last executing test programs: 676.927254ms ago: executing program 0 (id=7154): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 626.058115ms ago: executing program 0 (id=7161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 557.146248ms ago: executing program 0 (id=7167): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='+*+/\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 556.218988ms ago: executing program 0 (id=7172): syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 525.270008ms ago: executing program 0 (id=7175): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x56}, 0x28) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x14, {0xa, 0x25, 0x25, 0xf295, 0x50, 0xff6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) 432.187591ms ago: executing program 2 (id=7184): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 425.202351ms ago: executing program 3 (id=7190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 206.632735ms ago: executing program 3 (id=7202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x298, 0x130, 0x0, 0x0, 0x130, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x2, 0x3, [0x4e24, 0x0, 0x4e24, 0x0, 0x0, 0x4e20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0xfd, 0x20, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0xd, 0x8, 0xc, 0xa, 0x5, 0xc81f, 0xd, 0x39, 0x18], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) 180.221236ms ago: executing program 4 (id=7205): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) 179.482936ms ago: executing program 3 (id=7206): r0 = open(&(0x7f0000000180)='.\x00', 0x222400, 0x120) fcntl$getflags(r0, 0x1) 133.233577ms ago: executing program 3 (id=7208): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)=0xffffffffffffffff) 133.145087ms ago: executing program 1 (id=7209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_GROUP={0x8}, @IFLA_ADDRESS={0xa}]}, 0x34}}, 0x604c180) 133.085847ms ago: executing program 2 (id=7210): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 133.043277ms ago: executing program 4 (id=7211): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xc01}}, {{0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffe01}}}, 0x108) 123.156107ms ago: executing program 2 (id=7212): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0xb, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) 116.696717ms ago: executing program 1 (id=7213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 115.671477ms ago: executing program 4 (id=7214): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x8991, &(0x7f0000000000)="d195cbd8de96b8d2a3658f253a00") 110.355188ms ago: executing program 3 (id=7215): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000640)=""/4105, 0x1009, 0x10000) 90.334418ms ago: executing program 2 (id=7216): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 39.489279ms ago: executing program 4 (id=7217): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x4000, 0x1000003, 0x14852, r0, 0x8000000) 39.356029ms ago: executing program 1 (id=7218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd1}, 0x8044) 39.189889ms ago: executing program 1 (id=7219): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) time(0x0) 39.149999ms ago: executing program 2 (id=7220): setuid(0xee00) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000004080)=ANY=[], 0x48) 39.092659ms ago: executing program 3 (id=7221): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, @remote, @mcast1={0xff, 0x5}, 0x5, 0x4, 0x0, 0x200, 0xfc8, 0x20c200a2}) 38.397259ms ago: executing program 4 (id=7222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x80, 0x0, 0x9, 0xff, 0x4, 0xfe, 0x0, 0x2200}, [@RTA_EXPIRES={0x8, 0x17, 0xc3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x54}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) 8.53822ms ago: executing program 1 (id=7223): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'veth0_vlan\x00', &(0x7f0000000340)=@ethtool_coalesce={0xf, 0x868, 0x730, 0x59, 0x2, 0xffff, 0x9f34, 0x2, 0xd6, 0x80000000, 0xb, 0x459, 0x2, 0x8, 0x4f6797b1, 0x8001, 0xa9, 0x9, 0x5, 0xf, 0x7, 0x2f6, 0x10}}) 8.38125ms ago: executing program 2 (id=7224): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 8.34647ms ago: executing program 0 (id=7225): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000900)) 7.51118ms ago: executing program 4 (id=7226): syz_clone(0x200100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 0s ago: executing program 1 (id=7227): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) fgetxattr(r0, 0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ce strings: Mfr=1, Product=2, SerialNumber=3 [ 126.647168][ T2146] usb 4-1: Product: syz [ 126.651824][ T2146] usb 4-1: Manufacturer: syz [ 126.656419][ T2146] usb 4-1: SerialNumber: syz [ 126.675386][ T2146] usb 4-1: config 0 descriptor?? [ 126.695004][ T914] usb 3-1: USB disconnect, device number 37 [ 126.722742][ T2146] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 126.729398][ T2146] uvcvideo: No valid video chain found. [ 126.819129][ T5224] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 126.830862][ T5224] EXT4-fs (loop0): group descriptors corrupted! [ 126.873745][ T5229] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 126.884050][ T5229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=f802e02c, mo2=0002] [ 126.892055][ T5229] System zones: 1-12 [ 126.896246][ T5229] EXT4-fs (loop1): orphan cleanup on readonly fs [ 126.902564][ T5229] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2198: bad orphan inode 3 [ 126.912972][ T5229] EXT4-fs (loop1): Remounting filesystem read-only [ 126.919503][ T5229] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,journal_dev=0x0000000000000040,discard,errors=remount-ro,data_err=abort [ 126.942998][ T5] usb 4-1: USB disconnect, device number 39 [ 127.246205][ T2146] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 127.253907][ T914] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 127.374477][ T301] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 127.438639][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 127.502762][ T2146] usb 1-1: Using ep0 maxpacket: 8 [ 127.641973][ T2146] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 189, changing to 7 [ 127.684591][ T914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.695349][ T2146] usb 1-1: language id specifier not provided by device, defaulting to English [ 127.759496][ T301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.769588][ T301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.778620][ T914] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 127.788517][ T914] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 127.802175][ T788] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 127.866428][ T301] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.875502][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.883634][ T301] usb 2-1: SerialNumber: syz [ 127.962643][ T914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.971696][ T914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.979788][ T914] usb 5-1: Product: syz [ 127.983959][ T914] usb 5-1: Manufacturer: syz [ 127.988551][ T914] usb 5-1: SerialNumber: syz [ 127.994703][ T25] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 128.003735][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.011853][ T25] usb 3-1: Product: syz [ 128.016037][ T25] usb 3-1: Manufacturer: syz [ 128.020618][ T25] usb 3-1: SerialNumber: syz [ 128.048164][ T2146] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 128.057205][ T2146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.065483][ T2146] usb 1-1: Product: 㑺㞑o샱 [ 128.070285][ T2146] usb 1-1: SerialNumber: syz [ 128.187526][ T301] usb 2-1: 0:2 : does not exist [ 128.192399][ T301] usb 2-1: unit 5 not found! [ 128.198339][ T301] usb 2-1: USB disconnect, device number 40 [ 128.240563][ T788] usb 4-1: config 0 has an invalid interface number: 42 but max is 8 [ 128.248714][ T788] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.261810][ T788] usb 4-1: config 0 has no interface number 0 [ 128.267935][ T788] usb 4-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 128.276984][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.283736][ T914] cdc_ncm 5-1:1.0: bind() failure [ 128.287493][ T788] usb 4-1: config 0 descriptor?? [ 128.295339][ T914] cdc_ncm 5-1:1.1: bind() failure [ 128.301284][ T914] usb 5-1: USB disconnect, device number 39 [ 128.358944][ T788] usb-storage 4-1:0.42: USB Mass Storage device detected [ 128.367164][ T788] usb-storage 4-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 128.374762][ T788] usb-storage 4-1:0.42: This device (04cb,0100,00bb S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 128.374762][ T788] Please send a copy of this message to and [ 128.422355][ T25] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.443746][ T25] usb 3-1: found format II with max.bitrate = 44931, frame size=8 [ 128.451614][ T25] usb 3-1: found format II with max.bitrate = 44931, frame size=8 [ 128.497226][ T25] usb 3-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 128.521523][ T25] usb 3-1: USB disconnect, device number 38 [ 128.579806][ T788] usb 4-1: USB disconnect, device number 40 [ 128.604170][ T2146] usb 1-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 128.625538][ T2146] usb 1-1: incorrect wMaxPacketSize 0xbf for BADD profile [ 128.632807][ T2146] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 128.646370][ T2146] usb 1-1: USB disconnect, device number 41 [ 128.851422][ T520] udevd[520]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.010390][ T5] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 129.181473][ T2146] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 129.192591][ T788] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 129.200825][ T5335] EXT4-fs (loop3): Ignoring removed nobh option [ 129.208408][ T5335] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 129.217086][ T5335] EXT4-fs error (device loop3): ext4_clear_blocks:880: inode #13: comm syz.3.2249: attempt to clear invalid blocks 1 len 1 [ 129.229936][ T347] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 129.230246][ T5335] EXT4-fs (loop3): Remounting filesystem read-only [ 129.244183][ T5335] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 129.258707][ T5335] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.2249: invalid indirect mapped block 1819239214 (level 0) [ 129.273147][ T5335] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.2249: invalid indirect mapped block 1819239214 (level 1) [ 129.287180][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 129.287538][ T5335] EXT4-fs (loop3): 1 truncate cleaned up [ 129.298019][ T5335] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=.. [ 129.416899][ T5] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 129.425968][ T5] usb 2-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 129.436227][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.502253][ T347] usb 3-1: Using ep0 maxpacket: 8 [ 129.609221][ T5] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 129.618294][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.626452][ T788] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.634184][ T347] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 129.641256][ T2146] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.642317][ T5] usb 2-1: Product: syz [ 129.654070][ T347] usb 3-1: config 0 has no interface number 0 [ 129.660152][ T5] usb 2-1: Manufacturer: syz [ 129.664746][ T5] usb 2-1: SerialNumber: syz [ 129.673373][ T302] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 129.694761][ T2146] usb 1-1: not running at top speed; connect to a high speed hub [ 129.694766][ T788] usb 5-1: not running at top speed; connect to a high speed hub [ 129.780286][ T788] usb 5-1: config 4 has an invalid interface number: 79 but max is 0 [ 129.788397][ T788] usb 5-1: config 4 has no interface number 0 [ 129.794592][ T788] usb 5-1: config 4 interface 79 has no altsetting 0 [ 129.833783][ T347] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 129.842830][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.850880][ T347] usb 3-1: Product: syz [ 129.855062][ T347] usb 3-1: Manufacturer: syz [ 129.859638][ T347] usb 3-1: SerialNumber: syz [ 129.864678][ T347] usb 3-1: config 0 descriptor?? [ 130.047595][ T2146] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 130.047602][ T5] usb 2-1: 0:1 : does not exist [ 130.058462][ T788] usb 5-1: string descriptor 0 read error: -22 [ 130.061738][ T2146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.067749][ T302] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.075743][ T2146] usb 1-1: Product: syz [ 130.085998][ T5] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x100, type = 0 [ 130.089994][ T2146] usb 1-1: Manufacturer: syz [ 130.099777][ T788] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5c, bcdDevice=23.5e [ 130.104158][ T2146] usb 1-1: SerialNumber: syz [ 130.113397][ T5] usb 2-1: unit 5 not found! [ 130.122364][ T302] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.132159][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.144613][ T5] usb 2-1: USB disconnect, device number 41 [ 130.165238][ T347] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 130.171697][ T347] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 130.184990][ T347] usb 3-1: USB disconnect, device number 39 [ 130.191478][ T788] uvcvideo: Found UVC 0.00 device (8086:0b5c) [ 130.198733][ T788] uvcvideo: No valid video chain found. [ 130.304187][ T302] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 130.313228][ T302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.321313][ T302] usb 4-1: Product: syz [ 130.325485][ T302] usb 4-1: Manufacturer: syz [ 130.330061][ T302] usb 4-1: SerialNumber: syz [ 130.408844][ T5] usb 5-1: USB disconnect, device number 40 [ 130.532220][ T5355] EXT4-fs (loop1): Ignoring removed nobh option [ 130.539071][ T5355] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.546031][ T5355] EXT4-fs warning (device loop1): ext4_xattr_inode_get:492: inode #11: comm syz.1.2258: ea_inode file size=1535 entry size=6 [ 130.559204][ T5355] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 130.567808][ T5355] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.2258: mark_inode_dirty error [ 130.571463][ T2146] usb 1-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 130.579413][ T5355] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 130.588383][ T2146] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 130.594770][ T5355] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2943: inode #15: comm syz.1.2258: mark_inode_dirty error [ 130.610091][ T2146] usb 1-1: USB disconnect, device number 42 [ 130.624655][ T5355] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2946: inode #15: comm syz.1.2258: mark inode dirty (error -27) [ 130.638194][ T5355] EXT4-fs warning (device loop1): ext4_evict_inode:305: xattr delete (err -27) [ 130.647229][ T5355] EXT4-fs (loop1): 1 orphan inode deleted [ 130.653017][ T5355] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x000000000000005c,barrier,nobh,min_batch_time=0x000000000000b656,block_validity,,errors=continue [ 130.731864][ T302] usb 4-1: unit 5 not found! [ 130.738132][ T302] usb 4-1: USB disconnect, device number 41 [ 130.787174][ T5363] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.2261: iget: bogus i_mode (4) [ 130.798686][ T5363] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2261: couldn't read orphan inode 15 (err -117) [ 130.811448][ T5363] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,stripe=0x0000000000000fff,norecovery,sb=0x00000000000000c4,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,barrier,dioread_lock,noblock_validity,noquota,,errors=continue [ 130.899760][ T5373] cgroup: Bad value for 'name' [ 130.956607][ T821] udevd[821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.977222][ T5377] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #2: comm syz.1.2267: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 261(261) [ 130.996021][ T5377] EXT4-fs (loop1): Remounting filesystem read-only [ 130.999165][ T25] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 131.011823][ T5377] EXT4-fs (loop1): get root inode failed [ 131.023711][ T5377] EXT4-fs (loop1): mount failed [ 131.304655][ T24] audit: type=1400 audit(1785859869.377:200): avc: denied { create } for pid=5400 comm="syz.3.2277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.469671][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.559271][ T24] audit: type=1400 audit(1785859869.621:201): avc: denied { create } for pid=5429 comm="syz.3.