last executing test programs: 2m47.319207084s ago: executing program 3 (id=587): init_module(&(0x7f0000000000), 0x0, &(0x7f0000000000)) 2m47.318706764s ago: executing program 3 (id=590): getpid() 2m47.303987434s ago: executing program 3 (id=596): lookup_dcookie(0x0, &(0x7f0000000000), 0x0) 2m47.303745245s ago: executing program 1 (id=597): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max', 0x2, 0x0) 2m47.260110686s ago: executing program 3 (id=599): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey', 0x800, 0x0) 2m47.259747475s ago: executing program 1 (id=601): setfsgid(0x0) 2m47.259615935s ago: executing program 3 (id=603): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bifrost', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bifrost', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bifrost', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bifrost', 0x800, 0x0) 2m47.259536246s ago: executing program 1 (id=604): io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) 2m47.135113399s ago: executing program 3 (id=606): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2m47.035642041s ago: executing program 1 (id=605): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2m46.724007299s ago: executing program 1 (id=610): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2m46.598929992s ago: executing program 1 (id=615): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.591765164s ago: executing program 2 (id=4541): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 2.566133675s ago: executing program 2 (id=4544): r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000340)={0x14, &(0x7f00000005c0)=ANY=[], 0x0}, 0x0) 503.661067ms ago: executing program 4 (id=4661): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x138, 0x98, 0x138, 0x1f8, 0x1f8, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@private=0xa010102, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x50}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'caif0\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x3, 0x3}}]}, @ECN={0x28}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0xf5}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 417.664239ms ago: executing program 4 (id=4666): r0 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) getpriority(0x1, r0) 384.8852ms ago: executing program 4 (id=4671): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) 336.791691ms ago: executing program 4 (id=4674): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) io_setup(0xffff, &(0x7f0000000340)) 321.312151ms ago: executing program 0 (id=4677): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0xfffffffd, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0xe4ffffff}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 307.080632ms ago: executing program 5 (id=4678): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000002300)=""/20, 0x14, 0x6) 262.228663ms ago: executing program 5 (id=4680): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x9b, 0x7ffc1ffa}]}) rt_sigqueueinfo(0x0, 0xd, 0x0) 261.813603ms ago: executing program 0 (id=4681): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) lseek(r0, 0x0, 0x300) 250.437533ms ago: executing program 6 (id=4682): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) 244.842574ms ago: executing program 2 (id=4683): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000224e224e0000", 0x58}], 0x1) 228.482824ms ago: executing program 5 (id=4684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 227.696014ms ago: executing program 0 (id=4685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) 227.270494ms ago: executing program 6 (id=4686): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 203.407915ms ago: executing program 2 (id=4687): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@ipv6_deladdr={0x16, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x18, 0x24, 0xfe}}, 0x18}}, 0x48000) 196.513414ms ago: executing program 5 (id=4688): r0 = gettid() capset(&(0x7f0000000500)={0x20080522, r0}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) 190.004375ms ago: executing program 6 (id=4689): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newneigh={0x34, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, [@NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}, @NDA_NH_ID={0x8, 0xd, 0x8495}, @NDA_LINK_NETNSID={0x8}]}, 0x34}}, 0x0) 176.113225ms ago: executing program 2 (id=4690): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f00000000c0)="17000000020001000003be8c5e687a8a12003200020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac", 0x88) 170.002655ms ago: executing program 0 (id=4691): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8802}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) 151.165056ms ago: executing program 0 (id=4692): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x19}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 143.251666ms ago: executing program 5 (id=4693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d00000001000ffff2abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f8a65f05218a0400a800128009000100766c616e000000009800028006000100030200000600050088a800007c0004800c00010001000100ff0100000c00010001800000000000000c00010006000000040000000c000100870e0000080000000c000100ff0f0000179300000c00010007000000090000000c00010000010000b50400000c0001000100010004ec00000c0001006fd200000200003f0d0000000a000000030000000600050088a8000008000500", @ANYRESOCT], 0xd0}, 0x1, 0x200000000000000, 0x0, 0x240400d5}, 0x2000c000) 142.937746ms ago: executing program 2 (id=4694): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xffffffda}], 0x1000000000000179, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 107.702237ms ago: executing program 6 (id=4695): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4c24, 0x80000006, @mcast1, 0xfffffffb}, 0x1c) 96.681417ms ago: executing program 4 (id=4696): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd31, 0x25dfdbfb, {0xa, 0x0, 0x10, 0xbc, 0x55, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x18, 0xfffffffc}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200408f0}, 0x4000) 41.211849ms ago: executing program 6 (id=4697): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'veth1_to_team\x00', @random="e80300000028"}) 17.038379ms ago: executing program 5 (id=4698): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(0x0, 0xffffffffffffffff, 0x0) 16.719749ms ago: executing program 6 (id=4699): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) 494.79µs ago: executing program 0 (id=4700): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=4701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbf9, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_macvtap\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000000) kernel console output (not intermixed with test programs): mber 53 [ 149.629778][ T801] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 149.640185][ T801] usb 6-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 149.840255][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0 [ 149.852447][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 149.852748][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p5 [ 149.868390][ T15] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 47, changing to 4 [ 149.879420][ T801] usb 6-1: string descriptor 0 read error: -22 [ 149.886588][ T801] usb 6-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 149.896006][ T801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.896617][ T1099] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 149.934921][ T1099] usb 3-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 149.946225][ T1099] usb 3-1: USB disconnect, device number 45 [ 150.039911][ T15] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 150.049172][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.057142][ T15] usb 7-1: Product: syz [ 150.061463][ T15] usb 7-1: Manufacturer: syz [ 150.066073][ T15] usb 7-1: SerialNumber: syz [ 150.129373][ T1093] usb 6-1: USB disconnect, device number 51 [ 150.144899][ T1096] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 150.277958][ T1097] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 150.336025][ T15] snd-usb-audio: probe of 7-1:1.0 failed with error -2 [ 150.349080][ T15] usb 7-1: USB disconnect, device number 51 [ 150.382952][ T1096] usb 1-1: Using ep0 maxpacket: 8 [ 150.516043][ T1097] usb 5-1: Using ep0 maxpacket: 16 [ 150.564045][ T1094] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 150.630481][ T1097] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.640857][ T1097] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.659311][ T1096] usb 1-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 150.668488][ T1096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.676876][ T1096] usb 1-1: Product: syz [ 150.681328][ T1096] usb 1-1: Manufacturer: syz [ 150.685924][ T1096] usb 1-1: SerialNumber: syz [ 150.792483][ T1094] usb 3-1: Using ep0 maxpacket: 16 [ 150.802544][ T1097] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 150.814814][ T1097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.824859][ T1097] usb 5-1: Product: syz [ 150.837534][ T1097] usb 5-1: Manufacturer: syz [ 150.843469][ T1097] usb 5-1: SerialNumber: syz [ 150.903405][ T6756] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 150.906657][ T1094] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.924444][ T1094] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 191, changing to 11 [ 150.926431][ T6756] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 150.936558][ T1094] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 150.944701][ T6756] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (2000000) [ 150.956215][ T1094] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.965704][ T6756] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 150.978556][ T1094] usb 3-1: config 1 interface 0 has no altsetting 0 [ 150.987466][ T6756] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,noinit_itable,nodiscard,noquota,,errors=continue [ 151.030772][ T1096] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.053334][ T1096] usb 1-1: unit 19 not found! [ 151.068702][ T1096] usb 1-1: USB disconnect, device number 55 [ 151.090594][ T6766] overlayfs: missing 'lowerdir' [ 151.145193][ T1094] usb 3-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.40 [ 151.154264][ T1094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.162687][ T1094] usb 3-1: Product: syz [ 151.166946][ T1094] usb 3-1: Manufacturer: syz [ 151.171547][ T1094] usb 3-1: SerialNumber: syz [ 151.183414][ T15] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 151.193678][ T6721] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 151.202044][ T1097] usb 5-1: Can't get UAC3 power state for id 10 [ 151.240726][ T1097] usb 5-1: 0:2 : does not exist [ 151.245788][ T1097] usb 5-1: 0:3 : does not exist [ 151.250704][ T1097] usb 5-1: 0:4 : does not exist [ 151.255633][ T1097] usb 5-1: 0:5 : does not exist [ 151.261663][ T1097] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 151.268141][ T1097] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 151.278941][ T1097] usb 5-1: USB disconnect, device number 54 [ 151.413086][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 151.425681][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 151.429503][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 151.516871][ T1094] usbhid 3-1:1.0: can't add hid device: -22 [ 151.523206][ T1094] usbhid: probe of 3-1:1.0 failed with error -22 [ 151.532193][ T1094] usb 3-1: USB disconnect, device number 46 [ 151.538277][ T1099] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 151.596771][ T6793] FAT-fs (loop4): Unrecognized mount option "dont_hash" or missing value [ 151.640774][ T15] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 151.651703][ T15] usb 7-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.665413][ T15] usb 7-1: config 1 interface 0 has no altsetting 0 [ 151.697690][ T1085] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 151.783562][ T1099] usb 6-1: Using ep0 maxpacket: 8 [ 151.935964][ T1099] usb 6-1: unable to get BOS descriptor or descriptor too short [ 151.955536][ T6816] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 151.962944][ T6816] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 151.973909][ T1097] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 152.012026][ T1099] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 152.080140][ T6825] erofs: dax options not supported [ 152.126529][ T1085] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.174264][ T1099] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 152.183519][ T1099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.191526][ T1099] usb 6-1: Product: syz [ 152.195731][ T1099] usb 6-1: Manufacturer: syz [ 152.200338][ T1099] usb 6-1: SerialNumber: syz [ 152.221664][ T6781] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.221702][ T1085] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.239007][ T1085] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.260221][ T15] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 152.269729][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.278200][ T15] usb 7-1: Manufacturer: ࠖ [ 152.298593][ T6759] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 152.326482][ T1097] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.336648][ T1097] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.412557][ T1085] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 152.421695][ T1085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.429658][ T1085] usb 1-1: Product: syz [ 152.433993][ T1085] usb 1-1: Manufacturer: syz [ 152.438691][ T1085] usb 1-1: SerialNumber: syz [ 152.488796][ T1097] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.497953][ T1097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.506043][ T1097] usb 5-1: Product: syz [ 152.512280][ T1097] usb 5-1: Manufacturer: syz [ 152.516974][ T1097] usb 5-1: SerialNumber: syz [ 152.536451][ T1094] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 152.575444][ T15] usb 7-1: USB disconnect, device number 52 [ 152.587105][ T1099] usb 6-1: USB disconnect, device number 52 [ 152.708507][ T1085] usb 1-1: selecting invalid altsetting 1 [ 152.812726][ T1097] usb 5-1: 0:2 : does not exist [ 152.817830][ T1097] usb 5-1: unit 9 not found! [ 152.879315][ T1094] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.887698][ T1094] usb 3-1: config 179 has no interface number 0 [ 152.894230][ T1094] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF is Bulk; changing to Interrupt [ 152.904426][ T1094] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 152.914610][ T1094] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 152.926544][ T1094] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 152.938555][ T1094] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.952138][ T1094] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.961632][ T1094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.981168][ T6840] incfs: Options parsing error. -22 [ 152.986490][ T6840] incfs: mount failed -22 [ 152.986499][ T6832] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 153.003813][ T1094] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 153.014473][ T1097] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 153.024038][ T1085] usb 1-1: unit 3 not found! [ 153.025344][ T1097] usb 5-1: USB disconnect, device number 55 [ 153.041464][ T1094] xpad: probe of 3-1:179.65 failed with error -5 [ 153.060555][ T1085] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 153.070582][ T6844] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.077668][ T1085] usb 1-1: USB disconnect, device number 56 [ 153.088044][ T6844] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.114927][ T6851] tmpfs: Unknown parameter 'noinode32' [ 153.184134][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 153.206604][ T6853] EXT4-fs (loop5): 1 orphan inode deleted [ 153.222428][ T1399] udevd[1399]: incorrect erofs checksum on /dev/loop0p5 [ 153.225764][ T6853] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue [ 153.239325][ T1117] usb 3-1: USB disconnect, device number 47 [ 153.259056][ T284] udevd[284]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 153.299324][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 153.321778][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 153.335970][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 153.345836][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p5 [ 153.431827][ T15] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 153.575108][ T1097] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 153.575117][ T801] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 153.590420][ T1099] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 153.775188][ T15] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.785810][ T15] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.803797][ T801] usb 6-1: Using ep0 maxpacket: 8 [ 153.842222][ T1099] usb 1-1: Using ep0 maxpacket: 32 [ 153.874798][ T6891] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 153.883298][ T6891] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.3280: corrupted in-inode xattr [ 153.895568][ T6891] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3280: couldn't read orphan inode 15 (err -117) [ 153.907818][ T6891] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000008000,errors=continue,,errors=continue [ 153.946873][ T15] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.956269][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.964353][ T15] usb 7-1: Product: syz [ 153.968962][ T15] usb 7-1: Manufacturer: syz [ 153.973781][ T15] usb 7-1: SerialNumber: syz [ 154.051590][ T1099] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.070593][ T801] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 154.084381][ T801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.092528][ T801] usb 6-1: Product: syz [ 154.096734][ T801] usb 6-1: Manufacturer: syz [ 154.101394][ T801] usb 6-1: SerialNumber: syz [ 154.137521][ T6916] loop2: p1[EZD] p3 p4 [ 154.142254][ T6916] loop2: p3 start 150994944 is beyond EOD, truncated [ 154.149381][ T6916] loop2: p4 start 33554434 is beyond EOD, truncated [ 154.149616][ T1099] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 154.165834][ T1099] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 154.175879][ T1099] usb 1-1: config 1 interface 0 has no altsetting 0 [ 154.194613][ T1097] usb 5-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 154.203848][ T1097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.211856][ T1097] usb 5-1: Product: syz [ 154.216254][ T1097] usb 5-1: Manufacturer: syz [ 154.220837][ T1097] usb 5-1: SerialNumber: syz [ 154.280098][ T15] usb 7-1: 0:2 : does not exist [ 154.285060][ T15] usb 7-1: unit 9 not found! [ 154.299582][ T15] usb 7-1: USB disconnect, device number 53 [ 154.337237][ T1099] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.345099][ T6929] tmpfs: Unknown parameter 'fscontext18446744073709551615' [ 154.346915][ T1099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.362011][ T1099] usb 1-1: Product: syz [ 154.366525][ T1099] usb 1-1: Manufacturer: syz [ 154.371230][ T1099] usb 1-1: SerialNumber: syz [ 154.404225][ T6873] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 154.415298][ T6873] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 154.461405][ T801] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x600, type = 0 [ 154.471698][ T801] usb 6-1: unit 0 not found! [ 154.478896][ T801] usb 6-1: USB disconnect, device number 53 [ 154.575503][ T1097] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 154.594464][ T1097] usb 5-1: unit 4 not found! [ 154.635771][ T1097] usb 5-1: USB disconnect, device number 56 [ 154.690679][ T1099] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8 [ 154.703806][ T1099] usb 1-1: USB disconnect, device number 57 [ 154.708722][ T955] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 154.710940][ T1099] usblp0: removed [ 154.915792][ T6999] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 154.930408][ T7001] EXT4-fs (loop5): can't read group descriptor 0 [ 155.067216][ T7025] fuse: blksize only supported for fuseblk [ 155.109023][ T955] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 155.125649][ T7038] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 155.143241][ T24] audit: type=1400 audit(2000066855.412:286): avc: denied { relabelto } for pid=7037 comm="syz.5.3351" name="512" dev="tmpfs" ino=2638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 155.203218][ T24] audit: type=1400 audit(2000066855.412:287): avc: denied { associate } for pid=7037 comm="syz.5.3351" name="512" dev="tmpfs" ino=2638 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_run_t:s0" [ 155.230716][ T24] audit: type=1400 audit(2000066855.412:288): avc: denied { write } for pid=1108 comm="syz-executor" name="512" dev="tmpfs" ino=2638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 155.257104][ T24] audit: type=1400 audit(2000066855.412:289): avc: denied { remove_name } for pid=1108 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 155.286543][ T7046] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 155.298314][ T24] audit: type=1400 audit(2000066855.412:290): avc: denied { rmdir } for pid=1108 comm="syz-executor" name="512" dev="tmpfs" ino=2638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 155.302303][ T7046] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0002] [ 155.334396][ T7046] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 155.342077][ T7046] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,debug,abort,barrier=0x0000000000000001,nobarrier,,errors=continue [ 155.366709][ T955] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 155.378506][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.378613][ T7040] EXT4-fs warning (device loop6): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 155.402591][ T7048] F2FS-fs (loop4): Invalid uid value -1 [ 155.409919][ T955] usb 3-1: Product: syz [ 155.414993][ T7040] EXT4-fs (loop6): mount failed [ 155.423833][ T955] usb 3-1: Manufacturer: syz [ 155.429078][ T955] usb 3-1: SerialNumber: syz [ 155.452147][ T6949] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.684582][ T955] usb 3-1: USB disconnect, device number 48 [ 155.776986][ T7063] loop5: p1 p3 < > [ 155.951058][ T7098] SELinux: duplicate or incompatible mount options [ 155.964451][ T7103] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 156.024378][ T7107] SELinux: duplicate or incompatible mount options [ 156.190971][ T7126] erofs: (device loop5): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 10 [ 156.234334][ T7130] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=b842c018, mo2=0000] [ 156.242527][ T7130] System zones: 0-2, 18-18, 34-34 [ 156.253028][ T7130] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3390: bg 0: block 473: padding at end of block bitmap is not set [ 156.267627][ T7130] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 156.277049][ T7130] EXT4-fs (loop6): 1 orphan inode deleted [ 156.285474][ T7130] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,,errors=continue [ 156.295946][ T7130] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.308637][ T24] audit: type=1400 audit(2000066856.630:291): avc: denied { module_load } for pid=7147 comm="syz.0.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 156.328421][ T7149] Module has invalid ELF structures [ 156.414088][ T7158] IPv6: addrconf: prefix option has invalid lifetime [ 156.472459][ T7159] EXT4-fs (loop4): unable to read superblock [ 156.583239][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 156.649809][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0p4 [ 156.668163][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p5 [ 156.681416][ T1097] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 156.691568][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 156.735565][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p5 [ 156.743595][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 156.770132][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 156.790817][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 156.793320][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 156.813363][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 156.853509][ T1096] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 157.091312][ T1097] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.139477][ T7241] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 157.147437][ T7241] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 157.164224][ T7241] F2FS-fs (loop5): invalid crc value [ 157.170897][ T7241] F2FS-fs (loop5): Found nat_bits in checkpoint [ 157.176939][ T1093] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 157.195846][ T7241] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 157.202952][ T7241] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 157.210635][ T1096] usb 5-1: not running at top speed; connect to a high speed hub [ 157.224676][ T1097] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 157.233988][ T1097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.242258][ T1097] usb 3-1: SerialNumber: syz [ 157.282184][ T1097] cdc_ether 3-1:1.0: skipping garbage [ 157.287594][ T1097] usb 3-1: bad CDC descriptors [ 157.301045][ T955] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 157.310518][ T1096] usb 5-1: config 1 has an invalid interface number: 224 but max is 1 [ 157.319451][ T1096] usb 5-1: config 1 has an invalid interface number: 14 but max is 1 [ 157.334306][ T1096] usb 5-1: config 1 has no interface number 0 [ 157.344401][ T1096] usb 5-1: config 1 has no interface number 1 [ 157.354365][ T1096] usb 5-1: config 1 interface 224 altsetting 14 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 157.369839][ T1096] usb 5-1: config 1 interface 224 has no altsetting 0 [ 157.376660][ T1096] usb 5-1: config 1 interface 14 has no altsetting 0 [ 157.434630][ T1093] usb 7-1: Using ep0 maxpacket: 8 [ 157.476138][ T801] usb 3-1: USB disconnect, device number 49 [ 157.485989][ T7274] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 25144) [ 157.577039][ T1096] usb 5-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=39.3c [ 157.586157][ T1096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.594357][ T1096] usb 5-1: Product: syz [ 157.598564][ T1096] usb 5-1: Manufacturer: syz [ 157.603140][ T1096] usb 5-1: SerialNumber: syz [ 157.615439][ T1093] usb 7-1: unable to get BOS descriptor or descriptor too short [ 157.644191][ T955] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 157.653284][ T955] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 157.663060][ T955] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 157.673158][ T955] usb 1-1: config 1 interface 0 has no altsetting 0 [ 157.680037][ T955] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 157.689106][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.730245][ T955] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 157.873010][ T1093] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 157.882263][ T1093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.890406][ T1093] usb 7-1: Product: syz [ 157.894692][ T1093] usb 7-1: Manufacturer: syz [ 157.899411][ T1093] usb 7-1: SerialNumber: syz [ 157.949658][ T1096] usb 5-1: USB disconnect, device number 57 [ 157.958987][ T955] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 157.977246][ T1097] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 157.979816][ T955] usb 1-1: USB disconnect, device number 58 [ 158.140245][ T7322] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 158.244082][ T1093] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 158.263284][ T1093] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 158.285994][ T1093] usb 7-1: USB disconnect, device number 54 [ 158.330750][ T7335] cgroup: Name too long [ 158.368096][ T1097] usb 6-1: not running at top speed; connect to a high speed hub [ 158.452865][ T7337] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 158.510934][ T955] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 158.596673][ T1097] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 158.616246][ T1097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.640433][ T1097] usb 6-1: Product: syz [ 158.649741][ T1097] usb 6-1: Manufacturer: syz [ 158.663764][ T1097] usb 6-1: SerialNumber: syz [ 158.751091][ T7374] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 158.847018][ T7381] FAT-fs (loop6): bogus number of reserved sectors [ 158.853884][ T7381] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 158.863701][ T7381] FAT-fs (loop6): Can't find a valid FAT filesystem [ 158.920978][ T955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.930789][ T1095] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 158.938442][ T1093] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 158.957801][ T7388] cgroup2: Unexpected value for 'nsdelegate' [ 158.968365][ T955] usb 3-1: not running at top speed; connect to a high speed hub [ 159.006569][ T1097] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.035028][ T1097] usb 6-1: unit 2 not found! [ 159.039655][ T1097] usb 6-1: unit 6 not found! [ 159.044559][ T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 159.051634][ T1097] usb 6-1: USB disconnect, device number 54 [ 159.057372][ T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 159.071490][ T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 159.082588][ T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 159.092212][ T955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 159.178209][ T1093] usb 5-1: Using ep0 maxpacket: 16 [ 159.183422][ T1095] usb 1-1: Using ep0 maxpacket: 16 [ 159.244682][ T15] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 159.320846][ T1095] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 159.340354][ T955] usb 3-1: string descriptor 0 read error: -22 [ 159.346592][ T955] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 159.356105][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.364692][ T955] usb 3-1: config 0 descriptor?? [ 159.368598][ T1093] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.387697][ T7331] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 159.445057][ T1093] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 159.453364][ T1093] usb 5-1: config 0 has no interface number 0 [ 159.459513][ T1093] usb 5-1: config 0 interface 255 has no altsetting 0 [ 159.483090][ T15] usb 7-1: Using ep0 maxpacket: 32 [ 159.483377][ T1095] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.497408][ T1095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.505545][ T1095] usb 1-1: Product: syz [ 159.509697][ T1095] usb 1-1: Manufacturer: syz [ 159.514309][ T1095] usb 1-1: SerialNumber: syz [ 159.530928][ T7368] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 159.616601][ T1093] usb 5-1: New USB device found, idVendor=0421, idProduct=00b0, bcdDevice=68.95 [ 159.622331][ T955] usb 3-1: USB disconnect, device number 50 [ 159.625656][ T1093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.625665][ T1093] usb 5-1: Product: syz [ 159.625672][ T1093] usb 5-1: Manufacturer: syz [ 159.625680][ T1093] usb 5-1: SerialNumber: syz [ 159.631425][ T1093] usb 5-1: config 0 descriptor?? [ 159.772067][ T7418] EXT4-fs (loop5): Ignoring removed orlov option [ 159.778576][ T7418] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 159.778978][ T1095] usb 1-1: bad CDC descriptors [ 159.788077][ T15] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 159.796143][ T1095] usb 1-1: USB disconnect, device number 59 [ 159.804653][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.815175][ T15] usb 7-1: Product: syz [ 159.819388][ T15] usb 7-1: Manufacturer: syz [ 159.823966][ T15] usb 7-1: SerialNumber: syz [ 159.959586][ T1093] usb 5-1: bad CDC descriptors [ 159.964566][ T1093] cdc_acm 5-1:0.255: Zero length descriptor references [ 159.971732][ T1093] cdc_acm: probe of 5-1:0.255 failed with error -22 [ 159.979393][ T1093] usb 5-1: USB disconnect, device number 58 [ 160.126923][ T7425] incfs: Error accessing: ./file0. [ 160.132367][ T7425] incfs: mount failed -2 [ 160.140735][ T955] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 160.188632][ T15] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 160.198241][ T7431] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #11: block 327694: comm syz.2.3532: lblock 0 mapped to illegal pblock 327694 (length 1) [ 160.213655][ T7431] EXT4-fs (loop2): 1 orphan inode deleted [ 160.219648][ T7431] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,debug_want_extra_isize=0x000000000000005c,nouid32,noinit_itable,acl,bsdgroups,,errors=continue [ 160.251328][ T15] usb 7-1: USB disconnect, device number 55 [ 160.386526][ T7449] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 160.396032][ T955] usb 6-1: Using ep0 maxpacket: 32 [ 160.424765][ T7449] overlayfs: missing 'lowerdir' [ 160.480887][ T7456] EXT4-fs (loop2): Ignoring removed bh option [ 160.513965][ T7456] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 2: comm syz.2.3543: lblock 2 mapped to illegal pblock 2 (length 1) [ 160.531757][ T955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.541744][ T955] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 160.551533][ T955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.561153][ T7456] EXT4-fs (loop2): Remounting filesystem read-only [ 160.579612][ T955] usb 6-1: config 0 descriptor?? [ 160.584064][ T7456] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 160.610478][ T7456] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz.2.3543: Invalid inode table block 1 in block_group 0 [ 160.629198][ T955] hub 6-1:0.0: bad descriptor, ignoring hub [ 160.635163][ T955] hub: probe of 6-1:0.0 failed with error -5 [ 160.646037][ T7456] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 160.655817][ T955] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 160.673221][ T7456] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #3: comm syz.2.3543: mark_inode_dirty error [ 160.689330][ T7456] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 160.703584][ T7456] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.3543: Failed to acquire dquot type 0 [ 160.722089][ T7456] EXT4-fs (loop2): 1 orphan inode deleted [ 160.734081][ T7456] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,errors=remount-ro, [ 160.798838][ T7484] exfat: Bad value for 'time_offset' [ 160.849352][ T1110] EXT4-fs error (device loop2): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 160.862873][ T1110] EXT4-fs (loop2): Remounting filesystem read-only [ 160.869757][ T1110] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 160.903453][ T1110] EXT4-fs error (device loop2): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 160.933058][ T955] usb 6-1: USB disconnect, device number 55 [ 161.207764][ T801] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 161.342080][ T7514] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3) [ 161.349852][ T7514] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.372163][ T7512] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 161.380073][ T7512] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 161.388289][ T7512] F2FS-fs (loop2): fault_type options not supported [ 161.395102][ T7512] F2FS-fs (loop2): old and new quota format mixing [ 161.455522][ T801] usb 7-1: Using ep0 maxpacket: 32 [ 161.508281][ T24] audit: type=1400 audit(2000066862.093:292): avc: denied { create } for pid=7531 comm="syz.5.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 161.513207][ T955] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 161.589408][ T801] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.600831][ T801] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 161.614641][ T801] usb 7-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.630113][ T801] usb 7-1: config 0 interface 0 has no altsetting 1 [ 161.761609][ T7545] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 161.770212][ T955] usb 1-1: Using ep0 maxpacket: 32 [ 161.777002][ T7545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 161.785968][ T7545] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.792664][ T801] usb 7-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 161.802000][ T7545] EXT4-fs error (device loop2): ext4_clear_blocks:880: inode #11: comm syz.2.3584: attempt to clear invalid blocks 1024 len 1 [ 161.815349][ T801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.815728][ T7545] EXT4-fs (loop2): Remounting filesystem read-only [ 161.823662][ T801] usb 7-1: Product: syz [ 161.830651][ T7545] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3584: bg 0: block 361: padding at end of block bitmap is not set [ 161.834843][ T801] usb 7-1: Manufacturer: syz [ 161.849186][ T1093] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 161.861237][ T801] usb 7-1: SerialNumber: syz [ 161.861680][ T7545] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 161.875755][ T801] usb 7-1: config 0 descriptor?? [ 161.882813][ T7545] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.3584: invalid indirect mapped block 1811939328 (level 0) [ 161.896948][ T7545] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.3584: invalid indirect mapped block 2185560079 (level 1) [ 161.911173][ T7545] EXT4-fs (loop2): 1 truncate cleaned up [ 161.916908][ T7545] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort [ 161.929358][ T955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.967854][ T7556] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 161.976565][ T7556] EXT4-fs (loop4): orphan cleanup on readonly fs [ 161.983309][ T7556] Quota error (device loop4): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 161.994170][ T7556] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.009129][ T7556] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 162.009226][ T955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.016289][ T7556] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.3588: bg 0: block 15: invalid block bitmap [ 162.026234][ T955] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 162.039062][ T7556] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 162.054318][ T7560] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 162.073260][ T7556] EXT4-fs (loop4): 1 truncate cleaned up [ 162.079302][ T7556] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 162.080774][ T7560] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b, [ 162.118401][ T801] usb 7-1: USB disconnect, device number 56 [ 162.141810][ T1093] usb 6-1: Using ep0 maxpacket: 32 [ 162.218427][ T955] usb 1-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 162.237362][ T955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.254314][ T955] usb 1-1: Product: syz [ 162.262447][ T955] usb 1-1: Manufacturer: syz [ 162.271961][ T955] usb 1-1: SerialNumber: syz [ 162.313499][ T1093] usb 6-1: unable to get BOS descriptor or descriptor too short [ 162.399420][ T1093] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 162.561350][ T1095] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 162.569086][ T1093] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.578167][ T1093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.586295][ T1093] usb 6-1: Product: syz [ 162.590610][ T1093] usb 6-1: Manufacturer: ꡼Ơ캳腑꓍慄鑐ﱌ䌡뚾颶軻⠔노񎪺 [ 162.593535][ T955] usb 1-1: USB disconnect, device number 60 [ 162.599734][ T1097] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 162.613463][ T1093] usb 6-1: SerialNumber: syz [ 162.694998][ T7605] binder: Unknown parameter 'context' [ 162.799536][ T1095] usb 5-1: Using ep0 maxpacket: 32 [ 162.856564][ T1097] usb 3-1: Using ep0 maxpacket: 16 [ 162.914251][ T1095] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1023 [ 162.932959][ T1093] cdc_ncm 6-1:1.0: bind() failure [ 162.938598][ T1093] cdc_ncm 6-1:1.1: bind() failure [ 162.944918][ T1093] usb 6-1: USB disconnect, device number 56 [ 162.980829][ T1097] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 162.989086][ T1097] usb 3-1: config 1 has no interface number 0 [ 162.995427][ T1097] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 163.005484][ T1097] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 163.009015][ T1119] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 163.015494][ T1097] usb 3-1: config 1 interface 105 has no altsetting 0 [ 163.039605][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 163.053051][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 163.066175][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 163.076059][ T1095] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 163.085188][ T1095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.096817][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 163.113315][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 163.113318][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 163.117244][ T1095] usb 5-1: Product: syz [ 163.134312][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 163.135848][ T1095] usb 5-1: Manufacturer: syz [ 163.145993][ T1095] usb 5-1: SerialNumber: syz [ 163.154646][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 163.165691][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 163.175448][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 163.180941][ T1097] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 163.182856][ T7587] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 163.199975][ T1097] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 163.213751][ T1097] usb 3-1: Product: syz [ 163.222823][ T1097] usb 3-1: Manufacturer: syz [ 163.227576][ T1097] usb 3-1: SerialNumber: syz [ 163.247732][ T7597] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 163.266701][ T7597] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 163.403453][ T7655] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 163.466899][ T1119] usb 7-1: unable to get BOS descriptor or descriptor too short [ 163.514232][ T1097] aqc111: probe of 3-1:1.105 failed with error -71 [ 163.526854][ T1097] usb 3-1: USB disconnect, device number 51 [ 163.552326][ T1119] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.563486][ T1119] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1931, setting to 1024 [ 163.581047][ T1095] usb 5-1: MIDIStreaming interface descriptor not found [ 163.593974][ T1095] usb 5-1: USB disconnect, device number 59 [ 163.609494][ T7680] IPv6: addrconf: prefix option has invalid lifetime [ 163.762316][ T1119] usb 7-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 163.777866][ T1119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.794053][ T1119] usb 7-1: Product: syz [ 163.802731][ T1119] usb 7-1: Manufacturer: syz [ 163.807451][ T1119] usb 7-1: SerialNumber: syz [ 163.885959][ T955] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 164.192995][ T1119] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 164.220261][ T1119] usb 7-1: USB disconnect, device number 57 [ 164.229244][ T15] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 164.249660][ T955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.270607][ T955] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 164.289621][ T955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.308283][ T955] usb 6-1: config 0 descriptor?? [ 164.467490][ T15] usb 5-1: Using ep0 maxpacket: 8 [ 164.619810][ T15] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.629170][ T955] usbhid 6-1:0.0: can't add hid device: -71 [ 164.635180][ T955] usbhid: probe of 6-1:0.0 failed with error -71 [ 164.668541][ T955] usb 6-1: USB disconnect, device number 57 [ 164.734026][ T15] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 164.826178][ T7730] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 164.835309][ T7730] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 164.848174][ T7730] F2FS-fs (loop6): invalid crc value [ 164.862831][ T7730] F2FS-fs (loop6): Found nat_bits in checkpoint [ 164.952217][ T7730] F2FS-fs (loop6): Start checkpoint disabled! [ 164.961359][ T7730] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 164.968710][ T7730] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 164.981875][ T15] usb 5-1: string descriptor 0 read error: -22 [ 164.994068][ T15] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 165.020826][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.068359][ T15] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 165.175333][ T7778] Alternate GPT is invalid, using primary GPT. [ 165.181673][ T7778] loop6: p2 p3 p7 [ 165.201388][ T1095] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 165.267981][ T15] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 165.268009][ T7781] overlayfs: missing 'lowerdir' [ 165.298412][ T15] usb 5-1: USB disconnect, device number 60 [ 165.306015][ T955] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 165.316749][ T7783] SELinux: security_context_str_to_sid(root) failed for (dev loop6, type msdos) errno=-22 [ 165.334882][ T1119] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 165.469395][ T7794] EXT4-fs error (device loop6): ext4_ext_check_inode:500: inode #16: comm syz.6.3701: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 1537, max 4(4), depth 0(0) [ 165.487989][ T7794] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.3701: couldn't read orphan inode 16 (err -117) [ 165.500322][ T7794] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 165.509679][ T7794] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.535097][ T955] usb 1-1: Using ep0 maxpacket: 8 [ 165.549298][ T7799] blk_update_request: I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 165.560698][ T7799] EXT4-fs (loop6): unable to read superblock [ 165.563199][ T1119] usb 6-1: Using ep0 maxpacket: 32 [ 165.566813][ T1095] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.582389][ T1095] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 165.625659][ T24] audit: type=1400 audit(2000066866.405:293): avc: denied { create } for pid=7804 comm="syz.6.3705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 165.677559][ T1119] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.688056][ T1119] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.697296][ T1119] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 165.735571][ T7817] EXT4-fs warning (device loop6): ext4_fill_super:4104: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 165.748832][ T7817] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 165.772943][ T1095] usb 3-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice= 0.40 [ 165.782090][ T1095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.790351][ T1095] usb 3-1: Product: syz [ 165.794532][ T1095] usb 3-1: Manufacturer: syz [ 165.799109][ T1095] usb 3-1: SerialNumber: syz [ 165.811012][ T955] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 165.820629][ T955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.828608][ T955] usb 1-1: Product: syz [ 165.832796][ T955] usb 1-1: Manufacturer: syz [ 165.837482][ T955] usb 1-1: SerialNumber: syz [ 165.859148][ T1119] usb 6-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 165.868309][ T1119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.876842][ T1119] usb 6-1: Product: syz [ 165.881725][ T1119] usb 6-1: Manufacturer: syz [ 165.886592][ T1119] usb 6-1: SerialNumber: syz [ 166.016285][ T7830] F2FS-fs (loop6): Invalid log_blocksize (64), supports only 12 [ 166.024217][ T7830] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 166.032637][ T801] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 166.107116][ T1095] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 166.115162][ T1095] usb 3-1: USB disconnect, device number 52 [ 166.182560][ T955] usb 1-1: unit 0 not found! [ 166.190328][ T955] usb 1-1: USB disconnect, device number 61 [ 166.202292][ T7837] EXT4-fs (loop6): Ignoring removed nobh option [ 166.209850][ T7837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 166.218716][ T7837] EXT4-fs (loop6): orphan cleanup on readonly fs [ 166.225691][ T7837] EXT4-fs warning (device loop6): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 166.240588][ T7837] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 166.247373][ T7837] EXT4-fs error (device loop6): ext4_ext_check_inode:500: inode #13: comm syz.6.3720: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 166.259267][ T1119] usb 6-1: 0:10 : does not exist [ 166.270635][ T1119] usb 6-1: 0:36 : does not exist [ 166.272516][ T7837] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.3720: couldn't read orphan inode 13 (err -117) [ 166.286344][ T1119] usb 6-1: USB disconnect, device number 58 [ 166.293781][ T7837] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,noblock_validity,nobh,grpquota,debug,journal_dev=0x0000000000000001,user_xattr,inode_readahead_blks=0x0000000000002000,,errors=continue [ 166.383054][ T801] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 166.390630][ T801] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.554254][ T801] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 166.563838][ T801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.572219][ T801] usb 5-1: Product: syz [ 166.572370][ T7843] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.576678][ T801] usb 5-1: Manufacturer: syz [ 166.587871][ T801] usb 5-1: SerialNumber: syz [ 166.609560][ T7843] EXT4-fs (loop2): blocks per group (524288) and clusters per group (2048) inconsistent [ 166.620751][ T15] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 166.632178][ T801] rtl8150 5-1:1.0: couldn't find required endpoints [ 166.638963][ T801] rtl8150: probe of 5-1:1.0 failed with error -5 [ 166.746544][ T7856] EXT4-fs (loop2): Ignoring removed oldalloc option [ 166.753247][ T7856] EXT4-fs (loop2): Ignoring removed oldalloc option [ 166.766714][ T7856] EXT4-fs (loop2): Ignoring removed oldalloc option [ 166.773444][ T7856] EXT4-fs (loop2): filesystem is read-only [ 166.779948][ T7856] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 166.791690][ T7856] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=9816c018, mo2=0002] [ 166.800026][ T7856] EXT4-fs (loop2): filesystem is read-only [ 166.805938][ T7856] EXT4-fs (loop2): orphan cleanup on readonly fs [ 166.812562][ T7856] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3729: bg 0: block 64: padding at end of block bitmap is not set [ 166.827297][ T7856] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 166.836454][ T7856] EXT4-fs (loop2): 1 orphan inode deleted [ 166.837619][ T1095] usb 5-1: USB disconnect, device number 61 [ 166.842284][ T7856] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,data_err=abort,debug,stripe=0x0000000000000002,stripe=0x0000000000000009,noblock_validity,grpquota,journal_ioprio=0x0000000000000002,dioread_lock,oldalloc,oldalloc,max_dir_size_kb=0x0000000000000008,,errors=continue [ 166.964467][ T801] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 166.975415][ T7870] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 166.976273][ T7870] loop2: p3 start 986112 is beyond EOD, [ 167.059738][ T15] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 167.065082][ T7870] truncated [ 167.070144][ T15] usb 7-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.101065][ T15] usb 7-1: config 1 interface 0 has no altsetting 0 [ 167.126252][ T1093] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 167.212208][ T801] usb 1-1: Using ep0 maxpacket: 8 [ 167.326523][ T801] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 167.335124][ T801] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 167.343984][ T15] usb 7-1: string descriptor 0 read error: -22 [ 167.350509][ T801] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 167.366923][ T15] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.40 [ 167.383406][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.383412][ T1093] usb 6-1: Using ep0 maxpacket: 16 [ 167.403020][ T801] usb 1-1: config 3 has no interface number 0 [ 167.409224][ T801] usb 1-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 167.424251][ T801] usb 1-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 167.436780][ T801] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.450969][ T7841] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.454138][ T801] usb 1-1: config 3 interface 45 has no altsetting 0 [ 167.507545][ T1093] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.516982][ T1093] usb 6-1: config 1 has no interface number 0 [ 167.518273][ T7879] EXT4-fs (loop4): #blocks per group too big: 24576 [ 167.537438][ T1093] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 167.612175][ T801] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 167.629604][ T801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.655226][ T801] usb 1-1: Product: syz [ 167.672610][ T801] usb 1-1: Manufacturer: syz [ 167.683810][ T801] usb 1-1: SerialNumber: syz [ 167.726916][ T1093] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 167.736046][ T1095] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 167.744513][ T1093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.753869][ T1093] usb 6-1: Product: syz [ 167.756050][ T15] usbhid 7-1:1.0: can't add hid device: -71 [ 167.759903][ T1093] usb 6-1: Manufacturer: syz [ 167.769296][ T1093] usb 6-1: SerialNumber: syz [ 167.770007][ T15] usbhid: probe of 7-1:1.0 failed with error -71 [ 167.783926][ T15] usb 7-1: USB disconnect, device number 58 [ 167.974600][ T955] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 168.099516][ T801] usb 1-1: USB disconnect, device number 62 [ 168.165016][ T1095] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.175642][ T1093] usb 6-1: 1:0 : does not exist [ 168.180512][ T1093] usb 6-1: BAAD SPEAKERPHONE c_chmask mismatch [ 168.187287][ T1095] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.196439][ T1093] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 168.197221][ T7890] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 168.207207][ T1093] usb 6-1: USB disconnect, device number 59 [ 168.218731][ T7890] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 168.228760][ T7890] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 168.239214][ T7890] EXT4-fs (loop6): journal inode is deleted [ 168.355916][ T955] usb 5-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 168.364809][ T955] usb 5-1: config 24 has an invalid descriptor of length 171, skipping remainder of the config [ 168.375479][ T955] usb 5-1: config 24 has 1 interface, different from the descriptor's value: 158 [ 168.404903][ T7897] FAT-fs (loop6): bogus logical sector size 3 [ 168.411156][ T7897] FAT-fs (loop6): Can't find a valid FAT filesystem [ 168.431673][ T1095] usb 3-1: string descriptor 0 read error: -22 [ 168.437996][ T1095] usb 3-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 168.455297][ T1095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.463612][ T7902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.465089][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0 [ 168.504815][ T1399] udevd[1399]: incorrect erofs checksum on /dev/loop0p5 [ 168.512714][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p4 [ 168.527915][ T1095] usb 3-1: 0:1 : does not exist [ 168.533127][ T1095] usb 3-1: unit 5 not found! [ 168.544838][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 168.545282][ T1095] usb 3-1: unit 34 not found! [ 168.556570][ T1095] usb 3-1: unit 9 not found! [ 168.574855][ T955] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 168.575849][ T1399] udevd[1399]: incorrect erofs checksum on /dev/loop0p5 [ 168.594185][ T955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.597483][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p4 [ 168.609549][ T955] usb 5-1: Product: syz [ 168.617551][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0 [ 168.622505][ T955] usb 5-1: Manufacturer: syz [ 168.634680][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 168.636075][ T955] usb 5-1: SerialNumber: syz [ 168.646828][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p5 [ 168.667518][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 168.756028][ T801] usb 3-1: USB disconnect, device number 53 [ 168.814550][ T1085] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 168.822716][ T24] audit: type=1400 audit(2000066869.762:294): avc: denied { write } for pid=7932 comm="syz.0.3763" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.040395][ T955] usb 5-1: 0:1 : does not exist [ 169.050893][ T955] usb 5-1: unit 80 not found! [ 169.062833][ T955] usb 5-1: USB disconnect, device number 62 [ 169.108731][ T1085] usb 7-1: Using ep0 maxpacket: 8 [ 169.156474][ T15] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 169.242226][ T1085] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 169.272859][ T1085] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 169.285324][ T1085] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 169.307085][ T1085] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 169.317161][ T1085] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 169.403861][ T15] usb 6-1: Using ep0 maxpacket: 16 [ 169.499486][ T1093] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 169.566151][ T1085] usb 7-1: language id specifier not provided by device, defaulting to English [ 169.594895][ T801] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 169.671033][ T15] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 169.680148][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.688482][ T15] usb 6-1: Product: syz [ 169.693225][ T15] usb 6-1: Manufacturer: syz [ 169.698002][ T15] usb 6-1: SerialNumber: syz [ 169.709566][ T15] usb 6-1: config 0 descriptor?? [ 169.737490][ T1093] usb 1-1: Using ep0 maxpacket: 32 [ 169.747077][ T955] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 169.823021][ T801] usb 3-1: Using ep0 maxpacket: 32 [ 169.909287][ T1093] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.939399][ T15] usb 6-1: USB disconnect, device number 60 [ 169.975679][ T801] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.983597][ T955] usb 5-1: Using ep0 maxpacket: 8 [ 170.023436][ T1093] usb 1-1: config 251 has an invalid interface number: 87 but max is 2 [ 170.031795][ T1093] usb 1-1: config 251 has an invalid interface number: 99 but max is 2 [ 170.040085][ T1093] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 170.050394][ T1093] usb 1-1: config 251 has 2 interfaces, different from the descriptor's value: 3 [ 170.051887][ T801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.059919][ T1093] usb 1-1: config 251 has no interface number 0 [ 170.070381][ T801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.076304][ T1093] usb 1-1: config 251 has no interface number 1 [ 170.085895][ T1085] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 170.092082][ T1093] usb 1-1: config 251 interface 87 altsetting 14 has an invalid endpoint with address 0x0, skipping [ 170.101419][ T1085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 170.111845][ T1093] usb 1-1: config 251 interface 87 altsetting 14 has an invalid endpoint with address 0x0, skipping [ 170.120091][ T955] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.130882][ T1093] usb 1-1: config 251 interface 87 altsetting 14 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 170.141302][ T955] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 170.152725][ T1093] usb 1-1: config 251 interface 87 has no altsetting 0 [ 170.161717][ T1085] usb 7-1: SerialNumber: syz [ 170.173296][ T955] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.186386][ T1085] usb 7-1: config 0 descriptor?? [ 170.223739][ T1085] hub 7-1:0.0: bad descriptor, ignoring hub [ 170.229927][ T1085] hub: probe of 7-1:0.0 failed with error -5 [ 170.309647][ T801] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 170.318806][ T955] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 170.327915][ T955] usb 5-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 170.335919][ T801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.344403][ T955] usb 5-1: Product: syz [ 170.347415][ T1093] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=9d.e7 [ 170.349122][ T955] usb 5-1: SerialNumber: syz [ 170.359031][ T1093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.363566][ T801] usb 3-1: Product: syz [ 170.371958][ T1093] usb 1-1: Product: syz [ 170.375808][ T801] usb 3-1: Manufacturer: syz [ 170.380153][ T1093] usb 1-1: Manufacturer: syz [ 170.384887][ T801] usb 3-1: SerialNumber: syz [ 170.389588][ T1093] usb 1-1: SerialNumber: syz [ 170.414259][ T7965] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.438456][ T24] audit: type=1326 audit(2000066871.462:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.5.3790" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd833d2b019 code=0x0 [ 170.559527][ T7997] EXT4-fs (loop5): Ignoring removed bh option [ 170.565752][ T7997] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 170.586009][ T15] usb 