last executing test programs: 388.149383ms ago: executing program 2 (id=6046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000300012800b00010065727370616e000020000280040012000500160002000000060003008100000006000e"], 0x50}}, 0x0) 345.650153ms ago: executing program 4 (id=6049): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x49, &(0x7f0000000180), 0x4) 345.488624ms ago: executing program 2 (id=6051): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) 344.743174ms ago: executing program 4 (id=6052): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x82485000) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1200}], 0x1, 0x3562bb89) 302.373874ms ago: executing program 4 (id=6056): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@quota}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$eJzs3c9rXNUeAPDvvZPJjzbvpX08Hq/lPV7gLVp4NE36ilVXbV3YRcGCXYi4aGiSGjr9QZOCrQVTcKGgIOJWpBv/AffSvTsR1J1roYpUXKh05M7c246TmTSkydw09/OBOzk/buacb25O7rl3cmYCqKxa9pBG7IuIc0nEREfdeLQrJyNa2/2fbp3PtiSazZd/TCLJy4r9H+Rfd2cPScRoRHx5MuJvtdXtLt24eXG20Wx7K+Lw8qWrh5du3Dy0eGn2wvyF+cszR549emz6uZmjM5sSZxHXqdMv/ev9t19/ZuGrxqEkjsfZ+ptz0RXHZpmMyXiQh5jlm0m7fCgijkXxw3+67YAQKq2W/z7WI+IfMRG1Vq5tIhbfK7VzwJZq1iKaQEUlxj9UVDEPKK7tu6+DR0qZlQzOvRPtC6DV8Q+17nlEjLaujXbdTzqujNr3NvZsQvtZG7/f2v9xtkWf+xBDm9BOPyu327Gsjj9p9W1PqzaLP/3TtX4aEdMRMZz374Un6EPnPZKtuA+zliz++Of64u88Dln8x/OvWfnJDbY/2ZUfdPwAVNPdE/mJfCXLPTr/ZWfjYv4TPeY/4z3OXRtR9vmv//yvON+PtuY9adc8LImIM72fst5d8N27pz7s137n/C/bsvaLueAg3Lsdsb8r/neyYPP5TxZ/0uP4Z7ucW2cbL379w6l+dWXH37wTcaDP/LeQpdZ4ffLwwmJjfrr92LONz7947dN+7XfHXy/h+O9aY/7f7/hnZVfX2cZnZ+5c6lc3/tjjn34/nJxtpYbzkjdml5evzUQMJ6fzXTrKj6zdl2Kf4jmy+A/+t/f4Xyv+seJP5jpcfeXi/X51T/j7/6C5zh37yeKf2+Dx/yD/OTzOL69e/3e/urXiX89zAwAAAAAAAI+krddgk3TqYTpNp6baa3j/HrvSxpWl5f8tXLl+eS7iYOv/Ietp8Ur3RDufZPmZ/P9hi/yRrvz/I2JvRHxUG2vlp85facyVHTwAAAAAAAAAAAAAAAAAAABsE7vz9f/FZzD9XGuv/wcqYis/YA7Y3ox/qK7W+E/L7gVQBud/qK4e479WRj+AwXP+h+oy/qG6jH+orqE+aWDnM+ahuox/AAAAANiR9v7n7rdJRKw8P9baMsN5Xb3UngFbzRiH6rLOB6rr4Uv/lv9D5axr/v9rcyQims2t7w5QgqRXYWtykL8xaL/Bf7fndwIAAAAAAAAAAAAAW+DAPuv/oaos+4PqeoL1/946AJ5y3vofqss1PvC4Vfyj/Sqs/wcAAAAAAAAAAACAgRlvbUk6la8FHo80nZqK+EtE7Il6srDYmJ+OiL9GxDe1+kiWnym70wAAAAAAAAAAAAAAAAAAALDDLN24eXG20Zi/1pn4bVXJzk4Un4K6XfrTmYhk8I2ORcR2iH2DiXTtfYY6SpKIlezIl97ndiLKa32ku6TkP0wAAAAAAAAAAAAAAAAAAFBBHWuPe9v/yYB7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACD9+jz/7cuUXaMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDT6Y8AAAD//1hMQAg=") 269.540245ms ago: executing program 1 (id=6057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x148, 0x1170, 0x1170, 0x0, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322, 0xffffffff], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x4e23, 0x0, 0x0, 0x0, 0x4e22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'vlan1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 262.327705ms ago: executing program 1 (id=6059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x6a, 0x1, 0x0, 0xffffffff, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) 259.259285ms ago: executing program 0 (id=6060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x0) 226.894155ms ago: executing program 3 (id=6061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x84, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 200.848216ms ago: executing program 1 (id=6062): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x0, 0x140, 0xfeffffff, 0x210, 0x140, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'caif0\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id=0x68}}}}, {{@ip={@remote, @broadcast, 0xffffff, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @port=0x4e24, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 200.785886ms ago: executing program 0 (id=6063): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000340)) 200.503056ms ago: executing program 4 (id=6064): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x1}]}}}]}, 0x44}}, 0x48000) 169.091397ms ago: executing program 0 (id=6065): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @remote, @multicast2}}}}) 152.383107ms ago: executing program 3 (id=6066): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) 152.018877ms ago: executing program 2 (id=6067): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, 0xffffffffffffffff, 0x43) 121.985168ms ago: executing program 1 (id=6068): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 121.672178ms ago: executing program 3 (id=6069): prctl$PR_SET_SECUREBITS(0x1c, 0x36) prctl$PR_GET_KEEPCAPS(0x7) 116.397948ms ago: executing program 2 (id=6070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 109.822468ms ago: executing program 0 (id=6071): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0x0, 0x0) 81.186948ms ago: executing program 2 (id=6072): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000000)) 66.966369ms ago: executing program 1 (id=6073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000540)={0x29, 0xfe, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private2}, @generic={0x6, 0x7c9, "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"}]}, 0x800) 66.869239ms ago: executing program 0 (id=6074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x8923, &(0x7f0000000080)="94b58ec726ebd03a") 63.191929ms ago: executing program 3 (id=6075): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000079c0)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xac, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0xf5, 0x90, 0x0, 0x1, [@nested={0xe5, 0x44, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @str='GPL\x00'}, @generic="a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa6864acdf7e959a84b3dad1bc88841ef786cbde7d6215a38138e3e97b04c17bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a45f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64bf88da83639f53a9b25264f438337448c8ad49b7c34940dd9f68826e015c57dcb", @typed={0x4, 0x13a}, @nested={0x25, 0x5b, 0x0, 0x1, [@generic="bc6dad2ec06ca4d4fe3dd7c279ab0ab97e40888491432f6bcceedf366490a5e0ca"]}]}, @generic="f0d1352a224aadf38c"]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 62.858919ms ago: executing program 4 (id=6076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback={0xffffffffffff0000}}, 0x1c) 31.392409ms ago: executing program 3 (id=6077): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x0, 0x1}, {0x8, 0x5}, {0x4, 0x5}, {0x6, 0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1}, 0x28) 28.648549ms ago: executing program 2 (id=6078): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 22.78603ms ago: executing program 4 (id=6079): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 339.01µs ago: executing program 3 (id=6080): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [], {0x4, 0x1}, [], {0x20, 0x4}, {0x20, 0x2}}, 0x24, 0x2) 252.23µs ago: executing program 0 (id=6081): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005c00)=[{{&(0x7f0000000580)=@file={0x0, './file1/file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x15}}], 0x1, 0x0) 0s ago: executing program 1 (id=6082): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000440)="170000000200020000ffae8c5ee17688a2000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901def207ffffffe9000000efffffff0062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd300004289f17a4a", 0xb8) kernel console output (not intermixed with test programs): dProduct=0101, bcdDevice= 0.40 [ 155.269100][ T7321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.278455][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.288131][ T7321] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 155.295067][ T19] usb 5-1: Product: syz [ 155.303982][ T7321] EXT4-fs (loop1): write access will be enabled during recovery [ 155.307803][ T19] usb 5-1: Manufacturer: syz [ 155.316454][ T7321] EXT4-fs (loop1): barriers disabled [ 155.321048][ T19] usb 5-1: SerialNumber: syz [ 155.326922][ T7321] JBD2: no valid journal superblock found [ 155.337315][ T7321] EXT4-fs (loop1): error loading journal [ 155.338716][ T336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.351497][ T336] usb 1-1: not running at top speed; connect to a high speed hub [ 155.360973][ T336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.371600][ T336] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.380593][ T336] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 155.405009][ T336] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.414444][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 155.428238][ T336] usb 1-1: Product: syz [ 155.432777][ T336] usb 1-1: Manufacturer: syz [ 155.466227][ T28] audit: type=1400 audit(2001049637.568:240): avc: denied { create } for pid=7324 comm="syz.1.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 155.479549][ T7323] loop3: detected capacity change from 0 to 8192 [ 155.507041][ T7327] loop1: detected capacity change from 0 to 512 [ 155.517985][ T7327] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 155.539348][ T19] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 155.563001][ T19] usb 5-1: USB disconnect, device number 64 [ 155.644304][ T336] usb 1-1: 0:2 : does not exist [ 155.655960][ T336] usb 1-1: USB disconnect, device number 63 [ 155.858348][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.937147][ T7352] loop1: detected capacity change from 0 to 40427 [ 155.944408][ T7352] F2FS-fs (loop1): heap/no_heap options were deprecated [ 155.951704][ T7352] F2FS-fs (loop1): fault_injection options not supported [ 155.959062][ T7352] F2FS-fs (loop1): fault_type options not supported [ 155.966508][ T7352] F2FS-fs (loop1): invalid crc value [ 155.973419][ T7352] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 80924830118118885) [ 155.999792][ T7352] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.026261][ T618] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 156.184686][ T336] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 156.223013][ T618] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 156.231510][ T618] usb 4-1: config 0 has no interface number 1 [ 156.237629][ T618] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 156.248412][ T618] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 156.264027][ T618] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 156.273587][ T618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.281685][ T618] usb 4-1: SerialNumber: syz [ 156.289791][ T618] usb 4-1: config 0 descriptor?? [ 156.295824][ T618] usb 4-1: Found UVC 0.00 device (0002:0000) [ 156.302971][ T618] usb 4-1: No valid video chain found. [ 156.363450][ T336] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 156.372372][ T336] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 156.380841][ T336] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 156.390022][ T336] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 156.401290][ T24] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 156.408310][ T19] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 156.408913][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 4 [ 156.427901][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 156.443460][ T336] usb 3-1: string descriptor 0 read error: -22 [ 156.449937][ T336] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 156.459607][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.472079][ T336] usb 3-1: config 0 descriptor?? [ 156.479494][ T336] hub 3-1:0.0: bad descriptor, ignoring hub [ 156.494036][ T336] hub: probe of 3-1:0.0 failed with error -5 [ 156.504856][ T7417] loop1: detected capacity change from 0 to 40427 [ 156.505216][ T2824] usb 4-1: USB disconnect, device number 68 [ 156.516029][ T7417] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 156.526342][ T7417] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 156.535960][ T7417] F2FS-fs (loop1): invalid crc value [ 156.541772][ T7417] F2FS-fs (loop1): invalid crc value [ 156.547615][ T7417] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 156.605425][ T19] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.605805][ T24] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 156.621509][ T19] usb 5-1: not running at top speed; connect to a high speed hub [ 156.629366][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 156.650679][ T19] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 156.656641][ T24] usb 1-1: string descriptor 0 read error: -22 [ 156.661408][ T19] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 156.678836][ T19] usb 5-1: config 4 has no interface number 0 [ 156.689122][ T19] usb 5-1: Dual-Role OTG device on HNP port [ 156.694739][ T24] usb 1-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 156.697675][ T19] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 156.704325][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.717910][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 156.731176][ T19] usb 5-1: Product: syz [ 156.737289][ T19] usb 5-1: Manufacturer: syz [ 156.737354][ T7393] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 156.742071][ T19] usb 5-1: SerialNumber: syz [ 156.786391][ T7433] loop1: detected capacity change from 0 to 16 [ 156.798313][ T7433] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.838762][ T2824] usb 3-1: USB disconnect, device number 69 [ 156.944223][ T24] usbhid 1-1:1.0: can't add hid device: -71 [ 156.950606][ T24] usbhid: probe of 1-1:1.0 failed with error -71 [ 156.951570][ T19] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 156.959575][ T24] usb 1-1: USB disconnect, device number 64 [ 156.967749][ T19] usb 5-1: No valid video chain found. [ 156.979985][ T19] usb 5-1: USB disconnect, device number 65 [ 156.990937][ T7443] loop3: detected capacity change from 0 to 512 [ 156.998411][ T7443] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 157.081169][ T7457] loop1: detected capacity change from 0 to 512 [ 157.109483][ T7457] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.129430][ T7461] overlayfs: missing 'lowerdir' [ 157.218459][ T7475] loop2: detected capacity change from 0 to 512 [ 157.236841][ T7475] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 157.302069][ T7488] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 157.371776][ T28] audit: type=1400 audit(2001049639.617:241): avc: denied { create } for pid=7497 comm="syz.2.