last executing test programs: 1.994441729s ago: executing program 2 (id=3703): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 1.762628184s ago: executing program 2 (id=3722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002480)={r0, &(0x7f00000013c0), 0x0}, 0x20) 1.747840624s ago: executing program 2 (id=3724): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r0, &(0x7f00000000c0)=""/39, 0xffc3) 1.715126565s ago: executing program 2 (id=3728): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000001480)=0x2, 0x12) 1.679917126s ago: executing program 2 (id=3733): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, &(0x7f00000005c0)) 425.408449ms ago: executing program 1 (id=3832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 311.634661ms ago: executing program 1 (id=3840): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) 289.092132ms ago: executing program 3 (id=3845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5}]}}}]}, 0x44}}, 0x0) 268.583922ms ago: executing program 0 (id=3846): futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 239.721573ms ago: executing program 3 (id=3847): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='1-6:5'], 0x31) 239.335853ms ago: executing program 1 (id=3848): futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x1, 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x0) 231.944743ms ago: executing program 3 (id=3850): r0 = inotify_init() ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x5452, &(0x7f0000000000)={'sit0\x00', 0x0}) 169.430895ms ago: executing program 3 (id=3851): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x123841, 0x0) write(r0, 0x0, 0x0) 169.312585ms ago: executing program 3 (id=3853): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) 169.187055ms ago: executing program 0 (id=3854): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) 146.594936ms ago: executing program 3 (id=3856): syz_usb_connect$uac2(0x3, 0x8c, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0xed, 0x50, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x6, 0x1a, 0x3}, [@selector_unit={0x5, 0x24, 0xb, 0x6}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x301, 0x5, 0x6, 0x4, 0xfffc, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xbe, 0x8, 0x9, {0x8, 0x25, 0x1, 0x1, 0x33, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x80, 0x2, {0x8, 0x25, 0x1, 0x80, 0x0, 0xf9, 0x5}}}}}}}}]}}, 0x0) time(&(0x7f0000000080)) 139.057806ms ago: executing program 0 (id=3857): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00'], 0x28, 0x7ffffff7}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @mcast1, 0xe4}, 0x1c, 0x0}}], 0x2, 0x4040) 123.334577ms ago: executing program 4 (id=3858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0xa, 0x460202}) 122.994277ms ago: executing program 1 (id=3859): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="426177000000000000000000000000000000000000000000000000000000000004"], 0x68) 102.635757ms ago: executing program 4 (id=3860): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8932, &(0x7f0000000180)="9a10192e633a84") 92.220987ms ago: executing program 1 (id=3861): r0 = syz_open_procfs(0x0, &(0x7f00000022c0)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f00000020c0)=""/168, 0xa8}, {0x0}], 0x2, 0x8, 0x10000) 90.528367ms ago: executing program 0 (id=3862): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x2000000) 72.729418ms ago: executing program 4 (id=3863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x2e0, 0xd0, 0x2e0, 0x0, 0x428, 0x588, 0x588, 0x2e0, 0x588, 0x588, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 49.312378ms ago: executing program 4 (id=3864): setresuid(0xee01, 0xee00, 0x0) setfsuid(0xee01) 48.826898ms ago: executing program 2 (id=3865): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) 16.712499ms ago: executing program 4 (id=3866): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@remote}, 0x14) 16.588539ms ago: executing program 0 (id=3867): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x20007ff, 0x3ff, 0x0, 0x59, 0xb}) 16.314029ms ago: executing program 1 (id=3868): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) 80.869µs ago: executing program 0 (id=3869): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,errors=remount-ro,iocharset=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000000,namecase=1,umask=00000000000000000000165,fmask=00000000000000000166141,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c7a65726f5f73697a655f6469722c74696d655f6f66667365743d3078303030303030303030303030303030352c6572726f72733d636f6e74696e75030000213258e0b74d31428201eec914b0a1309eef6fa67f9c9acd3d0f7faecfc7606d1780acf362e8c2eb308f9f6bf0dbc2a6f3bbfd298af0966c8df51bff17a1d884d217f3d05e3184594b42b733f1401e6a7a99717441f7f836034df7231df364ad31334b3e1b0fd15371b2e2ee9dc35f553c93625b158095a0ab77f5b32eab3e4252e792f82e28c94d176244e9c652c8aa0a5b60222a3643598acaee5d91428250f1a54198f0b60a932f"], 0x1, 0x1535, &(0x7f0000001380)="$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") getxattr(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3870): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, {0x3, 0xf, 0x4}}, 0xc) kernel console output (not intermixed with test programs): nd, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.336933][ T2353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.345026][ T2353] usb 3-1: SerialNumber: syz [ 140.393958][ T2353] cdc_acm 3-1:1.0: skipping garbage [ 140.443471][ T2353] usb 5-1: USB disconnect, device number 46 [ 140.521507][ T5197] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 140.546397][ T5197] F2FS-fs (loop1): invalid crc value [ 140.553148][ T5197] F2FS-fs (loop1): invalid crc value [ 140.558557][ T5197] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 140.588592][ T612] usb 3-1: USB disconnect, device number 47 [ 140.622602][ T5206] SELinux: duplicate or incompatible mount options [ 140.772743][ T5227] futex_wake_op: syz.3.2186 tries to shift op by -1; fix this program [ 140.804617][ T5224] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 140.819719][ T5224] EXT4-fs (loop1): mount failed [ 141.060221][ T612] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 141.208652][ T5256] cgroup2: Unknown parameter 'defcontextL' [ 141.260164][ T365] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 141.298580][ T612] usb 4-1: Using ep0 maxpacket: 32 [ 141.334552][ T5274] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 141.431659][ T612] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.450914][ T612] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16 [ 141.470010][ T612] usb 4-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 64 [ 141.480292][ T520] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 141.489080][ T365] usb 2-1: Using ep0 maxpacket: 8 [ 141.498149][ T612] usb 4-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.531183][ T612] usb 4-1: config 1 interface 0 has no altsetting 0 [ 141.603437][ T365] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.613593][ T365] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.622430][ T612] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.622614][ T365] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.650899][ T612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 141.659095][ T612] usb 4-1: SerialNumber: syz [ 141.665768][ T5283] loop2: p1 < > p3 < > p4 [ 141.670442][ T5283] loop2: partition table partially beyond EOD, truncated [ 141.679777][ T5283] loop2: p4 start 1426063360 is beyond EOD, truncated [ 141.689214][ T5230] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.696401][ T5230] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 141.717853][ T612] hub 4-1:1.0: bad descriptor, ignoring hub [ 141.733938][ T612] hub: probe of 4-1:1.0 failed with error -5 [ 141.746247][ T612] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 141.758353][ T520] usb 1-1: Using ep0 maxpacket: 16 [ 141.758535][ T365] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 141.776616][ T365] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 141.785265][ T365] usb 2-1: Product: syz [ 141.789660][ T365] usb 2-1: SerialNumber: syz [ 141.859016][ T341] udevd[341]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 141.870530][ T651] udevd[651]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 141.898607][ T520] usb 1-1: config index 0 descriptor too short (expected 92, got 68) [ 141.906824][ T520] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.918908][ T520] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.932726][ T612] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 141.974973][ T612] usb 4-1: USB disconnect, device number 51 [ 142.012822][ T520] usb 1-1: New USB device found, idVendor=0541, idProduct=a4a1, bcdDevice= 0.40 [ 142.027523][ T520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.035649][ T520] usb 1-1: SerialNumber: syz [ 142.055698][ T5285] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.070505][ T365] cdc_ncm 2-1:1.0: bind() failure [ 142.079733][ T520] hub 1-1:1.0: bad descriptor, ignoring hub [ 142.085706][ T365] usb 2-1: USB disconnect, device number 42 [ 142.093600][ T520] hub: probe of 1-1:1.0 failed with error -5 [ 142.099935][ T287] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 142.108157][ T520] cdc_ether 1-1:1.0: skipping garbage [ 142.117609][ T520] usb 1-1: bad CDC descriptors [ 142.130682][ T5285] F2FS-fs (loop4): recover fsync data on readonly fs [ 142.137948][ T5285] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 142.323440][ T24] audit: type=1326 audit(2000001068.935:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.4.2216" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x0 [ 142.347702][ T287] usb 3-1: Using ep0 maxpacket: 8 [ 142.384309][ T363] usb 1-1: USB disconnect, device number 46 [ 142.439971][ T5308] overlayfs: missing 'lowerdir' [ 142.460349][ T287] usb 3-1: config 170 has an invalid interface number: 213 but max is 0 [ 142.469907][ T287] usb 3-1: config 170 has no interface number 0 [ 142.476197][ T287] usb 3-1: config 170 interface 213 has no altsetting 0 [ 142.632078][ T287] usb 3-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice=79.c8 [ 142.641123][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.649179][ T287] usb 3-1: Product: syz [ 142.653715][ T287] usb 3-1: Manufacturer: syz [ 142.664167][ T287] usb 3-1: SerialNumber: syz [ 142.689107][ T363] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 142.703699][ T5339] EXT4-fs (loop1): Test dummy encryption mode enabled [ 142.711179][ T5339] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 142.721009][ T5339] EXT4-fs (loop1): Can't change test_dummy_encryption on remount [ 142.789647][ T5352] futex_wake_op: syz.1.2245 tries to shift op by 144; fix this program [ 142.882484][ T5355] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 142.891094][ T5355] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 142.899167][ T5355] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2246: bad orphan inode 15 [ 142.909373][ T5355] ext4_test_bit(bit=14, block=13) = 0 [ 142.914789][ T5355] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue [ 142.937101][ T520] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 143.069806][ T287] uvcvideo: Found UVC 0.00 device syz (05a9:7670) [ 143.076362][ T287] uvcvideo: No valid video chain found. [ 143.082797][ T287] usb 3-1: USB disconnect, device number 48 [ 143.116948][ T5362] EXT4-fs error (device loop0): ext4_quota_enable:6451: inode #3: comm syz.0.2248: casefold flag without casefold feature [ 143.130118][ T5362] EXT4-fs error (device loop0): ext4_quota_enable:6454: comm syz.0.2248: Bad quota inode: 3, type: 0 [ 143.141495][ T5362] EXT4-fs warning (device loop0): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 143.156830][ T5362] EXT4-fs (loop0): mount failed [ 143.260604][ T363] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 143.273212][ T363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.294574][ T363] usb 5-1: Product: syz [ 143.298798][ T520] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 143.298811][ T520] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.298847][ T520] usb 4-1: config 0 has no interface number 0 [ 143.324538][ T363] usb 5-1: Manufacturer: syz [ 143.329523][ T363] usb 5-1: SerialNumber: syz [ 143.334173][ T24] audit: type=1326 audit(2000001069.996:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.0.2250" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3563f71019 code=0x0 [ 143.384667][ T24] audit: type=1326 audit(2000001070.048:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5373 comm="syz.0.2252" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3563f71019 code=0x0 [ 143.479386][ T5376] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 143.512734][ T5376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0002] [ 143.526604][ T5376] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 143.534437][ T520] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 143.543699][ T520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.553478][ T5376] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,debug,abort,barrier=0x0000000000000001,nobarrier,,errors=continue [ 143.582440][ T520] usb 4-1: Product: syz [ 143.587757][ T520] usb 4-1: Manufacturer: syz [ 143.592638][ T520] usb 4-1: SerialNumber: syz [ 143.598393][ T520] usb 4-1: config 0 descriptor?? [ 143.642337][ T520] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 143.648794][ T520] uvcvideo: No valid video chain found. [ 143.727010][ T363] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 143.755544][ T363] usb 5-1: unit 4 not found! [ 143.780162][ T363] usb 5-1: USB disconnect, device number 47 [ 143.843690][ T2353] usb 4-1: USB disconnect, device number 52 [ 143.965281][ T365] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 144.042590][ T5364] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:48, type:0, next_blkoff:0, blkofs:1 [ 144.058939][ T5364] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 144.162241][ T24] audit: type=1326 audit(2000001070.867:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5393 comm="syz.4.2259" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87514cb019 code=0x0 [ 144.213670][ T5388] F2FS-fs (loop0): Test dummy encryption mode enabled [ 144.221278][ T5388] F2FS-fs (loop0): invalid crc value [ 144.228831][ T5388] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:0 [ 144.243363][ T5388] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 144.374690][ T365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.397832][ T365] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 144.416693][ T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.434298][ T365] usb 3-1: config 0 descriptor?? [ 144.565101][ T287] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 144.746055][ T520] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 144.774714][ T365] usbhid 3-1:0.0: can't add hid device: -71 [ 144.780788][ T365] usbhid: probe of 3-1:0.0 failed with error -71 [ 144.788487][ T365] usb 3-1: USB disconnect, device number 49 [ 144.812728][ T287] usb 1-1: Using ep0 maxpacket: 32 [ 144.831837][ T25] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 144.946268][ T287] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 144.954622][ T287] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.964961][ T287] usb 1-1: config 0 has no interface number 0 [ 144.971465][ T287] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 144.981642][ T287] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.994805][ T287] usb 1-1: config 0 interface 196 has no altsetting 0 [ 145.003989][ T5412] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 145.003989][ T5412] [ 145.014942][ T5412] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 145.108324][ T520] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.118747][ T520] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.155932][ T287] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 145.165162][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.173141][ T287] usb 1-1: Product: syz [ 145.177363][ T287] usb 1-1: Manufacturer: syz [ 145.181974][ T287] usb 1-1: SerialNumber: syz [ 145.187400][ T287] usb 1-1: config 0 descriptor?? [ 145.203582][ T25] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 145.211777][ T520] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.220939][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.231698][ T520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.239946][ T520] usb 4-1: SerialNumber: syz [ 145.244640][ T25] usb 2-1: config 0 has no interface number 0 [ 145.250747][ T25] usb 2-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.253843][ T5423] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d) [ 145.273309][ T25] usb 2-1: config 0 interface 41 has no altsetting 0 [ 145.362168][ T24] audit: type=1400 audit(2000001072.117:218): avc: denied { create } for pid=5433 comm="syz.2.