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 131.580447][ T914] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 131.588057][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.600466][ T5432] IPv6: addrconf: prefix option has invalid lifetime [ 131.607315][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.652072][ T5440] futex_wake_op: syz.3.2296 tries to shift op by 144; fix this program [ 131.698940][ T24] audit: type=1400 audit(1785859869.751:202): avc: denied { read write } for pid=5447 comm="syz.3.2300" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.715520][ T302] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 131.732292][ T24] audit: type=1400 audit(1785859869.770:203): avc: denied { open } for pid=5447 comm="syz.3.2300" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.859422][ T5456] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 131.868219][ T24] audit: type=1400 audit(1785859869.910:204): avc: denied { relabelto } for pid=5455 comm="syz.3.2303" name="509" dev="tmpfs" ino=2627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 131.893733][ T914] usb 2-1: Using ep0 maxpacket: 16 [ 131.899384][ T5386] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:48, type:0, next_blkoff:0, blkofs:1 [ 131.907782][ T24] audit: type=1400 audit(1785859869.910:205): avc: denied { associate } for pid=5455 comm="syz.3.2303" name="509" dev="tmpfs" ino=2627 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 131.936270][ T5386] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 131.940507][ T25] usb 3-1: string descriptor 0 read error: -22 [ 131.954590][ T24] audit: type=1400 audit(1785859869.910:206): avc: denied { write } for pid=282 comm="syz-executor" name="509" dev="tmpfs" ino=2627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 131.979570][ T25] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 131.988651][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.993605][ T302] usb 5-1: Using ep0 maxpacket: 8 [ 131.997417][ T24] audit: type=1400 audit(1785859869.910:207): avc: denied { remove_name } for pid=282 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 132.027402][ T24] audit: type=1400 audit(1785859869.910:208): avc: denied { rmdir } for pid=282 comm="syz-executor" name="509" dev="tmpfs" ino=2627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 132.068406][ T914] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.260857][ T914] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 132.270168][ T914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.279176][ T914] usb 2-1: Product: syz [ 132.285275][ T25] usb 3-1: USB disconnect, device number 40 [ 132.291363][ T914] usb 2-1: Manufacturer: syz [ 132.297412][ T914] usb 2-1: SerialNumber: syz [ 132.303617][ T302] usb 5-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 132.323185][ T302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.331425][ T302] usb 5-1: Product: syz [ 132.335804][ T302] usb 5-1: Manufacturer: syz [ 132.340402][ T302] usb 5-1: SerialNumber: syz [ 132.361076][ T5467] FAT-fs (loop3): bogus number of FAT sectors [ 132.367233][ T5467] FAT-fs (loop3): Can't find a valid FAT filesystem [ 132.507165][ T821] udevd[821]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.593920][ T5504] loop0: p1 < > p3 [ 132.598221][ T5504] loop0: p3 size 134217728 extends beyond EOD, truncated [ 132.624385][ T914] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 132.633412][ T914] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 132.656658][ T914] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 132.665653][ T914] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 132.713184][ T303] udevd[303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 132.723447][ T821] udevd[821]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 132.752618][ T5] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 132.762017][ T5515] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.2330: ea_inode file size=6 entry size=0 [ 132.774929][ T5515] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.788175][ T302] usb 5-1: MIDIStreaming interface descriptor not found [ 132.788198][ T5515] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.2330: iget: bad extra_isize 58 (inode size 256) [ 132.811516][ T914] usb 2-1: USB disconnect, device number 42 [ 132.823015][ T5515] EXT4-fs (loop0): Remounting filesystem read-only [ 132.824453][ T302] usb 5-1: USB disconnect, device number 41 [ 132.829860][ T5515] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2330: error while reading EA inode 11 err=-117 [ 132.859416][ T5515] EXT4-fs (loop0): 1 orphan inode deleted [ 132.865358][ T5515] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,noquota,max_dir_size_kb=0x0000000000200004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,nodelalloc, [ 132.993889][ T5533] EXT4-fs (loop0): Test dummy encryption mode enabled [ 133.000752][ T5533] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 133.041266][ C0] Adjusting tsc more than 11% (6182443 vs 8464552) [ 133.066284][ T520] udevd[520]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.120215][ T5542] IPv6: addrconf: prefix option has invalid lifetime [ 133.214049][ T5] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.246306][ T5564] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 133.257250][ T5564] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2353: casefold flag without casefold feature [ 133.270352][ T5] usb 4-1: not running at top speed; connect to a high speed hub [ 133.278408][ T5564] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2353: couldn't read orphan inode 15 (err -117) [ 133.290541][ T5564] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue [ 133.312712][ T347] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 133.347216][ T24] audit: type=1400 audit(1785859871.249:209): avc: denied { remount } for pid=5576 comm="syz.0.2358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.377440][ T5580] overlayfs: missing 'lowerdir' [ 133.386827][ T5] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 133.485372][ T302] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 133.500584][ T5597] EXT4-fs (loop4): Ignoring removed nobh option [ 133.507696][ T5597] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 133.515955][ T5597] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.2368: unexpected EA_INODE flag [ 133.527662][ T5597] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2368: couldn't read orphan inode 13 (err -117) [ 133.539700][ T5597] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue [ 133.596496][ T5] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 133.605743][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.613823][ T347] usb 3-1: Using ep0 maxpacket: 8 [ 133.619068][ T5] usb 4-1: Product: syz [ 133.623675][ T5] usb 4-1: Manufacturer: syz [ 133.628491][ T5] usb 4-1: SerialNumber: syz [ 133.733137][ T5615] FAT-fs (loop4): bread failed, FSINFO block (sector = 1281) [ 133.806790][ T347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.818474][ T788] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 133.929513][ T302] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 133.938562][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.947121][ T302] usb 2-1: config 0 descriptor?? [ 133.991457][ T302] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 133.999275][ T302] usb 2-1: Detected FT-X [ 134.077536][ T5] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 134.085955][ T5] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 134.093906][ T5] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 134.102449][ T347] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 134.111463][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.119480][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 134.124622][ T5] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 134.132751][ T347] usb 3-1: Product: syz [ 134.136894][ T347] usb 3-1: Manufacturer: syz [ 134.141635][ T347] usb 3-1: SerialNumber: syz [ 134.163858][ T788] usb 1-1: too many configurations: 55, using maximum allowed: 8 [ 134.176255][ T5] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 134.188441][ T301] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 134.228573][ T5] usb 4-1: USB disconnect, device number 42 [ 134.250222][ T302] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 134.275030][ T302] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 134.298622][ T302] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 134.305907][ T302] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 134.315285][ T302] usb 2-1: USB disconnect, device number 43 [ 134.321822][ T302] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 134.331454][ T302] ftdi_sio 2-1:0.0: device disconnected [ 134.524546][ T347] usb 3-1: selecting invalid altsetting 1 [ 134.530817][ T347] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 134.538597][ T347] usb 3-1: USB disconnect, device number 41 [ 134.678699][ T301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.688971][ T301] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.698653][ T301] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.708293][ T301] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 134.904341][ T301] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 134.913439][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.921479][ T301] usb 5-1: Product: syz [ 134.925633][ T301] usb 5-1: Manufacturer: syz [ 134.930263][ T301] usb 5-1: SerialNumber: syz [ 134.963734][ T302] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 134.968413][ T5653] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 134.977754][ T5653] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 134.987956][ T301] usb-storage 5-1:1.0: USB Mass Storage device detected [ 134.996676][ T301] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 134.999330][ T788] usb 1-1: string descriptor 0 read error: -71 [ 135.004866][ T301] scsi host1: usb-storage 5-1:1.0 [ 135.011479][ T788] usb 1-1: New USB device found, idVendor=2304, idProduct=a1a0, bcdDevice=7f.58 [ 135.025421][ T788] usb 1-1: New USB device strings: Mfr=220, Product=245, SerialNumber=158 [ 135.034695][ T788] usb 1-1: rejected 8 configurations due to insufficient available bus power [ 135.043978][ T788] usb 1-1: no configuration chosen from 8 choices [ 135.056217][ T788] usb 1-1: USB disconnect, device number 43 [ 135.154333][ T5675] EXT4-fs warning (device loop2): read_mmp_block:115: Error -74 while reading MMP block 17 [ 135.236180][ T347] usb 5-1: USB disconnect, device number 42 [ 135.314329][ T5689] EXT4-fs (loop2): Invalid log block size: 10 [ 135.438830][ T302] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.482047][ T5702] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.485729][ T302] usb 4-1: not running at top speed; connect to a high speed hub [ 135.505421][ T5702] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c128, mo2=0002] [ 135.513814][ T5702] EXT4-fs (loop2): orphan cleanup on readonly fs [ 135.521717][ T5702] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3357: comm syz.2.2416: Allocating blocks 41-42 which overlap fs metadata [ 135.536087][ T5702] EXT4-fs (loop2): Remounting filesystem read-only [ 135.542676][ T5702] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.2416: Failed to acquire dquot type 0 [ 135.554565][ T5702] EXT4-fs (loop2): 1 truncate cleaned up [ 135.560730][ T5702] EXT4-fs (loop2): pa ffff88811c0b15e8: logic 1, phys. 41, len 23 [ 135.568710][ T5702] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4367: group 0, free 22, pa_free 23 [ 135.584137][ T5702] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,noload,journal_dev=0x0000000000000002,noinit_itable,journal_dev=0x00000000000000102 [ 135.604911][ T302] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 135.797803][ T302] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 135.807037][ T302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.815292][ T302] usb 4-1: Product: syz [ 135.819538][ T302] usb 4-1: Manufacturer: syz [ 135.824182][ T302] usb 4-1: SerialNumber: syz [ 135.947946][ T347] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 136.040878][ T5745] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 136.049448][ T5745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 136.057966][ T5745] F2FS-fs (loop4): fault_injection options not supported [ 136.065058][ T5745] F2FS-fs (loop4): fault_type options not supported [ 136.072214][ T5745] F2FS-fs (loop4): invalid crc value [ 136.078257][ T5745] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.101032][ T5745] F2FS-fs (loop4): recover fsync data on readonly fs [ 136.108054][ T5745] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 136.115313][ T5745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.225425][ T302] usb 4-1: 1:1 : bogus bTerminalLink 4 [ 136.248568][ T302] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 136.259987][ T5] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 136.276295][ T302] usb 4-1: USB disconnect, device number 43 [ 136.286858][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.375583][ T347] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.385757][ T347] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 136.394818][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.403375][ T347] usb 1-1: config 0 descriptor?? [ 136.514240][ T301] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 136.674939][ T5] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.684762][ T5] usb 3-1: config 1 has no interface number 0 [ 136.693584][ T5] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 136.703301][ T5] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 136.721609][ T347] usb 1-1: string descriptor 0 read error: -71 [ 136.728427][ T347] rndis_host 1-1:0.0: skipping garbage [ 136.734300][ T347] usb 1-1: bad CDC descriptors [ 136.745372][ T5756] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 136.746169][ T347] usb 1-1: USB disconnect, device number 44 [ 136.755052][ T5756] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 136.769042][ T5756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e028, mo2=0002] [ 136.777440][ T5756] System zones: 1-12 [ 136.781821][ T5756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 136.788698][ T5756] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2440: bg 0: block 361: padding at end of block bitmap is not set [ 136.802992][ T301] usb 5-1: Using ep0 maxpacket: 8 [ 136.803360][ T5756] EXT4-fs (loop3): Remounting filesystem read-only [ 136.814599][ T5756] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 136.823663][ T5756] EXT4-fs error (device loop3): ext4_clear_blocks:880: inode #11: comm syz.3.2440: attempt to clear invalid blocks 33619980 len 1 [ 136.834496][ T5762] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 136.837733][ T5756] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2440: invalid indirect mapped block 1811939328 (level 0) [ 136.845546][ T5762] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.859455][ T5756] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2440: invalid indirect mapped block 2 (level 2) [ 136.865447][ T5762] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 136.878864][ T5756] EXT4-fs (loop3): 1 truncate cleaned up [ 136.893128][ T5762] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 136.898573][ T5756] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,sysvgroups,discard,errors=remount-ro,mblk_io_submit [ 136.905584][ T5762] EXT4-fs (loop1): 1 truncate cleaned up [ 136.925010][ T5] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 136.934146][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.942349][ T5762] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 136.951371][ T5] usb 3-1: Product: syz [ 136.955916][ T5] usb 3-1: Manufacturer: syz [ 136.960793][ T5] usb 3-1: SerialNumber: syz [ 137.117682][ T5768] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000009) [ 137.131712][ T5768] FAT-fs (loop1): Filesystem has been set read-only [ 137.162105][ T301] usb 5-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 137.171429][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.179476][ T301] usb 5-1: Product: syz [ 137.183632][ T301] usb 5-1: Manufacturer: syz [ 137.188249][ T301] usb 5-1: SerialNumber: syz [ 137.311798][ T5775] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 137.354647][ T5] usb 3-1: 1:0 : does not exist [ 137.361879][ T5] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 137.374391][ T5] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 137.386275][ T5] usb 3-1: USB disconnect, device number 42 [ 137.433852][ T347] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 137.528176][ T5784] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 137.592509][ T301] usb 5-1: MIDIStreaming interface descriptor not found [ 137.601516][ T301] usb 5-1: USB disconnect, device number 43 [ 137.829718][ T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.883794][ T5797] EXT4-fs error (device loop0): ext4_quota_enable:6447: comm syz.0.2456: Bad quota inum: 9, type: 2 [ 137.896358][ T5797] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 137.911706][ T5797] EXT4-fs (loop0): mount failed [ 137.918627][ T347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.963103][ T347] usb 4-1: not running at top speed; connect to a high speed hub [ 138.052412][ T347] usb 4-1: config 5 has an invalid interface number: 184 but max is 0 [ 138.060663][ T347] usb 4-1: config 5 has no interface number 0 [ 138.069980][ T5809] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300) [ 138.088533][ T347] usb 4-1: config 5 interface 184 has no altsetting 0 [ 138.175156][ T301] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 138.186946][ T5824] binder: Bad value for 'rootcontext' [ 138.264512][ T347] usb 4-1: New USB device found, idVendor=067b, idProduct=0609, bcdDevice=ca.75 [ 138.273578][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.281984][ T347] usb 4-1: Product: syz [ 138.285140][ T5842] EXT4-fs (loop0): Unsupported encryption level 190 [ 138.297900][ T347] usb 4-1: Manufacturer: syz [ 138.302713][ T347] usb 4-1: SerialNumber: syz [ 138.454150][ T301] usb 2-1: Using ep0 maxpacket: 8 [ 138.521146][ T2761] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 138.677639][ T347] pl2303 4-1:5.184: required endpoints missing [ 138.684602][ T347] usb 4-1: USB disconnect, device number 44 [ 138.688552][ T25] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 138.766724][ T301] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 138.775791][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.783796][ T301] usb 2-1: Product: syz [ 138.787968][ T301] usb 2-1: Manufacturer: syz [ 138.793656][ T301] usb 2-1: SerialNumber: syz [ 138.800154][ T914] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 138.977427][ T2761] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.065761][ T914] usb 5-1: Using ep0 maxpacket: 8 [ 139.076950][ T2761] usb 3-1: config 254 has an invalid interface number: 217 but max is 0 [ 139.085418][ T2761] usb 3-1: config 254 has no interface number 0 [ 139.091707][ T2761] usb 3-1: config 254 interface 217 has no altsetting 0 [ 139.143031][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.143083][ T2761] usb 3-1: language id specifier not provided by device, defaulting to English [ 139.187348][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 139.198270][ T914] usb 5-1: config 3 has an invalid interface number: 45 but max is 0 [ 139.206426][ T914] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 139.215307][ T301] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 139.222028][ T914] usb 5-1: config 3 has no interface number 0 [ 139.228117][ T914] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.241112][ T914] usb 5-1: config 3 interface 45 has no altsetting 0 [ 139.257069][ T301] usb 2-1: USB disconnect, device number 44 [ 139.308849][ T2761] usb 3-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 1.00 [ 139.318112][ T2761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.326262][ T2761] usb 3-1: Product: syz [ 139.330480][ T2761] usb 3-1: SerialNumber: syz [ 139.419039][ T914] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 139.428143][ T914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.436356][ T284] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 139.443970][ T914] usb 5-1: Product: syz [ 139.448105][ T914] usb 5-1: Manufacturer: syz [ 139.452766][ T25] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 139.461782][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.469813][ T914] usb 5-1: SerialNumber: syz [ 139.474648][ T25] usb 1-1: Product: syz [ 139.478796][ T25] usb 1-1: Manufacturer: syz [ 139.483364][ T25] usb 1-1: SerialNumber: syz [ 139.706372][ T2761] usb-storage 3-1:254.217: USB Mass Storage device detected [ 139.714314][ T2761] usb-storage 3-1:254.217: Quirks match for vid 071b pid 3203: 400 [ 139.740785][ T2761] usb 3-1: USB disconnect, device number 43 [ 139.860716][ T284] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 139.868996][ T284] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.879142][ T284] usb 4-1: config 0 has no interface number 0 [ 139.927828][ T914] usb 5-1: USB disconnect, device number 44 [ 139.948921][ T302] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 140.014864][ T25] usb 1-1: MIDIStreaming interface descriptor not found [ 140.025834][ T25] usb 1-1: USB disconnect, device number 45 [ 140.058664][ T284] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 140.067709][ T284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.076061][ T284] usb 4-1: Product: syz [ 140.080216][ T284] usb 4-1: Manufacturer: syz [ 140.084821][ T284] usb 4-1: SerialNumber: syz [ 140.089973][ T284] usb 4-1: config 0 descriptor?? [ 140.135650][ T284] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 140.142080][ T284] uvcvideo: No valid video chain found. [ 140.233789][ T302] usb 2-1: Using ep0 maxpacket: 32 [ 140.361903][ T2761] usb 4-1: USB disconnect, device number 45 [ 140.409043][ T302] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.507726][ T302] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 140.518938][ T347] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 140.693954][ T302] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.704036][ T302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.711291][ T5911] F2FS-fs (loop4): invalid crc value [ 140.712286][ T302] usb 2-1: Product: syz [ 140.721932][ T5919] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 140.731672][ T302] usb 2-1: Manufacturer: syz [ 140.736401][ T5919] F2FS-fs (loop0): invalid crc value [ 140.742021][ T302] usb 2-1: SerialNumber: syz [ 140.744039][ T5919] F2FS-fs (loop0): invalid crc value [ 140.748788][ T5911] F2FS-fs (loop4): invalid journal entries nats 0 sits 65286 [ 140.751957][ T5919] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 140.759634][ T5911] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-22) [ 140.912832][ T347] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 4 [ 141.032912][ T5932] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 141.043726][ T5939] binder: Unknown parameter 'context' [ 141.095501][ T5946] futex_wake_op: syz.4.2526 tries to shift op by -1; fix this program [ 141.109592][ T347] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 141.119057][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.127395][ T347] usb 3-1: Product: syz [ 141.131743][ T302] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 141.140165][ T302] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 141.146607][ T347] usb 3-1: Manufacturer: syz [ 141.151271][ T347] usb 3-1: SerialNumber: syz [ 141.174893][ T302] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 141.200368][ T302] usb 2-1: USB disconnect, device number 45 [ 141.209064][ T5957] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 141.219048][ T5957] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 141.227227][ T5957] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (2000000) [ 141.237565][ T5957] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 141.246415][ T5957] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,noinit_itable,nodiscard,noquota,,errors=continue [ 141.392534][ T5] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 141.400306][ T2761] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 141.425548][ T821] udevd[821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.448181][ T5989] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #2: block 3: comm syz.4.2545: lblock 0 mapped to illegal pblock 3 (length 1) [ 141.462316][ T5989] EXT4-fs (loop4): Remounting filesystem read-only [ 141.468885][ T5989] EXT4-fs warning (device loop4): dx_probe:796: inode #2: lblock 0: comm syz.4.2545: error -117 reading directory block [ 141.481762][ T5989] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 141.489941][ T5989] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,nouid32,grpquota,min_batch_time=0x000000000000895c,norecovery,grpjquota=.quota,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 141.544926][ T347] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 141.566655][ T347] usb 3-1: unit 255 not found! [ 141.571454][ T347] usb 3-1: unit 5 not found! [ 141.579746][ T347] usb 3-1: USB disconnect, device number 44 [ 141.725600][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 141.725611][ T24] audit: type=1400 audit(1785859878.607:210): avc: denied { read } for pid=6024 comm="syz.4.2562" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.754516][ T2761] usb 1-1: not running at top speed; connect to a high speed hub [ 141.762630][ T24] audit: type=1400 audit(1785859878.607:211): avc: denied { open } for pid=6024 comm="syz.4.2562" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.808601][ T6037] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 141.849679][ T2761] usb 1-1: config 10 has an invalid interface number: 8 but max is 0 [ 141.857926][ T2761] usb 1-1: config 10 has no interface number 0 [ 141.864347][ T2761] usb 1-1: config 10 interface 8 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 141.875322][ T2761] usb 1-1: config 10 interface 8 has no altsetting 0 [ 141.892409][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.902510][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.906426][ T6047] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 141.921025][ T25] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 141.921453][ T6047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 141.936958][ T6047] System zones: 1-12 [ 141.941109][ T6047] EXT4-fs (loop4): orphan cleanup on readonly fs [ 141.947871][ T6047] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #11: comm syz.4.2573: attempt to clear invalid blocks 1024 len 1 [ 141.961255][ T6047] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2573: bg 0: block 361: padding at end of block bitmap is not set [ 141.975775][ T6047] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 141.989228][ T6047] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.2573: invalid indirect mapped block 1811939328 (level 0) [ 142.006099][ T6047] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.2573: invalid indirect mapped block 2 (level 2) [ 142.022053][ T6047] EXT4-fs (loop4): 1 truncate cleaned up [ 142.028106][ T6047] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue [ 142.074210][ T2761] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 142.083327][ T2761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.091495][ T2761] usb 1-1: Product: syz [ 142.095921][ T2761] usb 1-1: Manufacturer: syz [ 142.110820][ T2761] usb 1-1: SerialNumber: syz [ 142.159666][ T5] usb 4-1: string descriptor 0 read error: -22 [ 142.165911][ T5] usb 4-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 142.175038][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.191742][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 142.214281][ T6078] FAT-fs (loop2): bogus number of FAT sectors [ 142.220396][ T6078] FAT-fs (loop2): Can't find a valid FAT filesystem [ 142.224500][ T5] usb 4-1: 0:1 : does not exist [ 142.231901][ T5] usb 4-1: unit 5 not found! [ 142.236545][ T5] usb 4-1: unit 34 not found! [ 142.241236][ T5] usb 4-1: unit 9 not found! [ 142.330815][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.343679][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 142.352947][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.361675][ T25] usb 2-1: config 0 descriptor?? [ 142.411685][ T24] audit: type=1400 audit(1785859879.253:212): avc: denied { read write } for pid=6090 comm="syz.4.2593" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.436748][ T24] audit: type=1400 audit(1785859879.253:213): avc: denied { open } for pid=6090 comm="syz.4.2593" path="/dev/input/event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.465008][ T2761] usb 1-1: USB disconnect, device number 46 [ 142.465027][ T284] usb 4-1: USB disconnect, device number 46 [ 142.503176][ T6093] FAT-fs (loop4): count of clusters too big (525310) [ 142.510020][ T6093] FAT-fs (loop4): Can't find a valid FAT filesystem [ 142.672898][ T5] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 142.747633][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 142.753584][ T25] usbhid: probe of 2-1:0.0 failed with error -71 [ 142.760883][ T25] usb 2-1: USB disconnect, device number 46 [ 142.929397][ T347] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 142.953349][ T6110] syz.0.2602[6110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.984267][ T6112] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 143.005586][ T6112] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 143.015721][ T6112] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 143.025883][ T6112] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 143.037938][ T6112] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 143.049584][ T6112] EXT4-fs (loop0): failed to initialize system zone (-117) [ 143.057084][ T6112] EXT4-fs (loop0): mount failed [ 143.079180][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.089116][ T5] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.134686][ T6126] cgroup: No subsys list or none specified [ 143.203292][ T24] audit: type=1400 audit(1785859879.991:214): avc: denied { map } for pid=6141 comm="syz.1.2617" path="pipe:[1518]" dev="pipefs" ino=1518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.226228][ T24] audit: type=1400 audit(1785859879.991:215): avc: denied { execute } for pid=6141 comm="syz.1.2617" path="pipe:[1518]" dev="pipefs" ino=1518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.272158][ T5] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 143.281256][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.289644][ T5] usb 3-1: Product: syz [ 143.300273][ T5] usb 3-1: Manufacturer: syz [ 143.307121][ T5] usb 3-1: SerialNumber: syz [ 143.335657][ T25] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 143.346761][ T5] ums-karma 3-1:1.0: USB Mass Storage device detected [ 143.357027][ T347] usb 5-1: config index 0 descriptor too short (expected 45, got 28) [ 143.365745][ T347] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 143.373469][ T5] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 143.373469][ T5] Please send a copy of this message to and [ 143.410369][ T347] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.443099][ T5] ums-karma: probe of 3-1:1.0 failed with error -5 [ 143.459862][ T6159] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 143.489302][ T6159] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 143.499334][ T6159] F2FS-fs (loop0): invalid crc value [ 143.504799][ T6159] F2FS-fs (loop0): invalid crc value [ 143.510176][ T6159] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 143.565778][ T5] usb 3-1: USB disconnect, device number 45 [ 143.592210][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 143.624717][ T347] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 143.636419][ T6156] F2FS-fs (loop1): invalid crc value [ 143.641799][ T6156] F2FS-fs (loop1): Wrong cp_pack_start_sum: 1 [ 143.648267][ T6156] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 143.655904][ T347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.669893][ T347] usb 5-1: Product: syz [ 143.674421][ T347] usb 5-1: Manufacturer: syz [ 143.679091][ T347] usb 5-1: SerialNumber: syz [ 143.724029][ T347] rtl8150 5-1:1.0: couldn't find required endpoints [ 143.736935][ T347] rtl8150: probe of 5-1:1.0 failed with error -5 [ 143.870602][ T6167] erofs: (device loop1): mounted with root inode @ nid 36. [ 143.872441][ T6170] erofs: (device loop0): mounted with root inode @ nid 36. [ 143.891565][ T25] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 143.902045][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.910102][ T25] usb 4-1: Product: syz [ 143.914302][ T25] usb 4-1: Manufacturer: syz [ 143.918927][ T25] usb 4-1: SerialNumber: syz [ 143.924440][ T25] usb 4-1: config 0 descriptor?? [ 143.936270][ T5] usb 5-1: USB disconnect, device number 45 [ 143.966934][ T25] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 144.180315][ T347] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 144.188144][ T25] usb 4-1: USB disconnect, device number 47 [ 144.191463][ T6183] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.265693][ T2146] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 144.300563][ T6188] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.313411][ T6188] EXT4-fs warning (device loop2): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.324911][ T6188] EXT4-fs warning (device loop2): dx_probe:848: Enable large directory feature to access it [ 144.335038][ T6188] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.2635: Corrupt directory, running e2fsck is recommended [ 144.348382][ T6188] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 144.357094][ T6188] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.2635: corrupted in-inode xattr [ 144.369350][ T6188] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2635: couldn't read orphan inode 15 (err -117) [ 144.381390][ T6188] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.journal_dev=0x00000000000001ff,barrier=0x0000000000000008,jqfmt=vfsv1,dioread_nolock,,,errors=continue [ 144.523283][ T6192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 144.607835][ T347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.621808][ T6201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 144.650590][ T347] usb 2-1: not running at top speed; connect to a high speed hub [ 144.672015][ T2146] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.682303][ T2146] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.736195][ T347] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.746466][ T347] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.760525][ T6209] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 144.799451][ T6212] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 144.808513][ T25] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 144.864451][ T2146] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.873512][ T2146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.881535][ T2146] usb 1-1: Product: syz [ 144.885736][ T2146] usb 1-1: Manufacturer: syz [ 144.890426][ T2146] usb 1-1: SerialNumber: syz [ 144.916035][ T6218] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.928639][ T347] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 144.937901][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.946700][ T347] usb 2-1: Product: syz [ 144.951105][ T347] usb 2-1: Manufacturer: syz [ 144.971268][ T347] usb 2-1: SerialNumber: syz [ 145.078200][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 145.145730][ T6226] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 145.154934][ T6226] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.195856][ T284] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 145.217277][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.227530][ T25] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 145.237281][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.247151][ T2146] usb 1-1: 0:2 : does not exist [ 145.252198][ T2146] usb 1-1: unit 9 not found! [ 145.420418][ T25] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 145.429470][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.445510][ T25] usb 5-1: Product: syz [ 145.449696][ T25] usb 5-1: Manufacturer: syz [ 145.454760][ T25] usb 5-1: SerialNumber: syz [ 145.463099][ T2146] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 145.471153][ T284] usb 4-1: Using ep0 maxpacket: 8 [ 145.479678][ T2146] usb 1-1: USB disconnect, device number 47 [ 145.570022][ T347] usb 2-1: Unsupported UAC3 BADD profile [ 145.580238][ T347] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 145.587864][ T347] usb 2-1: USB disconnect, device number 47 [ 145.602078][ T284] usb 4-1: config index 0 descriptor too short (expected 2075, got 27) [ 145.610394][ T284] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 145.618944][ T284] usb 4-1: config 0 has no interface number 0 [ 145.625083][ T284] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 145.634953][ T284] usb 4-1: config 0 interface 200 has no altsetting 0 [ 145.794529][ T25] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 145.803937][ T25] usb 5-1: clock source 0 is not valid, cannot use [ 145.810588][ T301] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 145.818228][ T284] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 145.828599][ T284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.836595][ T284] usb 4-1: Product: syz [ 145.858593][ T284] usb 4-1: Manufacturer: syz [ 145.863197][ T284] usb 4-1: SerialNumber: syz [ 145.868388][ T284] usb 4-1: config 0 descriptor?? [ 145.873485][ T25] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 145.879824][ T25] usb 5-1: 1:1: freq mismatch (RO clock): req 48000, clock runs @0 [ 145.922812][ T25] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 145.931425][ T25] usb 5-1: clock source 0 is not valid, cannot use [ 145.976219][ T25] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 145.982570][ T25] usb 5-1: 1:1: freq mismatch (RO clock): req 48000, clock runs @0 [ 146.019583][ T25] usb 5-1: USB disconnect, device number 46 [ 146.205364][ T6248] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.212329][ T284] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input9 [ 146.247366][ T284] usb 4-1: USB disconnect, device number 48 [ 146.257009][ T6248] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.264976][ T301] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.339727][ T301] usb 3-1: not running at top speed; connect to a high speed hub [ 146.425327][ T301] usb 3-1: config 74 has an invalid interface number: 65 but max is 0 [ 146.446646][ T301] usb 3-1: config 74 has no interface number 0 [ 146.452839][ T301] usb 3-1: config 74 interface 65 has no altsetting 0 [ 146.521482][ T301] usb 3-1: language id specifier not provided by device, defaulting to English [ 146.649824][ T301] usb 3-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=6b.0d [ 146.681783][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.693945][ T301] usb 3-1: Product: syz [ 146.699341][ T301] usb 3-1: Manufacturer: 熅䄠摘뱋蔥ី嗘ஃ⯡▄꺝墹欰ዖ䴛⚆᝽⨌酕ﾴᗍ䯽渡ѷ⌃兕聆繼铁沿ⵤㄭȠ杤䶷ꭼ㦕睰６뷆駆ᒜ쿑紬 [ 146.767296][ T301] usb 3-1: SerialNumber: syz [ 146.941462][ T6260] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 146.950369][ T6260] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 146.957703][ T6253] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.957933][ T6260] F2FS-fs (loop4): QUOTA feature is enabled, so ignore jquota_fmt [ 146.973035][ T6260] F2FS-fs (loop4): invalid crc value [ 146.979191][ T6260] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.002999][ T6253] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 147.013910][ T6260] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 147.023017][ T6260] F2FS-fs (loop4): Failed to read root inode [ 147.152340][ T301] uvcvideo: Found UVC 0.00 device syz (046d:089b) [ 147.158774][ T301] uvcvideo: No valid video chain found. [ 147.176477][ T301] usb 3-1: USB disconnect, device number 46 [ 147.496370][ T6290] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 147.537035][ T284] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 147.549028][ T6293] loop0: p1 p2 p3 [ 147.553240][ T24] audit: type=1400 audit(1785859884.060:216): avc: denied { write } for pid=6289 comm="syz.1.2668" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.578892][ T24] audit: type=1400 audit(1785859884.060:217): avc: denied { open } for pid=6289 comm="syz.1.2668" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.686711][ T302] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 147.705858][ T360] udevd[360]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 147.706057][ T821] udevd[821]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 147.716874][ T819] udevd[819]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 147.743515][ T24] audit: type=1400 audit(1785859884.229:218): avc: denied { create } for pid=6300 comm="syz.0.