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 157.508133][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 157.584400][ T2824] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 157.675483][ T19] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 157.705315][ T24] usb 2-1: config 127 has an invalid interface number: 32 but max is 0 [ 157.714319][ T24] usb 2-1: config 127 has no interface number 0 [ 157.721668][ T24] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 157.732437][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.747379][ T24] ums-freecom 2-1:127.32: USB Mass Storage device detected [ 157.769139][ T2824] usb 4-1: Using ep0 maxpacket: 16 [ 157.776106][ T2824] usb 4-1: config 1 interface 0 altsetting 121 bulk endpoint 0x1 has invalid maxpacket 1024 [ 157.778335][ T335] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 157.787048][ T2824] usb 4-1: config 1 interface 0 has no altsetting 0 [ 157.809761][ T2824] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 157.819209][ T2824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.827579][ T2824] usb 4-1: Product: syz [ 157.831937][ T2824] usb 4-1: Manufacturer: syz [ 157.837511][ T2824] usb 4-1: SerialNumber: syz [ 157.843548][ T7490] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 157.853583][ T19] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.862997][ T19] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 157.875097][ T19] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 250, changing to 11 [ 157.880405][ T336] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 157.886660][ T19] usb 3-1: config 1 interface 0 has no altsetting 0 [ 157.903250][ T19] usb 3-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 157.912617][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.921216][ T19] usb 3-1: Product: 㐊 [ 157.925421][ T19] usb 3-1: Manufacturer: 謒嫩뷓ꞝۅ袗昗킙醽弪Ὠ膨悢갛칀⸪팭≥⓫腈푗ᶽ㭊콘퍶鴖嘊켴ﻹ瓄槪紩ᲄ፦쯷撋곲隩嗉퇸芾禦奃늏즾찗驔鱭 [ 157.940787][ T24] usb 2-1: USB disconnect, device number 70 [ 157.944040][ T19] usb 3-1: SerialNumber: 倊 [ 157.974773][ T335] usb 1-1: config 9 has an invalid interface number: 81 but max is 0 [ 157.983526][ T335] usb 1-1: config 9 has no interface number 0 [ 157.990102][ T335] usb 1-1: config 9 interface 81 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 158.001271][ T335] usb 1-1: config 9 interface 81 has no altsetting 0 [ 158.010897][ T335] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 158.020460][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.028470][ T335] usb 1-1: Product: syz [ 158.032879][ T335] usb 1-1: Manufacturer: syz [ 158.037519][ T335] usb 1-1: SerialNumber: syz [ 158.042501][ T2824] usblp0: Disabling reads from problematic bidirectional printer [ 158.052777][ T7503] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 158.054297][ T2824] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 121 proto 1 vid 0x03F0 pid 0x0004 [ 158.072430][ T2824] usb 4-1: USB disconnect, device number 69 [ 158.079971][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.091690][ T2824] usblp0: removed [ 158.096408][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.107062][ T336] usb 5-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 158.116646][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.125715][ T336] usb 5-1: config 0 descriptor?? [ 158.151296][ T19] usbhid 3-1:1.0: can't add hid device: -71 [ 158.157430][ T19] usbhid: probe of 3-1:1.0 failed with error -71 [ 158.165686][ T19] usb 3-1: USB disconnect, device number 70 [ 158.251572][ T335] usbserial_generic 1-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 158.263210][ T335] usbserial_generic 1-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 158.274625][ T335] usbserial_generic 1-1:9.81: generic converter detected [ 158.282861][ T335] usb 1-1: generic converter now attached to ttyUSB0 [ 158.290720][ T335] usb 1-1: generic converter now attached to ttyUSB1 [ 158.302390][ T335] usb 1-1: USB disconnect, device number 65 [ 158.310934][ T335] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 158.321110][ T336] usbhid 5-1:0.0: can't add hid device: -71 [ 158.324337][ T335] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 158.327100][ T336] usbhid: probe of 5-1:0.0 failed with error -71 [ 158.336199][ T335] usbserial_generic 1-1:9.81: device disconnected [ 158.353134][ T336] usb 5-1: USB disconnect, device number 66 [ 158.578324][ T7530] loop3: detected capacity change from 0 to 2048 [ 158.729156][ T19] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 158.753672][ T28] audit: type=1326 audit(2001049641.098:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.3.3479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1ec38eec9 code=0x0 [ 158.758699][ T7560] SELinux: Context system_u:object is not valid (left unmapped). [ 158.786834][ T28] audit: type=1400 audit(2001049641.140:243): avc: denied { relabelto } for pid=7559 comm="syz.0.3482" name="cgroup.procs" dev="cgroup" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 158.875974][ T28] audit: type=1400 audit(2001049641.140:244): avc: denied { associate } for pid=7559 comm="syz.0.3482" name="cgroup.procs" dev="cgroup" ino=109 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object" [ 158.953373][ T19] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 158.980955][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.019886][ T19] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 159.029521][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.052075][ T19] usb 2-1: config 0 descriptor?? [ 159.081092][ T19] usb-storage 2-1:0.0: USB Mass Storage device detected [ 159.119337][ T19] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 159.252323][ T6] usb 2-1: USB disconnect, device number 71 [ 159.595740][ T336] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 159.605215][ T19] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 159.623433][ T444] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 159.769519][ T336] usb 5-1: not running at top speed; connect to a high speed hub [ 159.774020][ T19] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 159.785274][ T336] usb 5-1: config 1 interface 0 has no altsetting 0 [ 159.789261][ T19] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 8 [ 159.806143][ T6] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 159.807888][ T336] usb 5-1: string descriptor 0 read error: -22 [ 159.821077][ T444] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.823136][ T336] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 159.835016][ T444] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.843248][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.858895][ T19] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 159.868749][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.877393][ T444] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.885214][ T7675] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 159.887485][ T444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.908811][ T7637] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.916995][ T444] usb 4-1: SerialNumber: syz [ 160.024061][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 160.037031][ T6] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 160.049357][ T6] usb 1-1: config 179 has no interface number 0 [ 160.056407][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 160.071436][ T336] usbhid 5-1:1.0: can't add hid device: -71 [ 160.072718][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 160.079364][ T336] usbhid: probe of 5-1:1.0 failed with error -71 [ 160.092870][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 160.106939][ T336] usb 5-1: USB disconnect, device number 67 [ 160.110701][ T6] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 160.134075][ T444] usb 4-1: unknown interface protocol 0x17, assuming v1 [ 160.142931][ T19] usb 3-1: string descriptor 0 read error: -71 [ 160.151103][ T444] usb 4-1: 0:2 : does not exist [ 160.157290][ T444] usb 4-1: unit 3 not found! [ 160.162791][ T6] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 160.173035][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.177552][ T28] audit: type=1326 audit(2001049642.632:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7696 comm="syz.1.3549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddc238eec9 code=0x0 [ 160.185302][ T444] usb 4-1: USB disconnect, device number 70 [ 160.225058][ T19] usb 3-1: USB disconnect, device number 71 [ 160.250818][ T7667] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 160.451371][ T336] usb 1-1: USB disconnect, device number 66 [ 160.451395][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.465931][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 160.555686][ T2824] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 160.680675][ T7715] loop4: detected capacity change from 0 to 512 [ 160.695390][ T7715] EXT4-fs (loop4): orphan cleanup on readonly fs [ 160.702947][ T7715] EXT4-fs warning (device loop4): ext4_xattr_inode_get:509: inode #11: comm syz.4.3554: EA inode hash validation failed [ 160.717161][ T7715] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 160.731852][ T7715] EXT4-fs (loop4): 1 orphan inode deleted [ 160.737848][ T7715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.748822][ T2824] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.758184][ T2824] usb 2-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 160.769970][ T2824] usb 2-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 160.770836][ T288] EXT4-fs (loop4): unmounting filesystem. [ 160.783690][ T2824] usb 2-1: config 1 interface 2 has no altsetting 2 [ 160.797156][ T2824] usb 2-1: config 1 interface 1 has no altsetting 0 [ 160.812611][ T2824] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.821847][ T2824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.830090][ T2824] usb 2-1: Product: syz [ 160.834320][ T2824] usb 2-1: Manufacturer: syz [ 160.842218][ T2824] usb 2-1: SerialNumber: syz [ 160.919270][ T19] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 160.937520][ T24] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 161.041664][ T2824] usb 2-1: USB disconnect, device number 72 [ 161.052433][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.088339][ T19] usb 3-1: not running at top speed; connect to a high speed hub [ 161.097283][ T19] usb 3-1: config 3 has an invalid interface number: 40 but max is 0 [ 161.105387][ T19] usb 3-1: config 3 has no interface number 0 [ 161.111579][ T19] usb 3-1: config 3 interface 40 altsetting 246 endpoint 0xF has invalid maxpacket 256, setting to 64 [ 161.123006][ T19] usb 3-1: config 3 interface 40 has no altsetting 0 [ 161.125609][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.141721][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.144831][ T19] usb 3-1: New USB device found, idVendor=0079, idProduct=214c, bcdDevice=1b.cf [ 161.152226][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 161.161490][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.170588][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.178942][ T19] usb 3-1: Product: syz [ 161.188236][ T24] usb 4-1: config 0 descriptor?? [ 161.196124][ T19] usb 3-1: Manufacturer: syz [ 161.197561][ T24] hub 4-1:0.0: USB hub found [ 161.200819][ T19] usb 3-1: SerialNumber: syz [ 161.211522][ T7711] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 161.217421][ T336] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 161.385296][ T24] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 161.394293][ T336] usb 1-1: Using ep0 maxpacket: 8 [ 161.401036][ T336] usb 1-1: config 0 has an invalid interface number: 193 but max is 1 [ 161.410810][ T336] usb 1-1: config 0 has an invalid interface number: 4 but max is 1 [ 161.416733][ T19] usb 3-1: USB disconnect, device number 72 [ 161.422300][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 161.431961][ T24] usbhid: probe of 4-1:0.0 failed with error -71 [ 161.439082][ T336] usb 1-1: config 0 has an invalid interface number: 54 but max is 1 [ 161.450404][ T336] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 161.462959][ T336] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 161.475293][ T336] usb 1-1: config 0 has no interface number 0 [ 161.475737][ T28] audit: type=1326 audit(2001049644.027:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.4.3569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3370d8eec9 code=0x0 [ 161.483180][ T24] usb 4-1: USB disconnect, device number 71 [ 161.511433][ T336] usb 1-1: config 0 has no interface number 1 [ 161.517960][ T336] usb 1-1: config 0 has no interface number 2 [ 161.524497][ T336] usb 1-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.556030][ T336] usb 1-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 161.590695][ T336] usb 1-1: config 0 interface 54 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.624710][ T336] usb 1-1: config 0 interface 193 has no altsetting 0 [ 161.637498][ T336] usb 1-1: config 0 interface 4 has no altsetting 0 [ 161.644961][ T336] usb 1-1: config 0 interface 54 has no altsetting 0 [ 161.654224][ T336] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 161.664115][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.673093][ T336] usb 1-1: Product: syz [ 161.677451][ T336] usb 1-1: Manufacturer: syz [ 161.682253][ T336] usb 1-1: SerialNumber: syz [ 161.688319][ T336] usb 1-1: config 0 descriptor?? [ 161.884759][ T336] usb 1-1: unknown interface protocol 0x4f, assuming v1 [ 161.888304][ T6] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 161.892012][ T336] usb 1-1: 193:2 : does not exist [ 161.905773][ T336] usb 1-1: unknown interface protocol 0x5, assuming v1 [ 161.915432][ T627] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 161.925839][ T336] usb 1-1: cannot find UAC_HEADER [ 161.935001][ T336] snd-usb-audio: probe of 1-1:0.4 failed with error -22 [ 161.952127][ T336] usb 1-1: unknown interface protocol 0x9b, assuming v1 [ 161.962392][ T7758] loop2: detected capacity change from 0 to 512 [ 161.969990][ T336] usb 1-1: 54:2 : does not exist [ 161.979800][ T336] usb 1-1: USB disconnect, device number 67 [ 162.075762][ T6] usb 2-1: config 1 has an invalid interface number: 25 but max is 0 [ 162.084536][ T6] usb 2-1: config 1 has no