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 145.401329][ T5438] bpf: Bad value for 'mode' [ 145.423335][ T612] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 145.432412][ T25] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 145.441448][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.449519][ T25] usb 2-1: Product: syz [ 145.454026][ T287] ipheth 1-1:0.196: Unable to find endpoints [ 145.460868][ T25] usb 2-1: Manufacturer: syz [ 145.465455][ T25] usb 2-1: SerialNumber: syz [ 145.470841][ T287] usb 1-1: USB disconnect, device number 47 [ 145.478486][ T25] usb 2-1: config 0 descriptor?? [ 145.518382][ T25] CoreChips: probe of 2-1:0.41 failed with error -22 [ 145.565373][ T520] usb 4-1: bad CDC descriptors [ 145.570904][ T520] usb 4-1: USB disconnect, device number 53 [ 145.651168][ T612] usb 5-1: Using ep0 maxpacket: 16 [ 145.670110][ T661] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 145.713273][ T287] usb 2-1: USB disconnect, device number 43 [ 145.803334][ T612] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.879954][ T612] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 191, changing to 11 [ 145.891152][ T612] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 145.902357][ T661] usb 3-1: Using ep0 maxpacket: 32 [ 145.907508][ T612] usb 5-1: config 1 interface 0 has no altsetting 0 [ 145.946276][ T612] usb 5-1: language id specifier not provided by device, defaulting to English [ 146.016939][ T661] usb 3-1: config 69 has an invalid descriptor of length 0, skipping remainder of the config [ 146.027578][ T661] usb 3-1: config 69 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 146.041711][ T661] usb 3-1: config 69 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 146.052171][ T661] usb 3-1: config 69 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.156409][ T5476] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300) [ 146.213159][ T661] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 146.224891][ T661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.233069][ T661] usb 3-1: Product: syz [ 146.237474][ T661] usb 3-1: Manufacturer: syz [ 146.241978][ T363] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 146.251530][ T661] usb 3-1: SerialNumber: syz [ 146.261074][ T612] usb 5-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 146.274095][ T612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.282327][ T612] usb 5-1: Product: syz [ 146.286508][ T612] usb 5-1: SerialNumber: syz [ 146.305447][ T5493] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 146.308542][ T5419] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.313917][ T5493] overlayfs: missing 'lowerdir' [ 146.357424][ T5495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.368363][ T5495] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 146.381766][ T5495] EXT4-fs (loop1): 1 truncate cleaned up [ 146.387490][ T5495] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue [ 146.471875][ T5499] erofs: (device loop1): mounted with root inode @ nid 36. [ 146.489172][ T365] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 146.496773][ T363] usb 1-1: Using ep0 maxpacket: 8 [ 146.547154][ T5502] erofs: (device loop1): erofs_read_inode: unsupported chunk format 0 of nid 36 [ 146.634174][ T661] usb 3-1: USB disconnect, device number 50 [ 146.641504][ T363] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 146.649657][ T363] usb 1-1: config 0 has no interface number 0 [ 146.727204][ T365] usb 4-1: Using ep0 maxpacket: 8 [ 146.727712][ T612] usbhid 5-1:1.0: can't add hid device: -71 [ 146.738238][ T612] usbhid: probe of 5-1:1.0 failed with error -71 [ 146.745683][ T612] usb 5-1: USB disconnect, device number 48 [ 146.822484][ T363] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 146.831621][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.839681][ T363] usb 1-1: Product: syz [ 146.842193][ T307] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 146.843984][ T363] usb 1-1: Manufacturer: syz [ 146.853690][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:69.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.856644][ T363] usb 1-1: SerialNumber: syz [ 146.876431][ T365] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 146.884541][ T365] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.894990][ T365] usb 4-1: config 0 has no interface number 0 [ 146.901329][ T363] usb 1-1: config 0 descriptor?? [ 147.020584][ T5507] EXT4-fs (loop2): 1 truncate cleaned up [ 147.026330][ T5507] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 147.051135][ T365] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 147.060392][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.068590][ T5513] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.068651][ T365] usb 4-1: Product: syz [ 147.082218][ T365] usb 4-1: Manufacturer: syz [ 147.086896][ T365] usb 4-1: SerialNumber: syz [ 147.093016][ T365] usb 4-1: config 0 descriptor?? [ 147.102706][ T5513] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 147.112239][ T307] usb 2-1: Using ep0 maxpacket: 8 [ 147.117300][ T5513] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 147.126884][ T5513] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.2312: Failed to acquire dquot type 1 [ 147.138985][ T365] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 147.145497][ T365] uvcvideo: No valid video chain found. [ 147.146579][ T5513] EXT4-fs (loop4): 1 truncate cleaned up [ 147.157319][ T5513] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,discard,nodelalloc,minixdf,min_batch_time=0x0000000000000002,noinit_itable,dioread_nolock,,errors=continue [ 147.175056][ T363] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 147.181517][ T363] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 147.205992][ T363] uvcvideo: Failed to create links for entity 5 [ 147.212281][ T363] uvcvideo: Failed to register entities (-22). [ 147.220043][ T363] usb 1-1: USB disconnect, device number 48 [ 147.232161][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.246960][ T5520] FAT-fs (loop2): codepage cp85 not found [ 147.255696][ T307] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.336290][ T661] usb 4-1: USB disconnect, device number 54 [ 147.352021][ T5529] 9pnet: Insufficient options for proto=fd [ 147.406898][ T5531] FAT-fs (loop2): bogus number of FAT sectors [ 147.413039][ T5531] FAT-fs (loop2): Can't find a valid FAT filesystem [ 147.413520][ T307] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 147.428772][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.436827][ T307] usb 2-1: Product: syz [ 147.441025][ T307] usb 2-1: Manufacturer: syz [ 147.445758][ T307] usb 2-1: SerialNumber: syz [ 147.484998][ T5534] overlayfs: missing 'lowerdir' [ 147.537147][ T365] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 147.550875][ T24] audit: type=1326 audit(2000001074.427:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.2.2325" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d6b63f019 code=0x0 [ 147.784543][ T365] usb 5-1: Using ep0 maxpacket: 8 [ 147.794076][ T307] usb 2-1: 1:1 : bogus bTerminalLink 7 [ 147.813004][ T307] usb 2-1: unit 119 not found! [ 147.820740][ T307] snd-usb-audio: probe of 2-1:1.2 failed with error -16 [ 147.837339][ T307] usb 2-1: USB disconnect, device number 44 [ 147.903068][ T5589] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 147.908565][ T365] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.913638][ T5589] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 147.933016][ T5589] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 147.937000][ T365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 147.954202][ T5589] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.962922][ T5589] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 147.970972][ T5589] EXT4-fs (loop3): failed to initialize system zone (-117) [ 147.978384][ T5589] EXT4-fs (loop3): mount failed [ 148.013420][ T363] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 148.099311][ T365] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 148.108757][ T365] usb 5-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 148.116761][ T365] usb 5-1: Product: syz [ 148.121253][ T365] usb 5-1: SerialNumber: syz [ 148.126766][ T5605] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.133630][ T5605] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 148.143419][ T5605] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 148.270244][ T364] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 148.361420][ T5622] FAT-fs (loop3): bogus sectors per cluster 223 [ 148.369211][ T5622] FAT-fs (loop3): Can't find a valid FAT filesystem [ 148.394660][ T365] cdc_ncm 5-1:1.0: bind() failure [ 148.400009][ T363] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.415189][ T365] usb 5-1: USB disconnect, device number 49 [ 148.437737][ T5625] EXT4-fs (loop3): invalid inodes per group: 4294967295 [ 148.437737][ T5625] [ 148.489577][ T363] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.501477][ T364] usb 1-1: Using ep0 maxpacket: 8 [ 148.506695][ T363] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.613487][ T364] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 148.622018][ T364] usb 1-1: config 179 has no interface number 0 [ 148.628577][ T364] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 148.640232][ T364] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 148.652253][ T364] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.664307][ T364] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 148.668787][ T5636] exFAT-fs (loop3): bogus data start sector [ 148.683715][ T363] usb 3-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 148.688261][ T5636] exFAT-fs (loop3): failed to read boot sector [ 148.699014][ T5636] exFAT-fs (loop3): failed to recognize exfat type [ 148.708796][ T364] usb 1-1: config 179 interface 65 has no altsetting 0 [ 148.715752][ T363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.723960][ T364] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 148.733192][ T363] usb 3-1: Product: syz [ 148.737524][ T363] usb 3-1: Manufacturer: syz [ 148.742138][ T363] usb 3-1: SerialNumber: syz [ 148.747095][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.805770][ T5612] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(2560) blocks(394240) [ 148.824230][ T5612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 148.832838][ T5612] F2FS-fs (loop1): Allow to mount readonly mode only [ 148.953534][ T5648] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2373: iget: bad extended attribute block 16777216 [ 148.972687][ T5648] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2373: couldn't read orphan inode 15 (err -117) [ 148.996643][ T520] usb 1-1: USB disconnect, device number 49 [ 149.011182][ T5648] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue [ 149.023763][ T363] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 149.036848][ T363] usb 3-1: USB disconnect, device number 51 [ 149.093227][ T5664] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.098891][ T661] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 149.123295][ T5664] EXT4-fs warning (device loop1): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 149.135874][ T5664] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it [ 149.146050][ T5664] EXT4-fs warning (device loop1): dx_probe:946: inode #2: comm syz.1.2380: Corrupt directory, running e2fsck is recommended [ 149.159368][ T5664] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 149.167999][ T5664] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.2380: corrupted in-inode xattr [ 149.180453][ T5664] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2380: couldn't read orphan inode 15 (err -117) [ 149.192835][ T5664] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.journal_dev=0x00000000000001ff,barrier=0x0000000000000008,jqfmt=vfsv1,dioread_nolock,,,errors=continue [ 149.384655][ T365] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 149.509505][ T2353] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 149.546799][ T661] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.622876][ T661] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 149.755946][ T307] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 149.784711][ T661] usb 4-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 149.794132][ T661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.802156][ T661] usb 4-1: Product: syz [ 149.806368][ T661] usb 4-1: Manufacturer: syz [ 149.810977][ T661] usb 4-1: SerialNumber: syz [ 149.813633][ T365] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.891729][ T5717] loop2: p1 < > p2 < > p4 < > [ 149.896541][ T5717] loop2: partition table partially beyond EOD, truncated [ 149.903771][ T365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 73, changing to 10 [ 149.905572][ T5717] loop2: p2 start 16776960 is beyond EOD, truncated [ 149.915172][ T365] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 149.965512][ T2353] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.984512][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 