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.793646][ T24] audit: type=1400 audit(1785859884.276:219): avc: denied { execute } for pid=6310 comm="syz.0.2675" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 147.825710][ T284] usb 5-1: Using ep0 maxpacket: 8 [ 147.834328][ T24] audit: type=1400 audit(1785859884.285:220): avc: denied { connect } for pid=6312 comm="syz.0.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.890040][ T6330] device veth3 entered promiscuous mode [ 147.954068][ T284] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 147.962504][ T284] usb 5-1: config 0 has no interface number 0 [ 147.968793][ T284] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 147.975311][ T302] usb 4-1: Using ep0 maxpacket: 16 [ 147.978071][ T284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.991638][ T284] usb 5-1: config 0 descriptor?? [ 147.996708][ T25] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 148.079322][ T6339] FAT-fs (loop0): Directory bread(block 64) failed [ 148.086003][ T6339] FAT-fs (loop0): Directory bread(block 65) failed [ 148.092580][ T6339] FAT-fs (loop0): Directory bread(block 66) failed [ 148.099367][ T6339] FAT-fs (loop0): Directory bread(block 67) failed [ 148.105967][ T6339] FAT-fs (loop0): Directory bread(block 68) failed [ 148.112542][ T6339] FAT-fs (loop0): Directory bread(block 69) failed [ 148.119245][ T6339] FAT-fs (loop0): Directory bread(block 70) failed [ 148.125877][ T6339] FAT-fs (loop0): Directory bread(block 71) failed [ 148.132481][ T6339] FAT-fs (loop0): Directory bread(block 72) failed [ 148.139081][ T6339] FAT-fs (loop0): Directory bread(block 73) failed [ 148.245914][ T284] usb 5-1: USB disconnect, device number 47 [ 148.253299][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 148.328236][ T302] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40 [ 148.337460][ T302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.345708][ T302] usb 4-1: Product: syz [ 148.350085][ T302] usb 4-1: Manufacturer: syz [ 148.354745][ T302] usb 4-1: SerialNumber: syz [ 148.381337][ T24] audit: type=1400 audit(1785859884.827:221): avc: denied { getopt } for pid=6349 comm="syz.0.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.424399][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.438846][ T6354] EXT4-fs warning (device loop0): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 148.450425][ T6354] EXT4-fs warning (device loop0): dx_probe:848: Enable large directory feature to access it [ 148.460553][ T6354] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.2695: Corrupt directory, running e2fsck is recommended [ 148.473695][ T6354] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 148.482111][ T6354] EXT4-fs error (device loop0): ext4_iget_extra_inode:4692: inode #15: comm syz.0.2695: corrupted in-inode xattr [ 148.494296][ T6354] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2695: couldn't read orphan inode 15 (err -117) [ 148.506444][ T6354] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.sb=0x0000000000000001,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv1,grpid,,,errors=continue [ 148.642317][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 148.651406][ T6374] netlink: 'syz.0.2704': attribute type 2 has an invalid length. [ 148.659115][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 148.681013][ T25] usb 3-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 148.691313][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.699739][ T25] usb 3-1: Product: syz [ 148.704052][ T25] usb 3-1: Manufacturer: syz [ 148.708664][ T25] usb 3-1: SerialNumber: syz [ 148.748525][ T6388] netlink: 'syz.0.2711': attribute type 13 has an invalid length. [ 148.761120][ T6388] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2711'. [ 148.785293][ T6396] netlink: 'syz.1.2716': attribute type 4 has an invalid length. [ 148.793078][ T6396] netlink: 'syz.1.2716': attribute type 6 has an invalid length. [ 148.800909][ T6396] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.818527][ T6400] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 148.832754][ T302] usb 4-1: USB disconnect, device number 49 [ 148.861834][ T6406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.879686][ T6408] netlink: 'syz.1.2721': attribute type 3 has an invalid length. [ 148.893580][ T6412] netlink: 'syz.0.2723': attribute type 16 has an invalid length. [ 148.902103][ T6412] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2723'. [ 149.078292][ T360] udevd[360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.131860][ T25] usb 3-1: USB disconnect, device number 47 [ 149.148609][ T6449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.273758][ T24] audit: type=1400 audit(1785859885.669:222): avc: denied { setopt } for pid=6477 comm="syz.0.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.376622][ T303] udevd[303]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.405308][ T24] audit: type=1400 audit(1785859885.791:223): avc: denied { write } for pid=6504 comm="syz.0.2769" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.466335][ T24] audit: type=1400 audit(1785859885.847:224): avc: denied { create } for pid=6507 comm="syz.1.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.527097][ T24] audit: type=1400 audit(1785859885.847:225): avc: denied { write } for pid=6507 comm="syz.1.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.585084][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2784'. [ 149.619550][ T6544] syz.3.2788 (6544): /proc/6543/oom_adj is deprecated, please use /proc/6543/oom_score_adj instead. [ 149.648974][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2791'. [ 149.730365][ T6568] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.784646][ T6568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.791897][ T6568] IPv6: NLM_F_CREATE should be set when creating new route [ 149.811553][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.850546][ T6594] 8021q: VLANs not supported on lo [ 149.914425][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'. [ 149.939419][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 149.977100][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 150.059620][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2838'. [ 150.085629][ T6653] netlink: 'syz.2.2845': attribute type 3 has an invalid length. [ 150.112994][ T6653] netlink: 'syz.2.2845': attribute type 3 has an invalid length. [ 150.241577][ T6692] netlink: 'syz.2.2862': attribute type 12 has an invalid length. [ 150.336511][ T6718] xt_limit: Overflow, try lower: 1/0 [ 150.375459][ T6725] netlink: 'syz.4.2881': attribute type 3 has an invalid length. [ 150.570837][ T6757] EXT4-fs (loop1): 1 truncate cleaned up [ 150.577729][ T6757] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,sysvgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nodiscard, [ 150.598576][ T25] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 150.874297][ T6819] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 150.938904][ T6835] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 150.948979][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 151.027832][ T6840] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.043660][ T25] usb 1-1: config 8 has an invalid interface number: 247 but max is 0 [ 151.058045][ T6840] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 151.058338][ T25] usb 1-1: config 8 has no interface number 0 [ 151.073214][ T25] usb 1-1: config 8 interface 247 altsetting 54 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 151.084667][ T25] usb 1-1: config 8 interface 247 altsetting 54 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 151.096015][ T25] usb 1-1: config 8 interface 247 altsetting 54 has an invalid endpoint descriptor of length 2, skipping [ 151.107413][ T25] usb 1-1: config 8 interface 247 altsetting 54 has an invalid endpoint with address 0x80, skipping [ 151.118428][ T25] usb 1-1: config 8 interface 247 altsetting 54 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.129228][ T25] usb 1-1: config 8 interface 247 altsetting 54 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 151.150121][ T25] usb 1-1: config 8 interface 247 has no altsetting 0 [ 151.162219][ T347] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 151.322101][ T25] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 6.6d [ 151.348290][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.364987][ T25] usb 1-1: Product: syz [ 151.372289][ T25] usb 1-1: Manufacturer: syz [ 151.384996][ T25] usb 1-1: SerialNumber: syz [ 151.421482][ T6711] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.567421][ T347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.588315][ T347] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.604372][ T347] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 151.654407][ T6897] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 151.663883][ T6897] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.695680][ T6897] F2FS-fs (loop2): invalid crc value [ 151.749923][ T6897] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 151.764518][ T25] usb 1-1: USB disconnect, device number 48 [ 151.787716][ T6897] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 151.794427][ T6897] F2FS-fs (loop2): Start checkpoint disabled! [ 151.803066][ T347] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 151.807132][ T6897] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.812114][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.819162][ T6897] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 151.877573][ T347] usb 4-1: Product: syz [ 151.881754][ T347] usb 4-1: Manufacturer: syz [ 151.888234][ T347] usb 4-1: SerialNumber: syz [ 151.896827][ T6897] F2FS-fs (loop2): switch extent_cache option is not allowed [ 152.283061][ T7017] device vlan0 entered promiscuous mode [ 152.294519][ T347] usb 4-1: Can't get UAC3 power state for id 10 [ 152.315244][ T7021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.349956][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.357171][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.390682][ T347] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 152.400971][ T347] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 152.428178][ T347] usb 4-1: USB disconnect, device number 50 [ 152.774967][ T7133] device vlan0 entered promiscuous mode [ 152.848451][ T7158] xt_NFQUEUE: number of total queues is 0 [ 152.906427][ T24] kauditd_printk_skb: 129 callbacks suppressed [ 152.906447][ T24] audit: type=1400 audit(1785859889.065:356): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 152.927138][ T7184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.943360][ T24] audit: type=1400 audit(1785859889.065:357): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 152.944009][ T7184] IPv6: NLM_F_CREATE should be set when creating new route [ 152.975185][ T7184] IPv6: NLM_F_CREATE should be set when creating new route [ 152.978966][ T24] audit: type=1400 audit(1785859889.065:358): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.029860][ T24] audit: type=1400 audit(1785859889.065:355): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.062679][ T7205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.069737][ T24] audit: type=1400 audit(1785859889.102:359): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.101661][ T24] audit: type=1400 audit(1785859889.140:360): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.130575][ T24] audit: type=1400 audit(1785859889.168:361): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.154599][ T24] audit: type=1400 audit(1785859889.168:362): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.211150][ T24] audit: type=1400 audit(1785859889.168:363): avc: denied { read write } for pid=7194 comm="syz.2.3105" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 153.228797][ T7241] IPv6: Can't replace route, no match found [ 153.236660][ T24] audit: type=1400 audit(1785859889.177:364): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.348863][ T7275] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 153.473870][ T7316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7316 comm=syz.4.3165 [ 153.530342][ T7331] x_tables: duplicate underflow at hook 4 [ 153.566944][ T7339] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 153.763972][ T7408] ip6gretap0: refused to change device tx_queue_len [ 153.832139][ T7432] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 154.025168][ T7503] xt_l2tp: unknown flags: 17 [ 154.113988][ T7537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.153704][ T7551] __nla_validate_parse: 128 callbacks suppressed [ 154.153714][ T7551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3282'. [ 154.176581][ T7556] xt_CONNSECMARK: invalid mode: 0 [ 154.318498][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3311'. [ 154.358821][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3318'. [ 154.429219][ T7645] ipt_REJECT: ECHOREPLY no longer supported. [ 154.517529][ T7680] validate_nla: 5 callbacks suppressed [ 154.517538][ T7680] netlink: 'syz.0.3346': attribute type 4 has an invalid length. [ 154.530854][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3346'. [ 154.570468][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3354'. [ 154.591015][ T7693] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 154.616992][ T7706] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3359'. [ 154.749689][ T7746] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3379'. [ 154.796378][ T7752] kernel profiling enabled (shift: 63) [ 154.808873][ T7752] profiling shift: 63 too large [ 154.832164][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 154.845677][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3384'. [ 154.950930][ T7777] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.972656][ T7777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.979933][ T7777] IPv6: NLM_F_CREATE should be set when creating new route [ 154.987186][ T7777] IPv6: NLM_F_CREATE should be set when creating new route [ 155.040601][ T7787] netlink: 'syz.0.3399': attribute type 3 has an invalid length. [ 155.094378][ T7797] netlink: 'syz.0.3404': attribute type 3 has an invalid length. [ 155.218639][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3417'. [ 155.245872][ T7828] netlink: 'syz.1.3419': attribute type 11 has an invalid length. [ 155.308159][ T7838] netlink: 'syz.3.3424': attribute type 15 has an invalid length. [ 155.378685][ T7853] netlink: 'syz.1.3432': attribute type 21 has an invalid length. [ 155.404357][ T7859] netlink: 'syz.3.3433': attribute type 13 has an invalid length. [ 155.429745][ T7862] netlink: 'syz.0.3436': attribute