interface number 0 [ 162.091351][ T6] usb 2-1: config 1 interface 25 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 162.095499][ T627] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.104961][ T6] usb 2-1: New USB device found, idVendor=09b6, idProduct=6875, bcdDevice=ad.15 [ 162.111455][ T627] usb 5-1: config 1 has an invalid interface number: 29 but max is 0 [ 162.120535][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.128318][ T627] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.137078][ T6] usb 2-1: Product: syz [ 162.146947][ T627] usb 5-1: config 1 has no interface number 0 [ 162.151387][ T6] usb 2-1: Manufacturer: syz [ 162.157307][ T627] usb 5-1: config 1 interface 29 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 162.162358][ T6] usb 2-1: SerialNumber: syz [ 162.178037][ T627] usb 5-1: string descriptor 0 read error: -22 [ 162.186562][ T627] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 162.195812][ T627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.204803][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.193/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.308179][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 162.316036][ T618] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 162.385174][ T6] usb 2-1: bad CDC descriptors [ 162.402687][ T6] usb 2-1: USB disconnect, device number 73 [ 162.415091][ T19] usb 5-1: USB disconnect, device number 68 [ 162.495998][ T24] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 162.504729][ T618] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.518330][ T24] usb 3-1: config 0 has no interface number 0 [ 162.524648][ T24] usb 3-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 162.536614][ T618] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.546729][ T618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.554903][ T618] usb 4-1: SerialNumber: syz [ 162.559959][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8101, bcdDevice=9e.4e [ 162.569101][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.577419][ T24] usb 3-1: Product: syz [ 162.582106][ T24] usb 3-1: Manufacturer: syz [ 162.586881][ T24] usb 3-1: SerialNumber: syz [ 162.593053][ T24] usb 3-1: config 0 descriptor?? [ 162.599262][ T24] usb 3-1: Found UVC 0.00 device syz (05ac:8101) [ 162.605863][ T24] usb 3-1: No valid video chain found. [ 162.633920][ T336] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 162.779985][ T618] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 162.788904][ T618] usb 4-1: USB disconnect, device number 72 [ 162.792790][ T19] usb 3-1: USB disconnect, device number 73 [ 162.803462][ T336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.812013][ T336] usb 1-1: not running at top speed; connect to a high speed hub [ 162.823787][ T336] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 162.832112][ T336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.842902][ T336] usb 1-1: config 1 has no interface number 0 [ 162.849244][ T336] usb 1-1: config 1 interface 138 has no altsetting 0 [ 162.857423][ T336] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 162.866768][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.875997][ T336] usb 1-1: Product: syz [ 162.880304][ T336] usb 1-1: Manufacturer: syz [ 162.884954][ T336] usb 1-1: SerialNumber: syz [ 162.988800][ T7778] loop4: detected capacity change from 0 to 8192 [ 163.025666][ T7778] loop4: p1[EZD] p2 p3 p4 [ 163.032014][ T7778] loop4: p3 start 117772289 is beyond EOD, truncated [ 163.039251][ T7778] loop4: p4 size 262144 extends beyond EOD, truncated [ 163.091399][ T336] usb 1-1: USB disconnect, device number 68 [ 163.107452][ T461] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.133686][ T466] udevd[466]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 163.138879][ T459] udevd[459]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 163.151150][ T461] udevd[461]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 163.265530][ T7790] loop3: detected capacity change from 0 to 512 [ 163.335903][ T7790] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.355393][ T7790] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 163.386922][ T7790] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3595: Corrupt directory, running e2fsck is recommended [ 163.426476][ T7790] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 163.451384][ T7790] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.3595: corrupted in-inode xattr [ 163.471800][ T7802] loop2: detected capacity change from 0 to 1024 [ 163.487051][ T7790] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3595: couldn't read orphan inode 15 (err -117) [ 163.512689][ T7802] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.3600: Invalid block bitmap block 0 in block_group 0 [ 163.528771][ T7790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.546796][ T7802] Quota error (device loop2): write_blk: dquota write failed [ 163.570742][ T285] EXT4-fs (loop3): unmounting filesystem. [ 163.583284][ T7802] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 163.594872][ T7802] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.3600: Failed to acquire dquot type 0 [ 163.622773][ T7802] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz.2.3600: Freeing blocks not in datazone - block = 0, count = 4096 [ 163.637636][ T7802] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3600: Invalid inode bitmap blk 0 in block_group 0 [ 163.650729][ T203] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 163.651057][ T7802] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 163.676590][ T7802] EXT4-fs (loop2): 1 orphan inode deleted [ 163.682559][ T7802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.697409][ T203] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 0 [ 163.821728][ T287] EXT4-fs (loop2): unmounting filesystem. [ 164.102183][ T28] audit: type=1400 audit(2001049646.838:247): avc: denied { create } for pid=7851 comm="syz.0.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 164.121706][ T6] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 164.199664][ T444] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 164.293905][ T7853] loop4: detected capacity change from 0 to 40427 [ 164.310497][ T7853] F2FS-fs (loop4): Encrypt feature is off [ 164.322376][ T6] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 164.337395][ T6] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 164.356916][ T6] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 164.379452][ T6] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 164.392764][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 164.411789][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 164.424714][ T444] usb 3-1: Using ep0 maxpacket: 16 [ 164.430333][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 164.447838][ T444] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.465829][ T444] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.483533][ T6] usb 4-1: string descriptor 0 read error: -22 [ 164.496831][ T6] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 164.506314][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.514947][ T444] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.528265][ T6] usb 4-1: config 0 descriptor?? [ 164.538683][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.547046][ T444] usb 3-1: Product: syz [ 164.551349][ T444] usb 3-1: Manufacturer: syz [ 164.556491][ T6] hub 4-1:0.0: bad descriptor, ignoring hub [ 164.562419][ T6] hub: probe of 4-1:0.0 failed with error -5 [ 164.568769][ T444] usb 3-1: SerialNumber: syz [ 164.575656][ T6] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 164.712543][ T336] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 164.740353][ T6] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 164.757002][ T618] usb 4-1: USB disconnect, device number 73 [ 164.768025][ T444] usb 3-1: 0:2 : does not exist [ 164.773408][ T444] usb 3-1: unit 9 not found! [ 164.780481][ T444] usb 3-1: USB disconnect, device number 74 [ 164.882288][ T336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.890506][ T336] usb 5-1: not running at top speed; connect to a high speed hub [ 164.899229][ T336] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 164.908442][ T336] usb 5-1: config 5 interface 0 has no altsetting 1 [ 164.909575][ T6] usb 1-1: config 0 has an invalid interface number: 186 but max is 1 [ 164.916636][ T336] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 164.927450][ T6] usb 1-1: config 0 has no interface number 1 [ 164.936145][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 164.944215][ T6] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 164.950009][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.961272][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.966983][ T336] usb 5-1: Product: syz [ 164.976567][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 164.979445][ T336] usb 5-1: Manufacturer: syz [ 164.995298][ T6] usb 1-1: Product: syz [ 165.000380][ T336] usb 5-1: SerialNumber: syz [ 165.008907][ T6] usb 1-1: Manufacturer: syz [ 165.013569][ T6] usb 1-1: SerialNumber: syz [ 165.022257][ T6] usb 1-1: config 0 descriptor?? [ 165.159706][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 165.166403][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.175667][ T24] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 165.184100][ T24] usb 2-1: config 0 has no interface number 0 [ 165.191107][ T24] usb 2-1: config 0 interface 238 has no altsetting 0 [ 165.199988][ T24] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.16 [ 165.209486][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.217953][ T24] usb 2-1: Product: syz [ 165.222680][ T24] usb 2-1: Manufacturer: syz [ 165.227431][ T24] usb 2-1: SerialNumber: syz [ 165.238457][ T336] usb 5-1: USB disconnect, device number 69 [ 165.246273][ T24] usb 2-1: config 0 descriptor?? [ 165.247013][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 165.272068][ T618] usb 1-1: USB disconnect, device number 69 [ 165.437404][ T28] audit: type=1326 audit(2001049648.275:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7908 comm="syz.3.3654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1ec38eec9 code=0x0 [ 165.464957][ T24] usb 2-1: Invalid descriptor size=18. [ 165.474556][ T24] usb 2-1: USB disconnect, device number 74 [ 165.496299][ T7913] loop3: detected capacity change from 0 to 512 [ 165.506567][ T7913] EXT4-fs error (device loop3): ext4_get_journal_inode:5724: comm syz.3.3655: inode #1792: comm syz.3.3655: iget: illegal inode # [ 165.520547][ T7913] EXT4-fs (loop3): Remounting filesystem read-only [ 165.527338][ T7913] EXT4-fs (loop3): no journal found [ 165.533846][ T7913] EXT4-fs (loop3): can't get journal size [ 165.539834][ T7913] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 165.549438][ T7913] EXT4-fs (loop3): failed to initialize system zone (-22) [ 165.557863][ T7913] EXT4-fs (loop3): mount failed [ 165.682291][ T444] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 165.813358][ T28] audit: type=1400 audit(2001049648.683:249): avc: denied { write } for pid=7935 comm="syz.0.3666" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 165.879633][ T444] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.888956][ T444] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.896760][ T336] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 165.900279][ T444] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.920854][ T444] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.930654][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.939336][ T444] usb 3-1: Product: syz [ 165.944469][ T444] usb 3-1: Manufacturer: syz [ 165.949596][ T444] usb 3-1: SerialNumber: syz [ 166.017168][ T318] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 166.084828][ T336] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.093246][ T336] usb 4-1: not running at top speed; connect to a high speed hub [ 166.101105][ T19] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 166.102633][ T336] usb 4-1: config 1 has an invalid interface number: 57 but max is 0 [ 166.119387][ T336] usb 4-1: config 1 has no interface number 0 [ 166.125983][ T336] usb 4-1: config 1 interface 57 has no altsetting 0 [ 166.134978][ T336] usb 4-1: string descriptor 0 read error: -22 [ 166.141834][ T336] usb 4-1: New USB device found, idVendor=0499, idProduct=1045, bcdDevice=92.df [ 166.151124][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.158401][ T444] usb 3-1: 0:2 : does not exist [ 166.166929][ T444] usb 3-1: USB disconnect, device number 75 [ 166.175417][ T336] snd-usb-audio: probe of 4-1:1.57 failed with error -2 [ 166.189015][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.57/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 166.214433][ T318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.222926][ T24] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 166.223391][ T318] usb 5-1: not running at top speed; connect to a high speed hub [ 166.240146][ T318] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 166.257542][ T318] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 166.269217][ T318] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 166.281012][ T318] usb 5-1: config 129 has no interface number 0 [ 166.287383][ T318] usb 5-1: config 129 has no interface number 1 [ 166.294382][ T318] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 166.308092][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 166.313298][ T318] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 166.324906][ T318] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 166.339116][ T318] usb 5-1: config 129 interface 135 has no altsetting 0 [ 166.346268][ T318] usb 5-1: config 129 interface 5 has no altsetting 0 [ 166.355542][ T318] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 166.356525][ T336] usb 4-1: USB disconnect, device number 74 [ 166.365760][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.380148][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.389753][ T318] usb 5-1: Product: syz [ 166.389868][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.394069][ T318] usb 5-1: Manufacturer: syz [ 166.394087][ T318] usb 5-1: SerialNumber: syz [ 166.409433][ T19] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 166.414204][ T24] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 166.416280][ T19] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 166.428029][ T24] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 8 [ 166.430956][ T19] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 166.441147][ T24] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 166.451549][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.460864][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.472559][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.485710][ T7942] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 166.490429][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.525929][ T19] usb 1-1: Product: syz [ 166.530274][ T19] usb 1-1: Manufacturer: syz [ 166.535255][ T19] usb 1-1: SerialNumber: syz [ 166.663655][ T318] usb 5-1: MIDIStreaming interface descriptor not found [ 166.682531][ T318] usb 5-1: USB disconnect, device number 70 [ 166.693819][ T24] usb 2-1: string descriptor 0 read error: -71 [ 166.716594][ T459] udevd[459]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.736850][ T24] usb 2-1: USB disconnect, device number 75 [ 166.737280][ T19] usb 1-1: 0:2 : does not exist [ 166.771820][ T19] usb 1-1: USB disconnect, device number 70 [ 167.126354][ T444] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 167.136195][ T336] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 167.185880][ T7968] loop4: detected capacity change from 0 to 2048 [ 167.211068][ T7968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.242430][ T7976] loop1: detected capacity change from 0 to 512 [ 167.256064][ T288] EXT4-fs (loop4): unmounting filesystem. [ 167.267937][ T7976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.295385][ T7981] loop4: detected capacity change from 0 to 16 [ 167.295539][ T444] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.312876][ T444] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.321929][ T444] usb 4-1: config 1 has no interface number 1 [ 167.328983][ T444] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 167.331978][ T7981] erofs: (device loop4): mounted with root inode @ nid 36. [ 167.346949][ T444] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 167.351006][ T336] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.369557][ T284] EXT4-fs (loop1): unmounting filesystem. [ 167.373451][ T336] usb 3-1: not running at top speed; connect to a high speed hub [ 167.396502][ T7983] loop1: detected capacity change from 0 to 512 [ 167.404194][ T336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.414404][ T444] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.434426][ T444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.438303][ T336] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.444331][ T444] usb 4-1: Product: syz [ 167.464958][ T7983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.472066][ T336] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 167.485773][ T336] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.508882][ T336] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.518560][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.522586][ T444] usb 4-1: Manufacturer: syz [ 167.527536][ T336] usb 3-1: Product: syz [ 167.527555][ T336] usb 3-1: Manufacturer: syz [ 167.527570][ T336] usb 3-1: SerialNumber: syz [ 167.547805][ T284] EXT4-fs (loop1): unmounting filesystem. [ 167.600617][ T444] usb 4-1: SerialNumber: syz [ 167.605052][ T7999] loop1: detected capacity change from 0 to 1024 [ 167.623661][ T7966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 167.634329][ T7999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.676374][ T284] EXT4-fs (loop1): unmounting filesystem. [ 167.738307][ T336] usb 3-1: 0:2 : does not exist [ 167.753579][ T336] usb 3-1: USB disconnect, device number 76 [ 167.846645][ T444] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 167.855174][ T444] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 167.872120][ T19] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 167.888578][ T444] usb 4-1: USB disconnect, device number 75 [ 167.965747][ T6] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 168.049614][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 168.056455][ T19] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 168.065210][ T19] usb 5-1: config 0 has no interface number 0 [ 168.071350][ T19] usb 5-1: config 0 interface 230 has no altsetting 0 [ 168.079946][ T19] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 168.089177][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.097632][ T19] usb 5-1: Product: syz [ 168.101975][ T19] usb 5-1: Manufacturer: syz [ 168.106745][ T19] usb 5-1: SerialNumber: syz [ 168.112591][ T19] usb 5-1: config 0 descriptor?? [ 168.118774][ T19] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 168.126813][ T19] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 168.152072][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 168.158842][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.169553][ T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 168.180651][ T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.199541][ T6] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.214297][ T6] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.225675][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.243900][ T6] usb 2-1: Product: syz [ 168.258584][ T6] usb 2-1: Manufacturer: syz [ 168.273086][ T6] usb 2-1: SerialNumber: syz [ 168.285753][ T8025] loop2: detected capacity change from 0 to 2048 [ 168.313880][ T19] usb 5-1: USB disconnect, device number 71 [ 168.331157][ T8025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.348569][ T8025] ext4 filesystem being mounted at /685/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.395654][ T287] EXT4-fs (loop2): unmounting filesystem. [ 168.416012][ T8031] loop3: detected capacity change from 0 to 128 [ 168.448497][ T28] audit: type=1400 audit(2001049651.505:250): avc: denied { mount } for pid=8030 comm="syz.3.3710" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 168.474366][ T6] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 168.483703][ T28] audit: type=1400 audit(2001049651.537:251): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 168.493496][ T6] usb 2-1: 2:1 : invalid channels 0 [ 168.527341][ T8035] loop3: detected capacity change from 0 to 512 [ 168.567501][ T8037] loop3: detected capacity change from 0 to 1024 [ 168.580216][ T6] usb 2-1: USB disconnect, device number 76 [ 168.609513][ T8037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.674405][ T285] EXT4-fs (loop3): unmounting filesystem. [ 168.710151][ T8040] loop3: detected capacity change from 0 to 128 [ 168.755672][ T8042] loop3: detected capacity change from 0 to 256 [ 168.831647][ T8050] loop3: detected capacity change from 0 to 512 [ 168.863046][ T8050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.889550][ T285] EXT4-fs (loop3): unmounting filesystem. [ 168.935672][ T8055] loop3: detected capacity change from 0 to 8192 [ 168.985914][ T8059] loop1: detected capacity change from 0 to 128 [ 168.997417][ T8057] loop3: detected capacity change from 0 to 2048 [ 169.028260][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 169.068933][ T8061] loop1: detected capacity change from 0 to 2048 [ 169.076462][ T318] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 169.103344][ T8061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.154699][ T8066] loop3: detected capacity change from 0 to 2048 [ 169.162574][ T284] EXT4-fs (loop1): unmounting filesystem. [ 169.214472][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 169.221313][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.234848][ T8068] loop1: detected capacity change from 0 to 2048 [ 169.243297][ T24] usb 1-1: config 0 has no interface number 0 [ 169.251834][ T24] usb 1-1: config 0 interface 2 has no altsetting 0 [ 169.266614][ T24] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 169.279551][ T318] usb 5-1: Using ep0 maxpacket: 32 [ 169.287002][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.300554][ T318] usb 5-1: config 0 has an invalid interface number: 226 but max is 0 [ 169.326838][ T24] usb 1-1: Product: syz [ 169.333615][ T318] usb 5-1: config 0 has no interface number 0 [ 169.335391][ T8033] loop2: detected capacity change from 0 to 131072 [ 169.346905][ T24] usb 1-1: Manufacturer: syz [ 169.349151][ T318] usb 5-1: config 0 interface 226 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 169.351940][ T24] usb 1-1: SerialNumber: syz [ 169.356681][ T24] usb 1-1: config 0 descriptor?? [ 169.392707][ T318] usb 5-1: config 0 interface 226 has no altsetting 0 [ 169.401765][ T318] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0177, bcdDevice=28.68 [ 169.421260][ T8033] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.447655][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.479367][ T318] usb 5-1: Product: syz [ 169.483788][ T318] usb 5-1: Manufacturer: syz [ 169.503345][ T318] usb 5-1: SerialNumber: syz [ 169.520034][ T318] usb 5-1: config 0 descriptor?? [ 169.526163][ T8033] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 169.561138][ T318] ftdi_sio 5-1:0.226: FTDI USB Serial Device converter detected [ 169.574282][ T24] usb 1-1: invalid MIDI in EP 0 [ 169.579412][ T318] ftdi_sio ttyUSB0: unknown device type: 0x2868 [ 169.592545][ T24] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 169.627951][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.630085][ T24] usb 1-1: USB disconnect, device number 71 [ 169.678261][ T8070] loop3: detected capacity change from 0 to 32768 [ 169.750877][ T8078] loop3: detected capacity change from 0 to 1024 [ 169.773193][ T318] usb 5-1: USB disconnect, device number 72 [ 169.783933][ T318] ftdi_sio 5-1:0.226: device disconnected [ 169.802434][ T8078] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.819267][ T8072] loop1: detected capacity change from 0 to 65536 [ 169.851830][ T285] EXT4-fs (loop3): unmounting filesystem. [ 169.967826][ T8086] loop2: detected capacity change from 0 to 512 [ 170.034028][ T8086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 170.135779][ T287] EXT4-fs (loop2): unmounting filesystem. [ 170.186962][ T8094] loop2: detected capacity change from 0 to 2048 [ 170.303983][ T8102] loop4: detected capacity change from 0 to 256 [ 170.372465][ T8105] loop2: detected capacity change from 0 to 512 [ 170.390634][ T8108] loop4: detected capacity change from 0 to 512 [ 170.418554][ T8105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.482268][ T287] EXT4-fs (loop2): unmounting filesystem. [ 170.485205][ T8111] loop4: detected capacity change from 0 to 2048 [ 170.507909][ T8111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.529871][ T8111] ext4 filesystem being mounted at /724/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.580038][ T288] EXT4-fs (loop4): unmounting filesystem. [ 170.619038][ T8116] loop4: detected capacity change from 0 to 128 [ 170.636108][ T336] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 170.799243][ T24] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 170.837867][ T336] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.855957][ T336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.873612][ T336] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 170.892627][ T336] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.920057][ T318] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 170.927788][ T336] usb 1-1: string descriptor 0 read error: -22 [ 170.935194][ T336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.954563][ T336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.979182][ T336] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 170.988050][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 171.004898][ T24] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 171.023113][ T336] cdc_ncm 1-1:1.0: bind() failure [ 171.028711][ T24] usb 3-1: config 95 has no interface number 0 [ 171.044867][ T24] usb 3-1: config 95 interface 1 has no altsetting 0 [ 171.065738][ T24] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 171.085279][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.104722][ T24] usb 3-1: Product: syz [ 171.109032][ T24] usb 3-1: Manufacturer: syz [ 171.113650][ T24] usb 3-1: SerialNumber: syz [ 171.115938][ T318] usb 5-1: Using ep0 maxpacket: 16 [ 171.135043][ T318] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 171.154941][ T318] usb 5-1: config 4 has no interface number 0 [ 171.161788][ T318] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 171.183429][ T2824] usb 1-1: USB disconnect, device number 72 [ 171.190204][ T318] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 171.218560][ T318] usb 5-1: config 4 interface 51 has no altsetting 0 [ 171.238608][ T318] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 171.255764][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.274492][ T318] usb 5-1: Product: syz [ 171.283701][ T318] usb 5-1: Manufacturer: syz [ 171.288670][ T318] usb 5-1: SerialNumber: syz [ 171.313090][ T8118] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 171.329929][ T8118] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 171.335359][ T8084] loop3: detected capacity change from 0 to 262144 [ 171.355045][ T24] usb 3-1: USB disconnect, device number 77 [ 171.539151][ T318] cdc_eem: probe of 5-1:4.51 failed with error -71 [ 171.562965][ T318] usb 5-1: USB disconnect, device number 73 [ 171.730399][ T8083] loop1: detected capacity change from 0 to 262144 [ 171.862243][ T8132] loop2: detected capacity change from 0 to 512 [ 171.906620][ T8136] loop1: detected capacity change from 0 to 2048 [ 171.955812][ T8136] loop1: p1 p2 p3 [ 171.964051][ T102] loop1: p1 p2 p3 [ 172.092868][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3760'. [ 172.141609][ T8142] loop2: detected capacity change from 0 to 8192 [ 172.161848][ T8155] loop3: detected capacity change from 0 to 128 [ 172.175316][ T8146] loop4: detected capacity change from 0 to 8192 [ 172.283810][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 172.311351][ T8162] device gre1 entered promiscuous mode [ 172.367601][ T8174] loop1: detected capacity change from 0 to 256 [ 172.429066][ T8181] device vlan0 entered promiscuous mode [ 172.441245][ T8183] loop4: detected capacity change from 0 to 128 [ 172.558337][ T8200] xt_CT: No such helper "netbios-ns" [ 172.627196][ T8205] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 172.735507][ T28] audit: type=1400 audit(2001049656.097:252): avc: denied { read } for pid=8219 comm="syz.1.3797" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.812325][ T28] audit: type=1400 audit(2001049656.097:253): avc: denied { open } for pid=8219 comm="syz.1.3797" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.897316][ T28] audit: type=1400 audit(2001049656.097:254): avc: denied { ioctl } for pid=8219 comm="syz.1.3797" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.910473][ T470] udevd[470]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 172.934638][ T466] udevd[466]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 172.953831][ T461] udevd[461]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 172.979735][ T28] audit: type=1326 audit(2001049656.193:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab778eec9 code=0x7ffc0000 [ 172.993923][ T466] udevd[466]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 173.020270][ T461] udevd[461]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 173.031645][ T470] udevd[470]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 173.105036][ T28] audit: type=1326 audit(2001049656.193:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab778eec9 code=0x7ffc0000 [ 173.169491][ T8252] loop1: detected capacity change from 0 to 8192 [ 173.178668][ T8262] SELinux: policydb string does not match my string SE Linux [ 173.196627][ T28] audit: type=1326 audit(2001049656.193:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4ab778eec9 code=0x7ffc0000 [ 173.237698][ T8262] SELinux: failed to load policy [ 173.249691][ T8214] loop4: detected capacity change from 0 to 32768 [ 173.265400][ T28] audit: type=1326 audit(2001049656.193:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab778eec9 code=0x7ffc0000 [ 173.363055][ T28] audit: type=1326 audit(2001049656.193:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.2.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab778eec9 code=0x7ffc0000 [ 173.437144][ T28] audit: type=1400 audit(2001049656.258:260): avc: denied { map } for pid=8236 comm="syz.2.3804" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 173.526639][ T28] audit: type=1400 audit(2001049656.333:261): avc: denied { write } for pid=8240 comm="syz.3.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.604255][ T28] audit: type=1400 audit(2001049656.376:262): avc: denied { write } for pid=8245 comm="syz.1.3809" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.646616][ T8302] loop2: detected capacity change from 0 to 512 [ 173.677797][ T28] audit: type=1400 audit(2001049656.579:263): avc: denied { load_policy } for pid=8261 comm="syz.2.3817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 173.736769][ T28] audit: type=1400 audit(2001049656.697:264): avc: denied { create } for pid=8265 comm="syz.1.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.777795][ T28] audit: type=1400 audit(2001049656.708:265): avc: denied { write } for pid=8265 comm="syz.1.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.782477][ T8302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.798631][ T28] audit: type=1400 audit(2001049656.848:266): avc: denied { setopt } for pid=8279 comm="syz.3.3827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.865422][ T8302] ext4 filesystem being mounted at /716/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.884282][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 173.940650][ T8302] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #12: comm syz.2.3837: corrupted xattr block 6 [ 174.000166][ T8302] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 174.014297][ T8302] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #12: comm syz.2.3837: corrupted xattr block 6 [ 174.052255][ T8302] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 174.072381][ T8325] loop3: detected capacity change from 0 to 256 [ 174.086899][ T8302] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #12: comm syz.2.3837: corrupted xattr block 6 [ 174.099075][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 174.111545][ T24] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 174.136560][ T24] usb 5-1: config 0 has no interface number 0 [ 174.140795][ T8327] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3848'. [ 174.152423][ T24] usb 5-1: config 0 interface 2 has no altsetting 0 [ 174.167682][ T24] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 174.182027][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3848'. [ 174.187046][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.202407][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3848'. [ 174.209563][ T24] usb 5-1: Product: syz [ 174.216723][ T24] usb 5-1: Manufacturer: syz [ 174.217078][ T287] EXT4-fs (loop2): unmounting filesystem. [ 174.229087][ T24] usb 5-1: SerialNumber: syz [ 174.242061][ T24] usb 5-1: config 0 descriptor?? [ 174.447051][ T24] usb 5-1: invalid MIDI in EP 0 [ 174.463589][ T24] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 174.483143][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 174.497449][ T8292] loop1: detected capacity change from 0 to 131072 [ 174.500168][ T24] usb 5-1: USB disconnect, device number 74 [ 174.539286][ T8292] F2FS-fs (loop1): Found nat_bits in checkpoint [ 174.583491][ T8292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 174.694723][ T2824] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 174.872884][ T2824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 174.895089][ T2824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 123, setting to 64 [ 174.920643][ T2824] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 174.935513][ T2824] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 174.952626][ T2824] usb 3-1: Manufacturer: syz [ 174.972352][ T2824] usb 3-1: SerialNumber: syz [ 174.985480][ T2824] usb 3-1: config 0 descriptor?? [ 174.996289][ T8341] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 175.009024][ T2824] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 175.096447][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3868'. [ 175.137242][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3868'. [ 175.156376][ T8379] usb usb8: usbfs: process 8379 (syz.4.3872) did not claim interface 0 before use [ 175.207642][ T2824] usb 3-1: USB disconnect, device number 78 [ 175.440374][ T8422] x_tables: duplicate underflow at hook 3 [ 175.448282][ T8424] x_tables: duplicate underflow at hook 2 [ 175.551618][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3898'. [ 176.011362][ T8491] loop3: detected capacity change from 0 to 256 [ 176.043527][ T8491] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.157849][ T8510] netlink: 'syz.2.3934': attribute type 13 has an invalid length. [ 176.178056][ T8510] gretap0: refused to change device tx_queue_len [ 176.184727][ T8510] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 176.211808][ T8515] xt_ecn: cannot match TCP bits for non-tcp packets [ 176.552351][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'. [ 176.745008][ T8584] x_tables: duplicate underflow at hook 4 [ 176.782440][ T8588] xt_CT: No such helper "snmp" [ 176.990485][ T8607] random: crng reseeded on system resumption [ 177.240312][ T8629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3991'. [ 177.276821][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3991'. [ 177.278008][ T8633] xt_l2tp: v2 doesn't support IP mode [ 177.311068][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3991'. [ 177.431363][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4000'. [ 177.716975][ T8680] tmpfs: Bad value for 'size' [ 178.067998][ T8407] loop1: detected capacity change from 0 to 262144 [ 178.118072][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 178.118097][ T28] audit: type=1400 audit(2001049661.880:296): avc: denied { mounton } for pid=8719 comm="syz.0.4036" path="/817/file1" dev="tmpfs" ino=4160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.149900][ T8407] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 178.385112][ T28] audit: type=1400 audit(2001049662.159:297): avc: denied { nlmsg_read } for pid=8751 comm="syz.4.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.385126][ T8754] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4051'. [ 178.515131][ T28] audit: type=1400 audit(2001049662.277:298): avc: denied { getopt } for pid=8763 comm="syz.1.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.576038][ T8778] loop1: detected capacity change from 0 to 512 [ 178.692437][ T8778] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 178.749615][ T8778] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 178.786931][ T8778] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4064: Corrupt directory, running e2fsck is recommended [ 178.811729][ T8801] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4073'. [ 178.848812][ T8778] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 178.878657][ T8778] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.4064: corrupted in-inode xattr [ 178.936451][ T8778] EXT4-fs (loop1): Remounting filesystem read-only [ 178.953639][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.964172][ T8778] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.4064: couldn't read orphan inode 15 (err -117) [ 178.981945][ T8808] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 179.022346][ T8778] EXT4-fs (loop1): Remounting filesystem read-only [ 179.033497][ T8778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.085362][ T28] audit: type=1400 audit(2001049662.920:299): avc: denied { remount } for pid=8777 comm="syz.1.4064" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 179.115100][ T8778] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 179.152337][ T8822] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 179.177942][ T28] audit: type=1400 audit(2001049662.995:300): avc: denied { write } for pid=8821 comm="syz.0.4086" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.210247][ T284] EXT4-fs (loop1): unmounting filesystem. [ 179.263764][ T8830] binfmt_misc: register: failed to install interpreter file ./file0 [ 179.280867][ T28] audit: type=1400 audit(2001049662.995:301): avc: denied { open } for pid=8821 comm="syz.0.4086" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.532461][ T8860] loop1: detected capacity change from 0 to 256 [ 179.569065][ T8864] xt_l2tp: wrong L2TP version: 0 [ 179.579499][ T8860] FAT-fs (loop1): Directory bread(block 64) failed [ 179.625410][ T8860] FAT-fs (loop1): Directory bread(block 65) failed [ 179.632840][ T8860] FAT-fs (loop1): Directory bread(block 66) failed [ 179.670413][ T8870] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 179.690655][ T8860] FAT-fs (loop1): Directory bread(block 67) failed [ 179.706674][ T8860] FAT-fs (loop1): Directory bread(block 68) failed [ 179.734190][ T8860] FAT-fs (loop1): Directory bread(block 69) failed [ 179.760345][ T8860] FAT-fs (loop1): Directory bread(block 70) failed [ 179.761753][ T8876] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4112'. [ 179.779874][ T8870] syz.4.4109 (8870) used greatest stack depth: 20768 bytes left [ 179.791968][ T8860] FAT-fs (loop1): Directory bread(block 71) failed [ 179.823258][ T8860] FAT-fs (loop1): Directory bread(block 72) failed [ 179.848422][ T28] audit: type=1400 audit(2001049663.736:302): avc: denied { ioctl } for pid=8879 comm="syz.4.4114" path="socket:[41373]" dev="sockfs" ino=41373 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.859899][ T8860] FAT-fs (loop1): Directory bread(block 73) failed [ 179.920860][ T8887] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4116'. [ 180.005716][ T8896] netlink: 'syz.3.4121': attribute type 1 has an invalid length. [ 180.100460][ T8903] loop4: detected capacity change from 0 to 512 [ 180.127845][ T8903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.156763][ T8912] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 180.185147][ T8903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 180.193449][ T8903] System zones: 1-12 [ 180.199696][ T8903] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.214058][ T8903] EXT4-fs (loop4): 1 truncate cleaned up [ 180.221349][ T8903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.260939][ T288] EXT4-fs (loop4): unmounting filesystem. [ 180.300778][ T8933] xt_hashlimit: size too large, truncated to 1048576 [ 180.318913][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4140'. [ 180.328706][ T8933] xt_hashlimit: max too large, truncated to 1048576 [ 180.364154][ T8944] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4145'. [ 180.409460][ T8949] netlink: 'syz.1.4148': attribute type 5 has an invalid length. [ 180.528453][ T28] audit: type=1400 audit(2001049664.465:303): avc: denied { setopt } for pid=8970 comm="syz.4.4159" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.602955][ T28] audit: type=1400 audit(2001049664.497:304): avc: denied { read append } for pid=8972 comm="syz.1.4160" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.717816][ T28] audit: type=1400 audit(2001049664.497:305): avc: denied { open } for pid=8972 comm="syz.1.4160" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.788904][ T9006] device sit0 entered promiscuous mode [ 180.847560][ T9012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.863715][ T9015] loop4: detected capacity change from 0 to 512 [ 180.910321][ T9015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.936920][ T9015] ext4 filesystem being mounted at /836/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.990936][ T288] EXT4-fs (loop4): unmounting filesystem. [ 181.069062][ T9043] random: crng reseeded on system resumption [ 181.208708][ T203] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.374172][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.389810][ T9088] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 181.490859][ T9102] device bridge1 entered promiscuous mode [ 181.531664][ T9110] device sit0 entered promiscuous mode [ 181.620255][ T6] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 181.741435][ T9148] syz.4.4246 (9148): /proc/9146/oom_adj is deprecated, please use /proc/9146/oom_score_adj instead. [ 181.763527][ T9153] loop2: detected capacity change from 0 to 512 [ 181.798284][ T9153] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.816639][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 181.821653][ T9153] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 181.841603][ T9153] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4248: Corrupt directory, running e2fsck is recommended [ 181.856096][ T9153] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 181.856330][ T6] usb 2-1: config 0 interface 0 altsetting 66 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 181.877958][ T9153] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.4248: corrupted in-inode xattr [ 181.916523][ T9153] EXT4-fs (loop2): Remounting filesystem read-only [ 181.927077][ T9153] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4248: couldn't read orphan inode 15 (err -117) [ 181.938356][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.952538][ T9175] netlink: 'syz.3.4258': attribute type 5 has an invalid length. [ 181.953712][ T9153] EXT4-fs (loop2): Remounting filesystem read-only [ 181.978960][ T9153] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.988805][ T6] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 181.991499][ T9179] netlink: 'syz.0.4259': attribute type 29 has an invalid length. [ 181.999881][ T9175] __nla_validate_parse: 11 callbacks suppressed [ 181.999900][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4258'. [ 182.021484][ T9179] netlink: 'syz.0.4259': attribute type 3 has an invalid length. [ 182.034241][ T9153] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 182.038370][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.052149][ T6] usb 2-1: config 0 descriptor?? [ 182.068251][ T9179] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4259'. [ 182.068438][ T287] EXT4-fs (loop2): unmounting filesystem. [ 182.246480][ T6] usb 2-1: string descriptor 0 read error: -71 [ 182.268490][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 182.286341][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 182.306972][ T6] usb 2-1: USB disconnect, device number 77 [ 182.325469][ T9214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 185.837330][ T9237] loop4: detected capacity change from 0 to 1024 [ 185.857993][ T9238] loop2: detected capacity change from 0 to 256 [ 185.919453][ T9237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.947361][ T9238] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 185.992394][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 185.992411][ T28] audit: type=1400 audit(2001049670.334:323): avc: denied { read } for pid=9244 comm="syz.0.4292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 186.047791][ T9237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 186.065086][ T9247] loop3: detected capacity change from 0 to 4096 [ 186.173139][ T9247] EXT4-fs (loop3): Test dummy encryption mode enabled [ 186.185308][ T28] audit: type=1400 audit(2001049670.398:324): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="loop2" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.209177][ T28] audit: type=1400 audit(2001049670.398:325): avc: denied { rmdir } for pid=287 comm="syz-executor" name="file0" dev="loop2" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.232040][ T28] audit: type=1400 audit(2001049670.484:326): avc: denied { write } for pid=9232 comm="syz.4.4287" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.233494][ T288] EXT4-fs (loop4): unmounting filesystem. [ 186.254226][ T28] audit: type=1400 audit(2001049670.484:327): avc: denied { remove_name } for pid=9232 comm="syz.4.4287" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.254264][ T28] audit: type=1400 audit(2001049670.495:328): avc: denied { rename } for pid=9232 comm="syz.4.4287" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.254291][ T28] audit: type=1400 audit(2001049670.495:329): avc: denied { add_name } for pid=9232 comm="syz.4.4287" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.331886][ T28] audit: type=1400 audit(2001049670.495:330): avc: denied { unlink } for pid=9232 comm="syz.4.4287" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.333153][ T9247] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 186.372594][ T9247] System zones: 0-5 [ 186.442313][ T9275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.453936][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.465079][ T9275] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 186.472874][ T9278] Driver unsupported XDP return value 0 on prog (id 423) dev N/A, expect packet loss! [ 186.484308][ T9247] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.496440][ T9280] xt_hashlimit: max too large, truncated to 1048576 [ 186.511100][ T9280] xt_bpf: check failed: parse error [ 186.538464][ T9283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4309'. [ 186.566535][ T9286] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4310'. [ 186.587010][ T9286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4310'. [ 186.598545][ T285] EXT4-fs (loop3): unmounting filesystem. [ 186.616423][ T9286] device vlan0 entered promiscuous mode [ 186.640814][ T9291] loop3: detected capacity change from 0 to 1024 [ 186.684014][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4316'. [ 186.684992][ T9291] EXT4-fs: Ignoring removed orlov option [ 186.754020][ T9291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.839914][ T285] EXT4-fs (loop3): unmounting filesystem. [ 186.906113][ T28] audit: type=1400 audit(2001049671.310:331): avc: denied { bind } for pid=9330 comm="syz.3.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.959532][ T9340] loop3: detected capacity change from 0 to 16 [ 186.968600][ T28] audit: type=1400 audit(2001049671.332:332): avc: denied { name_bind } for pid=9330 comm="syz.3.4331" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 186.999589][ T9340] erofs: (device loop3): mounted with root inode @ nid 36. [ 187.037926][ T9340] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 187.067822][ T9340] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 187.089707][ T9340] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 187.164270][ T9366] loop3: detected capacity change from 0 to 1024 [ 187.176606][ T9366] EXT4-fs: Ignoring removed i_version option [ 187.197710][ T9371] loop4: detected capacity change from 0 to 256 [ 187.210413][ T9366] EXT4-fs (loop3): Test dummy encryption mode enabled [ 187.241132][ T9378] device vlan1 entered promiscuous mode [ 187.248317][ T9366] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.294192][ T285] EXT4-fs (loop3): unmounting filesystem. [ 187.591208][ T9437] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.716855][ T9460] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4394'. [ 187.726597][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4394'. [ 187.762154][ T9463] device gre1 entered promiscuous mode [ 187.857196][ T9481] loop3: detected capacity change from 0 to 256 [ 187.897310][ T9481] FAT-fs (loop3): Directory bread(block 64) failed [ 187.927721][ T9481] FAT-fs (loop3): Directory bread(block 65) failed [ 187.942477][ T9481] FAT-fs (loop3): Directory bread(block 66) failed [ 187.949154][ T9481] FAT-fs (loop3): Directory bread(block 67) failed [ 187.956021][ T9481] FAT-fs (loop3): Directory bread(block 68) failed [ 187.977902][ T9503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4416'. [ 187.980294][ T9481] FAT-fs (loop3): Directory bread(block 69) failed [ 188.012986][ T9481] FAT-fs (loop3): Directory bread(block 70) failed [ 188.022603][ T9481] FAT-fs (loop3): Directory bread(block 71) failed [ 188.029506][ T9481] FAT-fs (loop3): Directory bread(block 72) failed [ 188.067192][ T9481] FAT-fs (loop3): Directory bread(block 73) failed [ 188.237221][ T9542] loop4: detected capacity change from 0 to 128 [ 188.301389][ T9542] syz.4.4436: attempt to access beyond end of device [ 188.301389][ T9542] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 188.320423][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4442'. [ 188.416637][ T9571] mmap: syz.2.4445 (9571): VmData 29085696 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 188.765207][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 188.842805][ T9644] xt_connbytes: Forcing CT accounting to be enabled [ 188.853140][ T9644] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 188.871450][ T6] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 189.039502][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 189.088200][ T6] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 189.103266][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.117596][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 189.140059][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.159243][ T6] usb 5-1: config 0 descriptor?? [ 189.169228][ T9602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.182265][ T318] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 189.294899][ T9723] loop1: detected capacity change from 0 to 128 [ 189.318466][ T9723] syz.1.4525: attempt to access beyond end of device [ 189.318466][ T9723] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 189.393114][ T318] usb 1-1: Using ep0 maxpacket: 32 [ 189.400428][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 189.408020][ T318] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 189.421407][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 189.437762][ T318] usb 1-1: config 4 has no interface number 0 [ 189.444631][ T6] usb 5-1: USB disconnect, device number 75 [ 189.458340][ T318] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.477455][ T318] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.493345][ T9747] loop1: detected capacity change from 0 to 512 [ 189.505430][ T318] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.514795][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.535410][ T318] hub 1-1:4.128: USB hub found [ 189.541226][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'. [ 189.550536][ T9747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.605748][ T9747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.649331][ T9768] IPv6: NLM_F_REPLACE set, but no existing node found! [ 189.658806][ T284] EXT4-fs (loop1): unmounting filesystem. [ 189.722873][ T318] hub 1-1:4.128: 2 ports detected [ 189.732398][ T318] hub 1-1:4.128: Using single TT (err -22) [ 189.873964][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4561'. [ 189.877880][ T19] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 189.910937][ T318] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 189.918231][ T318] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 189.948673][ T9809] loop3: detected capacity change from 0 to 16 [ 189.955612][ T9809] erofs: (device loop3): mounted with root inode @ nid 36. [ 189.967250][ T9809] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 189.972011][ T318] usb 1-1: USB disconnect, device number 73 [ 189.979323][ T9809] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 189.997111][ T9809] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-95] [ 190.041394][ T9818] fuse: blksize only supported for fuseblk [ 190.083185][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 190.092982][ T19] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 190.101204][ T19] usb 3-1: config 0 has no interface number 0 [ 190.107804][ T19] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.130116][ T19] usb 3-1: config 0 interface 2 has no altsetting 0 [ 190.144232][ T19] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 190.153603][ T9834] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.161681][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.176722][ T19] usb 3-1: Product: syz [ 190.181216][ T19] usb 3-1: Manufacturer: syz [ 190.188575][ T19] usb 3-1: SerialNumber: syz [ 190.204690][ T19] usb 3-1: config 0 descriptor?? [ 190.256531][ T9846] xt_TCPMSS: Only works on TCP SYN packets [ 190.304798][ T9852] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 190.456960][ T9867] x_tables: unsorted underflow at hook 2 [ 190.589493][ T9880] SELinux: failed to load policy [ 190.590784][ T19] usb 3-1: USB disconnect, device number 79 [ 190.653639][ T9889] loop3: detected capacity change from 0 to 512 [ 190.675114][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 190.675130][ T28] audit: type=1400 audit(188.736:388): avc: denied { mounton } for pid=9887 comm="syz.3.4602" path="/1040/bus" dev="tmpfs" ino=5303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 190.722464][ T9889] EXT4-fs (loop3): Test dummy encryption mode enabled [ 190.740780][ T9889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.756047][ T9897] netlink: 'syz.1.4606': attribute type 16 has an invalid length. [ 190.773273][ T9897] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4606'. [ 190.794750][ T9889] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.4602: bad orphan inode 131083 [ 190.811014][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 190.832784][ T9889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.843716][ T28] audit: type=1400 audit(188.918:389): avc: denied { mount } for pid=9887 comm="syz.3.4602" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 190.908367][ T9889] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 190.926432][ T28] audit: type=1400 audit(188.983:390): avc: denied { map_create } for pid=9905 comm="syz.1.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.945196][ T28] audit: type=1400 audit(188.983:391): avc: denied { map_read map_write } for pid=9905 comm="syz.1.