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.329440][ T30] audit: type=1400 audit(1786291005.494:1521): avc: denied { read } for pid=12312 comm="syz.3.5767" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 280.376120][ T30] audit: type=1400 audit(1786291005.503:1522): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.434513][ T30] audit: type=1400 audit(1786291005.503:1523): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.497751][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5787'. [ 280.506336][ T30] audit: type=1400 audit(1786291005.540:1524): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.559228][ T30] audit: type=1400 audit(1786291005.549:1526): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.612175][ T30] audit: type=1400 audit(1786291005.549:1525): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.674388][T12385] xt_limit: Overflow, try lower: 2147483649/3300 [ 280.800755][T12417] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5818'. [ 280.831573][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 280.842520][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 280.855848][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5822'. [ 280.917708][T12442] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 281.087261][T12485] x_tables: unsorted entry at hook 1 [ 281.293117][T12543] xt_l2tp: v2 tid > 0xffff: 134217728 [ 281.359640][T12558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5889'. [ 281.372672][T12558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5889'. [ 281.428564][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5895'. [ 281.441312][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5895'. [ 281.479046][T12581] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 281.497042][T12581] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.569178][T12601] validate_nla: 15 callbacks suppressed [ 281.569199][T12601] netlink: 'syz.0.5910': attribute type 19 has an invalid length. [ 281.731119][T12635] gretap0: refused to change device tx_queue_len [ 281.746596][T12635] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.939779][T12679] gretap0: refused to change device tx_queue_len [ 281.963403][T12679] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.069486][T12707] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.089568][T12707] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 282.113998][T12709] device gretap0 entered promiscuous mode [ 282.397527][T12763] x_tables: duplicate underflow at hook 2 [ 282.476881][T12771] device veth1_virt_wifi left promiscuous mode [ 283.100565][T12886] xt_bpf: check failed: parse error [ 283.439278][T12933] device gre1 entered promiscuous mode [ 283.683317][T12966] netlink: 'syz.3.6088': attribute type 3 has an invalid length. [ 283.958270][T13019] device bridge_slave_0 entered promiscuous mode [ 283.977873][T13019] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 284.004858][T13025] xt_TCPMSS: Only works on TCP SYN packets [ 284.045223][T13029] IPv6: Can't replace route, no match found [ 284.073733][T13036] xt_CT: No such helper "syz0" [ 284.177454][T13048] netlink: 'syz.1.6128': attribute type 1 has an invalid length. [ 284.607901][T13132] xt_TPROXY: Can be used only with -p tcp or -p udp [ 285.247749][T13229] device gretap0 left promiscuous mode [ 285.383208][T13229] device erspan1 left promiscuous mode [ 285.419500][T13229] device ip6tnl1 left promiscuous mode [ 285.471143][T13229] device ip6erspan0 left promiscuous mode [ 285.534180][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 285.553830][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.571076][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 