150.004091][ T2353] usb 2-1: not running at top speed; connect to a high speed hub [ 150.013745][ T433] udevd[433]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 150.023980][ T342] udevd[342]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 150.099102][ T307] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 150.099882][ T365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.108424][ T307] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.116589][ T2353] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.126922][ T307] usb 1-1: config 0 has no interface number 0 [ 150.137434][ T365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.150803][ T2353] usb 2-1: config 1 interface 0 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.156411][ T661] usb 4-1: unit 4 not found! [ 150.164258][ T365] usb 5-1: Product: syz [ 150.173199][ T2353] usb 2-1: config 1 interface 0 has no altsetting 0 [ 150.180078][ T365] usb 5-1: Manufacturer: 存洄購樫誔햓怙ᘼ㣭䕁灜긤첚줚ⵚ皠䎢䟈鍯猫⒜೼灩㹉톜꧶쐘밟춘朷﫵탼뒗溎嚀⦘轾⭊浉鹏嚡힦篂頿砯켽覛ꥴᱣ⊣唻ⷘⸯṅ櫘羉仲䖽ە忐K [ 150.182279][ T661] usb 4-1: USB disconnect, device number 55 [ 150.209106][ T365] usb 5-1: SerialNumber: syz [ 150.289345][ T307] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 150.298401][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.306483][ T307] usb 1-1: Product: syz [ 150.310726][ T307] usb 1-1: Manufacturer: syz [ 150.315313][ T307] usb 1-1: SerialNumber: syz [ 150.320727][ T307] usb 1-1: config 0 descriptor?? [ 150.356923][ T307] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 150.363427][ T307] uvcvideo: No valid video chain found. [ 150.366132][ T2353] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.378109][ T364] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 150.385650][ T2353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.393650][ T2353] usb 2-1: Product: syz [ 150.397879][ T2353] usb 2-1: Manufacturer: syz [ 150.402480][ T2353] usb 2-1: SerialNumber: syz [ 150.406961][ T651] udevd[651]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.518346][ T365] cdc_ncm 5-1:1.0: bind() failure [ 150.524266][ T365] cdc_ncm 5-1:1.1: bind() failure [ 150.530600][ T365] usb 5-1: USB disconnect, device number 50 [ 150.551912][ T661] usb 1-1: USB disconnect, device number 50 [ 150.708824][ T2353] usb 2-1: bad CDC descriptors [ 150.716537][ T2353] usb 2-1: USB disconnect, device number 45 [ 150.724021][ T5738] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 150.731842][ T5738] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 150.740492][ T5738] F2FS-fs (loop3): fault_injection options not supported [ 150.747766][ T5738] F2FS-fs (loop3): fault_type options not supported [ 150.765576][ T364] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.841959][ T364] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 150.846482][ T24] audit: type=1400 audit(2000001077.881:220): avc: denied { create } for pid=5746 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 150.860549][ T364] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 151.118917][ T364] usb 3-1: string descriptor 0 read error: -22 [ 151.125150][ T364] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 151.141852][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.181435][ T24] audit: type=1400 audit(2000001078.227:221): avc: denied { create } for pid=5793 comm="syz.3.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 151.204134][ T5728] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 151.211171][ T5728] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 151.218186][ T2353] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 151.264680][ T5795] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 2: comm syz.1.2441: lblock 2 mapped to illegal pblock 2 (length 1) [ 151.279713][ T5795] EXT4-fs (loop1): Remounting filesystem read-only [ 151.291588][ T5795] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 151.303992][ T5795] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 48: comm syz.1.2441: lblock 0 mapped to illegal pblock 48 (length 1) [ 151.309556][ T5803] EXT4-fs error (device loop0): ext4_fill_super:4959: comm syz.0.2445: inode #2: comm syz.0.2445: iget: illegal inode # [ 151.319348][ T5795] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 151.336695][ T5803] EXT4-fs (loop0): get root inode failed [ 151.341728][ T5795] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.2441: Failed to acquire dquot type 0 [ 151.346400][ T5803] EXT4-fs (loop0): mount failed [ 151.357333][ T5795] EXT4-fs (loop1): 1 orphan inode deleted [ 151.367295][ T5795] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity,norecovery,max_batch_time=0x0000000000000007,barrier,stripe=0x0000000000000004,noauto_da_alloc, [ 151.438891][ T365] usb 3-1: USB disconnect, device number 52 [ 151.461287][ T2353] usb 5-1: Using ep0 maxpacket: 8 [ 151.488002][ T279] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.501224][ T279] EXT4-fs (loop1): Remounting filesystem read-only [ 151.507819][ T279] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 151.517421][ T279] EXT4-fs error (device loop1): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 151.566098][ T364] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 151.642254][ T2353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 151.718278][ T2353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.728623][ T5815] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3) [ 151.737050][ T2353] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.746235][ T2353] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.746669][ T661] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 151.759987][ T5815] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 151.775239][ T5815] F2FS-fs (loop1): Invalid gid value -1 [ 151.804086][ T364] usb 4-1: Using ep0 maxpacket: 16 [ 151.908567][ T2353] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.917839][ T2353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.925924][ T2353] usb 5-1: Product: syz [ 151.930166][ T2353] usb 5-1: Manufacturer: syz [ 151.934791][ T2353] usb 5-1: SerialNumber: syz [ 151.956564][ T364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 152.118151][ T661] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.118161][ T363] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 152.134721][ T661] usb 1-1: config 1 has no interface number 0 [ 152.140829][ T661] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 152.149984][ T661] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 4 [ 152.194720][ T364] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 152.203863][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.211835][ T364] usb 4-1: Product: syz [ 152.213811][ T307] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 152.224015][ T2353] usb 5-1: USB disconnect, device number 51 [ 152.230290][ T364] usb 4-1: Manufacturer: syz [ 152.236216][ T364] usb 4-1: SerialNumber: syz [ 152.308882][ T661] usb 1-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice= 0.40 [ 152.317989][ T661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.325968][ T661] usb 1-1: Product: syz [ 152.330207][ T661] usb 1-1: Manufacturer: syz [ 152.334809][ T661] usb 1-1: SerialNumber: syz [ 152.527885][ T363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.541516][ T364] usb 4-1: USB disconnect, device number 56 [ 152.565782][ T363] usb 2-1: not running at top speed; connect to a high speed hub [ 152.642105][ T307] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 152.653180][ T307] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.666176][ T307] usb 3-1: config 1 interface 0 has no altsetting 0 [ 152.689715][ T661] usb 1-1: 1:0 : does not exist [ 152.694619][ T661] usb 1-1: BAAD SPEAKER p_chmask mismatch [ 152.700514][ T661] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 152.709190][ T661] usb 1-1: USB disconnect, device number 51 [ 152.813786][ T363] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 152.822919][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.830933][ T363] usb 2-1: Product: syz [ 152.835148][ T363] usb 2-1: Manufacturer: syz [ 152.839742][ T363] usb 2-1: SerialNumber: syz [ 152.899379][ T307] usb 3-1: string descriptor 0 read error: -22 [ 152.905646][ T307] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.40 [ 152.914907][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.937648][ T5824] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 152.946738][ T365] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 153.024450][ T5832] EXT4-fs (loop3): Ignoring removed nobh option [ 153.044129][ T5832] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 153.052501][ T5832] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #3: comm syz.3.2458: mark_inode_dirty error [ 153.065781][ T5832] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 153.074443][ T5832] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #3: comm syz.3.2458: mark_inode_dirty error [ 153.087796][ T5832] Quota error (device loop3): write_blk: dquota write failed [ 153.095348][ T5832] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 153.100409][ T24] audit: type=1400 audit(2000001080.254:222): avc: denied { create } for pid=5836 comm="syz.0.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.105820][ T5832] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2458: Failed to acquire dquot type 0 [ 153.137307][ T5832] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 153.145801][ T5832] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #16: comm syz.3.2458: mark_inode_dirty error [ 153.157638][ T5832] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 153.165955][ T5832] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #16: comm syz.3.2458: mark_inode_dirty error [ 153.177562][ T5832] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 153.185930][ T5832] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 153.193868][ T5832] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 153.202426][ T5832] EXT4-fs error (device loop3): ext4_truncate:4403: inode #16: comm syz.3.2458: mark_inode_dirty error [ 153.215337][ T363] usb 2-1: USB disconnect, device number 46 [ 153.221732][ T5832] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3106: error 27 [ 153.231450][ T5832] EXT4-fs (loop3): 1 truncate cleaned up [ 153.232944][ T307] usbhid 3-1:1.0: can't add hid device: -71 [ 153.237467][ T5832] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,nobh,,errors=continue [ 153.253472][ T5832] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.256096][ T307] usbhid: probe of 3-1:1.0 failed with error -71 [ 153.289001][ T307] usb 3-1: USB disconnect, device number 53 [ 153.480290][ T365] usb 5-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 153.489415][ T365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.497450][ T365] usb 5-1: Product: syz [ 153.501704][ T365] usb 5-1: Manufacturer: syz [ 153.506296][ T365] usb 5-1: SerialNumber: syz [ 153.651780][ T661] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 153.662863][ T2353] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 153.711844][ T5869] EXT4-fs (loop2): can't read group descriptor 0 [ 153.755328][ T5872] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 153.765240][ T5872] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 153.775256][ T5872] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 153.785956][ T5872] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 153.793877][ T5872] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 153.801791][ T5872] EXT4-fs (loop2): failed to initialize system zone (-117) [ 153.809170][ T5872] EXT4-fs (loop2): mount failed [ 153.842236][ T365] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 153.861167][ T365] usb 5-1: unit 4 not found! [ 153.889643][ T363] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 153.922364][ T365] usb 5-1: USB disconnect, device number 52 [ 154.032814][ T2353] usb 1-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config [ 154.043108][ T2353] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.052082][ T661] usb 4-1: unable to get BOS descriptor or descriptor too short [ 154.056077][ T2353] usb 1-1: config 1 interface 0 has no altsetting 0 [ 154.108919][ T661] usb 4-1: not running at top speed; connect to a high speed hub [ 154.185692][ T661] usb 4-1: config 8 has an invalid interface number: 169 but max is 0 [ 154.193864][ T661] usb 4-1: config 8 has no interface number 0 [ 154.199995][ T661] usb 4-1: config 8 interface 169 altsetting 17 has an invalid endpoint with address 0xE5, skipping [ 154.210853][ T307] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 154.213891][ T2353] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.218481][ T661] usb 4-1: config 8 interface 169 has no altsetting 0 [ 154.228323][ T2353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.242602][ T2353] usb 1-1: Product: syz [ 154.246796][ T2353] usb 1-1: Manufacturer: syz [ 154.251513][ T2353] usb 1-1: SerialNumber: syz [ 154.280416][ T363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.290597][ T5882] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.311030][ T5882] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.2480: bad orphan inode 13 [ 154.321533][ T5882] ext4_test_bit(bit=12, block=18) = 1 [ 154.326923][ T5882] is_bad_inode(inode)=0 [ 154.331165][ T5882] NEXT_ORPHAN(inode)=0 [ 154.335247][ T5882] max_ino=32 [ 154.338545][ T5882] i_nlink=1 [ 154.341694][ T5882] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 154.356563][ T363] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.413678][ T661] usb 4-1: New USB device found, idVendor=0eba, idProduct=1080, bcdDevice=3a.9f [ 154.422827][ T661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.435348][ T661] usb 4-1: Product: syz [ 154.439544][ T661] usb 4-1: Manufacturer: syz [ 154.444325][ T661] usb 4-1: SerialNumber: syz [ 154.471228][ T5851] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 154.480212][ T307] usb 3-1: Using ep0 maxpacket: 8 [ 154.566221][ T2353] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 154.581927][ T2353] usb 1-1: USB disconnect, device number 52 [ 154.594849][ T363] usb 2-1: string descriptor 0 read error: -22 [ 154.601411][ T363] usb 2-1: New USB device found, idVendor=04b8, idProduct=0206, bcdDevice= 0.40 [ 154.612531][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 154.648848][ T24] audit: type=1326 audit(2000001081.870:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.4.2499" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x0 [ 154.680333][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.757669][ T661] pl2303 4-1:8.169: required endpoints missing [ 154.766245][ T307] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 154.781578][ T661] usb 4-1: USB disconnect, device number 57 [ 154.853731][ T5939] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 154.867637][ T5939] EXT4-fs (loop4): external journal has bad superblock [ 154.870261][ T612] usb 2-1: USB disconnect, device number 47 [ 154.966167][ T307] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 154.975354][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.983360][ T307] usb 3-1: Product: syz [ 154.988931][ T5942] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 154.998091][ T5942] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 155.006971][ T307] usb 3-1: Manufacturer: syz [ 155.011772][ T307] usb 3-1: SerialNumber: syz [ 155.042559][ T5880] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.224371][ T5961] EXT4-fs (loop3): Ignoring removed orlov option [ 155.231000][ T5961] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 155.242109][ T5961] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 155.252041][ T5961] EXT4-fs (loop3): invalid journal inode [ 155.259908][ T5961] EXT4-fs (loop3): can't get journal size [ 155.266549][ T5961] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,norecovery,inlinecrypt,resuid=0x0000000000000000,,errors=continue [ 155.342629][ T24] audit: type=1400 audit(2000001082.605:224): avc: denied { create } for pid=5968 comm="syz.3.