type 5 has an invalid length. [ 155.543939][ T7901] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 155.828620][ T8013] syz.3.3511 uses obsolete (PF_INET,SOCK_PACKET) [ 155.859194][ T8023] xt_NFQUEUE: number of total queues is 0 [ 155.886062][ T8033] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.010205][ T8080] xt_policy: output policy not valid in PREROUTING and INPUT [ 156.033602][ T8089] device vlan0 entered promiscuous mode [ 156.361045][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.390577][ T8199] tc_dump_action: action bad kind [ 156.463691][ T8217] netlink: 'syz.0.3613': attribute type 13 has an invalid length. [ 156.531263][ T8236] xt_TCPMSS: Only works on TCP SYN packets [ 156.633695][ T8273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.640972][ T8273] IPv6: NLM_F_CREATE should be set when creating new route [ 156.648200][ T8273] IPv6: NLM_F_CREATE should be set when creating new route [ 156.865966][ T8359] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 156.882914][ T8363] xt_limit: Overflow, try lower: 268435456/13 [ 156.941352][ T8385] device macsec0 entered promiscuous mode [ 156.948103][ T8385] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 157.088731][ T8422] page size migration: [8422 (syz.4.3699)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma [ 157.215102][ T8458] xt_TCPMSS: Only works on TCP SYN packets [ 157.323439][ T8493] x_tables: ip_tables: CONNSECMARK.0 target: invalid size 8 (kernel) != (user) 0 [ 157.354364][ T8502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.462635][ T8538] gretap0: refused to change device tx_queue_len [ 157.487478][ T8538] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 157.692918][ T8616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.876268][ T8673] device sit0 entered promiscuous mode [ 157.953723][ T8703] IPv6: sit1: Disabled Multicast RS [ 158.010493][ T8722] x_tables: unsorted underflow at hook 2 [ 158.260319][ T24] kauditd_printk_skb: 970 callbacks suppressed [ 158.260330][ T24] audit: type=1400 audit(1785859894.079:1335): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.290938][ T24] audit: type=1400 audit(1785859894.079:1336): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.317875][ T24] audit: type=1400 audit(1785859894.107:1337): avc: denied { write } for pid=8809 comm="syz.1.3906" name="arp" dev="proc" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 158.344681][ T24] audit: type=1400 audit(1785859894.107:1338): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.369006][ T24] audit: type=1400 audit(1785859894.116:1339): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.397684][ T24] audit: type=1400 audit(1785859894.125:1340): avc: denied { create } for pid=8814 comm="syz.1.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 158.418552][ T24] audit: type=1400 audit(1785859894.125:1341): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.447747][ T24] audit: type=1400 audit(1785859894.125:1342): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.472038][ T24] audit: type=1400 audit(1785859894.135:1343): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.502430][ T24] audit: type=1400 audit(1785859894.144:1344): avc: denied { read write } for pid=8821 comm="syz.1.3911" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 158.688390][ T8913] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 158.757662][ T8935] xt_CT: No such helper "netbios-ns" [ 158.764564][ T8937] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.141411][ T9031] device ipip0 entered promiscuous mode [ 159.152215][ T9039] ipt_REJECT: TCP_RESET invalid for non-tcp [ 159.393176][ T9106] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 159.488671][ T9123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 159.671116][ T9157] __nla_validate_parse: 135 callbacks suppressed [ 159.671125][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4076'. [ 159.687585][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4076'. [ 159.772104][ T9172] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4084'. [ 159.823746][ T9176] device vlan0 left promiscuous mode [ 159.839951][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.846378][ T9182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4088'. [ 159.850865][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.863970][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.901843][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 159.914488][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.923969][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 159.937203][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.946756][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.955092][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.963475][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.971806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.980092][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.988221][ T9182] validate_nla: 11 callbacks suppressed [ 159.988229][ T9182] netlink: 'syz.4.4088': attribute type 29 has an invalid length. [ 160.020085][ T9182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4088'. [ 160.068463][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4098'. [ 160.104246][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 160.124064][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.139113][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 160.147590][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.161515][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.182982][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.194475][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.203158][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.212741][ T347] ip6_tunnel:  xmit: Local address not yet configured! [ 160.289804][ T9243] xt_bpf: check failed: parse error [ 160.478704][ T9267] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4130'. [ 160.622433][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4154'. [ 160.685190][ T9335] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4164'. [ 160.729157][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4169'. [ 160.769814][ T9353] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 160.804490][ T9361] xt_hashlimit: max too large, truncated to 1048576 [ 160.908823][ T9385] device veth1_macvtap left promiscuous mode [ 160.929474][ T9385] device macsec0 entered promiscuous mode [ 161.110346][ T9423] netlink: 'syz.2.4206': attribute type 12 has an invalid length. [ 161.206220][ T9443] device bridge3 entered promiscuous mode [ 161.328828][ T9477] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.345486][ T9481] netlink: 'syz.4.4236': attribute type 3 has an invalid length. [ 161.547707][ T9512] netlink: 'syz.3.4251': attribute type 3 has an invalid length. [ 161.865870][ T9582] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 161.955904][ T9602] netlink: 'syz.2.4296': attribute type 3 has an invalid length. [ 161.964665][ T9606] xt_ecn: cannot match TCP bits for non-tcp packets [ 162.007178][ T9622] netlink: 'syz.2.4305': attribute type 29 has an invalid length. [ 162.015635][ T9625] xt_bpf: check failed: parse error [ 162.066946][ T9643] Zero length message leads to an empty skb [ 162.227638][ T9702] device vlan0 left promiscuous mode [ 162.234410][ T9702] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 162.251938][ T9710] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 162.295805][ T9722] xt_TCPMSS: Only works on TCP SYN packets [ 162.303705][ T9726] netlink: 'syz.3.4357': attribute type 46 has an invalid length. [ 162.316471][ T9726] netlink: 'syz.3.4357': attribute type 28 has an invalid length. [ 162.338810][ T9734] netlink: 'syz.1.4361': attribute type 5 has an invalid length. [ 162.367430][ T9740] netlink: 'syz.1.4364': attribute type 5 has an invalid length. [ 162.375734][ T9745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.382950][ T9745] IPv6: NLM_F_CREATE should be set when creating new route [ 162.385208][ T9747] x_tables: duplicate underflow at hook 3 [ 162.390179][ T9745] IPv6: NLM_F_CREATE should be set when creating new route [ 162.444396][ T9761] xt_TCPMSS: Only works on TCP SYN packets [ 162.488456][ T9778] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 162.900155][ T9914] IPv6: Can't replace route, no match found [ 163.091595][ T9960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 163.102634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 163.119195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.141366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 163.159873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.181982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.201694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.219330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.235685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.253345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.458971][T10051] kernel profiling enabled (shift: 5) [ 163.616972][ T24] kauditd_printk_skb: 763 callbacks suppressed [ 163.616982][ T24] audit: type=1400 audit(1785859899.092:2108): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.655318][ T24] audit: type=1400 audit(1785859899.092:2109): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.681450][ T24] audit: type=1400 audit(1785859899.092:2110): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.708484][ T24] audit: type=1400 audit(1785859899.092:2111): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.710513][ T24] audit: type=1400 audit(1785859899.120:2112): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.711533][ T24] audit: type=1400 audit(1785859899.120:2113): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.711549][ T24] audit: type=1400 audit(1785859899.120:2114): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.711563][ T24] audit: type=1400 audit(1785859899.120:2115): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.711577][ T24] audit: type=1400 audit(1785859899.148:2116): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.711592][ T24] audit: type=1400 audit(1785859899.148:2117): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.820078][T10133] xt_ecn: cannot match TCP bits for non-tcp packets [ 164.082071][T10170] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.139392][T10181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.174474][T10185] ip6t_rpfilter: unknown options [ 164.534474][T10252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.718585][T10303] device batadv_slave_0 entered promiscuous mode [ 164.909265][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 165.189174][T10448] device bridge4 entered promiscuous mode [ 165.246649][T10466] __nla_validate_parse: 28 callbacks suppressed [ 165.246658][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4719'. [ 165.325135][T10492] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 165.415746][T10526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4750'. [ 165.425249][T10524] x_tables: duplicate underflow at hook 4 [ 165.501742][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4765'. [ 165.516457][T10557] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 165.612423][T10593] xt_TCPMSS: Only works on TCP SYN packets [ 165.673559][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4797'. [ 165.699586][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4802'. [ 165.720416][T10630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4803'. [ 165.786346][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.793527][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.902816][T10685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.913407][T10687] x_tables: duplicate underflow at hook 2 [ 165.989752][T10713] xt_l2tp: missing protocol rule (udp|l2tpip) [ 165.998076][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4845'. [ 166.114156][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4862'. [ 166.287193][T10810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.503371][T10890] device vlan0 entered promiscuous mode [ 166.602646][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4950'. [ 166.642617][T10936] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4955'. [ 166.668298][T10948] PM: Enabling pm_trace changes system date and time during resume. [ 166.668298][T10948] PM: Correct system time has to be restored manually after resume. [ 166.764365][T10979] IPv6: Can't replace route, no match found [ 166.804971][T10994] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.882037][T11021] validate_nla: 4 callbacks suppressed [ 166.882047][T11021] netlink: 'syz.3.4997': attribute type 13 has an invalid length. [ 166.986796][T11063] xt_hashlimit: max too large, truncated to 1048576 [ 167.001474][T11067] IPv6: sit2: Disabled Multicast RS [ 167.108618][T11105] mmap: syz.0.5038 (11105): VmData 29081600 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 167.283810][T11174] device ipip0 entered promiscuous mode [ 167.324813][T11188] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 167.335409][T11190] netlink: 'syz.0.5079': attribute type 12 has an invalid length. [ 167.363400][T11192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 167.478435][T11233] netlink: 'syz.1.5103': attribute type 7 has an invalid length. [ 167.489687][T11233] netlink: 'syz.1.5103': attribute type 8 has an invalid length. [ 167.579096][T11269] xt_TPROXY: Can be used only with -p tcp or -p udp [ 167.639444][T11292] xt_TCPMSS: Only works on TCP SYN packets [ 167.764386][T11339] netlink: 'syz.1.5152': attribute type 11 has an invalid length. [ 167.881568][T11376] device tunl0 entered promiscuous mode [ 167.900038][T11376] netlink: 'syz.4.5172': attribute type 4 has an invalid length. [ 167.919857][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.938776][T11385] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 167.992015][T11409] netlink: 'syz.3.5189': attribute type 6 has an invalid length. [ 168.009259][T11413] device sit0 left promiscuous mode [ 168.029888][T11413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 168.039684][T11413] device bridge4 left promiscuous mode [ 168.046265][T11410] device veth0_to_bond entered promiscuous mode [ 168.093143][T11425] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 168.182613][T11443] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 168.512832][T11557] device bridge5 entered promiscuous mode [ 168.608629][T11591] xt_TCPMSS: Only works on TCP SYN packets [ 