285.606801][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.617871][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.639797][ T30] kauditd_printk_skb: 575 callbacks suppressed [ 285.639814][ T30] audit: type=1400 audit(1786291010.476:2102): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.648679][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.705998][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.723988][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.737928][ T30] audit: type=1400 audit(1786291010.568:2103): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.742984][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 285.790002][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 285.810357][ T30] audit: type=1400 audit(1786291010.632:2104): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.834969][T13282] __nla_validate_parse: 250 callbacks suppressed [ 285.834999][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6243'. [ 285.859957][ T30] audit: type=1400 audit(1786291010.678:2105): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.904529][T13290] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 285.933004][ T30] audit: type=1400 audit(1786291010.715:2106): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.949252][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.004776][T13304] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 286.023024][ T30] audit: type=1400 audit(1786291010.715:2107): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 286.080264][ T30] audit: type=1400 audit(1786291010.715:2108): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 286.106894][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6257'. [ 286.149979][ T30] audit: type=1400 audit(1786291010.780:2109): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 286.186476][T13322] IPv6: Can't replace route, no match found [ 286.215092][ T30] audit: type=1400 audit(1786291010.789:2110): avc: denied { read } for pid=13299 comm="syz.2.6252" dev="nsfs" ino=4026532372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 286.246192][T13334] device sit0 entered promiscuous mode [ 286.254904][ T30] audit: type=1400 audit(1786291010.798:2111): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 286.287439][T13334] netlink: 'syz.1.6269': attribute type 1 has an invalid length. [ 286.295241][T13334] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6269'. [ 286.353562][T13337] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6268'. [ 287.414606][T13506] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 287.633936][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6363'. [ 287.698412][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6366'. [ 287.940054][T13574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6386'. [ 288.040504][T13586] SELinux: security_context_str_to_sid(a`yv-|J+0l8G[kT_|nU5 [ 288.040504][T13586] M9) failed for (dev ?, type ?) errno=-22 [ 288.746826][T13675] xt_l2tp: v2 doesn't support IP mode [ 288.845537][T13702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 288.898361][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6453'. [ 289.104488][T13752] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 289.369525][T13809] xt_SECMARK: invalid mode: 2 [ 289.409098][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6504'. [ 289.503872][T13837] netlink: 'syz.0.6515': attribute type 13 has an invalid length. [ 289.567005][T13850] netlink: 'syz.2.6522': attribute type 5 has an invalid length. [ 289.577298][T13850] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6522'. [ 289.845279][T13899] xt_hashlimit: overflow, try lower: 4/0 [ 289.880628][T13906] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 