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.362248][ T365] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 155.362331][ T2353] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 155.419018][ T307] usb 3-1: USB disconnect, device number 54 [ 155.483695][ T5983] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.497126][ T5983] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.504921][ T5983] EXT4-fs error (device loop3): ext4_free_inode:353: comm syz.3.2527: bit already cleared for inode 11 [ 155.516635][ T5983] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 155.525607][ T5983] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 155.534469][ T5983] EXT4-fs (loop3): 1 orphan inode deleted [ 155.540254][ T5983] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpid,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003c,min_batch_time=0x0000000000000003,,errors=continue [ 155.604541][ T2353] usb 1-1: Using ep0 maxpacket: 32 [ 155.624364][ T651] udevd[651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.627158][ T5989] sit: Src spoofed 0.0.224.0/2002:0:e0::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 155.709125][ T661] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 155.719143][ T365] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.732229][ T5995] EXT4-fs (loop3): bad geometry: block count 1048576 exceeds size of device (256 blocks) [ 155.742112][ T2353] usb 1-1: config 44 has an invalid descriptor of length 0, skipping remainder of the config [ 155.821416][ T6000] FAT-fs (loop2): bogus sectors per cluster 0 [ 155.827834][ T365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.833018][ T6000] FAT-fs (loop2): Can't find a valid FAT filesystem [ 155.845071][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.853542][ T365] usb 5-1: SerialNumber: syz [ 155.909181][ T2353] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 155.918445][ T2353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.926442][ T2353] usb 1-1: Product: syz [ 155.937348][ T661] usb 2-1: Using ep0 maxpacket: 16 [ 155.938344][ T2353] usb 1-1: Manufacturer: syz [ 155.960299][ T2353] usb 1-1: SerialNumber: syz [ 156.014448][ T2353] usb 1-1: bad CDC descriptors [ 156.019579][ T2353] usb 1-1: unsupported MDLM descriptors [ 156.052027][ T661] usb 2-1: config index 0 descriptor too short (expected 19, got 10) [ 156.064300][ T661] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 156.071695][ T661] usb 2-1: config 0 has no interfaces? [ 156.099550][ T365] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 156.107507][ T365] usb 5-1: USB disconnect, device number 53 [ 156.131398][ T6027] EXT4-fs (loop2): Ignoring removed bh option [ 156.148555][ T6027] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,noblock_validity,stripe=0x0000000000000001,bh,init_itable,,errors=continue [ 156.207226][ T364] usb 1-1: USB disconnect, device number 53 [ 156.252253][ T661] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 156.261309][ T661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.269516][ T661] usb 2-1: Product: syz [ 156.273716][ T661] usb 2-1: Manufacturer: syz [ 156.278314][ T661] usb 2-1: SerialNumber: syz [ 156.283868][ T661] usb 2-1: config 0 descriptor?? [ 156.309193][ T2353] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 156.480621][ T363] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 156.512929][ T661] usb 2-1: USB disconnect, device number 48 [ 156.617980][ T6040] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.2552: corrupted in-inode xattr [ 156.630628][ T6040] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2552: couldn't read orphan inode 15 (err -117) [ 156.642977][ T6040] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 156.661733][ T2353] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 156.672026][ T2353] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 156.718570][ T363] usb 3-1: Using ep0 maxpacket: 8 [ 156.794758][ T2353] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 156.803803][ T2353] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 156.812290][ T2353] usb 4-1: Product: syz [ 156.816551][ T2353] usb 4-1: SerialNumber: syz [ 156.822520][ T6050] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.842668][ T363] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.844546][ T6050] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e199, mo2=0000] [ 156.854147][ T2353] usb 4-1: bad CDC descriptors [ 156.865400][ T6050] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3357: comm syz.4.2556: Allocating blocks 42-43 which overlap fs metadata [ 156.865932][ T363] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.880576][ T6050] Quota error (device loop4): write_blk: dquota write failed [ 156.895832][ T6050] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 156.897679][ T363] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.918682][ T6050] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.2556: Failed to acquire dquot type 0 [ 156.930293][ T6050] EXT4-fs (loop4): 1 truncate cleaned up [ 156.935945][ T6050] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,init_itable=0x0000000000000003,resgid=0x000000000000ee01,minixdf,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 156.966447][ T612] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 157.034914][ T363] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 157.053412][ T363] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 157.061954][ T363] usb 3-1: Product: syz [ 157.066162][ T363] usb 3-1: SerialNumber: syz [ 157.071892][ T365] usb 4-1: USB disconnect, device number 58 [ 157.137997][ T6063] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 157.147168][ T6063] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 157.155938][ T6063] EXT4-fs (loop1): 1 truncate cleaned up [ 157.161788][ T6063] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,discard,nodiscard,grpquota,,errors=continue [ 157.189304][ T6066] EXT4-fs (loop4): too many log groups per flexible block group [ 157.197261][ T6066] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 157.204481][ T6066] EXT4-fs (loop4): mount failed [ 157.223606][ T612] usb 1-1: Using ep0 maxpacket: 16 [ 157.347495][ T612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.347606][ T363] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 157.364514][ T612] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.375124][ T363] usb 3-1: USB disconnect, device number 55 [ 157.381128][ T612] usb 1-1: config 1 has no interface number 1 [ 157.394588][ T612] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 157.498100][ T6084] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 157.506800][ T6084] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.2568: corrupted in-inode xattr [ 157.519953][ T6084] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2568: couldn't read orphan inode 15 (err -117) [ 157.544764][ T6084] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue [ 157.566882][ T612] usb 1-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 157.588657][ T612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.596962][ T612] usb 1-1: Product: syz [ 157.601179][ T612] usb 1-1: Manufacturer: syz [ 157.606077][ T612] usb 1-1: SerialNumber: syz [ 157.804375][ T307] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 157.844095][ T363] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 157.899912][ T365] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 157.947412][ T612] usb 1-1: 0:1 : does not exist [ 157.952337][ T612] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 157.960212][ T612] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 157.966344][ T612] usb 1-1: 2:1 : invalid channels 0 [ 158.027107][ T612] usb 1-1: USB disconnect, device number 54 [ 158.042489][ T307] usb 4-1: Using ep0 maxpacket: 8 [ 158.081982][ T6123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.092102][ T363] usb 5-1: Using ep0 maxpacket: 8 [ 158.098187][ T6123] EXT4-fs (loop2): orphan cleanup on readonly fs [ 158.105177][ T6123] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.2586: bad orphan inode 15 [ 158.115443][ T6123] ext4_test_bit(bit=14, block=4) = 1 [ 158.120867][ T6123] is_bad_inode(inode)=0 [ 158.125033][ T6123] NEXT_ORPHAN(inode)=0 [ 158.129381][ T6123] max_ino=32 [ 158.132633][ T6123] i_nlink=1 [ 158.135771][ T6123] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 158.261837][ T363] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.299740][ T365] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.309401][ T307] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 158.318518][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.326509][ T307] usb 4-1: Product: syz [ 158.330902][ T307] usb 4-1: Manufacturer: syz [ 158.335518][ T307] usb 4-1: SerialNumber: syz [ 158.347408][ T365] usb 2-1: not running at top speed; connect to a high speed hub [ 158.355250][ T363] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.370020][ T363] usb 5-1: too many endpoints for config 1 interface 0 altsetting 241: 34, using maximum allowed: 30 [ 158.381003][ T363] usb 5-1: config 1 interface 0 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 158.394475][ T363] usb 5-1: config 1 interface 0 has no altsetting 0 [ 158.442506][ T365] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 158.453549][ T365] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 158.464624][ T364] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 158.623705][ T612] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 158.623713][ T363] usb 5-1: string descriptor 0 read error: -22 [ 158.623841][ T363] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.646570][ T365] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 158.655636][ T365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.663654][ T365] usb 2-1: Product: syz [ 158.667856][ T365] usb 2-1: Manufacturer: syz [ 158.672535][ T363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.680771][ T365] usb 2-1: SerialNumber: syz [ 158.681145][ T307] usb 4-1: unit 0 not found! [ 158.694442][ T307] usb 4-1: USB disconnect, device number 59 [ 158.699968][ T364] usb 3-1: Using ep0 maxpacket: 8 [ 158.728975][ T363] usb 5-1: bad CDC descriptors [ 158.814221][ T364] usb 3-1: config 6 has an invalid interface number: 240 but max is 0 [ 158.822390][ T364] usb 3-1: config 6 has no interface number 0 [ 158.828554][ T364] usb 3-1: config 6 interface 240 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 158.838500][ T364] usb 3-1: config 6 interface 240 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 158.849235][ T364] usb 3-1: config 6 interface 240 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 158.860209][ T364] usb 3-1: config 6 interface 240 altsetting 1 bulk endpoint 0xE has invalid maxpacket 64 [ 158.870139][ T364] usb 3-1: config 6 interface 240 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 158.880877][ T364] usb 3-1: config 6 interface 240 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1023 [ 158.890978][ T364] usb 3-1: config 6 interface 240 has no altsetting 0 [ 158.909557][ T651] udevd[651]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.932488][ T307] usb 5-1: USB disconnect, device number 54 [ 158.956734][ T365] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 158.975878][ T365] snd-usb-audio: probe of 2-1:1.1 failed with error -71 [ 158.994767][ T365] snd-usb-audio: probe of 2-1:1.2 failed with error -71 [ 159.002539][ T365] usb 2-1: USB disconnect, device number 49 [ 159.033066][ T612] usb 1-1: unable to get BOS descriptor or descriptor too short [ 159.109127][ T612] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.119237][ T364] usb 3-1: string descriptor 0 read error: -22 [ 159.119288][ T364] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.32 [ 159.119302][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.138178][ T6127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.143953][ T612] usb 1-1: config 1 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.150446][ T6127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.162468][ T612] usb 1-1: config 1 interface 0 has no altsetting 0 [ 159.170140][ T6127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.185703][ T364] usb 3-1: bad CDC descriptors [ 159.190599][ T364] usb 3-1: unsupported MDLM descriptors [ 159.328379][ T612] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.44 [ 159.337581][ T520] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 159.345176][ T612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.353206][ T612] usb 1-1: Product: syz [ 159.357422][ T612] usb 1-1: Manufacturer: syz [ 159.362016][ T612] usb 1-1: SerialNumber: syz [ 159.384824][ T364] usb 3-1: USB disconnect, device number 56 [ 159.458074][ T6147] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 159.494755][ T6149] loop1: p1 < > [ 159.538623][ T6154] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.549671][ T6154] EXT4-fs (loop4): group descriptors corrupted! [ 159.556674][ T95] loop1: p1 < > [ 159.566471][ T520] usb 4-1: Using ep0 maxpacket: 32 [ 159.671200][ T612] usb 1-1: bad CDC descriptors [ 159.677012][ T612] usb 1-1: USB disconnect, device number 55 [ 159.701208][ T433] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.714300][ T279] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 159.716493][ T433] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.732380][ T520] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.746932][ T433] buffer_io_error: 44 callbacks suppressed [ 159.746941][ T433] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 159.761137][ T433] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.776303][ T433] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 159.785851][ T433] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.806842][ T433] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 159.815001][ T520] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 