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.974744][ T28] audit: type=1400 audit(188.983:392): avc: denied { write } for pid=9887 comm="syz.3.4602" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.997913][ T285] EXT4-fs (loop3): unmounting filesystem. [ 191.013870][ T28] audit: type=1400 audit(188.983:393): avc: denied { add_name } for pid=9887 comm="syz.3.4602" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.050943][ T28] audit: type=1400 audit(188.983:394): avc: denied { create } for pid=9887 comm="syz.3.4602" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 191.072343][ T28] audit: type=1400 audit(188.983:395): avc: denied { module_request } for pid=9887 comm="syz.3.4602" kmod="crypto-cryptd(__cts-cbc-aes-aesni)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 191.150977][ T28] audit: type=1400 audit(189.058:396): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 191.186665][ T28] audit: type=1400 audit(189.090:397): avc: denied { read } for pid=9910 comm="syz.1.4615" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 191.220421][ T9925] netlink: 'syz.2.4621': attribute type 12 has an invalid length. [ 191.381341][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4631'. [ 191.408365][ T9953] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 191.507003][ T9964] Unsupported ieee802154 address type: 0 [ 191.595704][ T9976] loop2: detected capacity change from 0 to 256 [ 191.629378][ T9976] FAT-fs (loop2): Directory bread(block 64) failed [ 191.638262][ T9976] FAT-fs (loop2): Directory bread(block 65) failed [ 191.638319][ T9976] FAT-fs (loop2): Directory bread(block 66) failed [ 191.638342][ T9976] FAT-fs (loop2): Directory bread(block 67) failed [ 191.638431][ T9976] FAT-fs (loop2): Directory bread(block 68) failed [ 191.638455][ T9976] FAT-fs (loop2): Directory bread(block 69) failed [ 191.638495][ T9976] FAT-fs (loop2): Directory bread(block 70) failed [ 191.638516][ T9976] FAT-fs (loop2): Directory bread(block 71) failed [ 191.638553][ T9976] FAT-fs (loop2): Directory bread(block 72) failed [ 191.638575][ T9976] FAT-fs (loop2): Directory bread(block 73) failed [ 191.795920][T10004] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.986167][T10040] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4677'. [ 192.004633][T10046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4679'. [ 192.013900][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4677'. [ 192.029821][T10040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4677'. [ 192.049552][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4677'. [ 192.124984][T10064] loop3: detected capacity change from 0 to 128 [ 192.146795][T10066] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4688'. [ 192.180994][T10064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 192.185520][T10073] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.238381][T10064] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.4687: bg 0: bad block bitmap checksum [ 192.280018][T10086] loop4: detected capacity change from 0 to 256 [ 192.290405][ T285] EXT4-fs (loop3): unmounting filesystem. [ 192.301015][T10086] exfat: Deprecated parameter 'namecase' [ 192.309721][T10086] exfat: Deprecated parameter 'utf8' [ 192.315917][T10086] exfat: Deprecated parameter 'namecase' [ 192.327343][T10086] exfat: Deprecated parameter 'utf8' [ 192.351209][T10086] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 192.412064][T10101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4705'. [ 192.422912][T10101] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4705'. [ 192.491185][T10115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.499400][T10115] IPv6: NLM_F_CREATE should be set when creating new route [ 192.698084][T10157] netlink: 'syz.0.4733': attribute type 15 has an invalid length. [ 192.709492][T10159] netlink: 'syz.3.4734': attribute type 7 has an invalid length. [ 192.806296][T10178] sock: sock_timestamping_bind_phc: sock not bind to device [ 192.868870][T10187] netlink: 'syz.0.4749': attribute type 13 has an invalid length. [ 192.897633][ T335] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 192.994153][T10212] netlink: 'syz.3.4760': attribute type 5 has an invalid length. [ 193.035384][T10216] loop1: detected capacity change from 0 to 512 [ 193.079874][T10223] netlink: 'syz.0.4766': attribute type 9 has an invalid length. [ 193.083215][T10216] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.096016][T10223] netlink: 'syz.0.4766': attribute type 7 has an invalid length. [ 193.097777][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 193.110445][T10223] netlink: 'syz.0.4766': attribute type 8 has an invalid length. [ 193.116080][T10216] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.4761: Failed to acquire dquot type 1 [ 193.130930][T10216] EXT4-fs (loop1): 1 truncate cleaned up [ 193.137637][T10216] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.154302][ T335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 193.174791][ T335] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 193.183282][ T335] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 193.194624][ T335] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 193.204025][ T335] usb 3-1: config 128 has no interface number 0 [ 193.210994][ T335] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 73, changing to 10 [ 193.222773][ T335] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59148, setting to 1024 [ 193.223403][ T284] EXT4-fs (loop1): unmounting filesystem. [ 193.234506][ T335] usb 3-1: config 128 interface 127 has no altsetting 0 [ 193.243706][T10237] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4772'. [ 193.262465][T10237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.279284][ T335] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 193.292870][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.319428][ T335] usb 3-1: Product: syz [ 193.323664][ T335] usb 3-1: Manufacturer: syz [ 193.350884][ T335] usb 3-1: SerialNumber: syz [ 193.370462][T10145] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 193.478841][T10271] tc_dump_action: action bad kind [ 193.513583][T10277] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 193.553690][T10283] netlink: 'syz.3.4795': attribute type 13 has an invalid length. [ 193.592486][ T335] usb 3-1: USB disconnect, device number 80 [ 193.606702][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 193.607037][T10289] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 193.650693][T10289] device gretap1 entered promiscuous mode [ 193.718249][ T444] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 193.805532][T10319] device sit0 left promiscuous mode [ 193.813565][T10319] device bridge_slave_0 left promiscuous mode [ 193.821203][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.834973][T10319] device gre1 left promiscuous mode [ 193.841945][T10319] device gretap1 left promiscuous mode [ 193.854430][T10320] device sit0 left promiscuous mode [ 193.860906][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.881094][T10320] device gre1 left promiscuous mode [ 193.933922][ T444] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 193.953983][ T444] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.964547][ T444] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 194.007972][ T444] usb 2-1: string descriptor 0 read error: -22 [ 194.024429][ T444] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.037352][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.051338][T10267] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 194.069323][ T444] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 194.263140][ T444] usb 2-1: USB disconnect, device number 78 [ 194.276136][T10383] xt_CT: No such helper "netbios-ns" [ 194.553609][T10429] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 194.593272][T10437] sock: sock_timestamping_bind_phc: sock not bind to device [ 194.605844][T10436] loop2: detected capacity change from 0 to 1024 [ 194.615453][T10439] device vlan0 entered promiscuous mode [ 194.645869][T10436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.665692][ T287] EXT4-fs (loop2): unmounting filesystem. [ 194.889862][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.909276][T10489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.928863][T10489] device vlan0 left promiscuous mode [ 194.934921][T10489] device vlan1 left promiscuous mode [ 194.942445][T10489] device bridge1 left promiscuous mode [ 195.002562][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.139150][T10527] xt_CT: No such helper "pptp" [ 195.435592][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 195.435610][ T28] audit: type=1400 audit(193.854:466): avc: denied { name_bind } for pid=10574 comm="syz.2.4937" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 195.446704][T10579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.651204][ T28] audit: type=1400 audit(194.079:467): avc: denied { bind } for pid=10611 comm="syz.1.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.772748][T10629] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 195.834424][ T335] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 195.860253][ T28] audit: type=1400 audit(194.294:468): avc: denied { sqpoll } for pid=10636 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 195.972856][ T28] audit: type=1326 audit(194.422:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.0.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908698eec9 code=0x7ffc0000 [ 196.023138][ T28] audit: type=1326 audit(194.422:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.0.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908698eec9 code=0x7ffc0000 [ 196.049021][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 196.066989][ T335] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 196.093399][ T335] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 196.114009][ T28] audit: type=1326 audit(194.444:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.0.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f908698eec9 code=0x7ffc0000 [ 196.148761][ T335] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.171658][ T335] usb 3-1: config 1 has no interface number 1 [ 196.188459][ T28] audit: type=1326 audit(194.444:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.0.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908698eec9 code=0x7ffc0000 [ 196.215052][ T335] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.248723][ T335] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 768, setting to 64 [ 196.264046][ T28] audit: type=1326 audit(194.444:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.0.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908698eec9 code=0x7ffc0000 [ 196.297105][ T335] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.318437][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.346301][ T335] usb 3-1: Product: syz [ 196.351306][ T335] usb 3-1: Manufacturer: syz [ 196.366354][ T335] usb 3-1: SerialNumber: syz [ 196.385676][T10699] __nla_validate_parse: 9 callbacks suppressed [ 196.385695][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4997'. [ 196.427083][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4997'. [ 196.479156][T10709] loop3: detected capacity change from 0 to 512 [ 196.495851][T10709] EXT4-fs: Ignoring removed nobh option [ 196.533065][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5007'. [ 196.564123][T10709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.5003: corrupted inode contents [ 196.590424][ T335] usb 3-1: USB disconnect, device number 81 [ 196.599288][T10709] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #3: comm syz.3.5003: mark_inode_dirty error [ 196.613533][T10709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #3: comm syz.3.5003: corrupted inode contents [ 196.659681][T10709] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.5003: mark_inode_dirty error [ 196.729797][T10705] loop1: detected capacity change from 0 to 40427 [ 196.733103][T10709] Quota error (device loop3): write_blk: dquota write failed [ 196.746560][T10709] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 196.760138][T10705] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 196.770809][T10709] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.5003: Failed to acquire dquot type 0 [ 196.773459][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5015'. [ 196.783026][T10705] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.804413][T10709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.5003: corrupted inode contents [ 196.822515][T10705] F2FS-fs (loop1): invalid crc value [ 196.826518][ T461] udevd[461]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.844842][T10709] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.5003: mark_inode_dirty error [ 196.865516][T10709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.5003: corrupted inode contents [ 196.877842][T10705] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.898571][T10709] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.5003: mark_inode_dirty error [ 196.918046][T10746] validate_nla: 3 callbacks suppressed [ 196.918064][T10746] netlink: 'syz.0.5018': attribute type 32 has an invalid length. [ 196.934439][T10709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.5003: corrupted inode contents [ 196.961925][T10709] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 196.967767][T10749] device ip6gre1 entered promiscuous mode [ 196.971792][T10709] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.5003: corrupted inode contents [ 196.989725][T10709] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.5003: mark_inode_dirty error [ 197.003632][T10705] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 197.003973][T10709] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 197.020082][T10705] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.020524][T10709] EXT4-fs (loop3): 1 truncate cleaned up [ 197.035839][T10709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 197.106995][T10759] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5025'. [ 197.147437][T10709] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.5003: Failed to acquire dquot type 1 [ 197.160896][ T284] syz-executor: attempt to access beyond end of device [ 197.160896][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.205276][ T285] EXT4-fs (loop3): unmounting filesystem. [ 197.223221][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 197.647710][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5084'. [ 197.723765][T10899] IPv6: sit1: Disabled Multicast RS [ 197.921962][T10955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5123'. [ 