290.710479][T13968] xt_hashlimit: size too large, truncated to 1048576 [ 290.730524][T13968] xt_hashlimit: max too large, truncated to 1048576 [ 291.073043][ T30] kauditd_printk_skb: 943 callbacks suppressed [ 291.073064][ T30] audit: type=1400 audit(1786291015.485:3055): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.142460][ T30] audit: type=1400 audit(1786291015.522:3056): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.208770][ T30] audit: type=1400 audit(1786291015.531:3057): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.237488][ T30] audit: type=1400 audit(1786291015.540:3058): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.269303][T14075] __nla_validate_parse: 3 callbacks suppressed [ 291.269328][T14075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6631'. [ 291.294387][ T30] audit: type=1400 audit(1786291015.540:3059): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.344833][T14085] xt_SECMARK: invalid security context 'unconfined' [ 291.367470][ T30] audit: type=1400 audit(1786291015.549:3060): avc: denied { read write } for pid=285 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.421575][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.443042][ T30] audit: type=1400 audit(1786291015.577:3061): avc: denied { read write } for pid=286 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.468895][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.478562][ T30] audit: type=1400 audit(1786291015.577:3062): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.505518][ T30] audit: type=1400 audit(1786291015.595:3063): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.515808][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.534798][ T30] audit: type=1400 audit(1786291015.595:3064): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.569288][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.583495][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.594209][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.606919][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.618812][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.632159][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6646'. [ 291.729627][T14122] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.752754][T14125] device sit0 left promiscuous mode [ 291.794271][T14125] device gre1 left promiscuous mode [ 292.003788][T14183] netlink: 'syz.3.6685': attribute type 49 has an invalid length. [ 292.108153][T14207] netlink: 'syz.4.6697': attribute type 3 has an invalid length. [ 292.159365][T14221] device bridge2 entered promiscuous mode [ 292.282669][T14255] netlink: 'syz.4.6723': attribute type 3 has an invalid length. [ 292.383052][T14281] netlink: 'syz.1.6735': attribute type 5 has an invalid length. [ 293.007399][T14419] ================================================================== [ 293.015929][T14419] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 293.025081][T14419] Read of size 4 at addr ffff88810ac5b470 by task syz.3.6802/14419 [ 293.034214][T14419] [ 293.036695][T14419] CPU: 1 PID: 14419 Comm: syz.3.6802 Tainted: G W syzkaller #0 [ 293.047130][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 293.057532][T14419] Call Trace: [ 293.061099][T14419] [ 293.064171][T14419] __dump_stack+0x21/0x30 [ 293.068572][T14419] dump_stack_lvl+0x110/0x170 [ 293.073401][T14419] ? show_regs_print_info+0x20/0x20 [ 293.078681][T14419] ? load_image+0x3f0/0x3f0 [ 293.083280][T14419] print_address_description+0x7f/0x2c0 [ 293.089383][T14419] ? unaccount_page_cache_page+0x6f1/0x760 [ 293.095678][T14419] kasan_report+0x10f/0x150 [ 293.100485][T14419] ? unaccount_page_cache_page+0x6f1/0x760 [ 293.106659][T14419] __asan_report_load4_noabort+0x14/0x20 [ 293.112680][T14419] unaccount_page_cache_page+0x6f1/0x760 [ 293.118502][T14419] __delete_from_page_cache+0xbe/0x470 [ 293.124016][T14419] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 293.131092][T14419] ? __kasan_check_write+0x14/0x20 [ 293.136344][T14419] ? __kasan_check_read+0x11/0x20 [ 293.141752][T14419] ? workingset_eviction+0x402/0x9f0 [ 293.147395][T14419] __remove_mapping+0x601/0x990 [ 293.152383][T14419] ? remove_mapping+0xa0/0xa0 [ 293.157126][T14419] ? __kasan_check_read+0x11/0x20 [ 293.162564][T14419] shrink_page_list+0x2a24/0x5800 [ 293.167857][T14419] ? shrink_page_list+0x8e1/0x5800 [ 293.173254][T14419] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 293.179649][T14419] ? __this_cpu_preempt_check+0x13/0x20 [ 293.185785][T14419] ? __mod_zone_page_state+0x8e/0xd0 [ 293.191856][T14419] ? isolate_lru_pages+0xff1/0x11f0 [ 293.197388][T14419] ? should_run_aging+0x410/0x410 [ 293.203603][T14419] ? cgroup_rstat_updated+0x30/0x360 [ 293.209131][T14419] ? _raw_spin_lock_irq+0x95/0xf0 [ 293.214892][T14419] ? __this_cpu_preempt_check+0x13/0x20 [ 293.220499][T14419] ? __count_memcg_events+0xad/0x120 [ 293.226071][T14419] shrink_lruvec+0x1297/0x3a40 [ 293.231199][T14419] ? release_firmware_map_entry+0x190/0x190 [ 293.238235][T14419] ? wake_up_process+0x20/0x20 [ 293.243750][T14419] ? mem_cgroup_shrink_node+0x550/0x550 [ 293.249630][T14419] ? preempt_schedule_common+0xbe/0xf0 [ 293.255401][T14419] ? schedule_preempt_disabled+0x20/0x20 [ 293.261080][T14419] ? __kasan_check_write+0x14/0x20 [ 293.266328][T14419] ? _raw_spin_lock+0x94/0xf0 [ 293.271664][T14419] ? _raw_spin_trylock_bh+0x150/0x150 [ 293.278006][T14419] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 293.283972][T14419] ? inactive_is_low+0x160/0x2f0 [ 293.289080][T14419] ? css_next_descendant_pre+0x1e1/0x210 [ 293.295678][T14419] ? mem_cgroup_iter+0x465/0x6c0 [ 293.301338][T14419] shrink_node+0x11ee/0x2a40 [ 293.306513][T14419] ? allow_direct_reclaim+0x370/0x370 [ 293.312004][T14419] do_try_to_free_pages+0x5a7/0x1580 [ 293.317527][T14419] ? try_to_free_pages+0xc50/0xc50 [ 293.322917][T14419] ? simple_strntoull+0x10e/0x180 [ 293.328046][T14419] try_to_free_mem_cgroup_pages+0x261/0x610 [ 293.334400][T14419] ? shrink_lruvec+0x3a40/0x3a40 [ 293.339642][T14419] ? mutex_unlock+0x8f/0x230 [ 293.344546][T14419] ? __kasan_check_read+0x11/0x20 [ 293.349864][T14419] ? page_counter_set_max+0x65/0x140 [ 293.355823][T14419] mem_cgroup_resize_max+0x309/0x3e0 [ 293.361172][T14419] mem_cgroup_write+0x1ed/0x230 [ 293.366089][T14419] ? mem_cgroup_reset+0x130/0x130 [ 293.371260][T14419] ? __kasan_check_write+0x14/0x20 [ 293.376814][T14419] ? _copy_from_iter+0x4a4/0x10a0 [ 293.381991][T14419] ? mem_cgroup_reset+0x130/0x130 [ 293.387749][T14419] cgroup_file_write+0x294/0x560 [ 293.392820][T14419] ? cgroup_seqfile_stop+0xc0/0xc0 [ 293.398535][T14419] ? mutex_lock+0x9b/0x1c0 [ 293.403210][T14419] ? wait_for_completion_killable_timeout+0x10/0x10 [ 293.410290][T14419] ? __kasan_check_write+0x14/0x20 [ 293.415952][T14419] ? cgroup_seqfile_stop+0xc0/0xc0 [ 293.422043][T14419] kernfs_fop_write_iter+0x2bd/0x400 [ 293.427556][T14419] vfs_write+0x831/0xfd0 [ 293.431944][T14419] ? file_end_write+0x1b0/0x1b0 [ 293.436920][T14419] ? wait_for_completion_killable_timeout+0x10/0x10 [ 293.443787][T14419] ? __fget_files+0x2e1/0x340 [ 293.450137][T14419] ? __fdget_pos+0x2d2/0x380 [ 293.455352][T14419] ? ksys_write+0x70/0x260 [ 293.459899][T14419] ksys_write+0x14a/0x260 [ 293.464431][T14419] ? __ia32_sys_read+0x90/0x90 [ 293.469341][T14419] ? __kasan_check_write+0x14/0x20 [ 293.475384][T14419] ? switch_fpu_return+0x15d/0x2c0 [ 293.480633][T14419] __x64_sys_write+0x7b/0x90 [ 293.486047][T14419] x64_sys_call+0x8ef/0x9a0 [ 293.491769][T14419] do_syscall_64+0x4c/0xa0 [ 293.496709][T14419] ? clear_bhb_loop+0x50/0xa0 [ 293.501516][T14419] ? clear_bhb_loop+0x50/0xa0 [ 293.506419][T14419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.512877][T14419] RIP: 0033:0x7fa9b5b32019 [ 293.517349][T14419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.538606][T14419] RSP: 002b:00007fa9b458b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 293.548069][T14419] RAX: ffffffffffffffda RBX: 00007fa9b5db9fa0 RCX: 00007fa9b5b32019 [ 293.556660][T14419] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 293.565323][T14419] RBP: 00007fa9b5bc900c R08: 0000000000000000 R09: 0000000000000000 [ 293.573984][T14419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.582571][T14419] R13: 00007fa9b5dba038 R14: 00007fa9b5db9fa0 R15: 00007ffc6ba08b08 [ 293.591240][T14419] [ 293.594917][T14419] [ 293.597267][T14419] Allocated by task 285: [ 293.602069][T14419] __kasan_kmalloc+0xd4/0x100 [ 293.608353][T14419] __kmalloc_track_caller+0x13c/0x2c0 [ 293.614146][T14419] __alloc_skb+0x210/0x730 [ 293.619751][T14419] audit_log_start+0x407/0x8a0 [ 293.629712][T14419] common_lsm_audit+0xd2/0x1670 [ 293.636064][T14419] slow_avc_audit+0x1c4/0x240 [ 293.640814][T14419] audit_inode_permission+0x1a3/0x270 [ 293.646587][T14419] selinux_inode_permission+0x50c/0x5f0 [ 293.652732][T14419] security_inode_permission+0xa0/0x100 [ 293.659417][T14419] inode_permission+0xef/0x4a0 [ 293.664595][T14419] may_open+0x2a4/0x3f0 [ 293.669291][T14419] path_openat+0x2631/0x2f80 [ 293.673905][T14419] do_filp_open+0x1df/0x400 [ 293.679109][T14419] do_sys_openat2+0x15e/0x7f0 [ 293.684325][T14419] __x64_sys_openat+0x136/0x160 [ 293.689317][T14419] x64_sys_call+0x219/0x9a0 [ 293.694047][T14419] do_syscall_64+0x4c/0xa0 [ 293.698603][T14419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.704894][T14419] [ 293.707639][T14419] Last potentially related work creation: [ 293.714088][T14419] kasan_save_stack+0x3a/0x60 [ 293.719882][T14419] __kasan_record_aux_stack+0xd2/0x100 [ 293.725578][T14419] kasan_record_aux_stack_noalloc+0xb/0x10 [ 293.732318][T14419] insert_work+0x51/0x310 [ 293.737457][T14419] __queue_work+0x8e1/0xc60 [ 293.742888][T14419] queue_work_on+0xde/0x150 [ 293.747806][T14419] destroy_super_rcu+0xd1/0xe0 [ 293.752961][T14419] rcu_do_batch+0x4c1/0xbf0 [ 293.758995][T14419] rcu_core+0x4a3/0xef0 [ 293.763983][T14419] rcu_core_si+0x9/0x10 [ 293.769068][T14419] handle_softirqs+0x250/0x560 [ 293.774948][T14419] __irq_exit_rcu+0x52/0xf0 [ 293.779477][T14419] irq_exit_rcu+0x9/0x10 [ 293.783732][T14419] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 293.789996][T14419] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 293.796266][T14419] [ 293.798707][T14419] Second to last potentially related work creation: [ 293.805933][T14419] kasan_save_stack+0x3a/0x60 [ 293.810924][T14419] __kasan_record_aux_stack+0xd2/0x100 [ 293.816756][T14419] kasan_record_aux_stack_noalloc+0xb/0x10 [ 293.823090][T14419] call_rcu+0x10b/0xf60 [ 293.827465][T14419] __put_super+0x26b/0x2d0 [ 293.831937][T14419] deactivate_locked_super+0xd4/0x100 [ 293.837864][T14419] mount_bdev+0x2ab/0x3c0 [ 293.842220][T14419] ext4_mount+0x34/0x40 [ 293.847174][T14419] legacy_get_tree+0xed/0x190 [ 293.852194][T14419] vfs_get_tree+0x89/0x260 [ 293.857009][T14419] do_new_mount+0x251/0xb40 [ 293.861832][T14419] path_mount+0x640/0xff0 [ 293.867603][T14419] __se_sys_mount+0x320/0x390 [ 293.874374][T14419] __x64_sys_mount+0xbf/0xd0 [ 293.879003][T14419] x64_sys_call+0x6bf/0x9a0 [ 293.883837][T14419] do_syscall_64+0x4c/0xa0 [ 293.888893][T14419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.895103][T14419] [ 293.897910][T14419] The buggy address belongs