last executing test programs: 1.053493444s ago: executing program 3 (id=5999): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7ff}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa3}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 994.407646ms ago: executing program 3 (id=6002): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42080, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x105, 0xfffffffffffffffa}) 966.167017ms ago: executing program 3 (id=6005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 940.333088ms ago: executing program 3 (id=6007): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x47, &(0x7f0000003fc0)}, 0xe) 899.82572ms ago: executing program 3 (id=6008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newtaction={0x78, 0x1e, 0x109, 0x102, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "ab24"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x78}, 0x1, 0x2b1e, 0x0, 0x10}, 0x2000c054) 683.045827ms ago: executing program 3 (id=6026): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x8c, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xffad, 0xa001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x6, 0xb0, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0xa, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0xc, 0x1a, 0xa6}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x1ff, 0xf, 0x6, 0x0, 0x7}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x8, 0xe, {0x8, 0x25, 0x1, 0x2, 0x3, 0xd, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x2, 0x7, {0x8, 0x25, 0x1, 0x81, 0xc, 0xb9, 0x6}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x8d, 0x5, 0x4, 0xff, 0x3}, 0x0, 0x0}) 332.550549ms ago: executing program 1 (id=6054): setreuid(0x0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 286.830271ms ago: executing program 1 (id=6056): r0 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) 286.42163ms ago: executing program 1 (id=6057): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0) 245.698852ms ago: executing program 1 (id=6059): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 245.271682ms ago: executing program 0 (id=6060): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 216.521793ms ago: executing program 1 (id=6062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 207.304613ms ago: executing program 0 (id=6063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x25, &(0x7f00000001c0), 0xc7) 156.664305ms ago: executing program 0 (id=6068): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0baa48c7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 155.337285ms ago: executing program 4 (id=6069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x3c, 0x13, 0x1, 0x3000000, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x3c}}, 0x0) 134.526665ms ago: executing program 2 (id=6070): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x3) 133.546845ms ago: executing program 4 (id=6071): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x0, {0x2, 0xfffe, @multicast1=0xe000cc02}, 'pim6reg\x00'}) 116.913457ms ago: executing program 0 (id=6072): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0x5, 0x7fff0000}]}) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) 109.247796ms ago: executing program 2 (id=6073): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='-1', 0x2}, {&(0x7f0000000100)="c0f8b46d2428", 0x6}], 0x2, 0x4, 0xa) 106.459567ms ago: executing program 4 (id=6074): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) process_vm_writev(0x0, &(0x7f00000001c0), 0x52, &(0x7f0000121000), 0x0, 0x0) 86.208467ms ago: executing program 4 (id=6075): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 78.512797ms ago: executing program 2 (id=6076): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x101a02, 0x5) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) 76.382957ms ago: executing program 0 (id=6077): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) 75.816827ms ago: executing program 1 (id=6078): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 53.154338ms ago: executing program 2 (id=6079): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xc}]}}}]}, 0x48}}, 0x0) 44.879709ms ago: executing program 0 (id=6080): futex(&(0x7f0000000040)=0x1, 0xd, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f0000000040)=0xfffffffd, 0x5, 0x2, 0x0, &(0x7f0000000180)=0xfffffffe, 0x0) 22.563599ms ago: executing program 2 (id=6081): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_getnexthop={0x20, 0x6a, 0x501, 0x70bd28, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 22.21376ms ago: executing program 4 (id=6082): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 388.66µs ago: executing program 2 (id=6083): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x4d, 0x0, 0x80, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) 0s ago: executing program 4 (id=6084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7a) kernel console output (not intermixed with test programs): setting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 219.135855][ T20] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 219.155509][ T20] usb 5-1: config 0 interface 88 has no altsetting 0 [ 219.259409][ T6] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 219.264257][ T9542] Non-string source [ 219.273021][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 219.282147][ T6] usb 1-1: SerialNumber: syz [ 219.292208][ T6] usb 1-1: config 0 descriptor?? [ 219.373013][ T9544] loop3: detected capacity change from 0 to 40427 [ 219.412431][ T20] usb 5-1: string descriptor 0 read error: -22 [ 219.418701][ T20] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 219.427036][ T9544] F2FS-fs (loop3): invalid crc value [ 219.428125][ T20] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 219.441335][ T540] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 219.450073][ T20] usb 5-1: config 0 descriptor?? [ 219.453121][ T9544] F2FS-fs (loop3): Found nat_bits in checkpoint [ 219.475857][ T9544] F2FS-fs (loop3): Start checkpoint disabled! [ 219.482511][ T9544] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 219.489844][ T20] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input14 [ 219.524215][ T4227] usb 1-1: USB disconnect, device number 90 [ 219.539633][ T402] udevd[402]: Error opening device "/dev/input/event3": Input/output error [ 219.546338][ T561] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 219.548524][ T402] udevd[402]: Unable to EVIOCGABS device "/dev/input/event3" [ 219.557449][ T561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.579963][ T561] usb 2-1: Product: syz [ 219.584281][ T561] usb 2-1: Manufacturer: syz [ 219.584369][ T402] udevd[402]: Unable to EVIOCGABS device "/dev/input/event3" [ 219.588884][ T561] usb 2-1: SerialNumber: syz [ 219.613253][ T30] audit: type=1326 audit(2000524716.230:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9545 comm="syz.3.4389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f0f53b819 code=0x0 [ 219.686939][ T308] usb 5-1: USB disconnect, device number 95 [ 219.947616][ T561] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 219.966669][ T561] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 219.966753][ T540] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 219.982502][ T42] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 219.990124][ T540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.000003][ T540] usb 3-1: Product: syz [ 220.004049][ T561] usb 2-1: USB disconnect, device number 89 [ 220.004194][ T540] usb 3-1: Manufacturer: syz [ 220.015183][ T540] usb 3-1: SerialNumber: syz [ 220.183223][ T9574] loop4: detected capacity change from 0 to 512 [ 220.273261][ T9574] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 220.283732][ T9574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0102] [ 220.292126][ T9574] EXT4-fs (loop4): orphan cleanup on readonly fs [ 220.298930][ T9574] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4403: bg 0: block 361: padding at end of block bitmap is not set [ 220.313907][ T9574] EXT4-fs (loop4): Remounting filesystem read-only [ 220.320716][ T9574] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 220.329877][ T9574] EXT4-fs (loop4): Remounting filesystem read-only [ 220.336836][ T9574] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4403: invalid indirect mapped block 1358954509 (level 0) [ 220.338016][ T9577] loop1: detected capacity change from 0 to 128 [ 220.351031][ T308] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 220.365251][ T9574] EXT4-fs (loop4): Remounting filesystem read-only [ 220.376508][ T9574] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4403: invalid indirect mapped block 2185560079 (level 1) [ 220.391464][ T9574] EXT4-fs (loop4): Remounting filesystem read-only [ 220.398490][ T9574] EXT4-fs (loop4): 1 truncate cleaned up [ 220.404253][ T9574] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,noblock_validity,abort,errors=remount-ro,lazytime. Quota mode: none. [ 220.408040][ T540] usb 3-1: USB disconnect, device number 86 [ 220.424275][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.496050][ T9583] loop1: detected capacity change from 0 to 256 [ 220.502467][ T42] usb 4-1: not running at top speed; connect to a high speed hub [ 220.571906][ T9583] FAT-fs (loop1): bogus number of FAT sectors [ 220.578076][ T9583] FAT-fs (loop1): Can't find a valid FAT filesystem [ 220.578427][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.595170][ T42] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 220.606144][ T42] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1519, setting to 1023 [ 220.617148][ T308] usb 1-1: Using ep0 maxpacket: 32 [ 220.731719][ T308] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 220.740397][ T308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.750783][ T308] usb 1-1: config 0 has no interface number 0 [ 220.756960][ T308] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.770274][ T42] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 220.779505][ T308] usb 1-1: config 0 interface 196 has no altsetting 0 [ 220.786354][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.794636][ T42] usb 4-1: Product: syz [ 220.799054][ T42] usb 4-1: Manufacturer: syz [ 220.802369][ T561] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 220.803652][ T42] usb 4-1: SerialNumber: syz [ 220.941398][ T308] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 220.950534][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.958506][ T308] usb 1-1: Product: syz [ 220.962686][ T308] usb 1-1: Manufacturer: syz [ 220.967277][ T308] usb 1-1: SerialNumber: syz [ 220.972702][ T308] usb 1-1: config 0 descriptor?? [ 221.008875][ T308] ipheth 1-1:0.196: Unable to find endpoints [ 221.055624][ T561] usb 5-1: Using ep0 maxpacket: 32 [ 221.112997][ T6] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 221.113151][ T540] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 221.180207][ T42] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 221.186768][ T42] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 221.202078][ T4227] usb 1-1: USB disconnect, device number 91 [ 221.218061][ T561] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.277826][ T42] usb 4-1: USB disconnect, device number 93 [ 221.294873][ T561] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.361339][ T540] usb 2-1: Using ep0 maxpacket: 32 [ 221.456745][ T6] usb 3-1: config index 0 descriptor too short (expected 56412, got 92) [ 221.465250][ T561] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 221.474313][ T6] usb 3-1: config 1 has too many interfaces: 139, using maximum allowed: 32 [ 221.483044][ T561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.485514][ T540] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.491109][ T6] usb 3-1: config 1 has an invalid interface number: 255 but max is 138 [ 221.509105][ T561] usb 5-1: Product: syz [ 221.513261][ T561] usb 5-1: Manufacturer: syz [ 221.517870][ T561] usb 5-1: SerialNumber: syz [ 221.522690][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.533129][ T6] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 139 [ 221.542257][ T6] usb 3-1: config 1 has no interface number 2 [ 221.548381][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.559271][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.569159][ T6] usb 3-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 221.582909][ T6] usb 3-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 221.584589][ T9609] loop3: detected capacity change from 0 to 512 [ 221.596393][ T6] usb 3-1: config 1 interface 255 has no altsetting 0 [ 221.609658][ T6] usb 3-1: config 1 interface 1 has no altsetting 0 [ 221.648633][ T9609] EXT4-fs (loop3): Ignoring removed nobh option [ 221.655101][ T9609] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)! [ 221.665541][ T9609] EXT4-fs (loop3): group descriptors corrupted! [ 221.672010][ T540] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 221.681105][ T540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.689798][ T540] usb 2-1: Product: syz [ 221.693950][ T540] usb 2-1: Manufacturer: syz [ 221.698720][ T540] usb 2-1: SerialNumber: syz [ 221.754934][ T9615] loop3: detected capacity change from 0 to 8192 [ 221.762355][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.771409][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.779699][ T6] usb 3-1: Product: syz [ 221.783917][ T6] usb 3-1: Manufacturer: syz [ 221.788532][ T6] usb 3-1: SerialNumber: syz [ 221.962934][ T561] usbhid 5-1:1.0: can't add hid device: -71 [ 221.962979][ T540] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 221.969016][ T561] usbhid: probe of 5-1:1.0 failed with error -71 [ 221.978784][ T540] usb 2-1: USB disconnect, device number 90 [ 221.983884][ T561] usb 5-1: USB disconnect, device number 96 [ 221.992646][ T4227] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 222.048678][ T6] usb 3-1: selecting invalid altsetting 0 [ 222.054596][ T6] usb 3-1: selecting invalid altsetting 0 [ 222.060598][ T6] cdc_ncm 3-1:1.0: bind() failure [ 222.068384][ T6] usb 3-1: USB disconnect, device number 87 [ 222.144278][ T1193] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 222.278631][ T9629] loop4: detected capacity change from 0 to 128 [ 222.310455][ T9629] FAT-fs (loop4): count of clusters too big (261886) [ 222.317349][ T9629] FAT-fs (loop4): Can't find a valid FAT filesystem [ 222.354012][ T4227] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 222.362370][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 222.373410][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 222.415420][ T9633] SELinux: security_context_str_to_sid(Ul_{*˸_ړĵ Iڴ)iV [ 222.415420][ T9633] )/)kG6HfV753z&g\) failed for (dev ?, type ?) errno=-22 [ 222.494637][ T30] audit: type=1326 audit(2000524719.246:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.4.4439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70cea25819 code=0x0 [ 222.563806][ T4227] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 222.564088][ T1193] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.572855][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.572880][ T4227] usb 1-1: Product: syz [ 222.572894][ T4227] usb 1-1: Manufacturer: syz [ 222.597654][ T4227] usb 1-1: SerialNumber: syz [ 222.604093][ T4227] usb 1-1: config 0 descriptor?? [ 222.611894][ T1193] usb 4-1: not running at top speed; connect to a high speed hub [ 222.645413][ T9653] loop2: detected capacity change from 0 to 512 [ 222.692876][ T9653] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 222.697778][ T1193] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.704442][ T9653] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 222.717327][ T1193] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.724809][ T9653] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4442: Corrupt directory, running e2fsck is recommended [ 222.735560][ T6] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 222.747945][ T9653] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 222.762867][ T9653] EXT4-fs error (device loop2): ext4_iget_extra_inode:4597: inode #15: comm syz.2.4442: corrupted in-inode xattr [ 222.775271][ T9653] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4442: couldn't read orphan inode 15 (err -117) [ 222.787274][ T9653] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 222.821740][ T42] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 222.837896][ T20] usb 1-1: USB disconnect, device number 92 [ 222.907691][ T1193] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 222.922421][ T1193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.935237][ T1193] usb 4-1: Product: syz [ 222.939653][ T1193] usb 4-1: Manufacturer: syz [ 222.949675][ T1193] usb 4-1: SerialNumber: syz [ 223.012538][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 223.060083][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 223.136304][ T6] usb 2-1: config 1 has an invalid interface number: 1 but max is 0 [ 223.144334][ T6] usb 2-1: config 1 has no interface number 0 [ 223.184205][ T42] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 223.192590][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.202758][ T42] usb 5-1: config 0 has no interface number 0 [ 223.208881][ T4227] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 223.329084][ T6] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 223.343453][ T1193] usb 4-1: USB disconnect, device number 94 [ 223.367337][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.384580][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 223.396875][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.405749][ T42] usb 5-1: Product: syz [ 223.409944][ T42] usb 5-1: Manufacturer: syz [ 223.416950][ T6] usb 2-1: Product: syz [ 223.421142][ T6] usb 2-1: Manufacturer: syz [ 223.423322][ T42] usb 5-1: SerialNumber: syz [ 223.436522][ T6] usb 2-1: SerialNumber: syz [ 223.441898][ T42] usb 5-1: config 0 descriptor?? [ 223.461455][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 223.467001][ T9683] loop0: detected capacity change from 0 to 4096 [ 223.564591][ T9689] loop0: detected capacity change from 0 to 512 [ 223.604146][ T4227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.614300][ T4227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.625109][ T9689] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 223.635052][ T9689] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 223.645075][ T9689] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 223.655307][ T9689] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 223.663389][ T9689] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 223.671312][ T9689] EXT4-fs (loop0): failed to initialize system zone (-117) [ 223.678671][ T9689] EXT4-fs (loop0): mount failed [ 223.691342][ T540] usb 5-1: USB disconnect, device number 97 [ 223.757981][ T6] usb 2-1: USB disconnect, device number 91 [ 223.794836][ T4227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.803920][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.830090][ T4227] usb 3-1: Product: syz [ 223.842639][ T4227] usb 3-1: Manufacturer: syz [ 223.847420][ T4227] usb 3-1: SerialNumber: syz [ 223.873987][ T9710] loop3: detected capacity change from 0 to 512 [ 223.895153][ T9710] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #11: comm syz.3.4469: unexpected EA_INODE flag [ 223.906901][ T9710] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4469: couldn't read orphan inode 11 (err -117) [ 223.918945][ T9710] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,jqfmt=vfsold,debug_want_extra_isize=0x000000000000005a,stripe=0x0000000000000004,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 223.983379][ T9717] tmpfs: Unknown parameter 'nr_blocks 64) [ 229.829668][ T42] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 229.849064][ T9953] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 229.858164][ T9953] F2FS-fs (loop4): invalid crc value [ 229.868734][ T9953] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 229.869083][ T9958] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 229.899054][ T9953] F2FS-fs (loop4): recover fsync data on readonly fs [ 229.906055][ T9953] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 229.912698][ T9960] loop1: detected capacity change from 0 to 16 [ 229.915627][ T9953] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 229.955691][ T9960] erofs: (device loop1): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 230.058472][ T308] usb 4-1: unable to get BOS descriptor or descriptor too short [ 230.116108][ T9973] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 20, please upgrade kernel version [ 230.153654][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.169587][ T308] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.201395][ T42] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 230.213519][ T42] usb 1-1: too many endpoints for config 168 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 230.232836][ T9991] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 230.254331][ T42] usb 1-1: config 168 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 230.262793][ T9991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e803e02c, mo2=0002] [ 230.270641][ T42] usb 1-1: config 168 interface 0 has no altsetting 0 [ 230.287054][ T9991] System zones: 1-12 [ 230.291604][ T9991] EXT4-fs (loop4): orphan cleanup on readonly fs [ 230.306450][ T9991] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4604: bad orphan inode 267 [ 230.319045][ T9991] EXT4-fs (loop4): Remounting filesystem read-only [ 230.347932][ T9991] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noauto_da_alloc,discard,errors=remount-ro,max_batch_time=0x0000000000000b4d. Quota mode: none. [ 230.392342][ T308] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 230.402186][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.410209][ T308] usb 4-1: Product: syz [ 230.414617][T10013] EXT4-fs (loop2): Ignoring removed bh option [ 230.414642][ T42] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 230.423549][T10013] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.445073][ T308] usb 4-1: Manufacturer: syz [ 230.450085][ T308] usb 4-1: SerialNumber: syz [ 230.454415][T10003] set_capacity_and_notify: 3 callbacks suppressed [ 230.454429][T10003] loop1: detected capacity change from 0 to 40427 [ 230.454835][ T42] usb 1-1: too many endpoints for config 168 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 230.470182][T10013] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 230.480534][ T42] usb 1-1: config 168 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 230.494480][T10013] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4614: bg 0: block 248: padding at end of block bitmap is not set [ 230.507085][ T42] usb 1-1: config 168 interface 0 has no altsetting 0 [ 230.528852][T10003] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 230.531837][T10013] Quota error (device loop2): write_blk: dquota write failed [ 230.538029][T10003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 230.551203][T10013] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 230.565309][T10013] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.4614: Failed to acquire dquot type 1 [ 230.567800][T10003] F2FS-fs (loop1): invalid crc value [ 230.586264][T10013] EXT4-fs (loop2): 1 truncate cleaned up [ 230.593687][T10013] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 230.612161][ T42] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 230.628461][ T42] usb 1-1: too many endpoints for config 168 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 230.647729][T10003] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.673131][ T42] usb 1-1: config 168 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 230.684565][T10031] loop4: detected capacity change from 0 to 128 [ 230.699944][ T42] usb 1-1: config 168 interface 0 has no altsetting 0 [ 230.708637][T10003] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 230.715888][T10003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 230.725276][T10031] FAT-fs (loop4): bogus sectors per cluster 0 [ 230.731713][T10031] FAT-fs (loop4): Can't find a valid FAT filesystem [ 230.747493][T10033] loop2: detected capacity change from 0 to 256 [ 230.849469][ T308] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 230.852040][T10043] loop1: detected capacity change from 0 to 2048 [ 230.857353][ T308] usb 4-1: USB disconnect, device number 98 [ 230.879301][ T408] loop1: p2 p3 < > p4 < p5 > [ 230.883991][ T408] loop1: partition table partially beyond EOD, truncated [ 230.891763][ T408] loop1: p3 start 4284289 is beyond EOD, truncated [ 230.900567][T10043] loop1: p2 p3 < > p4 < p5 > [ 230.905350][T10043] loop1: partition table partially beyond EOD, truncated [ 230.913083][T10043] loop1: p3 start 4284289 is beyond EOD, truncated [ 230.954624][ T42] usb 1-1: string descriptor 0 read error: -22 [ 230.960895][ T42] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.970028][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.997517][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 231.008447][ T4160] udevd[4160]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 231.016139][ T402] udevd[402]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 231.032589][ T561] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 231.040736][ T408] udevd[408]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 231.051738][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 231.063406][ T402] udevd[402]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 231.066418][ T30] audit: type=1400 audit(2000524728.245:279): avc: denied { create } for pid=10050 comm="syz.1.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 231.093686][ T20] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 231.119506][T10055] loop1: detected capacity change from 0 to 512 [ 231.175843][T10055] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 231.205046][T10055] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.4632: corrupted inode contents [ 231.217415][T10055] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #16: comm syz.1.4632: mark_inode_dirty error [ 231.229172][T10055] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.4632: corrupted inode contents [ 231.237496][ T308] usb 1-1: USB disconnect, device number 96 [ 231.242990][T10055] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.4632: mark_inode_dirty error [ 231.258975][T10055] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.4632: corrupted inode contents [ 231.269714][T10061] futex_wake_op: syz.3.4634 tries to shift op by -1; fix this program [ 231.271592][T10055] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 231.292894][T10055] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.4632: corrupted inode contents [ 231.305362][ T561] usb 3-1: Using ep0 maxpacket: 32 [ 231.305687][T10055] EXT4-fs error (device loop1): ext4_truncate:4310: inode #16: comm syz.1.4632: mark_inode_dirty error [ 231.322049][T10055] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 231.331731][T10055] EXT4-fs (loop1): 1 truncate cleaned up [ 231.335544][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 231.337561][T10055] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,block_validity,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,grpjquota=./mnt,,errors=continue. Quota mode: writeback. [ 231.362529][T10055] ext4 filesystem being mounted at /947/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.421667][ T561] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.431998][ T561] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 231.488335][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.545274][ T42] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 231.564136][ T20] usb 5-1: config 6 has an invalid interface number: 3 but max is 1 [ 231.572147][ T20] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 231.581323][ T20] usb 5-1: config 6 has no interface number 0 [ 231.587416][ T20] usb 5-1: config 6 interface 3 has no altsetting 0 [ 231.594094][ T561] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 231.603190][ T561] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 231.611330][ T561] usb 3-1: Product: syz [ 231.615518][ T561] usb 3-1: Manufacturer: syz [ 231.620109][ T561] usb 3-1: SerialNumber: syz [ 231.755068][ T20] usb 5-1: New USB device found, idVendor=0403, idProduct=b812, bcdDevice=22.79 [ 231.764454][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.772556][ T20] usb 5-1: Product: syz [ 231.776934][ T6] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 231.785230][ T20] usb 5-1: Manufacturer: syz [ 231.789995][ T20] usb 5-1: SerialNumber: syz [ 231.935885][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.946207][ T42] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.955396][ T561] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 231.967561][ T561] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 231.982021][ T561] usb 3-1: USB disconnect, device number 92 [ 232.050718][ T20] hub 5-1:6.3: bad descriptor, ignoring hub [ 232.056945][ T20] hub: probe of 5-1:6.3 failed with error -5 [ 232.063233][ T20] ftdi_sio 5-1:6.3: FTDI USB Serial Device converter detected [ 232.071430][ T20] usb 5-1: Detected FT-X [ 232.088531][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 232.107465][ T20] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 232.126645][ T20] ftdi_sio 5-1:6.3: GPIO initialisation failed: -71 [ 232.126833][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.142487][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.142802][ T20] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 232.150692][ T42] usb 4-1: Product: syz [ 232.150708][ T42] usb 4-1: Manufacturer: syz [ 232.150721][ T42] usb 4-1: SerialNumber: syz [ 232.183699][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.194140][ T20] usb 5-1: USB disconnect, device number 101 [ 232.194176][ T42] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 232.208109][ T42] cdc_ncm 4-1:1.0: bind() failure [ 232.221382][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 232.245252][ T20] ftdi_sio 5-1:6.3: device disconnected [ 232.269741][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.280147][ T6] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.289839][ T6] usb 2-1: config 1 interface 1 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 232.300798][ T6] usb 2-1: config 1 interface 1 has no altsetting 1 [ 232.422151][ T540] usb 4-1: USB disconnect, device number 99 [ 232.440486][T10093] loop2: detected capacity change from 0 to 128 [ 232.469645][ T6] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 232.479713][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.487808][ T6] usb 2-1: Product: syz [ 232.492461][ T6] usb 2-1: Manufacturer: syz [ 232.497126][ T6] usb 2-1: SerialNumber: syz [ 232.503374][T10093] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.510774][T10093] EXT4-fs (loop2): old and new quota format mixing [ 232.694417][T10106] loop0: detected capacity change from 0 to 256 [ 232.784915][ T6] usb 2-1: 1:2 : no or invalid class specific endpoint descriptor [ 232.795803][ T6] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 232.812125][T10129] loop4: detected capacity change from 0 to 512 [ 232.824608][ T6] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 232.828116][T10135] loop0: detected capacity change from 0 to 512 [ 232.843679][T10129] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 232.846528][T10135] EXT4-fs (loop0): Test dummy encryption mode enabled [ 232.860896][ T6] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 232.866441][T10135] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 259)! [ 232.874668][ T6] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 8. [ 232.881000][T10129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e12c, mo2=0002] [ 232.890106][T10135] EXT4-fs (loop0): group descriptors corrupted! [ 232.897911][T10129] System zones: 1-12 [ 232.908737][T10129] EXT4-fs (loop4): orphan cleanup on readonly fs [ 232.915069][T10129] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4666: bad orphan inode 267 [ 232.926077][T10129] EXT4-fs (loop4): Remounting filesystem read-only [ 232.932840][ T6] usb 2-1: unit 2 not found! [ 232.937526][ T6] usb 2-1: unit 8: unexpected type 0x0c [ 232.943125][T10129] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,inode_readahead_blks=0x0000000000000040,norecovery,errors=remount-ro,mb_optimize_scan=0x0000000000000001. Quota mode: none. [ 232.985307][ T6] usb 2-1: USB disconnect, device number 95 [ 233.003621][ T540] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 233.160782][T10176] loop0: detected capacity change from 0 to 512 [ 233.173158][T10175] loop3: p2 p3 p7 [ 233.213962][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.243144][T10176] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 233.265368][ T408] udevd[408]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 233.271165][ T402] udevd[402]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 233.287681][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 233.303115][T10182] cgroup: Need name or subsystem set [ 233.315001][T10176] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.4690: corrupted inode contents [ 233.343238][T10176] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #16: comm syz.0.4690: mark_inode_dirty error [ 233.355383][T10176] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.4690: corrupted inode contents [ 233.367753][T10176] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.4690: mark_inode_dirty error [ 233.379680][T10176] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.4690: corrupted inode contents [ 233.392835][T10176] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 233.412038][T10176] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.4690: corrupted inode contents [ 233.432147][T10176] EXT4-fs error (device loop0): ext4_truncate:4310: inode #16: comm syz.0.4690: mark_inode_dirty error [ 233.432520][ T42] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 233.451194][ T540] usb 3-1: unable to get BOS descriptor or descriptor too short [ 233.454884][T10176] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 233.470953][T10176] EXT4-fs (loop0): 1 truncate cleaned up [ 233.476810][T10176] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,block_validity,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,grpjquota=./mnt,,errors=continue. Quota mode: writeback. [ 233.511832][T10176] ext4 filesystem being mounted at /981/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.527951][ T540] usb 3-1: not running at top speed; connect to a high speed hub [ 233.552468][T10214] SELinux: security_context_str_to_sid(rootobj_type=f,3te,) failed for (dev ?, type ?) errno=-22 [ 233.573797][T10214] fuse: Bad value for 'fd' [ 233.623377][ T540] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 233.648988][T10230] fuseblk: Bad value for 'source' [ 233.747310][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 233.823065][ T540] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 233.842513][ T540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.850542][ T540] usb 3-1: Product: syz [ 233.861298][ T540] usb 3-1: Manufacturer: syz [ 233.866045][ T540] usb 3-1: SerialNumber: syz [ 233.908826][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.917500][T10250] loop1: p1 < > p3 < p5 > [ 233.923500][T10248] SELinux: security_context_str_to_sid(unconf) failed for (dev ?, type ?) errno=-22 [ 233.937729][T10248] F2FS-fs (loop3): invalid crc value [ 233.956911][ T4227] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 233.959395][T10248] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 233.985926][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 167, changing to 11 [ 234.004850][T10253] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 234.021923][T10253] SELinux: duplicate or incompatible mount options [ 234.107608][T10256] IPv6: addrconf: prefix option has invalid lifetime [ 234.157584][ T42] usb 5-1: New USB device found, idVendor=0499, idProduct=100c, bcdDevice= 0.40 [ 234.168798][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.177308][T10260] EXT4-fs (loop1): dax option not supported [ 234.183298][ T42] usb 5-1: Product: syz [ 234.187853][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 234.193108][ T42] usb 5-1: Manufacturer: syz [ 234.198111][ T42] usb 5-1: SerialNumber: syz [ 234.233044][ T540] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 234.248977][ T540] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 234.257112][ T540] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 234.266562][ T540] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 234.328524][ T540] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 234.365534][ T540] usb 3-1: USB disconnect, device number 93 [ 234.438116][T10280] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 234.446940][T10280] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 234.456017][T10280] F2FS-fs (loop1): invalid crc value [ 234.462775][T10280] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 234.474353][ T4227] usb 1-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 234.483460][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.491671][ T4227] usb 1-1: Product: syz [ 234.491786][T10280] F2FS-fs (loop1): recover fsync data on readonly fs [ 234.495848][ T4227] usb 1-1: Manufacturer: syz [ 234.495865][ T4227] usb 1-1: SerialNumber: syz [ 234.511941][ T6] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 234.513139][ T42] usb 5-1: USB disconnect, device number 102 [ 234.522531][T10280] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 234.532943][T10280] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 234.747466][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 234.782125][ T4227] usb 1-1: USB disconnect, device number 97 [ 234.899903][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.912161][T10325] FAT-fs (loop1): bogus number of reserved sectors [ 234.918875][T10325] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 234.928291][T10325] FAT-fs (loop1): Can't find a valid FAT filesystem [ 235.128674][ T6] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 235.147906][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.156026][ T6] usb 4-1: Product: syz [ 235.157396][ T540] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 235.166931][ T6] usb 4-1: Manufacturer: syz [ 235.182295][ T6] usb 4-1: SerialNumber: syz [ 235.202326][T10335] F2FS-fs (loop1): fault_injection options not supported [ 235.210621][T10335] F2FS-fs (loop1): Not support 1, larger than 256 [ 235.240160][T10337] set_capacity_and_notify: 8 callbacks suppressed [ 235.240178][T10337] loop0: detected capacity change from 0 to 1024 [ 235.334825][T10337] EXT4-fs (loop0): mb_optimize_scan should be set to 0 or 1. [ 235.398023][T10339] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.528937][ T540] usb 3-1: config index 0 descriptor too short (expected 32786, got 18) [ 235.532654][T10333] loop4: detected capacity change from 0 to 131072 [ 235.546326][T10357] loop1: detected capacity change from 0 to 512 [ 235.554553][T10333] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name [ 235.564416][T10333] F2FS-fs (loop4): invalid crc value [ 235.574808][T10333] F2FS-fs (loop4): Found nat_bits in checkpoint [ 235.593748][T10357] EXT4-fs error (device loop1): ext4_quota_enable:6433: inode #4: comm syz.1.4779: iget: immutable or append flags not allowed on symlinks [ 235.606601][T10333] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 235.608881][T10357] EXT4-fs error (device loop1): ext4_quota_enable:6436: comm syz.1.4779: Bad quota inode: 4, type: 1 [ 235.618774][T10333] F2FS-fs (loop4): Failed to read root inode [ 235.628640][ T540] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 235.639082][T10357] EXT4-fs warning (device loop1): ext4_enable_quotas:6477: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 235.643899][ T540] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 235.659924][ T6] usb 4-1: USB disconnect, device number 100 [ 235.669836][ T540] usb 3-1: Manufacturer: syz [ 235.677956][T10357] EXT4-fs (loop1): mount failed [ 235.686295][ T540] usb 3-1: config 0 descriptor?? [ 235.731980][ T540] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 235.741728][ T540] usb 3-1: Detected FT-X [ 235.748442][ T4227] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 235.819644][ T30] audit: type=1326 audit(2000524733.228:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.1.4781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1e4bc3819 code=0x0 [ 235.939010][ T540] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 235.976797][ T540] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 236.007096][ T540] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 236.015430][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 236.028136][ T540] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 236.042551][ T540] usb 3-1: USB disconnect, device number 94 [ 236.052277][ T540] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 236.062284][ T540] ftdi_sio 3-1:0.0: device disconnected [ 236.167580][ T4227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.214995][ T6] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 236.243822][ T4227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.255030][ T4227] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 236.264273][ T4227] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 236.275115][ T4227] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.301157][ T20] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 236.367811][ T561] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 236.432223][T10415] loop2: detected capacity change from 0 to 512 [ 236.444049][ T4227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.453297][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.461287][ T4227] usb 1-1: Product: syz [ 236.465857][ T4227] usb 1-1: Manufacturer: 驱빐汿▛퓼졦␢〰䊲䣻孅葇琥ݩ纹㩁㎐㝯랟㩣冄殲艹噩﷾䫢ᶻĭᙠ럄瘕﫫⓷楻揮셔즩隸崡돜蠐괓쏕㳥肫∔ᙚ땕ⵑꪃ웥抾늝껖삩牉ᇫ☮ [ 236.474435][T10415] FAT-fs (loop2): bogus number of FAT sectors [ 236.487241][ T4227] usb 1-1: SerialNumber: syz [ 236.497824][T10415] FAT-fs (loop2): Can't find a valid FAT filesystem [ 236.594634][ T30] audit: type=1400 audit(2000524734.036:281): avc: denied { write } for pid=10416 comm="syz.2.4806" name="hwrng" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 236.616741][T10421] loop2: detected capacity change from 0 to 512 [ 236.634692][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.642782][T10421] EXT4-fs (loop2): group quota file already specified [ 236.672649][ T20] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 236.720629][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.731367][ T561] usb 2-1: config index 0 descriptor too short (expected 8475, got 27) [ 236.739841][ T561] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 236.748018][ T561] usb 2-1: config 0 has no interface number 0 [ 236.754189][ T6] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 236.763454][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 236.774425][ T561] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 236.784454][ T6] usb 5-1: config 1 interface 1 has no altsetting 0 [ 236.791353][ T561] usb 2-1: config 0 interface 200 has no altsetting 0 [ 236.835946][T10443] loop2: detected capacity change from 0 to 512 [ 236.844161][ T20] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 236.853336][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.862172][ T20] usb 4-1: Product: syz [ 236.863427][ T4227] usb 1-1: 0:2 : does not exist [ 236.866470][T10443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.881320][ T20] usb 4-1: Manufacturer: syz [ 236.886073][ T20] usb 4-1: SerialNumber: syz [ 236.891048][T10443] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0) [ 236.895892][ T4227] usb 1-1: USB disconnect, device number 98 [ 236.900904][ T20] usb 4-1: config 0 descriptor?? [ 236.949028][ T561] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 236.958601][ T20] usb 4-1: bad CDC descriptors [ 236.963485][ T20] usb 4-1: unsupported MDLM descriptors [ 236.969300][ T6] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 236.984641][ T561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.994223][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.002406][ T561] usb 2-1: Product: syz [ 237.006722][ T6] usb 5-1: Product: syz [ 237.010895][ T6] usb 5-1: Manufacturer: syz [ 237.015491][ T6] usb 5-1: SerialNumber: syz [ 237.020337][ T561] usb 2-1: Manufacturer: syz [ 237.024948][ T561] usb 2-1: SerialNumber: syz [ 237.030140][ T561] usb 2-1: config 0 descriptor?? [ 237.149136][ T20] usb 4-1: USB disconnect, device number 101 [ 237.273323][ T42] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 237.311628][T10447] loop0: detected capacity change from 0 to 40427 [ 237.321361][ T561] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input16 [ 237.333857][ T561] usb 2-1: USB disconnect, device number 96 [ 237.358999][ T6] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 237.366032][ T6] usb 5-1: selecting invalid altsetting 0 [ 237.377168][T10447] F2FS-fs (loop0): Zoned block device path is missing [ 237.384247][T10447] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 237.392575][ T6] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 237.396549][T10447] F2FS-fs (loop0): invalid crc value [ 237.402321][ T6] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 237.409122][T10447] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 237.430285][ T6] usb 5-1: USB disconnect, device number 103 [ 237.446107][T10447] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 237.530398][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 237.654112][ T42] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 237.667106][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.680647][ T42] usb 3-1: config 0 descriptor?? [ 237.722675][T10472] loop0: detected capacity change from 0 to 512 [ 237.730658][ T42] rndis_host: probe of 3-1:0.0 failed with error -22 [ 237.760752][T10472] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 237.797733][T10472] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e018, mo2=0000] [ 237.804482][T10480] loop1: detected capacity change from 0 to 16 [ 237.805803][T10472] EXT4-fs (loop0): failed to initialize system zone (-117) [ 237.817370][T10480] erofs: (device loop1): mounted with root inode @ nid 36. [ 237.819782][T10472] EXT4-fs (loop0): mount failed [ 237.861551][T10484] loop1: detected capacity change from 0 to 16 [ 237.883775][T10484] erofs: (device loop1): mounted with root inode @ nid 36. [ 237.902573][ T6] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 237.928045][ T42] usb 3-1: USB disconnect, device number 95 [ 237.956422][T10490] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.967186][T10490] ext4 filesystem being mounted at /1024/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.968686][T10492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.988656][T10492] ext4 filesystem being mounted at /1002/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.073328][ T561] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 238.102566][T10498] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 238.221775][T10501] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.254572][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.264883][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.273865][ T6] usb 4-1: config 1 has no interface number 0 [ 238.279967][ T6] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.283002][ T4227] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 238.321339][ T561] usb 5-1: Using ep0 maxpacket: 16 [ 238.360350][T10506] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.372844][T10506] FAT-fs (loop0): bogus number of directory entries (1) [ 238.379840][T10506] FAT-fs (loop0): Can't find a valid FAT filesystem [ 238.435973][ T561] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.446295][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 238.455527][ T561] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.464411][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.481259][ T6] usb 4-1: Product: syz [ 238.485637][ T6] usb 4-1: Manufacturer: syz [ 238.486988][T10508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.490252][ T6] usb 4-1: SerialNumber: syz [ 238.520814][T10511] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.532027][ T6] usb 4-1: selecting invalid altsetting 1 [ 238.617804][T10518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.626238][ T561] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.645777][ T561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.654057][ T561] usb 5-1: Product: syz [ 238.658333][ T561] usb 5-1: Manufacturer: syz [ 238.663360][ T561] usb 5-1: SerialNumber: syz [ 238.722143][ T4227] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 238.731369][ T6] cdc_ncm 4-1:1.1: bind() failure [ 238.732605][ T4227] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 238.741531][ T6] usb 4-1: USB disconnect, device number 102 [ 238.747272][ T4227] usb 2-1: config 220 interface 0 has no altsetting 0 [ 238.760247][T10517] SELinux: security_context_str_to_sid(unconf) failed for (dev ?, type ?) errno=-22 [ 238.781129][T10517] F2FS-fs (loop2): invalid crc value [ 238.787905][T10517] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 238.950207][ T4227] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 238.959508][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.969745][ T561] usb 5-1: 0:2 : does not exist [ 238.974822][ T4227] usb 2-1: Product: syz [ 238.976135][ T561] usb 5-1: unit 0 not found! [ 238.983676][ T4227] usb 2-1: Manufacturer: syz [ 238.988758][ T4227] usb 2-1: SerialNumber: syz [ 238.994460][ T561] usb 5-1: USB disconnect, device number 104 [ 239.019230][T10525] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.050498][T10526] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.075098][T10526] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=a002e018, mo2=0000] [ 239.083127][T10526] EXT4-fs (loop2): failed to initialize system zone (-117) [ 239.090584][T10526] EXT4-fs (loop2): mount failed [ 239.104476][T10530] EXT4-fs error (device loop0): ext4_quota_enable:6433: inode #4: comm syz.0.4851: iget: immutable or append flags not allowed on symlinks [ 239.118972][T10530] EXT4-fs error (device loop0): ext4_quota_enable:6436: comm syz.0.4851: Bad quota inode: 4, type: 1 [ 239.130045][T10530] EXT4-fs warning (device loop0): ext4_enable_quotas:6477: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.145396][T10530] EXT4-fs (loop0): mount failed [ 239.208178][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 239.249151][T10538] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 239.316310][T10541] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.345439][T10551] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.369709][ T4227] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 239.376227][ T4227] usb 2-1: No valid video chain found. [ 239.378314][T10554] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 239.415902][ T4227] usb 2-1: USB disconnect, device number 97 [ 239.480859][T10561] sit: non-ECT from 0.0.0.0 with TOS=0x11 [ 239.570108][ T42] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 239.641205][T10559] SELinux: security_context_str_to_sid(unconf) failed for (dev ?, type ?) errno=-22 [ 239.652453][T10559] F2FS-fs (loop4): invalid crc value [ 239.660055][T10559] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 239.669208][T10557] F2FS-fs (loop2): fault_injection options not supported [ 239.856663][T10571] erofs: (device loop1): mounted with root inode @ nid 36. [ 239.875119][ T561] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 239.998500][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.006225][ T4227] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 240.036676][ T42] usb 4-1: not running at top speed; connect to a high speed hub [ 240.107814][T10583] set_capacity_and_notify: 26 callbacks suppressed [ 240.107831][T10583] loop4: detected capacity change from 0 to 2048 [ 240.122456][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 240.127263][T10585] loop1: detected capacity change from 0 to 512 [ 240.151380][T10583] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 240.210952][T10591] loop4: detected capacity change from 0 to 512 [ 240.217835][ T561] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.228055][ T561] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.284594][ T42] usb 4-1: New USB device found, idVendor=0499, idProduct=1029, bcdDevice= 0.40 [ 240.299224][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.310840][ T42] usb 4-1: Product: syz [ 240.316895][T10595] loop4: detected capacity change from 0 to 512 [ 240.322724][ T561] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.323404][ T42] usb 4-1: Manufacturer: syz [ 240.338184][ T561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.356198][ T561] usb 1-1: SerialNumber: syz [ 240.360885][ T42] usb 4-1: SerialNumber: syz [ 240.513539][ T4227] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 240.522842][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.551610][ T4227] usb 3-1: Product: syz [ 240.555839][ T4227] usb 3-1: Manufacturer: syz [ 240.560436][ T4227] usb 3-1: SerialNumber: syz [ 240.637922][ T561] usb 1-1: 0:2 : does not exist [ 240.647745][ T561] usb 1-1: USB disconnect, device number 99 [ 240.666634][ T42] snd-usb-audio: probe of 4-1:1.0 failed with error -2 [ 240.683089][ T42] usb 4-1: USB disconnect, device number 103 [ 240.771648][T10593] loop1: detected capacity change from 0 to 131072 [ 240.801372][T10593] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:1, blkofs:16 [ 240.817972][T10593] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 240.918331][T10599] loop4: detected capacity change from 0 to 131072 [ 240.942938][T10599] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0xf2f50210) [ 240.954557][T10599] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 240.963313][T10599] F2FS-fs (loop4): Test dummy encryption mode enabled [ 240.980578][T10599] F2FS-fs (loop4): invalid crc value [ 240.998092][ T4227] usb 3-1: USB disconnect, device number 96 [ 241.036865][T10599] F2FS-fs (loop4): Found nat_bits in checkpoint [ 241.072262][T10599] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 241.079399][T10599] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 241.106929][T10608] loop0: detected capacity change from 0 to 128 [ 241.150541][T10612] loop1: detected capacity change from 0 to 256 [ 241.696803][T10610] loop3: detected capacity change from 0 to 65536 [ 241.809868][T10622] loop3: detected capacity change from 0 to 2048 [ 242.135181][T10628] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.981859][ T561] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 243.334102][ T561] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 243.342325][ T561] usb 4-1: config 1 has no interface number 0 [ 243.362788][ T561] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 243.391589][ T561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.458937][ T561] rndis_host 4-1:1.236: skipping garbage [ 243.474684][ T561] rndis_host 4-1:1.236: More than one union descriptor, skipping ... [ 243.492923][ T561] usb 4-1: bad CDC descriptors [ 243.507975][ T561] cdc_acm 4-1:1.236: skipping garbage [ 243.527272][ T561] cdc_acm 4-1:1.236: More than one union descriptor, skipping ... [ 243.639576][T10614] F2FS-fs (loop0): Found nat_bits in checkpoint [ 243.666384][ T561] usb 4-1: USB disconnect, device number 104 [ 243.687162][T10616] F2FS-fs (loop1): Found nat_bits in checkpoint [ 243.744419][T10614] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 243.783635][T10616] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 243.971979][T10620] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.039767][T10620] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 244.739293][ T540] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 244.756056][T10665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.952133][T10659] set_capacity_and_notify: 13 callbacks suppressed [ 244.952151][T10659] loop1: detected capacity change from 0 to 65536 [ 244.973535][ T540] usb 3-1: Using ep0 maxpacket: 32 [ 245.097333][ T561] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 245.126126][ T540] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.180941][T10655] loop3: detected capacity change from 0 to 131072 [ 245.209022][T10674] loop1: detected capacity change from 0 to 512 [ 245.235319][T10655] F2FS-fs (loop3): invalid crc value [ 245.267873][T10655] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 245.326628][T10655] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 245.373930][ T540] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 245.392946][ T540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.400975][ T540] usb 3-1: Product: syz [ 245.411862][ T540] usb 3-1: Manufacturer: syz [ 245.431169][ T540] usb 3-1: SerialNumber: syz [ 245.478786][ T561] usb 5-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 245.498893][ T561] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 245.571676][T10679] loop1: detected capacity change from 0 to 40427 [ 245.602621][T10679] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 245.610038][T10679] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 245.621877][ T561] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.632468][T10679] F2FS-fs (loop1): invalid crc value [ 245.637982][ T561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.656271][ T561] usb 5-1: SerialNumber: syz [ 245.661818][T10679] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.719822][ T561] usb 5-1: bad CDC descriptors [ 245.730436][T10679] F2FS-fs (loop1): Start checkpoint disabled! [ 245.759072][T10687] loop3: detected capacity change from 0 to 256 [ 245.766975][T10679] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 245.774039][T10679] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 245.781693][ T540] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 245.859937][ T540] usb 3-1: unit 37 not found! [ 245.864693][ T540] usb 3-1: unit 0 not found! [ 245.892639][ T30] audit: type=1400 audit(2000524743.805:282): avc: denied { setopt } for pid=10688 comm="syz.3.4912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 245.926191][ T42] usb 5-1: USB disconnect, device number 105 [ 245.936774][ T540] usb 3-1: USB disconnect, device number 97 [ 245.957353][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: Permission denied [ 245.984579][T10695] loop3: detected capacity change from 0 to 128 [ 246.067672][T10701] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 246.116961][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4919'. [ 246.117069][ T30] audit: type=1400 audit(2000524744.025:283): avc: denied { create } for pid=10704 comm="syz.3.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.146882][T10663] loop0: detected capacity change from 0 to 262144 [ 246.147995][ T30] audit: type=1400 audit(2000524744.025:284): avc: denied { write } for pid=10704 comm="syz.3.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.174094][ T30] audit: type=1400 audit(2000524744.025:285): avc: denied { nlmsg_write } for pid=10704 comm="syz.3.4919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.298408][ T6] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 246.335335][T10717] netlink: 'syz.3.4925': attribute type 2 has an invalid length. [ 246.376420][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4927'. [ 246.491862][T10729] loop4: detected capacity change from 0 to 256 [ 246.577482][T10729] FAT-fs (loop4): Directory bread(block 64) failed [ 246.596992][T10729] FAT-fs (loop4): Directory bread(block 65) failed [ 246.606786][T10729] FAT-fs (loop4): Directory bread(block 66) failed [ 246.626158][ T30] audit: type=1400 audit(2000524744.571:286): avc: denied { read append } for pid=10738 comm="syz.3.4936" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.650752][T10729] FAT-fs (loop4): Directory bread(block 67) failed [ 246.661098][T10729] FAT-fs (loop4): Directory bread(block 68) failed [ 246.677966][ T30] audit: type=1400 audit(2000524744.571:287): avc: denied { open } for pid=10738 comm="syz.3.4936" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.679309][T10729] FAT-fs (loop4): Directory bread(block 69) failed [ 246.736512][ T30] audit: type=1400 audit(2000524744.571:288): avc: denied { ioctl } for pid=10738 comm="syz.3.4936" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 246.755724][T10729] FAT-fs (loop4): Directory bread(block 70) failed [ 246.768078][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.787540][T10729] FAT-fs (loop4): Directory bread(block 71) failed [ 246.803263][T10729] FAT-fs (loop4): Directory bread(block 72) failed [ 246.813135][T10729] FAT-fs (loop4): Directory bread(block 73) failed [ 246.822182][ T6] usb 2-1: not running at top speed; connect to a high speed hub [ 246.850351][ T30] audit: type=1400 audit(2000524744.676:289): avc: denied { nlmsg_read } for pid=10742 comm="syz.3.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.908197][ T30] audit: type=1400 audit(2000524744.864:290): avc: denied { write } for pid=10750 comm="syz.3.4942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 246.927884][ T6] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 246.936239][ T6] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 246.958621][ T6] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 246.976453][ T6] usb 2-1: config 129 has no interface number 0 [ 246.992885][ T6] usb 2-1: config 129 has no interface number 1 [ 247.002664][ T6] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.022148][T10758] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.043143][ T6] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 247.071006][ T6] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 247.077126][T10767] SELinux: failed to load policy [ 247.084443][ T30] audit: type=1400 audit(2000524745.043:291): avc: denied { load_policy } for pid=10762 comm="syz.0.4948" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 247.123647][ T6] usb 2-1: config 129 interface 135 has no altsetting 0 [ 247.130928][ T6] usb 2-1: config 129 interface 5 has no altsetting 0 [ 247.149707][T10771] loop4: detected capacity change from 0 to 512 [ 247.236813][T10771] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,sb=0x0000000000000001,. Quota mode: writeback. [ 247.250218][T10771] ext4 filesystem being mounted at /878/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.273511][T10771] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.4950: invalid size [ 247.299159][T10771] EXT4-fs (loop4): Remounting filesystem read-only [ 247.336768][ T6] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 247.346537][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.354572][ T6] usb 2-1: Product: syz [ 247.360633][ T6] usb 2-1: Manufacturer: syz [ 247.365369][ T6] usb 2-1: SerialNumber: syz [ 247.431505][T10800] device veth5 entered promiscuous mode [ 247.503545][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4970'. [ 247.567903][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4974'. [ 247.645013][T10831] device sit0 entered promiscuous mode [ 247.664304][T10831] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4979'. [ 247.700856][ T6] usb 2-1: MIDIStreaming interface descriptor not found [ 247.735810][ T6] usb 2-1: USB disconnect, device number 98 [ 247.765192][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 247.795013][T10847] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4987'. [ 247.817514][T10847] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4987'. [ 