159.826756][ T433] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.838070][ T433] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 159.847412][ T433] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.858438][ T433] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 159.877273][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.891239][ T6169] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 159.892923][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.911058][ T24] audit: type=1400 audit(2000001087.404:225): avc: denied { relabelto } for pid=6168 comm="syz.4.2607" name="520" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 159.943866][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 159.952077][ T24] audit: type=1400 audit(2000001087.404:226): avc: denied { associate } for pid=6168 comm="syz.4.2607" name="520" dev="tmpfs" ino=2683 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 159.978271][ T24] audit: type=1400 audit(2000001087.435:227): avc: denied { write } for pid=285 comm="syz-executor" name="520" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 160.003032][ T24] audit: type=1400 audit(2000001087.435:228): avc: denied { remove_name } for pid=285 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 160.003124][ T520] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.033157][ T24] audit: type=1400 audit(2000001087.435:229): avc: denied { rmdir } for pid=285 comm="syz-executor" name="520" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 160.037874][ T520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.067848][ T6175] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.081134][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.098139][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 160.106318][ T6178] syz.4.2611 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 160.107949][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.129332][ T520] usb 4-1: Product: syz [ 160.129487][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 160.133577][ T520] usb 4-1: Manufacturer: ꡼Ơ캳腑꓍慄鑐ﱌ䌡뚾颶軻⠔노񎪺 [ 160.141867][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 160.159002][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 160.166749][ T307] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 160.202334][ T520] usb 4-1: SerialNumber: syz [ 160.287624][ T6196] EXT4-fs (loop2): Ignoring removed bh option [ 160.297766][ T6196] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.304906][ T6196] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.315254][ T6196] EXT4-fs error (device loop2): ext4_fill_super:4959: inode #2: comm syz.2.2620: iget: special inode unallocated [ 160.327534][ T6196] EXT4-fs (loop2): Remounting filesystem read-only [ 160.334214][ T6196] EXT4-fs (loop2): get root inode failed [ 160.340280][ T6196] EXT4-fs (loop2): mount failed [ 160.394855][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 160.509121][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.519321][ T520] cdc_ncm 4-1:1.0: bind() failure [ 160.525507][ T520] cdc_ncm 4-1:1.1: bind() failure [ 160.531316][ T307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.541307][ T520] usb 4-1: USB disconnect, device number 60 [ 160.547563][ T661] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 160.642729][ T612] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 160.699794][ T307] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.708887][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.717118][ T307] usb 2-1: Product: syz [ 160.721418][ T307] usb 2-1: Manufacturer: syz [ 160.726027][ T307] usb 2-1: SerialNumber: syz [ 160.871473][ T612] usb 1-1: Using ep0 maxpacket: 32 [ 160.890360][ T661] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 160.900308][ T661] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 160.909356][ T661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.948372][ T661] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 160.986754][ T612] usb 1-1: config 221 has an invalid interface number: 132 but max is 0 [ 160.995496][ T612] usb 1-1: config 221 has no interface number 0 [ 161.001857][ T612] usb 1-1: config 221 interface 132 has no altsetting 0 [ 161.027123][ T6222] EXT4-fs (loop3): invalid first ino: 0 [ 161.042980][ T307] usb 2-1: 0:2 : does not exist [ 161.082778][ T307] usb 2-1: USB disconnect, device number 50 [ 161.144568][ T25] usb 5-1: USB disconnect, device number 55 [ 161.156926][ T612] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=3d.87 [ 161.176133][ T612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.184210][ T612] usb 1-1: Product: syz [ 161.194084][ T612] usb 1-1: Manufacturer: syz [ 161.203943][ T612] usb 1-1: SerialNumber: syz [ 161.290604][ T651] udevd[651]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.311770][ T6220] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(4) [ 161.323466][ T6220] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 161.334799][ T6220] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.366298][ T6220] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 161.373435][ T6220] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.529074][ T612] usb_ehset_test: probe of 1-1:221.132 failed with error -32 [ 161.540032][ T612] usb 1-1: USB disconnect, device number 56 [ 161.585868][ T364] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 161.756916][ T307] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 161.773006][ T6272] EXT4-fs (loop4): Invalid log block size: 10 [ 161.933476][ T6287] EXT4-fs error (device loop4): dx_probe:796: inode #2: comm syz.4.2661: Directory hole found for htree index block 0 [ 161.945971][ T364] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.956320][ T364] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.969835][ T6287] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 161.980573][ T6287] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.nodelalloc,barrier=0x0000000000000008,jqfmt=vfsv1,nombcache,,,errors=continue [ 161.995116][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 162.052318][ T364] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.063313][ T6295] EXT4-fs warning (device loop0): dx_probe:836: inode #2: comm syz.0.2665: Unimplemented hash flags: 0x0001 [ 162.068039][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.083299][ T6295] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.2665: Corrupt directory, running e2fsck is recommended [ 162.098309][ T6295] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 162.106795][ T6295] EXT4-fs error (device loop0): ext4_iget_extra_inode:4692: inode #15: comm syz.0.2665: corrupted in-inode xattr [ 162.119155][ T6295] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2665: couldn't read orphan inode 15 (err -117) [ 162.137620][ T6295] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.nodelalloc,barrier=0x0000000000000008,jqfmt=vfsv1,nombcache,,,errors=continue [ 162.144912][ T364] usb 4-1: SerialNumber: syz [ 162.158762][ T307] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.243019][ T364] usb 4-1: bad CDC descriptors [ 162.328700][ T307] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 162.337761][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.345810][ T307] usb 2-1: Product: syz [ 162.353943][ T307] usb 2-1: Manufacturer: syz [ 162.358600][ T307] usb 2-1: SerialNumber: syz [ 162.384806][ T307] usb 2-1: config 0 descriptor?? [ 162.436634][ T364] usb 4-1: USB disconnect, device number 61 [ 162.443004][ T520] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 162.452556][ T612] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 162.619533][ T20] usb 2-1: USB disconnect, device number 51 [ 162.667568][ T6327] F2FS-fs (loop0): Test dummy encryption mode enabled [ 162.674684][ T6327] F2FS-fs (loop0): Can't change test_dummy_encryption on remount [ 162.682579][ T612] usb 3-1: Using ep0 maxpacket: 32 [ 162.786019][ T520] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 162.833310][ T612] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.918981][ T612] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 162.957014][ T520] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.966356][ T520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.974530][ T520] usb 5-1: Product: syz [ 162.979198][ T520] usb 5-1: Manufacturer: 薳划㭼㈥Ͳᨣﭞ᧒䃏ꖳ㠡컻华컧࢞̕럪㿀ྦྷᲇ㮢첇묬 [ 162.991566][ T520] usb 5-1: SerialNumber: syz [ 163.081301][ T612] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 163.090345][ T612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.098402][ T612] usb 3-1: Product: syz [ 163.102642][ T612] usb 3-1: Manufacturer: syz [ 163.106151][ T6350] F2FS-fs (loop3): invalid crc value [ 163.114736][ T364] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 163.121551][ T612] usb 3-1: SerialNumber: syz [ 163.142638][ T6350] F2FS-fs (loop3): invalid crc value [ 163.151717][ T6350] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 163.177698][ T6355] erofs: (device loop1): mounted with root inode @ nid 36. [ 163.286488][ T6358] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 163.306076][ T6358] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=./file1,quota,,errors=continue [ 163.337962][ T520] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.357450][ T520] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 163.366828][ T364] usb 1-1: Using ep0 maxpacket: 8 [ 163.381954][ T520] usb 5-1: USB disconnect, device number 56 [ 163.417727][ T6368] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 163.429035][ T6368] EXT4-fs (loop1): invalid journal inode [ 163.434907][ T6368] EXT4-fs (loop1): can't get journal size [ 163.441323][ T6368] EXT4-fs error (device loop1): ext4_protect_reserved_inode:179: comm syz.1.2697: blocks 48-48 from inode 2 overlap system zone [ 163.455029][ T6368] EXT4-fs (loop1): failed to initialize system zone (-117) [ 163.462454][ T612] usb 3-1: unit 255 not found! [ 163.467524][ T6368] EXT4-fs (loop1): mount failed [ 163.477996][ T612] usb 3-1: USB disconnect, device number 57 [ 163.500024][ T364] usb 1-1: config 143 has an invalid interface number: 132 but max is 0 [ 163.508657][ T364] usb 1-1: config 143 has no interface number 0 [ 163.514984][ T364] usb 1-1: config 143 interface 132 altsetting 7 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 163.526107][ T364] usb 1-1: config 143 interface 132 has no altsetting 0 [ 163.623639][ T53] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 163.644541][ T6381] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 163.662709][ T651] udevd[651]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 163.679296][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 163.699934][ T364] usb 1-1: New USB device found, idVendor=0dcd, idProduct=0001, bcdDevice=ec.ff [ 163.710616][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.719155][ T364] usb 1-1: Product: syz [ 163.724266][ T6384] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 163.731295][ T364] usb 1-1: Manufacturer: syz [ 163.735988][ T364] usb 1-1: SerialNumber: syz [ 163.820002][ T6389] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 163.845161][ T6387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 163.931314][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 163.966791][ T53] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 164.014670][ T364] ftdi_sio 1-1:143.132: FTDI USB Serial Device converter detected [ 164.022807][ T364] usb 1-1: Detected FT-X [ 164.037807][ T6395] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 164.062569][ T364] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 164.064198][ T6395] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.075008][ T6401] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 164.090750][ T364] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 164.109443][ T364] ftdi_sio 1-1:143.132: GPIO initialisation failed: -71 [ 164.116832][ T364] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 164.128686][ T53] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 164.137739][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.156043][ T364] usb 1-1: USB disconnect, device number 57 [ 164.162903][ T53] usb 4-1: Product: syz [ 164.167358][ T364] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 164.176709][ T53] usb 4-1: Manufacturer: syz [ 164.181315][ T53] usb 4-1: SerialNumber: syz [ 164.186168][ T364] ftdi_sio 1-1:143.132: device disconnected [ 164.498568][ T6419] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 164.506025][ T6419] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 164.522420][ T6419] F2FS-fs (loop2): invalid crc value [ 164.528633][ T53] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 164.536276][ T6419] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:3, segno:0, type:0, next_blkoff:3, blkofs:6 [ 164.550863][ T53] usb 4-1: incorrect wMaxPacketSize 0x20 for BADD profile [ 164.558317][ T53] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 164.565709][ T6419] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 164.576963][ T53] usb 4-1: USB disconnect, device number 62 [ 164.855797][ T6441] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.986784][ T6430] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.134723][ T6430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.613117][ T651] print_req_error: 133 callbacks suppressed [ 165.613133][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 165.642929][ T53] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 165.718839][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 165.819750][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 165.864151][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.894830][ T651] buffer_io_error: 108 callbacks suppressed [ 165.894841][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 165.938787][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.966974][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 165.995345][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.014671][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.032936][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.052874][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.071156][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.090840][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.100103][ T53] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 166.117280][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 166.128987][ T53] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.151891][ T53] usb 5-1: config 1 interface 0 has no altsetting 0 [ 166.157828][ T651] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.195650][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.203786][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.236358][ T6476] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 166.676626][ T651] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 166.728799][ T6486] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 166.748252][ T53] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 166.786237][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.804300][ T53] usb 5-1: Manufacturer: ࠖ [ 166.843093][ T6466] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 166.977694][ T651] udevd[651]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 166.997517][ T24] audit: type=1400 audit(2000001094.837:230): avc: denied { create } for pid=6492 comm="syz.1.