to the object at ffff88810ac5b000 [ 293.897910][T14419] which belongs to the cache kmalloc-2k of size 2048 [ 293.912347][T14419] The buggy address is located 1136 bytes inside of [ 293.912347][T14419] 2048-byte region [ffff88810ac5b000, ffff88810ac5b800) [ 293.925825][T14419] The buggy address belongs to the page: [ 293.932081][T14419] page:ffffea00042b1600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810ac5b000 pfn:0x10ac58 [ 293.944797][T14419] head:ffffea00042b1600 order:3 compound_mapcount:0 compound_pincount:0 [ 293.954120][T14419] flags: 0x4000000000010200(slab|head|zone=1) [ 293.960712][T14419] raw: 4000000000010200 ffffea0004606208 ffffea0004f2a608 ffff888100043200 [ 293.970036][T14419] raw: ffff88810ac5b000 0000000000080007 00000001ffffffff 0000000000000000 [ 293.978932][T14419] page dumped because: kasan: bad access detected [ 293.985366][T14419] page_owner tracks the page as allocated [ 293.991700][T14419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, ts 26711617763, free_ts 26706180411 [ 294.011600][T14419] post_alloc_hook+0x192/0x1b0 [ 294.016944][T14419] prep_new_page+0x1c/0x110 [ 294.021508][T14419] get_page_from_freelist+0x2c3a/0x2cd0 [ 294.027606][T14419] __alloc_pages+0x1a2/0x460 [ 294.032433][T14419] new_slab+0xa0/0x4d0 [ 294.036614][T14419] ___slab_alloc+0x3ac/0x840 [ 294.042026][T14419] __slab_alloc+0x49/0x90 [ 294.046520][T14419] __kmalloc_track_caller+0x169/0x2c0 [ 294.052198][T14419] kmemdup+0x26/0x60 [ 294.056223][T14419] neigh_sysctl_register+0xbf/0xa90 [ 294.063990][T14419] addrconf_sysctl_register+0xb3/0x1a0 [ 294.070079][T14419] ipv6_add_dev+0xc09/0x1150 [ 294.075045][T14419] addrconf_notify+0x582/0xe00 [ 294.080356][T14419] raw_notifier_call_chain+0x90/0x100 [ 294.085857][T14419] call_netdevice_notifiers+0x119/0x190 [ 294.091922][T14419] register_netdevice+0x110a/0x1490 [ 294.098035][T14419] page last free stack trace: [ 294.102974][T14419] free_unref_page_prepare+0x5fa/0x600 [ 294.109372][T14419] free_unref_page+0xae/0x540 [ 294.114633][T14419] __free_pages+0x6c/0x100 [ 294.119410][T14419] __free_slab+0xe5/0x1e0 [ 294.124597][T14419] __unfreeze_partials+0x15a/0x190 [ 294.129975][T14419] put_cpu_partial+0xc6/0x120 [ 294.134918][T14419] __slab_free+0x1d4/0x290 [ 294.139553][T14419] ___cache_free+0x104/0x120 [ 294.144953][T14419] qlink_free+0x4d/0x90 [ 294.149551][T14419] qlist_free_all+0x5f/0xb0 [ 294.154351][T14419] kasan_quarantine_reduce+0x14a/0x170 [ 294.160225][T14419] __kasan_slab_alloc+0x2f/0xe0 [ 294.165572][T14419] slab_post_alloc_hook+0x4f/0x2b0 [ 294.171264][T14419] __kmalloc_track_caller+0x11f/0x2c0 [ 294.177199][T14419] kvasprintf+0xe3/0x1a0 [ 294.181559][T14419] kvasprintf_const+0xf2/0x240 [ 294.187058][T14419] [ 294.189692][T14419] Memory state around the buggy address: [ 294.195892][T14419] ffff88810ac5b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.204514][T14419] ffff88810ac5b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.213228][T14419] >ffff88810ac5b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.221969][T14419] ^ [ 294.230673][T14419] ffff88810ac5b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.242672][T14419] ffff88810ac5b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.251303][T14419] ================================================================== [ 294.260041][T14419] Disabling lock debugging due to kernel taint Aug 9 15:56:58 syzkaller kern.alert kernel: [ 293.985366][T14419] page_owner tracks the page as allocated Aug 9 15:56:58 syzkaller kern.alert kernel: [ 293.991700][T14419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, ts 26711617763, free_ts 26706180411 Aug 9 15:56:58 syzkaller kern.alert kernel: [ 294.098035][T14419] page last free stack trace: