last executing test programs: 715.469609ms ago: executing program 2 (id=4855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_stats}) 687.68317ms ago: executing program 4 (id=4858): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x11, 0x0) 654.247151ms ago: executing program 4 (id=4859): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 630.557981ms ago: executing program 2 (id=4860): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x4, 0x8000, 0xff, 0x5f, 0x71, "b2"}}, 0x119) 483.736285ms ago: executing program 4 (id=4866): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x4}, {0x30, 0x1, [@m_ife={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 435.252187ms ago: executing program 0 (id=4868): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 390.334329ms ago: executing program 4 (id=4872): r0 = syz_io_uring_setup(0x7272, &(0x7f0000000b80)={0x0, 0x86e4, 0x2, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0xfffffffffffffffe, 0x0) 363.657379ms ago: executing program 3 (id=4873): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000b00)=0x13, 0x4) 327.265821ms ago: executing program 4 (id=4875): mlock(&(0x7f0000ff8000/0x7000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 268.095642ms ago: executing program 1 (id=4876): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3f, 0x40, 0x8, 0x1000}) setuid(0xee01) 267.994392ms ago: executing program 3 (id=4877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000090000000400000003"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x4}, 0x20) 267.483662ms ago: executing program 0 (id=4878): r0 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x4, 0xfffffffffffffffe, 0xffe}) 254.003252ms ago: executing program 4 (id=4879): syz_usb_connect$cdc_ecm(0x4, 0xd9, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x1, 0x1, 0x7, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0xc, {{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xdb15, 0xae}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0xff, 0x1}, @mdlm_detail={0x7c, 0x24, 0x13, 0x6, "676ced59abb5add1626aea8d279e46468088a7c889df67571bc331c05bf79f2f3fb734f7314265994e81486b73152e6a4983541519fee4cf0d25cc31de7593853ca654758daab6461e06449bdab5ccb81366fe258cb477aff87cf17a3e967dc56018d4b333af039e0856be328d966d5f873dcb8b3b011463"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x5, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x89}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xa, 0x8, 0x7}}}}}]}}]}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x2f) 239.742833ms ago: executing program 1 (id=4880): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000280)='4'}, {0x0, 0x900}], 0x2) 235.163623ms ago: executing program 3 (id=4881): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) linkat(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 217.967193ms ago: executing program 2 (id=4882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000300)='\x00', 0x1, 0x20000040, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @local, 0x8}, 0x18) 206.561904ms ago: executing program 0 (id=4883): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0x0, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xf1d02b40ce2dc9c4, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0x0, 0x6, 'batadv_slave_0\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xff, 0x10, 0x5, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1004, 0x103, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x391}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@remote, @loopback, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 'veth0_to_team\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 169.941925ms ago: executing program 1 (id=4884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c0000200002801400020020010000000000000000000000000002050009000400000008000400bb"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) 169.252875ms ago: executing program 1 (id=4885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)={0x582a, {{0xa, 0x4e24, 0x2, @mcast1, 0x5}}, 0x1}, 0x90) 153.681815ms ago: executing program 3 (id=4886): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x1]}}) 126.796866ms ago: executing program 0 (id=4887): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 105.257397ms ago: executing program 1 (id=4888): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x9, 0x80}, 0xfffffffc}, [@tmpl={0x84, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0xfffffffe, 0x3c}, 0x0, @in=@multicast1, 0x3502, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20006854}, 0x4000880) 104.917337ms ago: executing program 2 (id=4889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f00000001c0)) 103.910417ms ago: executing program 3 (id=4890): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 74.867938ms ago: executing program 2 (id=4891): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000600)="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", 0x559, r0) 67.568938ms ago: executing program 0 (id=4892): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigsuspend(0x0, 0x0) 23.011339ms ago: executing program 3 (id=4893): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x4, 0x8000, 0xff, 0x5f, 0x71, "b2"}}, 0x119) 22.959149ms ago: executing program 1 (id=4894): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000580)=0x172, 0x4) 22.600759ms ago: executing program 2 (id=4895): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) getcwd(&(0x7f0000000e00)=""/4074, 0xfffffffffffffe7b) 0s ago: executing program 0 (id=4896): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') write$uinput_user_dev(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 220.913294][ T719] usb 2-1: Manufacturer: syz [ 220.918002][ T719] usb 2-1: SerialNumber: syz [ 220.942922][ T7986] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 220.964896][ T719] usb 2-1: selecting invalid altsetting 1 [ 221.148772][ T309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.202894][ T719] cdc_ncm 2-1:1.1: bind() failure [ 221.212841][ T719] usb 2-1: USB disconnect, device number 93 [ 221.257581][ T20] usb-storage 1-1:6.82: USB Mass Storage device detected [ 221.290893][ T20] usb 1-1: USB disconnect, device number 88 [ 221.322110][ T63] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 221.343813][ T309] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 221.353177][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.361223][ T309] usb 5-1: Product: syz [ 221.365608][ T309] usb 5-1: Manufacturer: syz [ 221.370353][ T309] usb 5-1: SerialNumber: syz [ 221.375576][ T309] usb 5-1: config 0 descriptor?? [ 221.419951][ T309] dm9601: probe of 5-1:0.0 failed with error -22 [ 221.441222][ T1014] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 221.644403][ T309] usb 5-1: USB disconnect, device number 93 [ 221.755481][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 221.831372][ T1014] usb 4-1: too many endpoints for config 1 interface 2 altsetting 1: 128, using maximum allowed: 30 [ 221.842309][ T1014] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 221.855426][ T63] usb 3-1: config 1 has an invalid interface number: 130 but max is 0 [ 221.863760][ T1014] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 1, skipping [ 221.873113][ T1014] usb 4-1: config 1 interface 2 has no altsetting 0 [ 221.880269][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.891927][ T63] usb 3-1: config 1 has no interface number 0 [ 221.898800][ T63] usb 3-1: config 1 interface 130 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.912198][ T63] usb 3-1: config 1 interface 130 has no altsetting 0 [ 222.037205][ T20] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 222.069612][ T719] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 222.069667][ T1014] usb 4-1: New USB device found, idVendor=2b73, idProduct=000d, bcdDevice= 0.40 [ 222.088242][ T1014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.096569][ T63] usb 3-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice= f.11 [ 222.105979][ T1014] usb 4-1: Product: syz [ 222.110511][ T1014] usb 4-1: Manufacturer: syz [ 222.115230][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.123444][ T63] usb 3-1: Product: syz [ 222.127746][ T1014] usb 4-1: SerialNumber: syz [ 222.132847][ T63] usb 3-1: Manufacturer: syz [ 222.137847][ T63] usb 3-1: SerialNumber: syz [ 222.351253][ T719] usb 2-1: Using ep0 maxpacket: 16 [ 222.427534][ T63] ums-datafab 3-1:1.130: USB Mass Storage device detected [ 222.436303][ T63] ums-datafab 3-1:1.130: Quirks match for vid 0c0b pid a109: 1 [ 222.444824][ T63] ums-datafab 3-1:1.130: This device (0c0b,a109,0f11 S ec P f2) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 222.444824][ T63] Please send a copy of this message to and [ 222.482328][ T63] ums-sddr55 3-1:1.130: USB Mass Storage device detected [ 222.526505][ T63] usb 3-1: USB disconnect, device number 93 [ 222.557154][ T1014] usb 4-1: Can't get UAC3 power state for id 10 [ 222.622190][ T1014] usb 4-1: BAAD HEADSET c_chmask mismatch [ 222.622190][ T20] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= e.90 [ 222.622218][ T20] usb 1-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 222.628583][ T1014] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 222.642406][ T20] usb 1-1: Product: syz [ 222.658323][ T719] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 222.668716][ T719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.671186][ T1014] usb 4-1: USB disconnect, device number 92 [ 222.688598][ T20] usb 1-1: Manufacturer: syz [ 222.693359][ T20] usb 1-1: SerialNumber: syz [ 222.698511][ T719] usb 2-1: Product: syz [ 222.703144][ T719] usb 2-1: Manufacturer: syz [ 222.716755][ T719] usb 2-1: SerialNumber: syz [ 222.722653][ T719] usb 2-1: config 0 descriptor?? [ 222.763448][ T20] ums-onetouch 1-1:3.0: USB Mass Storage device detected [ 222.771283][ T719] usb-storage 2-1:0.0: USB Mass Storage device detected [ 222.779749][ T719] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 222.787513][ T719] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 222.787513][ T719] Please send a copy of this message to and [ 222.996079][ T719] usb 1-1: USB disconnect, device number 89 [ 222.997799][ T1014] usb 2-1: USB disconnect, device number 94 [ 223.008928][ T790] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 223.272216][ T63] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 223.283068][ T790] usb 5-1: Using ep0 maxpacket: 8 [ 223.293872][ T20] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 223.456418][ T790] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.532213][ T63] usb 3-1: Using ep0 maxpacket: 8 [ 223.550224][ T790] usb 5-1: config 2 has an invalid interface number: 232 but max is 0 [ 223.558619][ T790] usb 5-1: config 2 has no interface number 0 [ 223.564986][ T790] usb 5-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.575369][ T790] usb 5-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.586400][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 223.586612][ T790] usb 5-1: config 2 interface 232 has no altsetting 0 [ 223.611548][ T8056] loop1: detected capacity change from 0 to 8192 [ 223.673107][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.771020][ T790] usb 5-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 223.780271][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.789227][ T790] usb 5-1: Product: syz [ 223.793931][ T790] usb 5-1: Manufacturer: syz [ 223.798543][ T790] usb 5-1: SerialNumber: syz [ 223.829299][ T8072] loop1: detected capacity change from 0 to 32768 [ 223.846468][ T20] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 4.21 [ 223.855920][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.857333][ T63] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 223.864183][ T719] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 223.873923][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.881464][ T20] usb 4-1: SerialNumber: syz [ 223.889892][ T63] usb 3-1: Product: syz [ 223.898307][ T20] usb 4-1: config 0 descriptor?? [ 223.898440][ T63] usb 3-1: Manufacturer: syz [ 223.903936][ T1776] loop1: p1 < > p3 < p5 p6 > p4 < > [ 223.907971][ T63] usb 3-1: SerialNumber: syz [ 223.918287][ T1776] loop1: partition table partially beyond EOD, truncated [ 223.926300][ T1776] loop1: p4 start 1426063360 is beyond EOD, truncated [ 223.934260][ T1776] loop1: p6 start 270080 is beyond EOD, truncated [ 223.943174][ T8072] loop1: p1 < > p3 < p5 p6 > p4 < > [ 223.949021][ T8072] loop1: partition table partially beyond EOD, truncated [ 223.949324][ T20] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 223.957391][ T8072] loop1: p4 start 1426063360 is beyond EOD, truncated [ 223.964856][ T20] usb 4-1: Detected FT232BM [ 223.972071][ T8072] loop1: p6 start 270080 is beyond EOD, truncated [ 224.068416][ T576] udevd[576]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 224.068439][ T328] udevd[328]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 224.079420][ T1776] udevd[1776]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 224.107525][ T576] udevd[576]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 224.107724][ T328] udevd[328]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 224.129683][ T1776] udevd[1776]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 224.171450][ T20] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 224.193136][ T20] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 224.204366][ T20] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 224.220000][ T8086] cgroup: Bad value for 'name' [ 224.225469][ T20] usb 4-1: USB disconnect, device number 93 [ 224.227027][ T790] usb 5-1: USB disconnect, device number 94 [ 224.250674][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 224.271849][ T20] ftdi_sio 4-1:0.0: device disconnected [ 224.301471][ T719] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 224.317306][ T719] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 224.330688][ T719] usb 1-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 224.353189][ T63] usb 3-1: USB disconnect, device number 94 [ 224.442439][ T719] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.452572][ T719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.461088][ T719] usb 1-1: SerialNumber: syz [ 224.794382][ T719] rndis_host 1-1:253.0: skipping garbage [ 224.800136][ T6] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 224.809252][ T719] usb 1-1: bad CDC descriptors [ 224.817168][ T719] usb 1-1: USB disconnect, device number 90 [ 224.873898][ T8124] loop2: detected capacity change from 0 to 32768 [ 224.908836][ T331] loop2: p1 < > p3 < p5 p6 > p4 < > [ 224.914884][ T331] loop2: partition table partially beyond EOD, truncated [ 224.923481][ T331] loop2: p4 start 1426063360 is beyond EOD, truncated [ 224.931681][ T331] loop2: p6 start 270080 is beyond EOD, truncated [ 224.940553][ T8124] loop2: p1 < > p3 < p5 p6 > p4 < > [ 224.946081][ T8124] loop2: partition table partially beyond EOD, truncated [ 224.955076][ T8124] loop2: p4 start 1426063360 is beyond EOD, truncated [ 224.962682][ T8124] loop2: p6 start 270080 is beyond EOD, truncated [ 225.049063][ T1014] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 225.062188][ T1776] udevd[1776]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 225.073892][ T577] udevd[577]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 225.083873][ T63] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 225.095875][ T331] udevd[331]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 225.113264][ T1776] udevd[1776]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 225.114138][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 225.265748][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.276017][ T6] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 225.285448][ T6] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 225.460769][ T1014] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.460823][ T6] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 225.471129][ T790] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 225.480643][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.488342][ T1014] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 225.496679][ T6] usb 2-1: Product: syz [ 225.505596][ T63] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 225.510245][ T6] usb 2-1: Manufacturer: syz [ 225.522529][ T63] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 225.527554][ T6] usb 2-1: SerialNumber: syz [ 225.590788][ T309] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 225.699188][ T1014] usb 4-1: New USB device found, idVendor=0a4e, idProduct=4040, bcdDevice= 0.40 [ 225.712133][ T1014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.721177][ T63] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 225.731838][ T1014] usb 4-1: Product: syz [ 225.736032][ T1014] usb 4-1: Manufacturer: syz [ 225.740647][ T1014] usb 4-1: SerialNumber: syz [ 225.745505][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.753988][ T63] usb 5-1: Product: syz [ 225.758375][ T63] usb 5-1: Manufacturer: syz [ 225.762963][ T63] usb 5-1: SerialNumber: syz [ 225.861623][ T309] usb 1-1: Using ep0 maxpacket: 32 [ 225.959123][ T790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.980862][ T6] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 225.988889][ T6] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 225.991621][ T309] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 225.997621][ T6] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 226.008465][ T309] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 226.045811][ T6] usb 2-1: 0:2 : does not exist [ 226.049447][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.054639][ T6] usb 2-1: USB disconnect, device number 95 [ 226.064973][ T790] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 226.080986][ T790] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.100081][ T63] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 226.116231][ T63] usb 5-1: USB disconnect, device number 95 [ 226.143411][ T1014] usb 4-1: unit 4 not found! [ 226.151552][ T1014] usb 4-1: USB disconnect, device number 94 [ 226.208490][ T309] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 226.217968][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.228005][ T309] usb 1-1: Product: syz [ 226.232353][ T309] usb 1-1: Manufacturer: syz [ 226.237059][ T309] usb 1-1: SerialNumber: syz [ 226.262579][ T790] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 226.271775][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.280157][ T790] usb 3-1: Product: syz [ 226.284583][ T790] usb 3-1: Manufacturer: syz [ 226.289184][ T790] usb 3-1: SerialNumber: syz [ 226.623098][ T8152] overlayfs: missing 'lowerdir' [ 226.661788][ T790] usb 3-1: USB disconnect, device number 95 [ 226.720178][ T8150] loop3: detected capacity change from 0 to 40427 [ 226.728423][ T6] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 226.744262][ T309] usb 1-1: USB disconnect, device number 91 [ 226.793745][ T8150] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 226.810941][ T8150] F2FS-fs (loop3): invalid crc value [ 226.819009][ T8150] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240904077664126437) [ 226.846770][ T8150] F2FS-fs (loop3): recover fsync data on readonly fs [ 226.854242][ T8150] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 226.861027][ T8150] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 226.867916][ T8150] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.923340][ T1014] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 227.129209][ T6] usb 2-1: config 253 has an invalid interface number: 157 but max is 0 [ 227.143220][ T6] usb 2-1: config 253 has no interface number 0 [ 227.157673][ T6] usb 2-1: config 253 interface 157 has no altsetting 0 [ 227.190436][ T8169] incfs: Options parsing error. -22 [ 227.196425][ T8169] incfs: mount failed -22 [ 227.222323][ T8159] loop0: detected capacity change from 0 to 40427 [ 227.270064][ T307] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 227.335086][ T6] usb 2-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 227.353488][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.367842][ T8181] loop0: detected capacity change from 0 to 512 [ 227.374419][ T6] usb 2-1: Product: syz [ 227.379062][ T6] usb 2-1: Manufacturer: syz [ 227.383758][ T6] usb 2-1: SerialNumber: syz [ 227.389267][ T1014] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.389562][ T8181] EXT4-fs (loop0): Ignoring removed nobh option [ 227.498005][ T1014] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 227.508421][ T1014] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 227.530045][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 227.660136][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.673348][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 9477, setting to 1024 [ 227.685977][ T307] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 227.697164][ T307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 227.725112][ T1014] usb 5-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 227.735033][ T1014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.743486][ T1014] usb 5-1: Product: syz [ 227.747865][ T1014] usb 5-1: Manufacturer: syz [ 227.753047][ T1014] usb 5-1: SerialNumber: syz [ 227.757863][ T6] usb-storage 2-1:253.157: USB Mass Storage device detected [ 227.776365][ T719] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 227.791859][ T8154] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.803635][ T6] usb 2-1: USB disconnect, device number 96 [ 227.809945][ T8154] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.877087][ T307] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 227.888179][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.904870][ T307] usb 4-1: Product: syz [ 227.909525][ T307] usb 4-1: Manufacturer: syz [ 227.914499][ T307] usb 4-1: SerialNumber: syz [ 227.941825][ T8157] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 227.979768][ T8175] loop2: detected capacity change from 0 to 262144 [ 228.033372][ T8175] F2FS-fs (loop2): Found nat_bits in checkpoint [ 228.067236][ T8175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 228.154843][ T1014] usb 5-1: USB disconnect, device number 96 [ 228.169306][ T719] usb 1-1: config index 0 descriptor too short (expected 57901, got 45) [ 228.178577][ T719] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 228.193257][ T719] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 228.206896][ T719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.217433][ T719] usb 1-1: config 0 has no interfaces? [ 228.223197][ T719] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 228.243440][ T719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.267087][ T719] usb 1-1: config 0 descriptor?? [ 228.386061][ T307] usb 4-1: MIDIStreaming interface descriptor not found [ 228.397673][ T307] usb 4-1: USB disconnect, device number 95 [ 228.503465][ T8215] IPv6: addrconf: prefix option has invalid lifetime [ 228.533926][ T537] usb 1-1: USB disconnect, device number 92 [ 228.556973][ T8223] loop2: detected capacity change from 0 to 512 [ 228.584174][ T8223] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 228.656784][ T719] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 228.688892][ T8239] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 228.705934][ T30] audit: type=1400 audit(1786550683.967:255): avc: denied { relabelto } for pid=8238 comm="syz.2.3779" name="757" dev="tmpfs" ino=3861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 228.742381][ T30] audit: type=1400 audit(1786550683.967:256): avc: denied { associate } for pid=8238 comm="syz.2.3779" name="757" dev="tmpfs" ino=3861 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 228.786364][ T30] audit: type=1400 audit(1786550683.995:257): avc: denied { write } for pid=291 comm="syz-executor" name="757" dev="tmpfs" ino=3861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 228.852629][ T30] audit: type=1400 audit(1786550683.995:258): avc: denied { remove_name } for pid=291 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 228.890773][ T30] audit: type=1400 audit(1786550683.995:259): avc: denied { rmdir } for pid=291 comm="syz-executor" name="757" dev="tmpfs" ino=3861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 228.960150][ T719] usb 2-1: Using ep0 maxpacket: 8 [ 229.018154][ T8253] loop3: detected capacity change from 0 to 40427 [ 229.060964][ T8253] F2FS-fs (loop3): Mismatch start address, segment0(16) cp_blkaddr(0) [ 229.069378][ T8253] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 229.079103][ T8253] F2FS-fs (loop3): invalid crc value [ 229.086120][ T8253] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 229.117096][ T30] audit: type=1400 audit(1786550684.346:260): avc: denied { create } for pid=8277 comm="syz.0.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 229.117187][ T8253] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 229.148139][ T790] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 229.148380][ T8253] F2FS-fs (loop3): sanity_check_inode: inode (ino=3) has corrupted i_xattr_nid: 134217728, run fsck to fix. [ 229.167838][ T8253] F2FS-fs (loop3): Failed to read root inode [ 229.274442][ T719] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 229.283838][ T719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.292084][ T719] usb 2-1: Product: syz [ 229.306849][ T537] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 229.314537][ T719] usb 2-1: Manufacturer: syz [ 229.319328][ T719] usb 2-1: SerialNumber: syz [ 229.545205][ T307] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 229.610290][ T790] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.653593][ T309] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 229.718629][ T790] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.729501][ T790] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 229.739956][ T790] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.751174][ T719] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x600, type = 0 [ 229.763016][ T719] usb 2-1: unit 0 not found! [ 229.770330][ T719] usb 2-1: USB disconnect, device number 97 [ 229.777442][ T537] usb 3-1: unable to get BOS descriptor or descriptor too short [ 229.902813][ T537] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.913550][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 229.978690][ T307] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 229.987244][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.997389][ T307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.006767][ T307] usb 1-1: config 1 has no interface number 0 [ 230.011146][ T790] usb 5-1: string descriptor 0 read error: -22 [ 230.013082][ T307] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.020946][ T790] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 230.039073][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.086988][ T309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 230.095350][ T790] usb 5-1: low speed audio streaming not supported [ 230.102375][ T790] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 230.184623][ T309] usb 4-1: config 1 interface 0 has no altsetting 0 [ 230.206166][ T537] usb 3-1: string descriptor 0 read error: -22 [ 230.212695][ T537] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.221929][ T537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.230023][ T307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.240597][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.249009][ T307] usb 1-1: Product: syz [ 230.253308][ T307] usb 1-1: Manufacturer: syz [ 230.258604][ T307] usb 1-1: SerialNumber: syz [ 230.282430][ T537] usb 3-1: bad CDC descriptors [ 230.312242][ T790] usb 5-1: USB disconnect, device number 97 [ 230.314845][ T307] cdc_wdm 1-1:1.128: skipping garbage [ 230.324044][ T307] cdc_wdm: probe of 1-1:1.128 failed with error -22 [ 230.357872][ T309] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40 [ 230.367332][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.376647][ T309] usb 4-1: Product: syz [ 230.381367][ T309] usb 4-1: Manufacturer: syz [ 230.386073][ T309] usb 4-1: SerialNumber: syz [ 230.501516][ T1014] usb 3-1: USB disconnect, device number 96 [ 230.542549][ T537] usb 1-1: USB disconnect, device number 93 [ 230.774836][ T8294] loop1: detected capacity change from 0 to 262144 [ 230.804584][ T309] usb 4-1: USB disconnect, device number 96 [ 230.833452][ T8294] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.863415][ T8294] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.181229][ T790] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 231.225402][ T8324] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 231.227329][ T8326] loop1: detected capacity change from 0 to 1024 [ 231.242278][ T8324] SELinux: duplicate or incompatible mount options [ 231.262820][ T30] audit: type=1326 audit(1786550686.321:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8330 comm="syz.0.3822" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc84829f0d9 code=0x0 [ 231.272865][ T8334] loop3: detected capacity change from 0 to 512 [ 231.290272][ T8326] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 231.304858][ T8326] EXT4-fs (loop1): group descriptors corrupted! [ 231.327400][ T8334] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 231.338258][ T8334] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 231.359688][ T8340] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 231.369676][ T30] audit: type=1400 audit(1786550686.422:262): avc: denied { relabelto } for pid=8339 comm="syz.0.3825" name="820" dev="tmpfs" ino=4204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 231.417978][ T8334] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 231.431708][ T8334] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 231.442680][ T8334] EXT4-fs (loop3): failed to initialize system zone (-117) [ 231.450385][ T8334] EXT4-fs (loop3): mount failed [ 231.455942][ T30] audit: type=1400 audit(1786550686.422:263): avc: denied { associate } for pid=8339 comm="syz.0.3825" name="820" dev="tmpfs" ino=4204 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 231.485299][ T309] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 231.500784][ T8353] loop1: detected capacity change from 0 to 2048 [ 231.569333][ T8359] incfs: Error accessing: ./cgroup.cpu/cpuset.cpus. [ 231.576407][ T8359] incfs: mount failed -20 [ 231.582314][ T790] usb 5-1: config index 0 descriptor too short (expected 36, got 10) [ 231.591135][ T790] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 231.599521][ T790] usb 5-1: config 0 has no interfaces? [ 231.605110][ T790] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 231.614677][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.623729][ T790] usb 5-1: config 0 descriptor?? [ 231.641312][ T8365] futex_wake_op: syz.3.3838 tries to shift op by 144; fix this program [ 231.798733][ T20] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 231.897789][ T307] usb 5-1: USB disconnect, device number 98 [ 231.939681][ T309] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.950410][ T719] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 231.982978][ T790] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 232.026447][ T309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.036607][ T309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.210577][ T309] usb 3-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 232.221537][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.230509][ T309] usb 3-1: Product: syz [ 232.232154][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.234986][ T309] usb 3-1: Manufacturer: syz [ 232.245759][ T20] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 232.250101][ T790] usb 2-1: Using ep0 maxpacket: 16 [ 232.259615][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.264650][ T309] usb 3-1: SerialNumber: syz [ 232.273460][ T20] usb 1-1: config 0 descriptor?? [ 232.319378][ T20] usb 1-1: bad CDC descriptors [ 232.383920][ T719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.448818][ T790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.481330][ T719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.541414][ T307] usb 1-1: USB disconnect, device number 94 [ 232.546318][ T790] usb 2-1: config 11 has an invalid interface number: 5 but max is 0 [ 232.556047][ T790] usb 2-1: config 11 has no interface number 0 [ 232.562427][ T790] usb 2-1: config 11 interface 5 has no altsetting 0 [ 232.579548][ T309] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 232.587984][ T309] usb 3-1: USB disconnect, device number 97 [ 232.589695][ T719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.605017][ T719] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 232.614484][ T719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.625225][ T719] usb 4-1: config 0 descriptor?? [ 232.741381][ T790] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=f7.b9 [ 232.751237][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.759419][ T790] usb 2-1: Product: syz [ 232.764464][ T790] usb 2-1: Manufacturer: syz [ 232.769151][ T790] usb 2-1: SerialNumber: syz [ 232.784680][ T20] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 232.890642][ T309] usb 4-1: USB disconnect, device number 97 [ 233.111331][ T8387] loop2: detected capacity change from 0 to 256 [ 233.121121][ T790] zaurus 2-1:11.5: More than one union descriptor, skipping ... [ 233.129068][ T790] usb 2-1: bad CDC descriptors [ 233.134760][ T8387] exfat: Deprecated parameter 'utf8' [ 233.140287][ T8387] exfat: Deprecated parameter 'namecase' [ 233.146360][ T8387] exfat: Deprecated parameter 'namecase' [ 233.148949][ T790] usb 2-1: USB disconnect, device number 98 [ 233.196387][ T20] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 233.207193][ T20] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 233.218352][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.232446][ T8387] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1189b7a0) [ 233.243107][ T8387] exFAT-fs (loop2): invalid boot region [ 233.248853][ T8387] exFAT-fs (loop2): failed to recognize exfat type [ 233.413065][ T719] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 233.434881][ T20] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 233.444795][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.451830][ T8393] cgroup: none used incorrectly [ 233.453843][ T20] usb 5-1: Product: syz [ 233.462534][ T20] usb 5-1: Manufacturer: syz [ 233.467911][ T20] usb 5-1: SerialNumber: syz [ 233.474746][ T20] usb 5-1: config 0 descriptor?? [ 233.493980][ T8397] loop3: detected capacity change from 0 to 1024 [ 233.530234][ T8397] EXT4-fs (loop3): unsupported inode size: 143 [ 233.536817][ T8397] EXT4-fs (loop3): blocksize: 1024 [ 233.640575][ T790] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 233.694754][ T719] usb 1-1: Using ep0 maxpacket: 8 [ 233.740751][ T1014] usb 5-1: USB disconnect, device number 99 [ 233.824794][ T719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.835274][ T719] usb 1-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 233.844357][ T719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.853013][ T719] usb 1-1: config 0 descriptor?? [ 233.900581][ T309] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 233.901205][ T719] usb 1-1: Found UVC 0.00 device (05a9:2640) [ 233.915147][ T719] usb 1-1: No valid video chain found. [ 233.922277][ T63] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 234.030636][ T790] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 234.040680][ T790] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 234.049744][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.096093][ T790] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 234.120265][ T719] usb 1-1: USB disconnect, device number 95 [ 234.182280][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 234.290677][ T309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.301575][ T309] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.319072][ T790] usb 3-1: USB disconnect, device number 98 [ 234.355707][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.442310][ T63] usb 2-1: config 6 has an invalid interface number: 166 but max is 0 [ 234.450657][ T63] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 234.461011][ T63] usb 2-1: config 6 has no interface number 0 [ 234.467118][ T63] usb 2-1: config 6 interface 166 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.477081][ T309] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 234.486647][ T63] usb 2-1: config 6 interface 166 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.499870][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.508289][ T309] usb 4-1: Product: syz [ 234.512443][ T309] usb 4-1: Manufacturer: syz [ 234.517046][ T309] usb 4-1: SerialNumber: syz [ 234.521799][ T63] usb 2-1: config 6 interface 166 has no altsetting 0 [ 234.626485][ T20] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 234.677938][ T30] audit: type=1326 audit(1786550689.477:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.0.3862" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc84829f0d9 code=0x0 [ 234.703987][ T63] usb 2-1: New USB device found, idVendor=0403, idProduct=f44c, bcdDevice= 1.e1 [ 234.713498][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.721724][ T63] usb 2-1: Product: syz [ 234.725991][ T63] usb 2-1: Manufacturer: syz [ 234.730685][ T63] usb 2-1: SerialNumber: syz [ 234.752276][ T30] audit: type=1326 audit(1786550689.542:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8416 comm="syz.0.3864" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc84829f0d9 code=0x0 [ 234.833059][ T309] usb 4-1: unit 250 not found! [ 234.836225][ T8423] loop0: detected capacity change from 0 to 512 [ 234.838122][ T309] usb 4-1: unit 119 not found! [ 234.856327][ T309] usb 4-1: USB disconnect, device number 98 [ 234.865677][ T561] udevd[561]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 234.868286][ T8423] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 234.892232][ T8423] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 234.912532][ T8423] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 234.926233][ T8423] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 234.934650][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 234.940257][ T8423] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 234.948838][ T8423] EXT4-fs (loop0): orphan cleanup on readonly fs [ 234.956404][ T8423] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3867: bg 0: block 34: padding at end of block bitmap is not set [ 234.971235][ T8423] Quota error (device loop0): write_blk: dquota write failed [ 234.981928][ T8423] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 234.992701][ T8423] EXT4-fs error (device loop0): ext4_acquire_dquot:6227: comm syz.0.3867: Failed to acquire dquot type 1 [ 235.005298][ T8423] EXT4-fs (loop0): 1 truncate cleaned up [ 235.011560][ T8423] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,lazytime,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 235.012988][ T8432] loop2: detected capacity change from 0 to 256 [ 235.045537][ T8432] exFAT-fs (loop2): bogus fat length [ 235.053875][ T8432] exFAT-fs (loop2): failed to read boot sector [ 235.059881][ T8423] syz.0.3867 (8423) used greatest stack depth: 21576 bytes left [ 235.060421][ T8432] exFAT-fs (loop2): failed to recognize exfat type [ 235.081623][ T20] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 235.090117][ T20] usb 5-1: config 0 has no interface number 0 [ 235.092833][ T63] ftdi_sio 2-1:6.166: FTDI USB Serial Device converter detected [ 235.104697][ T63] usb 2-1: Detected SIO [ 235.108978][ T63] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 5 [ 235.124686][ T63] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 235.134380][ T63] usb 2-1: USB disconnect, device number 99 [ 235.141292][ T63] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 235.151478][ T63] ftdi_sio 2-1:6.166: device disconnected [ 235.276586][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 235.288381][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.296706][ T20] usb 5-1: Product: syz [ 235.301278][ T8456] loop2: detected capacity change from 0 to 512 [ 235.301429][ T20] usb 5-1: Manufacturer: syz [ 235.313304][ T20] usb 5-1: SerialNumber: syz [ 235.319445][ T8456] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 235.330061][ T8456] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 235.330655][ T20] usb 5-1: config 0 descriptor?? [ 235.341234][ T8456] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 235.356970][ T8456] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 235.365120][ T8456] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c040e01c, mo2=0000] [ 235.373080][ T8456] EXT4-fs (loop2): too many log groups per flexible block group [ 235.381066][ T8456] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 235.388535][ T8456] EXT4-fs (loop2): mount failed [ 235.428201][ T307] usb 1-1: new low-speed USB device number 96 using dummy_hcd [ 235.655873][ T20] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 235.662455][ T20] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 235.671323][ T20] usb 5-1: Failed to create links for entity 5 [ 235.677830][ T20] usb 5-1: Failed to register entities (-22). [ 235.688605][ T20] usb 5-1: USB disconnect, device number 100 [ 235.785734][ T719] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 235.785739][ T63] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 235.839937][ T307] usb 1-1: config 25 has 1 interface, different from the descriptor's value: 2 [ 235.849227][ T307] usb 1-1: config 25 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 17080, setting to 8 [ 235.860742][ T307] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 235.869952][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.894111][ T6] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 235.894168][ T8434] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 236.067440][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 236.165042][ T307] usb 1-1: string descriptor 0 read error: -71 [ 236.173630][ T307] usb 1-1: USB disconnect, device number 96 [ 236.208349][ T63] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 236.219205][ T719] usb 4-1: unable to get BOS descriptor or descriptor too short [ 236.220644][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 236.240452][ T63] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 236.251713][ T6] usb 2-1: not running at top speed; connect to a high speed hub [ 236.254810][ T63] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 236.271272][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.273361][ T719] usb 4-1: not running at top speed; connect to a high speed hub [ 236.280326][ T63] usb 3-1: config 0 descriptor?? [ 236.338337][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.350425][ T6] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 236.359694][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.370874][ T719] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 236.380858][ T719] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 236.389651][ T719] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 236.399336][ T719] usb 4-1: config 129 has no interface number 0 [ 236.406444][ T719] usb 4-1: config 129 has no interface number 1 [ 236.406981][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:25.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 236.413054][ T719] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 236.443301][ T6] usb 2-1: Found UVC 1.00 device (0000:0000) [ 236.451084][ T6] usb 2-1: No streaming interface found for terminal 2. [ 236.458801][ T719] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 236.471297][ T719] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 236.484906][ T719] usb 4-1: config 129 interface 135 has no altsetting 0 [ 236.494309][ T719] usb 4-1: config 129 interface 5 has no altsetting 0 [ 236.576691][ T63] usb 3-1: string descriptor 0 read error: -71 [ 236.632249][ T8511] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 236.670392][ T6] usb 2-1: USB disconnect, device number 100 [ 236.677115][ T719] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 236.688078][ T719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.698047][ T719] usb 4-1: Product: syz [ 236.703042][ T719] usb 4-1: Manufacturer: syz [ 236.706711][ T63] usbhid 3-1:0.0: can't add hid device: -71 [ 236.707996][ T719] usb 4-1: SerialNumber: syz [ 236.715465][ T63] usbhid: probe of 3-1:0.0 failed with error -71 [ 236.736708][ T63] usb 3-1: USB disconnect, device number 99 [ 236.988322][ T309] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 237.075066][ T542] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 237.075934][ T719] usb 4-1: MIDIStreaming interface descriptor not found [ 237.110407][ T719] usb 4-1: USB disconnect, device number 99 [ 237.248397][ T309] usb 5-1: Using ep0 maxpacket: 8 [ 237.421761][ T309] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.429665][ T63] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 237.519272][ T309] usb 5-1: config 252 has an invalid interface number: 17 but max is 0 [ 237.527749][ T309] usb 5-1: config 252 has no interface number 0 [ 237.534120][ T309] usb 5-1: config 252 interface 17 has no altsetting 0 [ 237.584308][ T309] usb 5-1: language id specifier not provided by device, defaulting to English [ 237.638541][ T542] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 237.647944][ T542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.656478][ T542] usb 1-1: SerialNumber: syz [ 237.661699][ T542] usb 1-1: config 0 descriptor?? [ 237.703417][ T63] usb 3-1: Using ep0 maxpacket: 32 [ 237.735964][ T309] usb 5-1: New USB device found, idVendor=5e04, idProduct=ce00, bcdDevice=dd.ab [ 237.745353][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.753694][ T309] usb 5-1: Product: syz [ 237.757565][ T719] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 237.758306][ T309] usb 5-1: Manufacturer: ⅱ飻囮걨䭘製⨃濽綶݉櫬魊䖏츥濸櫯ư槥䳺嬅黎⸛鸹᛺䘆껩ⴀ倉׮髸㝼バᲐ㮐辬崫阠냮킱ᗶة뒰ﳫ븪㼉祈격緻󣦦ꧺ鬌栺䦙ቡꘛ⃓㋏覅阿᭓雤뤾ꠥ⌢잇⵶鵫긗ܖ聟蒾蛋輙热鮅Ų⎜ [ 237.792522][ T309] usb 5-1: SerialNumber: syz [ 237.855134][ T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.920064][ T6] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 237.928135][ T542] usb 1-1: USB disconnect, device number 97 [ 238.039364][ T63] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 238.048570][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.056892][ T63] usb 3-1: Product: syz [ 238.061577][ T63] usb 3-1: Manufacturer: syz [ 238.066271][ T63] usb 3-1: SerialNumber: syz [ 238.071611][ T63] usb 3-1: config 0 descriptor?? [ 238.115536][ T63] usb 3-1: bad CDC descriptors [ 238.120724][ T63] usb 3-1: unsupported MDLM descriptors [ 238.138116][ T309] usb 5-1: USB disconnect, device number 101 [ 238.180138][ T719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.190502][ T719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.334164][ T542] usb 3-1: USB disconnect, device number 100 [ 238.364452][ T719] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 238.374014][ T719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.382386][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.390373][ T719] usb 2-1: Product: syz [ 238.394630][ T719] usb 2-1: Manufacturer: syz [ 238.399825][ T719] usb 2-1: SerialNumber: syz [ 238.483502][ T6] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 238.494727][ T6] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 238.689444][ T6] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 238.698748][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.714977][ T6] usb 4-1: Product: syz [ 238.719378][ T6] usb 4-1: Manufacturer: syz [ 238.724661][ T6] usb 4-1: SerialNumber: syz [ 238.819392][ T719] usb 2-1: 0:1 : does not exist [ 238.824483][ T719] usb 2-1: unit 4 not found! [ 238.829119][ T719] usb 2-1: unit 51 not found! [ 238.835459][ T719] usb 2-1: USB disconnect, device number 101 [ 238.843873][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.884305][ T307] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 238.930122][ T8611] loop2: detected capacity change from 0 to 8192 [ 238.939463][ T331] loop2: p1 p2 p3 [ 238.948994][ T8611] loop2: p1 p2 p3 [ 239.006071][ T577] udevd[577]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 239.006152][ T561] udevd[561]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 239.017657][ T6] snd-usb-audio: probe of 4-1:1.1 failed with error -2 [ 239.026979][ T542] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 239.035235][ T331] udevd[331]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 239.056990][ T577] udevd[577]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 239.058713][ T331] udevd[331]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 239.068861][ T561] udevd[561]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 239.079580][ T6] usb 4-1: USB disconnect, device number 100 [ 239.198641][ T307] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 239.296123][ T790] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 239.523577][ T542] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.532278][ T309] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 239.599434][ T542] usb 5-1: not running at top speed; connect to a high speed hub [ 239.599545][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 239.619163][ T8631] loop3: detected capacity change from 0 to 8192 [ 239.696997][ T542] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.708885][ T542] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.718525][ T542] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.751107][ T790] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 239.759988][ T790] usb 3-1: config 0 has no interface number 0 [ 239.766485][ T790] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 239.776968][ T790] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.891942][ T307] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 239.902387][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.913413][ T307] usb 1-1: config 0 descriptor?? [ 239.924570][ T542] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 239.934135][ T542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.942716][ T542] usb 5-1: Product: syz [ 239.947666][ T542] usb 5-1: Manufacturer: syz [ 239.953131][ T542] usb 5-1: SerialNumber: syz [ 239.957693][ T307] usb 1-1: bad CDC descriptors [ 239.978705][ T790] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 239.987971][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.996061][ T790] usb 3-1: Product: syz [ 240.001157][ T790] usb 3-1: Manufacturer: syz [ 240.005770][ T790] usb 3-1: SerialNumber: syz [ 240.010925][ T790] usb 3-1: config 0 descriptor?? [ 240.032834][ T1014] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 240.032846][ T8617] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 240.043671][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 240.162891][ T309] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.173256][ T309] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 240.180906][ T307] usb 1-1: USB disconnect, device number 98 [ 240.182495][ T309] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.303929][ T542] cdc_ncm 5-1:1.0: skipping garbage [ 240.309213][ T542] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 240.316300][ T790] usb-storage 3-1:0.20: USB Mass Storage device detected [ 240.323388][ T542] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 240.330523][ T542] cdc_ncm 5-1:1.0: bind() failure [ 240.336026][ T790] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 240.349119][ T542] usb 5-1: USB disconnect, device number 102 [ 240.392169][ T790] usb 3-1: USB disconnect, device number 101 [ 240.422907][ T1014] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 240.432871][ T1014] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.466192][ T309] usb 2-1: string descriptor 0 read error: -22 [ 240.472476][ T309] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.482119][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.531666][ T309] cdc_ncm 2-1:1.0: skipping garbage [ 240.537102][ T309] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 240.545325][ T1014] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.555508][ T309] cdc_ncm 2-1:1.0: bind() failure [ 240.563053][ T1014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.572303][ T1014] usb 4-1: SerialNumber: syz [ 240.596262][ T8635] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 240.752661][ T8641] sit: non-ECT from 0.0.0.0 with TOS=0x13 [ 240.785606][ T790] usb 2-1: USB disconnect, device number 102 [ 240.877897][ T1014] usb 4-1: bad CDC descriptors [ 240.902583][ T1014] usb 4-1: USB disconnect, device number 101 [ 240.970222][ T30] audit: type=1400 audit(1786550695.285:266): avc: denied { create } for pid=8674 comm="syz.2.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 241.090693][ T542] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 241.357893][ T542] usb 1-1: Using ep0 maxpacket: 8 [ 241.371892][ T719] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 241.657286][ T542] usb 1-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 241.669124][ T542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.677427][ T542] usb 1-1: Product: syz [ 241.682716][ T542] usb 1-1: Manufacturer: syz [ 241.687945][ T542] usb 1-1: SerialNumber: syz [ 241.693148][ T1014] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 241.699971][ T719] usb 3-1: Using ep0 maxpacket: 8 [ 241.701182][ T309] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 241.892485][ T719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.967253][ T309] usb 2-1: Using ep0 maxpacket: 32 [ 241.999383][ T719] usb 3-1: config 3 has an invalid interface number: 189 but max is 3 [ 242.008443][ T719] usb 3-1: config 3 has an invalid interface number: 178 but max is 3 [ 242.017024][ T719] usb 3-1: config 3 has an invalid interface number: 199 but max is 3 [ 242.025419][ T719] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 242.035001][ T719] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 242.045927][ T719] usb 3-1: config 3 has 3 interfaces, different from the descriptor's value: 4 [ 242.055930][ T719] usb 3-1: config 3 has no interface number 0 [ 242.058039][ T542] usb 1-1: USB disconnect, device number 99 [ 242.063208][ T719] usb 3-1: config 3 has no interface number 1 [ 242.063231][ T719] usb 3-1: config 3 has no interface number 2 [ 242.063262][ T719] usb 3-1: config 3 interface 189 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 242.097756][ T719] usb 3-1: config 3 interface 189 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 242.106339][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 242.109279][ T719] usb 3-1: config 3 interface 178 altsetting 10 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 242.132897][ T719] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 242.138340][ T1014] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.144305][ T719] usb 3-1: config 3 interface 178 altsetting 10 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 242.164475][ T719] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 242.178638][ T307] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 242.187951][ T719] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 242.199569][ T719] usb 3-1: config 3 interface 178 altsetting 10 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 242.214103][ T719] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x9, skipping [ 242.226672][ T719] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 242.234596][ T1014] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.239860][ T719] usb 3-1: config 3 interface 178 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 242.251800][ T1014] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.262999][ T719] usb 3-1: config 3 interface 178 altsetting 10 has an invalid endpoint with address 0x0, skipping [ 242.263044][ T719] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 242.273636][ T1014] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 242.285068][ T719] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 242.285101][ T719] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 242.296516][ T309] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 242.307829][ T719] usb 3-1: config 3 interface 199 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 242.322373][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.342672][ T719] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 242.344737][ T1014] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.360089][ T719] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 242.382140][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.389655][ T719] usb 3-1: config 3 interface 199 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 242.406686][ T309] usb 2-1: Product: syz [ 242.417075][ T719] usb 3-1: config 3 interface 199 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 242.426536][ T309] usb 2-1: Manufacturer: syz [ 242.438533][ T719] usb 3-1: config 3 interface 199 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 242.443013][ T309] usb 2-1: SerialNumber: syz [ 242.463115][ T719] usb 3-1: config 3 interface 178 has no altsetting 0 [ 242.482470][ T309] usb 2-1: config 0 descriptor?? [ 242.483241][ T307] usb 5-1: Using ep0 maxpacket: 16 [ 242.501178][ T719] usb 3-1: config 3 interface 199 has no altsetting 0 [ 242.524540][ T309] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 242.597534][ T1014] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 242.613821][ T1014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.622842][ T1014] usb 4-1: Product: syz [ 242.628485][ T1014] usb 4-1: Manufacturer: syz [ 242.633147][ T1014] usb 4-1: SerialNumber: syz [ 242.645500][ T307] usb 5-1: descriptor type invalid, skip [ 242.652009][ T307] usb 5-1: descriptor type invalid, skip [ 242.658638][ T307] usb 5-1: descriptor type invalid, skip [ 242.702413][ T719] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=7e.0a [ 242.712255][ T719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.720547][ T719] usb 3-1: Product: syz [ 242.725240][ T719] usb 3-1: Manufacturer: syz [ 242.730339][ T719] usb 3-1: SerialNumber: syz [ 242.735957][ T8713] loop0: detected capacity change from 0 to 40427 [ 242.759463][ T307] usb 5-1: config 0 has no interfaces? [ 242.769095][ T8685] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 242.785548][ T20] usb 2-1: USB disconnect, device number 103 [ 242.798554][ T8713] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x712010) [ 242.807267][ T8713] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 242.816906][ T8713] F2FS-fs (loop0): invalid crc value [ 242.824379][ T8713] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 242.847565][ T8713] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 242.855174][ T8713] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 242.934070][ T1014] usb 4-1: USB disconnect, device number 102 [ 242.950440][ T307] usb 5-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 242.976631][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.987326][ T307] usb 5-1: Product: syz [ 242.991885][ T307] usb 5-1: Manufacturer: syz [ 242.996945][ T307] usb 5-1: SerialNumber: syz [ 243.012180][ T307] usb 5-1: config 0 descriptor?? [ 243.171856][ T719] usb 3-1: USB disconnect, device number 102 [ 243.280564][ T307] usb 5-1: USB disconnect, device number 103 [ 243.325217][ T8725] loop1: detected capacity change from 0 to 1024 [ 243.390110][ T8727] loop3: detected capacity change from 0 to 512 [ 243.400843][ T8725] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 243.412745][ T8725] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 243.422798][ T8725] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.4014: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 243.435734][ T8727] EXT4-fs (loop3): Test dummy encryption mode enabled [ 243.440834][ T8725] EXT4-fs (loop1): no journal found [ 243.447917][ T8727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 243.464898][ T8725] EXT4-fs (loop1): can't get journal size [ 243.473812][ T8727] EXT4-fs error (device loop3): ext4_init_orphan_info:584: inode #15: comm syz.3.4015: iget: special inode unallocated [ 243.487857][ T8725] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 243.511277][ T8727] EXT4-fs (loop3): get orphan inode failed [ 243.519742][ T8727] EXT4-fs (loop3): mount failed [ 243.797834][ T8743] cgroup: subsys name conflicts with all [ 243.897443][ T8731] loop2: detected capacity change from 0 to 40427 [ 243.903057][ T8757] loop3: detected capacity change from 0 to 512 [ 243.923485][ T8757] EXT4-fs (loop3): Ignoring removed nobh option [ 243.957638][ T8768] loop1: detected capacity change from 0 to 512 [ 243.964703][ T8757] EXT4-fs error (device loop3): ext4_init_orphan_info:584: comm syz.3.4029: inode #0: comm syz.3.4029: iget: illegal inode # [ 244.010199][ T8757] EXT4-fs (loop3): Remounting filesystem read-only [ 244.048226][ T8768] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 244.080643][ T8757] EXT4-fs (loop3): get orphan inode failed [ 244.094862][ T8757] EXT4-fs (loop3): mount failed [ 244.102747][ T8768] SELinux: duplicate or incompatible mount options [ 244.184768][ T8784] loop2: detected capacity change from 0 to 512 [ 244.273081][ T8784] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6). [ 244.320642][ T8784] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 244.338618][ T8784] EXT4-fs (loop2): mount failed [ 244.417912][ T8828] loop3: detected capacity change from 0 to 256 [ 244.462061][ T8828] FAT-fs (loop3): IO charset none not found [ 244.511470][ T30] audit: type=1400 audit(1786551466.808:267): avc: denied { write } for pid=8837 comm="syz.3.4067" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 244.553326][ T30] audit: type=1400 audit(1786551466.808:268): avc: denied { open } for pid=8837 comm="syz.3.4067" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 244.626577][ T1014] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 244.640940][ T30] audit: type=1326 audit(1786551466.955:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.3.4077" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee33a670d9 code=0x0 [ 244.683600][ T307] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 244.754441][ T8852] loop1: detected capacity change from 0 to 40427 [ 244.770440][ T8852] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 244.778326][ T8852] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 244.788363][ T542] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 244.796817][ T8852] F2FS-fs (loop1): invalid crc value [ 244.805960][ T8852] F2FS-fs (loop1): Found nat_bits in checkpoint [ 244.841994][ T8852] F2FS-fs (loop1): Start checkpoint disabled! [ 244.849296][ T8852] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 244.856929][ T8852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 244.864426][ T1014] usb 5-1: Using ep0 maxpacket: 8 [ 244.915712][ T8866] loop3: detected capacity change from 0 to 40427 [ 244.973049][ T8866] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 244.985711][ T8866] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 244.994093][ T1014] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 244.999676][ T8866] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 245.007968][ T1014] usb 5-1: config 179 has no interface number 0 [ 245.025293][ T1014] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 245.039043][ T1014] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 245.051128][ T1014] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.062789][ T1014] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 245.074037][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.074902][ T1014] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 245.093123][ T307] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 245.099132][ T1014] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 245.120772][ T1014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.159948][ T8816] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 245.179641][ T1014] xpad: probe of 5-1:179.65 failed with error -5 [ 245.195390][ T30] audit: type=1326 audit(1786551467.532:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.3.4091" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee33a670d9 code=0x0 [ 245.207442][ T542] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.251253][ T8890] incfs: Error accessing: ./file0. [ 245.256815][ T8890] incfs: mount failed -2 [ 245.283750][ T719] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 245.306853][ T307] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 245.316936][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.325945][ T307] usb 1-1: Product: syz [ 245.330177][ T307] usb 1-1: Manufacturer: syz [ 245.335130][ T307] usb 1-1: SerialNumber: syz [ 245.378533][ T542] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.379274][ T307] usb-storage 1-1:1.0: USB Mass Storage device detected [ 245.395207][ T542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.400016][ T20] usb 5-1: USB disconnect, device number 104 [ 245.409503][ T542] usb 3-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 245.437455][ T307] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 245.446231][ T307] scsi host1: usb-storage 1-1:1.0 [ 245.451979][ T542] usb 3-1: SerialNumber: syz [ 245.531255][ T719] usb 2-1: Using ep0 maxpacket: 8 [ 245.536417][ T8914] loop3: detected capacity change from 0 to 40427 [ 245.573943][ T309] usb 1-1: USB disconnect, device number 100 [ 245.626985][ T8914] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 245.635201][ T8914] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 245.647363][ T8914] F2FS-fs (loop3): Found nat_bits in checkpoint [ 245.664706][ T719] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 245.671770][ T8914] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 245.676348][ T719] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 245.684585][ T8914] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 245.697767][ T719] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 245.713550][ T719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.741345][ T8876] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 245.760449][ T542] usb 3-1: bad CDC descriptors [ 245.767056][ T542] usb 3-1: USB disconnect, device number 103 [ 245.807240][ T8921] loop3: detected capacity change from 0 to 1024 [ 245.828042][ T8921] EXT4-fs (loop3): Ignoring removed orlov option [ 245.837970][ T8921] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 245.847972][ T8921] EXT4-fs (loop3): invalid journal inode [ 245.988379][ T719] usb 2-1: string descriptor 0 read error: -71 [ 245.997210][ T719] hub 2-1:32.0: USB hub found [ 246.071378][ T8949] overlayfs: conflicting options: nfs_export=on,index=off [ 246.083699][ T719] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 246.141691][ T719] usb 2-1: USB disconnect, device number 104 [ 246.179123][ T309] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 246.281753][ T8979] loop2: detected capacity change from 0 to 16 [ 246.306725][ T8979] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 20, please upgrade kernel version [ 246.333595][ T8971] loop0: detected capacity change from 0 to 40427 [ 246.344281][ T8971] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 246.351454][ T8971] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 246.362237][ T8971] F2FS-fs (loop0): Found nat_bits in checkpoint [ 246.396588][ T8971] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 246.404228][ T8971] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 246.407645][ T309] usb 4-1: Using ep0 maxpacket: 8 [ 246.454933][ T1014] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 246.482433][ T8993] loop1: detected capacity change from 0 to 256 [ 246.493598][ T8993] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 246.504563][ T8993] exFAT-fs (loop1): failed to load upcase table [ 246.517569][ T8993] exFAT-fs (loop1): failed to recognize exfat type [ 246.559207][ T8995] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 246.574178][ T309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.603345][ T9003] loop0: detected capacity change from 0 to 512 [ 246.645507][ T9003] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 246.656740][ T9003] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 246.664601][ T309] usb 4-1: config 10 has an invalid interface number: 188 but max is 0 [ 246.667153][ T9003] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 246.687712][ T309] usb 4-1: config 10 has no interface number 0 [ 246.690816][ T9003] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 246.700715][ T309] usb 4-1: config 10 interface 188 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 246.708175][ T9003] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 246.722713][ T719] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 246.725195][ T309] usb 4-1: config 10 interface 188 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 246.735416][ T9003] EXT4-fs (loop0): failed to initialize system zone (-117) [ 246.749140][ T309] usb 4-1: config 10 interface 188 has no altsetting 0 [ 246.750821][ T9003] EXT4-fs (loop0): mount failed [ 246.875961][ T9024] EXT4-fs (loop0): invalid inodes per group: 0 [ 246.875961][ T9024] [ 246.912696][ T309] usb 4-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=68.be [ 246.922260][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.930254][ T309] usb 4-1: Product: syz [ 246.935353][ T309] usb 4-1: Manufacturer: syz [ 246.940425][ T309] usb 4-1: SerialNumber: syz [ 246.950665][ T719] usb 3-1: Using ep0 maxpacket: 8 [ 246.960034][ T8927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 246.969221][ T1014] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 246.979092][ T1014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.987082][ T1014] usb 5-1: Product: syz [ 246.991382][ T1014] usb 5-1: Manufacturer: syz [ 246.995997][ T1014] usb 5-1: SerialNumber: syz [ 247.001380][ T1014] usb 5-1: config 0 descriptor?? [ 247.026722][ T20] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 247.036727][ T1014] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 247.121944][ T719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.160032][ T63] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 247.198007][ T719] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 92, changing to 7 [ 247.232294][ T1014] usb 5-1: USB disconnect, device number 105 [ 247.242113][ T309] usb 4-1: USB disconnect, device number 103 [ 247.254707][ T1776] udevd[1776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:10.188/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 247.271000][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 247.360071][ T719] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 0.40 [ 247.369913][ T719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.378272][ T719] usb 3-1: Product: syz [ 247.382586][ T719] usb 3-1: Manufacturer: syz [ 247.387387][ T719] usb 3-1: SerialNumber: syz [ 247.426581][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.502770][ T20] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 247.511316][ T20] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 247.521543][ T20] usb 2-1: config 4 has no interface number 0 [ 247.531810][ T63] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 247.542027][ T63] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 247.664711][ T63] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 247.674931][ T63] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 247.688733][ T63] usb 1-1: Product: syz [ 247.693385][ T719] usb 3-1: found format II with max.bitrate = 4, frame size=4 [ 247.693788][ T63] usb 1-1: SerialNumber: syz [ 247.706171][ T719] usb 3-1: found format II with max.bitrate = 4, frame size=4 [ 247.714933][ T30] audit: type=1326 audit(1786551470.188:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9031 comm="syz.3.4157" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee33a670d9 code=0x0 [ 247.750709][ T20] usb 2-1: string descriptor 0 read error: -22 [ 247.759336][ T63] usb 1-1: bad CDC descriptors [ 247.767148][ T20] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 247.782505][ T719] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 247.790027][ T9038] tmpfs: Unknown parameter 'no' [ 247.797210][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.821862][ T719] usb 3-1: USB disconnect, device number 104 [ 247.884834][ T20] uvcvideo 2-1:4.147: Found multiple Units with ID 6 [ 247.892096][ T20] usb 2-1: Found UVC 0.02 device (04f2:b746) [ 247.900694][ T20] usb 2-1: No streaming interface found for terminal 65535. [ 247.925018][ T30] audit: type=1400 audit(1786551470.398:272): avc: denied { mounton } for pid=9053 comm="syz.4.4168" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 247.971935][ T20] usb 1-1: USB disconnect, device number 101 [ 248.047758][ T9070] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 248.057587][ T9070] SELinux: security_context_str_to_sid(user_u) failed for (dev binder, type binder) errno=-22 [ 248.077271][ T719] usb 2-1: USB disconnect, device number 105 [ 248.112104][ T307] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 248.445563][ T20] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 248.518255][ T9108] exFAT-fs (loop0): failed to read boot sector [ 248.524960][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.528655][ T9108] exFAT-fs (loop0): failed to recognize exfat type [ 248.617106][ T307] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 248.663230][ T9128] futex_wake_op: syz.1.4205 tries to shift op by 32; fix this program [ 248.715606][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 248.769427][ T537] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 248.817434][ T307] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 248.826880][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.835030][ T307] usb 4-1: Product: syz [ 248.839387][ T307] usb 4-1: Manufacturer: syz [ 248.844105][ T307] usb 4-1: SerialNumber: syz [ 248.884076][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.960142][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.970487][ T20] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.988609][ T309] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 248.988767][ T6] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 249.027021][ T537] usb 5-1: Using ep0 maxpacket: 32 [ 249.160153][ T20] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 249.169558][ T20] usb 3-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 249.177760][ T20] usb 3-1: Product: syz [ 249.182454][ T20] usb 3-1: Manufacturer: syz [ 249.187907][ T20] usb 3-1: SerialNumber: syz [ 249.207858][ T307] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 249.216149][ T307] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 249.255407][ T307] usb 4-1: failed to enable PITCH for EP 0x1 [ 249.293384][ T307] usb 4-1: unit 2 not found! [ 249.298189][ T307] usb 4-1: unit 0 not found! [ 249.306217][ T307] usb 4-1: USB disconnect, device number 104 [ 249.331786][ T537] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 249.341707][ T537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.350848][ T6] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 249.359787][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.370625][ T537] usb 5-1: Product: syz [ 249.375014][ T537] usb 5-1: Manufacturer: syz [ 249.379572][ T309] usb 2-1: config 120 has an invalid interface number: 125 but max is 0 [ 249.379790][ T537] usb 5-1: SerialNumber: syz [ 249.388777][ T309] usb 2-1: config 120 has no interface number 0 [ 249.393570][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.399910][ T309] usb 2-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 249.409426][ T6] usb 1-1: config 1 has no interface number 0 [ 249.420939][ T309] usb 2-1: config 120 interface 125 has no altsetting 0 [ 249.427181][ T537] usb 5-1: config 0 descriptor?? [ 249.438972][ T6] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 249.450480][ T6] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 249.598239][ T20] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x300, type = 4 [ 249.598470][ T309] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 249.608843][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.617287][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.617312][ T309] usb 2-1: Product: syz [ 249.617326][ T309] usb 2-1: Manufacturer: syz [ 249.627334][ T20] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 249.635693][ T309] usb 2-1: SerialNumber: syz [ 249.640249][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.665210][ T9140] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 249.666550][ T6] usb 1-1: Product: syz [ 249.679619][ T6] usb 1-1: Manufacturer: syz [ 249.684419][ T20] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x800, wIndex = 0x300, type = 7 [ 249.695515][ T6] usb 1-1: SerialNumber: syz [ 249.700399][ T20] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 249.712766][ T537] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 249.721412][ T20] usb 3-1: USB disconnect, device number 105 [ 249.741807][ T6] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 249.748833][ T6] cdc_ncm 1-1:1.1: bind() failure [ 249.762283][ T537] usb 5-1: USB disconnect, device number 106 [ 249.923100][ T1776] udevd[1776]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 249.979671][ T309] ums-usbat 2-1:120.125: USB Mass Storage device detected [ 250.013228][ T537] usb 1-1: USB disconnect, device number 102 [ 250.039579][ T309] ums-usbat: probe of 2-1:120.125 failed with error 3 [ 250.053528][ T309] usb 2-1: USB disconnect, device number 106 [ 250.064862][ T307] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 250.312705][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 250.360218][ T63] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 250.427233][ T20] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 250.484295][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.560515][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.578825][ T307] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 250.606305][ T9186] set_capacity_and_notify: 2 callbacks suppressed [ 250.606319][ T9186] loop0: detected capacity change from 0 to 512 [ 250.625030][ T9186] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.636718][ T9186] ext4 filesystem being mounted at /891/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.674521][ T309] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 250.702035][ T9192] loop0: detected capacity change from 0 to 1024 [ 250.741611][ T9192] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 250.750800][ T307] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 250.750811][ T63] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.750831][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.776585][ T307] usb 4-1: Product: syz [ 250.780877][ T20] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.789955][ T307] usb 4-1: Manufacturer: syz [ 250.794963][ T307] usb 4-1: SerialNumber: syz [ 250.799739][ T20] usb 5-1: config 179 has no interface number 0 [ 250.806303][ T20] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 250.817400][ T20] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 250.829253][ T20] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 250.843398][ T20] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 250.846463][ T63] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 250.853285][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.875615][ T9195] loop0: detected capacity change from 0 to 1024 [ 250.962157][ T9195] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.018240][ T9198] loop0: detected capacity change from 0 to 1024 [ 251.055784][ T9198] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 251.065067][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.113001][ T63] usb 3-1: string descriptor 0 read error: -22 [ 251.119789][ T63] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 251.134598][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.150818][ T542] usb 5-1: USB disconnect, device number 107 [ 251.157937][ T309] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 251.158016][ T9201] loop0: detected capacity change from 0 to 512 [ 251.202953][ T9201] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 251.217923][ T307] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 251.218103][ T63] usb 3-1: unit 4 not found! [ 251.227352][ T577] udevd[577]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 251.252917][ T307] usb 4-1: USB disconnect, device number 105 [ 251.260454][ T9203] loop0: detected capacity change from 0 to 1024 [ 251.284776][ T9203] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.322608][ T309] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 251.332958][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.341600][ T309] usb 2-1: Product: syz [ 251.345862][ T309] usb 2-1: Manufacturer: syz [ 251.352939][ T309] usb 2-1: SerialNumber: syz [ 251.365601][ T9206] loop0: detected capacity change from 0 to 512 [ 251.386353][ T9206] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.403395][ T542] usb 3-1: USB disconnect, device number 106 [ 251.455489][ T9209] loop0: detected capacity change from 0 to 1024 [ 251.552125][ T9209] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.615056][ T9215] loop3: detected capacity change from 0 to 512 [ 251.641236][ T9215] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 251.655750][ T309] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 251.697885][ T9220] loop3: detected capacity change from 0 to 512 [ 251.703414][ T309] usb 2-1: failed to enable PITCH for EP 0x1 [ 251.741291][ T309] usb 2-1: unit 2 not found! [ 251.746199][ T309] usb 2-1: unit 0 not found! [ 251.753677][ T309] usb 2-1: USB disconnect, device number 107 [ 251.787739][ T9220] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.855528][ T307] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 251.934699][ T9229] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 251.961398][ T577] udevd[577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 251.979834][ T542] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 252.074831][ T20] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 252.160640][ T307] usb 1-1: not running at top speed; connect to a high speed hub [ 252.236923][ T307] usb 1-1: config 0 has too many interfaces: 77, using maximum allowed: 32 [ 252.246598][ T307] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 77 [ 252.255762][ T309] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 252.303595][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 252.360582][ T537] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 252.408506][ T307] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 252.418426][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.427083][ T307] usb 1-1: Product: syz [ 252.431298][ T307] usb 1-1: Manufacturer: syz [ 252.436620][ T307] usb 1-1: SerialNumber: syz [ 252.443824][ T307] usb 1-1: config 0 descriptor?? [ 252.512871][ T309] usb 3-1: Using ep0 maxpacket: 8 [ 252.532200][ T542] usb 5-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice= 0.40 [ 252.541927][ T542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.551615][ T542] usb 5-1: Product: syz [ 252.556252][ T542] usb 5-1: Manufacturer: syz [ 252.562051][ T542] usb 5-1: SerialNumber: syz [ 252.570340][ T20] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 252.579631][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.588346][ T20] usb 4-1: Product: syz [ 252.592865][ T537] usb 2-1: Using ep0 maxpacket: 32 [ 252.598825][ T20] usb 4-1: Manufacturer: syz [ 252.603794][ T20] usb 4-1: SerialNumber: syz [ 252.636875][ T309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.647789][ T309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.680905][ T63] usb 1-1: USB disconnect, device number 103 [ 252.713298][ T537] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 252.808447][ T309] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 252.817835][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.825827][ T309] usb 3-1: Product: syz [ 252.830856][ T309] usb 3-1: Manufacturer: syz [ 252.835669][ T309] usb 3-1: SerialNumber: syz [ 252.903490][ T542] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 252.913002][ T537] usb 2-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 252.922258][ T537] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.922481][ T542] usb 5-1: unit 4 not found! [ 252.930522][ T537] usb 2-1: Product: syz [ 252.942100][ T537] usb 2-1: Manufacturer: syz [ 252.947463][ T542] usb 5-1: USB disconnect, device number 108 [ 252.950114][ T537] usb 2-1: SerialNumber: syz [ 253.027400][ T20] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 253.046353][ T20] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 253.054411][ T20] usb 4-1: 2:1 : unsupported sample bitwidth 5 in 9 bytes [ 253.081282][ T20] usb 4-1: USB disconnect, device number 106 [ 253.208293][ T309] usb 3-1: cannot get ctl value: req = 0x83, wValue = 0x800, wIndex = 0x600, type = 7 [ 253.219194][ T309] usb 3-1: 6:0: cannot get min/max values for control 8 (id 6) [ 253.227159][ T309] usb 3-1: unit 4 not found! [ 253.239722][ T309] usb 3-1: USB disconnect, device number 107 [ 253.295158][ T1776] udevd[1776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 253.315783][ T9237] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 253.329654][ T9237] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 253.348305][ T9237] F2FS-fs (loop0): Not support 1048576, larger than 256 [ 253.351523][ T537] usb 2-1: USB disconnect, device number 108 [ 253.437420][ T1776] udevd[1776]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 253.551374][ T542] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 253.799097][ T542] usb 5-1: Using ep0 maxpacket: 8 [ 253.951625][ T542] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.037340][ T542] usb 5-1: config 8 has an invalid interface number: 172 but max is 0 [ 254.055099][ T542] usb 5-1: config 8 has no interface number 0 [ 254.072467][ T542] usb 5-1: config 8 interface 172 has no altsetting 0 [ 254.143370][ T9241] F2FS-fs (loop3): Found nat_bits in checkpoint [ 254.181616][ T9259] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.193858][ T9259] ext4 filesystem being mounted at /850/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.227552][ T542] usb 5-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=c7.75 [ 254.247380][ T9241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.258710][ T542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.258739][ T542] usb 5-1: Product: syz [ 254.258754][ T542] usb 5-1: Manufacturer: syz [ 254.258767][ T542] usb 5-1: SerialNumber: syz [ 254.283351][ T9243] F2FS-fs (loop0): Found nat_bits in checkpoint [ 254.321865][ T9243] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 254.399890][ T9271] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.562827][ T542] rtl8150 5-1:8.172: couldn't find required endpoints [ 254.570034][ T542] rtl8150: probe of 5-1:8.172 failed with error -5 [ 254.600815][ T542] usb 5-1: USB disconnect, device number 109 [ 254.643791][ T9280] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.810271][ T9293] loop2: p2 p3 p7 [ 254.902722][ T576] udevd[576]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 254.914422][ T331] udevd[331]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 254.915215][ T561] udevd[561]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 255.065792][ T309] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 255.075576][ T719] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 255.323232][ T719] usb 2-1: Using ep0 maxpacket: 32 [ 255.446960][ T309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.473478][ T309] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.475624][ T719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.497779][ T9311] set_capacity_and_notify: 24 callbacks suppressed [ 255.497798][ T9311] loop2: detected capacity change from 0 to 512 [ 255.635724][ T30] audit: type=1400 audit(1786551478.496:273): avc: denied { validate_trans } for pid=9314 comm="syz.2.4285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 255.671125][ T309] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 255.691589][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.704098][ T30] audit: type=1400 audit(1786551478.548:274): avc: denied { getopt } for pid=9316 comm="syz.2.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.730676][ T309] usb 1-1: Product: syz [ 255.732983][ T719] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 255.752116][ T309] usb 1-1: Manufacturer: syz [ 255.757141][ T719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.761188][ T309] usb 1-1: SerialNumber: syz [ 255.785352][ T719] usb 2-1: Product: syz [ 255.804966][ T719] usb 2-1: Manufacturer: syz [ 255.814626][ T719] usb 2-1: SerialNumber: syz [ 255.834215][ T30] audit: type=1326 audit(1786551478.706:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.2.4291" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 255.896305][ T30] audit: type=1326 audit(1786551478.737:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.2.4291" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 255.958551][ T30] audit: type=1326 audit(1786551478.737:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.2.4291" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 256.028145][ T30] audit: type=1400 audit(1786551478.831:278): avc: denied { ioctl } for pid=9332 comm="syz.2.4294" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 256.078466][ T9345] loop2: detected capacity change from 0 to 128 [ 256.152044][ T309] usb 1-1: 0:1 : does not exist [ 256.157025][ T309] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 256.187148][ T309] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 256.207748][ T309] usb 1-1: USB disconnect, device number 104 [ 256.254693][ T9351] loop2: detected capacity change from 0 to 512 [ 256.261407][ T719] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 256.332646][ T719] usb 2-1: unit 37 not found! [ 256.337431][ T719] usb 2-1: unit 0 not found! [ 256.419293][ T719] usb 2-1: USB disconnect, device number 109 [ 256.467217][ T9359] loop2: detected capacity change from 0 to 512 [ 256.484525][ T9303] loop3: detected capacity change from 0 to 262144 [ 256.621314][ T30] audit: type=1400 audit(1786551479.535:279): avc: denied { getopt } for pid=9364 comm="syz.1.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.644884][ T9359] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 256.694776][ T9359] ext4 filesystem being mounted at /882/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.802637][ T30] audit: type=1400 audit(1786551479.724:280): avc: denied { create } for pid=9370 comm="syz.1.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.823708][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4313'. [ 256.847592][ T30] audit: type=1400 audit(1786551479.724:281): avc: denied { write } for pid=9370 comm="syz.1.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.887436][ T9373] xt_hashlimit: max too large, truncated to 1048576 [ 256.968351][ T9379] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 257.001924][ T30] audit: type=1400 audit(1786551479.934:282): avc: denied { create } for pid=9380 comm="syz.1.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.037666][ T9379] overlayfs: missing 'lowerdir' [ 257.138070][ T9394] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4322'. [ 257.160767][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4322'. [ 257.195066][ T9400] xt_TCPMSS: Only works on TCP SYN packets [ 257.281913][ T9412] netlink: 'syz.2.4332': attribute type 12 has an invalid length. [ 257.380369][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4338'. [ 257.404645][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4338'. [ 257.464501][ T9430] device bridge1 entered promiscuous mode [ 257.523748][ T719] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 257.759833][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4358'. [ 257.894845][ T719] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 257.911811][ T719] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 257.947206][ T719] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 257.960038][ T9476] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.977107][ T9478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.981923][ T719] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 258.025265][ T719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.087423][ T9466] loop3: detected capacity change from 0 to 32768 [ 258.313898][ T719] usb 2-1: string descriptor 0 read error: -71 [ 258.335114][ T719] usb 2-1: USB disconnect, device number 110 [ 258.361088][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 258.527452][ T9530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4391'. [ 258.690089][ T9552] xt_l2tp: missing protocol rule (udp|l2tpip) [ 258.700475][ T9554] loop0: detected capacity change from 0 to 256 [ 258.810015][ T9554] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.926551][ T9583] loop1: detected capacity change from 0 to 512 [ 259.033851][ T9583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 259.121166][ T9583] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 259.140521][ T9583] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 259.150104][ T9606] device sit0 entered promiscuous mode [ 259.205935][ T9583] EXT4-fs (loop1): 1 truncate cleaned up [ 259.213266][ T9606] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4428'. [ 259.232521][ T9583] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,debug,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 259.236380][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4429'. [ 259.276747][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4431'. [ 259.437602][ T9630] netlink: 'syz.4.4440': attribute type 5 has an invalid length. [ 259.467245][ T9634] loop1: detected capacity change from 0 to 256 [ 259.494555][ T9636] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 259.816213][ T9687] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 260.361989][ T719] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 260.420202][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 260.420221][ T30] audit: type=1400 audit(1786551483.524:305): avc: denied { block_suspend } for pid=9798 comm="syz.4.4517" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 260.626495][ T9817] device vlan0 entered promiscuous mode [ 260.716590][ T30] audit: type=1400 audit(1786551483.829:306): avc: denied { getopt } for pid=9833 comm="syz.0.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.772018][ T719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.801692][ T30] audit: type=1400 audit(1786551483.923:307): avc: denied { setopt } for pid=9838 comm="syz.2.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.985023][ T30] audit: type=1326 audit(1786551484.112:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.2.4549" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 261.019475][ T542] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 261.027927][ T30] audit: type=1326 audit(1786551484.143:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.2.4549" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 261.108188][ T719] usb 2-1: string descriptor 0 read error: -22 [ 261.124069][ T719] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 261.140139][ T719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.148284][ T30] audit: type=1326 audit(1786551484.143:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.2.4549" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 261.196902][ T9879] netlink: 'syz.0.4558': attribute type 3 has an invalid length. [ 261.197843][ T30] audit: type=1326 audit(1786551484.143:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.2.4549" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 261.314476][ T30] audit: type=1326 audit(1786551484.143:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.2.4549" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 261.351751][ T30] audit: type=1326 audit(1786551484.143:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.2.4549" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 261.400610][ T30] audit: type=1326 audit(1786551484.143:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.2.4549" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fde590e50d9 code=0x7ffc0000 [ 261.457810][ T542] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.466579][ T542] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.466997][ T719] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 261.486540][ T542] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 261.609794][ T542] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.635099][ T542] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.659397][ T542] usb 5-1: Product: syz [ 261.663975][ T542] usb 5-1: Manufacturer: syz [ 261.705077][ T719] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 261.719104][ T9927] xt_TPROXY: Can be used only with -p tcp or -p udp [ 261.735063][ T719] usb 2-1: USB disconnect, device number 111 [ 261.856146][ T9938] loop0: detected capacity change from 0 to 4096 [ 261.911321][ T9940] netlink: 'syz.2.4586': attribute type 3 has an invalid length. [ 261.915354][ T9938] EXT4-fs (loop0): Test dummy encryption mode enabled [ 261.924546][ T20] usb 5-1: USB disconnect, device number 110 [ 261.932907][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.963029][ T9938] EXT4-fs (loop0): Test dummy encryption mode enabled [ 261.985236][ T9942] __nla_validate_parse: 5 callbacks suppressed [ 261.985257][ T9942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4587'. [ 262.001667][ T9942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4587'. [ 262.012053][ T9942] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4587'. [ 262.020477][ T9938] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,barrier,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 262.261294][ T9960] IPv6: sit1: Disabled Multicast RS [ 262.511035][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4607'. [ 262.537248][ T9987] loop1: detected capacity change from 0 to 256 [ 262.582150][ T9991] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 262.623123][ T9995] xt_l2tp: v2 doesn't support IP mode [ 262.691078][T10001] device syz_tun entered promiscuous mode [ 262.716257][T10001] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 262.755073][T10003] netlink: 'syz.0.4615': attribute type 16 has an invalid length. [ 262.764104][T10003] netlink: 'syz.0.4615': attribute type 17 has an invalid length. [ 262.816628][T10012] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4622'. [ 262.837384][T10012] netlink: 'syz.0.4622': attribute type 1 has an invalid length. [ 262.891097][T10026] loop1: detected capacity change from 0 to 128 [ 263.022043][ T9859] loop3: detected capacity change from 0 to 262144 [ 263.311109][T10083] loop2: detected capacity change from 0 to 512 [ 263.421538][T10083] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 263.434726][T10083] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 263.438486][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4659'. [ 263.455462][T10083] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.490744][T10097] device bridge1 entered promiscuous mode [ 263.501577][T10083] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.4653: Allocating blocks 41-42 which overlap fs metadata [ 263.524557][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.546798][T10083] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.4653: Failed to acquire dquot type 1 [ 263.562267][T10103] loop3: detected capacity change from 0 to 512 [ 263.589334][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.610166][T10083] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 263.625479][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.632625][T10083] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #12: comm syz.2.4653: corrupted inode contents [ 263.645757][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.660043][T10083] EXT4-fs error (device loop2): ext4_dirty_inode:6108: inode #12: comm syz.2.4653: mark_inode_dirty error [ 263.676978][T10103] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,bsddf,,errors=continue. Quota mode: writeback. [ 263.698418][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.727458][T10083] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #12: comm syz.2.4653: corrupted inode contents [ 263.729226][T10103] ext4 filesystem being mounted at /874/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.756260][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.763215][T10083] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.4653: mark_inode_dirty error [ 263.774873][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.782769][T10083] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #12: comm syz.2.4653: corrupted inode contents [ 263.797382][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.805669][T10083] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 263.833068][T10119] loop0: detected capacity change from 0 to 4096 [ 263.836871][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.866207][T10083] EXT4-fs error (device loop2): ext4_do_update_inode:5260: inode #12: comm syz.2.4653: corrupted inode contents [ 263.879837][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.885307][T10132] netlink: 588 bytes leftover after parsing attributes in process `syz.4.4676'. [ 263.888288][T10119] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 263.908386][T10083] EXT4-fs error (device loop2): ext4_truncate:4317: inode #12: comm syz.2.4653: mark_inode_dirty error [ 263.910911][T10119] EXT4-fs (loop0): Test dummy encryption mode enabled [ 263.924459][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.933294][T10083] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 263.934247][T10132] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.951942][T10119] EXT4-fs (loop0): Test dummy encryption mode enabled [ 263.957252][T10132] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 263.959373][T10083] EXT4-fs (loop2): Remounting filesystem read-only [ 263.982571][T10119] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 263.982571][T10119] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 263.982571][T10119] [ 263.988355][T10083] EXT4-fs (loop2): 1 truncate cleaned up [ 264.011214][T10134] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 264.019236][T10083] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,mblk_io_submit,errors=remount-ro,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2. Quota mode: writeback. [ 264.035249][T10119] EXT4-fs (loop0): Ignoring removed bh option [ 264.069389][T10119] EXT4-fs (loop0): Ignoring removed orlov option [ 264.100360][T10119] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84e4018, mo2=0003] [ 264.115899][T10119] System zones: 0-5 [ 264.134513][T10119] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,test_dummy_encryption,test_dummy_encryption,noacl,journal_dev=0x0000000000000100,delalloc,usrquota,bh,orlov,,errors=continue. Quota mode: writeback. [ 264.273098][T10119] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 264.347440][T10172] loop3: detected capacity change from 0 to 256 [ 264.878250][T10244] loop0: detected capacity change from 0 to 128 [ 264.899287][T10236] loop3: detected capacity change from 0 to 4096 [ 264.917667][T10244] FAT-fs (loop0): Directory bread(block 162) failed [ 264.936306][T10236] EXT4-fs (loop3): Ignoring removed nobh option [ 264.950880][T10244] FAT-fs (loop0): Directory bread(block 163) failed [ 264.968917][T10236] EXT4-fs (loop3): Test dummy encryption mode enabled [ 264.972900][T10244] FAT-fs (loop0): Directory bread(block 164) failed [ 264.996844][T10244] FAT-fs (loop0): Directory bread(block 165) failed [ 265.004009][T10236] EXT4-fs (loop3): Ignoring removed oldalloc option [ 265.014665][T10244] FAT-fs (loop0): Directory bread(block 166) failed [ 265.053710][T10244] FAT-fs (loop0): Directory bread(block 167) failed [ 265.065505][T10236] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,test_dummy_encryption=v1,inlinecrypt,journal_dev=0x0000000000000006,noinit_itable,nombcache,minixdf,nodioread_nolock,errors=remount-ro,oldalloc,nolazytime,max_dir_size_kb=0x0000000000000001,. Quota mode: writeback. [ 265.068778][T10244] FAT-fs (loop0): Directory bread(block 168) failed [ 265.106910][T10244] FAT-fs (loop0): Directory bread(block 169) failed [ 265.114149][T10244] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.115955][T10236] overlayfs: missing 'workdir' [ 265.152710][T10244] FAT-fs (loop0): Directory bread(block 162) failed [ 265.159587][T10244] FAT-fs (loop0): Directory bread(block 163) failed [ 265.167044][T10244] attempt to access beyond end of device [ 265.167044][T10244] loop0: rw=3, want=232, limit=128 [ 265.187438][T10244] attempt to access beyond end of device [ 265.187438][T10244] loop0: rw=2051, want=234, limit=128 [ 265.213623][ T30] kauditd_printk_skb: 1268 callbacks suppressed [ 265.213920][ T30] audit: type=1400 audit(1786551488.553:1580): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 265.278833][ T30] audit: type=1400 audit(1786551488.553:1581): avc: denied { read write } for pid=286 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.304495][ T30] audit: type=1400 audit(1786551488.553:1582): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.360404][T10272] device bridge_slave_1 left promiscuous mode [ 265.384379][T10272] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.440075][T10272] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 265.471644][ T30] audit: type=1400 audit(1786551488.553:1583): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.498627][T10279] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.566979][ T30] audit: type=1400 audit(1786551488.553:1584): avc: denied { read } for pid=10258 comm="syz.2.4735" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.613171][ T30] audit: type=1400 audit(1786551488.553:1585): avc: denied { open } for pid=10258 comm="syz.2.4735" path="net:[4026532464]" dev="nsfs" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 265.613205][ T30] audit: type=1400 audit(1786551488.553:1586): avc: denied { create } for pid=10258 comm="syz.2.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.613227][ T30] audit: type=1400 audit(1786551488.563:1587): avc: denied { read write } for pid=286 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.613251][ T30] audit: type=1400 audit(1786551488.563:1588): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.613275][ T30] audit: type=1400 audit(1786551488.563:1589): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.626927][T10279] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.4747: inode has both inline data and extents flags [ 265.782284][T10304] netlink: 588 bytes leftover after parsing attributes in process `syz.2.4756'. [ 265.807325][T10304] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.823924][T10279] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.4747: couldn't read orphan inode 15 (err -117) [ 265.844023][T10279] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,dioread_nolock,quota,nobarrier,,errors=continue. Quota mode: writeback. [ 265.865648][T10304] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 265.895788][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4764'. [ 265.914208][T10319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.994997][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4766'. [ 266.177459][T10349] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 266.229182][T10353] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 266.331980][T10371] kernel profiling enabled (shift: 63) [ 266.357346][T10371] profiling shift: 63 too large [ 266.369930][T10375] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 266.629189][T10408] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 266.889273][T10447] xt_TPROXY: Can be used only with -p tcp or -p udp [ 267.040713][T10461] netlink: 'syz.3.4833': attribute type 5 has an invalid length. [ 267.327895][T10498] netlink: 'syz.1.4852': attribute type 2 has an invalid length. [ 267.338637][T10498] __nla_validate_parse: 4 callbacks suppressed [ 267.338653][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4852'. [ 267.390540][T10498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.465272][T10512] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4861'. [ 267.626652][T10526] netlink: 'syz.4.4866': attribute type 13 has an invalid length. [ 267.904718][T10558] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 268.071515][T10578] ================================================================== [ 268.079909][T10578] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 268.088207][T10578] Read of size 4 at addr ffff88810d654470 by task syz.3.4893/10578 [ 268.096227][T10578] [ 268.098563][T10578] CPU: 1 PID: 10578 Comm: syz.3.4893 Tainted: G W syzkaller #0 [ 268.107618][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.117852][T10578] Call Trace: [ 268.121235][T10578] [ 268.124169][T10578] __dump_stack+0x21/0x30 [ 268.128769][T10578] dump_stack_lvl+0x110/0x170 [ 268.133455][T10578] ? show_regs_print_info+0x20/0x20 [ 268.138654][T10578] ? load_image+0x3f0/0x3f0 [ 268.143265][T10578] print_address_description+0x7f/0x2c0 [ 268.148829][T10578] ? unaccount_page_cache_page+0x6f1/0x760 [ 268.154730][T10578] kasan_report+0x10f/0x150 [ 268.159528][T10578] ? unaccount_page_cache_page+0x6f1/0x760 [ 268.165535][T10578] __asan_report_load4_noabort+0x14/0x20 [ 268.171195][T10578] unaccount_page_cache_page+0x6f1/0x760 [ 268.176878][T10578] __delete_from_page_cache+0xbe/0x470 [ 268.182356][T10578] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 268.189502][T10578] ? __kasan_check_write+0x14/0x20 [ 268.194851][T10578] ? __kasan_check_read+0x11/0x20 [ 268.199909][T10578] ? workingset_eviction+0x402/0x9f0 [ 268.205499][T10578] __remove_mapping+0x601/0x990 [ 268.210359][T10578] ? remove_mapping+0xa0/0xa0 [ 268.215286][T10578] ? __kasan_check_read+0x11/0x20 [ 268.220417][T10578] shrink_page_list+0x2a24/0x5800 [ 268.225655][T10578] ? shrink_page_list+0x8e1/0x5800 [ 268.230814][T10578] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 268.237144][T10578] ? __this_cpu_preempt_check+0x13/0x20 [ 268.242866][T10578] ? __mod_zone_page_state+0x8e/0xd0 [ 268.248261][T10578] ? isolate_lru_pages+0xff1/0x11f0 [ 268.253847][T10578] ? should_run_aging+0x410/0x410 [ 268.259001][T10578] ? cgroup_rstat_updated+0x30/0x360 [ 268.264461][T10578] ? __this_cpu_preempt_check+0x13/0x20 [ 268.270129][T10578] ? __count_memcg_events+0xad/0x120 [ 268.275435][T10578] shrink_lruvec+0x1297/0x3a40 [ 268.280293][T10578] ? release_firmware_map_entry+0x190/0x190 [ 268.286369][T10578] ? wake_up_process+0x20/0x20 [ 268.291491][T10578] ? mem_cgroup_shrink_node+0x550/0x550 [ 268.297161][T10578] ? preempt_schedule_common+0xbe/0xf0 [ 268.303460][T10578] ? schedule_preempt_disabled+0x20/0x20 [ 268.309273][T10578] ? __kasan_check_write+0x14/0x20 [ 268.314614][T10578] ? _raw_spin_lock+0x94/0xf0 [ 268.319394][T10578] ? _raw_spin_trylock_bh+0x150/0x150 [ 268.325251][T10578] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 268.332065][T10578] ? inactive_is_low+0x160/0x2f0 [ 268.337271][T10578] ? css_next_descendant_pre+0x1e1/0x210 [ 268.343353][T10578] ? mem_cgroup_iter+0x465/0x6c0 [ 268.348479][T10578] shrink_node+0x11ee/0x2a40 [ 268.353489][T10578] ? allow_direct_reclaim+0x370/0x370 [ 268.358879][T10578] do_try_to_free_pages+0x5a7/0x1580 [ 268.364413][T10578] ? try_to_free_pages+0xc50/0xc50 [ 268.369557][T10578] ? simple_strntoull+0x10e/0x180 [ 268.374783][T10578] try_to_free_mem_cgroup_pages+0x261/0x610 [ 268.380710][T10578] ? shrink_lruvec+0x3a40/0x3a40 [ 268.386075][T10578] ? mutex_unlock+0x8f/0x230 [ 268.390782][T10578] ? __kasan_check_read+0x11/0x20 [ 268.395908][T10578] ? page_counter_set_max+0x65/0x140 [ 268.401757][T10578] mem_cgroup_resize_max+0x309/0x3e0 [ 268.407312][T10578] mem_cgroup_write+0x1ed/0x230 [ 268.412199][T10578] ? mem_cgroup_reset+0x130/0x130 [ 268.417236][T10578] ? __kasan_check_write+0x14/0x20 [ 268.422457][T10578] ? _copy_from_iter+0x4a4/0x10a0 [ 268.427579][T10578] ? mem_cgroup_reset+0x130/0x130 [ 268.432607][T10578] cgroup_file_write+0x294/0x560 [ 268.437642][T10578] ? cgroup_seqfile_stop+0xc0/0xc0 [ 268.442816][T10578] ? mutex_lock+0x9b/0x1c0 [ 268.447446][T10578] ? wait_for_completion_killable_timeout+0x10/0x10 [ 268.454138][T10578] ? __kasan_check_write+0x14/0x20 [ 268.459378][T10578] ? cgroup_seqfile_stop+0xc0/0xc0 [ 268.464522][T10578] kernfs_fop_write_iter+0x2bd/0x400 [ 268.469852][T10578] vfs_write+0x831/0xfd0 [ 268.474097][T10578] ? file_end_write+0x1b0/0x1b0 [ 268.479218][T10578] ? wait_for_completion_killable_timeout+0x10/0x10 [ 268.486029][T10578] ? __fget_files+0x2e1/0x340 [ 268.490991][T10578] ? __fdget_pos+0x2d2/0x380 [ 268.495771][T10578] ? ksys_write+0x70/0x260 [ 268.500211][T10578] ksys_write+0x14a/0x260 [ 268.504697][T10578] ? __ia32_sys_read+0x90/0x90 [ 268.509489][T10578] ? __kasan_check_write+0x14/0x20 [ 268.514616][T10578] ? switch_fpu_return+0x15d/0x2c0 [ 268.519907][T10578] __x64_sys_write+0x7b/0x90 [ 268.524510][T10578] x64_sys_call+0x8ef/0x9a0 [ 268.529209][T10578] do_syscall_64+0x4c/0xa0 [ 268.533885][T10578] ? clear_bhb_loop+0x50/0xa0 [ 268.538587][T10578] ? clear_bhb_loop+0x50/0xa0 [ 268.543607][T10578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.549527][T10578] RIP: 0033:0x7fee33a670d9 [ 268.554219][T10578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.574365][T10578] RSP: 002b:00007fee324c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.582927][T10578] RAX: ffffffffffffffda RBX: 00007fee33ceefa0 RCX: 00007fee33a670d9 [ 268.591391][T10578] RDX: 0000000000000119 RSI: 0000200000000340 RDI: 0000000000000003 [ 268.599986][T10578] RBP: 00007fee33afe024 R08: 0000000000000000 R09: 0000000000000000 [ 268.608211][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.616462][T10578] R13: 00007fee33cef038 R14: 00007fee33ceefa0 R15: 00007ffe0389daf8 [ 268.624673][T10578] [ 268.627715][T10578] [ 268.630044][T10578] Allocated by task 289: [ 268.634294][T10578] __kasan_kmalloc+0xd4/0x100 [ 268.639076][T10578] __kmalloc_track_caller+0x13c/0x2c0 [ 268.644451][T10578] __alloc_skb+0x210/0x730 [ 268.648899][T10578] audit_log_start+0x407/0x8a0 [ 268.653760][T10578] common_lsm_audit+0xd2/0x1670 [ 268.658807][T10578] slow_avc_audit+0x1c4/0x240 [ 268.663580][T10578] avc_has_extended_perms+0x943/0xed0 [ 268.669126][T10578] ioctl_has_perm+0x3ab/0x4f0 [ 268.673800][T10578] selinux_file_ioctl+0x3ad/0x4c0 [ 268.678918][T10578] security_file_ioctl+0x74/0xa0 [ 268.683851][T10578] __se_sys_ioctl+0x53/0x1a0 [ 268.688448][T10578] __x64_sys_ioctl+0x7b/0x90 [ 268.693153][T10578] x64_sys_call+0x2f/0x9a0 [ 268.697629][T10578] do_syscall_64+0x4c/0xa0 [ 268.702234][T10578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.708274][T10578] [ 268.710636][T10578] Freed by task 30: [ 268.714528][T10578] kasan_set_track+0x4a/0x70 [ 268.719140][T10578] kasan_set_free_info+0x23/0x40 [ 268.724079][T10578] ____kasan_slab_free+0x125/0x160 [ 268.729189][T10578] __kasan_slab_free+0x11/0x20 [ 268.734064][T10578] slab_free_freelist_hook+0xc2/0x190 [ 268.739553][T10578] kfree+0xc4/0x270 [ 268.743472][T10578] skb_release_data+0x7bd/0xa20 [ 268.748338][T10578] kfree_skb+0xb9/0x2f0 [ 268.752608][T10578] kauditd_hold_skb+0x116/0x210 [ 268.757818][T10578] kauditd_send_queue+0x28c/0x2e0 [ 268.762856][T10578] kauditd_thread+0x4ea/0x880 [ 268.767650][T10578] kthread+0x3f5/0x4f0 [ 268.771730][T10578] ret_from_fork+0x1f/0x30 [ 268.776255][T10578] [ 268.778574][T10578] Last potentially related work creation: [ 268.784292][T10578] kasan_save_stack+0x3a/0x60 [ 268.788974][T10578] __kasan_record_aux_stack+0xd2/0x100 [ 268.794521][T10578] kasan_record_aux_stack_noalloc+0xb/0x10 [ 268.800339][T10578] insert_work+0x51/0x310 [ 268.804678][T10578] __queue_work+0x8e1/0xc60 [ 268.809184][T10578] queue_work_on+0xde/0x150 [ 268.813878][T10578] destroy_super_rcu+0xd1/0xe0 [ 268.818832][T10578] rcu_do_batch+0x4c1/0xbf0 [ 268.823690][T10578] rcu_core+0x4a3/0xef0 [ 268.827859][T10578] rcu_core_si+0x9/0x10 [ 268.832019][T10578] handle_softirqs+0x250/0x560 [ 268.836791][T10578] run_ksoftirqd+0x28/0x40 [ 268.841206][T10578] smpboot_thread_fn+0x446/0x880 [ 268.846142][T10578] kthread+0x3f5/0x4f0 [ 268.850228][T10578] ret_from_fork+0x1f/0x30 [ 268.854745][T10578] [ 268.857185][T10578] Second to last potentially related work creation: [ 268.863910][T10578] kasan_save_stack+0x3a/0x60 [ 268.868703][T10578] __kasan_record_aux_stack+0xd2/0x100 [ 268.874410][T10578] kasan_record_aux_stack_noalloc+0xb/0x10 [ 268.880331][T10578] call_rcu+0x10b/0xf60 [ 268.884618][T10578] __put_super+0x26b/0x2d0 [ 268.889239][T10578] deactivate_locked_super+0xd4/0x100 [ 268.895066][T10578] deactivate_super+0xaf/0xe0 [ 268.899860][T10578] cleanup_mnt+0x44f/0x500 [ 268.904489][T10578] __cleanup_mnt+0x19/0x20 [ 268.908927][T10578] task_work_run+0x127/0x190 [ 268.913523][T10578] exit_to_user_mode_loop+0xd0/0xe0 [ 268.918734][T10578] exit_to_user_mode_prepare+0x87/0xd0 [ 268.924560][T10578] syscall_exit_to_user_mode+0x1a/0x30 [ 268.930319][T10578] do_syscall_64+0x58/0xa0 [ 268.934880][T10578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.940962][T10578] [ 268.943330][T10578] The buggy address belongs to the object at ffff88810d654000 [ 268.943330][T10578] which belongs to the cache kmalloc-2k of size 2048 [ 268.957883][T10578] The buggy address is located 1136 bytes inside of [ 268.957883][T10578] 2048-byte region [ffff88810d654000, ffff88810d654800) [ 268.971564][T10578] The buggy address belongs to the page: [ 268.977212][T10578] page:ffffea0004359400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d650 [ 268.987571][T10578] head:ffffea0004359400 order:3 compound_mapcount:0 compound_pincount:0 [ 268.995903][T10578] flags: 0x4000000000010200(slab|head|zone=1) [ 269.002066][T10578] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043200 [ 269.010784][T10578] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 269.019670][T10578] page dumped because: kasan: bad access detected [ 269.026081][T10578] page_owner tracks the page as allocated [ 269.032013][T10578] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20, ts 25095337753, free_ts 24686453173 [ 269.052344][T10578] post_alloc_hook+0x192/0x1b0 [ 269.057122][T10578] prep_new_page+0x1c/0x110 [ 269.061803][T10578] get_page_from_freelist+0x2c3a/0x2cd0 [ 269.067371][T10578] __alloc_pages+0x1a2/0x460 [ 269.071972][T10578] new_slab+0xa0/0x4d0 [ 269.076039][T10578] ___slab_alloc+0x3ac/0x840 [ 269.080715][T10578] __slab_alloc+0x49/0x90 [ 269.085047][T10578] kmem_cache_alloc_trace+0x146/0x270 [ 269.090422][T10578] wg_noise_handshake_begin_session+0xd5/0x740 [ 269.096687][T10578] wg_packet_send_handshake_response+0x135/0x230 [ 269.103037][T10578] wg_packet_handshake_receive_worker+0x512/0x910 [ 269.109884][T10578] process_one_work+0x6c8/0xbb0 [ 269.114735][T10578] worker_thread+0xaa0/0x1250 [ 269.119498][T10578] kthread+0x3f5/0x4f0 [ 269.123599][T10578] ret_from_fork+0x1f/0x30 [ 269.128024][T10578] page last free stack trace: [ 269.132869][T10578] free_unref_page_prepare+0x5fa/0x600 [ 269.138383][T10578] free_unref_page+0xae/0x540 [ 269.143077][T10578] __free_pages+0x6c/0x100 [ 269.147501][T10578] __free_slab+0xe5/0x1e0 [ 269.151835][T10578] __unfreeze_partials+0x15a/0x190 [ 269.156957][T10578] put_cpu_partial+0xc6/0x120 [ 269.161666][T10578] __slab_free+0x1d4/0x290 [ 269.166126][T10578] ___cache_free+0x104/0x120 [ 269.170812][T10578] qlink_free+0x4d/0x90 [ 269.174997][T10578] qlist_free_all+0x5f/0xb0 [ 269.179502][T10578] kasan_quarantine_reduce+0x14a/0x170 [ 269.184966][T10578] __kasan_slab_alloc+0x2f/0xe0 [ 269.189809][T10578] slab_post_alloc_hook+0x4f/0x2b0 [ 269.194924][T10578] kmem_cache_alloc+0xf7/0x260 [ 269.199728][T10578] __alloc_skb+0xe4/0x730 [ 269.204319][T10578] netlink_ack+0x35c/0xb10 [ 269.208836][T10578] [ 269.211296][T10578] Memory state around the buggy address: [ 269.217080][T10578] ffff88810d654300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.225518][T10578] ffff88810d654380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.233683][T10578] >ffff88810d654400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.242016][T10578] ^ [ 269.249948][T10578] ffff88810d654480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.258025][T10578] ffff88810d654500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 269.266168][T10578] ================================================================== [ 269.274608][T10578] Disabling lock debugging due to kernel taint