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 167.047559][ T651] udevd[651]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.061318][ T6448] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.103554][ T6497] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2739'. [ 167.142765][ T651] udevd[651]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.161173][ T53] usb 5-1: USB disconnect, device number 57 [ 167.193147][ T6448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.242961][ T364] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 167.253523][ T6499] EXT4-fs (loop1): Ignoring removed orlov option [ 167.274130][ T6499] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue [ 167.387419][ T6499] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 167.405556][ T24] audit: type=1400 audit(2000001095.267:231): avc: denied { relabelto } for pid=6498 comm="syz.1.2740" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 167.434219][ T6506] EXT4-fs (loop0): #clusters per group too big: 598016 [ 167.481435][ T364] usb 4-1: Using ep0 maxpacket: 32 [ 167.546872][ T651] udevd[651]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.570589][ T651] udevd[651]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.594125][ T24] audit: type=1400 audit(2000001095.467:232): avc: denied { read write } for pid=6511 comm="syz.1.2745" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.606766][ T6512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2744'. [ 167.634008][ T364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.663530][ T651] udevd[651]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.676528][ T24] audit: type=1400 audit(2000001095.498:233): avc: denied { open } for pid=6511 comm="syz.1.2745" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.716114][ T651] udevd[651]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 167.748933][ T24] audit: type=1400 audit(2000001095.519:234): avc: denied { getopt } for pid=6514 comm="syz.0.2746" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.837162][ T6523] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 167.862423][ T364] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 167.873829][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.883166][ T364] usb 4-1: Product: syz [ 167.887406][ T364] usb 4-1: Manufacturer: syz [ 167.892380][ T364] usb 4-1: SerialNumber: syz [ 167.899321][ T6537] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 167.926642][ T24] audit: type=1400 audit(2000001095.813:235): avc: denied { create } for pid=6534 comm="syz.0.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.983576][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2755'. [ 168.001173][ T6531] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 168.038525][ T24] audit: type=1400 audit(2000001095.929:236): avc: denied { connect } for pid=6548 comm="syz.1.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.070764][ T24] audit: type=1326 audit(2000001095.960:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.2761" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x7ffc0000 [ 168.095831][ T24] audit: type=1326 audit(2000001095.960:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.2761" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x7ffc0000 [ 168.120820][ T24] audit: type=1326 audit(2000001095.960:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6550 comm="syz.4.2761" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x7ffc0000 [ 168.271673][ T364] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 168.309856][ T364] usb 4-1: unit 37 not found! [ 168.314584][ T364] usb 4-1: unit 0 not found! [ 168.379495][ T364] usb 4-1: USB disconnect, device number 63 [ 168.498975][ T6609] netlink: 'syz.4.2789': attribute type 3 has an invalid length. [ 168.606240][ T6622] device bridge1 entered promiscuous mode [ 168.791606][ T6642] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.793242][ T6635] FAT-fs (loop2): Directory bread(block 64) failed [ 168.824084][ T6635] FAT-fs (loop2): Directory bread(block 65) failed [ 168.837282][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 168.839559][ T6635] FAT-fs (loop2): Directory bread(block 66) failed [ 168.853078][ T6635] FAT-fs (loop2): Directory bread(block 67) failed [ 168.862572][ T6635] FAT-fs (loop2): Directory bread(block 68) failed [ 168.869180][ T6635] FAT-fs (loop2): Directory bread(block 69) failed [ 168.883694][ T6635] FAT-fs (loop2): Directory bread(block 70) failed [ 168.894242][ T6635] FAT-fs (loop2): Directory bread(block 71) failed [ 168.902209][ T6635] FAT-fs (loop2): Directory bread(block 72) failed [ 168.908808][ T6635] FAT-fs (loop2): Directory bread(block 73) failed [ 169.287154][ T6708] netlink: 'syz.2.2838': attribute type 30 has an invalid length. [ 169.300803][ T364] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 169.557704][ T364] usb 1-1: Using ep0 maxpacket: 16 [ 169.645781][ T6741] device bridge_slave_1 left promiscuous mode [ 169.662013][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.680011][ T6741] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 169.696398][ T364] usb 1-1: config 0 has an invalid interface number: 137 but max is 0 [ 169.710027][ T364] usb 1-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 169.729330][ T364] usb 1-1: config 0 has no interface number 0 [ 169.751713][ T364] usb 1-1: config 0 interface 137 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.776478][ T364] usb 1-1: config 0 interface 137 has no altsetting 0 [ 169.967431][ T364] usb 1-1: New USB device found, idVendor=0403, idProduct=f0e9, bcdDevice=99.09 [ 170.014960][ T364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.049087][ T364] usb 1-1: Product: syz [ 170.063219][ T364] usb 1-1: Manufacturer: syz [ 170.068039][ T364] usb 1-1: SerialNumber: syz [ 170.095981][ T364] usb 1-1: config 0 descriptor?? [ 170.220315][ T6682] F2FS-fs (loop3): invalid crc value [ 170.240994][ T6682] F2FS-fs (loop3): invalid crc_offset: 528380 [ 170.253163][ T6682] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 170.405983][ T364] ftdi_sio 1-1:0.137: FTDI USB Serial Device converter detected [ 170.413978][ T364] usb 1-1: Detected FT-X [ 170.434138][ T364] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 170.453187][ T364] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 170.472222][ T364] ftdi_sio 1-1:0.137: GPIO initialisation failed: -71 [ 170.481567][ T364] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 170.503966][ T364] usb 1-1: USB disconnect, device number 58 [ 170.512403][ T364] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 170.525909][ T364] ftdi_sio 1-1:0.137: device disconnected [ 170.575774][ T6788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.715831][ T6802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.723092][ T6802] IPv6: NLM_F_CREATE should be set when creating new route [ 170.730359][ T6802] IPv6: NLM_F_CREATE should be set when creating new route [ 170.848126][ T6811] netlink: 'syz.1.2887': attribute type 1 has an invalid length. [ 171.342381][ T6863] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.375121][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.437722][ T6867] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 171.497741][ T6872] x_tables: duplicate underflow at hook 2 [ 171.501749][ T6863] incfs: Options parsing error. -22 [ 171.519880][ T6863] incfs: mount failed -22 [ 171.619992][ T6882] xt_TCPMSS: Only works on TCP SYN packets [ 171.791191][ T6909] mmap: syz.3.2935 (6909): VmData 40828928 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 171.946626][ T24] kauditd_printk_skb: 52 callbacks suppressed [ 171.946641][ T24] audit: type=1400 audit(2000001100.034:292): avc: denied { ioctl } for pid=6924 comm="syz.0.2943" path="/dev/binderfs/binder0" dev="binder" ino=18 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 171.978289][ T6925] binder: 6924:6925 ioctl c018620c 0 returned -14 [ 172.048479][ T6887] F2FS-fs (loop4): invalid crc value [ 172.123968][ T6887] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.130514][ T6946] xt_limit: Overflow, try lower: 2/2147483648 [ 172.226420][ T24] audit: type=1400 audit(2000001100.328:293): avc: denied { write } for pid=6963 comm="syz.3.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.264738][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2964'. [ 172.277335][ T6887] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 172.283834][ T24] audit: type=1400 audit(2000001100.391:294): avc: denied { read } for pid=6969 comm="syz.0.2963" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.298276][ T6887] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 172.326968][ T24] audit: type=1400 audit(2000001100.391:295): avc: denied { open } for pid=6969 comm="syz.0.2963" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.369011][ T24] audit: type=1400 audit(2000001100.423:296): avc: denied { ioctl } for pid=6969 comm="syz.0.2963" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.431440][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2971'. [ 172.446715][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2971'. [ 172.455820][ T24] audit: type=1400 audit(2000001100.559:297): avc: denied { write } for pid=6885 comm="syz.4.2923" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.462978][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2971'. [ 172.477940][ T520] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 172.497175][ T285] attempt to access beyond end of device [ 172.497175][ T285] loop4: rw=2049, want=45104, limit=40427 [ 172.508801][ T24] audit: type=1400 audit(2000001100.559:298): avc: denied { add_name } for pid=6885 comm="syz.4.2923" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.564447][ T24] audit: type=1400 audit(2000001100.559:299): avc: denied { create } for pid=6885 comm="syz.4.2923" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 172.642766][ T6996] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 172.653058][ T6996] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 172.683179][ T24] audit: type=1400 audit(2000001100.811:300): avc: denied { nlmsg_read } for pid=7009 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.726580][ T7015] IPv6: Can't replace route, no match found [ 172.734035][ T6996] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,nomblk_io_submit,,errors=continue [ 172.757393][ T6996] ext4 filesystem being mounted at /626/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.781340][ T6996] EXT4-fs error (device loop1): ext4_get_first_dir_block:3708: inode #12: comm syz.1.2976: Attempting to read directory block (0) that is past i_size (3) [ 172.797294][ T24] audit: type=1400 audit(2000001100.916:301): avc: denied { remove_name } for pid=6995 comm="syz.1.2976" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.882891][ T7039] netlink: 'syz.1.2991': attribute type 3 has an invalid length. [ 172.890903][ T7039] netlink: 'syz.1.2991': attribute type 3 has an invalid length. [ 172.991780][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 173.072056][ T520] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 173.084627][ T520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.106157][ T520] usb 3-1: Product: syz [ 173.129522][ T520] usb 3-1: Manufacturer: syz [ 173.138357][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3010'. [ 173.151197][ T520] usb 3-1: SerialNumber: syz [ 173.165983][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3010'. [ 173.193233][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3010'. [ 173.285816][ T7047] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 173.298348][ T7047] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 173.307509][ T7047] F2FS-fs (loop0): invalid crc value [ 173.313805][ T7047] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 173.344877][ T7047] F2FS-fs (loop0): Start checkpoint disabled! [ 173.366969][ T7047] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.374105][ T7047] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 173.501166][ T520] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 173.519714][ T520] usb 3-1: unit 14 not found! [ 173.561710][ T520] usb 3-1: USB disconnect, device number 58 [ 173.567783][ T287] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 173.579425][ T7085] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64) [ 173.590154][ T7085] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 173.636888][ T7085] F2FS-fs (loop3): invalid crc value [ 173.647634][ T7085] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 173.678016][ T7085] F2FS-fs (loop3): recover fsync data on readonly fs [ 173.685130][ T7085] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 173.692407][ T7085] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 173.763186][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 173.772628][ T651] udevd[651]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.910216][ T287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.935421][ T287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.975309][ T287] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.158079][ T287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.176609][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.205109][ T287] usb 2-1: Product: syz [ 174.209500][ T287] usb 2-1: Manufacturer: syz [ 174.219090][ T287] usb 2-1: SerialNumber: syz [ 174.263541][ T287] cdc_ncm 2-1:1.0: skipping garbage [ 174.268937][ T287] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 174.296200][ T287] cdc_ncm 2-1:1.0: bind() failure [ 174.459780][ T287] usb 2-1: USB disconnect, device number 52 [ 174.817618][ T7280] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 174.871764][ T7287] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 174.909010][ T7291] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3113'. [ 175.291927][ T7345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.316877][ T7345] EXT4-fs (loop1): 1 truncate cleaned up [ 175.322747][ T7345] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,i_version,,errors=continue [ 175.440277][ T7362] device xfrm0 entered promiscuous mode [ 175.453508][ T7364] xt_policy: output policy not valid in PREROUTING and INPUT [ 175.638294][ T7390] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 175.653948][ T7390] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.744667][ T7404] syz.1.3166 uses obsolete (PF_INET,SOCK_PACKET) [ 176.008735][ T7443] rtc_cmos 00:00: Alarms can be up to one day in the future [ 176.025698][ T7429] EXT4-fs warning (device loop4): dx_probe:836: inode #2: comm syz.4.3179: Unimplemented hash