247.833810][T10853] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.895423][T10863] device sit0 entered promiscuous mode [ 247.919270][T10863] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4996'. [ 248.056397][T10887] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.084613][T10891] loop3: detected capacity change from 0 to 512 [ 248.197989][T10905] FAT-fs (loop3): Directory bread(block 64) failed [ 248.215235][T10905] FAT-fs (loop3): Directory bread(block 65) failed [ 248.231534][T10905] FAT-fs (loop3): Directory bread(block 66) failed [ 248.255537][T10905] FAT-fs (loop3): Directory bread(block 67) failed [ 248.282402][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 248.291508][T10905] FAT-fs (loop3): Directory bread(block 68) failed [ 248.298531][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.309672][T10905] FAT-fs (loop3): Directory bread(block 69) failed [ 248.317005][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 248.324915][T10905] FAT-fs (loop3): Directory bread(block 70) failed [ 248.329201][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.337596][T10905] FAT-fs (loop3): Directory bread(block 71) failed [ 248.341397][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.354249][T10905] FAT-fs (loop3): Directory bread(block 72) failed [ 248.362417][T10711] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.368869][T10905] FAT-fs (loop3): Directory bread(block 73) failed [ 248.393272][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.436309][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.452800][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.458254][T10711] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.605448][T10950] EXT4-fs (loop4): Ignoring removed orlov option [ 248.611958][T10950] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 248.635633][T10950] EXT4-fs (loop4): orphan cleanup on readonly fs [ 248.642719][T10950] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5037: bg 0: block 255: padding at end of block bitmap is not set [ 248.709565][T10950] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 248.722529][T10950] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5037: invalid indirect mapped block 1 (level 1) [ 248.737441][T10950] EXT4-fs (loop4): 1 truncate cleaned up [ 248.743290][T10950] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,,errors=continue. Quota mode: none. [ 248.759381][T10965] device vti0 entered promiscuous mode [ 248.776632][T10967] x_tables: unsorted underflow at hook 2 [ 248.928450][T10989] device sit0 entered promiscuous mode [ 248.961743][T10989] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5051'. [ 249.070871][T11011] IPv6: Can't replace route, no match found [ 249.164883][T11024] device sit0 entered promiscuous mode [ 249.174001][T11024] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5071'. [ 249.203526][T11029] netlink: 'syz.4.5075': attribute type 1 has an invalid length. [ 249.308280][T11047] device vti0 entered promiscuous mode [ 249.319424][ T561] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 249.633942][ T6] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 249.691207][ T561] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt [ 249.711447][ T561] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.736342][ T561] usb 2-1: config 1 interface 0 has no altsetting 0 [ 249.745843][T11119] netlink: 'syz.0.5117': attribute type 10 has an invalid length. [ 249.881590][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 250.024674][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.052984][ T6] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 250.056368][T11183] set_capacity_and_notify: 3 callbacks suppressed [ 250.056384][T11183] loop0: detected capacity change from 0 to 256 [ 250.072269][ T6] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 250.129427][ T561] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 250.154950][T11183] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 250.179476][ T561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.197162][ T561] usb 2-1: Product:   [ 250.218504][ T561] usb 2-1: Manufacturer: ᠁ [ 250.243416][T11009] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.262620][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.277102][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.292874][ T6] usb 4-1: Product: syz [ 250.297109][ T6] usb 4-1: Manufacturer: syz [ 250.311633][ T6] usb 4-1: SerialNumber: syz [ 250.535843][ T561] usb 2-1: USB disconnect, device number 99 [ 250.587068][ T6] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 250.594116][ T6] cdc_ncm 4-1:1.0: bind() failure [ 250.617201][ T6] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 250.624297][ T6] cdc_ncm 4-1:1.1: bind() failure [ 250.654092][ T6] usb 4-1: USB disconnect, device number 105 [ 250.707837][T11296] netlink: 'syz.0.5204': attribute type 5 has an invalid length. [ 250.717638][T11298] netlink: 'syz.4.5205': attribute type 12 has an invalid length. [ 250.831858][T11316] loop0: detected capacity change from 0 to 256 [ 250.859114][T11316] FAT-fs (loop0): Directory bread(block 64) failed [ 250.865900][T11316] FAT-fs (loop0): Directory bread(block 65) failed [ 250.873006][T11316] FAT-fs (loop0): Directory bread(block 66) failed [ 250.881583][T11316] FAT-fs (loop0): Directory bread(block 67) failed [ 250.888602][T11316] FAT-fs (loop0): Directory bread(block 68) failed [ 250.895186][T11316] FAT-fs (loop0): Directory bread(block 69) failed [ 250.902043][T11316] FAT-fs (loop0): Directory bread(block 70) failed [ 250.909004][T11316] FAT-fs (loop0): Directory bread(block 71) failed [ 250.916022][T11316] FAT-fs (loop0): Directory bread(block 72) failed [ 250.939639][T11316] FAT-fs (loop0): Directory bread(block 73) failed [ 250.947297][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 250.947314][ T30] audit: type=1326 audit(2000524749.104:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cea25819 code=0x7ffc0000 [ 251.017772][T11336] __nla_validate_parse: 7 callbacks suppressed [ 251.017792][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5225'. [ 251.026496][ T30] audit: type=1326 audit(2000524749.104:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.4.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cea25819 code=0x7ffc0000 [ 251.119108][ T30] audit: type=1326 audit(2000524749.135:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcda89819 code=0x7ffc0000 [ 251.195735][ T30] audit: type=1326 audit(2000524749.135:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcda89819 code=0x7ffc0000 [ 251.215288][T11370] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5241'. [ 251.224592][ T30] audit: type=1326 audit(2000524749.135:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcda89819 code=0x7ffc0000 [ 251.259687][ T30] audit: type=1326 audit(2000524749.135:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcda89819 code=0x7ffc0000 [ 251.320818][T11386] loop4: detected capacity change from 0 to 256 [ 251.327518][ T30] audit: type=1326 audit(2000524749.135:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7effcda89819 code=0x7ffc0000 [ 251.392791][ T30] audit: type=1326 audit(2000524749.135:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcda89819 code=0x7ffc0000 [ 251.416827][ T30] audit: type=1326 audit(2000524749.135:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effcda89819 code=0x7ffc0000 [ 251.418776][T11400] netlink: 'syz.0.5254': attribute type 5 has an invalid length. [ 251.441436][ T30] audit: type=1326 audit(2000524749.135:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7effcda89819 code=0x7ffc0000 [ 251.458876][T11400] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5254'. [ 251.493757][T11386] FAT-fs (loop4): Directory bread(block 64) failed [ 251.496007][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5254'. [ 251.500329][T11386] FAT-fs (loop4): Directory bread(block 65) failed [ 251.525116][T11386] FAT-fs (loop4): Directory bread(block 66) failed [ 251.532692][T11386] FAT-fs (loop4): Directory bread(block 67) failed [ 251.539278][T11386] FAT-fs (loop4): Directory bread(block 68) failed [ 251.565611][T11386] FAT-fs (loop4): Directory bread(block 69) failed [ 251.573283][T11386] FAT-fs (loop4): Directory bread(block 70) failed [ 251.580241][T11386] FAT-fs (loop4): Directory bread(block 71) failed [ 251.588631][T11386] FAT-fs (loop4): Directory bread(block 72) failed [ 251.598561][T11386] FAT-fs (loop4): Directory bread(block 73) failed [ 251.645519][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5266'. [ 251.878919][T11472] netlink: 'syz.3.5288': attribute type 8 has an invalid length. [ 251.887492][T11472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.910340][T11473] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5287'. [ 251.969804][T11487] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5297'. [ 252.042758][T11499] netlink: 'syz.2.5302': attribute type 16 has an invalid length. [ 252.066253][T11499] netlink: 'syz.2.5302': attribute type 17 has an invalid length. [ 252.147199][T11499] device vti0 left promiscuous mode [ 252.154878][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 252.182999][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.204125][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'. [ 252.211172][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 252.213329][ T561] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 252.231734][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.244513][T11485] loop3: detected capacity change from 0 to 40427 [ 252.258380][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.269433][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.279268][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.287536][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.302535][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 252.311654][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 252.341497][T11485] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 252.355359][T11485] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 252.375177][T11485] F2FS-fs (loop3): invalid crc value [ 252.400667][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5324'. [ 252.410949][T11549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.427594][T11485] F2FS-fs (loop3): Found nat_bits in checkpoint [ 252.483819][ T561] usb 5-1: Using ep0 maxpacket: 16 [ 252.498963][T11562] netlink: 'syz.0.5331': attribute type 10 has an invalid length. [ 252.525056][T11485] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 252.537100][T11485] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.592850][T11574] IPv6: sit1: Disabled Multicast RS [ 252.598520][ T561] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.621257][ T561] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 252.635089][ T561] usb 5-1: config 0 interface 0 has no altsetting 0 [ 252.645960][ T1860] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 252.657090][ T1860] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 252.667419][ T561] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 252.687020][ T561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.716675][ T561] usb 5-1: config 0 descriptor?? [ 252.750581][ T561] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 252.807233][T11607] netlink: 'syz.0.5354': attribute type 7 has an invalid length. [ 252.819901][T11607] netlink: 'syz.0.5354': attribute type 5 has an invalid length. [ 252.845622][T11607] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5354'. [ 252.954542][T11629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.979093][ T20] usb 5-1: USB disconnect, device number 106 [ 253.083712][T11658] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 253.097835][T11655] device sit0 left promiscuous mode [ 253.145726][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 253.181916][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.199622][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 253.208203][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.216588][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.225847][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.235300][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.245735][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.430383][T11712] xt_socket: unknown flags 0xc [ 253.491216][T11721] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 253.523660][T11726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.728012][T11776] netlink: 'syz.3.5436': attribute type 13 has an invalid length. [ 253.843276][T11793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.911894][T11814] netlink: 'syz.1.5455': attribute type 5 has an invalid length. [ 254.175014][T11867] IPv6: sit1: Disabled Multicast RS [ 254.261322][T11885] device sit0 left promiscuous mode [ 254.343025][T11885] device veth5 left promiscuous mode [ 254.360078][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 254.368534][T11885] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 254.383838][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 254.396736][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.418800][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 254.428852][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.439283][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.452935][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.466016][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.474312][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.483294][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 254.491214][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 254.496637][T11917] mip6: mip6_destopt_init_state: spi is not 0: 327680 [ 254.499238][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 254.517785][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 254.532143][T11909] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 254.617467][T11931] netlink: 'syz.1.5513': attribute type 30 has an invalid length. [ 254.701717][T11953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.940667][T12005] loop1: detected capacity change from 0 to 256 [ 254.962177][T12011] loop2: detected capacity change from 0 to 16 [ 254.986829][T12011] erofs: (device loop2): mounted with root inode @ nid 36. [ 255.147788][T12039] loop1: detected capacity change from 0 to 4096 [ 255.191915][T12039] EXT4-fs (loop1): Test dummy encryption mode enabled [ 255.198965][T12039] EXT4-fs (loop1): Ignoring removed oldalloc option [ 255.238649][T12039] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 255.238791][T12059] xt_policy: output policy not valid in PREROUTING and INPUT [ 255.246956][T12039] System zones: 0-5 [ 255.289345][T12039] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 255.435611][T12070] xt_l2tp: v2 sid > 0xffff: 67108864 [ 255.527398][T12084] loop1: detected capacity change from 0 to 512 [ 255.581610][T12084] EXT4-fs (loop1): Ignoring removed orlov option [ 255.603708][T12084] EXT4-fs (loop1): orphan cleanup on readonly fs [ 255.633568][T12084] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5589: bg 0: block 248: padding at end of block bitmap is not set [ 255.694766][T12084] EXT4-fs error (device loop1): ext4_acquire_dquot:6225: comm syz.1.5589: Failed to acquire dquot type 1 [ 255.721737][T12084] EXT4-fs (loop1): 1 truncate cleaned up [ 255.727791][T12084] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 255.789757][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 255.789775][ T30] audit: type=1400 audit(2000524755.178:373): avc: denied { connect } for pid=12114 comm="syz.4.5603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 255.799955][ T30] audit: type=1400 audit(2000524755.199:374): avc: denied { remount } for pid=12082 comm="syz.1.5589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 255.800081][T12084] EXT4-fs (loop1): Ignoring removed orlov option [ 255.800140][T12084] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 255.818638][T12084] EXT4-fs error (device loop1): ext4_remount:6051: comm syz.1.5589: Abort forced by user [ 255.818816][T12084] EXT4-fs (loop1): Remounting filesystem read-only [ 255.818830][T12084] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,. Quota mode: writeback. [ 255.818865][T12084] ext4 filesystem being remounted at /1139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.865381][T12049] loop3: detected capacity change from 0 to 131072 [ 255.952185][T12049] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 255.968680][T12049] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.018757][T12049] F2FS-fs (loop3): invalid crc value [ 256.037495][T12141] xt_policy: too many policy elements [ 256.068700][T12049] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.079323][T12138] device bridge_slave_0 left promiscuous mode [ 256.095177][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.103462][T12138] device bridge_slave_1 left promiscuous mode [ 256.124158][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.205660][T12049] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 256.245442][T12049] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 256.311756][T12172] loop4: detected capacity change from 0 to 512 [ 256.343913][ T30] audit: type=1326 audit(2000524755.766:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12178 comm="syz.1.5631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1e4bc3819 code=0x0 [ 256.375261][T12172] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 256.409779][T12172] FAT-fs (loop4): Filesystem has been set read-only [ 256.434328][T12172] FAT-fs (loop4): error, invalid access to FAT (entry 0x000000c8) [ 256.444791][ T30] audit: type=1400 audit(2000524755.870:376): avc: denied { write } for pid=12188 comm="syz.0.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.488987][T12195] netlink: 'syz.1.5640': attribute type 30 has an invalid length. [ 256.581458][T12207] device tunl0 entered promiscuous mode [ 256.596020][T12207] netlink: 'syz.1.5645': attribute type 4 has an invalid length. [ 256.612404][T12207] __nla_validate_parse: 14 callbacks suppressed [ 256.612425][T12207] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5645'. [ 256.639240][T12215] netlink: 'syz.0.5650': attribute type 2 has an invalid length. [ 256.725909][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5653'. [ 256.878916][T12251] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5668'. [ 256.887716][T12249] loop2: detected capacity change from 0 to 256 [ 256.927597][T12249] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 257.023668][T12270] netlink: 'syz.4.5677': attribute type 46 has an invalid length. [ 257.064142][T12270] netlink: 'syz.4.5677': attribute type 19 has an invalid length. [ 257.079136][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5677'. [ 257.090413][T12274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5678'. [ 257.108715][T12279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5682'. [ 257.118508][ T30] audit: type=1326 audit(2000524756.584:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.5683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cea25819 code=0x7ffc0000 [ 257.142597][T12279] tc_dump_action: action bad kind [ 257.154192][ T30] audit: type=1326 audit(2000524756.605:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.5683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cea25819 code=0x7ffc0000 [ 257.157491][T12282] device tunl0 left promiscuous mode [ 257.178349][ T30] audit: type=1326 audit(2000524756.615:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.5683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cea25819 code=0x7ffc0000 [ 257.186122][T12282] device sit0 left promiscuous mode [ 257.248819][ T30] audit: type=1326 audit(2000524756.615:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.5683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cea25819 code=0x7ffc0000 [ 257.273368][T12297] SELinux: Context A) is not valid (left unmapped). [ 257.286493][T12301] loop0: detected capacity change from 0 to 128 [ 257.287950][ T30] audit: type=1326 audit(2000524756.647:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.5683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f70cea25819 code=0x7ffc0000 [ 257.295315][T12282] device vti0 left promiscuous mode [ 257.341704][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5684'. [ 257.401884][ T30] audit: type=1326 audit(2000524756.647:382): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.5683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70cea25819 code=0x7ffc0000 [ 257.555262][T12341] netlink: 'syz.1.5710': attribute type 46 has an invalid length. [ 257.585156][T12349] device sit0 left promiscuous mode [ 257.622171][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 257.639014][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 257.669777][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 257.690031][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.695607][T12367] xt_TCPMSS: Only works on TCP SYN packets [ 257.730892][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 257.755113][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.783389][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.806505][T12381] SELinux: Context system_u:object_r:hwclock_exec_t:s0 is not valid (left unmapped). [ 257.808009][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.857827][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.870056][ T1860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.879852][T12387] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.960112][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5742'. [ 258.013751][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5749'. [ 258.032721][T12417] loop3: detected capacity change from 0 to 256 [ 258.040827][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5750'. [ 258.102736][T12423] device bridge_slave_0 left promiscuous mode [ 258.112575][T12425] futex_wake_op: syz.1.5753 tries to shift op by 32; fix this program [ 258.134597][T12423] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.144402][T12423] device bridge_slave_1 left promiscuous mode [ 258.163107][T12423] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.299880][T12441] xt_hashlimit: size too large, truncated to 1048576 [ 258.322017][T12441] xt_hashlimit: invalid rate [ 258.484026][T12479] x_tables: unsorted underflow at hook 4 [ 258.703236][T12525] device ip6tnl2 entered promiscuous mode [ 259.460071][T12662] IPv6: sit2: Disabled Multicast RS [ 259.528173][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.544142][T12670] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 259.573458][T12676] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.588730][T12670] syz.3.5874 (12670) used greatest stack depth: 19840 bytes left [ 259.673224][T12690] netlink: 'syz.1.5883': attribute type 3 has an invalid length. [ 259.812006][T12710] netlink: 'syz.1.5893': attribute type 3 has an invalid length. [ 259.820005][T12708] loop3: detected capacity change from 0 to 256 [ 259.935709][T12731] xt_nat: multiple ranges no longer supported [ 260.064967][T12753] loop3: detected capacity change from 0 to 512 [ 260.103343][T12753] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,errors=continue,noblock_validity,. Quota mode: none. [ 260.123942][T12753] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.5914: Unimplemented hash flags: 0x0001 [ 260.135992][T12753] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5914: Corrupt directory, running e2fsck is recommended [ 260.333354][T12784] binder: 12781:12784 ioctl c018620c 200000000000 returned -1 [ 260.453189][T12796] device lo entered promiscuous mode [ 260.465903][T12796] device tunl0 entered promiscuous mode [ 260.479705][T12796] device gre0 entered promiscuous mode [ 260.492210][T12796] device gretap0 entered promiscuous mode [ 260.505216][T12796] device erspan0 entered promiscuous mode [ 260.519041][T12796] device ip_vti0 entered promiscuous mode [ 260.531850][T12796] device ip6_vti0 entered promiscuous mode [ 260.545223][T12796] device sit0 entered promiscuous mode [ 260.557846][T12796] device ip6tnl0 entered promiscuous mode [ 260.564177][T12796] device ip6gre0 entered promiscuous mode [ 260.576443][T12796] device syz_tun entered promiscuous mode [ 260.584286][T12796] device ip6gretap0 entered promiscuous mode [ 260.591809][T12796] device bridge0 entered promiscuous mode [ 260.598826][T12796] device dummy0 entered promiscuous mode [ 260.606593][T12796] device veth0 entered promiscuous mode [ 260.612870][T12796] device veth1 entered promiscuous mode [ 260.618844][T12796] device wg0 entered promiscuous mode [ 260.625579][T12796] device wg1 entered promiscuous mode [ 260.627863][ T30] kauditd_printk_skb: 559 callbacks suppressed [ 260.627878][ T30] audit: type=1400 audit(2000524760.257:942): avc: denied { read } for pid=12809 comm="syz.0.5942" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 260.631299][T12796] device wg2 entered promiscuous mode [ 260.643124][ T30] audit: type=1400 audit(2000524760.257:943): avc: denied { open } for pid=12809 comm="syz.0.5942" path="/dev/ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 260.665264][T12796] device veth0_to_bridge entered promiscuous mode [ 260.671971][ T30] audit: type=1400 audit(2000524760.278:944): avc: denied { ioctl } for pid=12809 comm="syz.0.5942" path="/dev/ptmx" dev="devtmpfs" ino=92 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 260.702969][T12796] device bridge_slave_0 entered promiscuous mode [ 260.745908][T12796] device veth1_to_bridge entered promiscuous mode [ 