197.938333][T10955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5123'. [ 197.955469][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5123'. [ 198.041117][T10982] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 198.172164][T11015] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.262699][T11039] netlink: 'syz.0.5165': attribute type 32 has an invalid length. [ 198.322259][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5171'. [ 198.373624][T11069] xt_TCPMSS: Only works on TCP SYN packets [ 198.444607][T11083] device bridge2 entered promiscuous mode [ 198.570088][T11119] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 198.593232][T11124] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 198.638563][T11135] device vlan0 entered promiscuous mode [ 198.684607][T11145] tc_dump_action: action bad kind [ 198.733988][T11156] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 198.788220][T11161] netlink: 'syz.3.5226': attribute type 27 has an invalid length. [ 199.227629][T11243] device bridge1 entered promiscuous mode [ 199.712821][T11347] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 199.790225][T11365] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 200.108438][T11441] device bridge3 entered promiscuous mode [ 200.114558][ T28] kauditd_printk_skb: 405 callbacks suppressed [ 200.114575][ T28] audit: type=1400 audit(198.854:876): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.147966][ T28] audit: type=1400 audit(198.875:877): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.175469][ T28] audit: type=1400 audit(198.875:878): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.204951][ T28] audit: type=1400 audit(198.907:879): avc: denied { create } for pid=11447 comm="syz.0.5369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 200.230477][ T28] audit: type=1400 audit(198.907:880): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.257272][ T28] audit: type=1400 audit(198.939:881): avc: denied { unmount } for pid=11450 comm="syz.0.5370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0 [ 200.279803][ T28] audit: type=1400 audit(198.939:882): avc: denied { mounton } for pid=11450 comm="syz.0.5370" path="/syzcgroup/unified/syz0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 200.327646][ T28] audit: type=1400 audit(198.972:883): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.370354][ T28] audit: type=1400 audit(199.047:884): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.413004][ T28] audit: type=1400 audit(199.047:885): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 200.781059][T11573] netlink: 'syz.4.5431': attribute type 7 has an invalid length. [ 200.795490][T11573] netlink: 'syz.4.5431': attribute type 8 has an invalid length. [ 200.944339][T11608] xt_ecn: cannot match TCP bits for non-tcp packets [ 201.033391][T11620] netlink: 'syz.4.5454': attribute type 3 has an invalid length. [ 201.043429][T11620] netlink: 'syz.4.5454': attribute type 3 has an invalid length. [ 201.117021][T11632] netlink: 'syz.4.5459': attribute type 2 has an invalid length. [ 201.519243][T11705] __nla_validate_parse: 8 callbacks suppressed [ 201.519262][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5496'. [ 201.538023][T11705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5496'. [ 201.764224][T11769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.771811][T11769] IPv6: NLM_F_CREATE should be set when creating new route [ 201.779283][T11769] IPv6: NLM_F_CREATE should be set when creating new route [ 201.846364][T11790] ipt_REJECT: ECHOREPLY no longer supported. [ 201.882043][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5543'. [ 201.906755][T11805] device ipip0 entered promiscuous mode [ 201.986694][T11825] xt_connbytes: Forcing CT accounting to be enabled [ 202.468324][T11965] device ipip0 entered promiscuous mode [ 202.502893][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5630'. [ 202.513263][T11973] netlink: 'syz.0.5629': attribute type 3 has an invalid length. [ 202.722444][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 202.740666][T12034] xt_TCPMSS: Only works on TCP SYN packets [ 202.872060][T12064] netlink: 'syz.1.5674': attribute type 1 has an invalid length. [ 202.929063][T12072] netlink: 'syz.3.5678': attribute type 11 has an invalid length. [ 202.937501][T12073] netlink: 'syz.4.5679': attribute type 11 has an invalid length. [ 202.973935][T12077] netlink: 'syz.4.5681': attribute type 3 has an invalid length. [ 203.045347][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5691'. [ 203.098861][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5697'. [ 203.117878][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5697'. [ 203.139301][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5697'. [ 203.150496][T12109] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 203.165382][T12115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5700'. [ 203.232969][T12126] netlink: 'syz.1.5704': attribute type 5 has an invalid length. [ 203.305956][T12147] netlink: 'syz.0.5716': attribute type 11 has an invalid length. [ 203.327675][T12152] netlink: 'syz.2.5720': attribute type 3 has an invalid length. [ 203.341131][T12155] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.357295][T12155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.365161][T12155] IPv6: NLM_F_CREATE should be set when creating new route [ 203.455220][T12175] xt_TCPMSS: Only works on TCP SYN packets [ 203.848393][T12281] netlink: 'syz.0.5783': attribute type 3 has an invalid length. [ 204.059145][T12344] IPv6: sit2: Disabled Multicast RS [ 204.098606][T12353] xt_TCPMSS: Only works on TCP SYN packets [ 204.397586][T12421] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 204.443794][T12433] ip6t_REJECT: ECHOREPLY is not supported [ 204.455961][T12435] xt_TCPMSS: Only works on TCP SYN packets [ 204.488973][T12443] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 204.782256][ T28] kauditd_printk_skb: 623 callbacks suppressed [ 204.782274][ T28] audit: type=1400 audit(203.875:1509): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.817693][ T28] audit: type=1400 audit(203.885:1510): avc: granted { setsecparam } for pid=12482 comm="syz.3.5882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 204.842489][ T28] audit: type=1400 audit(203.885:1511): avc: granted { setsecparam } for pid=12482 comm="syz.3.5882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 204.844646][T12489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.862337][ T28] audit: type=1400 audit(203.896:1512): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.901548][ T28] audit: type=1400 audit(203.907:1513): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.926745][ T28] audit: type=1400 audit(203.918:1514): avc: denied { read write } for pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.969445][ T28] audit: type=1400 audit(203.939:1515): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 204.993780][ T28] audit: type=1400 audit(204.014:1516): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.030635][ T28] audit: type=1400 audit(204.079:1517): avc: denied { read write } for pid=284 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.056065][ T28] audit: type=1400 audit(204.079:1518): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 205.470577][T12578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.951539][T12704] xt_TCPMSS: Only works on TCP SYN packets [ 206.095421][T12732] device veth0_vlan left promiscuous mode [ 206.110953][T12732] device veth0_vlan entered promiscuous mode [ 206.119373][T12732] device veth1_macvtap left promiscuous mode [ 206.127328][T12732] device veth1_macvtap entered promiscuous mode [ 206.136908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.145035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.154229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.164434][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.172659][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.205911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.224323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.235080][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.242281][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.250679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.259270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 206.268420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.277866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 206.287110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.296337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.299888][T12753] xt_TCPMSS: Only works on TCP SYN packets [ 206.305529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.319098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.328826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.337375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.350756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.366506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.374945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.384190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.394243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.402593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.411855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.422006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.435830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.446747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.462028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.471365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.484776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.495478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 206.504589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.516145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.525500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.713542][T12801] __nla_validate_parse: 16 callbacks suppressed [ 206.713562][T12801] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6039'. [ 206.742246][T12801] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6039'. [ 206.766372][T12801] netlink: 'syz.3.6039': attribute type 3 has an invalid length. [ 206.775744][T12801] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6039'. [ 207.017152][T12848] xt_TCPMSS: Only works on TCP SYN packets [ 207.176901][ T6345] ------------[ cut here ]------------ [ 207.183030][ T6345] kernel BUG at fs/buffer.c:2714! [ 207.201310][T12882] ipt_REJECT: TCP_RESET invalid for non-tcp [ 207.214907][ T6345] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 207.221115][ T6345] CPU: 0 PID: 6345 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 207.228792][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.239138][ T6345] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 207.245363][ T6345] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 2f e8 ff e9 b0 fe ff ff e8 9e c0 a3 ff 0f 0b e8 97 c0 a3 ff <0f> 0b e8 90 c0 a3 ff 0f 0b e8 89 c0 a3 ff 0f 0b e8 82 c0 a3 ff 0f [ 207.265617][ T6345] RSP: 0018:ffffc900126a7ca0 EFLAGS: 00010293 [ 207.267832][T12889] validate_nla: 1 callbacks suppressed [ 207.267865][T12889] netlink: 'syz.3.6084': attribute type 15 has an invalid length. [ 207.272067][ T6345] RAX: ffffffff81cc5d69 RBX: 0000000000000000 RCX: ffff888114ef0000 [ 207.272087][ T6345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.272099][ T6345] RBP: ffffc900126a7cf0 R08: dffffc0000000000 R09: ffffed1022d76e55 [ 207.272113][ T6345] R10: ffffed1022d76e55 R11: 1ffff11022d76e54 R12: 0000000000000000 [ 207.272127][ T6345] R13: 1ffff11022d76e54 R14: ffff888116bb72a0 R15: 0000000000003801 [ 207.272143][ T6345] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 207.272161][ T6345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.344907][ T6345] CR2: 00007f3370fe7dac CR3: 000000011839f000 CR4: 00000000003506b0 [ 207.354050][ T6345] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.363572][ T6345] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.373065][ T6345] Call Trace: [ 207.376666][ T6345] [ 207.380047][ T6345] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 207.385970][ T6345] submit_bh+0x1f/0x30 [ 207.390648][ T6345] write_mmp_block_thawed+0x34a/0x4c0 [ 207.396553][ T6345] ? read_mmp_block+0x6d0/0x6d0 [ 207.401413][ T6345] ? __cfi_process_timeout+0x10/0x10 [ 207.406806][ T6345] write_mmp_block+0x138/0x2b0 [ 207.411855][ T6345] kmmpd+0x3ce/0x950 [ 207.415789][ T6345] kthread+0x281/0x320 [ 207.420718][ T6345] ? __cfi_kmmpd+0x10/0x10 [ 207.425334][ T6345] ? __cfi_kthread+0x10/0x10 [ 207.430662][ T6345] ret_from_fork+0x1f/0x30 [ 207.435681][ T6345] [ 207.438837][ T6345] Modules linked in: [ 207.444236][T12898] device bridge_slave_1 left promiscuous mode [ 207.450969][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.461906][ T6345] ---[ end trace 0000000000000000 ]--- [ 207.474484][ T6345] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 207.480632][ T6345] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 2f e8 ff e9 b0 fe ff ff e8 9e c0 a3 ff 0f 0b e8 97 c0 a3 ff <0f> 0b e8 90 c0 a3 ff 0f 0b e8 89 c0 a3 ff 0f 0b e8 82 c0 a3 ff 0f [ 207.500553][ T6345] RSP: 0018:ffffc900126a7ca0 EFLAGS: 00010293 [ 207.500808][T12898] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 207.507088][ T6345] RAX: ffffffff81cc5d69 RBX: 0000000000000000 RCX: ffff888114ef0000 [ 207.532181][ T6345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.540635][ T6345] RBP: ffffc900126a7cf0 R08: dffffc0000000000 R09: ffffed1022d76e55 [ 207.549290][ T6345] R10: ffffed1022d76e55 R11: 1ffff11022d76e54 R12: 0000000000000000 [ 207.557508][ T6345] R13: 1ffff11022d76e54 R14: ffff888116bb72a0 R15: 0000000000003801 [ 207.566148][ T6345] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 207.576468][ T6345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.583464][ T6345] CR2: 00007fddc320ef98 CR3: 0000000112393000 CR4: 00000000003506b0 [ 207.592377][ T6345] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.600675][ T6345] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.608799][ T6345] Kernel panic - not syncing: Fatal exception [ 207.615337][ T6345] Kernel Offset: disabled [ 207.619941][ T6345] Rebooting in 86400 seconds..