flags: 0x0001 [ 176.037510][ T7429] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.3179: Corrupt directory, running e2fsck is recommended [ 176.051114][ T7429] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 176.062940][ T7429] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.3179: corrupted in-inode xattr [ 176.129433][ T7429] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.3179: couldn't read orphan inode 15 (err -117) [ 176.187102][ T7429] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.min_batch_time=0x0000000000000006,barrier=0x0000000000000008,jqfmt=vfsv1,nombcache,,,errors=continue [ 176.308449][ T7474] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 176.494318][ T7498] FAT-fs (loop4): Directory bread(block 64) failed [ 176.506175][ T7506] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 176.512194][ T7498] FAT-fs (loop4): Directory bread(block 65) failed [ 176.526171][ T7506] EXT4-fs (loop0): Ignoring removed orlov option [ 176.532592][ T7498] FAT-fs (loop4): Directory bread(block 66) failed [ 176.532639][ T7498] FAT-fs (loop4): Directory bread(block 67) failed [ 176.546248][ T7498] FAT-fs (loop4): Directory bread(block 68) failed [ 176.553130][ T7498] FAT-fs (loop4): Directory bread(block 69) failed [ 176.559875][ T7498] FAT-fs (loop4): Directory bread(block 70) failed [ 176.566512][ T7498] FAT-fs (loop4): Directory bread(block 71) failed [ 176.573241][ T7498] FAT-fs (loop4): Directory bread(block 72) failed [ 176.580042][ T7498] FAT-fs (loop4): Directory bread(block 73) failed [ 176.589918][ T7506] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 176.597957][ T7506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802c01c, mo2=0002] [ 176.607328][ T7506] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 176.616912][ T7506] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 176.625779][ T7506] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,data_err=ignore,dioread_lock,orlov,debug,,errors=continue [ 176.650042][ T7506] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.3216: dx entry: limit 65535 != root limit 120 [ 176.690379][ T7506] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.3216: Corrupt directory, running e2fsck is recommended [ 176.816158][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 176.816190][ T24] audit: type=1400 audit(2000001105.147:329): avc: denied { write } for pid=7529 comm="syz.0.3227" name="binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.871274][ T7544] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.890722][ T7544] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 176.924087][ T7544] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 176.933548][ T7544] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 176.941728][ T7544] System zones: 0-2, 18-18, 34-35 [ 176.981277][ T7544] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue [ 177.015553][ T24] audit: type=1400 audit(2000001105.347:330): avc: denied { mount } for pid=7566 comm="syz.1.3244" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 177.042921][ T24] audit: type=1400 audit(2000001105.357:331): avc: denied { bind } for pid=7572 comm="syz.0.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.088288][ T7585] __nla_validate_parse: 3 callbacks suppressed [ 177.088296][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'. [ 177.146271][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.175169][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.182305][ T7592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.250371][ T7613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.410996][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 177.574915][ T7654] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 177.584713][ T7654] EXT4-fs (loop4): Test dummy encryption mode enabled [ 177.621207][ T7654] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003] [ 177.650065][ T7654] System zones: 0-5 [ 177.687423][ T7654] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,test_dummy_encryption,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue [ 177.817200][ T24] audit: type=1400 audit(2000001106.197:332): avc: denied { ioctl } for pid=7680 comm="syz.3.3299" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 178.168135][ T24] audit: type=1326 audit(2000001106.575:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.3323" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e917019 code=0x7ffc0000 [ 178.238567][ T7733] syz.1.3324 (7733): /proc/7732/oom_adj is deprecated, please use /proc/7732/oom_score_adj instead. [ 178.252479][ T24] audit: type=1326 audit(2000001106.596:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.3323" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fa58e917019 code=0x7ffc0000 [ 178.325304][ T24] audit: type=1326 audit(2000001106.596:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.3323" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e917019 code=0x7ffc0000 [ 178.357510][ T24] audit: type=1326 audit(2000001106.596:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.3.3323" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58e917019 code=0x7ffc0000 [ 178.387388][ T7739] EXT4-fs (loop1): Ignoring removed orlov option [ 178.406675][ T24] audit: type=1400 audit(2000001106.827:337): avc: denied { accept } for pid=7741 comm="syz.4.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.433826][ T7739] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,norecovery,orlov,nogrpid,nobarrier,sysvgroups,norecovery,noauto_da_alloc,bsddf,nombcache,block_validity,,errors=continue [ 178.475318][ T7625] F2FS-fs (loop2): invalid crc value [ 178.484316][ T24] audit: type=1400 audit(2000001106.901:338): avc: denied { setattr } for pid=7738 comm="syz.1.3328" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.542109][ T7625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.571260][ T7625] F2FS-fs (loop2): recover fsync data on readonly fs [ 178.578230][ T7625] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 178.584902][ T7625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 178.606901][ T7629] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 178.615737][ T7629] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 178.624533][ T7629] F2FS-fs (loop0): invalid crc value [ 178.658579][ T7629] F2FS-fs (loop0): Found nat_bits in checkpoint [ 178.717419][ T7629] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 178.724517][ T7629] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 178.866547][ T7629] F2FS-fs (loop0): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 178.883355][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 178.901821][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.911255][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 178.933358][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.951844][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.963438][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.988969][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.005192][ T7798] netlink: 'syz.4.3354': attribute type 29 has an invalid length. [ 179.012406][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.045288][ T7798] netlink: 'syz.4.3354': attribute type 29 has an invalid length. [ 179.169786][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 179.379864][ T7863] device vlan0 entered promiscuous mode [ 179.415445][ T612] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 179.466459][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3393'. [ 179.806318][ T612] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 179.825307][ T612] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.848842][ T612] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 179.861210][ T612] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 179.898836][ T7970] xt_socket: unknown flags 0x40 [ 179.908659][ T7974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3437'. [ 179.953316][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'. [ 179.962456][ T612] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.975668][ T612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.985308][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3444'. [ 179.992572][ T612] usb 5-1: SerialNumber: syz [ 180.023379][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 180.034991][ T7818] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 180.128655][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3457'. [ 180.134378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.197023][ T287] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 180.231218][ T8024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.246913][ T8028] IPv6: NLM_F_REPLACE set, but no existing node found! [ 180.271787][ T8032] usb usb7: usbfs: process 8032 (syz.2.3468) did not claim interface 0 before use [ 180.311285][ T612] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 180.330194][ T612] usb 5-1: USB disconnect, device number 58 [ 180.383318][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3479'. [ 180.444121][ T287] usb 1-1: Using ep0 maxpacket: 16 [ 180.675501][ T8092] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 180.702932][ T8092] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 180.729939][ T8092] EXT4-fs (loop3): 1 truncate cleaned up [ 180.735614][ T8092] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue [ 180.753186][ T287] usb 1-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 180.775870][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.809853][ T287] usb 1-1: Product: syz [ 180.814059][ T287] usb 1-1: Manufacturer: syz [ 180.818867][ T287] usb 1-1: SerialNumber: syz [ 180.872793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 181.187042][ T287] usb 1-1: Can't get UAC3 power state for id 10 [ 181.225005][ T287] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 181.231516][ T287] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 181.257647][ T287] usb 1-1: USB disconnect, device number 59 [ 181.333849][ T8171] device bridge3 entered promiscuous mode [ 181.349470][ T8174] xt_l2tp: v2 doesn't support IP mode [ 181.474173][ T8183] exfat: Deprecated parameter 'utf8' [ 181.479547][ T8183] exfat: Deprecated parameter 'utf8' [ 181.485210][ T8183] exfat: Deprecated parameter 'namecase' [ 181.490921][ T8183] exfat: Deprecated parameter 'namecase' [ 181.500929][ T8183] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 181.835341][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 181.835355][ T24] audit: type=1400 audit(2000001110.418:360): avc: denied { setopt } for pid=8235 comm="syz.0.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.869826][ T24] audit: type=1400 audit(2000001110.439:361): avc: denied { write } for pid=8234 comm="syz.4.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.932588][ T8189] F2FS-fs (loop1): invalid crc value [ 181.956801][ T8228] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 181.960841][ T8189] F2FS-fs (loop1): Found nat_bits in checkpoint [ 182.006107][ T8189] F2FS-fs (loop1): Start checkpoint disabled! [ 182.012688][ T8228] FAT-fs (loop3): Filesystem has been set read-only [ 182.019600][ T8189] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 182.222378][ T8290] __nla_validate_parse: 28 callbacks suppressed [ 182.222389][ T8290] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3590'. [ 182.415919][ T287] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 182.435618][ T24] audit: type=1326 audit(2000001111.048:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.4.3604" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x7ffc0000 [ 182.484907][ T24] audit: type=1326 audit(2000001111.048:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.4.3604" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x7ffc0000 [ 182.510475][ T24] audit: type=1326 audit(2000001111.079:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.4.3604" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f87514cb019 code=0x7ffc0000 [ 182.553965][ T24] audit: type=1326 audit(2000001111.079:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.4.3604" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x7ffc0000 [ 182.628034][ T24] audit: type=1326 audit(2000001111.079:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.4.3604" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87514cb019 code=0x7ffc0000 [ 182.690918][ T24] audit: type=1400 audit(2000001111.310:367): avc: denied { create } for pid=8352 comm="syz.4.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.710470][ T287] usb 3-1: Using ep0 maxpacket: 32 [ 182.783429][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3632'. [ 182.838196][ T8387] overlayfs: empty lowerdir [ 182.863532][ T287] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 182.884272][ T24] audit: type=1326 audit(2000001111.520:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.1.3641" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff375a72019 code=0x7ffc0000 [ 182.909203][ T287] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 182.927219][ T287] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.941418][ T24] audit: type=1326 audit(2000001111.520:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.1.3641" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff375a72019 code=0x7ffc0000 [ 182.967259][ T287] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.977561][ T287] usb 3-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 182.977968][ T53] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 182.992156][ T287] usb 3-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 183.007479][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.026971][ T8405] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 183.028531][ T8397] EXT4-fs warning (device loop4): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 183.049452][ T8397] EXT4-fs warning (device loop4): dx_probe:848: Enable large directory feature to access it [ 183.059738][ T8397] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.3643: Corrupt directory, running e2fsck is recommended [ 183.073552][ T8397] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 183.081986][ T8397] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.3643: corrupted in-inode xattr [ 183.085374][ T8407] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 183.102393][ T8407] SELinux: failed to load policy [ 183.103994][ T8397] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.3643: couldn't read orphan inode 15 (err -117) [ 183.130219][ T8397] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.journal_dev=0x00000000000001ff,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue [ 183.339509][ T287] usb 3-1: string descriptor 0 read error: -71 [ 183.349750][ T53] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.365366][ T287] usb 3-1: USB disconnect, device number 59 [ 183.388177][ T53] usb 1-1: config 0 has no interfaces? [ 183.403309][ T53] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.412696][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.445514][ T53] usb 1-1: config 0 descriptor?? [ 183.553318][ T8481] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 183.564700][ T8481] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 183.572265][ T8481] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 183.588417][ T8481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c01c, mo2=0003] [ 183.596543][ T8481] System zones: 0-1, 3-36 [ 183.602395][ T8481] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,abort,,errors=continue [ 183.680492][ T364] usb 1-1: USB disconnect, device number 60 [ 183.726625][ T8507] tc_dump_action: action bad kind [ 183.814458][ T8511] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 183.914424][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3709'. [ 183.943665][ T8546] xt_l2tp: missing protocol rule (udp|l2tpip) [ 184.014867][ T8560] netlink: 37 bytes leftover after parsing attributes in process `syz.3.3719'. [ 184.252526][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3743'. [ 184.278605][ T8611] netlink: 'syz.1.3743': attribute type 5 has an invalid length. [ 184.288408][ T8614] netlink: 'syz.3.3748': attribute type 13 has an invalid length. [ 184.374004][ T8629] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 184.387332][ T364] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 184.396928][ T8629] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 184.409892][ T8629] overlayfs: missing 'lowerdir' [ 184.466383][ T8641] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 184.512978][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3765'. [ 184.538663][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3767'. [ 184.739852][ T364] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.794514][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3783'. [ 184.817033][ T8696] device ipip0 entered promiscuous mode [ 184.911395][ T364] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 184.927542][ T364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.949529][ T364] usb 3-1: Product: syz [ 184.965755][ T364] usb 3-1: Manufacturer: syz [ 184.970755][ T364] usb 3-1: SerialNumber: syz [ 185.014011][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.025819][ T364] ums-karma 3-1:1.0: USB Mass Storage device detected [ 185.035540][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3803'. [ 185.045399][ T364] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 185.045399][ T364] Please send a copy of this message to and [ 185.050964][ T8733] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 185.130002][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3807'. [ 185.230791][ T8761] netlink: 'syz.0.3818': attribute type 4 has an invalid length. [ 185.241129][ T364] usb 3-1: USB disconnect, device number 60 [ 185.247134][ T8761] netlink: 'syz.0.3818': attribute type 5 has an invalid length. [ 185.321873][ T8776] IPv6: sit1: Disabled Multicast RS [ 185.394259][ T8793] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 185.780511][ T8863] netlink: 'syz.2.3865': attribute type 15 has an invalid length. [ 185.810024][ T8871] ================================================================== [ 185.818163][ T8871] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 185.826343][ T8871] Read of size 4 at addr ffff88810ab34470 by task syz.1.3868/8871 [ 185.834176][ T8871] [ 185.836549][ T8871] CPU: 0 PID: 8871 Comm: syz.1.3868 Tainted: G W syzkaller #0 [ 185.845319][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.855402][ T8871] Call Trace: [ 185.858727][ T8871] __dump_stack+0x21/0x24 [ 185.863082][ T8871] dump_stack_lvl+0x1a7/0x208 [ 185.867785][ T8871] ? show_regs_print_info+0x18/0x18 [ 185.872999][ T8871] ? thaw_kernel_threads+0x220/0x220 [ 185.878311][ T8871] print_address_description+0x7f/0x2c0 [ 185.883880][ T8871] ? unaccount_page_cache_page+0x9dc/0xac0 [ 185.889710][ T8871] kasan_report+0x100/0x140 [ 185.894369][ T8871] ? xas_store+0xd0c/0x18d0 [ 185.898895][ T8871] ? unaccount_page_cache_page+0x9dc/0xac0 [ 185.904723][ T8871] __asan_report_load4_noabort+0x14/0x20 [ 185.910373][ T8871] unaccount_page_cache_page+0x9dc/0xac0 [ 185.916046][ T8871] __delete_from_page_cache+0xc3/0x470 [ 185.921531][ T8871] ? memset+0x35/0x40 [ 185.925541][ T8871] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 185.932580][ T8871] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 185.938080][ T8871] ? __kasan_check_read+0x11/0x20 [ 185.943123][ T8871] ? workingset_eviction+0x3dc/0x940 [ 185.948418][ T8871] __remove_mapping+0x581/0x6b0 [ 185.953297][ T8871] shrink_page_list+0x21ee/0x4160 [ 185.958362][ T8871] ? shrink_page_list+0x1f21/0x4160 [ 185.963625][ T8871] ? reclaim_clean_pages_from_list+0x740/0x740 [ 185.969799][ T8871] ? shrink_inactive_list+0xef0/0xef0 [ 185.975200][ T8871] ? _raw_spin_lock_irq+0x95/0xf0 [ 185.980256][ T8871] ? __count_memcg_events+0x89/0x210 [ 185.985569][ T8871] shrink_inactive_list+0x90c/0xef0 [ 185.990802][ T8871] ? shrink_active_list+0xe00/0xe00 [ 185.996024][ T8871] ? blk_flush_plug_list+0x40b/0x450 [ 185.997077][ T20] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 186.001499][ T8871] ? __kasan_check_read+0x11/0x20 [ 186.014057][ T8871] ? __kasan_check_read+0x11/0x20 [ 186.019117][ T8871] ? lruvec_lru_size+0x230/0x250 [ 186.024077][ T8871] ? blk_start_plug+0x5a/0x170 [ 186.028854][ T8871] shrink_lruvec+0x2806/0x2d70 [ 186.033648][ T8871] ? __kasan_check_write+0x14/0x20 [ 186.038777][ T8871] ? down_read_trylock+0x106/0x160 [ 186.043899][ T8871] ? __init_rwsem+0x1c0/0x1c0 [ 186.048599][ T8871] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 186.054165][ T8871] ? __kasan_check_write+0x14/0x20 [ 186.059297][ T8871] ? up_read+0x12/0x50 [ 186.063385][ T8871] ? shrink_slab+0x671/0x830 [ 186.067997][ T8871] ? update_load_avg+0x505/0x1540 [ 186.073037][ T8871] ? __kasan_check_read+0x11/0x20 [ 186.078072][ T8871] ? inactive_is_low+0x17a/0x2f0 [ 186.083034][ T8871] ? __kasan_check_write+0x14/0x20 [ 186.088200][ T8871] shrink_node+0xee0/0x2690 [ 186.092727][ T8871] do_try_to_free_pages+0x602/0x1590 [ 186.098032][ T8871] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 186.103853][ T8871] ? try_to_free_pages+0xc20/0xc20 [ 186.108983][ T8871] try_to_free_mem_cgroup_pages+0x261/0x610 [ 186.114913][ T8871] ? shrink_lruvec+0x2d70/0x2d70 [ 186.119954][ T8871] mem_cgroup_resize_max+0x309/0x3e0 [ 186.125287][ T8871] mem_cgroup_write+0x1ed/0x230 [ 186.130167][ T8871] ? mem_cgroup_reset+0x130/0x130 [ 186.135215][ T8871] ? mem_cgroup_reset+0x130/0x130 [ 186.140247][ T8871] cgroup_file_write+0x294/0x560 [ 186.145193][ T8871] ? cgroup_seqfile_stop+0xc0/0xc0 [ 186.150319][ T8871] ? mutex_lock+0x92/0xf0 [ 186.154671][ T8871] ? mutex_trylock+0xb0/0xb0 [ 186.159279][ T8871] ? __kasan_check_write+0x14/0x20 [ 186.164407][ T8871] ? cgroup_seqfile_stop+0xc0/0xc0 [ 186.169532][ T8871] kernfs_fop_write_iter+0x2bd/0x400 [ 186.174840][ T8871] vfs_write+0x770/0xd70 [ 186.179111][ T8871] ? kernel_write+0x3c0/0x3c0 [ 186.183805][ T8871] ? mutex_trylock+0xb0/0xb0 [ 186.188409][ T8871] ? __fget_files+0x2e1/0x340 [ 186.193115][ T8871] ? __fdget_pos+0x2d2/0x380 [ 186.197721][ T8871] ? ksys_write+0x70/0x260 [ 186.202169][ T8871] ksys_write+0x14a/0x260 [ 186.206513][ T8871] ? __ia32_sys_read+0x90/0x90 [ 186.211290][ T8871] ? __kasan_check_read+0x11/0x20 [ 186.216327][ T8871] __x64_sys_write+0x7b/0x90 [ 186.220943][ T8871] do_syscall_64+0x31/0x40 [ 186.225396][ T8871] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 186.231295][ T8871] RIP: 0033:0x7ff375a72019 [ 186.235740][ T8871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.255358][ T8871] RSP: 002b:00007ff3744cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.263792][ T8871] RAX: ffffffffffffffda RBX: 00007ff375cf9fa0 RCX: 00007ff375a72019 [ 186.271779][ T8871] RDX: 0000000000000050 RSI: 0000200000002580 RDI: 0000000000000003 [ 186.279768][ T8871] RBP: 00007ff375b0900c R08: 0000000000000000 R09: 0000000000000000 [ 186.287753][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.295739][ T8871] R13: 00007ff375cfa038 R14: 00007ff375cf9fa0 R15: 00007ffc51f800d8 [ 186.303717][ T8871] [ 186.306059][ T8871] Allocated by task 8811: [ 186.310426][ T8871] __kasan_kmalloc+0xd4/0x100 [ 186.315115][ T8871] __kmalloc+0x19f/0x330 [ 186.319376][ T8871] file_tty_write+0x306/0x8b0 [ 186.324076][ T8871] tty_write+0x3c/0x50 [ 186.328164][ T8871] vfs_write+0x770/0xd70 [ 186.332423][ T8871] ksys_write+0x14a/0x260 [ 186.336770][ T8871] __x64_sys_write+0x7b/0x90 [ 186.341392][ T8871] do_syscall_64+0x31/0x40 [ 186.345825][ T8871] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 186.351721][ T8871] [ 186.354073][ T8871] Freed by task 20: [ 186.357899][ T8871] kasan_set_track+0x4a/0x70 [ 186.362516][ T8871] kasan_set_free_info+0x23/0x40 [ 186.367481][ T8871] ____kasan_slab_free+0x125/0x160 [ 186.372625][ T8871] __kasan_slab_free+0x11/0x20 [ 186.377403][ T8871] slab_free_freelist_hook+0xc5/0x190 [ 186.378300][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 186.382823][ T8871] kfree+0xc0/0x270 [ 186.391710][ T8871] release_one_tty+0x2a7/0x310 [ 186.396488][ T8871] process_one_work+0x6fd/0xbc0 [ 186.401353][ T8871] worker_thread+0xa8e/0x13c0 [ 186.406041][ T8871] kthread+0x324/0x3b0 [ 186.410139][ T8871] ret_from_fork+0x1f/0x30 [ 186.414576][ T8871] [ 186.416932][ T8871] Last potentially related work creation: [ 186.422666][ T8871] kasan_save_stack+0x3a/0x60 [ 186.427362][ T8871] __kasan_record_aux_stack+0xd2/0x100 [ 186.432839][ T8871] kasan_record_aux_stack_noalloc+0xb/0x10 [ 186.438657][ T8871] call_rcu+0x11a/0x1090 [ 186.442910][ T8871] netlink_release+0x128f/0x16d0 [ 186.447859][ T8871] sock_close+0xb8/0x200 [ 186.452114][ T8871] __fput+0x2dc/0x730 [ 186.456110][ T8871] ____fput+0x15/0x20 [ 186.460126][ T8871] task_work_run+0x127/0x190 [ 186.464745][ T8871] exit_to_user_mode_loop+0xcb/0xe0 [ 186.469958][ T8871] exit_to_user_mode_prepare+0x76/0xa0 [ 186.475433][ T8871] syscall_exit_to_user_mode+0x1d/0x40 [ 186.480903][ T8871] do_syscall_64+0x3d/0x40 [ 186.485349][ T8871] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 186.491247][ T8871] [ 186.493591][ T8871] Second to last potentially related work creation: [ 186.500213][ T8871] kasan_save_stack+0x3a/0x60 [ 186.504906][ T8871] __kasan_record_aux_stack+0xd2/0x100 [ 186.510374][ T8871] kasan_record_aux_stack_noalloc+0xb/0x10 [ 186.516190][ T8871] insert_work+0x51/0x320 [ 186.520528][ T8871] __queue_work+0x91f/0xca0 [ 186.525049][ T8871] rcu_work_rcufn+0x47/0x50 [ 186.529574][ T8871] rcu_do_batch+0x488/0xaf0 [ 186.534134][ T8871] rcu_core+0x50a/0xca0 [ 186.538299][ T8871] rcu_core_si+0x9/0x10 [ 186.542468][ T8871] __do_softirq+0x255/0x563 [ 186.546970][ T8871] [ 186.549311][ T8871] The buggy address belongs to the object at ffff88810ab34000 [ 186.549311][ T8871] which belongs to the cache kmalloc-2k of size 2048 [ 186.563459][ T8871] The buggy address is located 1136 bytes inside of [ 186.563459][ T8871] 2048-byte region [ffff88810ab34000, ffff88810ab34800) [ 186.576995][ T8871] The buggy address belongs to the page: [ 186.582657][ T8871] page:ffffea00042acc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ab30 [ 186.592901][ T8871] head:ffffea00042acc00 order:3 compound_mapcount:0 compound_pincount:0 [ 186.601233][ T8871] flags: 0x4000000000010200(slab|head) [ 186.606711][ T8871] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042d80 [ 186.615316][ T8871] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 186.623900][ T8871] page dumped because: kasan: bad access detected [ 186.630320][ T8871] page_owner tracks the page as allocated [ 186.636160][ T8871] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2403449264, free_ts 0 [ 186.652488][ T8871] prep_new_page+0x176/0x190 [ 186.657103][ T8871] get_page_from_freelist+0x225f/0x23f0 [ 186.662663][ T8871] __alloc_pages_nodemask+0x29a/0x640 [ 186.664473][ T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 190, changing to 7 [ 186.668055][ T8871] new_slab+0x84/0x3f0 [ 186.668095][ T8871] ___slab_alloc+0x2f8/0x4c0 [ 186.687662][ T8871] __slab_alloc+0x63/0xa0 [ 186.692004][ T8871] __kmalloc+0x1f9/0x330 [ 186.696264][ T8871] blk_alloc_flush_queue+0xc6/0x210 [ 186.697358][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 186.697390][ T24] audit: type=1400 audit(2000001115.489:394): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 186.701469][ T8871] blk_mq_realloc_hw_ctxs+0xad3/0x1620 [ 186.701481][ T8871] blk_mq_init_allocated_queue+0x466/0x1850 [ 186.701518][ T8871] blk_mq_init_queue+0x6e/0xd0 [ 186.710746][ T24] audit: type=1400 audit(2000001115.489:395): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.729260][ T8871] scsi_mq_alloc_queue+0x42/0x140 [ 186.729271][ T8871] scsi_alloc_sdev+0x611/0x920 [ 186.729281][ T8871] scsi_probe_and_add_lun+0x17d/0x3370 [ 186.729291][ T8871] __scsi_scan_target+0x1d2/0xbf0 [ 186.729301][ T8871] scsi_scan_host_selected+0x34e/0x600 [ 186.729305][ T8871] page_owner free stack trace missing [ 186.729308][ T8871] [ 186.729313][ T8871] Memory state around the buggy address: [ 186.729324][ T8871] ffff88810ab34300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.729333][ T8871] ffff88810ab34380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.729361][ T8871] >ffff88810ab34400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.749758][ T24] audit: type=1400 audit(2000001115.489:396): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.766717][ T8871] ^ [ 186.766729][ T8871] ffff88810ab34480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.766738][ T8871] ffff88810ab34500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.766743][ T8871] ================================================================== [ 186.766760][ T8871] Disabling lock debugging due to kernel taint [ 186.773431][ T24] audit: type=1400 audit(2000001115.489:397): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.910990][ T24] audit: type=1400 audit(2000001115.489:398): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.931477][ T24] audit: type=1400 audit(2000001115.489:399): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.955046][ T24] audit: type=1400 audit(2000001115.489:400): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.987872][ T20] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 186.997718][ T8870] exfat: Deprecated parameter 'namecase' [ 187.003393][ T8870] exfat: Deprecated parameter 'namecase' [ 187.009657][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.017784][ T20] usb 4-1: Product: syz [ 187.021966][ T20] usb 4-1: Manufacturer: syz [ 187.026632][ T20] usb 4-1: SerialNumber: syz [ 187.045872][ T8870] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 187.210194][ T8876] F2FS-fs (loop2): invalid crc value [ 187.217080][ T8876] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 187.243215][ T8876] F2FS-fs (loop2): recover fsync data on readonly fs [ 187.250196][ T8876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.406393][ T20] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 187.470229][ T20] usb 4-1: USB disconnect, device number 64