260.752796][T12796] device bridge_slave_1 entered promiscuous mode [ 260.759851][T12796] device veth0_to_bond entered promiscuous mode [ 260.766711][T12796] device bond_slave_0 entered promiscuous mode [ 260.773340][T12796] device veth1_to_bond entered promiscuous mode [ 260.780183][T12796] device bond_slave_1 entered promiscuous mode [ 260.787007][T12796] device veth0_to_team entered promiscuous mode [ 260.793780][T12796] device team_slave_0 entered promiscuous mode [ 260.800572][T12796] device veth1_to_team entered promiscuous mode [ 260.807949][T12796] device team_slave_1 entered promiscuous mode [ 260.814769][T12796] device veth0_to_batadv entered promiscuous mode [ 260.821547][T12796] device batadv_slave_0 entered promiscuous mode [ 260.828882][T12796] device veth1_to_batadv entered promiscuous mode [ 260.835864][T12796] device batadv_slave_1 entered promiscuous mode [ 260.842783][T12796] device xfrm0 entered promiscuous mode [ 260.848817][T12796] device veth0_to_hsr entered promiscuous mode [ 260.855686][T12796] device hsr_slave_0 entered promiscuous mode [ 260.862365][T12796] device veth1_to_hsr entered promiscuous mode [ 260.870050][T12796] device hsr_slave_1 entered promiscuous mode [ 260.876875][T12796] device veth1_virt_wifi entered promiscuous mode [ 260.884230][T12796] device veth0_virt_wifi entered promiscuous mode [ 260.892091][T12796] device veth1_vlan entered promiscuous mode [ 260.899983][T12796] device vlan0 entered promiscuous mode [ 260.906062][T12796] device vlan1 entered promiscuous mode [ 260.913071][ T30] audit: type=1400 audit(2000524760.561:945): avc: denied { validate_trans } for pid=12819 comm="syz.0.5947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 260.913204][T12796] device veth0_macvtap entered promiscuous mode [ 260.940943][T12796] device macsec0 entered promiscuous mode [ 260.947329][T12796] device vti0 entered promiscuous mode [ 260.953461][T12796] device ip6tnl1 entered promiscuous mode [ 260.959718][T12796] device ip6erspan0 entered promiscuous mode [ 260.966687][T12796] device ip6tnl3 entered promiscuous mode [ 260.972922][T12796] device syztnl2 entered promiscuous mode [ 261.000227][ T4227] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 261.023923][ T4227] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 261.047307][T12826] tc_dump_action: action bad kind [ 261.053913][ T26] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 261.150959][T12851] 9pnet: Could not find request transport: uƻ;5nix [ 261.235281][ T30] audit: type=1326 audit(2000524760.897:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.0.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd85457819 code=0x7ffc0000 [ 261.266716][T12877] device sit0 entered promiscuous mode [ 261.299437][ T30] audit: type=1326 audit(2000524760.897:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.0.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd85457819 code=0x7ffc0000 [ 261.300360][ T4227] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 261.324402][ T30] audit: type=1326 audit(2000524760.897:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.0.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd85457819 code=0x7ffc0000 [ 261.339998][T12877] netlink: 'syz.3.5975': attribute type 1 has an invalid length. [ 261.394518][ T30] audit: type=1326 audit(2000524760.897:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.0.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fbd85457819 code=0x7ffc0000 [ 261.399074][T12877] netlink: 'syz.3.5975': attribute type 3 has an invalid length. [ 261.423152][ T30] audit: type=1326 audit(2000524760.897:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.0.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd85457819 code=0x7ffc0000 [ 261.450952][ T30] audit: type=1326 audit(2000524760.897:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12872 comm="syz.0.5974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd85457819 code=0x7ffc0000 [ 261.451417][ T4227] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 261.730154][T12934] netlink: 'syz.4.6003': attribute type 6 has an invalid length. [ 261.759925][T12936] block device autoloading is deprecated and will be removed. [ 261.831581][T12945] netlink: 'syz.3.6008': attribute type 9 has an invalid length. [ 261.911104][T12945] netlink: 'syz.3.6008': attribute type 7 has an invalid length. [ 261.939006][T12967] xt_TCPMSS: Only works on TCP SYN packets [ 261.975261][T12945] netlink: 'syz.3.6008': attribute type 8 has an invalid length. [ 262.299204][ T20] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 262.661708][T13081] loop1: detected capacity change from 0 to 512 [ 262.681513][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 262.736040][T13081] ================================================================== [ 262.744153][T13081] BUG: KASAN: slab-out-of-bounds in __ext4_iget+0x2bb/0x3e50 [ 262.751542][T13081] Read of size 8 at addr ffff888111ea7ef8 by task syz.1.6078/13081 [ 262.759534][T13081] [ 262.761862][T13081] CPU: 1 PID: 13081 Comm: syz.1.6078 Tainted: G W syzkaller #0 [ 262.771142][T13081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.781370][T13081] Call Trace: [ 262.784766][T13081] [ 262.788067][T13081] __dump_stack+0x21/0x30 [ 262.792416][T13081] dump_stack_lvl+0x110/0x170 [ 262.797119][T13081] ? show_regs_print_info+0x20/0x20 [ 262.802323][T13081] ? load_image+0x3e0/0x3e0 [ 262.806840][T13081] ? _raw_spin_lock+0x94/0xf0 [ 262.811534][T13081] print_address_description+0x7f/0x2c0 [ 262.817126][T13081] ? __ext4_iget+0x2bb/0x3e50 [ 262.821822][T13081] kasan_report+0xf1/0x140 [ 262.826359][T13081] ? __ext4_iget+0x2bb/0x3e50 [ 262.831058][T13081] __asan_report_load8_noabort+0x14/0x20 [ 262.836704][T13081] __ext4_iget+0x2bb/0x3e50 [ 262.841217][T13081] ? ext4_init_orphan_info+0x162/0x11e0 [ 262.846767][T13081] ? __kasan_check_write+0x14/0x20 [ 262.851884][T13081] ? _raw_write_trylock+0x150/0x150 [ 262.857087][T13081] ? __proc_create+0x570/0x8e0 [ 262.861851][T13081] ? ext4_get_projid+0x140/0x140 [ 262.866785][T13081] ? _raw_write_unlock+0x2b/0x60 [ 262.871721][T13081] ? ext4_orphan_file_block_trigger+0x460/0x460 [ 262.877964][T13081] ext4_enable_quotas+0x33c/0x6d0 [ 262.882983][T13081] ext4_fill_super+0x82fa/0x8bd0 [ 262.887924][T13081] ? ext4_mount+0x40/0x40 [ 262.892252][T13081] ? set_blocksize+0x1eb/0x370 [ 262.897008][T13081] ? sb_set_blocksize+0xaa/0xf0 [ 262.901853][T13081] ? ext4_mount+0x40/0x40 [ 262.906178][T13081] mount_bdev+0x2ae/0x3e0 [ 262.910501][T13081] ? ext4_mount+0x40/0x40 [ 262.914828][T13081] ext4_mount+0x34/0x40 [ 262.918983][T13081] legacy_get_tree+0xed/0x190 [ 262.923658][T13081] ? ext4_errno_to_code+0x160/0x160 [ 262.928857][T13081] vfs_get_tree+0x89/0x260 [ 262.933271][T13081] do_new_mount+0x25a/0xa20 [ 262.937771][T13081] path_mount+0x659/0xff0 [ 262.942095][T13081] ? user_path_at_empty+0x161/0x1c0 [ 262.947290][T13081] __se_sys_mount+0x320/0x390 [ 262.951966][T13081] ? __x64_sys_mount+0xd0/0xd0 [ 262.956728][T13081] __x64_sys_mount+0xbf/0xd0 [ 262.961311][T13081] x64_sys_call+0x6bf/0x9a0 [ 262.965811][T13081] do_syscall_64+0x4c/0xa0 [ 262.970222][T13081] ? clear_bhb_loop+0x50/0xa0 [ 262.974896][T13081] ? clear_bhb_loop+0x50/0xa0 [ 262.979571][T13081] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.985462][T13081] RIP: 0033:0x7fa1e4bc4a8a [ 262.989877][T13081] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.009492][T13081] RSP: 002b:00007fa1e361de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.017941][T13081] RAX: ffffffffffffffda RBX: 00007fa1e361dee0 RCX: 00007fa1e4bc4a8a [ 263.025913][T13081] RDX: 00002000000004c0 RSI: 0000200000000500 RDI: 00007fa1e361dea0 [ 263.033970][T13081] RBP: 00002000000004c0 R08: 00007fa1e361dee0 R09: 0000000000000000 [ 263.041936][T13081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000500 [ 263.049905][T13081] R13: 00007fa1e361dea0 R14: 00000000000004c4 R15: 0000200000000d00 [ 263.057878][T13081] [ 263.060897][T13081] [ 263.063307][T13081] Allocated by task 2607: [ 263.067625][T13081] __kasan_kmalloc+0xda/0x110 [ 263.072302][T13081] __kmalloc+0x13d/0x2c0 [ 263.076567][T13081] __d_alloc+0xaf/0x6a0 [ 263.080722][T13081] d_alloc+0x4b/0x260 [ 263.084699][T13081] lookup_one_qstr_excl+0xcb/0x250 [ 263.089808][T13081] filename_create+0x235/0x470 [ 263.094842][T13081] do_mknodat+0xd7/0x7a0 [ 263.099091][T13081] __x64_sys_mknod+0x8e/0xa0 [ 263.103965][T13081] x64_sys_call+0x886/0x9a0 [ 263.108472][T13081] do_syscall_64+0x4c/0xa0 [ 263.112884][T13081] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.118780][T13081] [ 263.121099][T13081] The buggy address belongs to the object at ffff888111ea6000 [ 263.121099][T13081] which belongs to the cache kmalloc-rcl-4k of size 4096 [ 263.135497][T13081] The buggy address is located 3832 bytes to the right of [ 263.135497][T13081] 4096-byte region [ffff888111ea6000, ffff888111ea7000) [ 263.149649][T13081] The buggy address belongs to the page: [ 263.155273][T13081] page:ffffea000447a800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888111ea2000 pfn:0x111ea0 [ 263.166813][T13081] head:ffffea000447a800 order:3 compound_mapcount:0 compound_pincount:0 [ 263.175136][T13081] flags: 0x4000000000010200(slab|head|zone=1) [ 263.181206][T13081] raw: 4000000000010200 0000000000000000 dead000000000122 ffff88810004c780 [ 263.189836][T13081] raw: ffff888111ea2000 0000000080040002 00000001ffffffff 0000000000000000 [ 263.198413][T13081] page dumped because: kasan: bad access detected [ 263.204818][T13081] page_owner tracks the page as allocated [ 263.210523][T13081] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 554, ts 28082664538, free_ts 0 [ 263.231795][T13081] post_alloc_hook+0x192/0x1b0 [ 263.236563][T13081] prep_new_page+0x1c/0x110 [ 263.241072][T13081] get_page_from_freelist+0x2d3a/0x2dc0 [ 263.246679][T13081] __alloc_pages+0x1a2/0x460 [ 263.251313][T13081] new_slab+0xa1/0x4d0 [ 263.255407][T13081] ___slab_alloc+0x381/0x810 [ 263.260004][T13081] __slab_alloc+0x49/0x90 [ 263.264335][T13081] __kmalloc+0x16a/0x2c0 [ 263.268578][T13081] __d_alloc+0xaf/0x6a0 [ 263.272731][T13081] d_alloc_parallel+0xe2/0x1370 [ 263.277597][T13081] __lookup_slow+0x14c/0x410 [ 263.282182][T13081] lookup_slow+0x57/0x70 [ 263.286422][T13081] walk_component+0x325/0x460 [ 263.291097][T13081] path_lookupat+0x180/0x490 [ 263.295682][T13081] filename_lookup+0x214/0x540 [ 263.300451][T13081] do_linkat+0xed/0x750 [ 263.304601][T13081] page_owner free stack trace missing [ 263.309960][T13081] [ 263.312279][T13081] Memory state around the buggy address: [ 263.317904][T13081] ffff888111ea7d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.326130][T13081] ffff888111ea7e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.334185][T13081] >ffff888111ea7e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.342237][T13081] ^ [ 263.350388][T13081] ffff888111ea7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.358444][T13081] ffff888111ea7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 263.366491][T13081] ================================================================== [ 263.374542][T13081] Disabling lock debugging due to kernel taint [ 263.380785][ T20] usb 4-1: not running at top speed; connect to a high speed hub SYZFAIL: failed to send rpc fd=3 want=208 sent=0 n=-1 (errno 32: Broken pipe) [ 263.389962][T13081] EXT4-fs warning (device loop1): ext4_enable_quotas:6477: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 263.407990][T13081] EXT4-fs (loop1): mount failed [ 263.643253][ T20] usb 4-1: unable to read config index 0 descriptor/all [ 263.650221][ T20] usb 4-1: can't read configurations, error -71 [ 264.350696][ T8] device veth1_macvtap left promiscuous mode [ 264.356717][ T8] device veth0_vlan left promiscuous mode [ 264.911195][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 265.608720][ T8] device bridge_slave_1 left promiscuous mode [ 265.614874][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.622549][ T8] device bridge_slave_0 left promiscuous mode [ 265.628961][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.637051][ T8] device bridge_slave_1 left promiscuous mode [ 265.643155][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.650885][ T8] device bridge_slave_0 left promiscuous mode [ 265.657114][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.665156][ T8] device bridge_slave_1 left promiscuous mode [ 265.671247][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.679162][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.687864][ T8] device veth1_macvtap left promiscuous mode [ 265.693967][ T8] device veth0_vlan left promiscuous mode [ 265.700030][ T8] device veth1_macvtap left promiscuous mode [ 265.706049][ T8] device veth0_vlan left promiscuous mode [ 265.712165][ T8] device veth1_macvtap left promiscuous mode [ 265.718146][ T8] device veth0_vlan left promiscuous mode