7-1: USB disconnect, device number 59 [ 170.653375][ T955] cdc_ncm 5-1:1.0: bind() failure [ 170.661269][ T801] usb 3-1: unit 0 not found! [ 170.667905][ T955] usb 5-1: USB disconnect, device number 63 [ 170.675999][ T8004] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 170.686096][ T8004] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 170.696146][ T8004] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 170.709068][ T801] usb 3-1: USB disconnect, device number 54 [ 170.716242][ T1093] usb 1-1: USB disconnect, device number 63 [ 170.753821][ T8004] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 170.766801][ T8004] EXT4-fs (loop5): failed to initialize system zone (-117) [ 170.774070][ T8004] EXT4-fs (loop5): mount failed [ 170.985031][ T8030] IPv6: addrconf: prefix option has invalid lifetime [ 171.015912][ T8032] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 171.026408][ T8032] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 171.035027][ T8032] EXT4-fs (loop6): orphan cleanup on readonly fs [ 171.042039][ T8032] EXT4-fs error (device loop6): ext4_read_inode_bitmap:168: comm syz.6.3811: Inode bitmap for bg 0 marked uninitialized [ 171.055150][ T8032] EXT4-fs (loop6): Remounting filesystem read-only [ 171.061740][ T8032] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000007,errors=remount-ro, [ 171.180403][ T1095] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 171.325043][ T8075] futex_wake_op: syz.0.3831 tries to shift op by -1; fix this program [ 171.366857][ T8083] fuseblk: Bad value for 'source' [ 171.405565][ T801] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 171.472093][ T955] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 171.490677][ T8102] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.500966][ T8102] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 171.538986][ T1095] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.549483][ T1095] usb 6-1: config 0 interface 0 has no altsetting 0 [ 171.643989][ T8107] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 171.653050][ T1093] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 171.655110][ T8107] EXT4-fs (loop4): group descriptors corrupted! [ 171.700592][ T1095] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.709765][ T1095] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.718324][ T1095] usb 6-1: Product: syz [ 171.722712][ T1095] usb 6-1: Manufacturer: syz [ 171.727293][ T1095] usb 6-1: SerialNumber: syz [ 171.732630][ T1095] usb 6-1: config 0 descriptor?? [ 171.768203][ T1095] usb 6-1: selecting invalid altsetting 0 [ 171.778225][ T801] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.794599][ T801] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.853553][ T955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.863925][ T955] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 171.910400][ T801] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 171.919547][ T801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.927847][ T801] usb 7-1: SerialNumber: syz [ 171.963467][ T1095] usb 6-1: USB disconnect, device number 61 [ 171.977706][ T801] usb 7-1: 0:2 : does not exist [ 172.043605][ T1093] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.053147][ T955] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 172.062523][ T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.070978][ T955] usb 3-1: Product: syz [ 172.075257][ T955] usb 3-1: Manufacturer: syz [ 172.079837][ T955] usb 3-1: SerialNumber: syz [ 172.101089][ T1085] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 172.119974][ T1093] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 172.120672][ T955] usb-storage 3-1:1.0: USB Mass Storage device detected [ 172.139509][ T955] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 172.147648][ T955] scsi host1: usb-storage 3-1:1.0 [ 172.172509][ T1095] usb 7-1: USB disconnect, device number 60 [ 172.324212][ T955] usb 3-1: USB disconnect, device number 55 [ 172.358512][ T1093] usb 1-1: string descriptor 0 read error: -22 [ 172.364840][ T1093] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 172.374213][ T1093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.415940][ T1093] usb 1-1: unit 4 not found! [ 172.463028][ T1085] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 172.473329][ T1085] usb 5-1: config 0 has no interface number 0 [ 172.479489][ T1085] usb 5-1: config 0 interface 41 has no altsetting 0 [ 172.492957][ T8126] EXT4-fs (loop5): Test dummy encryption mode enabled [ 172.500011][ T8126] EXT4-fs (loop5): bad block size 8192 [ 172.621943][ T955] usb 1-1: USB disconnect, device number 64 [ 172.634767][ T1085] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 172.648106][ T1085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.658955][ T1085] usb 5-1: Product: syz [ 172.665835][ T1085] usb 5-1: Manufacturer: syz [ 172.670594][ T1085] usb 5-1: SerialNumber: syz [ 172.682837][ T1085] usb 5-1: config 0 descriptor?? [ 172.719719][ T8151] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 172.730057][ T8151] EXT4-fs (loop5): invalid journal inode [ 172.736620][ T8151] EXT4-fs (loop5): can't get journal size [ 172.746845][ T8151] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #3: block 17104912: comm syz.5.3865: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 172.762427][ T8151] EXT4-fs (loop5): failed to initialize system zone (-117) [ 172.769846][ T8151] EXT4-fs (loop5): mount failed [ 172.930113][ T1085] CoreChips: probe of 5-1:0.41 failed with error -71 [ 172.940917][ T1085] usb 5-1: USB disconnect, device number 64 [ 173.006209][ T1093] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 173.139498][ T955] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 173.244472][ T1093] usb 7-1: Using ep0 maxpacket: 32 [ 173.358758][ T1093] usb 7-1: config 0 has no interfaces? [ 173.425431][ T1095] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 173.512093][ T1093] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.40 [ 173.521290][ T1093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.529284][ T1093] usb 7-1: Product: syz [ 173.530279][ T955] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.533746][ T1093] usb 7-1: Manufacturer: 湯⍤눦馠呔딞鰍嶭퇒Ģ鐂穖녓ꞿ헨셌僑ੀग़ᓡ教睬뾃缍㎌ס羅꽷壝蔔ܭ❽Ὅꤼ辕醐ﱪ闺拏骐욯니籜࢞⯏拓淒腅⢳❌耯컳┲覎瞴傳챴鄇却뀬颅賤伖慆곇㚴৲돰Ϙ [ 173.553469][ T955] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 173.569546][ T1093] usb 7-1: SerialNumber: syz [ 173.585517][ T955] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 173.592887][ T1093] usb 7-1: config 0 descriptor?? [ 173.673344][ T955] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.682986][ T1095] usb 1-1: Using ep0 maxpacket: 16 [ 173.692780][ T955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 173.700875][ T955] usb 6-1: SerialNumber: syz [ 173.740128][ T1085] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 173.797544][ T1095] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 173.806034][ T1095] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.816233][ T1095] usb 1-1: config 0 has no interface number 0 [ 173.843350][ T1097] usb 7-1: USB disconnect, device number 61 [ 173.857368][ T8195] F2FS-fs (loop2): Invalid log_blocksize (2060), supports only 12 [ 173.866885][ T8195] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 173.875780][ T8195] F2FS-fs (loop2): invalid crc value [ 173.881355][ T8195] F2FS-fs (loop2): invalid crc value [ 173.886727][ T8195] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 173.969116][ T1095] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 173.978426][ T1095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.986525][ T1095] usb 1-1: Product: syz [ 173.991187][ T1095] usb 1-1: Manufacturer: syz [ 173.995791][ T1095] usb 1-1: SerialNumber: syz [ 174.001348][ T1095] usb 1-1: config 0 descriptor?? [ 174.007516][ T955] usb 6-1: USB disconnect, device number 62 [ 174.036035][ T1095] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 174.042912][ T1095] uvcvideo: No valid video chain found. [ 174.228347][ T1097] usb 1-1: USB disconnect, device number 65 [ 174.245482][ T1085] usb 5-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 174.254859][ T1085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.262842][ T1085] usb 5-1: Product: syz [ 174.267249][ T1085] usb 5-1: Manufacturer: syz [ 174.271835][ T1085] usb 5-1: SerialNumber: syz [ 174.283481][ T15] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 174.353132][ T8204] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 174.361589][ T8204] EXT4-fs (loop6): orphan cleanup on readonly fs [ 174.368751][ T8204] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3890: bg 0: block 10: padding at end of block bitmap is not set [ 174.383233][ T8204] Quota error (device loop6): write_blk: dquota write failed [ 174.390825][ T8204] Quota error (device loop6): find_free_dqentry: Can't remove block (3) from entry free list [ 174.401236][ T8204] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 174.411364][ T8204] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.3890: Failed to acquire dquot type 0 [ 174.422862][ T8204] Quota error (device loop6): write_blk: dquota write failed [ 174.430486][ T8204] Quota error (device loop6): find_free_dqentry: Can't remove block (3) from entry free list [ 174.440752][ T8204] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 174.450707][ T8204] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.3890: Failed to acquire dquot type 0 [ 174.462420][ T8204] EXT4-fs error (device loop6): ext4_free_blocks:5690: comm syz.6.3890: Freeing blocks not in datazone - block = 0, count = 4096 [ 174.480063][ T8204] Quota error (device loop6): write_blk: dquota write failed [ 174.488560][ T8204] Quota error (device loop6): find_free_dqentry: Can't remove block (3) from entry free list [ 174.499420][ T8204] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 174.511058][ T8204] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.3890: Failed to acquire dquot type 0 [ 174.522471][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 174.529436][ T8204] EXT4-fs (loop6): 1 orphan inode deleted [ 174.535977][ T8204] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 174.616811][ T1085] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 174.636102][ T1085] usb 5-1: unit 10 not found! [ 174.656954][ T1085] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 174.674593][ T15] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.690775][ T1085] usb 5-1: USB disconnect, device number 65 [ 174.727052][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 174.758562][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 174.769559][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 174.803618][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 174.823537][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 174.841408][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 174.903158][ T15] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 174.916588][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.929778][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0 [ 174.944364][ T15] usb 3-1: Product: syz [ 174.951843][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 174.960943][ T15] usb 3-1: Manufacturer: syz [ 174.968316][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p5 [ 174.986881][ T15] usb 3-1: SerialNumber: syz [ 174.997472][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0 [ 175.034134][ T8267] EXT4-fs (loop5): unsupported descriptor size 320 [ 175.305580][ T15] usb 3-1: USB disconnect, device number 56 [ 175.407926][ T801] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 175.417429][ T1085] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 175.468737][ T8292] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 175.481480][ T8292] F2FS-fs (loop4): invalid crc value [ 175.499321][ T8292] F2FS-fs (loop4): invalid crc value [ 175.504982][ T8292] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 175.649120][ T1085] usb 6-1: Using ep0 maxpacket: 16 [ 175.751574][ T801] usb 7-1: unable to get BOS descriptor set [ 175.770321][ T1085] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 175.785030][ T1085] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.795429][ T801] usb 7-1: not running at top speed; connect to a high speed hub [ 175.820870][ T1085] usb 6-1: config 1 has no interface number 0 [ 175.828294][ T24] audit: type=1326 audit(2000066877.118:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8314 comm="syz.4.3942" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93349d6019 code=0x0 [ 175.863242][ T1085] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 175.877518][ T1085] usb 6-1: config 1 interface 105 has no altsetting 0 [ 175.913099][ T801] usb 7-1: config 1 interface 0 has no altsetting 0 [ 176.027401][ T1085] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 176.036635][ T15] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 176.054376][ T1085] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 176.065553][ T801] usb 7-1: New USB device found, idVendor=046d, idProduct=101b, bcdDevice= 0.40 [ 176.075628][ T801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.083668][ T1085] usb 6-1: Product: syz [ 176.088153][ T801] usb 7-1: Product: syz [ 176.092325][ T801] usb 7-1: Manufacturer: syz [ 176.097129][ T1085] usb 6-1: Manufacturer: syz [ 176.101781][ T1085] usb 6-1: SerialNumber: syz [ 176.107011][ T801] usb 7-1: SerialNumber: syz [ 176.139600][ T8321] F2FS-fs (loop4): invalid crc value [ 176.149524][ T8321] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 176.175163][ T8321] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.209548][ T8321] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 176.217691][ T8321] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 176.226537][ T8321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 176.265516][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 176.341722][ T15] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.351378][ T1085] aqc111: probe of 6-1:1.105 failed with error -22 [ 176.371334][ T1085] usb 6-1: USB disconnect, device number 63 [ 176.422330][ T8371] overlayfs: empty lowerdir [ 176.541881][ T801] usbhid 7-1:1.0: can't add hid device: -71 [ 176.547987][ T801] usbhid: probe of 7-1:1.0 failed with error -71 [ 176.558439][ T801] usb 7-1: USB disconnect, device number 62 [ 176.571200][ T15] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 176.580627][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.587990][ T8385] FAT-fs (loop4): bread failed, FSINFO block (sector = 1281) [ 176.588617][ T15] usb 3-1: Product: syz [ 176.600236][ T15] usb 3-1: Manufacturer: syz [ 176.604810][ T15] usb 3-1: SerialNumber: syz [ 176.751926][ T949] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 176.875632][ T15] usb 3-1: selecting invalid altsetting 1 [ 176.882025][ T15] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 176.891687][ T15] usb 3-1: USB disconnect, device number 57 [ 176.919622][ T8406] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.928936][ T8406] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 176.980254][ T949] usb 1-1: Using ep0 maxpacket: 16 [ 176.999676][ T1097] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 177.023289][ T8417] EXT4-fs (loop6): Unsupported encryption level 128 [ 177.024519][ T8422] incfs: Options parsing error. -22 [ 177.039306][ T8422] incfs: mount failed -22 [ 177.098863][ T8430] 9pnet: Unknown protocol version 9~2000.L [ 177.104960][ T949] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 177.113237][ T949] usb 1-1: config 0 has no interface number 0 [ 177.125199][ T949] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 177.140746][ T949] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.211222][ T24] audit: type=1400 audit(2000066878.566:297): avc: denied { create } for pid=8449 comm="syz.5.4008" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.244557][ T24] audit: type=1400 audit(2000066878.587:298): avc: denied { unlink } for pid=1108 comm="syz-executor" name="file0" dev="tmpfs" ino=3312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.304945][ T949] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 177.321779][ T949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.337895][ T949] usb 1-1: Product: syz [ 177.342997][ T949] usb 1-1: Manufacturer: syz [ 177.347600][ T949] usb 1-1: SerialNumber: syz [ 177.361355][ T949] usb 1-1: config 0 descriptor?? [ 177.390180][ T8375] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 177.398599][ T8484] EXT4-fs (loop2): Ignoring removed bh option [ 177.409502][ T949] asix: probe of 1-1:0.34 failed with error -22 [ 177.413186][ T8484] EXT4-fs (loop2): Test dummy encryption mode enabled [ 177.425342][ T1097] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.439108][ T1097] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.447207][ T8484] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.448041][ T1097] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.471891][ T8484] EXT4-fs error (device loop2): ext4_fill_super:4959: inode #2: comm syz.2.4024: iget: special inode unallocated [ 177.484449][ T8484] EXT4-fs (loop2): Remounting filesystem read-only [ 177.491197][ T8484] EXT4-fs (loop2): get root inode failed [ 177.496952][ T8484] EXT4-fs (loop2): mount failed [ 177.602882][ T1093] usb 1-1: USB disconnect, device number 66 [ 177.609166][ T8490] exfat: Bad value for 'time_offset' [ 177.637956][ T1097] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.647422][ T1097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.647695][ T801] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 177.655494][ T1097] usb 5-1: Product: syz [ 177.678522][ T1097] usb 5-1: Manufacturer: syz [ 177.683371][ T1097] usb 5-1: SerialNumber: syz [ 177.743105][ T1097] cdc_ncm 5-1:1.0: skipping garbage [ 177.748627][ T1097] usb 5-1: selecting invalid altsetting 1 [ 177.749191][ T8501] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.763630][ T8501] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 177.773419][ T8482] F2FS-fs (loop5): invalid crc value [ 177.785619][ T8501] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 177.795584][ T8501] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 177.804050][ T8482] F2FS-fs (loop5): SIT is corrupted node# 0 vs 1 [ 177.805635][ T8501] System zones: 0-2, 18-18, 34-34 [ 177.810642][ T8482] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 177.816412][ T8501] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.4031: bad orphan inode 15 [ 177.834913][ T8501] ext4_test_bit(bit=14, block=18) = 1 [ 177.840331][ T8501] is_bad_inode(inode)=0 [ 177.844475][ T8501] NEXT_ORPHAN(inode)=2264924160 [ 177.849341][ T8501] max_ino=32 [ 177.852524][ T8501] i_nlink=0 [ 177.855797][ T8501] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 177.864357][ T8501] EXT4-fs error (device loop2): ext4_dirty_inode:6181: inode #15: comm syz.2.4031: mark_inode_dirty error [ 177.875913][ T8501] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 177.895643][ T8501] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2943: inode #15: comm syz.2.4031: mark_inode_dirty error [ 177.907832][ T8501] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2946: inode #15: comm syz.2.4031: mark inode dirty (error -27) [ 177.920614][ T8501] EXT4-fs warning (device loop2): ext4_evict_inode:305: xattr delete (err -27) [ 177.929686][ T8501] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 177.945096][ T1097] cdc_ncm 5-1:1.0: bind() failure [ 177.964697][ T1097] usb 5-1: USB disconnect, device number 66 [ 178.057094][ T801] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.143315][ T801] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 178.154363][ T801] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 178.392153][ T801] usb 7-1: string descriptor 0 read error: -22 [ 178.398399][ T801] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 178.408091][ T801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.429297][ T8487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.436401][ T8487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.487290][ T8548] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.500091][ T8548] EXT4-fs (loop4): orphan cleanup on readonly fs [ 178.506732][ T8548] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.4051: EA inode hash validation failed [ 178.519583][ T8548] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 178.532592][ T8548] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:980: inode #11: comm syz.4.4051: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 178.548317][ T8548] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1173: inode #11: comm syz.4.4051: ea_inode dec ref err=-117 [ 178.561448][ T8548] EXT4-fs error (device loop4): ext4_free_inode:353: comm syz.4.4051: bit already cleared for inode 11 [ 178.572964][ T8548] EXT4-fs (loop4): 1 orphan inode deleted [ 178.578683][ T8548] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpid,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003c,min_batch_time=0x0000000000000003,,errors=continue [ 178.591159][ T15] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 178.629341][ T1097] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 178.636971][ T1093] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 178.656721][ T801] usb 7-1: USB disconnect, device number 63 [ 178.764995][ T8552] F2FS-fs (loop4): invalid crc value [ 178.771515][ T8552] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 9 [ 178.778314][ T8552] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 178.981828][ T1093] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.992189][ T1093] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.003244][ T1093] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.019900][ T15] usb 6-1: unable to get BOS descriptor or descriptor too short [ 179.023439][ T8562] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 179.035499][ T1097] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.036937][ T8562] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 179.051736][ T8562] F2FS-fs (loop4): invalid crc value [ 179.058465][ T8562] F2FS-fs (loop4): Found nat_bits in checkpoint [ 179.067771][ T15] usb 6-1: not running at top speed; connect to a high speed hub [ 179.083278][ T8562] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 179.086948][ T1093] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 179.090439][ T8562] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 179.099430][ T1097] usb 1-1: not running at top speed; connect to a high speed hub [ 179.114898][ T1093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.122898][ T1093] usb 3-1: SerialNumber: syz [ 179.153541][ T15] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 179.161983][ T15] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.163440][ T1093] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 179.172502][ T15] usb 6-1: config 0 has no interface number 0 [ 179.178794][ T1093] usb-storage 3-1:1.0: USB Mass Storage device detected [ 179.192715][ T1093] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 179.201366][ T1097] usb 1-1: config 2 has an invalid interface number: 65 but max is 0 [ 179.209529][ T1097] usb 1-1: config 2 has no interface number 0 [ 179.215642][ T1097] usb 1-1: config 2 interface 65 has no altsetting 0 [ 179.257253][ T8568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 179.265518][ T8568] System zones: 0-2, 18-18, 34-34 [ 179.271794][ T8568] EXT4-fs (loop6): 1 orphan inode deleted [ 179.278132][ T8568] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue [ 179.291752][ T8568] ext4 filesystem being mounted at /619/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.362778][ T15] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 179.372313][ T1097] usb 1-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice= d.c9 [ 179.382430][ T15] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 179.389097][ T1097] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.390647][ T15] usb 6-1: Product: syz [ 179.401090][ T1097] usb 1-1: Product: syz [ 179.407112][ T1097] usb 1-1: Manufacturer: syz [ 179.416948][ T15] usb 6-1: Manufacturer: syz [ 179.421772][ T15] usb 6-1: SerialNumber: syz [ 179.424372][ T1097] usb 1-1: SerialNumber: syz [ 179.445476][ T1085] usb 3-1: USB disconnect, device number 58 [ 179.445817][ T8595] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x13 [ 179.451989][ T15] usb 6-1: config 0 descriptor?? [ 179.611115][ T1093] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 179.746253][ T1097] usb 1-1: NDI device with a latency value of 1 [ 179.748576][ T801] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 179.760513][ T15] usb 6-1: USB disconnect, device number 64 [ 179.774377][ T1097] ftdi_sio 1-1:2.65: FTDI USB Serial Device converter detected [ 179.782642][ T1097] usb 1-1: Detected FT232H [ 179.803287][ T1097] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 179.822325][ T1097] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 179.841916][ T1093] usb 7-1: Using ep0 maxpacket: 32 [ 179.847140][ T1097] ftdi_sio 1-1:2.65: GPIO initialisation failed: -71 [ 179.854364][ T1097] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 179.864900][ T1097] usb 1-1: USB disconnect, device number 67 [ 179.871595][ T1097] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 179.881325][ T1097] ftdi_sio 1-1:2.65: device disconnected [ 179.958164][ T1093] usb 7-1: config 1 has an invalid interface number: 224 but max is 2 [ 179.968799][ T1093] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.987532][ T1093] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.996622][ T1093] usb 7-1: config 1 has no interface number 0 [ 180.003286][ T1093] usb 7-1: too many endpoints for config 1 interface 224 altsetting 255: 255, using maximum allowed: 30 [ 180.015622][ T1093] usb 7-1: config 1 interface 224 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 180.029176][ T1093] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 7 [ 180.040336][ T1093] usb 7-1: config 1 interface 224 has no altsetting 0 [ 180.131848][ T8607] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 180.141396][ T8607] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 180.151256][ T8607] F2FS-fs (loop2): invalid crc value [ 180.156793][ T8607] F2FS-fs (loop2): invalid crc value [ 180.162294][ T8607] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 180.197049][ T1093] usb 7-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 180.206131][ T1093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.214536][ T1093] usb 7-1: Product: syz [ 180.218783][ T1093] usb 7-1: Manufacturer: syz [ 180.223369][ T1093] usb 7-1: SerialNumber: syz [ 180.245045][ T801] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.260320][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0 [ 180.267778][ T1093] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 180.277704][ T1093] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 180.292858][ T801] usb 5-1: not running at top speed; connect to a high speed hub [ 180.303587][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p5 [ 180.315281][ T1093] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 180.325321][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 180.350136][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0 [ 180.389265][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p5 [ 180.398548][ T801] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 180.418049][ T801] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 180.432404][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 180.479441][ T1093] usb 7-1: USB disconnect, device number 64 [ 180.496459][ T8622] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 180.511296][ T24] audit: type=1400 audit(2000066882.019:299): avc: denied { create } for pid=8626 comm="syz.5.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 180.616225][ T8633] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.4084: casefold flag without casefold feature [ 180.629208][ T801] usb 5-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 180.638245][ T801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.652329][ T801] usb 5-1: Product: syz [ 180.656517][ T801] usb 5-1: Manufacturer: syz [ 180.661680][ T801] usb 5-1: SerialNumber: syz [ 180.661786][ T8633] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.4084: couldn't read orphan inode 15 (err -117) [ 180.687272][ T903] udevd[903]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.224/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.703504][ T8633] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 180.712922][ T8633] ext4 filesystem being mounted at /822/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 180.793162][ T8643] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 180.910318][ T8650] exfat: Deprecated parameter 'utf8' [ 180.921062][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0 [ 180.928187][ T8650] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x00000006, checksum : 0x1119abd0) [ 180.947766][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 180.959429][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 180.968937][ T8650] exFAT-fs (loop2): invalid boot region [ 180.974603][ T801] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 180.988518][ T8650] exFAT-fs (loop2): failed to recognize exfat type [ 181.012909][ T801] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 181.032469][ T801] snd-usb-audio: probe of 5-1:1.2 failed with error -71 [ 181.042956][ T801] usb 5-1: USB disconnect, device number 67 [ 181.162381][ T8656] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 181.267293][ T8654] F2FS-fs (loop6): Invalid log_blocksize (2060), supports only 12 [ 181.300004][ T8654] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 181.315082][ T8654] F2FS-fs (loop6): invalid crc value [ 181.322622][ T8654] F2FS-fs (loop6): invalid crc value [ 181.328041][ T8654] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 181.370020][ T8664] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 181.450075][ T8668] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 181.459746][ T8668] ext4 filesystem being mounted at /622/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.517760][ T8672] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 181.666474][ T8679] EXT4-fs (loop6): Unsupported blocksize for fs-verity [ 181.744306][ T8682] erofs: (device loop4): erofs_read_inode: unsupported chunk format 0 of nid 36 [ 181.771855][ T8686] EXT4-fs (loop5): Unsupported blocksize for fs-verity [ 181.781035][ T1095] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 181.920237][ T8695] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 181.972964][ T15] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 182.011393][ T1095] usb 3-1: Using ep0 maxpacket: 16 [ 182.136490][ T1095] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.201117][ T8716] erofs: (device loop4): mounted with root inode @ nid 36. [ 182.299469][ T1095] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 182.308824][ T1095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.321777][ T1095] usb 3-1: Product: syz [ 182.325966][ T1095] usb 3-1: Manufacturer: syz [ 182.331761][ T1095] usb 3-1: SerialNumber: syz [ 182.337983][ T15] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.347844][ T15] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 43040, setting to 64 [ 182.417648][ T8725] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 182.439321][ T8725] exFAT-fs (loop4): unable to read boot sector [ 182.443446][ T15] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.446123][ T8725] exFAT-fs (loop4): failed to read boot sector [ 182.461053][ T8725] exFAT-fs (loop4): failed to recognize exfat type [ 182.461149][ T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.475890][ T15] usb 7-1: SerialNumber: syz [ 182.530084][ T15] cdc_acm 7-1:1.0: skipping garbage [ 182.578580][ T8729] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 182.588308][ T8729] EXT4-fs (loop5): Test dummy encryption mode enabled [ 182.601013][ T8729] EXT4-fs (loop5): can't mount with commit=7, fs mounted w/o journal [ 182.625796][ T1095] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 182.635443][ T1095] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 182.654786][ T1095] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 182.663862][ T1095] usb 3-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 182.678439][ T1095] usb 3-1: USB disconnect, device number 59 [ 182.734017][ T1093] usb 7-1: USB disconnect, device number 65 [ 183.873993][ T8747] F2FS-fs (loop6): extra_attr or flexible_inline_xattr feature is off [ 184.266880][ T801] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 184.322774][ T8770] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #13: comm syz.6.4135: invalid indirect mapped block 10 (level 1) [ 184.344067][ T8770] EXT4-fs (loop6): Remounting filesystem read-only [ 184.358277][ T8770] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #13: comm syz.6.4135: invalid indirect mapped block 8 (level 1) [ 184.372015][ T8770] EXT4-fs (loop6): 1 truncate cleaned up [ 184.377730][ T8770] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,errors=remount-ro, [ 184.516341][ T801] usb 5-1: Using ep0 maxpacket: 8 [ 184.631815][ T801] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 184.650439][ T801] usb 5-1: config 0 has no interface number 0 [ 184.660290][ T801] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 184.669342][ T801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.721046][ T801] usb 5-1: config 0 descriptor?? [ 184.824680][ T8737] F2FS-fs (loop5): Found nat_bits in checkpoint [ 184.871796][ T8737] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 184.950667][ T1093] usb 5-1: USB disconnect, device number 68 [ 185.197913][ T8740] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.243091][ T8740] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 185.272749][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0 [ 185.280552][ T8776] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(512) [ 185.319278][ T1398] udevd[1398]: incorrect erofs checksum on /dev/loop0p5 [ 185.327246][ T8776] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 185.342227][ T8776] F2FS-fs (loop6): invalid crc value [ 185.352425][ T8776] F2FS-fs (loop6): Found nat_bits in checkpoint [ 185.385846][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p4 [ 185.399013][ T8776] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 185.406739][ T8789] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 185.415993][ T8776] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 185.611362][ T8796] erofs: (device loop4): mounted with root inode @ nid 36. [ 185.669494][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0 [ 185.757033][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 185.776421][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 185.805437][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 185.832501][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 185.845234][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 185.864743][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 186.018096][ T8821] x_tables: unsorted underflow at hook 1 [ 186.023181][ T15] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 186.131139][ T8801] F2FS-fs (loop5): Found nat_bits in checkpoint [ 186.141654][ T24] audit: type=1400 audit(2000066887.884:300): avc: denied { write } for pid=8838 comm="syz.2.4157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 186.180409][ T8801] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 186.188063][ T24] audit: type=1400 audit(2000066887.926:301): avc: denied { write } for pid=8846 comm="syz.6.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.211343][ T8845] netlink: 'syz.4.4158': attribute type 2 has an invalid length. [ 186.237005][ T8845] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 186.263205][ T8849] bridge0: port 3(veth0_to_bridge) entered blocking state [ 186.277053][ T8849] bridge0: port 3(veth0_to_bridge) entered disabled state [ 186.286350][ T8849] device veth0_to_bridge entered promiscuous mode [ 186.295086][ T8849] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.307814][ T8849] bridge0: port 3(veth0_to_bridge) entered blocking state [ 186.315145][ T8849] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 186.378303][ T15] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 186.400647][ T15] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7 [ 186.527991][ T24] audit: type=1400 audit(2000066888.291:302): avc: denied { write } for pid=8884 comm="syz.6.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.583858][ T24] audit: type=1400 audit(2000066888.322:303): avc: denied { nlmsg_write } for pid=8884 comm="syz.6.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 186.608521][ T15] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 186.619903][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.624226][ T24] audit: type=1400 audit(2000066888.322:304): avc: denied { ioctl } for pid=8885 comm="syz.4.4181" path="/dev/input/event0" dev="devtmpfs" ino=255 ioctlcmd=0x451b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.628359][ T15] usb 1-1: Product: syz [ 186.657725][ T15] usb 1-1: Manufacturer: syz [ 186.662554][ T15] usb 1-1: SerialNumber: syz [ 186.681717][ T8889] loop2: p1 p2 p3 [ 186.718070][ T24] audit: type=1400 audit(2000066888.489:305): avc: denied { ioctl } for pid=8909 comm="syz.4.4190" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 186.800342][ T8914] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 186.868673][ T24] audit: type=1400 audit(2000066888.645:306): avc: denied { write } for pid=8925 comm="syz.4.4198" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.898137][ T24] audit: type=1400 audit(2000066888.645:307): avc: denied { write } for pid=8912 comm="syz.5.4194" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.920744][ T24] audit: type=1400 audit(2000066888.645:308): avc: denied { add_name } for pid=8912 comm="syz.5.4194" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.943386][ T8934] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4204'. [ 186.944542][ T24] audit: type=1400 audit(2000066888.645:309): avc: denied { create } for pid=8912 comm="syz.5.4194" name="blkio.bfq.io_service_bytes_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.995362][ T8940] mip6: mip6_rthdr_init_state: state's mode is not 2: 4 [ 187.030840][ T15] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 187.062873][ T8955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4211'. [ 187.085042][ T15] usb 1-1: USB disconnect, device number 68 [ 187.248183][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4223'. [ 187.357266][ T1095] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 187.488881][ T9019] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4241'. [ 187.495968][ T9017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4242'. [ 187.537637][ T9023] ip6t_rpfilter: unknown options [ 187.596564][ T1095] usb 3-1: Using ep0 maxpacket: 16 [ 187.750056][ T1095] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.836610][ T1095] usb 3-1: config 4 has an invalid interface number: 226 but max is 0 [ 187.844836][ T1095] usb 3-1: config 4 has no interface number 0 [ 187.851354][ T1095] usb 3-1: config 4 interface 226 has no altsetting 0 [ 187.900863][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4271'. [ 187.900889][ T8969] F2FS-fs (loop5): Found nat_bits in checkpoint [ 188.037993][ T8969] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 188.047337][ T1095] usb 3-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice=31.01 [ 188.068738][ T1095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.101180][ T1095] usb 3-1: Product: syz [ 188.122798][ T1095] usb 3-1: Manufacturer: syz [ 188.132588][ T1095] usb 3-1: SerialNumber: syz [ 188.175055][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.184226][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.261527][ T9126] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000d4f) [ 188.389664][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4303'. [ 188.574797][ T1095] uvcvideo: Found UVC 0.00 device syz (05a9:7670) [ 188.581891][ T1095] uvcvideo: No valid video chain found. [ 188.618422][ T1095] usb 3-1: USB disconnect, device number 60 [ 188.884976][ T9225] tc_dump_action: action bad kind [ 188.989185][ T9227] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 189.011295][ T9227] EXT4-fs (loop6): orphan cleanup on readonly fs [ 189.048720][ T9227] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.4342: bg 0: block 248: padding at end of block bitmap is not set [ 189.098622][ T9227] EXT4-fs error (device loop6): ext4_acquire_dquot:6230: comm syz.6.4342: Failed to acquire dquot type 1 [ 189.113394][ T9227] EXT4-fs (loop6): 1 truncate cleaned up [ 189.143389][ T9227] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 189.184891][ T9227] EXT4-fs error (device loop6): ext4_lookup:1834: inode #2: comm syz.6.4342: deleted inode referenced: 12 [ 189.266783][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.331548][ T9278] x_tables: duplicate underflow at hook 4 [ 189.410501][ T9153] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.440301][ T9302] syz.0.4375 (9302): /proc/9302/oom_adj is deprecated, please use /proc/9302/oom_score_adj instead. [ 189.524783][ T9153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.528816][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4385'. [ 189.599666][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4388'. [ 189.643240][ T9328] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 189.784735][ T9338] FAT-fs (loop5): Directory bread(block 64) failed [ 189.794702][ T9338] FAT-fs (loop5): Directory bread(block 65) failed [ 189.807012][ T9338] FAT-fs (loop5): Directory bread(block 66) failed [ 189.833057][ T9346] TCP: TCP_TX_DELAY enabled [ 189.837939][ T9338] FAT-fs (loop5): Directory bread(block 67) failed [ 189.845003][ T9338] FAT-fs (loop5): Directory bread(block 68) failed [ 189.857460][ T9341] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 189.863313][ T9338] FAT-fs (loop5): Directory bread(block 69) failed [ 189.865931][ T9341] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 189.874516][ T9338] FAT-fs (loop5): Directory bread(block 70) failed [ 189.894587][ T9338] FAT-fs (loop5): Directory bread(block 71) failed [ 189.901559][ T9338] FAT-fs (loop5): Directory bread(block 72) failed [ 189.908667][ T9338] FAT-fs (loop5): Directory bread(block 73) failed [ 189.921073][ T9341] EXT4-fs (loop2): 1 truncate cleaned up [ 189.926805][ T9341] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="i_version,noload,init_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue [ 189.977230][ T9341] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.4396: Logical block already allocated [ 190.062791][ T9374] netlink: 'syz.5.4408': attribute type 6 has an invalid length. [ 190.071612][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4408'. [ 190.084071][ T9374] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.178527][ T9391] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 190.197518][ T9391] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bsdgroups,nomblk_io_submit,,errors=continue [ 190.209829][ T9391] ext4 filesystem being mounted at /722/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.235498][ T9402] binder: 9401:9402 ioctl c018620c 0 returned -14 [ 190.390076][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 190.429609][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p5 [ 190.448629][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0p4 [ 190.489891][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 190.520030][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 190.529132][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 190.556669][ T9468] netlink: 'syz.5.4452': attribute type 4 has an invalid length. [ 190.568320][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 190.578830][ T1097] hid-generic 0101:0001:0000.0001: item fetching failed at offset 0/2 [ 190.585081][ T9468] netlink: 'syz.5.4452': attribute type 6 has an invalid length. [ 190.595216][ T1097] hid-generic: probe of 0101:0001:0000.0001 failed with error -22 [ 190.595546][ T9468] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.621753][ T900] udevd[900]: incorrect erofs checksum on /dev/loop0p5 [ 190.633868][ T284] udevd[284]: incorrect erofs checksum on /dev/loop0p4 [ 190.647617][ T903] udevd[903]: incorrect erofs checksum on /dev/loop0 [ 190.667235][ T9472] netlink: 'syz.0.4454': attribute type 3 has an invalid length. [ 190.676270][ T9472] netlink: 'syz.0.4454': attribute type 3 has an invalid length. [ 190.959224][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 190.959236][ T24] audit: type=1400 audit(2000066892.909:356): avc: denied { setopt } for pid=9545 comm="syz.5.4491" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.987705][ T1095] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 191.143083][ T9593] Unsupported ieee802154 address type: 0 [ 191.287964][ T9616] EXT4-fs warning (device loop5): dx_probe:836: inode #2: comm syz.5.4525: Unimplemented hash flags: 0x0001 [ 191.301559][ T9616] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.4525: Corrupt directory, running e2fsck is recommended [ 191.315052][ T9616] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 191.324880][ T9616] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #15: comm syz.5.4525: corrupted in-inode xattr [ 191.337846][ T9616] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.4525: couldn't read orphan inode 15 (err -117) [ 191.352029][ T9616] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.min_batch_time=0x0000000000000006,barrier=0x0000000000000008,jqfmt=vfsv1,nombcache,,,errors=continue [ 191.376248][ T1095] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.392078][ T1095] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.481746][ T9658] x_tables: unsorted underflow at hook 3 [ 191.557452][ T1095] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.570521][ T1095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.582585][ T1095] usb 1-1: Product: syz [ 191.587499][ T1095] usb 1-1: Manufacturer: syz [ 191.599894][ T1095] usb 1-1: SerialNumber: syz [ 191.698885][ T9710] netlink: 'syz.4.4569': attribute type 11 has an invalid length. [ 191.731206][ T15] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 191.762367][ T9724] __nla_validate_parse: 6 callbacks suppressed [ 191.762377][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4578'. [ 191.792659][ T9730] x_tables: duplicate entry at hook 4 [ 191.818829][ T9734] xt_limit: Overflow, try lower: 2/2147483648 [ 191.854258][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.861527][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.912492][ T1095] usb 1-1: 0:2 : does not exist [ 191.917665][ T1095] usb 1-1: unit 9 not found! [ 192.026134][ T24] audit: type=1326 audit(2000066894.015:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.6.4590" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab1672019 code=0x7ffc0000 [ 192.061628][ T9753] mmap: syz.6.4592 (9753): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 192.069746][ T24] audit: type=1326 audit(2000066894.015:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.6.4590" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f1ab1672019 code=0x7ffc0000 [ 192.122555][ T24] audit: type=1326 audit(2000066894.015:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9747 comm="syz.6.4590" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab1672019 code=0x7ffc0000 [ 192.161752][ T1095] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 192.170522][ T24] audit: type=1326 audit(2000066894.056:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.4.4591" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93349d6019 code=0x7ffc0000 [ 192.201447][ T24] audit: type=1326 audit(2000066894.056:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.4.4591" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93349d6019 code=0x7ffc0000 [ 192.228667][ T15] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.235769][ T24] audit: type=1326 audit(2000066894.067:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.4.4591" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93349d6019 code=0x7ffc0000 [ 192.267149][ T1095] usb 1-1: USB disconnect, device number 69 [ 192.296649][ T24] audit: type=1326 audit(2000066894.067:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.4.4591" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93349d6019 code=0x7ffc0000 [ 192.323578][ T24] audit: type=1326 audit(2000066894.098:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.4.4591" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f93349d6019 code=0x7ffc0000 [ 192.324887][ T15] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.349040][ T24] audit: type=1326 audit(2000066894.098:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.4.4591" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93349d6019 code=0x7ffc0000 [ 192.425521][ T15] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.452596][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4610'. [ 192.556922][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4618'. [ 192.636251][ T9810] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.4617: Invalid block bitmap block 0 in block_group 0 [ 192.667811][ T9810] EXT4-fs (loop4): Remounting filesystem read-only [ 192.675114][ T9810] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 192.684436][ T9810] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #13: comm syz.4.4617: attempt to clear invalid blocks 983261 len 1 [ 192.699755][ T9810] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.4617: invalid indirect mapped block 2683928664 (level 0) [ 192.715598][ T9754] F2FS-fs (loop5): Invalid log sectors per block(570425347) log sectorsize(9) [ 192.727180][ T15] usb 3-1: string descriptor 0 read error: -22 [ 192.731212][ T9754] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 192.744436][ T9810] EXT4-fs error (device loop4): __ext4_get_inode_loc:4451: comm syz.4.4617: Invalid inode table block 0 in block_group 0 [ 192.757273][ T15] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 192.766884][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.776684][ T9810] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 192.785686][ T9754] F2FS-fs (loop5): invalid crc value [ 192.787263][ T9810] EXT4-fs error (device loop4) in ext4_orphan_del:3292: Corrupt filesystem [ 192.801614][ T9810] EXT4-fs error (device loop4): __ext4_get_inode_loc:4451: comm syz.4.4617: Invalid inode table block 0 in block_group 0 [ 192.815248][ T15] usb 3-1: selecting invalid altsetting 1 [ 192.821243][ T15] usb 3-1: unit 3 not found! [ 192.827218][ T9810] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 192.838010][ T9810] EXT4-fs error (device loop4): ext4_truncate:4403: inode #13: comm syz.4.4617: mark_inode_dirty error [ 192.849534][ T9810] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3106: Corrupt filesystem [ 192.859201][ T9810] EXT4-fs (loop4): 1 truncate cleaned up [ 192.865101][ T9810] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro, [ 192.891709][ T9810] EXT4-fs error (device loop4): __ext4_get_inode_loc:4451: comm syz.4.4617: Invalid inode table block 0 in block_group 0 [ 192.904851][ T9810] EXT4-fs (loop4): Remounting filesystem read-only [ 192.929070][ T9754] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 192.962612][ T9754] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 192.972540][ T9754] F2FS-fs (loop5): Bad quota inode 2:50331648 [ 192.979187][ T9754] F2FS-fs (loop5): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 193.008840][ T9754] F2FS-fs (loop5): Cannot turn on quotas: error -22 [ 193.015712][ T15] usb 3-1: cannot request logical cluster ID: 0 (err: -5) [ 193.021269][ T9842] device bridge2 entered promiscuous mode [ 193.023179][ T15] usb 3-1: invalid MIXER UNIT descriptor 6 [ 193.045945][ T15] snd-usb-audio: probe of 3-1:1.0 failed with error -5 [ 193.080478][ T9754] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 193.084826][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4634'. [ 193.106278][ T9754] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 193.146036][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4640'. [ 193.280331][ T15] usb 3-1: USB disconnect, device number 61 [ 193.301568][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4646'. [ 193.356404][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4646'. [ 193.365566][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4648'. [ 193.453263][ T9891] netlink: 'syz.6.4655': attribute type 12 has an invalid length. [ 193.546031][ T9903] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.649685][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4669'. [ 193.895007][ T9967] netlink: 'syz.0.4692': attribute type 17 has an invalid length. [ 193.945205][ T9967] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4692'. [ 193.966436][ T9967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.051740][ T9981] ================================================================== [ 194.059990][ T9981] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 194.069264][ T9981] Read of size 4 at addr ffff88810eb23470 by task syz.6.4699/9981 [ 194.077269][ T9981] [ 194.079609][ T9981] CPU: 1 PID: 9981 Comm: syz.6.4699 Tainted: G W syzkaller #0 [ 194.088455][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.098598][ T9981] Call Trace: [ 194.101910][ T9981] __dump_stack+0x21/0x24 [ 194.106344][ T9981] dump_stack_lvl+0x1a7/0x208 [ 194.111033][ T9981] ? show_regs_print_info+0x18/0x18 [ 194.116239][ T9981] ? thaw_kernel_threads+0x220/0x220 [ 194.121535][ T9981] print_address_description+0x7f/0x2c0 [ 194.127183][ T9981] ? unaccount_page_cache_page+0x9dc/0xac0 [ 194.133007][ T9981] kasan_report+0x100/0x140 [ 194.137513][ T9981] ? xas_store+0xd0c/0x18d0 [ 194.142026][ T9981] ? unaccount_page_cache_page+0x9dc/0xac0 [ 194.147908][ T9981] __asan_report_load4_noabort+0x14/0x20 [ 194.153550][ T9981] unaccount_page_cache_page+0x9dc/0xac0 [ 194.159191][ T9981] __delete_from_page_cache+0xc3/0x470 [ 194.164654][ T9981] ? memset+0x35/0x40 [ 194.168644][ T9981] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 194.175850][ T9981] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 194.181320][ T9981] ? __kasan_check_read+0x11/0x20 [ 194.186359][ T9981] ? workingset_eviction+0x3dc/0x940 [ 194.191664][ T9981] __remove_mapping+0x581/0x6b0 [ 194.196612][ T9981] shrink_page_list+0x21ee/0x4160 [ 194.201650][ T9981] ? reclaim_clean_pages_from_list+0x740/0x740 [ 194.207816][ T9981] ? shrink_inactive_list+0xef0/0xef0 [ 194.213200][ T9981] ? _raw_spin_lock_irq+0x95/0xf0 [ 194.218285][ T9981] ? __count_memcg_events+0x89/0x210 [ 194.223581][ T9981] shrink_inactive_list+0x90c/0xef0 [ 194.228946][ T9981] ? shrink_active_list+0xe00/0xe00 [ 194.234157][ T9981] ? blk_flush_plug_list+0x40b/0x450 [ 194.239553][ T9981] ? __kasan_check_read+0x11/0x20 [ 194.244596][ T9981] ? __kasan_check_read+0x11/0x20 [ 194.249728][ T9981] ? lruvec_lru_size+0x230/0x250 [ 194.254689][ T9981] ? blk_start_plug+0x5a/0x170 [ 194.259472][ T9981] shrink_lruvec+0x2806/0x2d70 [ 194.264247][ T9981] ? __kasan_check_write+0x14/0x20 [ 194.269452][ T9981] ? down_read_trylock+0x106/0x160 [ 194.274605][ T9981] ? __init_rwsem+0x1c0/0x1c0 [ 194.279341][ T9981] ? check_preempt_wakeup+0x4e2/0xb10 [ 194.284890][ T9981] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 194.290450][ T9981] ? __kasan_check_write+0x14/0x20 [ 194.295567][ T9981] ? up_read+0x12/0x50 [ 194.299639][ T9981] ? shrink_slab+0x671/0x830 [ 194.304234][ T9981] ? __kasan_check_write+0x14/0x20 [ 194.309644][ T9981] ? __kasan_check_read+0x11/0x20 [ 194.314691][ T9981] ? inactive_is_low+0x17a/0x2f0 [ 194.320060][ T9981] ? __kasan_check_write+0x14/0x20 [ 194.325190][ T9981] shrink_node+0xee0/0x2690 [ 194.329728][ T9981] do_try_to_free_pages+0x602/0x1590 [ 194.335276][ T9981] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 194.341273][ T9981] ? try_to_free_pages+0xc20/0xc20 [ 194.346477][ T9981] try_to_free_mem_cgroup_pages+0x261/0x610 [ 194.352487][ T9981] ? shrink_lruvec+0x2d70/0x2d70 [ 194.357584][ T9981] mem_cgroup_resize_max+0x309/0x3e0 [ 194.362885][ T9981] mem_cgroup_write+0x1ed/0x230 [ 194.367916][ T9981] ? mem_cgroup_reset+0x130/0x130 [ 194.372943][ T9981] ? mem_cgroup_reset+0x130/0x130 [ 194.377966][ T9981] cgroup_file_write+0x294/0x560 [ 194.382917][ T9981] ? cgroup_seqfile_stop+0xc0/0xc0 [ 194.388034][ T9981] ? mutex_lock+0x92/0xf0 [ 194.392372][ T9981] ? mutex_trylock+0xb0/0xb0 [ 194.396965][ T9981] ? __kasan_check_write+0x14/0x20 [ 194.402092][ T9981] ? cgroup_seqfile_stop+0xc0/0xc0 [ 194.407216][ T9981] kernfs_fop_write_iter+0x2bd/0x400 [ 194.412619][ T9981] vfs_write+0x770/0xd70 [ 194.416867][ T9981] ? kernel_write+0x3c0/0x3c0 [ 194.421546][ T9981] ? mutex_trylock+0xb0/0xb0 [ 194.426137][ T9981] ? __fget_files+0x2e1/0x340 [ 194.430819][ T9981] ? __fdget_pos+0x2d2/0x380 [ 194.435416][ T9981] ? ksys_write+0x70/0x260 [ 194.439832][ T9981] ksys_write+0x14a/0x260 [ 194.444162][ T9981] ? __ia32_sys_read+0x90/0x90 [ 194.448941][ T9981] ? __kasan_check_read+0x11/0x20 [ 194.453946][ T9981] __x64_sys_write+0x7b/0x90 [ 194.458720][ T9981] do_syscall_64+0x31/0x40 [ 194.463119][ T9981] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 194.468986][ T9981] RIP: 0033:0x7f1ab1672019 [ 194.473464][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.493154][ T9981] RSP: 002b:00007f1ab00cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.501641][ T9981] RAX: ffffffffffffffda RBX: 00007f1ab18f9fa0 RCX: 00007f1ab1672019 [ 194.509696][ T9981] RDX: 0000000000000050 RSI: 0000200000002580 RDI: 0000000000000003 [ 194.517825][ T9981] RBP: 00007f1ab170900c R08: 0000000000000000 R09: 0000000000000000 [ 194.525794][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.533754][ T9981] R13: 00007f1ab18fa038 R14: 00007f1ab18f9fa0 R15: 00007ffc19471c78 [ 194.541733][ T9981] [ 194.544045][ T9981] The buggy address belongs to the page: [ 194.549756][ T9981] page:ffffea00043ac8c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10eb23 [ 194.560064][ T9981] flags: 0x4000000000000000() [ 194.564723][ T9981] raw: 4000000000000000 0000000000000000 ffffea00043ac8c8 0000000000000000 [ 194.573318][ T9981] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 194.581903][ T9981] page dumped because: kasan: bad access detected [ 194.588300][ T9981] page_owner tracks the page as freed [ 194.593694][ T9981] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7720, ts 164126514449, free_ts 168648676700 [ 194.614376][ T9981] prep_new_page+0x176/0x190 [ 194.619068][ T9981] get_page_from_freelist+0x225f/0x23f0 [ 194.624624][ T9981] __alloc_pages_nodemask+0x29a/0x640 [ 194.629996][ T9981] new_slab+0x84/0x3f0 [ 194.634054][ T9981] ___slab_alloc+0x2f8/0x4c0 [ 194.638776][ T9981] __slab_alloc+0x63/0xa0 [ 194.643112][ T9981] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 194.648559][ T9981] copy_verifier_state+0x711/0xc20 [ 194.653657][ T9981] push_stack+0x19b/0x4f0 [ 194.657977][ T9981] do_check+0xbc1b/0xe320 [ 194.662302][ T9981] do_check_common+0x94e/0x1190 [ 194.667134][ T9981] bpf_check+0x97ea/0xdce0 [ 194.671532][ T9981] bpf_prog_load+0x1004/0x14e0 [ 194.676273][ T9981] __se_sys_bpf+0x49a/0x740 [ 194.680757][ T9981] __x64_sys_bpf+0x7b/0x90 [ 194.685156][ T9981] do_syscall_64+0x31/0x40 [ 194.689619][ T9981] page last free stack trace: [ 194.694323][ T9981] __free_pages_ok+0x80b/0x830 [ 194.699166][ T9981] __free_pages+0xd8/0x390 [ 194.703595][ T9981] __free_slab+0xcf/0x190 [ 194.707915][ T9981] discard_slab+0x29/0x40 [ 194.712239][ T9981] __slab_free+0x313/0x3a0 [ 194.716658][ T9981] ___cache_free+0x10e/0x130 [ 194.721249][ T9981] qlink_free+0x50/0x90 [ 194.726073][ T9981] qlist_free_all+0x5f/0xb0 [ 194.730591][ T9981] kasan_quarantine_reduce+0x14a/0x160 [ 194.736048][ T9981] __kasan_slab_alloc+0x2f/0xe0 [ 194.741288][ T9981] slab_post_alloc_hook+0x5d/0x2f0 [ 194.746574][ T9981] kmem_cache_alloc+0x15a/0x2d0 [ 194.751412][ T9981] getname_flags+0xba/0x510 [ 194.755903][ T9981] user_path_at_empty+0x2f/0x50 [ 194.760777][ T9981] vfs_statx+0x10a/0x530 [ 194.765059][ T9981] __se_sys_newfstatat+0x10e/0x3d0 [ 194.770236][ T9981] [ 194.772549][ T9981] Memory state around the buggy address: [ 194.778168][ T9981] ffff88810eb23300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.786392][ T9981] ffff88810eb23380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.794544][ T9981] >ffff88810eb23400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.802970][ T9981] ^ [ 194.810672][ T9981] ffff88810eb23480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.818714][ T9981] ffff88810eb23500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.826763][ T9981] ================================================================== [ 194.834822][ T9981] Disabling lock debugging due to kernel taint