168.809356][T11661] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 168.840172][T11671] xt_policy: too many policy elements [ 168.876341][T11684] device batadv_slave_0 left promiscuous mode [ 168.882561][T11684] device macsec0 left promiscuous mode [ 168.894954][T11684] device bridge5 left promiscuous mode [ 168.925423][T11698] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.928264][T11696] ip_tables: iptables: counters copy to user failed while replacing table [ 168.976940][ T24] kauditd_printk_skb: 955 callbacks suppressed [ 168.976952][ T24] audit: type=1400 audit(1785859904.097:3073): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.022043][ T24] audit: type=1400 audit(1785859904.097:3074): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.046807][ T24] audit: type=1400 audit(1785859904.115:3075): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.077700][T11725] device bridge3 entered promiscuous mode [ 169.093880][ T24] audit: type=1400 audit(1785859904.125:3076): avc: denied { module_request } for pid=11716 comm="syz.4.5339" kmod=6E65746465762D96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 169.130180][T11738] x_tables: duplicate entry at hook 3 [ 169.147068][ T24] audit: type=1400 audit(1785859904.125:3077): avc: denied { sys_module } for pid=11716 comm="syz.4.5339" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 169.178087][ T24] audit: type=1400 audit(1785859904.134:3078): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.207649][ T24] audit: type=1400 audit(1785859904.134:3079): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.266069][ T24] audit: type=1400 audit(1785859904.172:3080): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.322545][ T24] audit: type=1400 audit(1785859904.190:3081): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.365772][ T24] audit: type=1400 audit(1785859904.200:3083): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.411212][T11799] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 169.524846][T11835] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.629141][T11868] device bridge4 entered promiscuous mode [ 169.807361][T11932] netlink: 'syz.4.5446': attribute type 2 has an invalid length. [ 169.815794][T11936] device syz_tun entered promiscuous mode [ 169.832731][T11936] syz_tun: refused to change device tx_queue_len [ 169.843068][T11936] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 169.859044][T11942] IPv6: Can't replace route, no match found [ 170.031913][T12012] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.135202][T12043] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 170.164149][T12052] xt_l2tp: v2 doesn't support IP mode [ 170.172971][T12056] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 170.202096][T12064] xt_nat: multiple ranges no longer supported [ 170.253170][T12078] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.500304][T12177] device bridge6 entered promiscuous mode [ 170.655897][T12238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.679982][T12246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.687115][T12251] __nla_validate_parse: 276 callbacks suppressed [ 170.687123][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5603'. [ 170.687242][T12246] IPv6: NLM_F_CREATE should be set when creating new route [ 170.709701][T12246] IPv6: NLM_F_CREATE should be set when creating new route [ 170.760253][T12268] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 170.820604][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5623'. [ 170.854203][T12302] IPv6: sit1: Disabled Multicast RS [ 170.885737][T12312] netlink: 620 bytes leftover after parsing attributes in process `syz.1.5636'. [ 170.908876][T12321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5639'. [ 170.922864][T12321] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5639'. [ 170.938159][T12321] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5639'. [ 170.951955][T12325] netlink: 'syz.1.5641': attribute type 2 has an invalid length. [ 171.085650][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5667'. [ 171.140714][T12399] xt_hashlimit: max too large, truncated to 1048576 [ 171.154353][T12403] xt_limit: Overflow, try lower: 2/2147483648 [ 171.321612][T12468] device bridge7 entered promiscuous mode [ 171.640990][T12545] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5750'. [ 171.665439][T12545] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5750'. [ 171.691401][T12549] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.712156][T12549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.719453][T12549] IPv6: NLM_F_CREATE should be set when creating new route [ 171.726677][T12549] IPv6: NLM_F_CREATE should be set when creating new route [ 171.739204][T12555] x_tables: unsorted underflow at hook 3 [ 171.906756][T12581] IPv6: sit1: Disabled Multicast RS [ 171.945036][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5771'. [ 172.539591][T12698] validate_nla: 1 callbacks suppressed [ 172.539600][T12698] netlink: 'syz.0.5825': attribute type 15 has an invalid length. [ 172.572987][T12698] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.762808][T12736] xt_TCPMSS: Only works on TCP SYN packets [ 173.302634][T12851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.552250][T12923] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 173.573488][T12921] device ipip1 entered promiscuous mode [ 173.592744][T12931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.786795][T12971] bridge0: port 3(veth0_to_bridge) entered blocking state [ 173.805145][T12971] bridge0: port 3(veth0_to_bridge) entered disabled state [ 173.823069][T12971] device veth0_to_bridge entered promiscuous mode [ 173.864699][T12981] xt_TCPMSS: Only works on TCP SYN packets [ 174.131412][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 174.248632][T13102] device vti1 entered promiscuous mode [ 174.286152][T13106] netlink: 'syz.4.6026': attribute type 2 has an invalid length. [ 174.295483][ T24] kauditd_printk_skb: 840 callbacks suppressed [ 174.295494][ T24] audit: type=1400 audit(1785860677.111:3923): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.298235][T13106] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 174.309405][ T24] audit: type=1400 audit(1785860677.122:3924): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.370605][ T24] audit: type=1400 audit(1785860677.164:3925): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.424442][T13132] xt_SECMARK: invalid security context 'unconfined' [ 174.431162][ T24] audit: type=1400 audit(1785860677.164:3926): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.479172][ T24] audit: type=1400 audit(1785860677.185:3927): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.511057][ T24] audit: type=1400 audit(1785860677.185:3928): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.575329][ T24] audit: type=1400 audit(1785860677.185:3929): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.608121][T13177] xt_l2tp: wrong L2TP version: 0 [ 174.615651][T13180] device ip6gre1 entered promiscuous mode [ 174.643853][ T24] audit: type=1400 audit(1785860677.216:3930): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.678592][ T24] audit: type=1400 audit(1785860677.216:3931): avc: denied { module_request } for pid=13120 comm="syz.2.6034" kmod="ip6t_SET" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 174.702392][ T24] audit: type=1400 audit(1785860677.216:3932): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 174.750819][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 174.830654][T13244] device bridge_slave_1 left promiscuous mode [ 174.850377][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.859065][T13251] netlink: 'syz.3.6097': attribute type 3 has an invalid length. [ 174.867952][T13244] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 174.894884][T13259] tc_dump_action: action bad kind [ 175.025831][T13303] xt_l2tp: invalid flags combination: 0 [ 175.102998][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 175.135720][T13343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.171639][T13359] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 175.319026][T13413] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 175.370010][T13429] x_tables: duplicate entry at hook 3 [ 175.426594][T13441] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 175.582461][ T25] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 175.716684][T13536] netlink: 'syz.0.6238': attribute type 3 has an invalid length. [ 175.824573][T13578] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.891024][T13602] __nla_validate_parse: 20 callbacks suppressed [ 175.891035][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6272'. [ 176.111647][T13673] x_tables: duplicate underflow at hook 1 [ 176.166236][T13688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6314'. [ 176.372577][T13769] IPv6: A: Disabled Multicast RS [ 176.462191][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6372'. [ 176.502237][T13813] device sit0 entered promiscuous mode [ 176.514468][T13813] netlink: 'syz.3.6379': attribute type 1 has an invalid length. [ 176.526986][T13813] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6379'. [ 176.561352][T13833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6387'. [ 176.579648][ T20] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 176.583842][T13838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13838 comm=syz.1.6390 [ 176.597584][ T20] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 176.642658][T13845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6392'. [ 176.672084][T13852] netlink: 2160 bytes leftover after parsing attributes in process `syz.3.6396'. [ 176.709151][T13852] netlink: 2160 bytes leftover after parsing attributes in process `syz.3.6396'. [ 176.780960][T13892] device vti0 entered promiscuous mode [ 176.798075][T13897] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 177.044655][T13991] xt_SECMARK: invalid security context 'unconfined' [ 177.074406][T13999] device ip6gre1 entered promiscuous mode [ 177.095540][T14006] netlink: 'syz.3.6469': attribute type 2 has an invalid length. [ 177.103634][T14006] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 177.125100][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6475'. [ 177.148726][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6475'. [ 177.255500][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 177.275821][T14059] xt_l2tp: wrong L2TP version: 0 [ 177.337396][T14085] futex_wake_op: syz.2.6511 tries to shift op by 144; fix this program [ 177.352346][ T302] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 177.381845][T14097] device bridge7 entered promiscuous mode [ 177.449089][T14129] device tunl0 left promiscuous mode [ 177.469667][T14129] device veth0_to_bond left promiscuous mode [ 177.481455][T14129] device vlan0 left promiscuous mode [ 177.486828][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 177.497712][T14129] device ipip0 left promiscuous mode [ 177.505488][T14129] device ipip1 left promiscuous mode [ 177.510984][T14129] device vti1 left promiscuous mode [ 177.516765][T14129] device ip6gre1 left promiscuous mode [ 177.523250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.547469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.564665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.582069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4094: link becomes ready [ 177.604855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.620804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.4: link becomes ready [ 177.629117][ T25] ip6_tunnel:  xmit: Local address not yet configured! [ 177.642794][T14156] device bridge_slave_1 left promiscuous mode [ 177.650276][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.660295][T14156] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 177.702858][T14179] xt_TCPMSS: Only works on TCP SYN packets [ 177.744065][T14191] tc_dump_action: action bad kind [ 177.767555][T14199] tc_dump_action: action bad kind [ 177.781711][T14207] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 178.055230][T14295] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 178.189220][T14339] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 178.295492][T14377] x_tables: duplicate underflow at hook 3 [ 178.362105][T14403] xt_CT: No such helper "snmp_trap" [ 178.426628][T14423] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.542266][T14451] netlink: 'syz.4.6691': attribute type 30 has an invalid length. [ 178.558279][T14455] netlink: 'syz.3.6693': attribute type 3 has an invalid length. [ 178.943711][T14555] x_tables: unsorted entry at hook 2 [ 179.154839][ T24] kauditd_printk_skb: 878 callbacks suppressed [ 179.154851][ T24] audit: type=1400 audit(1785861450.122:4811): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.232803][ T24] audit: type=1400 audit(1785861450.122:4812): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.268195][ C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 179.268202][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 179.302500][ T24] audit: type=1400 audit(1785861450.122:4813): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.392561][ T24] audit: type=1400 audit(2000000000.000:4814): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.432906][T14667] netlink: 'syz.4.6797': attribute type 3 has an invalid length. [ 179.448810][ T24] audit: type=1400 audit(2000000000.000:4815): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.458377][T14667] netlink: 'syz.4.6797': attribute type 3 has an invalid length. [ 179.500519][ T24] audit: type=1400 audit(2000000000.000:4816): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.526620][ T24] audit: type=1400 audit(2000000000.000:4817): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.552613][T14680] device veth0 entered promiscuous mode [ 179.594216][ T24] audit: type=1400 audit(2000000000.010:4818): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.654075][ T24] audit: type=1400 audit(2000000000.020:4819): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.707293][ T24] audit: type=1400 audit(2000000000.020:4820): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.752119][T14722] xt_socket: unknown flags 0xc [ 179.895491][T14763] xt_CT: No such helper "netbios-ns" [ 180.002567][T14783] xt_l2tp: v2 tid > 0xffff: 262144 [ 180.152748][T14811] device sit0 entered promiscuous mode [ 180.164861][T14813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14813 comm=syz.4.6868 [ 180.168867][T14811] netlink: 'syz.1.6878': attribute type 1 has an invalid length. [ 180.227503][T14817] IPv6: A: Disabled Multicast RS [ 180.333334][T14845] x_tables: duplicate underflow at hook 3 [ 180.409369][T14863] device veth1_macvtap left promiscuous mode [ 180.415952][T14863] device macsec0 entered promiscuous mode [ 180.779655][T14953] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.815811][T14960] device ip6erspan1 entered promiscuous mode [ 180.875214][T14972] device bridge9 entered promiscuous mode [ 181.085808][T15019] xt_TCPMSS: Only works on TCP SYN packets [ 181.360674][T15087] __nla_validate_parse: 15 callbacks suppressed [ 181.360683][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7005'. [ 181.458655][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 181.544432][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 181.635932][T15147] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7037'. [ 181.672355][T15156] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7040'. [ 181.783959][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7052'. [ 181.827358][T15196] xt_TCPMSS: Only works on TCP SYN packets [ 181.844802][T15199] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 181.969439][T15226] netlink: 'syz.0.7074': attribute type 15 has an invalid length. [ 181.980500][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7074'. [ 181.990561][T15229] netlink: 'syz.1.7075': attribute type 3 has an invalid length. [ 182.001151][T15229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7075'. [ 182.134154][T15257] futex_wake_op: syz.4.7089 tries to shift op by 144; fix this program [ 182.343217][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7113'. [ 182.355935][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7113'. [ 182.367673][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7113'. [ 182.449309][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 182.508523][T15345] xt_hashlimit: max too large, truncated to 1048576 [ 182.545797][T15353] tc_dump_action: action bad kind [ 182.596487][T15366] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7142'. [ 182.962713][T15459] x_tables: unsorted entry at hook 2 [ 182.987627][T15466] printk: syz.1.7191 (15466): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 182.999299][T15463] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.007813][T15463] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.016918][T15463] device sit0 left promiscuous mode [ 183.028145][T15463] device syz_tun left promiscuous mode [ 183.035036][T15463] device veth0 left promiscuous mode [ 183.046026][T15463] device veth0_vlan left promiscuous mode [ 183.052570][T15463] device veth0_vlan entered promiscuous mode [ 183.065189][T15463] device veth1_macvtap entered promiscuous mode [ 183.073542][T15463] device macsec0 left promiscuous mode [ 183.081476][T15463] device bridge3 left promiscuous mode [ 183.089121][T15463] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 183.093683][T15481] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.096413][T15463] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 183.116807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.128573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.146250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.159770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.168401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.4: link becomes ready [ 183.391534][T15535] ================================================================== [ 183.399746][T15535] BUG: KASAN: slab-out-of-bounds in unaccount_page_cache_page+0x9dc/0xac0 [ 183.408252][T15535] Read of size 4 at addr ffff888114e93470 by task syz.2.7224/15535 [ 183.416134][T15535] [ 183.418486][T15535] CPU: 0 PID: 15535 Comm: syz.2.7224 Tainted: G W syzkaller #0 [ 183.427321][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 183.437387][T15535] Call Trace: [ 183.440684][T15535] __dump_stack+0x21/0x24 [ 183.445025][T15535] dump_stack_lvl+0x1a7/0x208 [ 183.449682][T15535] ? show_regs_print_info+0x18/0x18 [ 183.454859][T15535] ? thaw_kernel_threads+0x220/0x220 [ 183.460122][T15535] print_address_description+0x7f/0x2c0 [ 183.465648][T15535] ? unaccount_page_cache_page+0x9dc/0xac0 [ 183.471455][T15535] kasan_report+0x100/0x140 [ 183.475955][T15535] ? xas_store+0xd0c/0x18d0 [ 183.480444][T15535] ? unaccount_page_cache_page+0x9dc/0xac0 [ 183.486255][T15535] __asan_report_load4_noabort+0x14/0x20 [ 183.491958][T15535] unaccount_page_cache_page+0x9dc/0xac0 [ 183.497571][T15535] __delete_from_page_cache+0xc3/0x470 [ 183.503011][T15535] ? memset+0x35/0x40 [ 183.506971][T15535] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 183.513973][T15535] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 183.519408][T15535] ? __kasan_check_read+0x11/0x20 [ 183.524679][T15535] ? workingset_eviction+0x3dc/0x940 [ 183.529962][T15535] __remove_mapping+0x581/0x6b0 [ 183.534797][T15535] shrink_page_list+0x21ee/0x4160 [ 183.539803][T15535] ? shrink_page_list+0x1f41/0x4160 [ 183.544981][T15535] ? reclaim_clean_pages_from_list+0x740/0x740 [ 183.551111][T15535] ? shrink_inactive_list+0xef0/0xef0 [ 183.556467][T15535] ? _raw_spin_lock_irq+0x95/0xf0 [ 183.561469][T15535] ? __count_memcg_events+0x89/0x210 [ 183.566734][T15535] shrink_inactive_list+0x90c/0xef0 [ 183.571910][T15535] ? shrink_active_list+0xe00/0xe00 [ 183.577086][T15535] ? blk_flush_plug_list+0x40b/0x450 [ 183.582350][T15535] ? __kasan_check_read+0x11/0x20 [ 183.587355][T15535] ? __kasan_check_read+0x11/0x20 [ 183.592359][T15535] ? lruvec_lru_size+0x230/0x250 [ 183.597276][T15535] ? blk_start_plug+0x5a/0x170 [ 183.602050][T15535] shrink_lruvec+0x2806/0x2d70 [ 183.606810][T15535] ? __kasan_check_write+0x14/0x20 [ 183.611911][T15535] ? down_read_trylock+0x106/0x160 [ 183.617004][T15535] ? __init_rwsem+0x1c0/0x1c0 [ 183.621662][T15535] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 183.627186][T15535] ? __kasan_check_write+0x14/0x20 [ 183.632275][T15535] ? up_read+0x12/0x50 [ 183.636320][T15535] ? shrink_slab+0x671/0x830 [ 183.640889][T15535] ? cgroup_file_open+0x8a/0x2a0 [ 183.645805][T15535] ? __kasan_check_read+0x11/0x20 [ 183.650805][T15535] ? inactive_is_low+0x17a/0x2f0 [ 183.655720][T15535] ? __kasan_check_write+0x14/0x20 [ 183.660830][T15535] shrink_node+0xee0/0x2690 [ 183.665311][T15535] ? __switch_to+0x53e/0x10a0 [ 183.669968][T15535] do_try_to_free_pages+0x602/0x1590 [ 183.675234][T15535] ? try_to_free_pages+0xc20/0xc20 [ 183.680328][T15535] try_to_free_mem_cgroup_pages+0x261/0x610 [ 183.686216][T15535] ? shrink_lruvec+0x2d70/0x2d70 [ 183.691136][T15535] mem_cgroup_resize_max+0x309/0x3e0 [ 183.696407][T15535] mem_cgroup_write+0x1ed/0x230 [ 183.701234][T15535] ? mem_cgroup_reset+0x130/0x130 [ 183.706237][T15535] ? mem_cgroup_reset+0x130/0x130 [ 183.711240][T15535] cgroup_file_write+0x294/0x560 [ 183.716155][T15535] ? cgroup_seqfile_stop+0xc0/0xc0 [ 183.721246][T15535] ? mutex_lock+0x92/0xf0 [ 183.725563][T15535] ? mutex_trylock+0xb0/0xb0 [ 183.730143][T15535] ? __kasan_check_write+0x14/0x20 [ 183.735234][T15535] ? cgroup_seqfile_stop+0xc0/0xc0 [ 183.740323][T15535] kernfs_fop_write_iter+0x2bd/0x400 [ 183.745598][T15535] vfs_write+0x770/0xd70 [ 183.749819][T15535] ? kernel_write+0x3c0/0x3c0 [ 183.754474][T15535] ? mutex_trylock+0xb0/0xb0 [ 183.759064][T15535] ? __fget_files+0x2e1/0x340 [ 183.763747][T15535] ? __fdget_pos+0x2d2/0x380 [ 183.768330][T15535] ? ksys_write+0x70/0x260 [ 183.772761][T15535] ksys_write+0x14a/0x260 [ 183.777074][T15535] ? __ia32_sys_read+0x90/0x90 [ 183.781823][T15535] ? __kasan_check_read+0x11/0x20 [ 183.786827][T15535] __x64_sys_write+0x7b/0x90 [ 183.791396][T15535] do_syscall_64+0x31/0x40 [ 183.795793][T15535] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 183.801661][T15535] RIP: 0033:0x7ff944a5ef99 [ 183.806065][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.825660][T15535] RSP: 002b:00007ff9434b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.834054][T15535] RAX: ffffffffffffffda RBX: 00007ff944ce6fa0 RCX: 00007ff944a5ef99 [ 183.842012][T15535] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 183.849962][T15535] RBP: 00007ff944af5ec4 R08: 0000000000000000 R09: 0000000000000000 [ 183.857920][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.865877][T15535] R13: 00007ff944ce7038 R14: 00007ff944ce6fa0 R15: 00007fff77dc6e08 [ 183.873834][T15535] [ 183.876144][T15535] Allocated by task 14049: [ 183.880548][T15535] __kasan_kmalloc+0xd4/0x100 [ 183.885205][T15535] __kmalloc+0x19f/0x330 [ 183.889445][T15535] kvmalloc_node+0x88/0x130 [ 183.893925][T15535] pfifo_fast_init+0x257/0x7a0 [ 183.898791][T15535] qdisc_create_dflt+0x136/0x390 [ 183.903816][T15535] dev_activate+0x292/0x11c0 [ 183.908392][T15535] __dev_open+0x3e9/0x500 [ 183.912705][T15535] __dev_change_flags+0x1e4/0x6a0 [ 183.917709][T15535] rtnl_configure_link+0x15d/0x340 [ 183.922798][T15535] rtnl_newlink+0x1428/0x1830 [ 183.927450][T15535] rtnetlink_rcv_msg+0x9e9/0xca0 [ 183.932360][T15535] netlink_rcv_skb+0x1e9/0x430 [ 183.937098][T15535] rtnetlink_rcv+0x1c/0x20 [ 183.941491][T15535] netlink_unicast+0x86c/0xa30 [ 183.946227][T15535] netlink_sendmsg+0x949/0xb70 [ 183.950965][T15535] ____sys_sendmsg+0x5be/0x8f0 [ 183.955712][T15535] ___sys_sendmsg+0x236/0x2e0 [ 183.960362][T15535] __x64_sys_sendmsg+0x201/0x2d0 [ 183.965274][T15535] do_syscall_64+0x31/0x40 [ 183.969668][T15535] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 183.975528][T15535] [ 183.977838][T15535] The buggy address belongs to the object at ffff888114e90000 [ 183.977838][T15535] which belongs to the cache kmalloc-8k of size 8192 [ 183.991872][T15535] The buggy address is located 5232 bytes to the right of [ 183.991872][T15535] 8192-byte region [ffff888114e90000, ffff888114e92000) [ 184.005808][T15535] The buggy address belongs to the page: [ 184.011432][T15535] page:ffffea000453a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114e90 [ 184.021645][T15535] head:ffffea000453a400 order:3 compound_mapcount:0 compound_pincount:0 [ 184.029958][T15535] flags: 0x4000000000010200(slab|head) [ 184.035421][T15535] raw: 4000000000010200 ffffea0004bdec00 0000000200000002 ffff888100042a80 [ 184.043983][T15535] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 184.052537][T15535] page dumped because: kasan: bad access detected [ 184.058945][T15535] page_owner tracks the page as allocated [ 184.064654][T15535] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9689, ts 162201816084, free_ts 162189650439 [ 184.085285][T15535] prep_new_page+0x176/0x190 [ 184.089852][T15535] get_page_from_freelist+0x225f/0x23f0 [ 184.095374][T15535] __alloc_pages_nodemask+0x29a/0x640 [ 184.100730][T15535] new_slab+0x84/0x3f0 [ 184.104880][T15535] ___slab_alloc+0x2f8/0x4c0 [ 184.109551][T15535] __slab_alloc+0x63/0xa0 [ 184.113867][T15535] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 184.119230][T15535] audit_log_d_path+0xa2/0x200 [ 184.123971][T15535] audit_log_d_path_exe+0x42/0x70 [ 184.128974][T15535] audit_log_task+0x214/0x300 [ 184.133645][T15535] audit_seccomp+0x7f/0x160 [ 184.138123][T15535] __seccomp_filter+0xb88/0x19b0 [ 184.143035][T15535] __secure_computing+0xea/0x290 [ 184.147965][T15535] syscall_trace_enter+0xb5/0x170 [ 184.152965][T15535] syscall_enter_from_user_mode+0x20/0x30 [ 184.158657][T15535] do_syscall_64+0x13/0x40 [ 184.163046][T15535] page last free stack trace: [ 184.167718][T15535] __free_pages_ok+0x80b/0x830 [ 184.172456][T15535] __free_pages+0xd8/0x390 [ 184.176848][T15535] __free_slab+0xcf/0x190 [ 184.181151][T15535] unfreeze_partials+0x150/0x180 [ 184.186061][T15535] put_cpu_partial+0xc1/0x180 [ 184.190717][T15535] __slab_free+0x2c9/0x3a0 [ 184.195108][T15535] ___cache_free+0x10e/0x130 [ 184.199676][T15535] qlink_free+0x50/0x90 [ 184.203810][T15535] qlist_free_all+0x5f/0xb0 [ 184.208291][T15535] kasan_quarantine_reduce+0x14a/0x160 [ 184.213724][T15535] __kasan_slab_alloc+0x2f/0xe0 [ 184.218550][T15535] slab_post_alloc_hook+0x5d/0x2f0 [ 184.223637][T15535] kmem_cache_alloc+0x15a/0x2d0 [ 184.228482][T15535] getname_flags+0xba/0x510 [ 184.232961][T15535] user_path_at_empty+0x2f/0x50 [ 184.237793][T15535] vfs_statx+0x10a/0x530 [ 184.242006][T15535] [ 184.244313][T15535] Memory state around the buggy address: [ 184.249929][T15535] ffff888114e93300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.257968][T15535] ffff888114e93380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.266001][T15535] >ffff888114e93400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.274036][T15535] ^ [ 184.281732][T15535] ffff888114e93480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.289772][T15535] ffff888114e93500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.297806][T15535] ================================================================== [ 184.305845][T15535] Disabling lock debugging due to kernel taint [ 184.314031][ T284] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 184.321607][ T24] kauditd_printk_skb: 545 callbacks suppressed [ 184.321621][ T24] audit: type=1400 audit(2000000005.414:5366): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 184.351956][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 184.385166][ T284] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 184.392736][ T24] audit: type=1400 audit(2000000005.477:5367): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 184.415017][ T24] audit: type=1400 audit(2000000005.477:5368): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 184.437420][ T24] audit: type=1400 audit(2000000005.477:5369): avc: denied { read write } for pid=279 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 184.461802][ T24] audit: type=1400 audit(2000000005.477:5370): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 184.483771][ T24] audit: type=1400 audit(2000000005.488:5371): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 184.507951][ T24] audit: type=1400 audit(2000000005.488:5372): avc: denied { read write } for pid=280 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 184.556124][ T24] audit: type=1400 audit(2000000005.677:5373): avc: denied { read write } for pid=281 comm="syz-executor" name="loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 184.697393][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 184.916875][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 188.317146][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 189.460168][ C0] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 189.463028][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 189.468032][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!